last executing test programs: 1m24.419430299s ago: executing program 0 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_clone(0x2280700, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f00000bf000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) shmget$private(0x0, 0x4000, 0x78000800, &(0x7f0000ffa000/0x4000)=nil) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r1, 0x3ba0, &(0x7f0000001200)={0x48, 0x8, r3, 0x0, 0xffff, 0x3, &(0x7f00000002c0)="f0f7b9", 0x4}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) r6 = socket$inet_udp(0x2, 0x2, 0x0) unshare(0x40080) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00') unshare(0x80) close_range(r6, 0xffffffffffffffff, 0x0) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb010018000000000000001800000018000000050000000100000001000013040000000200000088060000ff0f0000002e2e"], 0x0, 0x35}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180005000000ffff000077b9080000009500000000d3a07e"], &(0x7f0000000080)='GPL\x00', 0x7, 0x4fa, &(0x7f0000000cc0)=""/4096, 0x40f00, 0x5, '\x00', 0x0, 0x0, r7, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x0, 0x2, 0x4, 0x9}, 0x1, 0x0, 0x0, 0xff3e, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)=ANY=[@ANYRES32], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x20008004) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x0, 0x0, 0x0, 0x8, 0xffffffba, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0xd4}, 0x94) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r4, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, &(0x7f0000000200)={0x48, 0x7, r9, 0x0, 0x0, 0x0, 0x4, 0x280e76, 0x32197f}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000640)={0x48, 0x7, r8, 0x0, 0x10000, 0x0, 0xa, 0x2ebad4, 0x16e992}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r8, 0x0, 0x10001, 0x0, 0x5, 0xfefffffc, 0x334e88, 0x3f}) 1m23.758815927s ago: executing program 0 (id=45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(0xffffffffffffffff, 0x403c6f2b, &(0x7f0000000000)={0x8000, {"8604a0a71359a294b7585622d5b25618", "398e9cb8b9ef106c55992b65958724b1", "04641700"}, 0x2, 0x6}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xfffffffffffffffe) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1m23.359546683s ago: executing program 0 (id=46): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000240)={0x0, 0xd58c, 0x80, 0x2, 0x1e2}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f0000000980)=@IORING_OP_FIXED_FD_INSTALL={0x36, 0x17, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1}) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x86) name_to_handle_at(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=@ocfs2_parent={0x18, 0x2, {{0x1000, 0x80, 0xffffffff}, {0x5, 0x8, 0xd}}}, &(0x7f00000001c0), 0x800) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) fsopen(&(0x7f0000000240)='sysfs\x00', 0x0) r5 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r5, 0xc2604111, &(0x7f0000000a00)={0x0, [[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xfffffff7, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x4, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac40, 0x3, 0x0, 0x0, 0x1}, {0x1388, 0x9, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0xd00, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0xb, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x1000, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f000000d080)={0x2c, 0x41, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x5, 0x1e, 0x0, 0x0, @str='\x00'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x24, &(0x7f0000000080)={@multicast2, @broadcast}, 0xc) 1m23.358415292s ago: executing program 0 (id=47): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0xf) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x43, &(0x7f0000000300)=[@vmwrite={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="fc000000190001002dbd7000fbdbdf2500000000000000000000000000000000fe8000000000000000000000000000bb4e210000000000020a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000000000000c00000000000000000000000000000080000000000000000000000000000000ffffffffffffffff00000000000000000000000000000000fcffffffffffffff000a00000000000000000000008040000200000000000008000000000000000001000100000000004400050000000000000000000000000000000000fffffffc3c0000000200000000000000000000000000ffffac1414aa0600001004"], 0xfc}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x4, 0x0, @loopback, 0x4}, 0x1c) shutdown(r4, 0x1) r5 = fspick(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) fsmount(r5, 0x1, 0xc8) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) r7 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x9, 0x3}, 0x30, 0x0) landlock_restrict_self(r7, 0x0) sendmmsg$inet6(r6, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x7, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, 0x17, 0x0}}], 0x4d, 0x24000000) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000d042dbd7000fcffff1f00000000", @ANYRES32=0x0, @ANYBLOB="df310600000100002400128009000100626f6e6400000000140002800500010004000000060020"], 0x44}, 0x1, 0x0, 0x0, 0x24008045}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m23.111093899s ago: executing program 0 (id=50): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000000c0)=ANY=[@ANYRES16, @ANYBLOB="010025bd700000dcdf250900000030000380140002"], 0x44}}, 0x48040) r1 = socket$netlink(0x10, 0x3, 0x15) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x0, 0x0, 'dh\x00'}, 0x2c) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x1ff) r3 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e61, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffffc}, 0x1c) symlinkat(0x0, 0xffffffffffffff9c, 0x0) unlinkat(0xffffffffffffff9c, 0x0, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/geth.usb0\x00', 0x200) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffe300000800030000000000080001"], 0x44}}, 0x0) r5 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r5, &(0x7f0000000080)="837f00", 0x3) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r4, 0x20, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) r6 = openat$selinux_policy(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r6, 0x0) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0xfea8) 1m22.760581142s ago: executing program 0 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '*(\'\\*\x04'}}, {@measure}]}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)=ANY=[@ANYBLOB="29000000f0ff000000000000000067726f750d3e6524538cd37b0000"], 0x29) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)=ANY=[@ANYBLOB="29000000f0ff000000000000000067726f750d3e6524538cd37b0000"], 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sys_mnt/block/zram0/disksize\x00', &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x21000e5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/disksize\x00', 0x400003, 0x0) write(r2, &(0x7f0000000280)='10485760\x00', 0x9) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) close(r2) (async) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='dev_mnt/zram0\x00', 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) (async) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x190, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0x65, 0xc, "ce1b42904ac285ba625cc8039bb428bff6b9519a23523892170f46b92ee4e62b01750fcbe3e068579b12e8bcca270000000000000000a18764a44f2343972d19260000000000000009b0147762fecbd7a7e19f5fe9879e26c94a9f1b7fcc291090"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x100000000004}, @NFTA_CHAIN_USERDATA={0x100, 0xc, "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"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3ecfbc832e7525e4}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r5, 0x8b32, &(0x7f0000000040)) (async) ioctl(r5, 0x8b32, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r6, &(0x7f0000000440)='+', 0x1, 0x40040d0, &(0x7f0000000080)={0xa, 0x4e23, 0x4000, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f00000001c0)=""/246, &(0x7f0000000040)=0xf6) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f00000001c0)=""/246, &(0x7f0000000040)=0xf6) write(r4, &(0x7f0000000300)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) 1m22.676997256s ago: executing program 32 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) (async) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x4000, &(0x7f00000004c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[], [{@obj_user={'obj_user', 0x3d, '*(\'\\*\x04'}}, {@measure}]}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r1}, 0x50) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)=ANY=[@ANYBLOB="29000000f0ff000000000000000067726f750d3e6524538cd37b0000"], 0x29) (async) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000043c0)=ANY=[@ANYBLOB="29000000f0ff000000000000000067726f750d3e6524538cd37b0000"], 0x29) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sys_mnt/block/zram0/disksize\x00', &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x21000e5, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/disksize\x00', 0x400003, 0x0) write(r2, &(0x7f0000000280)='10485760\x00', 0x9) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) close(r2) (async) close(r2) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='dev_mnt/zram0\x00', 0x2, 0x0) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) (async) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x6}}, 0x24, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f00000006c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELCHAIN={0x190, 0x5, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_USERDATA={0x65, 0xc, "ce1b42904ac285ba625cc8039bb428bff6b9519a23523892170f46b92ee4e62b01750fcbe3e068579b12e8bcca270000000000000000a18764a44f2343972d19260000000000000009b0147762fecbd7a7e19f5fe9879e26c94a9f1b7fcc291090"}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x100000000004}, @NFTA_CHAIN_USERDATA={0x100, 0xc, "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"}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3ecfbc832e7525e4}}}, 0x1b8}, 0x1, 0x0, 0x0, 0x10}, 0x4000) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r5, 0x8b32, &(0x7f0000000040)) (async) ioctl(r5, 0x8b32, &(0x7f0000000040)) semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) (async) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000680)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x8000, @local, 0x6}, 0x1c, 0x0}}], 0x1, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x18, 0x44, 0x1, 0x70bd29, 0x4, {0x1}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x200408d1}, 0x4008094) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x4, @empty, 0x4}, 0x1c) sendto$inet6(r6, &(0x7f0000000440)='+', 0x1, 0x40040d0, &(0x7f0000000080)={0xa, 0x4e23, 0x4000, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f00000001c0)=""/246, &(0x7f0000000040)=0xf6) (async) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f00000001c0)=""/246, &(0x7f0000000040)=0xf6) write(r4, &(0x7f0000000300)="00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40) 32.477586611s ago: executing program 1 (id=624): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x4) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000002c0), 0x180, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000300)) ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, &(0x7f0000000000)={"4649aada95dddfeea7473c950af4ef2a84468d8c71ea857ab2cb17cae67c7ddf", 0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000340)="02dd1f4f3d8efdfa928e7bcffd92ef87abdac89cef26f16d5265f05128f19c755a7110909cfeff0da3ace4217e63266b9bdf3cbce81cc807af78635541774914b868f908f42b93480445a1107afbf9fd00e4f1ae2b32cb470f69b443ae3081929668fd71a414b438656a8136273f8580c27edfd259af4c955a2fc00d472a0e1f8111dce74847ab5c58b2f74746d92dbc5363a102df94c07e68e2fc898ef1908e2935ad22650b115d909fab23f1562e912991580c7213c3bd5f416631fda077ed7b99fa", 0xc3) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r4, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r4}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40800) 32.330597498s ago: executing program 1 (id=626): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002d40)={&(0x7f0000001480)=ANY=[@ANYBLOB="9feb010018000000000000002400000024000000060000000100000002000084050000000400000001000000030000000000000001800000010000000030002e2e0002dd0506d76a444c7a38756b6577aae3c6252c2cce36fbd316cadc9a4c0b5dd57beaa75f4df5806c08bec08451b834f64325d6220eb33960cea86d704c7d88f3aa6aa636b384d6e6d87b1ec3daf37db7e8a735d3770107cc04f87d550efac03f4adb3ab75c662ab960c112d614f63b390537429e85168efc2af642561b3dc9c81f69e137fbb3b0c5d7fcaf0a9ff9ea70d2abebd7004656825adf4765bde1e24e86913ffb7465cc14fd02abe328fa"], 0x0, 0x42, 0x0, 0x1, 0xfffffc00}, 0x28) syz_open_dev$mtd(&(0x7f0000001580), 0x9, 0x400) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0x80049370, &(0x7f0000000000)) ioctl$BLKIOOPT(0xffffffffffffffff, 0x1279, &(0x7f0000000040)) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x0, 0x3a30, 0x80, 0x2, 0x2}, &(0x7f0000000100)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd3, 0x5d14ef64a4ad8386, 0x0, 0x1a4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd4ff, 0x200, 0x0, 0x295}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3c06, 0x8, 0x3, 0x32d}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdbde, 0x1, 0x0, 0x96}}], 0x4, &(0x7f0000001380)={0x2e, 0x8, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x1, {0x1}, 0x0, 0x0, '\x00', {0x3, 0x5b6, 0x0, &(0x7f0000000380)=@buf_1k="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"}}, &(0x7f0000001400)) io_uring_register$IORING_REGISTER_FILES(r1, 0x2, &(0x7f0000001440)=[r0, r0], 0x2) 32.251114088s ago: executing program 1 (id=627): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_cache\x00') r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000030301"], 0x1c}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ec}, 0x0) 32.250099644s ago: executing program 1 (id=628): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) openat(r1, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010003704000000000000515b0952505000e96a495ce0832f754b0000000000001cf93c43275477f8d594a56e69eca84cecef7decbaa48d63298c085158d61d3e246476ba86827f06bcf303bc3a0831afe92b2fef19c589f153f0f51476b7452bfa4374bcf42442c687091f1920d060079f6fc7958d462c75", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800e00010069703665727370616e000000100002800400120008000100", @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x2, 0x81}]}) close_range(r2, r2, 0x200000000000000) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$setsig(0x4203, r3, 0x5, &(0x7f0000000140)={0x3, 0x4, 0xfffffff7}) ptrace$cont(0x18, r3, 0x80, 0x0) syz_open_procfs$namespace(r3, &(0x7f00000002c0)='ns/user\x00') bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) syz_emit_ethernet(0x72, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c2000001ffffffffffff080045f800640065907864010100ac140f1290b0de7c14aa05029078ffffffff412c00080065000004010000ac1e0101ac1414aa441c54800000000800008000441458537f00000100000002ffffffffffffffff6918b3cb0000130000000000000073c617c071e5928668d13dc27d33c495cb147e87e2a224001c7bd72c7973856fa9ffda1c85bf0867da5b1f12a8a0bfd4b46814fd644b655bb83a87cc6f36b73e88"], 0x0) 31.398601017s ago: executing program 1 (id=644): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x3, 0xffffffffdab30f4f, 0x7, 0x8002, 0x604, 0xc8, 0x0, 0x0, 0x8, 0x7}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) socket$packet(0x11, 0x3, 0x300) (async) socket$packet(0x11, 0x3, 0x300) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r2 = io_uring_setup(0x1b81, &(0x7f0000000040)={0x0, 0x24d34f, 0x1f480, 0x3, 0x3b8}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) (async) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0xfdfdffff, {0x2, 0x0, @empty}, 'wg2\x00'}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x25) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f00000002c0)=[@rdmsr={0x66, 0x18, {0x92b}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xee}}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0xb6e, 0xa}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @uexit={0x0, 0x18, 0x7}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area, 0x7, 0x0, 0x19}}, @nested_load_syzos={0x136, 0x7d, {0x2, 0x689b, [@nested_load_code={0x12e, 0x5d, {0x0, "65f30f090f20d835080000000f22d866baf80cb8c8daa487ef66bafc0c66b870c666efc4a261a82e656440d30b410f015b0c66ba400066b89d0066ef0f078f29e801e30f08"}}]}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_load_code={0x12e, 0x54, {0x0, "0f23e7c44179288f0d0000000fc71bc4427d1cbe7393000036dbe266b852000f00d8420f22588f28688f7200b966ba4100b800600000ef660f388239"}}], 0x289}) (async) r6 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000580)={0x0, &(0x7f00000002c0)=[@rdmsr={0x66, 0x18, {0x92b}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0x2, 0xee}}, @nested_vmresume={0x130, 0x18, 0x1}, @wrmsr={0x65, 0x20, {0xb6e, 0xa}}, @enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_clgi={0x17f, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @nested_amd_vmsave={0x183, 0x18, 0x2}, @uexit={0x0, 0x18, 0x7}, @nested_amd_set_intercept={0x181, 0x30, {0x1, 0x0, 0x6}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area, 0x7, 0x0, 0x19}}, @nested_load_syzos={0x136, 0x7d, {0x2, 0x689b, [@nested_load_code={0x12e, 0x5d, {0x0, "65f30f090f20d835080000000f22d866baf80cb8c8daa487ef66bafc0c66b870c666efc4a261a82e656440d30b410f015b0c66ba400066b89d0066ef0f078f29e801e30f08"}}]}}, @nested_amd_vmload={0x182, 0x18, 0x1}, @nested_load_code={0x12e, 0x54, {0x0, "0f23e7c44179288f0d0000000fc71bc4427d1cbe7393000036dbe266b852000f00d8420f22588f28688f7200b966ba4100b800600000ef660f388239"}}], 0x289}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 31.178529462s ago: executing program 1 (id=647): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa04a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfb, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3ff, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc1}}}}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setuid(0xee00) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = epoll_create(0xe47) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000001c0)={0x90000008}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 31.142564382s ago: executing program 33 (id=647): syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x4d9, 0xa04a, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x8, "", [{{0x9, 0x4, 0x0, 0xfb, 0xdf, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x3ff, 