last executing test programs: 6m28.863340889s ago: executing program 0 (id=1310): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000000a010800000000000000000a0000020900010073797a30000000000900010073797a31000000000800024000000002e4000000020a0104001200000000000000000005080002400000000008000240000000020c00044000000000000000032b0006001c5b2036186a57b7d8d64e9d8b4e95dac7dcaa520cdd58898c08d8ebf4b9df9038c75d64a163f10008000240000000047d000600ea39bff4d2f1a49fc81f393745d3ced9a1abfdff2db99cbf4cd9171f2baacc7a5c4f8225ca37ea595b1d6c0433939795ff050012e04c4f667383e433addd14b42d63e6ae3a54560c776848de02e9d6074228a6fd6b6b9c165bbe915501f17caf8d13a0c7548ff0f470b86583d29afda924441a8bbce90ebbf000000038000000140a01020000000000000000050000090c00064000000000000000030900010073797a30000000000c000640000000000000000320000000020a05000000000000000000010000070c0004"], 0x540}, 0x1, 0x0, 0x0, 0x40}, 0x80) 6m28.862650632s ago: executing program 0 (id=1311): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0xf) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[]) syz_fuse_handle_req(r2, &(0x7f0000006300)="ddea382fe5537f3d2fb49c4812b017ff934a2ddcd24d5fd5c81691cc5aa3bf511c976eb4bf242154d6ce2d659ded56e5fcb9e30482f646f74754697e6c295d2c3aa749d9b7b6f726a240a036ea41b65d694c35b3b88482fbdec4e1f8c3fb21f9547dd2c030532e185f9d066b194f2967a99fbf1b7c1e28e80cef223bb83cf08e0e7fd422472a6c2e3cc84af917f9f263607277cded34d075d922fc94097a778dfdede31ca69a7842431ccfebd0cac561e165816fe998d19761ef45bf43200b9fff2f808b8455cd8c4a1334a581442dd4b4f1797bd573b0c1b9e69b69b8fdb6348bfd9d0046219d10e89b25d0a386286dbcddfde1592f9d638a90676cc7ee1d90fe427a8294896bb71718f0f5611ae7780f6e428e537ca207fd75be51e1f497ca0c46b0de9455902f19da63a6dc42e180b07135ee29e32d8126116e0760c261adb57b7940494d3d22e411f58259bb55d39216215e5a9307fa53615ffc3366ddf04f6d162a2dc4b95ae7ace91bbabb975f270960a0aa0d84226ac0cee09ca53e64a20ce93f25171d9bac6a924bd88c2d0cec7e98b623cbe3273775c287a4df4e788b5b6d31239fcbc7e9c395e116a46c5ed3b5ce1d8f00e9319419e7c1c9727211398688f2ff6f1ef98da7e2e12f4c7b5446a4c2c38dad1d72b9b27b8a02d730bbca9865fdc3ee266ade9389a22c239bf4f7794dd2a007d947a2e7c23fbfb2cf187db4fc9216e692ff1d229dd230d780b5f8826d703b525e98b14e6968bdcb135fc562c1249885276451f508293da724968c92e9332564da27289460e9b5f8841d797cec69ad050d29f265d54ff713339ff94474dead800bdd4441ad970786b532becb4507b2dad036aeefaa71ad4a66713b7c4ae9788d998171787843be7a0cb3f695bd1fc4cb615af198266ccef28a3a1d85116c366c0f64ef16e8fe7535b968b436574f6c1af28667d7acadc85b3db8c4c00f26b6a59ba98bcabc59dd389dc0dba675fe71bd1948cf9b850011f3da1bb1f9a1041027572be9afe39b1e20db89d41bc609edf9db5a3b03ab9284f43b912d426653329364008cdb27921da3b198e2da95f46c194a1d6471d2930a8514b17efe24e52ae87ef3ee62e2e1f23b7680e4790ef1c509dfa8ace6f4eaaceaa0c8513ede96984847e04bed5fc026f4dbb0942a932f54c375c2c24e640370dd6540fb775e46994b6897b959d19c3d15a431e274c70868193822f634370eb2effec4a1005a998454e1ceac6d418b66441572b7eb5bde3e09bcb35cd51f54859ffbbd242c84e603f14c876c5f9f862f309f3fb597c55bb9738ef476e59842baca084c7ed594b2e2741546e7c6d4e014a64b8c26dbea3cea6f00825674e577147597c5c93c461f0cf5e083099d7b21a64f577c289a39c71c2dc304967bfbbb274b2cc7076cd1ead5d02012cffe8a5072d26dc6ec9b748af2fd5b4dc322bd3e378901844db0f824f5564bdf374b339c067d964e3706f1245448e20b9ad144122e6d90bd24a73c9b9ee37c985b2770f6c2dda56b61b63ba185beb32674d4908be4c2e9d329e2fc34372e0b18a9858d24b63ff5e3f5f709752d2b4a86ba572c0273beca9db44fe5025ac6b2e971609cf4dac54fc3276325f31fabb933c4b4967f338bdba205a01f81431830e447bcbed44c09bd743a119631eb101a3eed41ae979a62cf99842a7673dbc551d235237ca0c870fdc618c4dd478db3abc4369138812b7a18860970c463ca84f172fbceb7a3f121298e5b875b0bea6d50d11c2f0a49133189740239076f332b92b31a7e7a70f0e1b4e0fe5fbb3e05c75688ea7cac53abaf8a3186fbc12a308ea7e618807b9a76d549dd2bc3af69e20f9e1a7abc4c4490e0994847d90b014cac74cbbb7e6c623209f764d8eab02a957a3db89b07baf4ebfd6ed2adc7096e35eabe40019c67ad2f955acbaebfd7694d814c708a7c1898a9caf174e219dd335eab1e39e99c391e3dea3eaf16c240aa0c396f5ed0664b49df7a8da00205f9bd3c668c05212375bd730f3b6fcd98d07445b8dbf332acbf2fb2b249b8eb98582f7c54a8d498bfddecac3e93b10d4b32de8d14e747076c312e90c7359fc7725e619c6f815731771d9ec540edcf72644e036c86384d471b233c43ecdf4ebadf6d5efd37f5bc31bbb53979b2703f0cc794c0e2c11f0898b3c1353bf92d32b693129eb31a0d3e4fbe5cc1f9f73bb00d7138ac9a3110fd5afdf790100e9a131972e2bb5ec292a7b8f5ddf293e75cc1e281a0272f0fb00a47b63994ae5ed1fed1aad586fbb68d0db726572cc758c35b6d2152fc6b90378262beda9e36311aa87ca6e3cdbf996084bbbd191f154018297ad33d317c40b6b90b2dae688ccea76256535edf8d88d2cb86405d0e2685e5ef573ea77f7cef8c01d9b1af5a7f5ce36552cacd07a351d08579c0d1766fa8963fb0f50e855ac7db622cc5c151aa76db4801f24d8da53ffe59a7a3610bf4df8b5c02ec667d0d55a2450cc8f65129a1e3f27091e6911c9d6b800a06ef70460061195f5111596f1776e2fee053509b494bf569823b70853394552c145489a539c045f794da9f525edf43cf8740873c127e4521d1d402318ca30ccc12a1e9b2399cf59a757dcd29af93aed6c23ff0231d5c5efae9f0d352c2c3cb89c2272a75623fcf5d8de8da4d523e7789637903dc528a4a562f4c828b13764f03de595174800e466b2c0fc5dc5eb3db400801a9ffae88600286d589def10c72377790e1728332804d077ef35acb416dd24135480b945892b761acdc693a308e9d415edef0da28912529341b88f0c15a0292587a40601c79588d286c307901c4ff66e3ff3ce926f20b429d5ac7159dcebff2ec418682808d62fca9a2e49a5ac46882866a606510b18b41062b4af7909e2cc935a22390b94db1b8808eae17ec0ea2dccc008e2ffa59409c61c8846d7a9bc15e43e451dad887b855f6760ed3b511bbed2606c829e2f0aa6fd4408969d9ea27ef4fe4d6918757d408d47a041f6cc46a8cfbb9a3945d68268faad29572cb5b7f4af76323a395f663702b9cf55b908e36e62473fb170398bb8fdbe7b39c11d14dfb6e695f0e9328b84ee86e886f056bd11efa95915c6f6be1a3ad04998efb5429710c3f404381032a228d79a9e7d9f8942a6dfca1cff0c5b4095d186da1bd924c78e0940f0a83a43808f6f4b4e9747c181bb16dba5989974d96bfa5ade7320cf2aece6fcde44b7c4669222be299e0240f1c0113c66b71d7cb097b2591709b347517dc06c743cb627c5848a97c1b7d095efd40a44ab9cf6a42c03ddb55897a19d3632d77776a77fc4c8d2a070782c6223f236a38c4dc37da731ed304ccb119c2d9b23e4fa7ac1b52829001f0ddf5e9e4f1176095e437aae7a8e66243927a026aa4bedd9602ee89c6eb62ff300529c7f770d3d49d9ce4e98d8b3d0f7efad49f6015766e6085795d246990920c7356a8dde4eee420a3fc032e9d361b111e1b1edc2d100e1eb3edba6a55d17700c75c5a8516509b81a27f13df9113fddacbe85f635b0d2e494f2c1a46f5018be92be4f1c070a5c954141d50efd048ced35268c5b4851ac5b01c43ba8c1d22209d96ba596a83828f40f3ff649883c45c7cf62307b26544650ca71efe283877e6e560c1ff3876d4f6cce0efd5f08cb074d19a3d767f9bb7788004663328f86b2d6e54564d797fb7626a609d5c823ee9e8f11ca55085152c64f0ba446a99d61dc0b79e26758144601c9fb5b75da79489bc4be86e9315ad26b983269d845c9f2974105a7f89a44671be6bc6fd48c9634c2a849e80c58955b4b82577746ba1e281b41d51b0e65a4d3b7c368a676a07933ed11c754d41d0cd33d2bbb12a53d83772b120318ae0896829c9b1b31055e1fa00a40d7392b8d9cf0eb4bf253776764fbdb0f2365c7696498080296152c4d5d6d0e83e853db63fbcdf0f2962a846093db9b6564257d396d280af560c8bae9c30ca27ba2c920e83db8fc1cf8474038fbb103e0664d01c9bddd34106dc97e4b331969054871e544bb0566905d764940ef983a429bb0eba8e9b4c2533da8efd80bfb710da5587623f284d272f4eab19a3ec6015ca8bfcca60a2163f2a5c2b1c35a3524352273a5beb992066e4e3811ad900dc3238666678f213eecb033df508c71cdd05c999d4985d0774e936d63ef994578d53320664a204acbfec7c01ae4fdfc0b68580cf6a72c00d8c8b24e3a5baec97952fae115e3132e72ec9b7f25b12fbbe99b5439a33f4854745c0cba03dd74043fa30a9363a8928aca3ab50a30ec501b45f3baac7d5bc8c0db7e106a2bf762e6669dd5c952e1a9a2da0ffb22666d7e43f59cad572603301a6e19e6343c7f6036ea7cbee16871724d37711634f985495a3b8eb0aeec33377a90b1d9033f6ded9b4bc7fbb3879dfc5f17aaa7e2328536556c856f69180c33fa860fd4176951b1aa3e055a795aff1e6c2b78e1a2fb3449d6748dc0cee93af2fa40723e7495b5354ad8a38a3142772d1bf90ed47d3b871a78a74adcd76dce513aa8c6ed069701e0032494b5a20e74e17146ade49d333c0377e3f7f70d857eab73011b0a6c16b4825fc816d24a644ecb620292c41db414d4e7554e0181da574df59a1b1ef5577b8b12532aa10c324d73bf706b186c8e9063b8d6e7ecf29fcc3dfdd64c823c40fafa882687c8c5aae2f0ac889ee6b6d0dc60a6d378553a9d7fee8cd005bb1dd793f0e56f079fc5f53e99c2b7093527399a9f00312b43e81cf60e7338836369bc60fa45253ab2166655a7cf72a347fe2f7ccb5aa9dfb04f8eeb89ba400a40d266931901e0d1f984e651696bf58b709cd24314be5cb9a823aa332cd768387128f3343ffaea64f41dc0a2f8c02e60dff7e2d0e85eb3ddec0c2697223272995c4ab67c66b2a2e9d68db306a8160cfbf495e67f1ddb74324a0e1832776653c992df5edd6ad98930a0b6ca2b78dcd6f3c0cd2dda1ec783fd4955e023086d7860e0fc2f61b4d2ba88c477e959888cd24a4efe45d3ed48f2afc44e55b81dfafe03c88c4c27e5ec8e0a18533cc00709ec9e1cad214ee705e08e84bf7cd6e3c9753aed11028fa5e9f9ce596b1db09e61696b84e0cef75fea80c34132f54d830e2eb3b338f4bdaedea34bceb790af70d8aded8da4460c7c3038dfe73f623f16734d830d73e5926321e87fa91321388e63ca3b2ca73fd4e70e9e9e291f98266bc775ebbfbd1c427a0f2b1bab10952c8064488e7d7aae4c8e7b89ab03d050f82d9971f7641f65d07c3426af91639a12e639ed2a7b8edfecd1d3480252ee99e7013e25e1135de798294bd0deab950d36ae92ef357c9e03a8b3ef575a0f99f1cd15c94f156856725324f76b0e3e8bcd1d3f016c4cde1c8349da5c2d875032464a943153cf40e5f025d711eda841d2b337396498d2a0fbb85f9fc9e485079dd1e8331824f6fa2361a39ebf1cb2c8f90e4838e66c39489135e7670b280b5023c26ba6387c8850dc6c5a19a31521df737078fcf379472041c9686675b6903e6e73dead47253019deaf4084a2b801a5921262db9f123449ee404649369a3daa36831fc56e798548f44b30ca46162e542e5e21f922c0ab02e947ab42bb3a7ef3b806a39fb8e7bbe839db9881a3b64bc17a35f8c7a03cc9f5938c313b1613d6ff205f13dd26343dfcd221e8feb2a53197493ff34306b9968df5910c4685f5890255c82a0e06db506e6fc243a39e445b67c04cfa8d442a2f0d5b376ab1d8d5571a6512ef5fb19ab8978498f9fc8d45f4151338fe50912d485537651e015b4427a66a052aad9d2e2ba1ffd92329290a854bd1c95ab51a0be5b4180d806b22bc5608a91c06a5b1574d257802eaba1183fc83398d5af88872bb76a6b059930c52e960253b9e63eb0731c36c69af44f48fdee37b2e8ad889e531ed3b1d964675214cc11269063c50d9ff554c6df6304304f3a8c7f721712ec9fe7617fb9b1b5b195761496bd13017d683e3f796e679f5f6f9368457877c4da665503e4657d8ca739d7b33a94c6c05333a4ddb25ff631385bcea2058ed87975160d52cb708f79d40de512f6fabcac8e269439a381b0b7191a099a772588e568548cb1cac50bf2d49583bb8b87a840f4b9e3e733ba3aed87866caa47809293cdc064777716acd348fa8e2bf0a4a2c768240963ccf8e59e239ffbcb390a3bd8cd29ac9b5a88d0280730a2f3daeef14042f743c367b2277d630fae1c5b65b08020e2569a8b1ed36d7a8e42ec974118c4c47c3a176dc976b70a494bc236c74f2fccda83d8bcc09792979977cb5636192fd70ef654eeebc455327fa35cf5aa1eca88a22908b33c4f1684e55277b339d59eda72adad262053e207ce8dae1c268d4a96ef6d5bd600d6c30863567ba52f4ce917db043ff7ecafa80cc292f9d9684eb7e497d289e216f25fd512ff37d301e4bf12caa55105d815f1dbba4fcaf4158ce9b73f5529b458ad635f08558904b020176027d72a6b53e0465690ac261a1801ab0d93121caa466b9b2bf778719c8552f5d7ad8e87960602d727616e222a24d40d61d0036374916045f6b3c4584ddaeba98dd410a9bf94c2b56dbdada7c283c334e233cdf63912cfb5d2d4b5004a5161ca2caa5ba0292ae6a8cdbce0767b7d4a2b994acfb0684ddf2bfa85afec15e0a1221287fa806aef52283beb5793610188baed3350762cf59df01b9209351d6005333f5bf9a9365ede67554d19ea4c62c25dca92dc19b2c05118109ed1e06702643dbdb32634f6ca4f1ec1f79a096353b8eb3d35afb5195c5402bdd8d3b8893d2d5b57d9ec9868451a22af109f7ea9eb14d15ef92b240bb78dc68652cfe68808170a51f67fcf971cf70dd3f3719b017c75fa7eb62abb8fe8df887f2e43e6bae1d955dfb271c47ba078a4f7fa997eff74ffc70be40059f7257fd6e40c73651de6d16334f509a7e52449795fff4d3c7dd6c053fd1a85db6ecb87964af078382e6bc3b7edc51b00b17400573b3f7efd80dde42f8a9121d3b7d6fe2fa25ce7d01a1e44b34fa3ae9ca94deb02caf550e9f751b86e4cbe2354093b175959dedf31825241cbb131f6b829547300ffc9af659bcee1261696f584c809cc59f69739b02c642786d905a949e229785b625b6108a8b7313118418be3f48e5de6b738c3f03f7d8390f9348a9ea0ddb286816134c963a808b5fd80e19fd5b75b9f08028752b87e89ef430ca652455f9995951300eb0c1552adfabf5155cf6ddf0070296e16cb4e668cd682f622a83f91eb4a12271d4e0999bdedb13b53db6d004eb6f6316d80e4341192b13605310c175b9134d7687aaad089a2891ebeff9388a982b48952ed9eed207bd545f02e4f11de27f61793513017d14bffe1c6471c102b4fb4b01b82d2d2bbdc1818b7dab9ad2690107f12f5ef2ca6835307222e0993e2b68f4e9ec4e2fa46425c67e3e9ccf085170685a2b4458724ff7e2830cbf90946d4b5c9fab6fd980ed072361fafaeb29916d60eb52e778fc0d0a9b51197c15472e1124876e849d943b913c1f6d247b699d20fcc24f2c83771c449abb7933dcecd188b96522969db4711f72917feb31fb1ec21edd3b57adb53811f2559129677a93467f468ed7153106021f3481f1e8ca1f80b32d26a8439a3c286370f7efc414ec41ecbb15b7c64f096d94aa399f690b05e5575da5895b5930abdd642bdbfd39dae601a5f7092b4227f2159b6daf7a05b9cf3508ace62996bd6a591d4d90ed7910c6bdcd2752a86f783bcc45c67bfc10725e933b090819adea0dc7210dd5a90923304769df9c652609b8dfaed467783f3e104cbcc758436f861c838d6ae70633a76903fb40d78fd74e91a7fd9a4cb50458553b249d79b2c239ff245edf5aedd54f6fea729d3732adf647e455e5f82c31f6832fc3fc8a1b72602dc67cb31eaa10f78b2404f773493e9a2ba01d40b063ece97c8f132200a8ff2dd067bf121ca0d164926d21938dc01b5592b6907828af1da05956f9c1f1fa26c52ec04e7d67d0544d9bbfc7250ed1433d74d24d8ec3083c3aff9e72e596332627077791f5bf59698b3e5a82d59e285f89fb1101ba1565469b1ae4b2775c340afe1d1762824baf811840b0a1bd934ef70eeccc83a146afa21a434882bdb0ee773a9be10a0ca670d77fe5756b494c4932c90d7e2a41df4b621c70a6df147c950f4eaba4bfa80ce2105a76b56b96a62a5b1cda6b86725c04e8a308d2390e525494874cbe0c6f6b5f7a0f9366e351caa57093bb8aa1fa6a3d46e6575109c18ff19ad336ba17468f2647aaeb6d0c021c2e8fa836ac05197216fb816fe54f494fe589267cbebcccd154c138360c2a82fb918606413262ba0d36423ed57dc0090c79dd15e0e3c00c9d7fdd3ec4d0c58e6f9635c7f13e3d72f8c17d753a6e0ee3a875ed97d8204b816bbfe9c4f464b119735ab43599a8f77d37aa683b9a0b95da834360718c40a22b1190088d0a6173898c9d4a1d0d4199646b05bf01db7de749f13d8b1f625dc473756b9be3f6fe5e4a740fe7d4df362a9965a186ccd7332af494a579de966199f63f0926481e26ade83fcebcf15437126f1212abdf8f8f6251b03ce7c575f7b9175fc525bf50c5f99ba6b1ccd0538274786b7bc1c892de7ffb7b688f8e5aec8877a36350772db1209636a60b43a2d58e7ecebe5467e7a82454557ba49c2bb416ec1fa5ce54855b2626d917241ace6a590981e5ad26636aa99445cdcb852aa011bd97d285a219480af73baa70150a46d9c838df66505e88cd4f99e206538e7de14c1d09c8f8a93f55723cd7001947e5710be5489956441796c1c27278849d58cb142e090efa98bbaf239a9e98f3281cc8dada3f3051e3f4337583b35268dd5bcef134cf535ac19292e62b446afff1bfdc978ba1a68b7279e3f47d9a26ff5c612bd9e2df2cb5276a18b91ce42f64efa81baf6b85a4413cd09e0a2c3abcda08c6b96e0e933aec80313cf5a0a73bc491f9a90fc6f1ef78f7e383ba7a1dec58c15d8f2af942fbb74dfe17bc34ae218d0c852e57c3058fc12dfcc5ad3b35e4a6f8628d9b60df08db1d533eda8eb0988f07b22662f10848c736ce59787b7dae70d8dad9c458fbe5408d56cc6439b661870fdcaa7beaeec8dd0323099af8c68da6cf118d58fe807a51cd6a9ae97e298a3cff83876363089b28dde888a567b60d8cd7f4b25250b680df626e9a92635878c9c6f012c84a6047d47858b4bb9d77b489e6f829564ab76e0532b972931bb97b53a70aceb7c2b2448dc8d0864b5c18dc33203d31384765769af03383674f31cfc09853ee63844b0ac6c0bd349bfc7d55bbb591d32d3f6412aea2a05a1a976647ca1ba22b2463cda5066a678b2e232bc6ae22566d1e6b52e5e667562df7ba51f2bb9efbe6f4cc800fd2fa68f2bc61ae8cc7fe968b5d60e94d9de7cbd5056be82748de1ac19fae0cae985a7fb4ff0776860e86c0d9763826b7a99d205a003a384df1f35d5335302ac4782efd4237dcc944cc6388444def4b55e68e33b94030f41a308c5d904c1742e86209f1bef06512c5b5e1067fa709316d2084041f51bc9bd0cbf7210e34480ddce44a1bf2e0603edda369e8bdbaaac012512c835fe0661d9ccec0b0b05225a107cc8e00091c75120d09c19856dbc19baaedcd1e42b3126c321428a1392680e0cbbaa286f545d9b7b66d2953680c6c9345a3727fd0df3a95708dd87e7cad5c7fc606a2e615edcdf9df2515eaa36fe3c72866990d5da6729e2bb85e0eede8c001ee58505b4aab81d1515f2cbac5d9c3f935273d03120fa081137c600a45e6e3053a7a6e85d6013028b2300f9778d032e8f93ec997755596434b17f82fc09078279fbf9d10ead42e16910f5f82784c783bd2027636b986e5fe46414191e017436f1c83e353e0f476259b129309e8f12b102e05b548cc4da0fda1dd68077970af51f893eeed8c8acf6b0ca9a6c0e557203d5e5a4b06803c96c1b5dd701464a89963ad1574361e58b6e3b45bd05e19aed29002d52728e977460f4f0c9d58fbc9e45cc478c645c3aa792ff90a18eaf399ed01b02e194d29589e52818d6d3c2ba26ca477ce0c372b7e46ef1f5775f1d4b764ca7508b015892197495d863fe49276122844e1372f48a9bf4ed15be59f47355e36acde9bd3b289dd51a1e9a30b1e5a24deb005e461af1e8d063cc90e3337855af5a3dd2ac8907d7787e2ddd23abbecade7ef63a654b5a8715ce16d7e654e2be35e0e0705cb18953610d2200b368734cc881ecc6b68f31b2562c634e7dcef4100810d045fc8594cecad7e792d64a9970dc9b888756a37d3b436fc289e318db197670b95c448edb6c31d6d0ff6fa062571f4a57d579d3e5cf5eb8e2965c45253e3ef5a3b593d764f4cc11440b970aa20f1caf20cc6d6194e9a0bb520130cf004fb517d488cd5a7803649ebe03b171f3b97b9f5fa4a1c2d89977c05fb661ae6d6728f0594416c27819bd3ade0083653fa686c870308b9320e4394432f2e96b06401cd16020f89d26b15f16309fd2ec5d81619f15f6581299c4193bedb4d0b078aed6a822275c540e9b40d8415478ae0940510fc46c330a66e7746bd08b8859aafa3c65e8860f3fb2846ad154f7c6c4e1e3dc1b65e5250769a76877ffeeac1005b2e01bf4bdf8d7893ac38df364f2db3d2463b0b7b8a25c99975aedd7e009644ec7ff708821ffacfce270f5ee4485ec205d9371698b6bf1d0bcd542cbc826f468e6153f72bb40114145b4c2ccfbb45dba5c2f0634d8f3a21ec74e7d3b74aa271c5412fc0b7459323ca4c3bd91d378c8daf56f3f56c26096076eb42f392a1107e4f68f6144100ca48c44b4d59760fdab3704a1fa489ca5fb4de75503f8e3e21e5369a6b41ae2bf230780d82a0d0782a60a4b0d645dc57c3344b8b0efb7be4e0b8a2d9d6481aac8ee9c7eed3211c1778bd743f55388e69914387d8d3550a071c32455e7a19bc6c4c623da7c4dceced5afbbcd7f8b785a7a9adba7717f8faeeb3919c54daa0423214da53ec186112fa092b2539ee17a3bd8e9c0599d901ed6976b30ec7fa1826442a933111687cbfb8cc72e2c45f5aaed6d593412b186ccd49968ab563d73e2c53cf44532caf8427f319a4130670106294a71c49872181049caa96ec36c004c305e8871e99e351012bf4397f9ef9b846218d66d7f13864775ec54e25165299c9b513b023845842fa8cb745e0341e737bee3f173eafc976bf4a522ea76fa44afdc740aef19f9990e90ee842e6f19c7808844540da83b2b2b3ed782f5c063e2ec2b1ff537a9576ff2693041c506cdfd08236ca087133e4ce9736fe5f2ff344f979ea8122df6b76b36d406b06aab1d58d22759e4ab5d1fae3fb73adbf0d79ee0ac71f7a14c3abda11e629a49bb7a6463a05d35ba12be7aaf3be2df184089fbc109d68fe6850032dee49685a0ab82fc440db66ea890a87ce713535536c26a912e7cba2c20dd9ee3057e93997a4c8872a25907cda69bada9c9e6ef90364d224b5cbffe01d4ab8825657c032507cdd17324b8ee8df720cbd6751619760d0b976977bc830e15b9dd7402cbcd620cb175c2cfb4078d21f8d87a104c559c335a7443b4a2", 0x2000, &(0x7f00000017c0)={&(0x7f00000000c0)={0x50, 0xfffffffffffffff5, 0x3, {0x7, 0x2b, 0x9, 0xffffffffd0065de0, 0x1, 0x6, 0x4, 0x5, 0x0, 0x0, 0x100, 0x2000004}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat2$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140)={0x474203, 0x596}, 0x18) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x3, 0x0, [{0x32e, 0x0, 0xffffffff}, {0x9e1, 0x0, 0xfff}, {0x9e4, 0x0, 0x5}]}) pread64(r0, &(0x7f0000000140)=""/147, 0x93, 0x3) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f00000000c0)={0x0, {0x2, 0x4e24, @remote}, {0x2, 0x4e23, @empty}, {0x2, 0x4e20, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='pim6reg0\x00', 0x0, 0x3, 0x6}) r4 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_misc(r4, &(0x7f0000000200)="7fd50ae5d61d787eb0b6e5e1bc3d88b35351b8e2e3c5b3f7c2488a6c77fa4b74ed0a94b418f284eeb070015640a15848a587e50a458b66716accb49e23904e4c576403b49d95280590b197828a0138e93d", 0x51) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r0}) 6m28.831009889s ago: executing program 0 (id=1312): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000000c0)={0x0, 0x0}) r1 = syz_pidfd_open(r0, 0x0) chdir(&(0x7f0000000180)='./file1\x00') (async) chdir(&(0x7f0000000180)='./file1\x00') socket(0x10, 0x3, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2380000000"], 0x14}}, 0x0) (async) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2380000000"], 0x14}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xe4) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0xe4) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) (async) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0xffffffff}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000a40), r3) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf251100000008000100", @ANYRESDEC=r1, @ANYBLOB="080015"], 0x24}, 0x1, 0x0, 0x0, 0x4004045}, 0x2a092) (async) sendmsg$NFC_CMD_ENABLE_SE(r3, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010027bd7000ffdbdf251100000008000100", @ANYRESDEC=r1, @ANYBLOB="080015"], 0x24}, 0x1, 0x0, 0x0, 0x4004045}, 0x2a092) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) sendmsg$kcm(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000480)="04c46cb3625180244645b2631c529a48aaa888f1f0af66a4b053c7036a425a03ce342a53743e401ea274eb72de93e51c473a3ab0657d16580a0c96bcbfcaae1421af75f6f99bfafb34e3bdecf1ef08dfe82b204fef65b5b3d099a861266c84458bd0ecc8fa5dc90b831c99647ceec0dc31fde8f083b9ff05519733d6d8056303b605e0b6c52c407bfdff2a09222d233b4d91489312c9ba80f11a050506648170dcfc6c173b484832cef0139f0cde00edba63a067162ae89a63ba6822d9cce2d4bee00b8c2024c864a1d04fc5bd325f2ae4c2976b364fcb20c7fb42faeb1d8d07f2d012d5c25273bb795cd5f89a7a95480d4c6c589251", 0xf6}, {&(0x7f0000000580)="ad1e5c906ebe0f30e9e64f629321270306358217aafdbf92f2913dc60d43637d69661d", 0x23}, {&(0x7f00000005c0)="80ff58160e2a8c1f3ed90eee3513841c41b89a265353a4626e977c8d3613af81cb0724632eb0996370a14ec316704d8b12ed18035c5f687e3e415bb5b523a45f45133c3f170b6ce35a8dd67d40569d85cac0f81d609f0a77cd99812b9fc6bfeee0eab8fa01c8e673d619ced70dec6a324b171c66da6f377824", 0x79}, {&(0x7f0000000640)="9765e1461910b53995d57b46b2210e6fd314f797d918c2f2687fde54c15937a223720b137d76aef97373ceccba76605615ff83", 0x33}], 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0xc0}, 0x8080) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x16, 0x40, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000fe2000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x16, 0x40, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r7, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0x8000000, 0x5, 0x10001, 0xfffffffd, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x29, 0x8, 0x2, '\x00', 0x4}, {0xff, 0x7f, 0xd3, '\x00', 0x67}, {0x0, 0x2, 0xf5, '\x00', 0xf}, {0x7, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x2, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x1, 0x4, 0xc}, {0x7f, 0x0, 0xb, '\x00', 0x8}, {0xd7, 0xc, 0x8, '\x00', 0x6}, {0x0, 0x28, 0x7, '\x00', 0xdc}, {0x40, 0x1, 0x5, '\x00', 0x2}, {0xee, 0x3, 0x26}, {0x5e, 0x3, 0xb, '\x00', 0x9}, {0xf, 0xee, 0xa, '\x00', 0xf}, {0x39, 0x2, 0x6, '\x00', 0xf}, {0x7, 0x6, 0x2}, {0x5, 0x22, 0x5, '\x00', 0xc}, {0x7, 0x1, 0xa}, {0x0, 0x80, 0x5, '\x00', 0x7d}, {0x1, 0xb, 0x80, '\x00', 0x5f}, {0x10, 0x23, 0x3, '\x00', 0x10}, {0x1, 0x9, 0x9, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x8}]}}) r8 = syz_open_dev$loop(&(0x7f0000000a80), 0x1, 0x101000) ioctl$BLKGETZONESZ(r8, 0x80041284, &(0x7f0000000ac0)=0x7) (async) ioctl$BLKGETZONESZ(r8, 0x80041284, &(0x7f0000000ac0)=0x7) quotactl_fd$Q_SETQUOTA(r5, 0xffffffff80000800, 0x0, &(0x7f00000001c0)={0x4, 0x2, 0x5, 0x3, 0x2, 0x3, 0x4000001, 0x6, 0x7ffffff5}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r9 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r9, 0x40000000af01, 0x0) 6m28.610864787s ago: executing program 0 (id=1319): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000440)={&(0x7f00000000c0)="00a56f4c", 0x4, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r0, 0xc00464be, &(0x7f0000000040)={r1}) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) removexattr(&(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)=@known='trusted.overlay.nlink\x00') r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x405, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10408, 0x2140}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000881}, 0x200400c0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0/../file0\x00'}) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) syz_fuse_handle_req(r3, &(0x7f0000000ac0)="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", 0x2000, &(0x7f0000003600)={&(0x7f0000002ac0)={0x50, 0x0, 0x3, {0x7, 0x2d, 0x3, 0x11041510, 0xef, 0x9, 0x0, 0x1, 0x0, 0x0, 0x4, 0x6000000}}, &(0x7f0000002b40)={0x18, 0x0, 0x513, {0x9}}, &(0x7f0000002b80)={0x18, 0x0, 0xaf, {0x2}}, &(0x7f0000002bc0)={0x18, 0x0, 0x2, {0x80}}, &(0x7f0000002c00)={0x18, 0x0, 0x0, {0x2}}, &(0x7f0000002c40)={0x28, 0x0, 0x6, {{0x8, 0x1e}}}, &(0x7f0000002c80)={0x60, 0x0, 0x8, {{0x8, 0x100000000, 0x57, 0x1, 0xffffffffffff3ba6, 0x9, 0xb}}}, &(0x7f0000002d00)={0x18, 0x0, 0xff}, &(0x7f0000002d40)={0x11, 0xa062e736f222f8ce, 0x2, {'\x00'}}, &(0x7f0000002d80)={0x20, 0x0, 0x80000001, {0x0, 0x7}}, &(0x7f0000002f40)={0x78, 0xb, 0x5e9f09c1, {0x91, 0x9, 0x0, {0x1, 0x20, 0x663bc77a, 0x3, 0xfffffffffffffff9, 0x7, 0x7, 0xf29, 0x8, 0x10000, 0x7, 0x0, 0x0, 0x7377, 0x6}}}, &(0x7f0000002fc0)={0x90, 0x0, 0x7, {0x4, 0x0, 0x3, 0x7fffffff, 0x6, 0xea8, {0x4, 0xec, 0x36, 0x229, 0x10001, 0x7, 0x4, 0x7, 0x8, 0x4000, 0x153, 0x0, 0x0, 0xfffffeff, 0xd8}}}, &(0x7f0000003080)={0x78, 0x0, 0xfffffffffffffffb, [{0x3, 0xe, 0x5, 0x0, 'bond\x00'}, {0x2, 0x2, 0xd, 0xfffffff9, '/dev/video36\x00'}, {0x5, 0x8001, 0x2, 0x800, '\'.'