0x3, 0x1, {0x22, 0x29}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x3, 0xc1}}}}}]}}]}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) setuid(0xee00) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = epoll_create(0xe47) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f00000001c0)={0x90000008}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 11.470741927s ago: executing program 4 (id=907): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x20, 0x2f, 0x9, 0x70bd29, 0x0, {0x4}, [@typed={0x9, 0x18, 0x0, 0x0, @str='[+%[\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x42804}, 0x10) syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') 9.918685246s ago: executing program 4 (id=922): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x80108907, 0x0) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000008240), 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfff}, [@generic={0x73, 0x1, 0x1, 0x1f}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) write$binfmt_register(r1, &(0x7f0000008280)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x38, 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, 'system_u:object_r:dlm_control_device_t:s0', 0x3a, './file0'}, 0x79) 9.830878674s ago: executing program 4 (id=923): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') write$cgroup_int(r0, &(0x7f0000000440)=0xffffffff, 0x12) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000140)=0x4) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cfg\x00', 0x1ff) (async) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./cfg/usb_gadget/g1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./ffs\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='functionfs\x00', 0x1ff) (async) syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') (async) write$cgroup_int(r0, &(0x7f0000000440)=0xffffffff, 0x12) (async) getsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f00000000c0), &(0x7f0000000140)=0x4) (async) mount(&(0x7f0000000280)=@filename='usb0\x00', &(0x7f0000000200)='./ffs\x00', &(0x7f0000000240), 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./ffs/ep0\x00', 0x2, 0x0) (async) write(r1, &(0x7f0000000300)="030000001b0000000800000001000000000b000000010004000000", 0x1b) (async) 9.770699966s ago: executing program 4 (id=925): openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x6b142, 0x0) r0 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0xffffffff, 0x10000, 0x3, 0x55}, &(0x7f00000005c0)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x21, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{0x0}], 0x1}, 0x0, 0x40000102, 0x1}) io_uring_enter(r0, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000080)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/74, 0x328000, 0x1000, 0x6, 0x2}, 0x1c) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') link(&(0x7f0000000280)='./file1\x00', &(0x7f0000000440)='./file0\x00') r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000240)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}) mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}}) socket$netlink(0x10, 0x3, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r9 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r10, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0xfffffbb4, 0x5, 0x5, 0x6e0, 0x5}, 0x68}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x40) close(r8) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$kcm(0x11, 0x3, 0x0) 9.530803886s ago: executing program 4 (id=928): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x75c}, {0x40000001, 0x3ff, 0x0, 0x31237648, 0x0, 0x38}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 1) 9.311146715s ago: executing program 4 (id=929): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000007003bb46edb94009d50dc0000000000e8ff9500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x0, 0x1, 0xc, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r1, 0x25, 0xa, @val=@netkit={@void, @value=r4, @void, @void, r5}}, 0x1c) 9.301815296s ago: executing program 34 (id=929): r0 = socket$netlink(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'veth1_vlan\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001800)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000007003bb46edb94009d50dc0000000000e8ff9500000000000000"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', r3}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r0, 0x0, 0x1, 0xc, &(0x7f0000000000)=[0x0], 0x1, 0x0, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r4, r1, 0x25, 0xa, @val=@netkit={@void, @value=r4, @void, @void, r5}}, 0x1c) 3.930270683s ago: executing program 3 (id=993): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0c0099000100000009000000"], 0x28}, 0x1, 0x0, 0x0, 0x1805}, 0x271d06846df4b024) (async) accept4$nfc_llcp(r1, 0x0, 0x0, 0x80800) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 3.859807817s ago: executing program 3 (id=994): mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000040)='./bus\x00', &(0x7f0000000000), 0x2000000, &(0x7f00000000c0)={[{@workdir}]}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBMODE(r2, 0x4bfa, &(0x7f0000000080)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x3}, @IFLA_XFRM_LINK={0x8, 0x1, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 3.853198763s ago: executing program 3 (id=997): sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="440000000001050527776987738dda430a000005300002802c00018014000300ff400400ff02"], 0x44}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r4, 0x4048aec9, &(0x7f0000000980)={0x1, 0x0, @ioapic={0xfee00, 0x296a, 0x4, 0x3, 0x0, [{0x98, 0x37, 0x81, '\x00', 0x7f}, {0x41, 0x8, 0x30, '\x00', 0xf5}, {0xe9, 0x1, 0x9, '\x00', 0x11}, {0x7, 0x9, 0x3, '\x00', 0xc}, {0x3, 0x7f, 0x92, '\x00', 0xa}, {0xf, 0xe3, 0x8, '\x00', 0xaa}, {0x6, 0x8, 0x6, '\x00', 0x8}, {0x1, 0x3, 0x8, '\x00', 0x67}, {0x80, 0x2, 0xa, '\x00', 0x8}, {0x8, 0x2, 0x13, '\x00', 0x9f}, {0x8, 0x8, 0x6, '\x00', 0x3}, {0x2, 0xa, 0x3, '\x00', 0xa}, {0x1e, 0x6, 0x3, '\x00', 0xa6}, {0x8, 0x0, 0x8, '\x00', 0x9}, {0x2, 0x4c, 0xa2, '\x00', 0x1}, {0x8, 0x5f, 0x4, '\x00', 0x7}, {0x5, 0xa0, 0x45, '\x00', 0x4}, {0x7, 0x3, 0xff, '\x00', 0xa7}, {0x5, 0x0, 0xf, '\x00', 0x7}, {0x5e, 0xa, 0x8}, {0x7f, 0x6, 0x7, '\x00', 0x4}, {0x93, 0x44, 0x9, '\x00', 0x10}, {0x5, 0x8, 0x20, '\x00', 0xfc}, {0x6, 0xff, 0xc6, '\x00', 0x8}]}}) close_range(r2, 0xffffffffffffffff, 0x0) r5 = dup(r1) write$UHID_INPUT(r5, &(0x7f00000029c0)={0xc, {"a2e3ad214fc7529b1b48470787f70e06d038e7ff7fc6e5539b3267078b089b3b08386c090890e0878f0e1ac6e70a9b334a959b689a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31340d095d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78669a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000002335875271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ed30c000000000000040d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1fe90a56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617601000000be70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d595a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9980000000b3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6c82fa678ca14ffd9f9db2a7869d85824056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c2021d653a5520000008213b704a5000000000007008ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710a80000000000008000bea37ce0d0d4aa202f928f28381aab144a4d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4e38a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2bed9e53803edf1a4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07845754b8400daaa69bf5c8f4ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f5d6d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034e00000000ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9ef6d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c478b095b68441a34cb51682a8ae4d24ad92f243941ed274549b79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdbe6c4579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93ae62fccfcbb2b75a2183c46eb65ca8124e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43e4fb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e01feffffffffffff83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369d75f2e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aa01b20f7694a00f16e2d0174035a2c22656dc00880acebdbe8ddbd75c2f998d8ac2dfad2ba3a50200000045a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcdddd754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe2907ac0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adca6f68a75b9397b035153faf463661c953fcad6f37525c1a0e94610dd94323f6c15d085197149bfbb655548cf99c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7cd419e037f3e3ad03f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaeecf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a37684f4113c48859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c105000000302a808d7f5251440613d17ca51055f2f416a44fe180d2d50c312cca7cb14a20dc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb40100000006376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a12810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7ceec7dc808bf653639d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de0ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac34b308e15fc37d06aeac289c0523f023e1ff7408c6087f1ab652f2ef91d4f2b0198080046da034e5c3f745a7ee8101a3934c54e24b48ec0275e2dd9bb96e222d8e904f6529006c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6522fb5f6ffcdd56fed88935fcb75912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae233a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a5bd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08008897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b80c1c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c98ad90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39e3313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe360500000000000000b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1062dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1df0d07b3d5bd3b01faffd0addbed2881a9700af561ac8c7e36bb2fc4c40e9c766c06817bb9957697c9ede7885d94ffb0759bc3daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c1484d2f9c55f4901203a9a8a2c3e90f39c3dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000210000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000600", 0x1000}}, 0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000600012800b00010067656e65766500005000028005000800000000000400380205000900010000000500"], 0x88}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x7, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x44040}, 0x44001) 3.608203811s ago: executing program 3 (id=998): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0xc00, 0x0) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000280)=0x4e7) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000300)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0x10}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x0, [0x2, 0x8, 0x3, 0x5, 0x2, 0x9, 0x2, 0xb, 0xc, 0xc, 0x1, 0x9, 0x9, 0xc, 0x1, 0x1], 0x1, [0x3, 0x8000, 0x3e63, 0x1, 0x466, 0x5, 0x7ff, 0x0, 0xaf, 0x9, 0x3, 0x9, 0x8e, 0xd4de, 0xb, 0x9], [0x2, 0x7, 0x6, 0x3ff, 0x101, 0x100, 0x5, 0xfffb, 0xfffb, 0x1000, 0x101, 0x81, 0x7fff, 0x4, 0x0, 0x7]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r10, {0x4}, {0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0xff, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x27, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r11, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r10, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="8db1a2fc20b8688ad50fbe7d094215014d5a4dc7c6d8a946a176c6ff7f9de3c79c174bbe5c8ea0f51d591d343e6e67f7473da6a176e93dcf12e4b32f59399785d4fad84ded8cc749a444792ef9b239536552fbef847cfc8f585d06600442c0c9456858800ea7a9d579e1fd00"/134, @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r12, 0x0) ftruncate(r12, 0x4a8e) r13 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r13, 0xae04) 3.397351427s ago: executing program 3 (id=1002): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x2, 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="82377c469c678d18badf798339"], &(0x7f0000000840)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x54, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}}, 0x14}}, 0x4000010) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x1) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x0, 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000280)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000007c0)="00385a7af3", 0x5) r5 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="f4dcff01", @ANYRES64=r7, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r8, @ANYRES64=r3], 0x6f4}}, 0x0) openat$comedi(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/comedi5\x00', 0x8a02, 0x0) r9 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x9a) fcntl$setlease(r9, 0x400, 0x1) socket$tipc(0x1e, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000001c0)=0x412, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x0, 0x58) fcntl$setlease(r9, 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r9, 0x40946400, &(0x7f00000003c0)={'pcl812\x00', [0x144, 0x6, 0xd, 0x2, 0x0, 0x8, 0x8002, 0x2, 0xdb7, 0xc72d, 0x4, 0x9, 0x2009, 0x10000005, 0x4ce, 0x433, 0x101, 0x9, 0xa, 0x8, 0x8000, 0x3, 0x5, 0x9, 0x40ffd, 0x8000fffc, 0xaf, 0x0, 0x283, 0x80000000, 0x4]}) 2.489838877s ago: executing program 3 (id=1015): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000540)={{0x1, 0x3, 0x0, 0x462b, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x800000000000000, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x6, 0x0, 0x0, 0x2, 0x0, 0x28064fe8, 0xa8, 0xfffffff7fffffff7, 0x0, 0x91f5, 0x1f, 0x4000000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10001, 0xfffffffffffffffc, 0x10006, 0x3, 0x1, 0xb152, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x0, 0x3, 0x9, 0x0, 0x0, 0xa9d5, 0x0, 0x0, 0x20000000005, 0x20000000000000, 0x0, 0xf, 0x0, 0xfffffffffffffffd, 0xfeb7, 0x0, 0x0, 0x4000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2000, 0x9, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x8, 0x2, 0x1000, 0xe0a5, 0x0, 0x7, 0x7, 0x1002, 0x400000, 0xff, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x80000000, 0x73fb, 0x0, 0x0, 0x0, 0x6, 0xb7a8, 0xff, 0x0, 0xfffffffffffffffc]}) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r1], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="2489a6e54d2f445e97d286ba49d1d25e424a3f0000", @ANYRESOCT=r4], 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@dellink={0x20, 0x11, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x60000, 0x2a8f2}}, 0x20}, 0x1, 0x0, 0x0, 0x12}, 0x4004004) 1.559629467s ago: executing program 5 (id=1026): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r0, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r0, 0x4008ae73, &(0x7f0000000000)={0x4, 0x4}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) 1.489809298s ago: executing program 5 (id=1028): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) setsockopt$inet6_udp_int(r1, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) lsetxattr$system_posix_acl(0x0, 0x0, &(0x7f0000000040)={{}, {}, [], {0x4, 0x6}, [], {0x10, 0x2}}, 0x24, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x4}) ioctl(r2, 0x8b32, &(0x7f0000000040)) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) ioctl$FE_GET_PROPERTY(0xffffffffffffffff, 0x80106f53, &(0x7f0000000000)={0x21, &(0x7f00000001c0)=[{0x3c, '\x00', @buffer={"38912e14b96acbb942644cd1944750bafecc30dc6f1f636f0e7ece59a75ceef1", 0x20}, 0x9}]}) r3 = openat$kvm(0xffffff9c, &(0x7f0000000540), 0x8000, 0x0) r4 = syz_open_dev$dvb_frontend(&(0x7f00000015c0), 0x0, 0x400) r5 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x4, 0x2ffffffff}, 0x2e) ioctl$FE_GET_PROPERTY(r4, 0x80106f53, &(0x7f0000000000)={0x15, &(0x7f00000006c0)=[{0x30, '\x00', @st={0x4, [{0x3, @uvalue=0x7}, {0x2, @svalue=0x10001}, {0x1, @svalue=0x9ab}, {0x2, @uvalue=0xf59}]}, 0xd}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r6 = socket$packet(0x11, 0x3, 0x300) pwrite64(r6, &(0x7f0000000380)="03b5", 0x2, 0x8) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031c00d1fd140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) r8 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000200)={[0x3, 0x8000000000000000, 0xfffffffffffffffd, 0x73, 0x2, 0x8, 0x4002804c4, 0x9, 0x5, 0xc595, 0x0, 0x3, 0xefffffffffffffff, 0x2000000000000000, 0x7, 0x8d], 0x2, 0x2002d3}) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) socket$kcm(0x2, 0xa, 0x2) 1.428479346s ago: executing program 2 (id=1029): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x75c}, {0x40000001, 0x3ff, 0x0, 0x31237648, 0x0, 0x38}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.124979521s ago: executing program 2 (id=1032): syz_emit_ethernet(0x8e, &(0x7f0000000600)=ANY=[@ANYBLOB="aaaaaaaaaa250000000000004305400f008000650000028650ffffffff000cab444cfa17fe110577ad00124c985e594ee96c2b09f6e55ec84c916e05052450"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$IOMMU_GET_HW_INFO(0xffffffffffffffff, 0x3b8a, &(0x7f0000000380)={0x28, 0x0, 0x0, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000004000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt6_stats\x00') pread64(r4, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r3, 0x3ba0, &(0x7f0000000180)={0x48, 0xb, r4}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000200)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x75c}, {0x40000001, 0x3ff, 0x0, 0x31237648, 0x0, 0x38}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) write$P9_RLOCK(r5, &(0x7f00000000c0)={0x8, 0x35, 0x1, 0x2}, 0x8) 950.737554ms ago: executing program 2 (id=1033): ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) mkdir(&(0x7f00000001c0)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000280)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') unlink(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x20010, 0xffffffffffffffff, 0xca57f000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x26d01, 0x0) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000080)=0x2) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, &(0x7f0000000380)={0x1, 0x2, @raw_data=[0x7ff, 0x0, 0x5, 0xf5088d3e, 0x3, 0x100, 0x4, 0x0, 0xffff, 0x4, 0x549, 0x8, 0x5, 0x9, 0x0, 0x6]}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000180)={0x2, [0x3, 0x8000]}) 943.857453ms ago: executing program 2 (id=1034): r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x30800, 