}]}, &(0x7f0000003140)={0x160, 0x0, 0x0, [{{0x4, 0x3, 0x2, 0x8, 0x6, 0x5, {0x6, 0xfffffffffffffffd, 0x2, 0x0, 0x1, 0xb, 0x4, 0xd78, 0x4, 0x6000, 0x40, 0x0, 0xee00, 0x2, 0x800}}, {0x5, 0x800, 0x3, 0x4, '%##'}}, {{0x4, 0x1, 0x0, 0x800, 0xbcb7, 0x5, {0x1, 0x906, 0x4, 0x6, 0x299e, 0x2, 0x3, 0x9, 0x7, 0x6000, 0x5, 0x0, 0x0, 0x400}}, {0x0, 0x6, 0x11, 0x4fe8, '$}*.#\\%^!],^/(,{$'}}]}, &(0x7f0000003340)={0xa0, 0x0, 0x3, {{0x2, 0x2, 0x7fffffffffffffff, 0x3, 0x9, 0x39, {0x5, 0x8, 0x8, 0xc169, 0xd26, 0xb, 0x4, 0x2, 0x8, 0x6000, 0x2, 0x0, 0x0, 0x7, 0x3}}, {0x0, 0x1d}}}, &(0x7f0000003400)={0x20, 0xfffffffffffffff5, 0x1, {0x9, 0x0, 0x3, 0x5}}, &(0x7f00000034c0)={0x130, 0x0, 0xfffffffffffffffb, {0x7fffffffffffffff, 0xfffffeff, 0x0, '\x00', {0x1000, 0x20e, 0x9, 0x10, 0x0, 0x0, 0x6000, '\x00', 0xcf, 0x84, 0x8000000000000000, 0x40000000000000, {0x50eb, 0x80000001}, {0x6}, {0x7, 0x6}, {0x6, 0x40}, 0x3, 0x60, 0x532, 0x7}}}}) r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r5 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000), 0x41, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_DISALLOCATE(r7, 0x80085610) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000040)=@ethtool_drvinfo={0x3, "956a7ea5ee742f528ff45c79c9297740fdbde2ddfcfdc6d892b66d494e12527b", "40558ca5ed8d1419b044658fd67630ae9c3e8d210590c4cd7281b63878a985ea", "ef3dd21ee56a9fb59a8ec1d355e7768499bfe0eee62f1f1333a7692a43ac93d3", "532d09c44a6fdabce78c407eb0e1aa92b46f44016a416983e66b00d9c00be3c1", "068c44edd5cc30ffbd8abfa6dfcb00ce5c79f99126bd15c9de684e0cbf5e13e3", "a95a19c5ca253936777e16d2", 0xbbf, 0x7fffffff, 0x8, 0x6, 0x7}}) write$nbd(r5, &(0x7f0000000340)=ANY=[@ANYBLOB="01000000000065243e2e00000000200082b0cfc4337965941538be02000000000000000000007400a391793ba7f40000000000fdf700"/64], 0x40) mkdirat(r5, &(0x7f0000000300)='./file0/../file0\x00', 0x13a) ioctl$VIDIOC_S_AUDOUT(r4, 0x40345632, &(0x7f00000000c0)={0x1, "b85c528abf9426fe9d7e513b65c5c22df4909fa6891ca94446b88c663d7c32f4", 0x1, 0x1}) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r8 = syz_open_dev$dri(&(0x7f0000000a40), 0x1, 0x181000) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000a80)='a', 0x1}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r8, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)="e3", 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r8, 0xc00464be, &(0x7f0000000080)={r9}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r5, 0xc00464be, &(0x7f00000003c0)={r9}) ioctl$XFS_IOC_AG_GEOMETRY(r3, 0xc080583d, &(0x7f0000000480)={0x800, 0x8, 0x24000, 0x8, 0x9, 0x4, 0x7ff, 0x8001}) 6m28.510342141s ago: executing program 0 (id=1323): r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x40042) r1 = socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x84000, 0x20) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4000, 0x808e}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x40050}, 0x2040000) (async) r2 = socket$netlink(0x10, 0x3, 0x5) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) fcntl$lock(r3, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000040)=""/196, 0xc4}], 0x1, 0x8, 0xffffffff) (async) ftruncate(r2, 0x8) socket(0x2b, 0x4, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a200000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0000000b0a01088000000000000000070000050900010073797a30000000000c0010400000000000000001140000001000010000000000070000000084000a000000000000000000000000000000008171f8ca3139621ceb08d15f1972475710ad26395e9beb57a89295d39edc858e24e3ab3ff4a4d6e3de50406ec0f25b79b64b949514b28836d47b52"], 0xb0}}, 0x0) (async) write$binfmt_aout(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="0000000000000000000000800080000014000091ff0f00004500f5ff06ff00010100fc5e15f4c3d3fbd80dad00000a"], 0x125) (async) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r6, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000080)='r', 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r5, 0xc01064bd, &(0x7f00000004c0)={&(0x7f00000003c0)='l', 0x1, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r6, 0xc00464be, &(0x7f0000000340)={r7}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c0004802800018008000100666962001c00028008000240000000030800034000000001080001400000001414000000110001"], 0xdc}}, 0x0) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), r2) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r9, 0x100, 0x70bd29, 0x100, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3f}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000010}, 0x2000000) 6m28.242948294s ago: executing program 0 (id=1330): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x5, 0x0, 0x7fffffff, 0x0, 0x11, "eeda63d693842273962b3204131ff4725cd720"}) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000000c0)) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000006ac0), 0x0, 0x0) fstatfs(r3, &(0x7f0000007580)=""/19) 6m28.198798881s ago: executing program 32 (id=1330): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGETMODE(r0, 0x4b3b, &(0x7f0000000000)) ioctl$HIDIOCGVERSION(0xffffffffffffffff, 0x80044801, &(0x7f0000000040)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) write$tun(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b800294429118927"], 0xfdef) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000000)={0x5, 0x0, 0x7fffffff, 0x0, 0x11, "eeda63d693842273962b3204131ff4725cd720"}) ioctl$FS_IOC_GETFSUUID(r2, 0x80111500, &(0x7f00000000c0)) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000006ac0), 0x0, 0x0) fstatfs(r3, &(0x7f0000007580)=""/19) 6m19.542857999s ago: executing program 4 (id=1413): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x17, 0x55, 0x1e5, 0x0, 0x25dfdbfc, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x0, 0x0, {@in6_addr=@mcast1, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x440d4}, 0x0) (async) r3 = fsmount(r1, 0x0, 0x0) prctl$PR_SET_DUMPABLE(0x4, 0x1) (async) r4 = openat$cgroup_pressure(r3, &(0x7f0000000100)='cpu.pressure\x00', 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) write$cgroup_pressure(r4, &(0x7f0000000180)={'some', 0x20, 0x10000007, 0x20, 0x3fe}, 0x2f) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan0\x00', 0x0}) sendmsg$unix(r3, &(0x7f0000002300)={&(0x7f0000000200)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000002240)=[{&(0x7f0000000400)="d814fcd2fea57c81a1e1e116e61d50897d9eb131b6676116d579012ed32d3db8457dadd9e62141f9947ef792885eee33b947917a8a309ef23bdb2fee74d0d7354c193803f1437fe2ce02a3cfb4969f19058570b139d34a0c4ff8550f1aa97472be386bea09a07d6e5814dd200ece31dc605fbc530283b4117fd11ae93cd6ba44b592a5c5e7137ef61a968f037f3dd808c56683cfdce8baa6ad8cf3724352af0f02f854f60d25d2dd8bbcf5f8704b6ddd02d415139a1d08a9db914f45976f7d258f2900ea43f53de5849fe43b31e315610dcadaebd98e396c64274b881a4dc0d88b7872946455a59da6b8", 0xea}, {&(0x7f0000000500)="5f47c7a586d1640ec20c2a965ab9482b", 0x10}, {&(0x7f0000000540)="4f18a3fd6a14cff4647034beb97c70d37137cd599151a36af17e0fa9e0b01ab4c0bbfed5f750c53c8846c95c2cbebf129993d384cfe63f396a4af468", 0x3c}, {&(0x7f0000001180)="68b97ac9c57dbdc1026870c1baec56e30806fe7a1f6856ba7fe6b287d9e679bf8d79f807a4a557ffa206cd70878b8648e2a39bc04982569e2206577077ea37bd454e64b661b5d41ccacc81e561a1d1f6394f5cd210102db9b28c5748fafc70dd0b926bbf6e45aa35220f1bd77ffdb983c8d2558682501bc28930b89cfec1b12ea3a5bbcdbdd4ac8e2e8a27e7fe25646a7d53b15e98ad94ea47a52cdc5c1d4d886a824cd3e9ea41dbce8a11f11ac6f6bde9dce2d7efd7a3acf4b983b9c535f79e7225ca9143e34cfd5b4798a8362f371ece4c72f5eb04ceb4a19d69ac486602d6a7d886fda61a8ac229d7700f7f1e3bd904c7fb0911e79041921ef9820238b3cab6a2221e0c746b0d1366e72ccd0d189e716289da201a0131bb2710ec093ed140bc1d03d079c5e4d85b61c7c86ef637033d2c2b2abe0c076dd41c08fc44b4c83e8e605174a66ac34f32a1fdeaf9d6d96b768ce0de409154c757a6fc705a32790743528860c4548f0f87b42f27fc909b8ae390031df9418fb7841a642af128712b42003e409022ce891b9d0dd9abcdf38e8e03610ed04088be0d00a41124d5dfa91f10f87646ac2b8a04de35305b99f6554dd1051cafd2a5e8885b7e83346c7506c0e230d9e514aa8038b1ae7b2a10a2d4a1463ade2c60ecf6d8ec97de40a5ad5dadf74d5c38e142b3384181a4de2c7b64e471b271d73553f6265123f92accdf14647d3a906e668c2de84ae25693627f7b6f3d73872ccf8096a36e202f57802154ee8a05874435e9f5952c5ccea685aea5b2f3ea5c62ca694fc9da7071a91e11ebc4f92b00210ed143f51ae564280374dad82133d5438daafcba7c95665db6054125f056a55cfd52562fc867b65cb016810d41cda7c81a0e0ff53a3c080e76502904db98a7c3504132bd528becb6787154cfddc088c2e6c0f190720e85c4e28b38ddf2b9c2c4a55d538b8fe506b2f5cb18f87ce209867366dd165c262f2ccc7701e8b99174615907c7f8a432fd81edf03dd81569b22a00d733b1f14dad3ddc3e457a5d14f7b2d9ee1b8000d49503a5102ab05e56e60acdcb8959651dddc22bb4e6e630449c5c1911228138423dbf2089c8f047542968111381e66b04a78b8a01f2a03aceb66b79ccdcdd3c17565f8f9fefa1617ff18c12ea8a93ffd9a435a85c567d38f19177ed8d93263aeaef90e5f816b3bf033de8b1506361ef9de89cdccd2b7dfb3f404aaf9abd62a1a96374755477a3afcb77c05d2f0e7e40b471f52df1d29f1112466cadf36a70bc02aaff45798e562f0556b3cabe164ec54ed0a07eb6ffb4205267f28536f3928e5c075c9d4e01c5bdd1f954186cb5f987003f382bfc0e6b80dca75d1683ee92468423c0c8575a91ebd68bb6f1118be25dcf2326f219333e1755f9d5f88af2d1bfcaf97b306acd48db6be5383b97fc1b2511f86ae34e2f3aa9d59c933557d0688e957977b88102b8ec4df36e01019a7dffbc76aa35264aab20203a3e12924b3395e72eb82d5ea238da18fb17576fa4c9741a57fc0dec4de7eebeb8d2cec622cc15a4b7d0b10c40c830aac8c6cbe4b3e44a3314bc6ff95c93ed5071a375df38ae4345304b1c573d68f1826c0fca453e2c82d101e495ca4301a93610ada953c53bda0f5bf6a3d2a4c5896d7411d6fcbc44e12dabc910313d8781302665850db431342a77d315598f21e7f596f49d82f07028f4babd61de73f21c632df7a66f9b7d613e5cf04fad0a503828a4c26c257828ce4e929910f15b352a9399dbf824cede6d49859c9746e811fe9f18df96e91b65df458edc066948bf029e308a968e228c002bc4ee36fc47ab1db25b10f9126e2c8ebdc246eeba69bc4961af4d76c8f93eb0fc3d649b73ff5f14d24a3a1546433d8142240af773d9004cd2cbd40573efa59d0a1efc0c379dac3dd5c8869d582088e9f366e28597f3710ccd06e1d7ed65ec2687f2344638e9a3e816b882b7f7c6a4b2ebd1ba4d0ef77837a8ede5dca7227b43d9319083856ba4819ac2239734e6c4147f440353fa50dcb61ae5619e6923f62fd1bd90c126e4fd8abf18d7b5e96ea4ce1dc654a040d68a61283f458e5be492198b683012d98222be93238a27b5eddc32d23389e1214c1b627f9552b5d696352a794ed8139e488a3a8047649a0e73942d3de9045297fa086365929d15897ca9c2e7a12b2a082f0691fbf349f64b88a98c4064f0eb4568c887c40f7293e8a5b4b0b17e8a9d484c5592d417a05e02aa570dd423307dceb116b50da843c5081703077abe5575c4bcb56b320b066b028e14b69675024b3b724681da68fddd6dc0af1d636a1f64884fe0be003c07e3716b65a89c32285b90e309c42254cb14032a5b8be0a3ff19f047d29133bf4554817097959bd53e7dd16c5a623a6c91eaba00fc69cb4ff51093c281877fe1b045514d6d29438e2d891dbad14dfb628db6ee98b2e9ff69e3abdda9c80dcd380a8bcc8767641a6ffefa56db2b59ce41cdddecf0c7eb8dc9d75c86e7d689d6906b4e711b7863d6425e0a5126c9ba61e6cc714f40a7bea510ff5de2b8e2fef95a2f2006f9a49e7da5030a9dfb4b6abef39ab892c8eae8e830b39df595a1f02c867b970c107403434b8e7bf97e76e82cb010c42de018a09370ba7766e0afb6cded3e2de06ef7489656c4bfbd84be539cbca1948e8f8f407a84abfe92e78ff8ddeb62104c9a4f6ddfaa58d9cd4499416d4eb2cfddb01b62e600ce9b5af0f8dc0f5d6a115840ac9eb0eb9b72f2f094a45c07c4b944260ea1b497e1761a7eaa302ac00aea0a42eaefcfaed58d0405cf4e8d61b99dab3e73f51c78d56572c1a2e8067e1a857c924a9dbbb9b6f1a355e170fbb314b1ae47cb4095abf38366fa5dc51cf2d802c4b105472f911cd1ad639ef16e382ed571684a4a20670385ee4eb088d2399bb6e0f30fc585f9b13f346d190b3d3fe88a0599123007adb8dc8cc0b9df8e481a4fa66efabc1b7212d4ea11f720867e3b522e413bed521c5e2dc383b9f72f904b1f37c20d568a97c352726f4315486b03c7a98a31dee9c180cdeec415ba47e5b3ec1d381ccfa46a70f0665a6f54084f7f4bb5014b00eb6947a12523d66e590eadb47a34beef85177e9c4c70a50684532272295b48265c05605f2fa75cc6af6273c74759dca516b6e21de861ff8498279e77abb9604e59ef135ddce4c3cf8a94442b0910e7102744d366497c86c53cd2931dafd81e2b41bad3a63975e7142f4107952245dd6616d328c5f0c05c9732addc9303c01ad09725a1b0942eea1dd31e7e8022df928dd84ef1213fc09caceb60f08a4e92dd0e2e68a48fe9fc7be74347cab5126cfd2da005a70eb7b71988205b2607406e5a8886f3cf98bbc09aceb1f1cdad6da7a4122fb026af538d3e1addfc029a5fdf80b36789f4a50a546d3d6f788b09c04e28ae83edcc1ec83a2ed3ade19d45b4072005ff57086586074b9cda84e78b5c2a048f4b79e5411f9c0b031e6ad3da9593d451603f8ee57dfb2772f3c28003e120a4de7c21c41ee3edfbf88250f70156d699572ac2b575047859dd70fb38ea12fa2640f8b2c8e0a17626311e3d6421dc2472ce11f5e02d5641589523a6e3ec5d5b77ce16dc2dc697cd19431cf4fa4cbb30e792fdf84943439af187583c98e6d6edafe97f6cb2a6b5637d777e8cbc29be96d4af06adb364e3e2a8a32b05e56d1d993098c8e55a47e5ca6d779a58f978fcddad93d994880d08147d357af95eeab845b58919a3c57cfb59b20806dfc63f15b7f1c57a323614fe0416115479b2e28e6ea506ac18c829122460aa7c570390a3d37f2f5b3bc958df821abc1cc83044b4afc43c77112cf3767e28d11a16d616cd981756abaaa6a9c4d8933a946a890b9da3e95ee923910054c0116fdef6892a8d12fe8ea0fdeeb3e3f9a742dd353c143a73a53dc29ab31cd074cc622def47eeeb5efb12aa4053ee0378e47f3fcbf1df569a14f7e590922c9efb47dde845190c48a682d3d4773c5c6ef393c9a690bc42a598d6fd48e01532a4431f89aff7b443a0363c09d992ca8f8b7933080cc3b8c539a5a7fcf3d913fce069a7e475be2395453bc472539b8c93bcccdf9cb8a2ed1bbeda43c467015979ce65acafe3578d61aad2164cafbb5459abe57785278560e91ea745c9136b5476d59ab00271440301756b7dd36e50a8b1268e0ba3f2470c15fda1001f34024a8010f80a3b1843d071b20e374a2f47a9e8b3114cd9c3e8c343bd72aa4707d259fa3703f271379704e9ea1d5650e7dec89c55c2fe80e869004a78b5c0827b6c1cb6ee11cd55247b7bf11c5a78a495cbff39231b10a7e6157ba318f0ed478b8f81728a0f7c03e912a687722aec743674750f28c56e3b9f6949fa2dec85fff59896204a69eb15199d9213183ff000c0fe551aaafe208f85e7e2c63dc77634bba1736c05b1aa514570e494eaab73b9f1d4076a3d39ffca8b59aa81f1bc0adb4f81622360d610fb91b3eea94ca56c41bcb1459c13bfed05eb7b3d634f5abc95b861610abc295cf511e4ae1e80f2564c77c7d037587d3edc0857b1219aa60445b9c9988d7c9305a6fbebbf09f3aa34d9b3bd1053958d2e8534762d88b6679850eef4c4a441661953b98927d8fbae38257a3ee657fe4e1446eae97a92588f240269b007dbc1b56d7ad8ebf9a31df8e51bbe44c5fb3908cde91d54c02fa0e096f0b6c1be76b74ced2abebc2b483b304798f13239464b1e4a116d731d432a5b89d598c874cad039354d312993d60c2b7b25fde34c7919f1acc94b56b2cc86be7db39a731a258e77604e7fccd5ce2438d920740f9077e4ea31ea1c37503b2fffa259498400a6668516e710a466f2277390de528bded016f49fb68b4df5944222a3b522d1e3eadf33499cfca0bede998b63952882f0ec83ef3169b8caaae7c427ee4a258bc3b0a00062b49a2cedf75d5e1858e1455c55595b30bd48e9077ee4376f9bdb0c36dfb9423d11ddc1d8d85bccb3470b424d6f8ab9eb41d81973458041784c90ceb4bcf2af51868beeebeffed563935311622e69cd595fc1e501f7451e17191e08c5d5f44343e62deec6723ed82bc53760a972870425b0138100e8bbe6774f6a4b2c71493e8f81a8725c086180ac70b36065ca8cceba1eb632740c8cccaef692199a3a8ae646d045c648cf26fe63127e9aac3e419e1f4763fa6fedbe117f65b0f6821a8661ed1bfdc3bec2661b73d9cdbf94286cd5c0b6515a9f93dfac728577e9ab283a020ab9541d600ed3322363b378ec8ee800c2cf84de66fca510c01f379ceff69e2e4077d99d5e949238e1e01e2df501ea9fcbee0e45addeb4673a67d94369bd2b6957c1713792542350792b4c21a94a9fa647298d1a24273218626ca96d4c0998e7affd268638f338d78df01360050c39318b5ade3c0f8596031b1d5ceb9edec16e73544b81eff5a179f8cbd72f5b5b6322c9775c5b767cd9d72819bafb05ebd8a158de3a3a5afc97f30bf18d51a32bc05e84796b2204b49885821621bb3c2680fa499309b0d6910472e86c3b5715d34258d0642505f6e8b0bcee19d43c11648a2ec9dd048f43ab1e06aa7197ea3ccd39d0725b8e1b07e81eeff10ca1428a6462a122f2dfe431abbf5ad27069c362c41ae7cb550f07e9e6cc50e5bed6ce9e7a06494f429c59ac8b347e30342ec713d3e1cf195dae2ad98d9435922a651ed35c860187dc927438d55244458cf3b81480b1ca20e20f67cbd477c6069bfd300b897de94343c94bf9beb396ad8aef9a59d0f8ca5068c7d06efc1b2721b27bd611a60d9c", 0x1000}, {&(0x7f0000002180)="cb346de4ae5bfc63b940f83af12cbc3d5200d32d1015d3d70e0f159da034a6393433d2488d1f345b076b8fa5c4e331f7ad80db3d0f3f9bc0410e96da11e410685612038afc19d52783e9a6f3d9590b780ba71bb01c8c0675012d0a17863ffd52eb7734c1db8226797eaf9869afdedc5f0577ff91955515bcc45c860bc8521acdeb236869cb60", 0x86}], 0x5, &(0x7f00000022c0)=[@rights={{0x14, 0x1, 0x1, [r1]}}], 0x18, 0x40020}, 0x40010) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000380)=ANY=[@ANYBLOB="8400000010000305000000040000000000000000", @ANYRES32=0x0, @ANYBLOB="1546010007ef0000540012800c0001006d6163766c616e0044000280060002000100000008000900010000000800030003000000080007000500000008000100100000000600020001000000040005800a000400aaaaaaaaaa2e000008000500", @ANYRES32=r6], 0x84}}, 0x20008040) 6m19.473282993s ago: executing program 4 (id=1417): syslog(0xa, &(0x7f0000000140)=""/161, 0xa1) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000140)={0x20, 0x0, &(0x7f0000000100)=[{0x0, 0x3}], 0xdeadbeef, 0x8, 0x1}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2, 0x0, 0x4000000}, 0x40000) 6m19.422595583s ago: executing program 4 (id=1418): r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast1, 0xffffd79c}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0), 0x0, 0x24000000) read(r0, &(0x7f0000000040)=""/32, 0x20) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r1}) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES32=r0, @ANYRES16=0x0, @ANYBLOB="7cae72750b91564940fd2dfe5ecc887bc6c4148c7c91b16b6d1c4299050dc91926bff343f562399e72db44e4aa77d12320d228b7d20157d28e4ca7cac3", @ANYRES16=r1, @ANYRESOCT=r0, @ANYRES16=r0, @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40040100) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x60042, 0x0) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[@ANYRES32=r2], 0x78) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f0000000200)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r5, 0x3b88, &(0x7f0000000280)={0xc, r6}) ioctl$IOMMU_IOAS_MAP$PAGES(r5, 0x3b85, &(0x7f00000000c0)={0x28, 0x5, r6, 0x0, &(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3ff}) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRES64=r6]) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4a0342bed8a3c79acd4bb1f9f46ef28a63b329e09a86c62f907539c"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968", 0x79}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e385", 0x1c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418f", 0x30}], 0x3, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r9 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r9, &(0x7f0000000640)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ni\x00'}, 0x1b) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r10 = accept4(r9, 0x0, 0x0, 0x800) sendmmsg$alg(r10, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) 6m16.282622438s ago: executing program 4 (id=1469): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r1, 0x80106f53, &(0x7f0000000040)={0x20, &(0x7f0000001240)=[{0x1f, '\x00', @data=0xc, 0x7}, {0x6, '\x00', @buffer={"f8c042d7a8781c094069bb0ebdee0ef4186c06dcf1c52699f69880b0d7000004", 0x20}, 0x6}]}) mount$bind(&(0x7f0000002200)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8d501a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002240)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x840}, 0x0) r3 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xb, 0x2) r4 = fanotify_init(0x200, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x455, 0x8000003, r5, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r6, &(0x7f0000000180)={0x2020}, 0x1843) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000100)={0x980915, 0x8}) setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f00000004c0)={0x4, "83f434"}, 0x6) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) landlock_create_ruleset(&(0x7f0000000480)={0xc0, 0xd, 0x0, 0x2404, 0xd, 0x1}, 0x30, 0x0) r7 = socket(0x10, 0x3, 0x0) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='\a\x00'/14, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES32=r2, @ANYBLOB="000004"], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400b6c9763c010a000000000000000080090000"], 0x14}}, 0xc000) recvmsg$inet_nvme(r7, &(0x7f0000000440)={&(0x7f0000000100)=@generic, 0x80, &(0x7f0000000400)=[{&(0x7f00000001c0)=""/16, 0x10}, {&(0x7f0000000300)=""/215, 0xd7}], 0x2}, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000540), 0x802, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000021c0)={'tunl0\x00'}) 6m15.440249146s ago: executing program 4 (id=1482): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r2 = syz_open_dev$mtd(&(0x7f0000000100), 0x48a99fbe, 0x10b241) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$MEMREADOOB64(r2, 0xc0184d16, &(0x7f0000000080)={0x80000001, 0x0, 0x0, 0x0}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000140)={0x78, r1, 0x1, 0x0, 0x25dfdffe, {}, [@ETHTOOL_A_FEATURES_WANTED={0x4c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x48, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0xffffffffffffffd0, 0x1, 0x8}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, ')g%-\\\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '/dev/mtd#\x00'}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x78}}, 0x0) 6m15.202081583s ago: executing program 4 (id=1488): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x4}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x100000, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe000000000a0000", 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) 6m15.098097184s ago: executing program 33 (id=1488): r0 = socket(0x10, 0x3, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000980)=@base={0x1, 0x4, 0x4, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x8, r2, 0x4}, 0x38) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000180)={0x1000003, 0x100000, 0x1}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904ff80000000fe000000000a0000", 0x1c) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) 5m7.081776064s ago: executing program 2 (id=2245): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f00000000c0)={0x0, 'geneve0\x00', {0x4}, 0x67be}) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xc, 0x6, 0x29, 0x7f, 0xc, 0x6, 0xa3, 0x4, 0x5e, 0x6, 0x0, 0xf, 0x5, 0x1}, 0xe) recvmmsg$unix(r0, &(0x7f0000002740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x36102, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400030000000900020073797a32000000000c0007800500150001000000050005000a000000050001000600000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x0) 5m7.031626861s ago: executing program 2 (id=2251): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000580)={0x2, 0x0, 0x6, {0xc0020006, 0xe7fffffc, 0xe48, 0x54ef}}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004001000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0xc, &(0x7f0000000480)=ANY=[@ANYBLOB="180600000000000000000000000000008520000000040000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095000000000000001aa804de53d521f59eca744aeca3b74e688278b672d5ed89068c964379ebeb5fbd23feb43d52ab709857259d2f9a7645e237e38960573ba39288d928406c3686d3bb2a2af801ca1b357887a0761598820313e858a5261b4b1f268c863a146030715659628adcb76ac59dfd6149e262653dc40fd2cf4e387d69e62b1415c282f71aa18f6f3fbc6074f22eeef2aea1e0016fb112d58cb1f3c1"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_ENUMOUTPUT(r0, 0xc0485630, &(0x7f00000002c0)={0x8, "02439849e70c553cffb8e7b0434c00000000000000ad7cf7669cfafe182f0fca", 0x3, 0x34130108, 0x5, 0x0, 0x8}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0xfffffff8}, &(0x7f0000000080)=0xfebe) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_TRY_FMT(r2, 0xc0d05640, &(0x7f0000000000)={0x8, @pix={0x0, 0xa47, 0x30383653, 0x5, 0x1, 0x4, 0x7, 0x1, 0x1, 0x2, 0x0, 0x4}}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000001c0)={r1, 0xec, &(0x7f0000000340)=[@in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e21, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2c}}, @in6={0xa, 0x4e24, 0x5d, @mcast2, 0x2}, @in6={0xa, 0x4e24, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x10001, @local}]}, &(0x7f0000000200)=0x10) fcntl$setsig(r0, 0xa, 0x25) 5m6.950206907s ago: executing program 2 (id=2254): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x33c, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000080)={0x0, 0x8, 0x2, {0x2, @sliced={0x0, [0xfffe, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x10, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x3]}}}) ioctl$vim2m_VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000440)=@userptr={0x0, 0x2, 0x4, 0x408, 0x3, {}, {0x0, 0x1, 0x0, 0x0, 0xff, 0x14, "c4363c16"}, 0x1, 0x2, {0x0}, 0x2}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) write$vga_arbiter(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="6c6f636b20696f2b6d656d00d890c4c5"], 0xc) write$vga_arbiter(r3, &(0x7f0000000040)=@other={'decodes', ' ', 'none'}, 0xd) close_range(r2, 0xffffffffffffffff, 0x2000000000000) r4 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='test_dummy_encryption', &(0x7f0000000080)='v1\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\x02\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) ioctl$UI_SET_FFBIT(r1, 0x4004556b, 0x6e) 5m6.892111139s ago: executing program 2 (id=2255): r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'xfrm0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000040)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x46, r1}) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote, r1}, 0x14) 5m6.891937174s ago: executing program 2 (id=2256): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x2f00020b, 0xd, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b9", 0x0, 0x7515, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffc0}, 0x4c) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="220000000400000010000000"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r0}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r1 = open(&(0x7f00000002c0)='.