0x0) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0) prctl$PR_GET_DUMPABLE(0x3) prctl$PR_GET_DUMPABLE(0x3) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)="b32e6c5abe74c70d", 0x8}, {&(0x7f0000000080)}], 0x2) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6=@loopback}}, &(0x7f0000000400)=0xe8) quotactl_fd$Q_GETINFO(r0, 0xffffffff80000500, r2, &(0x7f0000000440)) prctl$PR_GET_DUMPABLE(0x3) mkdir(&(0x7f0000000480)='\x00', 0x80) r3 = socket(0x1, 0x800, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f00000004c0)={0x101, {{0xa, 0x4e22, 0x3, @mcast1, 0x3}}, {{0xa, 0x4e23, 0x9d, @local, 0x6}}}, 0x108) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x80489439, &(0x7f0000000600)) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000680), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) ioctl$VHOST_GET_FEATURES(r4, 0x8008af00, &(0x7f00000006c0)) ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000700)={0x0, 0x6, 0x0, [0x101, 0x3, 0x80000001, 0xffffffffffffff9c, 0xa4], [0xffffffffffffffff, 0x25, 0x0, 0x8, 0x0, 0x4, 0x85, 0x9, 0x0, 0x46e, 0x0, 0x8, 0x8fd6, 0x4, 0x100, 0x1, 0x8, 0x7fffffff, 0x211, 0xed4, 0x1ff, 0x0, 0xff, 0x5, 0x18c, 0x401, 0x1ff, 0xc, 0x4, 0x9, 0x3, 0x0, 0x80, 0x2d2f0bf2, 0x4a59b0de, 0x0, 0x9, 0x3, 0x1, 0x8, 0x9, 0x3, 0x1, 0xffffffff, 0x2, 0x9, 0x0, 0x3, 0x6, 0x9, 0x1, 0x8000, 0x5, 0x9aa, 0x2, 0xe, 0x80, 0x8, 0x8000, 0xfffffffffffffff0, 0x100, 0x4, 0x4000000000000, 0x4, 0x9d95, 0x1, 0x1000, 0x2, 0x0, 0xb791, 0x8000, 0x7, 0x8000000000000001, 0xd08, 0xe00, 0x7, 0xffffffff80000000, 0xfffffffffffeffff, 0x89, 0x3, 0x4, 0xd, 0x1, 0x2, 0x2, 0x34, 0x0, 0x1, 0x2a8c, 0x8000, 0x4, 0x6, 0x0, 0xf30, 0x0, 0x4, 0x2, 0x80000000, 0x58a, 0x4, 0x5, 0x6, 0xb566, 0x36, 0xfffffffffffffffb, 0x3cc, 0x7, 0x5, 0x10001, 0x8000000000000000, 0x1000, 0x1, 0x2, 0x100000000, 0x100, 0x4, 0x1, 0x0, 0x3, 0x1, 0x19]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r3, 0xc4089434, &(0x7f0000000b40)={0x0, 0x2, 0x1, [0x0, 0x8, 0x3, 0x8, 0x9], [0x1, 0x100000000, 0x1, 0x0, 0x100, 0x5, 0x2, 0x80000000, 0x6, 0xffffffffffffffff, 0x6, 0x8, 0xe53, 0x79, 0x0, 0xffffffffffffffff, 0x0, 0x9, 0x3, 0x0, 0x2, 0x7, 0x7f, 0x3, 0x7, 0x76, 0x0, 0xfffffffffffffffd, 0x9, 0x100, 0x2, 0x100000001, 0x7, 0x7, 0x2, 0x3, 0x8, 0x2, 0x1, 0x3, 0x8, 0x1000, 0x6, 0x9, 0x4, 0xfffffffffffffffd, 0x7, 0x9, 0x8, 0xddd9, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x4, 0x80000001, 0x6, 0xf, 0xf63b, 0x10, 0x2, 0x18, 0x2, 0x0, 0x1ff, 0x2, 0x9, 0x9, 0x8, 0x1, 0xffffffff, 0x8001, 0x7fffffffffffffff, 0x1, 0x100, 0x1, 0x8, 0x80, 0x52, 0x7, 0x81, 0x52, 0x3ff, 0x7, 0x28c, 0x8000000000000000, 0x336, 0x10000, 0x7ff, 0x6, 0x10, 0x7, 0x50a, 0x1, 0x5, 0x1, 0x40, 0x4, 0x8, 0x7, 0x2, 0x15040eb3, 0x3, 0x6, 0x7fffffff, 0x9, 0x1, 0x0, 0x2, 0x2, 0x8, 0x2, 0x6, 0x1, 0x1, 0x18000000000, 0x8000000000000000, 0x3, 0x2, 0x6, 0x5]}) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000f80)={0x0, 0x101, 0x84efd7e}) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001380)={0x8, 0x7, {0x100000000, @struct={0x1, 0x101}, r5, 0x9, 0x8, 0x1, 0x100000001, 0xee1, 0x4e6, @usage=0xf12, 0x9, 0x0, [0x5, 0xfffffffffffffc46, 0x7, 0x8, 0x2, 0x80000001]}, {0x6, @struct={0x5, 0x5}, r6, 0x2, 0x7, 0xfb97, 0x4, 0x71239ac6, 0xaa, @usage=0x6, 0x0, 0x570, [0xb, 0x7, 0x5, 0x48, 0x0, 0x8]}, {0x200, @usage=0x8, r7, 0x2, 0x2ab, 0xfffffffffffffffe, 0x3, 0x10, 0x41, @struct={0x80000001, 0x8a2}, 0x6, 0x0, [0x12dd794e, 0x1, 0x401, 0xe2, 0x40, 0x8]}, {0xf, 0x3, 0x9}}) setxattr$incfs_id(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0), &(0x7f0000001800)={'0000000000000000000000000000000', 0x30}, 0x20, 0x3) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000029c0)=@bpf_tracing={0x1a, 0xd, &(0x7f0000001840)=@raw=[@alu={0x4, 0x0, 0x3, 0x6, 0xb, 0x8, 0x4}, @generic={0x9, 0x8, 0xf, 0x0, 0x5324}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}, @ringbuf_query, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x6}], &(0x7f00000018c0)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000001900)=""/4096, 0x41100, 0x70, '\x00', r1, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000002900)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000002940)={0x0, 0xd, 0x3f, 0x4}, 0x10, 0x1d93d, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000002980)=[{0x5, 0x4, 0x1, 0x8}, {0x0, 0x1, 0xe, 0x3}], 0x10, 0x8}, 0x94) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000002a80)='syz1\x00', 0x200002, 0x0) r10 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002ac0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x6, '\x00', r1, 0xffffffffffffffff, 0x4, 0x3}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000002b80)={r8, r9, 0x7, 0x0, @val=@iter={&(0x7f0000002b40)=@map_fd=r10, 0x10}}, 0x20) prctl$PR_GET_DUMPABLE(0x3) ioctl$MEMREADOOB(0xffffffffffffffff, 0xc0104d04, &(0x7f0000002cc0)={0x6c, 0xdd, &(0x7f0000002bc0)="8a79326caf9b64ab2493f980bd77fe045b64aa68067fdae39a9739ce26454387932501ae94abc7cbc66068197685d71b17c476e91acf0a52713a0d03a0d8be84e6e85cf737e289b87d8a4259c4de89db73f2559bde04799105dabab786d47989a912691e5f94d6bdb9e8cf3bb9ebe509145c33e5007ff0c5c89675cb17fded544d51970de968f79532ac3028bc9bf8b7ce7bdd2902b83d820faded264dc64b74cbb745dffa0c5a2aa277f821464a7f67e16c6c492df5ad49021eae0dc822911bd01e80137b9e9296e32949d9d3ee25c17a3f98a151b985084dc36fc349"}) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, &(0x7f0000002d00)={0x5d, {{0xa, 0x4e24, 0x6, @local, 0x1}}, {{0xa, 0x4e24, 0x7e, @mcast1, 0xfffffffe}}}, 0x108) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f0000002e40), 0x100, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r11, 0xc0189371, &(0x7f0000002ec0)={{0x1, 0x1, 0x18}, './file0\x00'}) 828.162925ms ago: executing program 2 (id=1037): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x85) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) llistxattr(&(0x7f0000000080)='./file0\x00', 0x0, 0xfffffffffffffcec) getxattr(&(0x7f0000000100)='./file0/file0\x00', &(0x7f00000001c0)=@known='security.apparmor\x00', &(0x7f0000000280)=""/97, 0x61) syz_fuse_handle_req(r1, &(0x7f00000021c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffff00", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1, {0x7, 0x2b, 0x0, 0xffffffff80050202, 0x5, 0xfc, 0x8, 0x0, 0x0, 0x0, 0x1f91affae52e4a1d, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000006280)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x68, 0x0, 0x5, {0x800f5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)={0x2c, 0x41, 0x107, 0xfffffffe, 0xfffffffe, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x10, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x4, 0x6}]}, @nested={0x4, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048011}, 0x4000000) 700.209824ms ago: executing program 2 (id=1038): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000540)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff0905"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000780)={0xfc78, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x20, 0x1, 0x1, 0x1}, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000580)={0x20, 0x0, 0x81, "cd15cff6ffffffff6d361a27935011680ad870c9504949e7e9e15ad26f8d84ad46bbcf0a01a96f84199d055a5769a902301a1b1281c1419f1a05cae5330d1c7d52087bbbc3bd0001000000000000ff7f105260b828ee3dab2d8315a5fc47129c4bf7276fc45ae09b0b081b30dbaac1ab4b50f6909193c5e821769a54b03a523dc6"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b03, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000006c0)={0x0, &(0x7f0000000400)=[@nested_amd_invlpga={0x17d, 0x20, {0xffff1000, 0x2808}}, @rdmsr={0x66, 0x18, {0x821}}, @rdmsr={0x66, 0x18, {0x968}}, @nested_load_syzos={0x136, 0x140, {0x1, 0x2, [@nested_amd_invlpga={0x17d, 0x20, {0xffff1000, 0x39a}}, @cpuid={0x64, 0x18, {0x6, 0xcbd}}, @wrmsr={0x65, 0x20, {0x632}}, @nested_amd_vmsave={0x183, 0x18}, @rdmsr={0x66, 0x18, {0x84a}}, @nested_load_code={0x12e, 0x98, {0x2, "66baf80cb850bf9e87ef66bafc0cb897510000efc4a26d453948b8d31db60e9e1b863e0f23d80f21f835000000e00f23f8b9800000c00f3235002000000f3026f30f09c744240001000000c7442402b2000000c7442406000000000f011c240f20d835080000000f22d866b8a3000f00d036430f239a66ba210066b8ad6266ef"}}]}}, @code={0xa, 0x73, {"c744240000000000c7442402c2820000c7442406000000000f011424b8010000000f01c1643e3e66400f070f086464f3430f5c67000f4cc08f491097be0b000000470fa7c0c4e215bc2948b809000000000001000f23d00f21f835200000080f23f8"}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x0, 0x4, 0x1}}, @nested_vmresume={0x130, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x1}, @enable_nested={0x12c, 0x18}], 0x293}) syz_open_dev$mouse(&(0x7f00000001c0), 0xffffffff, 0x1040) syz_genetlink_get_family_id$devlink(&(0x7f0000000840), 0xffffffffffffffff) 620.628637ms ago: executing program 6 (id=1039): syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), 0xffffffffffffffff) (async) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r1, &(0x7f0000000140), 0x10) (async) sendmsg$can_bcm(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x5, 0xc06, 0xffffffff, {}, {}, {0x0, 0x0, 0x1}, 0x1, @canfd={{0x0, 0x0, 0x1}, 0x19, 0x1, 0x0, 0x0, "8aee974fff186584d25af3abfe3e407370d621fd21a4b939372d2e9563a75eb616e70c2d99a8440a163e7e88f2e01967c14cf0c34c9258ec7685ffc3aba57e0f"}}, 0x80}, 0x1, 0x0, 0x0, 0x40084}, 0x30004084) sendmmsg$inet6(r0, &(0x7f0000000880)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6d1}, 0x1c, &(0x7f0000000800)=[{&(0x7f00000002c0)='n', 0x1}], 0x1}}], 0x1, 0x20004801) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e21, 0x74e, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}}, 0xfffffffc, 0x1, 0x2, 0x2, 0x11, 0xf7, 0xfd}, &(0x7f0000000080)=0x9c) 550.304269ms ago: executing program 6 (id=1040): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x6, 0x23e) write(r1, 0x0, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4, 0x8}, &(0x7f0000000180)=0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum={0x2, 0x3, 0x0, 0xf, 0x4, [{0x9, 0xfffffffe}, {0xb, 0x800}, {0x2, 0x3ff}]}]}}, 0x0, 0x3e}, 0x28) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0, 0xffffffffffffff8a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0xfff, 0x6, 0x2, 0x3, r4}, 0x10) 420.463868ms ago: executing program 5 (id=1041): openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000600)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0x40c0}], 0x2, 0x48040) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="b800000000d983fd49e32f4399000000a0000000bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255"], 0xb8, 0x40800}, {0x0, 0x0, &(0x7f0000000280)=[{0x0}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309d", 0x11}, {&(0x7f0000000600)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d", 0x69}], 0x3, 0x0, 0x0, 0x40c0}], 0x2, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_ENUMSTD(r3, 0xc0485619, &(0x7f0000000040)={0x7fff, 0x3200e0, "a80706000000000000fb00", {0x4, 0x2}, 0xffffffff}) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r5 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r6 = socket(0x2, 0x80805, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) setresuid(0x0, 0xee01, 0xffffffffffffffff) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') (async) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) (async) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635001000000f30660f3837ef660f38815e90ba610066edf2f20f0da5c51c36a564650f08ba420066ed0f16b50d000f11ea", 0x3a}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@textreal={0x8, &(0x7f0000000300)="66b9800000c00f326635001000000f30660f3837ef660f38815e90ba610066edf2f20f0da5c51c36a564650f08ba420066ed0f16b50d000f11ea", 0x3a}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x84000, 0x24) 340.532133ms ago: executing program 6 (id=1042): r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0xbc, &(0x7f0000000580)=""/188}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x2}, 0x6) 336.758831ms ago: executing program 6 (id=1043): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48d, 0x0, 0x8}]}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x2, 0x24, 0x68, 0x0, 0x0, 0x32, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7d, 0x100}}}}}}}, 0x0) write$vga_arbiter(r2, &(0x7f0000000280)=ANY=[@ANYBLOB='lock io+'], 0xc) read$FUSE(r2, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)={0x24, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4}, @nested={0x8, 0x36, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}, 0x24}], 0x1}, 0x0) 336.426874ms ago: executing program 6 (id=1044): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x100) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xa, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000ff0300000000000000000000850000001100000085000000a000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3d0, 0x238, 0xc8, 0x8, 0x238, 0x5803, 0x300, 0x2e8, 0x2e8, 0x300, 0x2e8, 0x3, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [], [0x0, 0x0, 0xff000000], 'erspan0\x00', 'geneve1\x00', {}, {}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x210, 0x238, 0x0, {0x0, 0x2000000000000}, [@common=@ah={{0x30}, {[0x4d4, 0x4d2], 0x40, 0x3, 0x3}}, @common=@rt={{0x138}, {0xfffffffc, [0x5, 0x5], 0x400, 0x1, 0x1, [@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, @ipv4={'\x00', '\xff\xff', @empty}, @ipv4={'\x00', '\xff\xff', @multicast1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @private0, @remote], 0x6}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x14, 0x7f, 0xfde3}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0xff000000], [], 'macvtap0\x00', 'syzkaller1\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x430) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000001714"], 0x38}}, 0x800) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) setsockopt$inet6_int(r1, 0x29, 0xcf, &(0x7f0000000000)=0x42c8, 0x4) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x40440, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r3}, './file0/../file0\x00'}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000103000000004800000001"], 0x114}], 0x1}, 0x24044010) recvmmsg(r6, &(0x7f0000001b80)=[{{0x0, 0x0, 0x0}, 0x7fffffff}], 0x1, 0x14022, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000100)="660f38821b0f01cfb880048ee066b9570a000066b8d92d000066ba000000000f30da830800b800048ee80f350fc7a80090360f3526ab", 0x36}], 0x1, 0x7c, &(0x7f0000000300), 0x0) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, &(0x7f00000003c0)={0x1, 0x0, [{0x0, 0x8, 0x5, 0x7, 0x6f677948, 0x656e6975, 0x5c}]}) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r5, 0x1, 0x1, &(0x7f0000000340)={0x5}, 0x4) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 190.952437ms ago: executing program 5 (id=1045): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000100)=0x25000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x70, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000000c0)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000003, 0x3b}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x8000000000001, 0x23}, @fda={0x66646185, 0x1, 0x1, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}, @release={0x40046306, 0x2}, @release, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) (async) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r4, 0x4008ae48, &(0x7f0000000100)=0x25000) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000140)={0x70, 0x0, &(0x7f0000000280)=[@transaction_sg={0x40486311, {0xfffffffd, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f00000000c0)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000003, 0x3b}, @ptr={0x70742a85, 0x20000000, 0x0, 0x0, 0x8000000000001, 0x23}, @fda={0x66646185, 0x1, 0x1, 0x1e}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}, @release={0x40046306, 0x2}, @release, @increfs_done={0x40106308, 0x2}], 0x0, 0x0, 0x0}) (async) 120.839204ms ago: executing program 6 (id=1046): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x44, r0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0002}}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008000}, 0x4800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x27, 0x80000, 0x40000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r5, 0x3ba0, &(0x7f00000000c0)={0x48, 0x5, r6, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r5, 0x3ba0, &(0x7f0000000240)={0x48, 0xb, r7}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xfffffff7, 0xee1a, 0x8, 0xc80, 0x8, 0x1, 0x80000001, 0x5, 0xe}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c840) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x48, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x2, 0xfff3}, {0x0, 0xfff3}, {0x2, 0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_IPV6_SRC={0x14, 0xe, @mcast2}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./file0/file0\x00', 0x1000) mkdir(&(0x7f0000000300)='./bus\x00', 0x63) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000) open(&(0x7f0000000140)='./file0/file0\x00', 0x200001, 0xa7) r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) ioctl$TIOCSETD(r9, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r9, 0x80204705, &(0x7f0000000080)={0x8, 0x8, 0x609152b0, 0x2, 0xe, "3eccd2000500"}) fcntl$getown(r8, 0x9) r10 = syz_genetlink_get_family_id$tipc(&(0x7f00000009c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r10, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0x1}}}, 0x24}}, 0x8000) 58.798564ms ago: executing program 5 (id=1047): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x10) ioctl$KVM_GET_DEVICE_ATTR_vm(r0, 0x4018aee2, &(0x7f0000000280)=@attr_arm64={0x0, 0x0, 0x0, &(0x7f0000000240)={0x401, 0x9}}) r1 = socket(0x11, 0xa, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000007c0)={0x18, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x404c051}, 0x2004c0c4) r3 = fsopen(&(0x7f0000000300)='debugfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) r4 = socket$inet(0x2, 0x5, 0x0) r5 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_IO(r5, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @buffer={0x0, 0xbc, &(0x7f0000000580)=""/188}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) setsockopt$sock_int(r4, 0x1, 0x46, &(0x7f0000000100)=0x1, 0x4) ioctl$XFS_IOC_FSBULKSTAT(r3, 0xc0205865, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0, 0x2b}, 0x8, 0x0, 0x0, 0x24}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000540)={0x1, &(0x7f0000000500)=[{0x5, 0x0, 0x8, 0x9}]}, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)={0x24, r7, 0x1, 0x0, 0x0, {{0x2}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x15e0}], @NL80211_ATTR_DURATION={0x8, 0x57, 0xcee}]}, 0x24}}, 0x800) r8 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) r10 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r10, &(0x7f00000001c0)={0x18, 0x110, 0xfa00, {0xffffffffffffffff, 0x7fffffff, 0x12, 0x0, 0x0, @in6={0xa, 0x4e22, 0x100, @private1, 0xf5}, @in6={0xa, 0x4e24, 0x401, @local, 0x4}}}, 0x118) ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f00000005c0)={r9, 0x800, {0x2a00, 0x80010000, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}}) r11 = syz_open_dev$loop(&(0x7f0000000180), 0x8c, 0x403c0) ioctl$LOOP_CONFIGURE(r11, 0x4c0a, &(0x7f0000001280)={r8, 0x0, {0x2a12, 0x80010000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x15, 0x4, "fee8a2ab78fc179fd1f809000000aca7ca64c6a4b4e00d9683dda1af01000000deff1200100000000000000000000000000800", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102000000000e4440000002000000000000000000000008bd02800", [0xe]}}) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r7, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x55}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffff3, 0xf}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x64000) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x3f7, 0x4, 0x70bd2a, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48880}, 0x40000) 0s ago: executing program 5 (id=1048): epoll_create1(0x80000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x581100, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000180)=[@mask_cswp={0x58, 0x114, 0x9, {{}, 0x0, 0x0}}], 0x58}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000100)={0x0, @multicast1, @empty}, &(0x7f0000000140)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@bloom_filter={0x1e, 0x9, 0xa, 0x6, 0x2000, r3, 0x0, '\x00', r4, r3, 0x4, 0x1, 0x3, 0x6}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x9c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1ba20, 0x106f}, [@IFLA_LINKINFO={0x74, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x64, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x4}, @IFLA_VLAN_INGRESS_QOS={0x58, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8001, 0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfffffffc, 0x5}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x200, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x80000001, 0x75a9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x10}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x3, 0x6}}]}]}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x9c}}, 0x8008006) write(r3, &(0x7f00000001c0)='1', 0x1) kernel console output (not intermixed with test programs): t10 [ 95.603720][ T6046] hub 8-1:1.0: bad descriptor, ignoring hub [ 95.606868][ T6046] hub 8-1:1.0: probe with driver hub failed with error -5 [ 95.610555][ T6046] cdc_wdm 8-1:1.0: skipping garbage [ 95.612551][ T6046] cdc_wdm 8-1:1.0: skipping garbage [ 95.618677][ T6046] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 95.620661][ T6046] cdc_wdm 8-1:1.0: Unknown control protocol [ 95.732777][ T7899] evm: overlay not supported [ 95.912315][ T5840] usb 8-1: USB disconnect, device number 11 [ 96.355415][ T7915] openvswitch: netlink: Duplicate or invalid key (type 0). [ 96.572214][ T7942] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 96.595665][ T5840] hid_parser_main: 5 callbacks suppressed [ 96.595703][ T5840] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 96.604018][ T5840] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 96.609381][ T42] audit: type=1326 audit(2000000042.679:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.2.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e39de99 code=0x7fc00000 [ 96.625612][ T5840] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 96.639860][ T42] audit: type=1326 audit(2000000042.689:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.2.512" exe="/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7f988e39de99 code=0x7fc00000 [ 96.640515][ T7948] netlink: 'syz.4.527': attribute type 1 has an invalid length. [ 96.655562][ T7948] netlink: 224 bytes leftover after parsing attributes in process `syz.4.527'. [ 96.664567][ T42] audit: type=1326 audit(2000000042.689:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.2.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e39de99 code=0x7fc00000 [ 96.674164][ T42] audit: type=1326 audit(2000000042.689:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.2.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e39de99 code=0x7fc00000 [ 96.684426][ T42] audit: type=1326 audit(2000000042.689:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.2.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e39de99 code=0x7fc00000 [ 96.695183][ T42] audit: type=1326 audit(2000000042.689:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.2.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e39de99 code=0x7fc00000 [ 96.707721][ T42] audit: type=1326 audit(2000000042.689:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.2.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e39de99 code=0x7fc00000 [ 96.717039][ T42] audit: type=1326 audit(2000000042.689:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7900 comm="syz.2.512" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988e39de99 code=0x7fc00000 [ 96.737481][ T7948] trusted_key: encrypted_key: keylen parameter is missing [ 96.760180][ T7949] fido_id[7949]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 96.868160][ T7966] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 96.871421][ T7966] batadv_slave_1: entered promiscuous mode [ 96.888229][ T7963] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7963 comm=syz.2.530 [ 96.947973][ T7968] No such timeout policy "syz1" [ 96.985939][ T7974] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 97.005678][ T7971] bond2: (slave batadv0): Device is not bonding slave [ 97.008412][ T7971] bond2: option active_slave: invalid value (batadv0) [ 97.012338][ T7971] bond2 (unregistering): Released all slaves [ 99.647753][ T7948] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 99.709419][ T8001] netlink: 40 bytes leftover after parsing attributes in process `syz.2.540'. [ 99.746781][ T8009] futex_wake_op: syz.4.545 tries to shift op by 32; fix this program [ 99.767042][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.2.540'. [ 99.767513][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 99.767749][ T8004] syz.1.543(8004): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 99.778744][ T8012] netlink: 28 bytes leftover after parsing attributes in process `syz.3.546'. [ 99.782368][ T8012] netlink: 'syz.3.546': attribute type 4 has an invalid length. [ 99.824520][ T8004] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 99.827825][ T8004] netlink: 'syz.1.543': attribute type 4 has an invalid length. [ 99.830898][ T8004] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.543'. [ 99.835154][ T8004] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 99.839114][ T8004] netlink: 'syz.1.543': attribute type 4 has an invalid length. [ 99.842486][ T8004] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.543'. [ 100.185408][ T42] kauditd_printk_skb: 66 callbacks suppressed [ 100.185423][ T42] audit: type=1400 audit(2000000046.249:710): avc: denied { write } for pid=8043 comm="syz.1.555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 100.191205][ T8044] net_ratelimit: 1 callbacks suppressed [ 100.191230][ T8044] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.262479][ T8048] syzkaller0: entered promiscuous mode [ 100.262495][ T8048] syzkaller0: entered allmulticast mode [ 100.277775][ T8048] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 100.284912][ T8049] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 100.497315][ T8074] syzkaller0: entered promiscuous mode [ 100.499739][ T8074] syzkaller0: entered allmulticast mode [ 100.698363][ T42] audit: type=1400 audit(2000000046.769:711): avc: denied { unmount } for pid=6086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 100.763249][ T8091] netlink: 12 bytes leftover after parsing attributes in process `syz.3.569'. [ 100.773902][ T8096] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 100.800121][ T8096] : entered promiscuous mode [ 100.803959][ T42] audit: type=1400 audit(2000000046.869:712): avc: denied { create } for pid=8095 comm="syz.4.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.804803][ T8097] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 100.824224][ T8104] netlink: 'syz.4.570': attribute type 2 has an invalid length. [ 100.842505][ T8081] kvm: kvm [8080]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 100.850139][ T8081] kvm: kvm [8080]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 100.921428][ T42] audit: type=1400 audit(2000000046.989:713): avc: denied { read } for pid=8114 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.941807][ T42] audit: type=1400 audit(2000000047.009:714): avc: denied { write } for pid=8099 comm="syz.3.571" name="/" dev="9p" ino=78395321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 100.977077][ T42] audit: type=1400 audit(2000000047.039:715): avc: denied { setopt } for pid=8114 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 100.986592][ T42] audit: type=1400 audit(2000000047.059:716): avc: denied { nlmsg_read } for pid=8114 comm="syz.4.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 100.987142][ T8117] netlink: 44 bytes leftover after parsing attributes in process `syz.4.573'. [ 101.051256][ T8119] netlink: 28 bytes leftover after parsing attributes in process `syz.4.574'. [ 101.341615][ T42] audit: type=1400 audit(2000000047.409:717): avc: denied { read } for pid=8135 comm="syz.2.579" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 101.357770][ T42] audit: type=1400 audit(2000000047.409:718): avc: denied { open } for pid=8135 comm="syz.2.579" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 101.398263][ T8137] kAFS: unable to lookup cell 'syz0' [ 101.522899][ T42] audit: type=1400 audit(2000000047.589:719): avc: denied { create } for pid=8139 comm="syz.2.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 101.651722][ T8148] dummy0: entered allmulticast mode [ 101.667244][ T8148] fuse: Bad value for 'fd' [ 101.677360][ T8147] dummy0: left allmulticast mode [ 101.688047][ T8151] syzkaller0: entered promiscuous mode [ 101.697702][ T8151] syzkaller0: entered allmulticast mode [ 101.836908][ T8157] snd_dummy snd_dummy.0: control 0:0:1:syz0:512 is already present [ 102.291294][ T8172] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.320932][ T8172] netlink: 12 bytes leftover after parsing attributes in process `syz.1.588'. [ 102.323811][ T8172] block nbd0: not configured, cannot reconfigure [ 102.427897][ T5813] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 102.527185][ T8184] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 102.557997][ T5813] usb 7-1: device descriptor read/64, error -71 [ 102.797692][ T5813] usb 7-1: new full-speed USB device number 14 using dummy_hcd [ 102.812401][ T8204] cdrom: dropping to single frame dma [ 102.929362][ T5813] usb 7-1: device descriptor read/64, error -71 [ 102.957189][ T8216] netlink: 32 bytes leftover after parsing attributes in process `syz.1.599'. [ 103.003176][ T8220] netlink: 36 bytes leftover after parsing attributes in process `syz.3.601'. [ 103.016331][ T8220] binder: 8219:8220 unknown command 0 [ 103.019308][ T8220] binder: 8219:8220 ioctl c0306201 2000000001c0 returned -22 [ 103.038358][ T5813] usb usb7-port1: attempt power cycle [ 103.200200][ T8234] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.248795][ T8235] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 103.275043][ T8234] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 103.331637][ T8234] overlayfs: d_ino too big (., ino=4611686018427387905, xinobits=3) [ 103.335146][ T8234] overlayfs: d_ino too big (.., ino=4611686018427387905, xinobits=3) [ 103.377734][ T5813] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 103.399129][ T5813] usb 7-1: device descriptor read/8, error -71 [ 103.637692][ T5813] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 103.659003][ T5813] usb 7-1: device descriptor read/8, error -71 [ 103.770567][ T5813] usb usb7-port1: unable to enumerate USB device [ 104.038889][ T8255] zram: Cannot change disksize for initialized device [ 104.277723][ T8277] [U] zÍ»´iœùÊý®Ò[27| [ 104.279882][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.284223][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.286191][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.297520][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.300268][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.301708][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.303428][ T8277] [U] ‰ϼcEv‹û @ý [ 104.304561][ T8277] [U] aÆ„% [ 104.305492][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.311394][ T8277] [U] éf1Ïp±3 [ 104.312328][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.313735][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.315822][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.328639][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.333159][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.335312][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.346988][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.349403][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.351244][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.353060][ T8277] [U] ‰ϼcEv‹û @ý [ 104.354256][ T8277] [U] aÆ„% [ 104.364289][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.372605][ T8277] [U] éf1Ïp±3 [ 104.374822][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.377427][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.380015][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.384430][ T8286] ISOFS: Unable to identify CD-ROM format. [ 104.388026][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.393482][ T8285] ISOFS: Unable to identify CD-ROM format. [ 104.395197][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.395292][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.416565][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.417126][ T8284] netlink: 604 bytes leftover after parsing attributes in process `syz.1.619'. [ 104.419353][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.424397][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.424669][ T8285] netlink: 604 bytes leftover after parsing attributes in process `syz.1.619'. [ 104.426881][ T8277] [U] ‰ϼcEv‹û @ý [ 104.431277][ T8277] [U] aÆ„% [ 104.432623][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.440316][ T8277] [U] éf1Ïp±3 [ 104.441528][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.445451][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.448279][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.457070][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.461592][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.463798][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.474963][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.477028][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.478783][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.480625][ T8277] [U] ‰ϼcEv‹û @ý [ 104.481859][ T8277] [U] aÆ„% [ 104.482884][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.489121][ T8277] [U] éf1Ïp±3 [ 104.490621][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.492653][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.497997][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.506431][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.511398][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.515979][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.529474][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.532111][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.534176][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.536458][ T8277] [U] ‰ϼcEv‹û @ý [ 104.538153][ T8277] [U] aÆ„% [ 104.539779][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.547702][ T8277] [U] éf1Ïp±3 [ 104.549001][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.550924][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.553665][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.562978][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.567340][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.570003][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.583971][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.585933][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.593148][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.596514][ T8277] [U] ‰ϼcEv‹û @ý [ 104.597718][ T8277] [U] aÆ„% [ 104.601487][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.607312][ T8277] [U] éf1Ïp±3 [ 104.609136][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.611206][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.613698][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.621727][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.626222][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.628372][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.640097][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.642178][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.643875][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.645678][ T8277] [U] ‰ϼcEv‹û @ý [ 104.646910][ T8277] [U] aÆ„% [ 104.648335][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.655011][ T8277] [U] éf1Ïp±3 [ 104.656118][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.657859][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.660694][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.668092][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.672477][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.674541][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.688068][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.690229][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.691906][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.693806][ T8277] [U] ‰ϼcEv‹û @ý [ 104.695081][ T8277] [U] aÆ„% [ 104.696191][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.702661][ T8277] [U] éf1Ïp±3 [ 104.703817][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.705446][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.714942][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.722839][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.727323][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.729755][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.741188][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.743305][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.744971][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.746882][ T8277] [U] ‰ϼcEv‹û @ý [ 104.748335][ T8277] [U] aÆ„% [ 104.749540][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.756838][ T8277] [U] éf1Ïp±3 [ 104.761500][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.764674][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.768078][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.778458][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.784066][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.786735][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.800795][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.803256][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.805237][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.807507][ T8277] [U] ‰ϼcEv‹û @ý [ 104.809114][ T8277] [U] aÆ„% [ 104.810544][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.817969][ T8277] [U] éf1Ïp±3 [ 104.819322][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.821078][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.823503][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.827004][ T8314] netlink: 36 bytes leftover after parsing attributes in process `syz.1.628'. [ 104.831368][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.838399][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.840625][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.851554][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.853574][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.855249][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.857056][ T8277] [U] ‰ϼcEv‹û @ý [ 104.858301][ T8277] [U] aÆ„% [ 104.859622][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.865810][ T8277] [U] éf1Ïp±3 [ 104.866900][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.868562][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.870973][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.878712][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.883459][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.885656][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.896861][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.899036][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.900707][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.902552][ T8277] [U] ‰ϼcEv‹û @ý [ 104.903783][ T8277] [U] aÆ„% [ 104.904832][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.911181][ T8277] [U] éf1Ïp±3 [ 104.912243][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.913823][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.916197][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.923996][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.928479][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.930690][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 104.941814][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 104.943911][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 104.945595][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 104.947449][ T8277] [U] ‰ϼcEv‹û @ý [ 104.948698][ T8277] [U] aÆ„% [ 104.950064][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 104.956389][ T8277] [U] éf1Ïp±3 [ 104.957476][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 104.959142][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 104.961573][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 104.978101][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 104.984116][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 104.988582][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 105.000486][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 105.002571][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 105.004218][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 105.006161][ T8277] [U] ‰ϼcEv‹û @ý [ 105.007400][ T8277] [U] aÆ„% [ 105.008915][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 105.015169][ T8277] [U] éf1Ïp±3 [ 105.016412][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 105.019339][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 105.021840][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 105.032283][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 105.036987][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 105.039422][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 105.052151][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 105.054194][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 105.055895][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 105.057811][ T8277] [U] ‰ϼcEv‹û @ý [ 105.059020][ T8277] [U] aÆ„% [ 105.063327][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 105.069674][ T8277] [U] éf1Ïp±3 [ 105.070765][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 105.072265][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 105.074617][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡nzÍ»´iœùÊý®Ò[27| [ 105.082357][ T8277] [U] ‘BsŠ«w×AÓer®ÇOU]~èAÖö`1e…ÊX™!Ój5iÓ5ÿ‰Ÿîßy2ÂÚ‚_îSÇ"qµh$²±ç¨ìÁ‘‰6íÎä\PÏ[2ç*/Ç£Wb_$þ0Aó’7Ì X¦Û–(wc# ‚ýÙÔ =¡ÁgÎö®<ï [ 105.086887][ T8277] [U] µIø¸wØuõ¦b:l®‘EúeÜiBHÁ‹káï^¯VI|È¥Ä\x®dÕ„ [ 105.089199][ T8277] [U] Ëòü­|KßIHŒƒ»Þú;F~ò{IÃÓŽ«¡ÿ‰ª=Mkq%„±°ÿhd9©!ë@aü*ŒøŒlzš’~`E‚Üõ=ýÅ[>me§ÚLh»c»ü`ÆÛ'°uùÅÛ~+Û¤±mþÍ·LÃÄçû×X—…³®‡ßæéXóðËÒ舂€i '„j«ž3€e=:3à/ÒCœ_ßͯ 81ë(FW [ 105.100916][ T8277] [U] 8)¢¤XÍ)°YvxRÄ»¶øØb¡‰mªb®Ný@ox²;JD‡¶ ¹ƒ, [ 105.103036][ T8277] [U] *CÃn¯3¿Àv7‰KE¯Xgt_3êê §ëé [ 105.105262][ T8277] [U] D‰¶/QÊa‡¹ÏzÒ¬EàH‘ºgE1$_k½´£s«=óR@ [ 105.107180][ T8277] [U] ‰ϼcEv‹û @ý [ 105.108444][ T8277] [U] aÆ„% [ 105.110175][ T8277] [U] ’@¿Ëø±·’äæëcÃ_-Ʊ¯¢Zþ¯Ë×&ý<Z9Íah§_ÏL@bKÈÔs¤3J¨JÓ5¿ÂÂÜD¹¤;wõWÑçˆUu–yL¾…¯bÒ³53ûż²ø{Õ4XRQº÷ÿr£H=M"ß/ç@ o›¬»ƒèáÀ¨p¢ÌS”¯´‹‡~{P¹‡–Ó¡ä~i*ÑT¨º‡~WìÔÉ)ÉQ¦~ȵåŠ_ßœ‰Í¬z—~VqàÛª` [ 105.116287][ T8277] [U] éf1Ïp±3 [ 105.117398][ T8277] [U] N0[L;aÛ_´îlÕ&ÍkÿMëCï× [ 105.119078][ T8277] [U] Àr6w^âûæçg—©P$üu§í¶í4Œ~GC‰›“ÖßšpÊk½¾FtÍÚwÈç~Î@ùL1è [ 105.119651][ T8320] syz.2.630 (8320): drop_caches: 2 [ 105.121546][ T8277] [U] Ô:¢äK!:¡¿Yå’‘Æ;R’ÿôôádmÿ¥–a9Ötb¨‹ð„õtýºû=‚ Òªï+ésS¼ i÷-íY©Jcà ø(š¼‡ðÒ‘„îxƒ|]k|§â_VÀí·ÀéÚÒ‰ÝTÒ8MN´i¢…–׎ͪ²´˜Y΃æzAMö"eÌv3¼KÄ›O0q]^Œ)”‘?ס8â…´ìõS°ñ ŸÜX†e´Ý¢êÝ%4°<¥g±!¼èØy.Öòçûw›µa©ûШ˜×¹‡ÉòÛ)³0¯Põ/óäQº¬Ý{»›‡n [ 105.212351][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 105.212368][ T42] audit: type=1400 audit(2000000051.279:738): avc: denied { create } for pid=8334 comm="syz.3.634" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.343277][ T8347] x_tables: duplicate underflow at hook 1 [ 105.659442][ T5736] overlayfs: failed lookup in lower (newroot/167, name='file0', err=-40): overlapping layers [ 105.670282][ T5736] overlayfs: failed lookup in lower (newroot/167, name='file0', err=-40): overlapping layers [ 105.792988][ T42] audit: type=1400 audit(2000000051.849:739): avc: denied { unlink } for pid=5733 comm="syz-executor" name="file0" dev="tmpfs" ino=887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 105.899913][ T6138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 105.915600][ T6138] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.950592][ T8384] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 106.026303][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 106.039932][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 106.059231][ T5747] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 106.059923][ T6138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.067562][ T6138] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.072790][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 106.077668][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 106.148112][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.150960][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.153724][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.156444][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.162286][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.165049][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.170192][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.172960][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.175927][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.178883][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.182629][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.186304][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.189977][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.193573][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.197143][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.201862][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.205152][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.208927][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.209687][ T6138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.211815][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.215810][ T6138] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.223053][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.226165][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.230736][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.235917][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.239529][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.243010][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.246516][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.254290][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.257151][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.259946][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.262748][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.265366][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.268497][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.271396][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.274176][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.276789][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.280121][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.282835][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.286257][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.297294][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.302862][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.306477][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.311791][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.315299][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321023][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321114][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321198][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321286][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321382][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321470][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321558][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321646][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321733][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321818][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321909][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.321994][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322105][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322194][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322281][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322366][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322463][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322561][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322649][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322733][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322820][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.322906][ T8398] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 106.332983][ T6138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 106.333005][ T6138] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.630298][ T8432] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 106.644128][ T6138] bridge_slave_1: left allmulticast mode [ 106.647000][ T6138] bridge_slave_1: left promiscuous mode [ 106.650484][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.654997][ T6138] bridge_slave_0: left allmulticast mode [ 106.661933][ T6138] bridge_slave_0: left promiscuous mode [ 106.663848][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.685744][ T42] audit: type=1400 audit(2000000052.749:740): avc: denied { write } for pid=8433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.770170][ T42] audit: type=1400 audit(2000000052.839:741): avc: denied { write } for pid=8440 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.825918][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.830291][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.834649][ T6138] bond0 (unregistering): Released all slaves [ 106.863352][ T5446] 8021q: adding VLAN 0 to HW filter on device eth1 [ 106.871075][ T8388] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.874067][ T8388] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.876938][ T8388] bridge_slave_0: entered allmulticast mode [ 106.880799][ T8388] bridge_slave_0: entered promiscuous mode [ 106.890313][ T8388] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.893651][ T8388] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.896715][ T8388] bridge_slave_1: entered allmulticast mode [ 106.900956][ T8388] bridge_slave_1: entered promiscuous mode [ 106.931194][ T6138] tipc: Left network mode [ 106.934619][ T8388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.936109][ T8388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.998314][ T42] audit: type=1400 audit(2000000053.069:742): avc: denied { write } for pid=8448 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.028536][ T8388] team0: Port device team_slave_0 added [ 107.032994][ T8388] team0: Port device team_slave_1 added [ 107.042907][ T42] audit: type=1400 audit(2000000053.109:743): avc: denied { write } for pid=8451 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.052907][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.055037][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.063072][ T8388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.067568][ T8388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.069752][ T8388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 107.080613][ T8388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.091380][ T5446] 8021q: adding VLAN 0 to HW filter on device eth6 [ 107.099157][ T8457] gfs2: error -5 reading superblock [ 107.119010][ T8457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.659'. [ 107.119815][ T8388] hsr_slave_0: entered promiscuous mode [ 107.124283][ T8388] hsr_slave_1: entered promiscuous mode [ 107.126550][ T8388] debugfs: 'hsr0' already exists in 'hsr' [ 107.128904][ T8388] Cannot create hsr debugfs directory [ 107.188961][ T8457] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 107.199258][ T8457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8457 comm=syz.3.659 [ 107.229211][ T6138] hsr_slave_0: left promiscuous mode [ 107.236368][ T6138] hsr_slave_1: left promiscuous mode [ 107.242748][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.246020][ T42] audit: type=1400 audit(2000000053.309:744): avc: denied { write } for pid=8461 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.259950][ T6138] batadv0: mtu less than device minimum [ 107.265683][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.272421][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.277175][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.281811][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.285958][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.289822][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.293663][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.297331][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.298823][ T42] audit: type=1400 audit(2000000053.369:745): avc: denied { write } for pid=8464 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.304072][ T6138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 107.317397][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.320742][ T6138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.334714][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.339042][ T6138] batman_adv: batadv0: Interface deactivated: dummy0 [ 107.341251][ T6138] batman_adv: batadv0: Removing interface: dummy0 [ 107.350830][ T6138] veth1_macvtap: left promiscuous mode [ 107.352766][ T6138] veth0_macvtap: left promiscuous mode [ 107.354698][ T6138] veth0_vlan: left promiscuous mode [ 107.427773][ T6046] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 107.526699][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 107.538204][ T5820] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 107.539840][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 107.588152][ T6046] usb 9-1: Using ep0 maxpacket: 32 [ 107.592220][ T6046] usb 9-1: config 0 has an invalid interface number: 119 but max is 0 [ 107.595458][ T6046] usb 9-1: config 0 has no interface number 0 [ 107.597922][ T6046] usb 9-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 107.602092][ T6046] usb 9-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 107.606606][ T6046] usb 9-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 27 [ 107.610868][ T6046] usb 9-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 107.619414][ T6046] usb 9-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 107.622843][ T6046] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.625937][ T6046] usb 9-1: Product: syz [ 107.628376][ T6046] usb 9-1: Manufacturer: syz [ 107.630203][ T6046] usb 9-1: SerialNumber: syz [ 107.641434][ T6046] usb 9-1: config 0 descriptor?? [ 107.655426][ T8459] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 107.666650][ T6046] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.119/input/input11 [ 107.671994][ T5446] 8021q: adding VLAN 0 to HW filter on device eth7 [ 107.673892][ T5129] usb 9-1: BOGUS urb xfer, pipe 1 != type 3 [ 107.696044][ C3] bcm5974 9-1:0.119: trackpad urb failed: -1 [ 107.697762][ T5820] usb 8-1: Using ep0 maxpacket: 8 [ 107.706113][ T5820] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 107.712439][ T5820] usb 8-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 107.717206][ T5820] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.722552][ T5820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.870578][ T42] audit: type=1400 audit(2000000053.939:746): avc: denied { write } for pid=8469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.937513][ T42] audit: type=1400 audit(2000000053.999:747): avc: denied { write } for pid=8472 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.952651][ T6046] usb 9-1: USB disconnect, device number 16 [ 107.981909][ T8388] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.000352][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 108.014552][ T5446] 8021q: adding VLAN 0 to HW filter on device eth8 [ 108.024264][ T8388] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.029708][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 108.034836][ T8388] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.040826][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 108.044110][ T8388] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.053371][ T8388] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 108.114732][ T8388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.124852][ T8388] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.134191][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.137298][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.142555][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.145654][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.161852][ T6138] IPVS: stop unused estimator thread 0... [ 108.167868][ T5747] Bluetooth: hci2: command tx timeout [ 108.502917][ T8388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.555041][ T8513] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 108.699505][ T8388] veth0_vlan: entered promiscuous mode [ 108.706680][ T8388] veth1_vlan: entered promiscuous mode [ 108.736909][ T8388] veth0_macvtap: entered promiscuous mode [ 108.744034][ T8388] veth1_macvtap: entered promiscuous mode [ 108.753598][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.768650][ T8388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.776151][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.785817][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.793351][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.796306][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.874725][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.881130][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.903217][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.906547][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.139638][ T8553] macvtap1: entered allmulticast mode [ 109.141980][ T8553] bond0: entered allmulticast mode [ 109.144121][ T8553] bond_slave_0: entered allmulticast mode [ 109.146693][ T8553] bond_slave_1: entered allmulticast mode [ 109.149875][ T8553] bond_slave_0: entered promiscuous mode [ 109.154307][ T8553] bond_slave_1: entered promiscuous mode [ 109.158255][ T8553] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 109.162692][ T8553] bond0: left allmulticast mode [ 109.164886][ T8553] bond_slave_0: left allmulticast mode [ 109.167241][ T8553] bond_slave_1: left allmulticast mode [ 109.198114][ T10] bond_slave_0: left promiscuous mode [ 109.200872][ T10] bond_slave_1: left promiscuous mode [ 109.409714][ T8575] netlink: 'syz.2.675': attribute type 39 has an invalid length. [ 109.460413][ T8577] netlink: 8 bytes leftover after parsing attributes in process `syz.4.676'. [ 109.558951][ T8586] syzkaller0: entered promiscuous mode [ 109.561487][ T8586] syzkaller0: entered allmulticast mode [ 109.786806][ T8594] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8594 comm=syz.2.680 [ 109.791645][ T8594] netlink: 'syz.2.680': attribute type 1 has an invalid length. [ 109.812682][ T8594] macvtap1: entered allmulticast mode [ 109.822123][ T8594] macvtap2: entered allmulticast mode [ 109.834927][ T8594] bond2: (slave bridge1): making interface the new active one [ 109.839586][ T8594] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 109.906282][ T8597] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 110.204612][ T8610] program syz.2.685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.248924][ T5747] Bluetooth: hci2: command tx timeout [ 110.286515][ T8619] bond0: entered promiscuous mode [ 110.289110][ T8619] bond_slave_0: entered promiscuous mode [ 110.291711][ T8619] bond_slave_1: entered promiscuous mode [ 110.299622][ T8619] batadv0: entered promiscuous mode [ 110.319901][ T5827] usb 8-1: USB disconnect, device number 12 [ 110.325204][ T8622] vxfs: unable to read disk superblock at 1 [ 110.329139][ T8622] vxfs: unable to read disk superblock at 8 [ 110.333330][ T8622] vxfs: can't find superblock. [ 110.346695][ T8622] vxfs: unable to read disk superblock at 1 [ 110.349267][ T8622] vxfs: unable to read disk superblock at 8 [ 110.351606][ T8622] vxfs: can't find superblock. [ 110.358950][ T8622] vxfs: unable to read disk superblock at 1 [ 110.361619][ T8622] vxfs: unable to read disk superblock at 8 [ 110.364394][ T8622] vxfs: can't find superblock. [ 110.371457][ T8622] vxfs: unable to read disk superblock at 1 [ 110.374473][ T8622] vxfs: unable to read disk superblock at 8 [ 110.377113][ T8622] vxfs: can't find superblock. [ 110.380206][ T8625] SELinux: truncated policydb string identifier [ 110.382423][ T8625] SELinux: failed to load policy [ 110.388415][ T8622] vxfs: unable to read disk superblock at 1 [ 110.391339][ T8622] vxfs: unable to read disk superblock at 8 [ 110.393643][ T8622] vxfs: can't find superblock. [ 110.442446][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 110.442462][ T42] audit: type=1400 audit(2000000056.509:763): avc: denied { read } for pid=8628 comm="syz.4.691" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 110.511672][ T8640] binder: 8639:8640 ioctl c018620c 2000000005c0 returned -1 [ 110.529151][ T36] Bluetooth: hci4: Frame reassembly failed (-84) [ 110.787872][ T5827] usb 8-1: new low-speed USB device number 13 using dummy_hcd [ 110.949273][ T5827] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.953120][ T5827] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 110.956450][ T5827] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 110.960750][ T5827] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 110.964113][ T5827] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.974930][ T8636] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 110.979941][ T5827] hub 8-1:1.0: bad descriptor, ignoring hub [ 110.982083][ T5827] hub 8-1:1.0: probe with driver hub failed with error -5 [ 110.984880][ T5827] cdc_wdm 8-1:1.0: skipping garbage [ 110.986732][ T5827] cdc_wdm 8-1:1.0: skipping garbage [ 110.990137][ T5827] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 110.991970][ T5827] cdc_wdm 8-1:1.0: Unknown control protocol [ 111.020224][ T848] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 111.167778][ T848] usb 7-1: Using ep0 maxpacket: 8 [ 111.170872][ T848] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 111.173556][ T848] usb 7-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 111.176748][ T848] usb 7-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 111.181305][ T848] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.184241][ T848] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.189989][ T848] usbtmc 7-1:16.0: bulk endpoints not found [ 111.343280][ T42] audit: type=1400 audit(2000000057.409:764): avc: denied { bind } for pid=8659 comm="syz.4.700" lport=4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.351199][ T42] audit: type=1400 audit(2000000057.409:765): avc: denied { name_bind } for pid=8659 comm="syz.4.700" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 111.359419][ T42] audit: type=1400 audit(2000000057.409:766): avc: denied { node_bind } for pid=8659 comm="syz.4.700" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 111.366764][ T42] audit: type=1401 audit(2000000057.409:767): op=setxattr invalid_context="system_u:object_r:crond_var_run_t:s0" [ 111.508530][ T42] audit: type=1400 audit(2000000057.569:768): avc: denied { setattr } for pid=8673 comm="syz.4.705" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 111.520767][ T5952] IPVS: starting estimator thread 0... [ 111.549699][ T8635] cdc_wdm 8-1:1.0: Error autopm - -16 [ 111.549891][ T848] usb 8-1: USB disconnect, device number 13 [ 111.608710][ T8676] IPVS: using max 43 ests per chain, 103200 per kthread [ 112.077792][ T848] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 112.337827][ T5738] Bluetooth: hci2: command tx timeout [ 112.368165][ T8700] net_ratelimit: 30 callbacks suppressed [ 112.368179][ T8700] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 112.419073][ T848] usb 8-1: device descriptor read/64, error -71 [ 112.567898][ T5738] Bluetooth: hci4: command 0xfc11 tx timeout [ 112.578041][ T5747] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 113.341902][ T8708] 9pnet_fd: p9_fd_create_tcp (8708): problem connecting socket to 127.0.0.1 [ 113.344744][ T8709] 9pnet_fd: p9_fd_create_tcp (8709): problem connecting socket to 127.0.0.1 [ 113.424282][ T8719] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 113.429400][ T8719] Illegal XDP return value 32768 on prog (id 131) dev N/A, expect packet loss! [ 113.571545][ T8725] netlink: 276 bytes leftover after parsing attributes in process `syz.3.719'. [ 113.628081][ T8728] syzkaller0: entered promiscuous mode [ 113.629935][ T8728] syzkaller0: entered allmulticast mode [ 113.638178][ T8728] netlink: 36 bytes leftover after parsing attributes in process `syz.3.720'. [ 113.641181][ T8728] bond0: entered promiscuous mode [ 113.642879][ T8728] bond_slave_0: entered promiscuous mode [ 113.644889][ T8728] bond_slave_1: entered promiscuous mode [ 113.646839][ T8728] bond0: entered allmulticast mode [ 113.649014][ T8728] bond_slave_0: entered allmulticast mode [ 113.651365][ T8728] bond_slave_1: entered allmulticast mode [ 113.654905][ T8728] netlink: 'syz.3.720': attribute type 10 has an invalid length. [ 113.660126][ T8728] syz_tun: entered promiscuous mode [ 113.668163][ T8728] syz_tun: entered allmulticast mode [ 113.672362][ T8728] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 113.677168][ T6138] bond0: (slave bond_slave_0): interface is now down [ 113.680833][ T6138] bond0: (slave bond_slave_1): interface is now down [ 113.683757][ T6138] bond0: (slave syz_tun): interface is now down [ 113.694982][ T6138] bond0: now running without any active interface! [ 113.803617][ T5827] usb 7-1: USB disconnect, device number 17 [ 113.836088][ T8730] bridge2: entered promiscuous mode [ 113.838100][ T8730] bridge2: entered allmulticast mode [ 114.205954][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.728'. [ 114.224389][ T8753] netlink: 'syz.5.727': attribute type 1 has an invalid length. [ 114.228552][ T8753] netlink: 'syz.5.727': attribute type 1 has an invalid length. [ 114.237773][ T8759] bridge0: port 3(syz_tun) entered blocking state [ 114.242436][ T8759] bridge0: port 3(syz_tun) entered disabled state [ 114.245611][ T8759] syz_tun: entered allmulticast mode [ 114.251792][ T8759] syz_tun: entered promiscuous mode [ 114.253980][ T8759] bridge0: port 3(syz_tun) entered blocking state [ 114.257350][ T8759] bridge0: port 3(syz_tun) entered forwarding state [ 114.271226][ T8759] bridge0: port 3(syz_tun) entered disabled state [ 114.274305][ T8759] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.409122][ T5747] Bluetooth: hci2: command tx timeout [ 114.455995][ T8780] netlink: 'syz.4.736': attribute type 15 has an invalid length. [ 114.504035][ T8780] anx7411 0-002c: fail to probe typec property. [ 114.506499][ T8782] netlink: 296 bytes leftover after parsing attributes in process `syz.5.732'. [ 114.524900][ T8780] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 114.530870][ T8780] SELinux: policydb version 0 does not match my version range 15-35 [ 114.534328][ T8780] SELinux: failed to load policy [ 114.617744][ T8536] usb 8-1: new low-speed USB device number 16 using dummy_hcd [ 114.635220][ T8797] loop5: detected capacity change from 0 to 7 [ 114.639187][ T8797] Dev loop5: unable to read RDB block 7 [ 114.641520][ T8797] loop5: unable to read partition table [ 114.643868][ T8797] loop5: partition table beyond EOD, truncated [ 114.651702][ T8797] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 114.696157][ T8802] fuse: Bad value for 'fd' [ 114.699069][ T8802] loop9: detected capacity change from 0 to 524287936 [ 114.793008][ T8809] netlink: 'syz.4.743': attribute type 2 has an invalid length. [ 114.796828][ T8809] netlink: 'syz.4.743': attribute type 2 has an invalid length. [ 115.088429][ T42] audit: type=1400 audit(2000000061.149:769): avc: denied { setattr } for pid=8833 comm="syz.4.750" name="ptmx" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 115.228182][ T8848] fuse: Bad value for 'rootmode' [ 115.238970][ T8850] fuse: Bad value for 'rootmode' [ 115.293008][ T8855] xt_hashlimit: invalid interval [ 115.679034][ T6046] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 115.736510][ T42] audit: type=1400 audit(2000000061.799:770): avc: denied { create } for pid=8877 comm="syz.4.765" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 115.830272][ T6046] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.835397][ T6046] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 115.839872][ T6046] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.844470][ T6046] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 115.852048][ T6046] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 115.855859][ T6046] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.864016][ T6046] usb 7-1: config 0 descriptor?? [ 115.867154][ T8874] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 116.247099][ T8883] Invalid argument reading file caps for ./file0 [ 116.324170][ T42] audit: type=1400 audit(2000000062.389:771): avc: denied { name_bind } for pid=8884 comm="syz.5.767" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 116.339635][ T42] audit: type=1400 audit(2000000062.409:772): avc: denied { listen } for pid=8804 comm="syz.3.742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.359958][ T8885] usb usb9: usbfs: process 8885 (syz.5.767) did not claim interface 9 before use [ 116.414160][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 116.443270][ T6138] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.453099][ T6138] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.455272][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz.4.768'. [ 116.460903][ T6138] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.464880][ T6138] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.481407][ T42] audit: type=1400 audit(2000000062.549:773): avc: denied { getopt } for pid=8891 comm="syz.5.769" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 116.591048][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.771'. [ 116.609819][ T6046] usbhid 7-1:0.0: can't add hid device: -71 [ 116.611801][ T6046] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 116.618909][ T6046] usb 7-1: USB disconnect, device number 18 [ 116.766771][ T8911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.775'. [ 117.008537][ T5827] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 117.027690][ T8536] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 117.178578][ T8536] usb 10-1: Using ep0 maxpacket: 8 [ 117.184035][ T8536] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 117.197653][ T8536] usb 10-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 117.200920][ T8536] usb 10-1: config 0 interface 0 has no altsetting 0 [ 117.203025][ T8536] usb 10-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 117.205845][ T8536] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.219649][ T8536] usb 10-1: config 0 descriptor?? [ 117.318538][ T8924] loop2: detected capacity change from 0 to 7 [ 117.330107][ T8924] Dev loop2: unable to read RDB block 7 [ 117.332081][ T8924] loop2: AHDI p1 p2 p3 [ 117.333412][ T8924] loop2: partition table partially beyond EOD, truncated [ 117.335846][ T8924] loop2: p1 start 1601398130 is beyond EOD, truncated [ 117.338192][ T8924] loop2: p2 start 1702059890 is beyond EOD, truncated [ 117.574031][ T8927] netlink: 'syz.4.780': attribute type 2 has an invalid length. [ 117.577030][ T8927] netlink: 'syz.4.780': attribute type 2 has an invalid length. [ 117.634739][ T8536] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 117.643560][ T8536] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 117.655463][ T8536] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 117.658036][ T8536] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 117.660338][ T8536] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 117.665279][ T8536] mcp2221 0003:04D8:00DD.0006: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 117.694233][ T42] audit: type=1400 audit(2000000063.759:774): avc: denied { write } for pid=8937 comm="syz.3.783" name="functions" dev="configfs" ino=15800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 117.852584][ T8536] usb 10-1: USB disconnect, device number 2 [ 118.001807][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 118.004644][ T8948] netlink: 8 bytes leftover after parsing attributes in process `syz.4.786'. [ 118.005377][ T8950] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.017766][ T5813] usb 8-1: new full-speed USB device number 17 using dummy_hcd [ 118.021494][ T8950] program syz.2.787 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.054264][ T1047] libceph: mon0 (1)[c::]:6789 socket error on write [ 118.062990][ T5827] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 118.083298][ T42] audit: type=1400 audit(2000000064.149:775): avc: denied { getopt } for pid=8954 comm="syz.4.