\x00', 0x80000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x81899, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) 5m6.811271439s ago: executing program 2 (id=2257): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xff, 0x1f, 0x2, 0x6, 0x3, 0x6, 0x7fffffff, 0x19f, 0x38, 0x2c5, 0x400, 0x4, 0x20, 0x2, 0xffff, 0xc, 0xf6d}, [{0x6, 0xfe5, 0x6, 0x4, 0x8, 0xc, 0x2, 0x8}, {0x6474e551, 0x311, 0x0, 0x4609, 0x8, 0x8, 0xffffff80}]}, 0x78) close(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 4m51.509795992s ago: executing program 34 (id=2257): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x6, 0x4) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) write$binfmt_elf32(r1, &(0x7f00000002c0)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0xff, 0x1f, 0x2, 0x6, 0x3, 0x6, 0x7fffffff, 0x19f, 0x38, 0x2c5, 0x400, 0x4, 0x20, 0x2, 0xffff, 0xc, 0xf6d}, [{0x6, 0xfe5, 0x6, 0x4, 0x8, 0xc, 0x2, 0x8}, {0x6474e551, 0x311, 0x0, 0x4609, 0x8, 0x8, 0xffffff80}]}, 0x78) close(r1) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r6 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_JOIN_FILTERS(r6, 0x65, 0x6, &(0x7f0000000000)=0x1, 0x4) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) bind$packet(r2, &(0x7f0000000040)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r2, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) 4m20.297098793s ago: executing program 3 (id=2958): prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e04037a0c"], 0x7) 4m20.296865283s ago: executing program 3 (id=2959): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20940, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x7d, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e20, 0x42, @empty}}, 0x5, 0x400}, 0x90) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4m20.04468296s ago: executing program 3 (id=2963): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0xa, 0x200000100, 0x3, 0xfffffffffffffff4, 0x4a, 0x5, 0x100000100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x3, 0x6, 0x3, 0x401, 0x100000000, 0x2, 0xa51, 0x8, 0x401, 0x800000000000003, 0x7, 0x8000000000000001, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x1, 0x8, 0x1, 0x4, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffa, 0x4, 0x0, 0x4, 0x1, 0x9, 0x80008000, 0x8000000000000000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x7fffffff, 0x4, 0x8000, 0xc9, 0x7, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x22, 0xffffffffffffffff, 0x7, 0xfffffffffffffffd, 0x8000080000000000, 0x2000000005, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000005, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x0, 0x100000003, 0x4, 0x7, 0x8, 0x3, 0x6, 0x5, 0x0, 0x3, 0x40, 0x7fffffff, 0x7, 0xf9, 0x7]}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa64fe9c"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) (async) write$uinput_user_dev(r0, &(0x7f0000001b40)={'syz0\x00', {0x0, 0x0, 0x0, 0x2}, 0x0, [0x39, 0x3, 0x4000401, 0x8, 0xe, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2a, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0xf5b1, 0xfffffffd, 0x10000000, 0x99, 0x20000000, 0x0, 0x0, 0xfffffffd, 0x0, 0x7fffffff, 0xfffffffc, 0x5, 0xfffffff6, 0x0, 0x8, 0x800000, 0x0, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x1], [0x3, 0xfffff41a, 0x0, 0x0, 0x4, 0x20000, 0x2000000, 0xedc0, 0x0, 0x5ee, 0x5, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0xa0000000, 0x0, 0x8, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, 0x0, 0xfffffff8, 0x2, 0x0, 0x2, 0x400, 0x0, 0x0, 0x8, 0x40000, 0x0, 0xc0800000, 0x100, 0x0, 0xfffffffd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5, 0x4, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0xfffffffc, 0x1, 0xfffffffe, 0xfffff986], [0x0, 0x7f, 0x0, 0x0, 0x3, 0x80, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x0, 0xfffffffd, 0x2, 0xffffffff, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x4000, 0x6, 0x0, 0x0, 0x200, 0x2, 0x6, 0x80000000, 0x2, 0x47fff, 0x0, 0x0, 0x0, 0x3, 0x0, 0xf, 0x3, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0xfffffffc, 0x4, 0xf88], [0xfffffffe, 0x0, 0x4, 0x0, 0xfffefffe, 0x0, 0xfffffffe, 0x4, 0xfffffffc, 0x0, 0x0, 0x3, 0xfffffffc, 0x4, 0x803, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x10, 0x5, 0xfffffffe, 0xfff, 0x8, 0x4, 0x8001, 0x80, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xea, 0x0, 0x0, 0x0, 0x8000000, 0x4, 0xffffffff, 0x0, 0x0, 0xffffe]}, 0x45c) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) (async) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x5) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) (async) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x3) ioctl$UI_DEV_CREATE(r0, 0x5501) (async) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_DEV_DESTROY(r0, 0x5502) 4m19.939045957s ago: executing program 3 (id=2965): openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) (async) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) (async) r1 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000000)={0xd1, "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"}) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'geneve0\x00'}) socket$packet(0x11, 0x2, 0x300) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r6, 0x84, 0x15, &(0x7f0000001bc0)={0xf5}, 0x1) (async) setsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) (async) connect$bt_l2cap(r5, &(0x7f0000001980)={0x1f, 0x80, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x5}, 0x0, 0x2}, 0xe) (async) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r4, &(0x7f0000001a40)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001a00)={&(0x7f0000001c00)=ANY=[@ANYBLOB="4c0000008af0599a31260ef9406e99ea044864890dd4aa97bc385ca7240aff3c521b6eccdbcd08f524", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf25130000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b000500000006001100670f0000"], 0x4c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_SIOCGSKNS(r7, 0x894c, 0x0) (async) r8 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r8, 0x84, 0x72, &(0x7f0000001b00)={0x0, 0x4, 0x10}, &(0x7f0000001b40)=0xc) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="00f9db89aa02000000", @ANYRES32=0x0, @ANYBLOB="158804000300000008000d000100000008001b0000000000"], 0x30}, 0x1, 0x0, 0x0, 0x40881}, 0x4000000) r9 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r9, &(0x7f0000000480)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) (async) sendmmsg(r9, &(0x7f0000007fc0), 0x800001d, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x46801}, 0x4000000) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) (async) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x0, 0x31384142, 0x2, 0x6, 0x3, @stepwise={{0x3, 0xdb9}, {0x7, 0x7f}, {0x51b4, 0x9}}}) (async) sendmsg$inet_sctp(r1, &(0x7f00000002c0)={&(0x7f0000000240)=@in6={0xa, 0x4e24, 0xffffffff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x80000000}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x4000081}, 0x880) 4m19.803904746s ago: executing program 3 (id=2968): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) futex_waitv(&(0x7f0000000280)=[{0x0, &(0x7f0000000000), 0x2}, {0x0, 0x0, 0x82}], 0x2, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f00000000c0)=[@nested_intel_vmwrite_mask={0x154, 0x38, {0x1, @guest16=0xfffffffffffffffd, 0x6, 0x1, 0x6}}, @enable_nested={0x12c, 0x18}, @enable_nested={0x12c, 0x18}, @cpuid={0x64, 0x18, {0x5, 0x6}}], 0x80}) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000140), 0xd, 0x3501) connect$inet(0xffffffffffffffff, 0x0, 0x0) poll(&(0x7f0000000000)=[{r4, 0x4000}], 0x1, 0x5) syz_io_uring_setup(0x4ec5, &(0x7f0000000140)={0x0, 0xd210, 0x2, 0x3, 0x224}, &(0x7f0000000080), 0x0, 0x0) 4m18.979135128s ago: executing program 3 (id=2976): syz_open_dev$ttys(0xc, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20482, 0x0) 4m3.963124796s ago: executing program 35 (id=2976): syz_open_dev$ttys(0xc, 0x2, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) openat$cgroup_devices(r0, &(0x7f00000000c0)='devices.deny\x00', 0x2, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x20482, 0x0) 2.595612666s ago: executing program 5 (id=5305): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10002) 1.757430842s ago: executing program 1 (id=5308): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000b00)={0x500, 0x1, &(0x7f0000000640)=[r1], &(0x7f0000000680)=[0x5], &(0x7f0000001080), 0x0, 0x0, 0x2}) 1.676748345s ago: executing program 1 (id=5309): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240), 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0xfec00000, 0x2, 0x0, 0x4, 0x7, 0x80, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0xfe, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x2, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x4000, 0x8080000, 0xb, 0x0, 0x6, 0x6, 0x0, 0x2, 0x8, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x9, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0xf000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x70002, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x96, 0x0, 0x1, 0x5}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0xd000, 0x110, 0xe, 0xd801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.627405137s ago: executing program 5 (id=5310): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1}) r1 = eventfd(0x9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) 1.556881492s ago: executing program 5 (id=5314): mknod(&(0x7f0000000080)='./bus\x00', 0x400, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c}) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x8000026, r0, 0x0) open(&(0x7f0000000000)='./bus\x00', 0x1a1080, 0x9a) 1.556698026s ago: executing program 5 (id=5315): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000000400000000000000000000850000005300000018010000ffffff7f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000080)='GPL\x00'}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x11, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x78}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0300000004000000040000000a00000000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b7030000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.484385999s ago: executing program 5 (id=5317): openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180), 0x20802, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000004540)={0x9, 0xc, 0x3, 0x113, 0x5, 0x2, 0x2, 0xd4}, 0x0, 0x0, 0x0, 0x0) 1.483937619s ago: executing program 1 (id=5318): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10002) 1.386652505s ago: executing program 6 (id=5322): r0 = syz_open_dev$usbfs(0x0, 0xf, 0x101301) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1) 1.315154959s ago: executing program 6 (id=5323): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e22, @private=0xa010101}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000200)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x5c0, 0x2}, 0x8) 747.329652ms ago: executing program 7 (id=5331): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) shutdown(r0, 0x1) 686.249334ms ago: executing program 7 (id=5332): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000240)={0x1, 'veth0_to_team\x00'}, 0x18) syz_emit_ethernet(0xba, &(0x7f0000000400)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x1b, 0xac, 0x0, 0x0, 0xfb, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x23, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @loopback, @rand_addr=0x640100fe, {[@cipso={0x86, 0x6f, 0xffffffffffffffff, [{0x0, 0xe, "08c82ce8da6ee06cb8dd9452"}, {0x5, 0x9, "020007651442eb"}, {0x1, 0xe, "7434954373561de584b703c8"}, {0x0, 0x9, "e706d30bd224f8"}, {0x2, 0x7, "cfa11cab1a"}, {0x0, 0x10, "84a4913275be675de6a70a05a0dc"}, {0x6, 0x2}, {0x2, 0x12, "73bc23f9ffffffa30900a301c8460028"}, {0x0, 0x10, "c8f46976e79ea788f03d9d320592"}]}, @cipso={0x86, 0x6, 0x20}]}}, '\x00\x00\x00\x00'}}}}}, 0x0) 686.004804ms ago: executing program 7 (id=5333): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[], 0x0, 0x37}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x23, 0x4, 0x4, 0x7, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, r0, 0x2, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) 625.988856ms ago: executing program 7 (id=5334): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x1, 0x0, 0x25dfdbfb, {{0x2}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1743}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xffad46ab7102f497}, 0x0) 551.504513ms ago: executing program 5 (id=5335): syz_usb_connect(0x0, 0x36, 0x0, 0x0) r0 = dup(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x25104000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_generic(r0, 0x0, 0x8084) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r0, 0x2000) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x1) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000001180), 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) 551.143514ms ago: executing program 1 (id=5336): openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000", 0x0, 0x6}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000004c0)={{0xfec00000, 0x2, 0x0, 0x4, 0x7, 0x80, 0x3, 0x7, 0x0, 0x8, 0x9}, {0x50000, 0x10000, 0xc, 0x0, 0x2, 0x0, 0xfd, 0xfe, 0x7, 0xff, 0x2}, {0xb000, 0xf066ce738b004ad5, 0xc, 0x0, 0x2, 0xc5, 0x0, 0x0, 0x8, 0x3, 0x40, 0x3}, {0xeeef0000, 0x33331000, 0x18592cbc7c573fc6, 0x9, 0x1, 0x9, 0x9, 0x7, 0x8, 0xf, 0x4}, {0x4000, 0x8080000, 0xb, 0x0, 0x6, 0x6, 0x0, 0x2, 0x8, 0x3f, 0x6}, {0xb000, 0x0, 0x9, 0x9, 0x2, 0x1, 0x2, 0x80, 0x10, 0xff, 0x6}, {0xf000, 0xeeee0000, 0x3, 0x4, 0x3, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x4}, {0x70002, 0x50000, 0x8, 0x3, 0x0, 0x7, 0x9, 0x40, 0x96, 0x0, 0x1, 0x5}, {0x809fffb, 0x8cc}, {0xdddd1000}, 0xddf8ffd3, 0x0, 0xd000, 0x110, 0xe, 0xd801, 0x3000, [0x80000004, 0x0, 0x10000, 0xfffffffffffdffff]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 550.888382ms ago: executing program 7 (id=5337): r0 = socket(0x2000000015, 0x80005, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x802, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8001}, 0x1c) 476.927598ms ago: executing program 7 (id=5338): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000140)="c4a17d112948b8a9884315c2c245040f23c00f21f835000002000f23f866ba610066b8003066ef0f07d2c74424001e09000000442402e4000000654c0fc72ef3410fc777d365420fc7700066b8502466ef", 0x51}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 476.804526ms ago: executing program 6 (id=5339): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000680)=[{{&(0x7f0000000000)={0xa, 0x0, 0x4000000, @rand_addr=' \x01\x00'}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4e21, 0x5, @local, 0x6}, 0x1c, &(0x7f00000004c0)=[{&(0x7f0000000100)="a8", 0x1}], 0x1}}], 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000280)={0x0, 0x7, 0x0, 0x3}, 0x10) 407.296027ms ago: executing program 6 (id=5340): setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000300)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) shutdown(0xffffffffffffffff, 0x1) 406.875685ms ago: executing program 1 (id=5341): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f00000000c0)={0x1, r1}) r2 = eventfd(0x9) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) 406.67736ms ago: executing program 6 (id=5342): sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x44}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000180)={0x0, 0x20, 0x8f, 0x2, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x4}, 0xe) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005cc0), 0x0, 0x100, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) ioctl$SIOCGSTAMP(0xffffffffffffffff, 0x8906, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) write$9p(0xffffffffffffffff, &(0x7f0000000100)="d5c0e9", 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000180)='gre0\x00') sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040811}, 0x20042840) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x278bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90606}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000854) 346.99843ms ago: executing program 1 (id=5343): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0xe, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) timer_create(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @broadcast, 0x4e21, 0x3, 'rr\x00', 0x1, 0x10000004, 0x8}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00'}) r3 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev, 0xfffffeec}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 0s ago: executing program 6 (id=5345): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x10002) kernel console output (not intermixed with test programs): 0-1: Using ep0 maxpacket: 32 [ 428.079372][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.086085][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.100946][ T10] usb 10-1: New USB device found, idVendor=0644, idProduct=800e, bcdDevice= 0.40 [ 428.107746][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.111048][ T10] usb 10-1: Product: syz [ 428.115200][ T10] usb 10-1: Manufacturer: syz [ 428.117403][ T10] usb 10-1: SerialNumber: syz [ 428.231788][ T5828] em28xx 11-1:0.132: unknown em28xx chip ID (0) [ 428.380207][ T42] audit: type=1800 audit(1783516449.269:28270): pid=20004 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.4380" name="file0" dev="overlay" ino=2693 res=0 errno=0 [ 428.663948][ T5828] em28xx 11-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 428.681715][ T5828] em28xx 11-1:0.132: board has no eeprom [ 428.763231][ T5828] em28xx 11-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 428.768738][ T5828] em28xx 11-1:0.132: analog set to bulk mode. [ 428.773783][ T5841] em28xx 11-1:0.132: Registering V4L2 extension [ 428.780241][ T5828] usb 11-1: USB disconnect, device number 27 [ 428.784369][ T5828] em28xx 11-1:0.132: Disconnecting em28xx [ 428.835275][ T5914] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 428.871797][ T5841] em28xx 11-1:0.132: Config register raw data: 0xffffffed [ 428.877918][ T5841] em28xx 11-1:0.132: AC97 chip type couldn't be determined [ 428.881471][ T5841] em28xx 11-1:0.132: No AC97 audio processor [ 428.897853][ T5841] usb 11-1: Decoder not found [ 428.899496][ T5841] em28xx 11-1:0.132: failed to create media graph [ 428.901656][ T5841] em28xx 11-1:0.132: V4L2 device video103 deregistered [ 428.909387][ T5841] em28xx 11-1:0.132: Remote control support is not available for this card. [ 428.913022][ T5828] em28xx 11-1:0.132: Closing input extension [ 428.921350][ T5828] em28xx 11-1:0.132: Freeing device [ 428.992739][ T5914] usb 6-1: Using ep0 maxpacket: 32 [ 429.006975][ T5914] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 429.014431][ T5914] usb 6-1: config 0 interface 0 has no altsetting 0 [ 429.017577][ T5914] usb 6-1: New USB device found, idVendor=1b1c, idProduct=0c10, bcdDevice= 0.00 [ 429.021566][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 429.069933][ T5914] usb 6-1: config 0 descriptor?? [ 429.116667][ T10] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 429.255175][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 429.333585][T18520] udevd[18520]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.783267][ T10] usb 10-1: USB disconnect, device number 28 [ 429.795055][ T42] audit: type=1400 audit(1783516450.689:28271): avc: denied { accept } for pid=20021 comm="syz.7.4385" lport=35381 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 429.879706][ T5914] corsair-cpro 0003:1B1C:0C10.000F: hidraw1: USB HID v4.06 Device [HID 1b1c:0c10] on usb-dummy_hcd.1-1/input0 [ 430.047736][ T5914] corsair-cpro 0003:1B1C:0C10.000F: probe with driver corsair-cpro failed with error -61 [ 430.122632][ T5828] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 430.252730][ T5841] usb 11-1: new high-speed USB device number 28 using dummy_hcd [ 430.253450][ T5914] usb 6-1: USB disconnect, device number 53 [ 430.272515][ T5828] usb 12-1: Using ep0 maxpacket: 16 [ 430.276528][ T5828] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.280615][ T5828] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 430.285428][ T5828] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 430.289199][ T5828] usb 12-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 430.293474][ T5828] usb 12-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 430.300300][ T5828] usb 12-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 430.304553][ T5828] usb 12-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 430.307831][ T5828] usb 12-1: Manufacturer: syz [ 430.314539][ T5828] usb 12-1: config 0 descriptor?? [ 430.425150][ T5841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 430.429277][ T5841] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 430.435875][ T5841] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 430.443319][ T5841] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 430.447349][ T42] audit: type=1800 audit(1783516451.339:28272): pid=20034 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4389" name="file0" dev="overlay" ino=542 res=0 errno=0 [ 430.459671][ T5841] usb 11-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 430.463553][ T5841] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.467248][ T5841] usb 11-1: Product: syz [ 430.468880][ T5841] usb 11-1: Manufacturer: syz [ 430.470931][ T5841] usb 11-1: SerialNumber: syz [ 430.476640][ T5841] usb 11-1: config 0 descriptor?? [ 430.482882][ T5841] ums-isd200 11-1:0.0: USB Mass Storage device detected [ 430.562581][ T5828] rc_core: IR keymap rc-hauppauge not found [ 430.565006][ T5828] Registered IR keymap rc-empty [ 430.568061][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.582622][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.604322][ T5828] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0 [ 430.612613][ T5828] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.0/rc/rc0/input41 [ 430.621695][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.652735][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.682905][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.712585][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.732620][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.762600][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.782764][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.802660][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.822935][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.827712][ T42] audit: type=1400 audit(1783516451.719:28273): avc: denied { setopt } for pid=20039 comm="syz.1.4390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 430.853937][ T5828] mceusb 12-1:0.0: Error: mce write submit urb error = -90 [ 430.878066][ T5828] mceusb 12-1:0.0: Registered with mce emulator interface version 1 [ 430.881575][ T5828] mceusb 12-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 430.900156][ T5841] scsi host6: usb-storage 11-1:0.0 [ 430.916305][ T5841] usb 11-1: USB disconnect, device number 28 [ 430.957589][ T5828] usb 12-1: USB disconnect, device number 15 [ 431.576803][ T42] audit: type=1400 audit(1783516452.469:28274): avc: denied { mounton } for pid=20055 comm="syz.6.4395" path="/syzcgroup/cpu/syz6/cgroup.procs" dev="cgroup" ino=584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 431.593701][T20056] 9pnet_fd: p9_fd_create_tcp (20056): problem connecting socket to 127.0.0.1 [ 431.844231][T20062] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4397'. [ 432.397450][ T42] audit: type=1800 audit(1783516453.289:28275): pid=20073 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4401" name="file0" dev="overlay" ino=561 res=0 errno=0 [ 432.921613][ T10] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 433.208236][T20087] xt_hashlimit: size too large, truncated to 1048576 [ 433.332494][ T10] usb 6-1: Using ep0 maxpacket: 32 [ 433.338992][ T10] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 433.343670][ T10] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 433.351794][ T10] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 433.356671][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.359295][ T10] usb 6-1: Product: syz [ 433.360696][ T10] usb 6-1: Manufacturer: syz [ 433.362198][ T10] usb 6-1: SerialNumber: syz [ 433.368511][ T10] usb 6-1: config 0 descriptor?? [ 434.022589][ T5813] usb 11-1: new full-speed USB device number 29 using dummy_hcd [ 434.030029][T20070] bridge_slave_1: left allmulticast mode [ 434.032794][T20070] bridge_slave_1: left promiscuous mode [ 434.035682][T20070] bridge0: port 2(bridge_slave_1) entered disabled state [ 434.052038][T20070] bond0: (slave bond_slave_0): Releasing backup interface [ 434.065685][T20070] bond0: (slave bond_slave_1): Releasing backup interface [ 434.085185][T20070] team0: Port device team_slave_0 removed [ 434.091851][T20070] team0: Port device team_slave_1 removed [ 434.098218][T20070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.101376][T20070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 434.107491][T20070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.110483][T20070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 434.145976][T20094] team0: Port device xfrm0 added [ 434.148374][T20095] tipc: Started in network mode [ 434.150446][T20095] tipc: Node identity 6612f7088fa, cluster identity 4711 [ 434.156993][T20095] tipc: Enabled bearer , priority 0 [ 434.160764][ T5811] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.165055][ T5811] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.171481][ T50] usb 6-1: USB disconnect, device number 54 [ 434.174380][ T5811] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.178106][ T5811] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 434.187147][ T5813] usb 11-1: unable to get BOS descriptor or descriptor too short [ 434.190796][ T5813] usb 11-1: not running at top speed; connect to a high speed hub [ 434.195373][ T5813] usb 11-1: config 14 has an invalid interface number: 57 but max is 1 [ 434.198793][ T5813] usb 11-1: config 14 has an invalid interface number: 228 but max is 1 [ 434.202254][ T5813] usb 11-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 434.207814][ T5813] usb 11-1: config 14 has no interface number 0 [ 434.210507][ T5813] usb 11-1: config 14 has no interface number 1 [ 434.281988][ T5813] usb 11-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 434.286860][ T5813] usb 11-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 434.291558][ T5813] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 434.298636][ T5813] usb 11-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 434.303008][ T5813] usb 11-1: config 14 interface 57 has no altsetting 0 [ 434.305749][ T5813] usb 11-1: config 14 interface 228 has no altsetting 0 [ 434.310572][ T5813] usb 11-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 434.311279][T20106] IPv6: NLM_F_REPLACE set, but no existing node found! [ 434.316298][ T5813] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 434.322301][ T5813] usb 11-1: Product: syz [ 434.324216][ T5813] usb 11-1: Manufacturer: syz [ 434.326125][ T5813] usb 11-1: SerialNumber: syz [ 434.715664][ T42] audit: type=1800 audit(1783516455.609:28276): pid=20114 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4413" name="file0" dev="overlay" ino=595 res=0 errno=0 [ 434.758144][ T5813] legousbtower 11-1:14.57: interrupt endpoints not found [ 434.957312][ C2] raw-gadget.1 gadget.6: ignoring, device is not running [ 434.960027][ C2] raw-gadget.1 gadget.6: ignoring, device is not running [ 434.964235][ T5813] legousbtower 11-1:14.228: get version request failed: -71 [ 434.970684][ T5813] legousbtower 11-1:14.228: probe with driver legousbtower failed with error -71 [ 434.978429][ T5813] usb 11-1: USB disconnect, device number 29 [ 435.216450][ T5828] tipc: Node number set to 3920819976 [ 435.463107][ T50] usb 10-1: new high-speed USB device number 29 using dummy_hcd [ 435.486761][T20124] siw: device registration error -23 [ 435.632735][ T50] usb 10-1: Using ep0 maxpacket: 16 [ 435.684925][ T50] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 435.698456][ T50] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 435.704447][ T50] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.825774][ T50] usb 10-1: config 0 descriptor?? [ 435.913014][ T50] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 436.339991][ T42] audit: type=1400 audit(1783516457.229:28277): avc: denied { create } for pid=20144 comm="syz.1.4430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 436.432830][T20148] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 436.614112][ T5813] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 436.762533][ T5813] usb 12-1: Using ep0 maxpacket: 32 [ 436.767555][ T5813] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 436.772196][ T5813] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 436.780055][ T5813] usb 12-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 436.784616][ T5813] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.787422][ T5813] usb 12-1: Product: syz [ 436.788941][ T5813] usb 12-1: Manufacturer: syz [ 436.790549][ T5813] usb 12-1: SerialNumber: syz [ 436.824783][ T42] audit: type=1400 audit(1783516457.709:28278): avc: denied { setopt } for pid=20117 comm="syz.5.4415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 436.859241][ T5813] usb 12-1: config 0 descriptor?? [ 437.077255][T20147] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 437.087111][T20147] team0: Device xfrm0 is of different type [ 437.096382][T20147] tipc: Started in network mode [ 437.098865][T20147] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 437.101614][T20147] tipc: Enabled bearer , priority 0 [ 437.107656][ T5841] usb 12-1: USB disconnect, device number 16 [ 437.471393][ T42] audit: type=1400 audit(1783516458.359:28279): avc: denied { bind } for pid=20159 comm="syz.6.4425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.132842][ T5841] tipc: Node number set to 11578026 [ 438.442635][ T10] usb 10-1: USB disconnect, device number 29 [ 438.662279][T20177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4431'. [ 440.752596][T10870] usb 10-1: new high-speed USB device number 30 using dummy_hcd [ 440.781812][ T42] audit: type=1400 audit(1783516461.669:28280): avc: denied { create } for pid=20203 comm="syz.7.4441" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 441.232523][T10870] usb 10-1: Using ep0 maxpacket: 16 [ 441.239330][T10870] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 441.245513][T10870] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 441.248793][T10870] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.257064][T10870] usb 10-1: config 0 descriptor?? [ 441.274553][T10870] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 442.528469][T20226] fuse: Bad value for 'fd' [ 442.535749][T20226] workqueue: name exceeds WQ_NAME_LEN. Truncating to: ç–½mÔ%A¯úÆÿAZøZ´”àIƺ¥þ àø§% [ 442.802736][T20231] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 442.995879][ T42] audit: type=1400 audit(1783516463.889:28281): avc: denied { map } for pid=20234 comm="syz.1.4451" path="socket:[111932]" dev="sockfs" ino=111932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 443.006363][ T42] audit: type=1400 audit(1783516463.889:28282): avc: denied { read write } for pid=20234 comm="syz.1.4451" path="socket:[111932]" dev="sockfs" ino=111932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 443.506352][ T5828] usb 10-1: USB disconnect, device number 30 [ 443.763087][ T5914] usb 11-1: new high-speed USB device number 30 using dummy_hcd [ 443.987625][ T5914] usb 11-1: Using ep0 maxpacket: 8 [ 443.993447][ T5914] usb 11-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 444.002047][ T5914] usb 11-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 444.009927][ T5914] usb 11-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 444.013533][ T5914] usb 11-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 444.020077][ T5914] usb 11-1: config 0 interface 0 has no altsetting 0 [ 444.022164][ T5914] usb 11-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 444.030398][ T5914] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 444.034588][ T5914] usb 11-1: config 0 descriptor?? [ 444.343793][T20261] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 444.349432][T20261] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.356229][T20261] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.689219][ T5914] hid_parser_main: 222 callbacks suppressed [ 444.689238][ T5914] wacom 0003:056A:010E.0010: unknown main item tag 0x2 [ 444.697174][ T5914] wacom 0003:056A:010E.0010: unknown main item tag 0x0 [ 444.699917][ T5914] wacom 0003:056A:010E.0010: unknown main item tag 0x0 [ 444.753625][T20265] loop9: detected capacity change from 0 to 2640 [ 444.757701][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.760640][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.763744][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.766484][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.769384][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.786728][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.793607][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.796966][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.800188][T20265] ldm_validate_partition_table(): Disk read failed. [ 444.806646][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.812838][T20265] Buffer I/O error on dev loop9, logical block 0, async page read [ 444.823894][T20265] loop9: unable to read partition table [ 444.830676][T20265] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 444.891471][ T5828] usb 11-1: USB disconnect, device number 30 [ 445.067616][T20277] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4464'. [ 445.142771][T20281] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4466'. [ 445.345210][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.348014][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.600338][T18520] udevd[18520]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 445.861996][T20301] IPv6: NLM_F_REPLACE set, but no existing node found! [ 446.492566][ T50] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 446.517319][T20321] netlink: 136 bytes leftover after parsing attributes in process `syz.7.4480'. [ 446.642546][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 446.647214][ T50] usb 6-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30 [ 446.650889][ T50] usb 6-1: config 0 interface 0 altsetting 33 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 446.655438][ T50] usb 6-1: config 0 interface 0 altsetting 33 endpoint 0x81 has invalid wMaxPacketSize 0 [ 446.659444][ T50] usb 6-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193 [ 446.665016][ T50] usb 6-1: config 0 interface 0 has no altsetting 0 [ 446.667439][ T50] usb 6-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00 [ 446.670397][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.691045][ T50] usb 6-1: config 0 descriptor?? [ 447.158012][ T50] wacom 0003:056A:010E.0011: unknown main item tag 0x2 [ 447.160459][ T50] wacom 0003:056A:010E.0011: unknown main item tag 0x0 [ 447.165013][ T50] wacom 0003:056A:010E.0011: unknown main item tag 0x0 [ 447.343453][ T50] usb 6-1: USB disconnect, device number 55 [ 447.392697][T20327] netlink: 'syz.5.4482': attribute type 1 has an invalid length. [ 447.445397][T20327] 8021q: adding VLAN 0 to HW filter on device bond2 [ 447.451868][T20329] vlan2: entered allmulticast mode [ 447.454090][T20329] bond2: entered allmulticast mode [ 447.478738][T20327] bond2: (slave geneve2): making interface the new active one [ 447.481896][T20327] geneve2: entered allmulticast mode [ 447.485207][T20327] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 447.586289][T20339] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4483'. [ 448.688600][T10870] usb 12-1: new high-speed USB device number 17 using dummy_hcd [ 448.821424][T20367] netlink: 'syz.1.4495': attribute type 1 has an invalid length. [ 448.841189][T20367] 8021q: adding VLAN 0 to HW filter on device bond2 [ 448.857271][T20367] vlan0: entered allmulticast mode [ 448.859121][T20367] bond2: entered allmulticast mode [ 448.875440][T20367] bond2: (slave geneve2): making interface the new active one [ 448.877898][T20367] geneve2: entered allmulticast mode [ 448.880767][T20367] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 448.986063][ T42] audit: type=1400 audit(1783516469.879:28283): avc: denied { read write } for pid=20373 comm="syz.1.4499" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 449.000941][ T42] audit: type=1400 audit(1783516469.879:28284): avc: denied { open } for pid=20373 comm="syz.1.4499" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 449.008513][ T42] audit: type=1400 audit(1783516469.879:28285): avc: denied { ioctl } for pid=20373 comm="syz.1.4499" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 449.075004][T10870] usb 12-1: Using ep0 maxpacket: 16 [ 449.122804][T10870] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 449.133513][T10870] usb 12-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 449.342802][T10870] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.733375][T10870] usb 12-1: config 0 descriptor?? [ 450.146159][T10870] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 450.801990][T20395] netlink: 'syz.1.4505': attribute type 1 has an invalid length. [ 450.837752][T20395] 8021q: adding VLAN 0 to HW filter on device bond3 [ 450.851945][T20395] vlan2: entered allmulticast mode [ 450.855575][T20395] bond3: entered allmulticast mode [ 451.561626][T20412] siw: device registration error -23 [ 451.792316][ T5847] usb 12-1: USB disconnect, device number 17 [ 452.332690][ T5847] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 452.479571][T20432] xt_hashlimit: size too large, truncated to 1048576 [ 452.502701][ T5847] usb 6-1: Using ep0 maxpacket: 32 [ 452.515359][ T5847] usb 6-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 452.518582][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.521220][ T5847] usb 6-1: Product: syz [ 452.522639][ T5847] usb 6-1: Manufacturer: syz [ 452.524234][ T5847] usb 6-1: SerialNumber: syz [ 452.531619][ T5847] usb 6-1: config 0 descriptor?? [ 452.543173][ T5847] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 452.762573][ T5813] usb 10-1: new high-speed USB device number 31 using dummy_hcd [ 453.182647][ T5813] usb 10-1: Using ep0 maxpacket: 16 [ 453.186610][ T5813] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 453.192090][ T5813] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 453.196374][ T5813] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.203098][ T5813] usb 10-1: config 0 descriptor?? [ 453.208425][ T5813] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 453.712532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 453.932468][ T42] audit: type=1400 audit(1783516474.739:28286): avc: denied { bind } for pid=20446 comm="syz.6.4524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 453.985760][ T5847] gspca_topro: Sensor cx0342 [ 454.193462][T10870] usb 6-1: USB disconnect, device number 56 [ 454.652300][T20457] siw: device registration error -23 [ 455.191034][T20464] xt_hashlimit: size too large, truncated to 1048576 [ 455.509932][T20468] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4530'. [ 455.544795][ T5813] usb 10-1: USB disconnect, device number 31 [ 456.438591][ T5813] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 456.452554][ T42] audit: type=1400 audit(1783516476.779:28287): avc: denied { getopt } for pid=20488 comm="syz.7.4540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 456.488218][T20502] IPv6: NLM_F_REPLACE set, but no existing node found! [ 456.582632][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 456.593990][ T5813] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 456.602546][ T5813] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 456.610822][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 456.614430][ T42] audit: type=1400 audit(1783516477.499:28288): avc: denied { create } for pid=20505 comm="syz.6.4546" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 456.616002][T20508] fuse: Bad value for 'fd' [ 456.625755][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 456.630839][ T5914] usb 10-1: new high-speed USB device number 32 using dummy_hcd [ 456.631814][ T42] audit: type=1400 audit(1783516477.509:28289): avc: denied { mounton } for pid=20505 comm="syz.6.4546" path="/574/file0" dev="tmpfs" ino=3056 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 456.654383][ T5813] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 456.657459][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 456.660045][ T5813] usb 6-1: Product: syz [ 456.661419][ T5813] usb 6-1: Manufacturer: syz [ 456.667789][ T5813] usb 6-1: SerialNumber: syz [ 456.682734][ T5813] usb 6-1: config 0 descriptor?? [ 456.687415][T20490] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 456.782666][ T5914] usb 10-1: Using ep0 maxpacket: 16 [ 456.791643][ T5914] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 456.803277][ T5914] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 456.809471][ T5914] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.818370][ T5914] usb 10-1: config 0 descriptor?? [ 456.979637][ T5914] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 456.985215][ T5813] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 457.014584][ T5813] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input42 [ 457.374685][ C2] powermate: config urb returned -71 [ 457.376563][ C2] powermate: config urb returned -71 [ 457.378335][ C2] powermate: config urb returned -71 [ 457.380039][ C2] powermate: config urb returned -71 [ 457.386769][ T5813] usb 6-1: USB disconnect, device number 57 [ 457.386825][ C2] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 457.570785][T20524] IPv6: Can't replace route, no match found [ 458.641161][T20547] IPv6: NLM_F_REPLACE set, but no existing node found! [ 458.697933][ T42] audit: type=1400 audit(1783516479.589:28290): avc: denied { create } for pid=20550 comm="syz.6.4565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 458.706446][ T42] audit: type=1400 audit(1783516479.589:28291): avc: denied { read } for pid=20550 comm="syz.6.4565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 458.934795][ T5779] usb 12-1: new full-speed USB device number 18 using dummy_hcd [ 459.063766][T10870] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 459.084175][ T5779] usb 12-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 459.087429][ T5779] usb 12-1: config 2 interface 1 has no altsetting 0 [ 459.091770][ T5779] usb 12-1: New USB device found, idVendor=1410, idProduct=a012, bcdDevice=c4.5f [ 459.095183][ T5779] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.097797][ T5779] usb 12-1: Product: syz [ 459.099148][ T5779] usb 12-1: Manufacturer: syz [ 459.100699][ T5779] usb 12-1: SerialNumber: syz [ 459.212476][T10870] usb 6-1: Using ep0 maxpacket: 8 [ 459.215794][T10870] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 459.218851][T10870] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 459.222510][T10870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 459.225890][T10870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 459.231372][T10870] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 459.234274][T10870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 459.236824][T10870] usb 6-1: Product: syz [ 459.238171][T10870] usb 6-1: Manufacturer: syz [ 459.239731][T10870] usb 6-1: SerialNumber: syz [ 459.243500][T10870] usb 6-1: config 0 descriptor?? [ 459.245887][T20557] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 459.322288][ T5779] usb 12-1: unknown number of interfaces: 2 [ 459.329952][ T5779] usb 12-1: USB disconnect, device number 18 [ 459.404227][ T10] usb 10-1: USB disconnect, device number 32 [ 459.451052][T10870] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 459.455898][T10870] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input43 [ 459.466009][ C0] powermate: config urb returned -71 [ 459.467781][ C0] powermate: config urb returned -71 [ 459.469709][ C0] powermate: config urb returned -71 [ 459.471564][ C0] powermate: config urb returned -71 [ 459.476365][T10870] usb 6-1: USB disconnect, device number 58 [ 459.478272][ C0] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 459.758641][T20573] IPv6: NLM_F_REPLACE set, but no existing node found! [ 459.858319][T20578] binder: BINDER_SET_CONTEXT_MGR already set [ 459.860946][T20578] binder: 20577:20578 ioctl 4018620d 200000000380 returned -16 [ 460.196159][ T42] audit: type=1400 audit(1783516481.089:28292): avc: denied { bind } for pid=20589 comm="syz.6.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 460.574499][T20595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 460.577738][T20595] IPv6: NLM_F_CREATE should be set when creating new route [ 460.602885][T20595] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 461.599100][T20608] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4586'. [ 461.792889][T10870] usb 10-1: new high-speed USB device number 33 using dummy_hcd [ 461.852551][ T5813] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 461.962501][T10870] usb 10-1: Using ep0 maxpacket: 8 [ 461.967129][T10870] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 461.971158][T10870] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.975711][T10870] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.979141][T10870] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 461.984434][T10870] usb 10-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 461.987413][T10870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.990051][T10870] usb 10-1: Product: syz [ 461.991520][T10870] usb 10-1: Manufacturer: syz [ 461.993577][T10870] usb 10-1: SerialNumber: syz [ 461.998019][T10870] usb 10-1: config 0 descriptor?? [ 462.000461][T20605] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 462.012481][ T5813] usb 6-1: Using ep0 maxpacket: 16 [ 462.023340][ T5813] usb 6-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 462.027522][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.030970][ T5813] usb 6-1: Product: syz [ 462.033019][ T5813] usb 6-1: Manufacturer: syz [ 462.035094][ T5813] usb 6-1: SerialNumber: syz [ 462.040183][ T5813] usb 6-1: config 0 descriptor?? [ 462.045085][ T5813] ssu100 6-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 462.206349][T10870] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 462.214790][T10870] input: Griffin SoundKnob as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input45 [ 462.220660][ C0] powermate: config urb returned -71 [ 462.222592][ C0] powermate: config urb returned -71 [ 462.224768][ C0] powermate: config urb returned -71 [ 462.226633][ C0] powermate: config urb returned -71 [ 462.233877][T10870] usb 10-1: USB disconnect, device number 33 [ 462.236177][ C0] powermate 10-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 462.948103][ T42] audit: type=1400 audit(1783516483.839:28293): avc: denied { execute } for pid=20636 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 462.952247][T20637] netlink: 'syz.5.4597': attribute type 64 has an invalid length. [ 462.971899][ T42] audit: type=1400 audit(1783516483.839:28294): avc: denied { execute_no_trans } for pid=20636 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 463.735357][ T5813] usb 6-1: Quatech SSU-100 USB to Serial Driver converter now attached to ttyUSB0 [ 463.917510][ T5813] usb 6-1: USB disconnect, device number 59 [ 464.127218][ T64] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.134319][ T5813] ssu100 ttyUSB0: Quatech SSU-100 USB to Serial Driver converter now disconnected from ttyUSB0 [ 464.141913][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.157122][ T5813] ssu100 6-1:0.0: device disconnected [ 464.171620][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 464.186662][ T64] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 464.191919][ T64] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.465695][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.488457][ T5734] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.495235][ T5734] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 464.509591][ T5734] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 464.520084][ T5734] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 464.789721][ T42] audit: type=1400 audit(1783516485.669:28295): avc: denied { mounton } for pid=20638 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 465.430800][ T42] audit: type=1400 audit(1783516486.319:28296): avc: denied { listen } for pid=20648 comm="syz.7.4601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 465.466072][T20647] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4599'. [ 465.735274][T20651] netlink: 84 bytes leftover after parsing attributes in process `syz.1.4599'. [ 466.146201][T20638] xfrm0 speed is unknown, defaulting to 1000 [ 466.476274][T20638] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.478582][T20638] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.480985][T20638] bridge_slave_0: entered allmulticast mode [ 466.483851][T20638] bridge_slave_0: entered promiscuous mode [ 466.487292][T20638] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.489615][T20638] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.491904][T20638] bridge_slave_1: entered allmulticast mode [ 466.494563][T20638] bridge_slave_1: entered promiscuous mode [ 466.511238][T20638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.515674][T20638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.532684][T20638] team0: Port device team_slave_0 added [ 466.535902][T20638] team0: Port device team_slave_1 added [ 466.549747][T20638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.551934][T20638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.559713][T20638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.564481][T20638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.566644][T20638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.574460][T20638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.597780][T20638] hsr_slave_0: entered promiscuous mode [ 466.600329][T20638] hsr_slave_1: entered promiscuous mode [ 466.602635][T20638] debugfs: 'hsr0' already exists in 'hsr' [ 466.604915][T20638] Cannot create hsr debugfs directory [ 466.772584][ T5734] Bluetooth: hci1: command tx timeout [ 467.107360][T20638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.113770][T20638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.118243][T20638] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 467.193370][ T5914] usb 12-1: new high-speed USB device number 19 using dummy_hcd [ 467.258019][T20638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.273752][T20638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.277001][T20638] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 467.332582][ T50] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 467.366534][ T5914] usb 12-1: Using ep0 maxpacket: 32 [ 467.373085][ T5914] usb 12-1: config 0 has an invalid descriptor of length 32, skipping remainder of the config [ 467.380273][ T5914] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.386325][ T5914] usb 12-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 467.391132][ T5914] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.409627][ T5914] usb 12-1: config 0 descriptor?? [ 467.413881][ T5914] hub 12-1:0.0: bad descriptor, ignoring hub [ 467.416260][ T5914] hub 12-1:0.0: probe with driver hub failed with error -5 [ 467.427258][ T5914] usbhid 12-1:0.0: couldn't find an input interrupt endpoint [ 467.431407][T20638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.440237][T20638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.444953][T20638] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 467.503895][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 467.517088][ T50] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 467.538904][ T50] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.549743][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.559095][ T50] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 467.560460][T20638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.569535][T20638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.573278][T20638] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 467.575373][ T50] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 467.583597][ T50] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.587052][ T50] usb 6-1: Product: syz [ 467.589075][ T50] usb 6-1: Manufacturer: syz [ 467.594142][ T50] usb 6-1: SerialNumber: syz [ 467.608830][ T50] usb 6-1: config 0 descriptor?? [ 467.611590][T20680] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 467.728510][ T7838] bridge_slave_1: left allmulticast mode [ 467.730656][ T7838] bridge_slave_1: left promiscuous mode [ 467.738056][ T7838] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.756492][ T7838] bridge_slave_0: left allmulticast mode [ 467.758590][ T7838] bridge_slave_0: left promiscuous mode [ 467.761464][ T7838] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.794931][ T7838] dvmrp8: left allmulticast mode [ 467.808572][ T7838] batman_adv: batadv0: Interface deactivated: gretap1 [ 467.863895][ T50] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 467.889628][ T50] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input46 [ 468.087847][ C1] powermate: config urb returned -71 [ 468.088240][ T5813] usb 6-1: USB disconnect, device number 60 [ 468.089645][ C1] powermate: usb_submit_urb(config) failed [ 468.091632][ C1] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 468.150242][ T7838] batman_adv: batadv0: Removing interface: gretap1 [ 468.176994][ T7838] bond2 (unregistering): (slave geneve2): Releasing active interface [ 468.204094][ T7838] bond7 (unregistering): (slave bridge3): Releasing active interface [ 468.218960][ T7838] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 468.230397][ T7838] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 468.247163][ T7838] bond0 (unregistering): Released all slaves [ 468.271386][ T7838] bond1 (unregistering): Released all slaves [ 468.290796][ T7838] bond2 (unregistering): Released all slaves [ 468.301084][ T7838] bond3 (unregistering): Released all slaves [ 468.309617][ T7838] bond4 (unregistering): Released all slaves [ 468.319424][ T7838] bond5 (unregistering): Released all slaves [ 468.327666][ T7838] bond6 (unregistering): Released all slaves [ 468.363645][ T7838] bond7 (unregistering): Released all slaves [ 468.377225][ T7838] bond8 (unregistering): Released all slaves [ 468.506629][T20638] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.523507][T20638] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 468.526413][T20638] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.541170][T20638] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 468.550260][T20638] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.570974][T20638] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 468.574794][T20638] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.586515][T20638] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 468.590955][ T7838] tipc: Left network mode [ 468.685311][T20638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.852931][ T5734] Bluetooth: hci1: command tx timeout [ 468.974137][T20638] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.022989][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.026149][T14108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.083231][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.086089][T14108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.418191][ T7838] hsr_slave_0: left promiscuous mode [ 469.428055][ T7838] hsr_slave_1: left promiscuous mode [ 469.435140][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 469.438493][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.443343][ T7838] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 469.447980][ T7838] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 469.522932][ T7838] veth1_macvtap: left promiscuous mode [ 469.528298][ T7838] veth0_macvtap: left promiscuous mode [ 469.533060][ T7838] veth1_vlan: left promiscuous mode [ 469.535473][ T7838] veth0_vlan: left promiscuous mode [ 469.761940][ T7838] team0 (unregistering): Port device vlan2 removed [ 470.050275][ T36] smbdirect: ib_dev[syz2] removed [ 470.074681][ T10] usb 12-1: USB disconnect, device number 19 [ 470.109274][ T7838] team0 (unregistering): Port device team_slave_1 removed [ 470.308364][ T1348] infiniband syz2: ib_query_port failed (-19) [ 470.308417][T20713] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 470.644760][T20638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.753842][T20738] netlink: 'syz.1.4618': attribute type 1 has an invalid length. [ 470.767808][T20738] 8021q: adding VLAN 0 to HW filter on device bond4 [ 470.869560][T20745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4620'. [ 470.872586][T20638] veth0_vlan: entered promiscuous mode [ 470.874669][T20745] netlink: 40 bytes leftover after parsing attributes in process `syz.5.4620'. [ 470.898045][T20638] veth1_vlan: entered promiscuous mode [ 470.933294][ T5734] Bluetooth: hci1: command tx timeout [ 470.984949][ T7838] IPVS: stop unused estimator thread 0... [ 470.985136][T20638] veth0_macvtap: entered promiscuous mode [ 471.006952][T20638] veth1_macvtap: entered promiscuous mode [ 471.122643][T10870] usb 10-1: new high-speed USB device number 34 using dummy_hcd [ 471.123899][T20638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.138634][T20638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.264942][ T5811] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.271700][ T5811] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.284965][ T8058] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.307487][ T8058] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.530666][T10870] usb 10-1: config 1 has an invalid interface number: 7 but max is 0 [ 471.547251][T10870] usb 10-1: config 1 has no interface number 0 [ 471.549710][T10870] usb 10-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 471.562034][T10870] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 471.566504][ T42] audit: type=1326 audit(1783516492.459:28297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20753 comm="syz.7.4624" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc0d8b9de59 code=0x0 [ 471.577407][T10870] usb 10-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 16 [ 471.586477][T10870] usb 10-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 471.606915][T10870] usb 10-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 471.611306][T10870] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.622214][T14108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.625926][T14108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.630132][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 471.634940][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 471.637000][T10870] usb 10-1: Product: syz [ 471.639199][T10870] usb 10-1: Manufacturer: syz [ 471.641224][T10870] usb 10-1: SerialNumber: syz [ 471.681970][ T42] audit: type=1400 audit(1783516492.569:28298): avc: denied { mounton } for pid=20638 comm="syz-executor" path="/syzkaller.8JI41O/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 471.699125][T20745] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.710451][T20745] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 471.720194][ T42] audit: type=1400 audit(1783516492.599:28299): avc: denied { mounton } for pid=20638 comm="syz-executor" path="/syzkaller.8JI41O/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 471.739604][ T42] audit: type=1400 audit(1783516492.609:28300): avc: denied { mounton } for pid=20638 comm="syz-executor" path="/syzkaller.8JI41O/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=116087 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 471.776384][ T42] audit: type=1400 audit(1783516492.669:28301): avc: denied { mounton } for pid=20638 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2838 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 471.805976][ T42] audit: type=1400 audit(1783516492.699:28302): avc: denied { mounton } for pid=20638 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 471.970567][ T42] audit: type=1400 audit(1783516492.859:28303): avc: denied { remount } for pid=20758 comm="syz.6.4598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 472.081741][T20745] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 472.104958][T20745] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 472.284171][T20764] netlink: 'syz.1.4626': attribute type 1 has an invalid length. [ 472.302278][T20764] 8021q: adding VLAN 0 to HW filter on device bond5 [ 472.315128][T10870] usb 10-1: Incompatible driver and firmware versions [ 472.402496][ T34] usb 11-1: new high-speed USB device number 31 using dummy_hcd [ 472.516192][ T5914] usb 10-1: USB disconnect, device number 34 [ 472.548957][T20772] netlink: 136 bytes leftover after parsing attributes in process `syz.1.4629'. [ 472.554078][ T34] usb 11-1: Using ep0 maxpacket: 16 [ 472.558351][ T34] usb 11-1: unable to get BOS descriptor or descriptor too short [ 472.564033][ T34] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 472.568468][ T34] usb 11-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 472.575476][ T34] usb 11-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 472.579269][ T34] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.583108][ T34] usb 11-1: Product: syz [ 472.584635][ T34] usb 11-1: Manufacturer: syz [ 472.586304][ T34] usb 11-1: SerialNumber: syz [ 472.806555][T20762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 472.813600][T20762] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 473.012587][ T5734] Bluetooth: hci1: command tx timeout [ 473.073949][ T34] usb 11-1: Audio class v2/v3 interfaces need an interface association [ 473.444112][ T34] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 473.564453][ T34] usb 11-1: USB disconnect, device number 31 [ 473.607040][T18520] udevd[18520]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 473.627048][T20789] netlink: 'syz.1.4635': attribute type 1 has an invalid length. [ 473.708351][T20795] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4638'. [ 473.748056][T20789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 473.819402][T20798] syzkaller0: entered promiscuous mode [ 473.821688][T20798] syzkaller0: entered allmulticast mode [ 474.294874][ T34] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 474.444585][ T34] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 474.449509][ T34] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 474.454625][ T34] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 474.458658][ T34] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 474.466515][T20802] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 474.474239][ T34] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 474.681410][ T34] usb 6-1: USB disconnect, device number 61 [ 475.755978][ T42] audit: type=1400 audit(1783516496.649:28304): avc: denied { connect } for pid=20816 comm="syz.5.4646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 475.790274][ T42] audit: type=1400 audit(1783516496.679:28305): avc: denied { bind } for pid=20820 comm="syz.5.4648" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 475.823268][ T42] audit: type=1400 audit(1783516496.699:28306): avc: denied { ioctl } for pid=20815 comm="syz.7.4645" path="socket:[114384]" dev="sockfs" ino=114384 ioctlcmd=0x8b27 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 475.883557][T20825] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4647'. [ 476.043109][T20832] netlink: 'syz.6.4651': attribute type 1 has an invalid length. [ 476.052294][T20824] xfrm0 speed is unknown, defaulting to 1000 [ 476.269479][T20836] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4652'. [ 476.757498][T20845] sctp: [Deprecated]: syz.5.4655 (pid 20845) Use of int in max_burst socket option deprecated. [ 476.757498][T20845] Use struct sctp_assoc_value instead [ 476.870094][T20847] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 477.857971][T20862] netlink: 136 bytes leftover after parsing attributes in process `syz.6.4661'. [ 478.357660][ T42] audit: type=1800 audit(1783516499.249:28307): pid=20869 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.4664" name="file0" dev="overlay" ino=103 res=0 errno=0 [ 478.490092][ T42] audit: type=1400 audit(1783516499.379:28308): avc: denied { read } for pid=20873 comm="syz.1.4666" lport=255 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 479.899899][T20892] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4672'. [ 479.908258][T20892] tc_dump_action: action bad kind [ 479.976315][ T42] audit: type=1400 audit(1783516500.869:28309): avc: denied { getopt } for pid=20897 comm="syz.5.4675" lport=34540 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 480.199845][ T42] audit: type=1800 audit(1783516501.089:28310): pid=20905 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4676" name="file0" dev="overlay" ino=2233 res=0 errno=0 [ 480.275194][T20909] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4679'. [ 480.281714][T20909] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 480.433601][T20915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4682'. [ 480.441802][T20915] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4682'. [ 480.455250][T20915] dummy0: entered promiscuous mode [ 480.466033][T20915] bond0: entered promiscuous mode [ 480.467731][T20915] bond_slave_0: entered promiscuous mode [ 480.469723][T20915] bond_slave_1: entered promiscuous mode [ 480.476496][T20915] debugfs: 'hsr1' already exists in 'hsr' [ 480.478353][T20915] Cannot create hsr debugfs directory [ 480.529067][T20920] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4683'. [ 480.532043][T20920] tc_dump_action: action bad kind [ 480.753244][T10750] usb 10-1: new high-speed USB device number 35 using dummy_hcd [ 480.899100][T20928] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 480.930650][T20930] netlink: 'syz.1.4687': attribute type 10 has an invalid length. [ 480.934043][T20930] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4687'. [ 480.982762][T10750] usb 10-1: Using ep0 maxpacket: 16 [ 481.001884][T10750] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 481.008712][T10750] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 481.013947][T10750] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.027436][T10750] usb 10-1: config 0 descriptor?? [ 481.041713][T10750] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 482.208901][T20943] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4692'. [ 482.218899][T20945] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4693'. [ 482.224258][T20945] tc_dump_action: action bad kind [ 482.267010][ T42] audit: type=1400 audit(1783516503.159:28311): avc: denied { shutdown } for pid=20948 comm="syz.7.4696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 482.275425][ T42] audit: type=1400 audit(1783516503.169:28312): avc: denied { ioctl } for pid=20950 comm="syz.6.4695" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 482.693077][ T5820] IPVS: starting estimator thread 0... [ 482.782506][T20962] IPVS: using max 34 ests per chain, 81600 per kthread [ 483.336240][T20976] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4704'. [ 483.414740][T20978] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4705'. [ 483.417714][T20978] tc_dump_action: action bad kind [ 483.685955][ T5813] usb 10-1: USB disconnect, device number 35 [ 483.779171][ T42] audit: type=1400 audit(1783516504.669:28313): avc: denied { read write } for pid=20984 comm="syz.5.4709" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 483.794075][ T42] audit: type=1400 audit(1783516504.669:28314): avc: denied { open } for pid=20984 comm="syz.5.4709" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 483.795084][T20985] fuse: Unknown parameter 'user_id00000000000000000000' [ 483.890276][ T42] audit: type=1400 audit(1783516504.779:28315): avc: denied { ioctl } for pid=20984 comm="syz.5.4709" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 485.341327][T20996] netlink: 220 bytes leftover after parsing attributes in process `syz.7.4714'. [ 485.345531][T20996] tc_dump_action: action bad kind [ 485.379972][T21000] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 485.980222][T21022] trusted_key: encrypted_key: insufficient parameters specified [ 486.531966][T21028] netlink: 220 bytes leftover after parsing attributes in process `syz.1.4724'. [ 486.537358][T21028] tc_dump_action: action bad kind [ 486.565301][T21032] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4726'. [ 486.678067][T21043] netlink: 'syz.1.4731': attribute type 1 has an invalid length. [ 486.697946][T21043] 8021q: adding VLAN 0 to HW filter on device bond7 [ 486.721566][T21043] vlan3: entered allmulticast mode [ 486.726271][T21043] bond7: entered allmulticast mode [ 486.738205][T21051] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4735'. [ 486.741109][T21051] tc_dump_action: action bad kind [ 486.797520][T21056] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4737'. [ 487.143021][T10750] usb 12-1: new high-speed USB device number 20 using dummy_hcd [ 487.332190][T10750] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.341530][T10750] usb 12-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 487.350911][T10750] usb 12-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 487.354353][T10750] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 487.357007][T10750] usb 12-1: SerialNumber: syz [ 487.458715][ T42] audit: type=1400 audit(1783516508.349:28316): avc: denied { ioctl } for pid=21074 comm="syz.6.4746" path="socket:[116611]" dev="sockfs" ino=116611 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 487.490887][T21077] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4747'. [ 487.614254][T21086] fuse: Bad value for 'rootmode' [ 487.658558][T10750] usb 12-1: 0:2 : does not exist [ 487.667567][T10750] usb 12-1: unit 4 not found! [ 487.772678][ T5813] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 487.782649][T10750] usb 12-1: USB disconnect, device number 20 [ 487.882558][ T5828] usb 11-1: new high-speed USB device number 32 using dummy_hcd [ 487.922541][ T5813] usb 6-1: Using ep0 maxpacket: 32 [ 487.926847][ T5813] usb 6-1: unable to get BOS descriptor or descriptor too short [ 487.931144][ T5813] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 7 [ 487.939003][ T5813] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 218, changing to 7 [ 487.948242][ T5813] usb 6-1: New USB device found, idVendor=18d1, idProduct=2d05, bcdDevice= 0.40 [ 487.951665][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.956593][ T5813] usb 6-1: Product: æƒá©‰â< [ 487.958644][ T5813] usb 6-1: SerialNumber: syz [ 488.033267][ T5828] usb 11-1: Using ep0 maxpacket: 16 [ 488.036853][ T5828] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 488.040906][ T5828] usb 11-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 488.044877][ T5828] usb 11-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 488.048366][ T5828] usb 11-1: config 1 interface 1 has no altsetting 0 [ 488.053533][ T5828] usb 11-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 488.056638][ T5828] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.059439][ T5828] usb 11-1: Product: syz [ 488.060976][ T5828] usb 11-1: Manufacturer: syz [ 488.063102][ T5828] usb 11-1: SerialNumber: syz [ 488.064806][T21092] mac80211_hwsim hwsim30 syzkaller0: entered promiscuous mode [ 488.068089][T21092] mac80211_hwsim hwsim30 syzkaller0: entered allmulticast mode [ 488.159623][T21098] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4756'. [ 488.179619][ T5813] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 488.185002][ T5813] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 488.220956][ T5813] usb 6-1: USB disconnect, device number 62 [ 488.275613][T21086] netlink: 'syz.6.4751': attribute type 1 has an invalid length. [ 488.296051][T21086] 8021q: adding VLAN 0 to HW filter on device bond1 [ 488.304312][T21086] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4751'. [ 488.312244][ T5828] usb 11-1: selecting invalid altsetting 0 [ 488.333260][ T5828] usb 11-1: USB disconnect, device number 32 [ 488.448018][T18520] udevd[18520]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 488.558007][T18119] udevd[18119]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 489.562207][T21124] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 490.006136][ T42] audit: type=1400 audit(1783516510.899:28317): avc: denied { accept } for pid=21133 comm="syz.6.4770" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 490.040637][T21135] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 490.045855][T21135] IPv6: NLM_F_CREATE should be set when creating new route [ 490.146344][T21138] overlayfs: failed to verify origin (49/file1, ino=316, err=-116) [ 490.150196][T21138] overlayfs: failed to verify origin (49/file1, ino=316, err=-116) [ 490.473210][T21146] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4773'. [ 490.476266][T21146] tc_dump_action: action bad kind [ 490.573357][T21149] CIFS: VFS: UNC: missing share name [ 490.576036][T21149] CIFS: VFS: Malformed UNC in devname [ 490.601062][ T42] audit: type=1400 audit(1783516511.469:28318): avc: denied { append } for pid=21147 comm="syz.6.4774" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 491.175360][ T42] audit: type=1400 audit(1783516512.069:28319): avc: denied { write } for pid=21150 comm="syz.7.4775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 492.011416][ T42] audit: type=1400 audit(1783516512.899:28320): avc: denied { read } for pid=21157 comm="syz.6.4777" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 492.037269][ T42] audit: type=1400 audit(1783516512.899:28321): avc: denied { open } for pid=21157 comm="syz.6.4777" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 492.068575][ T42] audit: type=1400 audit(1783516512.929:28322): avc: denied { ioctl } for pid=21157 comm="syz.6.4777" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d08 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 492.103631][T21166] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4783'. [ 492.107955][T21166] tc_dump_action: action bad kind [ 492.129011][T21172] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4782'. [ 492.150437][T21174] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 492.151444][T21176] netlink: 'syz.1.4786': attribute type 1 has an invalid length. [ 492.185523][T21176] 8021q: adding VLAN 0 to HW filter on device bond8 [ 492.211704][T21176] bond8: (slave geneve3): making interface the new active one [ 492.222186][T21176] bond8: (slave geneve3): Enslaving as an active interface with an up link [ 493.350406][T21203] netlink: 220 bytes leftover after parsing attributes in process `syz.6.4794'. [ 493.362735][T21203] tc_dump_action: action bad kind [ 493.702648][ T5828] usb 12-1: new high-speed USB device number 21 using dummy_hcd [ 493.879525][ T5828] usb 12-1: Using ep0 maxpacket: 8 [ 493.884578][ T5828] usb 12-1: config 0 has an invalid interface number: 200 but max is 0 [ 493.890736][ T5828] usb 12-1: config 0 has no interface number 0 [ 493.896694][ T5828] usb 12-1: config 0 interface 200 altsetting 2 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 493.902567][ T5828] usb 12-1: config 0 interface 200 altsetting 2 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 493.907792][ T5828] usb 12-1: config 0 interface 200 has no altsetting 0 [ 493.914685][ T5828] usb 12-1: New USB device found, idVendor=0b57, idProduct=8528, bcdDevice=6d.39 [ 493.918622][ T5828] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.921992][ T5828] usb 12-1: Product: syz [ 493.923854][ T5828] usb 12-1: Manufacturer: syz [ 493.925831][ T5828] usb 12-1: SerialNumber: syz [ 493.931073][ T5828] usb 12-1: config 0 descriptor?? [ 494.177203][ T5828] input: Hanwang Art Master III 0906 as /devices/platform/dummy_hcd.7/usb12/12-1/12-1:0.200/input/input49 [ 494.185188][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.188500][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.191807][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.195281][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.198559][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.201818][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.205117][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.209243][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.212980][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.216485][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.219736][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.223337][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.226560][ C2] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.229710][ C2] usb 12-1: hanwang_irq - usb_submit_urb failed with result -1 [ 494.236791][ C1] usb 12-1: hanwang_irq - nonzero urb status received: -71 [ 494.236933][ T5828] usb 12-1: USB disconnect, device number 21 [ 494.239566][ C1] usb 12-1: hanwang_irq - usb_submit_urb failed with result -19 [ 494.495970][T21228] netlink: 216 bytes leftover after parsing attributes in process `syz.6.4803'. [ 494.498861][T21228] tc_dump_action: action bad kind [ 495.830482][T21250] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4812'. [ 495.833508][T21250] tc_dump_action: action bad kind [ 495.875270][T21255] netlink: 'syz.1.4813': attribute type 1 has an invalid length. [ 495.902573][T21258] netlink: 'syz.7.4814': attribute type 1 has an invalid length. [ 495.932014][T21255] 8021q: adding VLAN 0 to HW filter on device bond9 [ 495.982899][T21260] bond5: (slave geneve3): making interface the new active one [ 495.986205][T21260] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 495.996172][T21258] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4814'. [ 496.002097][T21255] vlan4: entered allmulticast mode [ 496.004302][T21255] bond9: entered allmulticast mode [ 496.009797][ T7844] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 496.014801][T21258] bond5: entered promiscuous mode [ 496.018761][T21258] geneve3: entered promiscuous mode [ 496.020974][T21258] bond5: entered allmulticast mode [ 496.023104][T21258] geneve3: entered allmulticast mode [ 496.027881][T21258] 8021q: adding VLAN 0 to HW filter on device bond5 [ 496.046184][ T7844] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 496.049954][ T7844] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 496.062797][T21258] tipc: Resetting bearer [ 496.089433][ T7844] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 496.122582][T10870] usb 11-1: new high-speed USB device number 33 using dummy_hcd [ 496.282519][T10870] usb 11-1: Using ep0 maxpacket: 8 [ 496.285475][T10870] usb 11-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 496.288401][T10870] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 496.291980][T10870] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 496.296353][T10870] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 496.301325][T10870] usb 11-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 496.304299][ T64] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 496.304502][T10870] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.309688][ T64] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 496.310071][T10870] usb 11-1: Product: syz [ 496.310082][T10870] usb 11-1: Manufacturer: syz [ 496.310090][T10870] usb 11-1: SerialNumber: syz [ 496.323546][ T64] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 496.324808][T10870] usb 11-1: config 0 descriptor?? [ 496.329216][T21253] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 496.329827][ T64] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 496.336792][ T64] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 496.549904][T10870] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 496.556432][T10870] input: Griffin SoundKnob as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input50 [ 496.629831][T21270] xfrm0 speed is unknown, defaulting to 1000 [ 496.666505][ T42] audit: type=1800 audit(1783516517.559:28323): pid=21281 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4819" name="file0" dev="overlay" ino=1084 res=0 errno=0 [ 496.771365][ C0] powermate: config urb returned -71 [ 496.772585][ T5841] usb 11-1: USB disconnect, device number 33 [ 496.773162][ C0] powermate: usb_submit_urb(config) failed [ 496.773188][ C0] powermate 11-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 497.639074][ T8058] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.670436][T21293] netlink: 'syz.6.4823': attribute type 1 has an invalid length. [ 497.796966][T21293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 497.809094][T21294] vlan2: entered allmulticast mode [ 497.811293][T21294] bond2: entered allmulticast mode [ 497.913099][ T5828] usb 10-1: new high-speed USB device number 36 using dummy_hcd [ 498.054390][T21290] bond2: (slave geneve2): making interface the new active one [ 498.057932][T21290] geneve2: entered allmulticast mode [ 498.072518][ T5828] usb 10-1: Using ep0 maxpacket: 8 [ 498.075775][ T5828] usb 10-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 498.079426][ T5828] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 498.082954][ T5828] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 498.083045][T21290] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 498.089165][ T5828] usb 10-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 498.100762][ T5828] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.109627][ T5828] usb 10-1: Product: syz [ 498.111032][ T5828] usb 10-1: Manufacturer: syz [ 498.112685][ T5828] usb 10-1: SerialNumber: syz [ 498.118382][ T5828] usb 10-1: config 0 descriptor?? [ 498.226829][ T8058] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.299250][T21304] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4826'. [ 498.311969][T21304] hsr_slave_1 (unregistering): left promiscuous mode [ 498.330135][ T34] usb 10-1: USB disconnect, device number 36 [ 498.358257][ T8058] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.382854][ T5734] Bluetooth: hci0: command tx timeout [ 498.463875][T21310] netlink: 160 bytes leftover after parsing attributes in process `syz.6.4828'. [ 498.494442][ T8058] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.517577][T21314] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 498.521752][T21270] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.521841][T21270] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.521923][T21270] bridge_slave_0: entered allmulticast mode [ 498.522802][T21270] bridge_slave_0: entered promiscuous mode [ 498.532762][T21270] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.537128][T21270] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.539480][T21270] bridge_slave_1: entered allmulticast mode [ 498.542467][T21270] bridge_slave_1: entered promiscuous mode [ 498.561419][T21270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.566692][T21270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.597481][T21270] team0: Port device team_slave_0 added [ 498.603261][T21270] team0: Port device team_slave_1 added [ 498.618643][T21270] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.620962][T21270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.629112][T21270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.633958][T21270] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.636209][T21270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 498.645775][T21270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.678450][T21270] hsr_slave_0: entered promiscuous mode [ 498.680844][T21270] hsr_slave_1: entered promiscuous mode [ 498.683265][T21270] debugfs: 'hsr0' already exists in 'hsr' [ 498.685147][T21270] Cannot create hsr debugfs directory [ 498.799119][T21322] netlink: 'syz.6.4830': attribute type 1 has an invalid length. [ 499.719892][ T8058] team0: Port device xfrm0 removed [ 499.809987][ T8058] bond8 (unregistering): (slave geneve3): Releasing active interface [ 499.830524][ T8058] bond2 (unregistering): (slave geneve2): Releasing active interface [ 499.833768][ T8058] geneve2 (unregistering): left allmulticast mode [ 499.870626][ T8058] bond0 (unregistering): Released all slaves [ 499.879312][ T8058] bond1 (unregistering): Released all slaves [ 499.904547][ T8058] bond2 (unregistering): Released all slaves [ 499.922270][ T8058] bond3 (unregistering): Released all slaves [ 499.938430][ T8058] bond4 (unregistering): Released all slaves [ 499.969389][ T8058] bond5 (unregistering): Released all slaves [ 499.989651][ T8058] bond6 (unregistering): Released all slaves [ 500.003834][ T8058] bond7 (unregistering): Released all slaves [ 500.011979][ T8058] bond8 (unregistering): Released all slaves [ 500.021753][T21338] xt_hashlimit: size too large, truncated to 1048576 [ 500.051143][ T8058] bond9 (unregistering): Released all slaves [ 500.087356][ T9228] tipc: Resetting bearer [ 500.206827][ T42] audit: type=1400 audit(1783516521.099:28324): avc: denied { write } for pid=21350 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.290945][ T42] audit: type=1400 audit(1783516521.169:28325): avc: denied { write } for pid=21355 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.342113][ T8058] tipc: Disabling bearer [ 500.361684][ T8058] tipc: Left network mode [ 500.363413][ T5443] 8021q: adding VLAN 0 to HW filter on device eth10 [ 500.382539][ T5820] usb 12-1: new high-speed USB device number 22 using dummy_hcd [ 500.445888][ T42] audit: type=1400 audit(1783516521.339:28326): avc: denied { write } for pid=21361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.502597][ T5734] Bluetooth: hci0: command tx timeout [ 500.522099][ T8058] IPVS: stopping backup sync thread 18082 ... [ 500.548560][ T5820] usb 12-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 500.552377][ T5820] usb 12-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 500.555900][ T42] audit: type=1400 audit(1783516521.449:28327): avc: denied { write } for pid=21365 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 500.563991][ T5820] usb 12-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 500.568875][ T5820] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.577267][T21348] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22 [ 500.581312][ T5820] usb 12-1: Quirk or no altset; falling back to MIDI 1.0 [ 501.294301][T21373] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 501.312137][T21373] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 501.329124][ T42] audit: type=1400 audit(1783516522.219:28328): avc: denied { write } for pid=21375 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.338998][ T34] usb 12-1: USB disconnect, device number 22 [ 501.405860][ T42] audit: type=1400 audit(1783516522.299:28329): avc: denied { write } for pid=21378 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.531792][ T8058] veth1_macvtap: left promiscuous mode [ 501.535453][ T8058] veth0_macvtap: left promiscuous mode [ 501.537365][ T8058] veth1_vlan: left promiscuous mode [ 501.539228][ T8058] veth0_vlan: left promiscuous mode [ 501.545058][ T42] audit: type=1400 audit(1783516522.439:28330): avc: denied { write } for pid=21384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.599438][ T42] audit: type=1400 audit(1783516522.489:28331): avc: denied { write } for pid=21389 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 501.758409][ T5847] usb 10-1: new high-speed USB device number 37 using dummy_hcd [ 501.906744][T21270] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.912747][ T5847] usb 10-1: Using ep0 maxpacket: 16 [ 501.912790][T21270] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 501.917830][T21270] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.918617][ T5847] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 501.927128][ T5847] usb 10-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 501.928075][T21270] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 501.930995][ T5847] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 501.936094][T21270] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.939549][ T5847] usb 10-1: config 0 descriptor?? [ 501.943775][T21270] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 501.945169][ T5847] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 501.949072][T21270] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.959248][T21270] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 502.066918][T21270] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.081124][T21270] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.089177][ T9238] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.092236][ T9238] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.107548][ T9228] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.110675][ T9228] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.178422][T21409] xfrm0 speed is unknown, defaulting to 1000 [ 502.374739][ T8058] IPVS: stop unused estimator thread 0... [ 502.519974][T21270] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.532716][ T5734] Bluetooth: hci0: command tx timeout [ 502.558425][T21270] veth0_vlan: entered promiscuous mode [ 502.570220][T21270] veth1_vlan: entered promiscuous mode [ 502.591549][T21270] veth0_macvtap: entered promiscuous mode [ 502.596239][T21270] veth1_macvtap: entered promiscuous mode [ 502.604701][T21270] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.615164][T21270] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.622193][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.625081][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.628742][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.631604][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.738540][ T228] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.745468][ T228] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.776249][T14097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.779733][T14097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.867005][T21432] xt_hashlimit: size too large, truncated to 1048576 [ 503.003316][ T42] audit: type=1400 audit(1783516523.889:28332): avc: denied { mounton } for pid=21439 comm="syz.7.4857" path="/453/file0" dev="tmpfs" ino=2439 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 503.962041][T21456] netlink: 'syz.1.4864': attribute type 1 has an invalid length. [ 503.975792][T21456] vlan2: entered allmulticast mode [ 503.977567][T21456] batadv0: entered allmulticast mode [ 504.067411][T21458] xt_hashlimit: size too large, truncated to 1048576 [ 504.071766][T21456] batman_adv: batadv0: Adding interface: geneve2 [ 504.075130][T21456] batman_adv: batadv0: Not using interface geneve2 (retrying later): interface not active [ 504.409261][T21479] xt_hashlimit: size too large, truncated to 1048576 [ 504.521960][ T5841] usb 10-1: USB disconnect, device number 37 [ 504.614052][ T5734] Bluetooth: hci0: command tx timeout [ 504.655241][ T42] audit: type=1400 audit(1783516525.549:28333): avc: denied { bind } for pid=21490 comm="syz.5.4878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 505.303028][ T5813] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 505.462540][ T5813] usb 6-1: Using ep0 maxpacket: 8 [ 505.465845][ T5813] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 505.468730][ T5813] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 505.472854][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 505.477255][ T5813] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 505.491357][ T5813] usb 6-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 505.497248][ T5813] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.500754][ T5813] usb 6-1: Product: syz [ 505.503164][ T5813] usb 6-1: Manufacturer: syz [ 505.506202][ T5813] usb 6-1: SerialNumber: syz [ 505.516578][ T5813] usb 6-1: config 0 descriptor?? [ 505.523070][T21504] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 505.739018][ T5813] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 505.758227][ T5813] input: Griffin SoundKnob as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input54 [ 505.900215][T21519] netlink: 'syz.6.4889': attribute type 1 has an invalid length. [ 505.942158][ C2] powermate: config urb returned -71 [ 505.943027][ T5914] usb 6-1: USB disconnect, device number 63 [ 505.944405][ C2] powermate: usb_submit_urb(config) failed [ 505.948581][ C2] powermate 6-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 506.145346][T21519] 8021q: adding VLAN 0 to HW filter on device bond3 [ 506.170608][T21522] vlan3: entered allmulticast mode [ 506.173255][T21522] bond3: entered allmulticast mode [ 506.723954][T21535] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 506.726441][T21535] IPv6: NLM_F_CREATE should be set when creating new route [ 506.768763][T21537] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 506.784885][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.788557][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.935502][T21543] netlink: 'syz.7.4898': attribute type 1 has an invalid length. [ 507.053488][ T42] audit: type=1400 audit(1783516527.949:28334): avc: denied { watch watch_reads } for pid=21550 comm="syz.5.4900" path="pipe:[121264]" dev="pipefs" ino=121264 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 507.241019][T21543] 8021q: adding VLAN 0 to HW filter on device bond6 [ 507.300285][T21549] vlan4: entered allmulticast mode [ 507.302110][T21549] bond6: entered allmulticast mode [ 507.708472][ T5914] IPVS: starting estimator thread 0... [ 507.802693][T21571] IPVS: using max 26 ests per chain, 62400 per kthread [ 507.924093][T21581] netlink: 'syz.6.4910': attribute type 1 has an invalid length. [ 507.946174][T21581] 8021q: adding VLAN 0 to HW filter on device bond4 [ 507.961026][T21581] vlan4: entered allmulticast mode [ 507.963308][T21581] bond4: entered allmulticast mode [ 508.349516][T21600] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 508.391846][ T42] audit: type=1800 audit(1783516529.279:28335): pid=21598 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4917" name="file0" dev="overlay" ino=2522 res=0 errno=0 [ 508.586915][T21604] futex_wake_op: syz.7.4920 tries to shift op by 144; fix this program [ 508.590794][T21604] futex_wake_op: syz.7.4920 tries to shift op by 144; fix this program [ 508.638978][T21606] netlink: 'syz.6.4921': attribute type 1 has an invalid length. [ 508.684856][T21606] 8021q: adding VLAN 0 to HW filter on device bond5 [ 508.706445][T21606] vlan5: entered allmulticast mode [ 508.711531][T21606] bond5: entered allmulticast mode [ 509.018723][T21616] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4919'. [ 509.348477][T21625] overlayfs: failed to resolve './file2': -2 [ 509.444740][T21635] netlink: 'syz.5.4931': attribute type 1 has an invalid length. [ 509.495251][T21635] 8021q: adding VLAN 0 to HW filter on device bond3 [ 509.498464][T21641] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4933'. [ 509.508386][T21642] vlan3: entered allmulticast mode [ 509.510131][T21642] bond3: entered allmulticast mode [ 509.585458][T21646] xfrm0 speed is unknown, defaulting to 1000 [ 510.462734][ T2110] usb 6-1: new full-speed USB device number 64 using dummy_hcd [ 510.467128][T21663] overlayfs: failed to resolve './file2': -2 [ 510.618610][ T2110] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 510.629030][ T2110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 510.636826][ T2110] usb 6-1: Product: syz [ 510.638257][ T2110] usb 6-1: Manufacturer: syz [ 510.639778][ T2110] usb 6-1: SerialNumber: syz [ 510.645570][ T2110] usb 6-1: config 0 descriptor?? [ 510.647394][T21665] netlink: 52 bytes leftover after parsing attributes in process `syz.5.4942'. [ 510.784463][T21671] netlink: 'syz.7.4944': attribute type 1 has an invalid length. [ 510.817047][T21671] 8021q: adding VLAN 0 to HW filter on device bond7 [ 510.856970][ T2110] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 510.890067][T21671] vlan5: entered allmulticast mode [ 510.902494][T21671] bond7: entered allmulticast mode [ 511.771206][T21696] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 511.775637][T21696] netdevsim netdevsim5 netdevsim0: entered allmulticast mode [ 512.082162][ T42] audit: type=1400 audit(1783516532.969:28336): avc: denied { getopt } for pid=21704 comm="syz.7.4956" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 512.119705][T21707] netlink: 'syz.7.4957': attribute type 1 has an invalid length. [ 512.165471][T21707] 8021q: adding VLAN 0 to HW filter on device bond8 [ 512.181081][T21707] vlan6: entered allmulticast mode [ 512.182975][T21707] bond8: entered allmulticast mode [ 512.531097][T21719] xt_hashlimit: size too large, truncated to 1048576 [ 512.609764][ T2110] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 512.617468][ T2110] usb 6-1: USB disconnect, device number 64 [ 512.653105][ T5813] usb 11-1: new high-speed USB device number 34 using dummy_hcd [ 512.802864][ T5813] usb 11-1: Using ep0 maxpacket: 16 [ 512.807205][ T5813] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 512.812276][ T5813] usb 11-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 512.816488][ T5813] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.825706][ T5813] usb 11-1: config 0 descriptor?? [ 512.830958][ T5813] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 513.944567][T21745] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4970'. [ 514.148535][T21750] xt_hashlimit: size too large, truncated to 1048576 [ 514.507919][ T42] audit: type=1400 audit(1783516535.399:28337): avc: denied { getopt } for pid=21757 comm="syz.1.4974" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 515.484614][ T34] usb 11-1: USB disconnect, device number 34 [ 515.489391][ T42] audit: type=1800 audit(1783516536.379:28338): pid=21765 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.4975" name="file0" dev="overlay" ino=1321 res=0 errno=0 [ 515.628536][T21769] overlayfs: failed to resolve './bus': -2 [ 516.864949][ T42] audit: type=1400 audit(1783516537.759:28339): avc: denied { ioctl } for pid=21797 comm="syz.6.4988" path="/dev/rtc0" dev="devtmpfs" ino=945 ioctlcmd=0x7004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 516.930883][T21800] overlayfs: failed to resolve './bus': -2 [ 517.489030][ T42] audit: type=1800 audit(1783516538.319:28340): pid=21813 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.4993" name="file0" dev="overlay" ino=2686 res=0 errno=0 [ 518.346266][T21821] xfrm0 speed is unknown, defaulting to 1000 [ 519.450803][T21839] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 520.557043][ T42] audit: type=1400 audit(1783516541.439:28341): avc: denied { link } for pid=21842 comm="syz.7.5004" name="#df" dev="tmpfs" ino=2722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 520.589116][ T42] audit: type=1400 audit(1783516541.469:28342): avc: denied { rename } for pid=21842 comm="syz.7.5004" name="#e0" dev="tmpfs" ino=2722 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 521.423506][ T42] audit: type=1400 audit(1783516542.319:28343): avc: denied { setattr } for pid=21870 comm="syz.1.5014" name="NETLINK" dev="sockfs" ino=123282 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 521.633507][T21879] vivid-000: disconnect [ 521.782719][T10750] usb 6-1: new high-speed USB device number 65 using dummy_hcd [ 521.912629][ T9] usb 11-1: new high-speed USB device number 35 using dummy_hcd [ 521.962502][T10750] usb 6-1: Using ep0 maxpacket: 16 [ 521.969365][T10750] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 521.974208][T10750] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 521.977971][T10750] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.988844][T10750] usb 6-1: config 0 descriptor?? [ 522.012668][T10750] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 522.083867][ T9] usb 11-1: Using ep0 maxpacket: 16 [ 522.129034][ T9] usb 11-1: unable to get BOS descriptor or descriptor too short [ 522.201516][ T5813] usb 6-1: USB disconnect, device number 65 [ 522.210355][ T9] usb 11-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 522.300319][ T9] usb 11-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 522.303805][ T9] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.306423][ T9] usb 11-1: Product: à „ [ 522.307823][ T9] usb 11-1: Manufacturer: à°„ [ 522.309372][ T9] usb 11-1: SerialNumber: ã€êšœë¢³éƒë ˆé–倲냞ã°ÎŒî¿Šá‰®âˆ¯îšé·Žæ£„ﹾ⊤旕욞 [ 522.397972][ T42] audit: type=1400 audit(1783516543.289:28344): avc: denied { write } for pid=21891 comm="syz.7.5022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 522.603281][ T42] audit: type=1400 audit(1783516543.489:28345): avc: denied { read } for pid=21891 comm="syz.7.5022" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 522.612689][ T42] audit: type=1400 audit(1783516543.489:28346): avc: denied { open } for pid=21891 comm="syz.7.5022" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 522.620895][ T42] audit: type=1400 audit(1783516543.499:28347): avc: denied { ioctl } for pid=21891 comm="syz.7.5022" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 522.628960][ T42] audit: type=1400 audit(1783516543.509:28348): avc: denied { accept } for pid=21891 comm="syz.7.5022" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 523.010180][T21901] xfrm0 speed is unknown, defaulting to 1000 [ 523.235980][T21907] netlink: 132 bytes leftover after parsing attributes in process `syz.7.5027'. [ 523.296543][ T42] audit: type=1800 audit(1783516544.189:28349): pid=21909 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5028" name="file0" dev="overlay" ino=2767 res=0 errno=0 [ 523.372713][T21879] vivid-000: reconnect [ 523.396726][ T9] usb 11-1: Audio class v2/v3 interfaces need an interface association [ 523.464696][ T9] snd-usb-audio 11-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 523.474551][ T9] usb 11-1: USB disconnect, device number 35 [ 523.494998][T18520] udevd[18520]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 524.152669][ T42] audit: type=1400 audit(1783516545.039:28350): avc: denied { firmware_load } for pid=21936 comm="syz.5.5040" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 524.242501][ T5828] usb 6-1: new high-speed USB device number 66 using dummy_hcd [ 524.349549][T21949] xfrm0 speed is unknown, defaulting to 1000 [ 524.372538][ T5828] usb 6-1: device descriptor read/64, error -71 [ 524.612780][ T5828] usb 6-1: new high-speed USB device number 67 using dummy_hcd [ 524.742556][ T5828] usb 6-1: device descriptor read/64, error -71 [ 524.852879][ T5828] usb usb6-port1: attempt power cycle [ 525.193144][ T5828] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 525.214483][ T5828] usb 6-1: device descriptor read/8, error -71 [ 525.452772][ T5828] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 525.473354][ T5828] usb 6-1: device descriptor read/8, error -71 [ 525.585243][ T5828] usb usb6-port1: unable to enumerate USB device [ 525.646305][ T5914] usb 12-1: new high-speed USB device number 23 using dummy_hcd [ 525.812531][ T5914] usb 12-1: Using ep0 maxpacket: 8 [ 525.816202][ T5914] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 525.818586][ T5914] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 525.821986][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 525.825576][ T5914] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.829149][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.832650][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 525.836226][ T5914] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 525.840132][ T5914] usb 12-1: config 168 interface 0 has no altsetting 0 [ 525.843267][ T5914] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 525.846178][ T5914] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 525.849584][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 525.853215][ T5914] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.856933][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.860477][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 525.864260][ T5914] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 525.868353][ T5914] usb 12-1: config 168 interface 0 has no altsetting 0 [ 525.871056][ T5914] usb 12-1: config 168 descriptor has 1 excess byte, ignoring [ 525.874142][ T5914] usb 12-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 525.878503][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 525.882893][ T5914] usb 12-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 525.887394][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 525.891661][ T5914] usb 12-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 525.895123][ T5914] usb 12-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 525.898883][ T5914] usb 12-1: config 168 interface 0 has no altsetting 0 [ 525.903135][ T5914] usb 12-1: string descriptor 0 read error: -22 [ 525.904995][ T5914] usb 12-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 525.907714][ T5914] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.917033][ T5914] adutux 12-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 526.226703][ T5914] usb 12-1: USB disconnect, device number 23 [ 527.065357][T21976] xfrm0 speed is unknown, defaulting to 1000 [ 527.211991][T21985] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5050'. [ 529.173886][ T34] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 529.312593][ T34] usb 6-1: device descriptor read/64, error -71 [ 529.450853][ T42] kauditd_printk_skb: 1 callbacks suppressed [ 529.450870][ T42] audit: type=1400 audit(1783516550.339:28352): avc: denied { read } for pid=22017 comm="syz.5.5065" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 529.462654][ T42] audit: type=1400 audit(1783516550.339:28353): avc: denied { open } for pid=22017 comm="syz.5.5065" path="/246/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 529.463683][T22022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 529.471517][ T42] audit: type=1400 audit(1783516550.359:28354): avc: denied { ioctl } for pid=22017 comm="syz.5.5065" path="/246/file0/file0" dev="fuse" ino=64 ioctlcmd=0x915 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 529.484873][T22022] IPv6: NLM_F_CREATE should be set when creating new route [ 529.552736][ T34] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 529.683495][ T34] usb 6-1: device descriptor read/64, error -71 [ 529.921659][ T34] usb usb6-port1: attempt power cycle [ 530.302855][ T34] usb 6-1: new high-speed USB device number 72 using dummy_hcd [ 530.326452][ T34] usb 6-1: device descriptor read/8, error -71 [ 530.593592][ T34] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 530.615358][ T34] usb 6-1: device descriptor read/8, error -71 [ 530.725912][ T34] usb usb6-port1: unable to enumerate USB device [ 530.984002][T22035] netlink: 'syz.5.5070': attribute type 1 has an invalid length. [ 531.010360][T22035] 8021q: adding VLAN 0 to HW filter on device bond4 [ 531.025049][T22035] vlan4: entered allmulticast mode [ 531.026729][T22035] bond4: entered allmulticast mode [ 531.108380][T22038] xt_CT: You must specify a L4 protocol and not use inversions on it [ 531.116637][T22038] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5071'. [ 531.625717][T22052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.977097][T22057] netlink: 'syz.1.5079': attribute type 1 has an invalid length. [ 532.004894][T22057] 8021q: adding VLAN 0 to HW filter on device bond1 [ 532.027923][T22057] vlan3: entered allmulticast mode [ 532.030335][T22057] bond1: entered allmulticast mode [ 532.097773][T22060] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 532.552548][ T5847] usb 12-1: new high-speed USB device number 24 using dummy_hcd [ 532.579757][T22081] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 532.692679][ T5847] usb 12-1: device descriptor read/64, error -71 [ 532.962638][ T5847] usb 12-1: new high-speed USB device number 25 using dummy_hcd [ 533.008780][T22083] netlink: 'syz.1.5089': attribute type 1 has an invalid length. [ 533.034174][T22083] 8021q: adding VLAN 0 to HW filter on device bond2 [ 533.056053][T22083] vlan4: entered allmulticast mode [ 533.062438][T22083] bond2: entered allmulticast mode [ 533.107573][ T5847] usb 12-1: device descriptor read/64, error -71 [ 533.232273][ T5847] usb usb12-port1: attempt power cycle [ 533.514972][T22104] netlink: 'syz.6.5098': attribute type 1 has an invalid length. [ 533.552237][T22104] 8021q: adding VLAN 0 to HW filter on device bond6 [ 533.565819][T22104] vlan6: entered allmulticast mode [ 533.568040][T22104] bond6: entered allmulticast mode [ 533.573035][T22096] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 533.722555][ T5847] usb 12-1: new high-speed USB device number 26 using dummy_hcd [ 533.744584][ T5847] usb 12-1: device descriptor read/8, error -71 [ 534.218284][ T5847] usb 12-1: new high-speed USB device number 27 using dummy_hcd [ 534.243106][ T5847] usb 12-1: device descriptor read/8, error -71 [ 534.352765][ T5847] usb usb12-port1: unable to enumerate USB device [ 534.776291][T22128] netlink: 'syz.6.5108': attribute type 1 has an invalid length. [ 534.807535][T22128] 8021q: adding VLAN 0 to HW filter on device bond7 [ 534.811931][T22131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 534.814642][T22131] IPv6: NLM_F_CREATE should be set when creating new route [ 534.820217][T22128] vlan7: entered allmulticast mode [ 534.821842][T22128] bond7: entered allmulticast mode [ 534.981742][T22134] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 535.065711][T22150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5116'. [ 535.725250][T22164] netlink: 'syz.7.5121': attribute type 1 has an invalid length. [ 535.809673][T22164] 8021q: adding VLAN 0 to HW filter on device bond9 [ 535.852095][T22166] vlan7: entered allmulticast mode [ 535.854755][T22166] bond9: entered allmulticast mode [ 536.096201][T22177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5126'. [ 536.234058][T22183] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 536.236536][T22183] IPv6: NLM_F_CREATE should be set when creating new route [ 536.292564][ T5914] usb 11-1: new high-speed USB device number 36 using dummy_hcd [ 536.447159][ T5914] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 536.458234][ T5914] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 536.466508][ T5914] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 536.471372][ T5914] usb 11-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00 [ 536.475058][ T5914] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 536.545493][ T5914] usb 11-1: config 0 descriptor?? [ 536.572721][ T5914] usbhid 11-1:0.0: fixing wrong optional hid class descriptors count [ 536.579391][ T5914] usbhid 11-1:0.0: can't add hid device: -22 [ 536.585998][ T5914] usbhid 11-1:0.0: probe with driver usbhid failed with error -22 [ 536.759920][ T5914] usb 11-1: USB disconnect, device number 36 [ 536.980640][ T42] audit: type=1800 audit(1783516557.869:28355): pid=22201 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5135" name="file0" dev="overlay" ino=2913 res=0 errno=0 [ 537.552950][ T5914] usb 11-1: new high-speed USB device number 37 using dummy_hcd [ 537.729274][ T5914] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.733883][ T5914] usb 11-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 537.737434][ T5914] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.797201][ T5914] usb 11-1: config 0 descriptor?? [ 537.821279][ T5914] pwc: Askey VC010 type 2 USB webcam detected. [ 537.831911][ T42] audit: type=1800 audit(1783516558.719:28356): pid=22222 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.5144" name="file0" dev="overlay" ino=1558 res=0 errno=0 [ 538.177565][T22238] netlink: 'syz.5.5150': attribute type 1 has an invalid length. [ 538.195412][T22238] 8021q: adding VLAN 0 to HW filter on device bond5 [ 538.212189][T22238] vlan5: entered allmulticast mode [ 538.214758][T22238] bond5: entered allmulticast mode [ 538.220314][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00 [ 538.224661][ T5914] pwc: recv_control_msg error -32 req 02 val 2700 [ 538.227667][ T5914] pwc: recv_control_msg error -32 req 02 val 2c00 [ 538.230196][ T5914] pwc: recv_control_msg error -32 req 04 val 1000 [ 538.434399][ T5914] pwc: recv_control_msg error -32 req 04 val 1400 [ 538.439689][ T5914] pwc: recv_control_msg error -32 req 02 val 2000 [ 538.451263][ T5914] pwc: recv_control_msg error -71 req 02 val 2100 [ 538.455147][ T42] audit: type=1800 audit(1783516559.339:28357): pid=22245 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.5154" name="file0" dev="overlay" ino=2958 res=0 errno=0 [ 538.464574][ T5914] pwc: recv_control_msg error -71 req 04 val 1500 [ 538.468451][ T5914] pwc: recv_control_msg error -71 req 02 val 2500 [ 538.470785][ T5914] pwc: recv_control_msg error -71 req 02 val 2400 [ 538.475244][ T5914] pwc: recv_control_msg error -71 req 02 val 2600 [ 538.478231][ T5914] pwc: recv_control_msg error -71 req 02 val 2900 [ 538.496910][ T5914] pwc: recv_control_msg error -71 req 02 val 2800 [ 538.503238][ T5914] pwc: recv_control_msg error -71 req 04 val 1100 [ 538.511205][ T5914] pwc: recv_control_msg error -71 req 04 val 1200 [ 538.537619][ T5914] pwc: Registered as video103. [ 538.545139][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb11/11-1/input/input60 [ 538.564484][ T5914] usb 11-1: USB disconnect, device number 37 [ 538.670076][T22252] xfrm0 speed is unknown, defaulting to 1000 [ 539.137364][T22266] netlink: 'syz.1.5160': attribute type 1 has an invalid length. [ 539.157262][T22266] 8021q: adding VLAN 0 to HW filter on device bond3 [ 539.190992][T22266] vlan5: entered allmulticast mode [ 539.195563][T22266] bond3: entered allmulticast mode [ 539.689141][ T42] audit: type=1800 audit(1783516560.579:28358): pid=22274 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.5163" name="file0" dev="overlay" ino=494 res=0 errno=0 [ 539.805997][T22277] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 539.808998][T22277] IPv6: NLM_F_CREATE should be set when creating new route [ 539.920495][T22280] xfrm0 speed is unknown, defaulting to 1000 [ 540.333838][T22291] netlink: 'syz.5.5169': attribute type 1 has an invalid length. [ 540.462982][T22291] 8021q: adding VLAN 0 to HW filter on device bond6 [ 540.496257][T22296] vlan6: entered allmulticast mode [ 540.503227][T22296] bond6: entered allmulticast mode [ 540.581404][T22295] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 540.634419][ T42] audit: type=1400 audit(1783516561.529:28359): avc: denied { read } for pid=22310 comm="syz.5.5177" path="socket:[123807]" dev="sockfs" ino=123807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 540.657521][ T42] audit: type=1400 audit(1783516561.539:28360): avc: denied { setopt } for pid=22310 comm="syz.5.5177" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 540.749045][T22322] xfrm0 speed is unknown, defaulting to 1000 [ 540.770130][ T42] audit: type=1400 audit(1783516561.659:28361): avc: denied { setopt } for pid=22323 comm="syz.7.5183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 540.875167][T22331] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5185'. [ 540.897177][T22333] netlink: 'syz.5.5186': attribute type 1 has an invalid length. [ 540.926023][T22333] 8021q: adding VLAN 0 to HW filter on device bond7 [ 540.939903][T22333] vlan7: entered allmulticast mode [ 540.941678][T22333] bond7: entered allmulticast mode [ 541.852703][T22353] netlink: 'syz.7.5189': attribute type 2 has an invalid length. [ 541.856115][T22353] netlink: 'syz.7.5189': attribute type 2 has an invalid length. [ 542.449545][T22368] xfrm0 speed is unknown, defaulting to 1000 [ 542.956122][T22387] netlink: 'syz.7.5202': attribute type 1 has an invalid length. [ 542.987749][T22387] 8021q: adding VLAN 0 to HW filter on device bond10 [ 543.005078][T22387] vlan8: entered allmulticast mode [ 543.007439][T22387] bond10: entered allmulticast mode [ 543.233137][T22393] binder: 22392:22393 ioctl c0046209 0 returned -22 [ 543.682580][ T2110] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 543.822659][ T2110] usb 6-1: device descriptor read/64, error -71 [ 544.062559][ T2110] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 544.193917][ T2110] usb 6-1: device descriptor read/64, error -71 [ 544.261995][T22414] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 544.264431][T22414] IPv6: NLM_F_CREATE should be set when creating new route [ 544.305394][ T2110] usb usb6-port1: attempt power cycle [ 544.339436][T22421] netlink: 'syz.5.5216': attribute type 1 has an invalid length. [ 544.409009][T22421] 8021q: adding VLAN 0 to HW filter on device bond8 [ 544.447336][T22421] vlan8: entered allmulticast mode [ 544.449548][T22421] bond8: entered allmulticast mode [ 544.552368][T22430] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 544.663739][ T2110] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 544.693584][ T2110] usb 6-1: device descriptor read/8, error -71 [ 544.942651][ T2110] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 544.973437][ T2110] usb 6-1: device descriptor read/8, error -71 [ 545.082863][ T2110] usb usb6-port1: unable to enumerate USB device [ 545.740459][T22450] netlink: 'syz.7.5226': attribute type 1 has an invalid length. [ 545.781627][T22450] 8021q: adding VLAN 0 to HW filter on device bond11 [ 545.794057][T22450] vlan9: entered allmulticast mode [ 545.796279][T22450] bond11: entered allmulticast mode [ 546.052603][ T9] usb 11-1: new high-speed USB device number 38 using dummy_hcd [ 546.059878][T22456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 546.208657][T22470] openvswitch: netlink: Flow key attr not present in new flow. [ 546.213130][ T9] usb 11-1: Using ep0 maxpacket: 8 [ 546.222739][ T9] usb 11-1: config 0 has an invalid interface number: 52 but max is 0 [ 546.226587][ T9] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 546.230716][ T9] usb 11-1: config 0 has no interface number 0 [ 546.234031][ T9] usb 11-1: config 0 interface 52 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 546.239302][ T9] usb 11-1: config 0 interface 52 has no altsetting 0 [ 546.243402][ T9] usb 11-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 546.246494][ T9] usb 11-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 546.249224][ T9] usb 11-1: Manufacturer: syz [ 546.255278][ T9] usb 11-1: config 0 descriptor?? [ 546.263140][ T9] hub 11-1:0.52: bad descriptor, ignoring hub [ 546.263156][ T9] hub 11-1:0.52: probe with driver hub failed with error -5 [ 546.364352][T22474] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 546.367586][T22474] IPv6: NLM_F_CREATE should be set when creating new route [ 546.776628][ T5828] usb 11-1: USB disconnect, device number 38 [ 546.826740][T22487] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 548.365874][T22532] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 548.494038][T22543] netlink: 'syz.7.5250': attribute type 2 has an invalid length. [ 548.496946][T22543] netlink: 'syz.7.5250': attribute type 2 has an invalid length. [ 549.649580][T22557] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 550.010517][T22566] Bluetooth: MGMT ver 1.23 [ 550.257894][T22582] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 550.696398][T22600] netlink: 'syz.5.5275': attribute type 1 has an invalid length. [ 550.743247][T22600] 8021q: adding VLAN 0 to HW filter on device bond9 [ 550.780799][T22600] vlan9: entered allmulticast mode [ 550.786742][T22600] bond9: entered allmulticast mode [ 551.132847][ T5914] usb 10-1: new high-speed USB device number 38 using dummy_hcd [ 551.282697][ T5914] usb 10-1: Using ep0 maxpacket: 8 [ 551.288172][ T5914] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 551.291350][ T5914] usb 10-1: can't read configurations, error -61 [ 551.354712][T22609] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 551.386548][T22612] netlink: 'syz.7.5279': attribute type 2 has an invalid length. [ 551.389323][T22612] netlink: 'syz.7.5279': attribute type 2 has an invalid length. [ 551.434205][ T5914] usb 10-1: new high-speed USB device number 39 using dummy_hcd [ 551.592648][ T5914] usb 10-1: Using ep0 maxpacket: 8 [ 551.597497][ T5914] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 551.600934][ T5914] usb 10-1: can't read configurations, error -61 [ 551.604461][ T5914] usb usb10-port1: attempt power cycle [ 551.690482][T22623] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5280'. [ 551.702521][ T2110] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 551.852495][ T2110] usb 6-1: Using ep0 maxpacket: 32 [ 551.856026][ T2110] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 551.858687][ T2110] usb 6-1: config 0 has no interface number 0 [ 551.861042][ T2110] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528 [ 551.865246][ T2110] usb 6-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 551.868845][ T2110] usb 6-1: config 0 interface 196 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 551.872055][ T2110] usb 6-1: config 0 interface 196 has no altsetting 0 [ 551.877570][ T2110] usb 6-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a [ 551.880864][ T2110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 551.883795][ T2110] usb 6-1: Product: syz [ 551.885138][ T2110] usb 6-1: Manufacturer: syz [ 551.886638][ T2110] usb 6-1: SerialNumber: syz [ 551.891927][ T2110] usb 6-1: config 0 descriptor?? [ 551.894166][T22616] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 551.952560][ T5914] usb 10-1: new high-speed USB device number 40 using dummy_hcd [ 551.983345][ T5914] usb 10-1: Using ep0 maxpacket: 8 [ 551.987791][ T5914] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 551.990303][ T5914] usb 10-1: can't read configurations, error -61 [ 552.122743][ T5914] usb 10-1: new high-speed USB device number 41 using dummy_hcd [ 552.148367][ T5914] usb 10-1: Using ep0 maxpacket: 8 [ 552.157623][ T5914] usb 10-1: unable to read config index 0 descriptor/start: -61 [ 552.165837][ T5914] usb 10-1: can't read configurations, error -61 [ 552.909047][T22633] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5287'. [ 552.920794][T22635] overlay: Unknown parameter '/file0' [ 553.442734][ T5914] usb usb10-port1: unable to enumerate USB device [ 553.452633][ T42] audit: type=1800 audit(1783516574.229:28362): pid=22647 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.5292" name="file0" dev="overlay" ino=1000 res=0 errno=0 [ 554.528342][ T2110] ipheth 6-1:0.196: ipheth_get_macaddr: usb_control_msg: -71 [ 554.532897][ T2110] ipheth 6-1:0.196: probe with driver ipheth failed with error -71 [ 554.554559][ T2110] usb 6-1: USB disconnect, device number 78 [ 554.713723][T22662] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 554.716798][T22662] IPv6: NLM_F_CREATE should be set when creating new route [ 556.131766][T22689] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 556.147353][T22701] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 556.150505][T22701] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 556.265702][ T42] audit: type=1400 audit(1783516577.159:28363): avc: denied { read write } for pid=22711 comm="syz.5.5317" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 556.278637][T22712] netlink: 'syz.7.5319': attribute type 4 has an invalid length. [ 556.287695][ T42] audit: type=1400 audit(1783516577.159:28364): avc: denied { open } for pid=22711 comm="syz.5.5317" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 556.470257][T22726] overlayfs: missing 'lowerdir' [ 556.620123][T22734] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 557.186402][T22757] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 557.358461][T22772] netlink: 'syz.6.5342': attribute type 1 has an invalid length. [ 557.629962][T22772] 8021q: adding VLAN 0 to HW filter on device bond8 [ 557.658056][T22777] vlan8: entered allmulticast mode [ 557.659865][T22777] bond8: entered allmulticast mode [ 557.779264][T17354] ================================================================== [ 557.782751][T17354] BUG: KASAN: slab-use-after-free in dvb_frontend_release+0x4f3/0x5d0 [ 557.786317][T17354] Read of size 4 at addr ffff88802d8de63c by task syz.7.3590/17354 [ 557.789759][T17354] [ 557.790860][T17354] CPU: 1 UID: 0 PID: 17354 Comm: syz.7.3590 Tainted: G L syzkaller #0 PREEMPT(full) [ 557.790887][T17354] Tainted: [L]=SOFTLOCKUP [ 557.790895][T17354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 557.790907][T17354] Call Trace: [ 557.790956][T17354] [ 557.790964][T17354] dump_stack_lvl+0x100/0x190 [ 557.791304][T17354] print_report+0x13d/0x4b0 [ 557.791473][T17354] ? __virt_addr_valid+0x239/0x430 [ 557.791648][T17354] ? dvb_frontend_release+0x4f3/0x5d0 [ 557.791670][T17354] kasan_report+0xdf/0x1c0 [ 557.791793][T17354] ? dvb_frontend_release+0x4f3/0x5d0 [ 557.791816][T17354] dvb_frontend_release+0x4f3/0x5d0 [ 557.791836][T17354] ? __pfx_dvb_frontend_release+0x10/0x10 [ 557.791857][T17354] __fput+0x3ff/0xb50 [ 557.791991][T17354] task_work_run+0x150/0x240 [ 557.792087][T17354] ? __pfx_task_work_run+0x10/0x10 [ 557.792105][T17354] ? do_raw_spin_unlock+0x145/0x1e0 [ 557.792181][T17354] do_exit+0x951/0x2ae0 [ 557.792212][T17354] ? __pfx_do_exit+0x10/0x10 [ 557.792237][T17354] ? cgroup_update_frozen_flag+0x125/0x240 [ 557.792316][T17354] ? find_held_lock+0x2b/0x80 [ 557.792419][T17354] ? get_signal+0x184f/0x21e0 [ 557.792442][T17354] do_group_exit+0xd5/0x2a0 [ 557.792468][T17354] get_signal+0x1ec7/0x21e0 [ 557.792491][T17354] ? __pfx_get_signal+0x10/0x10 [ 557.792509][T17354] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 557.792589][T17354] arch_do_signal_or_restart+0x91/0x7e0 [ 557.792675][T17354] ? get_timespec64+0x147/0x240 [ 557.792695][T17354] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 557.792728][T17354] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 557.792753][T17354] exit_to_user_mode_loop+0x139/0x6f0 [ 557.792778][T17354] ? rcu_is_watching+0x12/0xc0 [ 557.792806][T17354] do_syscall_64+0x666/0x870 [ 557.792902][T17354] ? clear_bhb_loop+0x40/0x90 [ 557.792925][T17354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.792944][T17354] RIP: 0033:0x7fc0d8b5e68e [ 557.792960][T17354] Code: Unable to access opcode bytes at 0x7fc0d8b5e664. [ 557.793016][T17354] RSP: 002b:00007fc0d99c2f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 557.793037][T17354] RAX: fffffffffffffdfc RBX: 00007fc0d99c36c0 RCX: 00007fc0d8b5e68e [ 557.793050][T17354] RDX: 00007fc0d99c2fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 557.793062][T17354] RBP: 00007fc0d8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 557.793074][T17354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 557.793087][T17354] R13: 00007fc0d8e26038 R14: 00007fc0d8e25fa0 R15: 00007ffe98ed1fe8 [ 557.793105][T17354] [ 557.793112][T17354] [ 557.896898][T17354] Allocated by task 1: [ 557.898625][T17354] kasan_save_stack+0x30/0x50 [ 557.900602][T17354] kasan_save_track+0x14/0x30 [ 557.902499][T17354] __kasan_kmalloc+0xaa/0xb0 [ 557.904470][T17354] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 557.906766][T17354] dvb_register_device+0x1d6/0x1e20 [ 557.908979][T17354] dvb_register_frontend+0x552/0x820 [ 557.911249][T17354] vidtv_bridge_probe+0x44b/0xa30 [ 557.913422][T17354] platform_probe+0x106/0x1d0 [ 557.915095][T17354] really_probe+0x241/0xa60 [ 557.916544][T17354] __driver_probe_device+0x20e/0x450 [ 557.918244][T17354] driver_probe_device+0x4a/0x140 [ 557.919865][T17354] __driver_attach+0x21f/0x5b0 [ 557.921443][T17354] bus_for_each_dev+0x13e/0x1d0 [ 557.923052][T17354] bus_add_driver+0x305/0x5b0 [ 557.924555][T17354] driver_register+0x1e2/0x360 [ 557.926110][T17354] vidtv_bridge_init+0x52/0x80 [ 557.927733][T17354] do_one_initcall+0x11d/0x700 [ 557.929293][T17354] kernel_init_freeable+0x6ea/0x7b0 [ 557.931056][T17354] kernel_init+0x1f/0x1e0 [ 557.932486][T17354] ret_from_fork+0x72b/0xd50 [ 557.934422][T17354] ret_from_fork_asm+0x1a/0x30 [ 557.936452][T17354] [ 557.937465][T17354] Freed by task 17354: [ 557.939171][T17354] kasan_save_stack+0x30/0x50 [ 557.941160][T17354] kasan_save_track+0x14/0x30 [ 557.943110][T17354] kasan_save_free_info+0x3b/0x70 [ 557.945206][T17354] __kasan_slab_free+0x5f/0x80 [ 557.947220][T17354] kfree+0x22b/0x6c0 [ 557.948888][T17354] dvb_device_put.part.0+0x57/0x90 [ 557.951075][T17354] dvb_generic_release+0xe2/0x160 [ 557.953175][T17354] dvb_frontend_release+0x13d/0x5d0 [ 557.955374][T17354] __fput+0x3ff/0xb50 [ 557.957068][T17354] task_work_run+0x150/0x240 [ 557.959015][T17354] do_exit+0x951/0x2ae0 [ 557.960794][T17354] do_group_exit+0xd5/0x2a0 [ 557.962508][T17354] get_signal+0x1ec7/0x21e0 [ 557.964242][T17354] arch_do_signal_or_restart+0x91/0x7e0 [ 557.966058][T17354] exit_to_user_mode_loop+0x139/0x6f0 [ 557.967950][T17354] do_syscall_64+0x666/0x870 [ 557.969507][T17354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.971430][T17354] [ 557.972235][T17354] The buggy address belongs to the object at ffff88802d8de600 [ 557.972235][T17354] which belongs to the cache kmalloc-256 of size 256 [ 557.977125][T17354] The buggy address is located 60 bytes inside of [ 557.977125][T17354] freed 256-byte region [ffff88802d8de600, ffff88802d8de700) [ 557.982090][T17354] [ 557.983115][T17354] The buggy address belongs to the physical page: [ 557.985254][T17354] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2d8de [ 557.988395][T17354] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 557.991392][T17354] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 557.994211][T17354] page_type: f5(slab) [ 557.995674][T17354] raw: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 557.998764][T17354] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 558.001934][T17354] head: 00fff00000000040 ffff88801bc42b40 dead000000000100 dead000000000122 [ 558.005142][T17354] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 558.008415][T17354] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 558.011649][T17354] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 558.014818][T17354] page dumped because: kasan: bad access detected [ 558.017200][T17354] page_owner tracks the page as allocated [ 558.017237][ T64] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 558.019260][T17354] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 18413035364, free_ts 0 [ 558.028744][T17354] post_alloc_hook+0xfd/0x120 [ 558.030574][T17354] get_page_from_freelist+0xf48/0x3530 [ 558.031327][ T64] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 558.032612][T17354] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 558.032646][T17354] new_slab+0xa2/0x650 [ 558.032669][T17354] refill_objects+0xe3/0x410 [ 558.032694][T17354] __pcs_replace_empty_main+0x376/0x680 [ 558.032716][T17354] __kmalloc_cache_noprof+0x479/0x6c0 [ 558.044165][ T64] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 558.044826][T17354] usb_string+0x10f/0x570 [ 558.049082][T17354] usb_cache_string+0x7c/0x100 [ 558.050715][ T64] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 558.051071][T17354] usb_new_device+0x166/0x7d0 [ 558.051093][T17354] register_root_hub+0x4e6/0x639 [ 558.056975][T17354] usb_add_hcd.cold+0xccd/0x1158 [ 558.058577][T17354] vhci_hcd_probe+0x1c2/0x4e0 [ 558.060388][T17354] platform_probe+0x106/0x1d0 [ 558.062164][T17354] really_probe+0x241/0xa60 [ 558.063975][T17354] __driver_probe_device+0x20e/0x450 [ 558.065946][T17354] page_owner free stack trace missing [ 558.067740][T17354] [ 558.068242][ T64] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 558.068490][T17354] Memory state around the buggy address: [ 558.068501][T17354] ffff88802d8de500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 558.074985][T17354] ffff88802d8de580: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 558.077501][T17354] >ffff88802d8de600: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 558.080060][T17354] ^ [ 558.081947][T17354] ffff88802d8de680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 558.084761][T17354] ffff88802d8de700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 558.087663][T17354] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 558.133756][ T42] audit: type=1400 audit(1783516578.989:28365): avc: denied { write } for pid=5720 comm="syz-executor" path="pipe:[3622]" dev="pipefs" ino=3622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 558.177133][ T42] audit: type=1400 audit(1783516578.999:28366): avc: denied { read } for pid=5123 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 558.239101][ T42] audit: type=1400 audit(1783516578.999:28367): avc: denied { search } for pid=5123 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 558.270789][T17354] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 558.273887][T17354] CPU: 1 UID: 0 PID: 17354 Comm: syz.7.3590 Tainted: G L syzkaller #0 PREEMPT(full) [ 558.278439][T17354] Tainted: [L]=SOFTLOCKUP [ 558.280288][T17354] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 558.284521][T17354] Call Trace: [ 558.285899][T17354] [ 558.287140][T17354] dump_stack_lvl+0x100/0x190 [ 558.289123][T17354] vpanic+0x552/0x970 [ 558.290845][T17354] ? __pfx_vpanic+0x10/0x10 [ 558.292802][T17354] ? dvb_frontend_release+0x4f3/0x5d0 [ 558.295115][T17354] panic+0xd1/0xe0 [ 558.296733][T17354] ? __pfx_panic+0x10/0x10 [ 558.298646][T17354] ? dvb_frontend_release+0x4f3/0x5d0 [ 558.300988][T17354] ? preempt_schedule_common+0x42/0xc0 [ 558.303312][T17354] ? check_panic_on_warn+0x1f/0x90 [ 558.305504][T17354] check_panic_on_warn.cold+0x19/0x34 [ 558.307799][T17354] end_report.part.0+0x3a/0x90 [ 558.309796][T17354] kasan_report.cold+0xe/0x18 [ 558.311807][T17354] ? dvb_frontend_release+0x4f3/0x5d0 [ 558.314048][T17354] dvb_frontend_release+0x4f3/0x5d0 [ 558.316236][T17354] ? __pfx_dvb_frontend_release+0x10/0x10 [ 558.318643][T17354] __fput+0x3ff/0xb50 [ 558.320395][T17354] task_work_run+0x150/0x240 [ 558.322406][T17354] ? __pfx_task_work_run+0x10/0x10 [ 558.324560][T17354] ? do_raw_spin_unlock+0x145/0x1e0 [ 558.326775][T17354] do_exit+0x951/0x2ae0 [ 558.328591][T17354] ? __pfx_do_exit+0x10/0x10 [ 558.330589][T17354] ? cgroup_update_frozen_flag+0x125/0x240 [ 558.333074][T17354] ? find_held_lock+0x2b/0x80 [ 558.335149][T17354] ? get_signal+0x184f/0x21e0 [ 558.337177][T17354] do_group_exit+0xd5/0x2a0 [ 558.339161][T17354] get_signal+0x1ec7/0x21e0 [ 558.341156][T17354] ? __pfx_get_signal+0x10/0x10 [ 558.343261][T17354] ? __pfx_hrtimer_nanosleep+0x10/0x10 [ 558.345606][T17354] arch_do_signal_or_restart+0x91/0x7e0 [ 558.347988][T17354] ? get_timespec64+0x147/0x240 [ 558.350075][T17354] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 558.352740][T17354] ? __x64_sys_clock_nanosleep+0x347/0x480 [ 558.355262][T17354] exit_to_user_mode_loop+0x139/0x6f0 [ 558.357554][T17354] ? rcu_is_watching+0x12/0xc0 [ 558.359626][T17354] do_syscall_64+0x666/0x870 [ 558.361647][T17354] ? clear_bhb_loop+0x40/0x90 [ 558.363688][T17354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.366213][T17354] RIP: 0033:0x7fc0d8b5e68e [ 558.368167][T17354] Code: Unable to access opcode bytes at 0x7fc0d8b5e664. [ 558.371117][T17354] RSP: 002b:00007fc0d99c2f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 558.374607][T17354] RAX: fffffffffffffdfc RBX: 00007fc0d99c36c0 RCX: 00007fc0d8b5e68e [ 558.377955][T17354] RDX: 00007fc0d99c2fb0 RSI: 0000000000000000 RDI: 0000000000000000 [ 558.381315][T17354] RBP: 00007fc0d8c33e6f R08: 0000000000000000 R09: 0000000000000000 [ 558.384667][T17354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 558.388030][T17354] R13: 00007fc0d8e26038 R14: 00007fc0d8e25fa0 R15: 00007ffe98ed1fe8 [ 558.391442][T17354] [ 558.393472][T17354] Kernel Offset: disabled [ 558.394858][T17354] Rebooting in 86400 seconds.. VM DIAGNOSIS: 13:16:18 Registers: info registers vcpu 0 CPU#0 RAX=0000000000a7a785 RBX=ffffffff8e891480 RCX=ffffffff8bb8c2d5 RDX=0000000000000000 RSI=ffffffff8e1a2a17 RDI=ffffffff8c400c80 RBP=fffffbfff1d12290 RSP=ffffffff8e807e10 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff8bb8a89f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5dec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000300 CR3=0000000030778000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 656d69745f797470 6d652e7166622e6f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0ce1e466 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0ce1e466 00007ffe0ce1e46c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25846345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a28205 RDI=ffffffff9b9f7b40 RBP=ffffffff9b9f7b00 RSP=ffffc9002049f458 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2e7a7973203a5043 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b6ea1e7 R15=ffffffff85a281a0 RIP=ffffffff85a2822f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5eec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa96ff5da08 CR3=000000002d7cf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d74f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcafa54ca6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcafa54ca6 00007ffcafa54cac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d74234452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d74234492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d742345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d74234484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73b3eb409cb86019 4cc5000237880e58 a6068a4e1bcaab6f 540187012105ffff ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8d743f05f8 00007f8d743f05c8 00007f8d743f0600 00007f8d743f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=720d0b7f916ce973 RDX=0000000000000000 RSI=ffffffff8e17cd3b RDI=ffffffff8c400c80 RBP=ffff888039efd360 RSP=ffffc90020daf818 R8 =00000000fa259c0e R9 =000000000000059f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bb8ca7c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000020000 CR3=0000000026e41000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000007 DR2=0000000000000004 DR3=0000000000000008 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000727277 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0ce1e466 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0ce1e466 00007ffe0ce1e46c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25846345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25847f0600 00007f25847f05e0 00007f25847f05e8 00007f25847f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25847f05f8 00007f25847f05c8 00007f25847f0600 00007f25847f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000010000 RBX=ffffc900037278e8 RCX=ffffffff81b4818d RDX=ffff88802b780000 RSI=ffffffff8bcab400 RDI=ffffffff8c400c80 RBP=0000000000000000 RSP=ffffc900037278b8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=ffff88802b780000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8bb8ca52 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555558c66500 ffffffff 00c00000 GS =0000 ffff8880d60ec000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f950bc26038 CR3=000000003b2bf000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000002 DR2=0000000000000404 DR3=ffffffffefffff14 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000727277 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0ce1e466 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe0ce1e466 00007ffe0ce1e46c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634452 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634492 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25846345f6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2584634484 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25847f0600 00007f25847f05e0 00007f25847f05e8 00007f25847f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f25847f05f8 00007f25847f05c8 00007f25847f0600 00007f25847f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000