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.169035][ T5813] usb 8-1: not running at top speed; connect to a high speed hub [ 118.172517][ T5813] usb 8-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 118.178337][ T5813] usb 8-1: New USB device found, idVendor=0944, idProduct=0201, bcdDevice= 0.40 [ 118.181333][ T5813] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.183849][ T5813] usb 8-1: Product: 곡çºî¾æ™ç·•沈氇咑ï ë˜˜ë•媆Ხ㢱æ›éŸ½â”žëŠ¼ëŠ·èŠ©íŽ­ì—ƒä¡Šë‹…å· áœ¯äŽ“ãž…èŠ¶í‡®î”‡ì¤¿äŸ³î‰å¿žÇ¿á³£ï¦¯ì›¥ì½€î¨ë¯£æ …è¼›í‚ꀕἘ胾â…אּ燲Ꭴߥ턙ܺ⋉ꄚ砻ïŠášâ—Ÿï¾©ë±ê„­ [ 118.190880][ T5813] usb 8-1: Manufacturer: ш [ 118.192350][ T5813] usb 8-1: SerialNumber: syz [ 118.266604][ T8958] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8958 comm=syz.4.789 [ 118.321882][ T5827] libceph: mon0 (1)[c::]:6789 socket error on write [ 118.392585][ T8967] bond1: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 118.405629][ T8967] bond1 (unregistering): Released all slaves [ 118.406434][ T5813] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 118.410192][ T5813] usb 8-1: MIDIStreaming interface descriptor not found [ 118.457074][ T5813] usb 8-1: USB disconnect, device number 17 [ 118.569643][ T42] audit: type=1400 audit(2000000064.639:776): avc: denied { write } for pid=8978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.621221][ T8984] __nla_validate_parse: 2 callbacks suppressed [ 118.621233][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.4.794'. [ 118.624592][ T42] audit: type=1400 audit(2000000064.689:777): avc: denied { write } for pid=8982 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.626152][ T8984] netlink: 17 bytes leftover after parsing attributes in process `syz.4.794'. [ 118.636816][ T8984] tipc: Invalid UDP bearer configuration [ 118.636840][ T8984] tipc: Enabling of bearer rejected, failed to enable media [ 118.642744][ T8984] IPVS: sed: FWM 3 0x00000003 - no destination available [ 118.648204][ C3] IPVS: sed: FWM 3 0x00000003 - no destination available [ 118.689281][ T8991] virtio-fs: tag not found [ 118.835791][ T8950] ceph: No mds server is up or the cluster is laggy [ 118.841719][ T5827] libceph: mon0 (1)[c::]:6789 socket error on write [ 118.995620][ T9011] netlink: 'syz.2.803': attribute type 9 has an invalid length. [ 119.000769][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 119.030182][ T6138] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.030220][ T9011] netlink: 'syz.2.803': attribute type 9 has an invalid length. [ 119.034790][ T6138] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.035971][ T9011] netlink: 4 bytes leftover after parsing attributes in process `syz.2.803'. [ 119.042789][ T6138] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.046086][ T6138] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 119.046346][ T9013] hfsplus: unable to find HFS+ superblock [ 119.100015][ T9016] bond1: (slave lo): Releasing backup interface [ 119.102574][ T9016] bond1: (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 119.110336][ T9016] bond0: (slave syz_tun): Releasing backup interface [ 119.113022][ T9016] syz_tun: left allmulticast mode [ 119.128462][ T9016] team0: Port device dummy0 removed [ 119.132381][ T9016] bridge_slave_0: left allmulticast mode [ 119.134200][ T9016] bridge_slave_0: left promiscuous mode [ 119.139301][ T9016] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.144430][ T9016] bridge_slave_1: left allmulticast mode [ 119.146685][ T9016] bridge_slave_1: left promiscuous mode [ 119.149543][ T9016] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.161170][ T9016] bond0: (slave bond_slave_0): Releasing backup interface [ 119.164176][ T9016] bond_slave_0: left promiscuous mode [ 119.166346][ T9016] bond_slave_0: left allmulticast mode [ 119.174836][ T9016] bond0: (slave bond_slave_1): Releasing backup interface [ 119.177857][ T9016] bond_slave_1: left promiscuous mode [ 119.179895][ T9016] bond_slave_1: left allmulticast mode [ 119.188982][ T9016] team0: Port device team_slave_0 removed [ 119.196037][ T9016] team0: Port device team_slave_1 removed [ 119.198592][ T9016] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.201180][ T9016] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.204388][ T9016] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.207479][ T9016] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 119.213404][ T9017] team0: Mode changed to "activebackup" [ 119.222707][ T42] audit: type=1400 audit(2000000065.289:778): avc: denied { associate } for pid=9015 comm="syz.3.805" name="blkio.bfq.io_wait_time_recursive" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 119.255556][ T42] audit: type=1400 audit(2000000065.319:779): avc: denied { write } for pid=9019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 119.316717][ T9029] netlink: 778 bytes leftover after parsing attributes in process `syz.5.808'. [ 119.387035][ T9031] kvm: kvm [9030]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x7 [ 119.391933][ T9031] kvm: kvm [9030]: vcpu2, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x7 [ 119.470066][ T9044] vivid-000: disconnect [ 119.551744][ T9047] netlink: 'syz.4.812': attribute type 58 has an invalid length. [ 119.632678][ T9049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.813'. [ 119.636023][ T9049] netlink: 'syz.4.813': attribute type 10 has an invalid length. [ 119.640092][ T9049] netlink: 12 bytes leftover after parsing attributes in process `syz.4.813'. [ 119.716051][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.5.811'. [ 119.725252][ T9044] netlink: 'syz.5.811': attribute type 1 has an invalid length. [ 119.727897][ T9044] nbd: error processing sock list [ 119.737418][ T9043] vivid-000: reconnect [ 119.792813][ T9064] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 119.797079][ T9064] overlayfs: failed to set xattr on upper [ 119.799681][ T9064] overlayfs: ...falling back to redirect_dir=nofollow. [ 119.801883][ T9064] overlayfs: ...falling back to index=off. [ 119.802424][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 119.803708][ T9064] overlayfs: ...falling back to uuid=null. [ 119.811745][ T9064] overlayfs: maximum fs stacking depth exceeded [ 119.870691][ T5827] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 120.007844][ T5820] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 120.017934][ T5827] usb 7-1: Using ep0 maxpacket: 32 [ 120.030529][ T5827] usb 7-1: unable to get BOS descriptor or descriptor too short [ 120.033996][ T5827] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 120.043915][ T5827] usb 7-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 120.047514][ T5827] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.050177][ T5827] usb 7-1: Product: syz [ 120.051482][ T5827] usb 7-1: Manufacturer: syz [ 120.052910][ T5827] usb 7-1: SerialNumber: syz [ 120.127533][ T9089] netlink: 108 bytes leftover after parsing attributes in process `syz.4.826'. [ 120.163046][ T5820] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.166913][ T5820] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65327, setting to 1024 [ 120.171153][ T5820] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 120.175061][ T5820] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 120.178243][ T5820] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.188380][ T9062] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 120.198288][ T5820] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.301391][ T5827] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 120.306080][ T5827] usb 7-1: MIDIStreaming interface descriptor not found [ 120.388149][ T9111] loop4: detected capacity change from 0 to 7 [ 120.400868][ T10] usb 8-1: USB disconnect, device number 18 [ 120.410967][ T9112] nbd: nbd64 already in use [ 120.416714][ T5827] usb 7-1: USB disconnect, device number 19 [ 120.430268][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 120.453159][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.456525][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.468078][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.471345][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.477294][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.480310][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.485455][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.488677][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.493458][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.496591][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.533893][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.537024][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.543189][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.546246][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.552115][ C2] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.555463][ C2] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.561892][ C3] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 120.565323][ C3] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.574358][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 120.617050][ T9131] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 120.638577][ T5741] udevd[5741]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 120.792618][ T9144] syz_tun (unregistering): left allmulticast mode [ 120.797165][ T9146] Invalid source name [ 120.797943][ T9144] syz_tun (unregistering): left promiscuous mode [ 120.799282][ T9146] UBIFS error (pid: 9146): cannot open "/dev/sg0", error -22 [ 120.801224][ T9144] bridge0: port 3(syz_tun) entered disabled state [ 120.977292][ T9157] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3765145859 (60242333744 ns) > initial count (29576955120 ns). Using initial count to start timer. [ 121.326265][ T9175] kvm: requested 117333 ns i8254 timer period limited to 200000 ns [ 121.341457][ T9175] kvm: requested 179352 ns i8254 timer period limited to 200000 ns [ 121.346863][ T9179] xt_ecn: cannot match TCP bits for non-tcp packets [ 121.348486][ T9175] kvm: requested 85485 ns i8254 timer period limited to 200000 ns [ 121.353328][ T9175] kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 121.357945][ T9175] kvm: requested 164266 ns i8254 timer period limited to 200000 ns [ 121.375259][ T9175] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 121.406426][ T9175] kvm: requested 125714 ns i8254 timer period limited to 200000 ns [ 121.411164][ T9175] kvm: requested 88838 ns i8254 timer period limited to 200000 ns [ 121.416384][ T9175] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 121.420354][ T9175] kvm: requested 199466 ns i8254 timer period limited to 200000 ns [ 121.485011][ T9182] netlink: 'syz.4.852': attribute type 39 has an invalid length. [ 121.536813][ T9183] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4234756656 (33878053248 ns) > initial count (25262286960 ns). Using initial count to start timer. [ 121.692710][ T9185] syzkaller0: entered promiscuous mode [ 121.695100][ T9185] syzkaller0: entered allmulticast mode [ 121.880183][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 121.880209][ T42] audit: type=1400 audit(2000000067.949:794): avc: denied { ioctl } for pid=9192 comm="syz.4.856" path="/219/config/usb_gadget/g1/bcdUSB" dev="configfs" ino=30475 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 121.939527][ T42] audit: type=1400 audit(2000000068.009:795): avc: denied { write } for pid=9192 comm="syz.4.856" name="g1" dev="configfs" ino=15799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 122.172537][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056839400: rx timeout, send abort [ 122.673034][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888039c3f400: rx timeout, send abort [ 122.676605][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888056839400: abort rx timeout. Force session deactivation [ 123.176553][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888039c3f400: abort rx timeout. Force session deactivation [ 123.201618][ T9191] kthread_run failed with err -4 [ 123.235595][ T9193] bond3: ARP target 9.0.0.0 is already present [ 123.237558][ T9193] bond3: option arp_ip_target: invalid value (9) [ 123.240958][ T9193] bond3 (unregistering): Released all slaves [ 123.399897][ T9215] netlink: 'syz.4.861': attribute type 1 has an invalid length. [ 123.421478][ T9215] bond3: entered promiscuous mode [ 123.423499][ T9215] 8021q: adding VLAN 0 to HW filter on device bond3 [ 123.476805][ T9215] veth3: entered allmulticast mode [ 123.489734][ T9215] bond3: (slave veth3): making interface the new active one [ 123.492168][ T9215] veth3: entered promiscuous mode [ 123.494628][ T9215] bond3: (slave veth3): Enslaving as an active interface with an up link [ 123.503875][ T9227] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 123.507846][ T9227] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 123.538167][ T848] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 123.632474][ T42] audit: type=1400 audit(2000000069.699:796): avc: denied { read } for pid=9228 comm="syz.4.865" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.641326][ T42] audit: type=1400 audit(2000000069.699:797): avc: denied { open } for pid=9228 comm="syz.4.865" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 123.678297][ T5813] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 123.697846][ T848] usb 10-1: Using ep0 maxpacket: 32 [ 123.701198][ T848] usb 10-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 123.710124][ T848] usb 10-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 123.713880][ T848] usb 10-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.717420][ T848] usb 10-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 123.724815][ T848] usb 10-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 123.727936][ T848] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.730522][ T848] usb 10-1: Product: syz [ 123.731867][ T848] usb 10-1: Manufacturer: syz [ 123.733430][ T848] usb 10-1: SerialNumber: syz [ 123.742603][ C3] imon 10-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 123.747144][ T848] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/input/input15 [ 123.849268][ T5813] usb 8-1: Using ep0 maxpacket: 8 [ 123.856946][ T5813] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 123.860067][ T5813] usb 8-1: config 179 has no interface number 0 [ 123.862097][ T5813] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 123.865519][ T5813] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 123.869442][ T5813] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.873088][ T5813] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 123.879296][ T5813] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 123.883405][ T5813] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 123.886244][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.900090][ T9220] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 123.912824][ T9252] __nla_validate_parse: 6 callbacks suppressed [ 123.912835][ T9252] netlink: 12 bytes leftover after parsing attributes in process `syz.4.872'. [ 123.958715][ T848] imon 10-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 123.964088][ T848] (id 0x00) [ 124.010201][ T9260] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 124.017751][ T848] rc_core: IR keymap rc-imon-pad not found [ 124.018849][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 124.020865][ T848] Registered IR keymap rc-empty [ 124.022622][ T9260] netlink: 28 bytes leftover after parsing attributes in process `syz.4.875'. [ 124.024385][ T848] imon 10-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 124.028581][ T9260] Failed to get privilege flags for destination (handle=0x2:0xfffffffc) [ 124.032674][ T848] imon 10-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 124.118663][ T9260] netlink: 'syz.4.875': attribute type 2 has an invalid length. [ 124.169086][ T848] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0 [ 124.174454][ T848] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:155.0/rc/rc0/input16 [ 124.190883][ T848] imon 10-1:155.0: iMON device (15c2:ffdc, intf0) on usb<10:3> initialized [ 124.195458][ T9264] netlink: 56 bytes leftover after parsing attributes in process `syz.2.876'. [ 124.294517][ T9272] SELinux: syz.4.878 (9272) wrote to checkreqprot. This is no longer supported. [ 124.309801][ T5523] usb 8-1: USB disconnect, device number 19 [ 124.420523][ T9211] imon:send_packet: task interrupted [ 124.425755][ T9211] imon:send_packet: packet tx failed (-512) [ 124.426152][ T9285] dummy_hcd dummy_hcd.0: remove, state 4 [ 124.428574][ T9211] imon:vfd_write: send packet #1 failed [ 124.432450][ T9285] usb usb5: USB disconnect, device number 1 [ 124.443003][ T848] usb 10-1: USB disconnect, device number 3 [ 124.515816][ T42] audit: type=1400 audit(2000000070.579:798): avc: denied { map } for pid=9290 comm="syz.5.882" path="/proc/116/net/netlink" dev="proc" ino=4026532844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 124.603436][ T9285] dummy_hcd dummy_hcd.0: stopped [ 124.605817][ T9285] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 124.646156][ T9289] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 124.651626][ T9289] dummy_hcd dummy_hcd.0: Dummy host controller [ 124.674576][ T9289] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 5 [ 124.685563][ T9289] usb usb5: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 124.689133][ T9289] usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 124.692045][ T9289] usb usb5: Product: Dummy host controller [ 124.694128][ T9289] usb usb5: Manufacturer: Linux syzkaller dummy_hcd [ 124.696556][ T9289] usb usb5: SerialNumber: dummy_hcd.0 [ 124.716015][ T9289] hub 5-0:1.0: USB hub found [ 124.725150][ T9289] hub 5-0:1.0: 1 port detected [ 124.904156][ T9310] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.906531][ T9316] netlink: 20 bytes leftover after parsing attributes in process `syz.5.890'. [ 124.974530][ T9321] ci_hdrc ci_hdrc.0: error -EINVAL: invalid resource (null) [ 124.976994][ T9321] ci_hdrc ci_hdrc.0: probe with driver ci_hdrc failed with error -22 [ 125.043200][ T9330] netlink: 60 bytes leftover after parsing attributes in process `syz.2.893'. [ 125.108411][ T9336] netlink: 'syz.2.895': attribute type 8 has an invalid length. [ 125.136883][ T42] audit: type=1400 audit(2000000071.199:799): avc: denied { write } for pid=9334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.162458][ T5813] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 125.167155][ T9310] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.179569][ T42] audit: type=1400 audit(2000000071.249:800): avc: denied { write } for pid=9344 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.251452][ T42] audit: type=1400 audit(2000000071.319:801): avc: denied { write } for pid=9348 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.263539][ T9356] netlink: 4 bytes leftover after parsing attributes in process `syz.4.899'. [ 125.299319][ T5813] usb 10-1: device descriptor read/64, error -71 [ 125.303804][ T42] audit: type=1400 audit(2000000071.369:802): avc: denied { write } for pid=9358 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 125.306457][ T9360] netlink: 44 bytes leftover after parsing attributes in process `syz.4.900'. [ 125.347248][ T9310] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.438403][ T9371] overlayfs: overlapping lowerdir path [ 125.449710][ T9371] openvswitch: netlink: IP tunnel TTL not specified. [ 125.452739][ T9371] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.485634][ T9310] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.549838][ T5813] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 125.554966][ T9379] loop8: detected capacity change from 0 to 8 [ 125.557569][ T9379] Dev loop8: unable to read RDB block 8 [ 125.560003][ T9379] loop8: unable to read partition table [ 125.562124][ T9379] loop8: partition table beyond EOD, truncated [ 125.564417][ T9379] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 125.593265][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.603120][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.615063][ T13] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.623406][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.636674][ T9380] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9380 comm=syz.2.906 [ 125.690377][ T5813] usb 10-1: device descriptor read/64, error -71 [ 125.709508][ T9385] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 125.799286][ T5813] usb usb10-port1: attempt power cycle [ 126.158006][ T5813] usb 10-1: new full-speed USB device number 6 using dummy_hcd [ 126.178359][ T5813] usb 10-1: device descriptor read/8, error -71 [ 126.426664][ T9393] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=770 sclass=netlink_route_socket pid=9393 comm=syz.2.911 [ 126.431697][ T5813] usb 10-1: new full-speed USB device number 7 using dummy_hcd [ 126.448667][ T5813] usb 10-1: device descriptor read/8, error -71 [ 126.514863][ T9396] netlink: 12 bytes leftover after parsing attributes in process `syz.2.912'. [ 126.558493][ T5813] usb usb10-port1: unable to enumerate USB device [ 126.565488][ T6042] IPVS: starting estimator thread 0... [ 126.571072][ T42] audit: type=1400 audit(2000000072.639:803): avc: denied { getopt } for pid=9397 comm="syz.2.913" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 126.648094][ T9399] IPVS: using max 21 ests per chain, 50400 per kthread [ 126.862116][ T9411] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 126.896173][ T9411] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 126.899406][ T9411] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 126.915057][ T9411] vhci_hcd vhci_hcd.0: Device attached [ 126.921860][ T9411] netlink: 24 bytes leftover after parsing attributes in process `syz.3.918'. [ 127.087768][ T6042] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 127.147686][ T6042] usb 43-1: new full-speed USB device number 2 using vhci_hcd [ 127.190961][ T42] audit: type=1400 audit(2000000073.259:804): avc: denied { write } for pid=9423 comm="syz.4.923" name="functions" dev="configfs" ino=15800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 127.194329][ T9424] file system registered [ 127.207825][ T10] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 127.215618][ T42] audit: type=1400 audit(2000000073.279:805): avc: denied { mount } for pid=9423 comm="syz.4.923" name="/" dev="functionfs" ino=29572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 127.216791][ T9424] read descriptors [ 127.225750][ T9424] bcdVersion must be 0x0100, stored in Little Endian order. Userspace driver should be fixed, accepting 0x0001 for compatibility. [ 127.242769][ T42] audit: type=1400 audit(2000000073.309:806): avc: denied { unmount } for pid=6086 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 127.254970][ T6086] ffs_data_put(): freeing [ 127.319033][ T42] audit: type=1400 audit(2000000073.379:807): avc: denied { remove_name } for pid=9433 comm="syz.4.925" name="file0" dev="9p" ino=78395371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 127.330327][ T42] audit: type=1400 audit(2000000073.399:808): avc: denied { unlink } for pid=9433 comm="syz.4.925" name="file0" dev="9p" ino=78395371 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.367697][ T10] usb 8-1: Using ep0 maxpacket: 16 [ 127.374320][ T10] usb 8-1: config 0 has no interfaces? [ 127.378961][ T10] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 127.387791][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.392553][ T10] usb 8-1: Product: syz [ 127.396721][ T10] usb 8-1: Manufacturer: syz [ 127.401190][ T10] usb 8-1: SerialNumber: syz [ 127.414662][ T10] usb 8-1: config 0 descriptor?? [ 127.435461][ T42] audit: type=1400 audit(2000000073.499:809): avc: denied { link } for pid=9433 comm="syz.4.925" name="file1" dev="9p" ino=78395415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 127.622961][ T9411] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.628138][ T9412] usb 43-1: recv xbuf, 0 [ 127.631999][ T9411] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.637016][ T6138] vhci_hcd vhci_hcd.3: stop threads [ 127.638777][ T10] usb 8-1: USB disconnect, device number 20 [ 127.641737][ T6138] vhci_hcd vhci_hcd.3: release socket [ 127.644813][ T6138] vhci_hcd vhci_hcd.3: disconnect device [ 127.707955][ T6042] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 127.824508][ T5738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 127.834937][ T5738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 127.838101][ T5738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 127.841104][ T5738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 127.843900][ T5738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 127.974298][ T9454] sctp: [Deprecated]: syz.2.931 (pid 9454) Use of struct sctp_assoc_value in delayed_ack socket option. [ 127.974298][ T9454] Use struct sctp_sack_info instead [ 128.011010][ T42] audit: type=1400 audit(2000000074.079:810): avc: denied { setopt } for pid=9457 comm="syz.5.932" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 128.311699][ T9444] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.314254][ T9444] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.316658][ T9444] bridge_slave_0: entered allmulticast mode [ 128.319504][ T9444] bridge_slave_0: entered promiscuous mode [ 128.322776][ T9444] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.325014][ T9444] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.327297][ T9444] bridge_slave_1: entered allmulticast mode [ 128.330587][ T9444] bridge_slave_1: entered promiscuous mode [ 128.352031][ T9444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.356680][ T9444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.386191][ T9444] team0: Port device team_slave_0 added [ 128.391267][ T9444] team0: Port device team_slave_1 added [ 128.410289][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.412566][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.420984][ T9444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.425343][ T9444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.427649][ T9444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 128.435520][ T9444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.459721][ T9444] hsr_slave_0: entered promiscuous mode [ 128.462156][ T9444] hsr_slave_1: entered promiscuous mode [ 128.464289][ T9444] debugfs: 'hsr0' already exists in 'hsr' [ 128.466109][ T9444] Cannot create hsr debugfs directory [ 128.478007][ T5813] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 128.508030][ T5820] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 128.597845][ T9444] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 128.602443][ T9444] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 128.605234][ T9444] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 128.609505][ T9444] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 128.612337][ T9444] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 128.616333][ T9444] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 128.619179][ T9444] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 128.624961][ T9444] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 128.658245][ T5813] usb 8-1: Using ep0 maxpacket: 8 [ 128.676507][ T5820] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 128.681313][ T5820] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 128.683413][ T5813] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.686303][ T5820] usb 7-1: config 0 interface 0 has no altsetting 0 [ 128.695126][ T5820] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 128.698885][ T5820] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 128.702384][ T5820] usb 7-1: Product: syz [ 128.702754][ T5813] usb 8-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 128.704024][ T5820] usb 7-1: Manufacturer: syz [ 128.704034][ T5820] usb 7-1: SerialNumber: syz [ 128.714043][ T5813] usb 8-1: config 0 interface 0 has no altsetting 0 [ 128.717033][ T5813] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 128.720460][ T9444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.721767][ T5813] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.723464][ T5820] usb 7-1: config 0 descriptor?? [ 128.724822][ T5820] hub 7-1:0.0: bad descriptor, ignoring hub [ 128.732302][ T5820] hub 7-1:0.0: probe with driver hub failed with error -5 [ 128.740849][ T5813] usb 8-1: config 0 descriptor?? [ 128.741743][ T9444] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.742079][ T5820] usb 7-1: selecting invalid altsetting 0 [ 128.767398][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.769880][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.801064][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.804671][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.965189][ T5813] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.973318][ T5813] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.978979][ T5813] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.984085][ T5813] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.988485][ T5813] mcp2221 0003:04D8:00DD.0007: unknown main item tag 0x0 [ 128.995126][ T5813] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 129.141016][ T1047] usb 8-1: USB disconnect, device number 21 [ 129.185074][ T9444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.195144][ T42] audit: type=1400 audit(2000000075.259:811): avc: denied { read append } for pid=9518 comm="syz.5.945" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 129.302668][ T9525] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 129.305902][ T9525] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 129.313447][ T9525] --map-set only usable from mangle table [ 129.316170][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.5.945'. [ 129.368746][ T9444] veth0_vlan: entered promiscuous mode [ 129.376398][ T9444] veth1_vlan: entered promiscuous mode [ 129.403008][ T9444] veth0_macvtap: entered promiscuous mode [ 129.409571][ T9444] veth1_macvtap: entered promiscuous mode [ 129.424232][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.433128][ T9444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.448842][ T6138] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.452019][ T6138] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.455947][ T6138] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.460045][ T6138] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.490868][ T1047] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 129.649508][ T1047] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 129.652732][ T1047] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 129.655751][ T1047] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 129.661121][ T1047] usb 8-1: New USB device found, idVendor=0525, idProduct=127a, bcdDevice= 1.00 [ 129.664477][ T1047] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 129.667023][ T1047] usb 8-1: Product: syz [ 129.668960][ T1047] usb 8-1: Manufacturer: syz [ 129.672482][ T9517] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 129.676439][ T1047] usb_debug 8-1:1.0: debug converter detected [ 129.683306][ T1047] usb 8-1: debug converter now attached to ttyUSB0 [ 129.827026][ T10] usb 7-1: USB disconnect, device number 20 [ 129.884092][ T9517] debug ttyUSB0: usb_serial_generic_write_start - error submitting urb: -90 [ 129.896026][ T1047] usb 8-1: USB disconnect, device number 22 [ 129.914684][ T1047] debug ttyUSB0: debug converter now disconnected from ttyUSB0 [ 129.918733][ T1047] usb_debug 8-1:1.0: device disconnected [ 129.928258][ T5747] Bluetooth: hci1: command tx timeout [ 130.019063][ T9519] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 130.026950][ T9519] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.048506][ T9519] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 130.055259][ T9519] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 130.057490][ T9519] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.079377][ T9519] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 130.088780][ T9519] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.091421][ T9519] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.096669][ T9519] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 130.146670][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.153473][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.178127][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.182048][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.229992][ T9532] sit0: entered promiscuous mode [ 130.233352][ T9532] netlink: 'syz.6.937': attribute type 1 has an invalid length. [ 130.235797][ T9532] netlink: 1 bytes leftover after parsing attributes in process `syz.6.937'. [ 130.359118][ T1047] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 130.510668][ T1047] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 130.513883][ T1047] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.517178][ T42] audit: type=1400 audit(2000000076.579:812): avc: denied { ioctl } for pid=9536 comm="syz.3.947" path="socket:[33342]" dev="sockfs" ino=33342 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 130.525817][ T1047] usb 7-1: config 0 interface 0 has no altsetting 0 [ 130.530464][ T1047] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.533536][ T1047] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.536219][ T1047] usb 7-1: Product: syz [ 130.537865][ T1047] usb 7-1: Manufacturer: syz [ 130.539456][ T1047] usb 7-1: SerialNumber: syz [ 130.541367][ T9541] CIFS: iocharset name too long [ 130.544916][ T1047] usb 7-1: config 0 descriptor?? [ 130.553901][ T1047] hub 7-1:0.0: bad descriptor, ignoring hub [ 130.567821][ T1047] hub 7-1:0.0: probe with driver hub failed with error -5 [ 130.572514][ T1047] usb 7-1: selecting invalid altsetting 0 [ 130.712952][ T9556] CIFS: VFS: UNC: missing delimiter between hostname and share name [ 130.716535][ T9556] CIFS: VFS: Malformed UNC in devname [ 130.767929][ T42] audit: type=1400 audit(2000000076.839:813): avc: denied { append } for pid=9555 comm="syz.3.953" name="dvr0" dev="devtmpfs" ino=954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 130.858192][ T5820] usb 7-1: USB disconnect, device number 21 [ 131.050022][ T9573] FAULT_INJECTION: forcing a failure. [ 131.050022][ T9573] name failslab, interval 1, probability 10, space 0, times 1 [ 131.055271][ T9573] CPU: 0 UID: 0 PID: 9573 Comm: syz.6.958 Tainted: G L syzkaller #0 PREEMPT(full) [ 131.055300][ T9573] Tainted: [L]=SOFTLOCKUP [ 131.055306][ T9573] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 131.055326][ T9573] Call Trace: [ 131.055351][ T9573] [ 131.055359][ T9573] dump_stack_lvl+0x100/0x190 [ 131.055479][ T9573] should_fail_ex.cold+0x5/0xa [ 131.055525][ T9573] should_failslab+0xc2/0x120 [ 131.055572][ T9573] kmem_cache_alloc_noprof+0x91/0x6a0 [ 131.055590][ T9573] ? trace_kmem_cache_alloc+0xdd/0x100 [ 131.055605][ T9573] ? security_file_alloc+0x34/0x2c0 [ 131.055645][ T9573] security_file_alloc+0x34/0x2c0 [ 131.055657][ T9573] init_file+0x95/0x480 [ 131.055674][ T9573] alloc_empty_file+0x79/0x1c0 [ 131.055689][ T9573] path_openat+0xe7/0x4280 [ 131.055701][ T9573] ? __kasan_slab_alloc+0x89/0x90 [ 131.055716][ T9573] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 131.055729][ T9573] ? do_getname+0x35/0x390 [ 131.055742][ T9573] ? do_sys_openat2+0xc7/0x1e0 [ 131.055756][ T9573] ? __x64_sys_openat+0x12d/0x210 [ 131.055769][ T9573] ? do_syscall_64+0x115/0x870 [ 131.055801][ T9573] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.055818][ T9573] ? __pfx_path_openat+0x10/0x10 [ 131.055849][ T9573] do_file_open+0x20e/0x430 [ 131.055862][ T9573] ? __pfx_do_file_open+0x10/0x10 [ 131.055883][ T9573] ? alloc_fd+0x471/0x7a0 [ 131.055901][ T9573] ? do_getname+0x191/0x390 [ 131.055917][ T9573] do_sys_openat2+0x10f/0x1e0 [ 131.055931][ T9573] ? __pfx_do_sys_openat2+0x10/0x10 [ 131.055946][ T9573] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 131.055964][ T9573] __x64_sys_openat+0x12d/0x210 [ 131.055978][ T9573] ? __pfx___x64_sys_openat+0x10/0x10 [ 131.055997][ T9573] do_syscall_64+0x115/0x870 [ 131.056009][ T9573] ? clear_bhb_loop+0x40/0x90 [ 131.056022][ T9573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.056034][ T9573] RIP: 0033:0x7fc8d599de99 [ 131.056045][ T9573] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.056056][ T9573] RSP: 002b:00007fc8d6890028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 131.056076][ T9573] RAX: ffffffffffffffda RBX: 00007fc8d5c25fa0 RCX: 00007fc8d599de99 [ 131.056084][ T9573] RDX: 0000000000000001 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 131.056091][ T9573] RBP: 00007fc8d5a33eaf R08: 0000000000000000 R09: 0000000000000000 [ 131.056098][ T9573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 131.056104][ T9573] R13: 00007fc8d5c26038 R14: 00007fc8d5c25fa0 R15: 00007ffcaca36a08 [ 131.056118][ T9573] [ 131.154793][ T9573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.958'. [ 131.158891][ T9573] netlink: 28 bytes leftover after parsing attributes in process `syz.6.958'. [ 131.162646][ T9573] netlink: 'syz.6.958': attribute type 4 has an invalid length. [ 131.368054][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.393457][ T9596] overlayfs: failed to resolve './file0': -2 [ 131.411304][ T9597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 131.448923][ T9599] ehci-pci 0000:00:1d.7: remove, state 1 [ 131.461260][ T9599] usb usb1: USB disconnect, device number 1 [ 131.465070][ T9599] usb 1-1: USB disconnect, device number 2 [ 131.624554][ T9599] ehci-pci 0000:00:1d.7: USB bus 1 deregistered [ 131.917804][ T10] usb 2-1: new full-speed USB device number 2 using uhci_hcd [ 132.045227][ T9611] netlink: 8 bytes leftover after parsing attributes in process `syz.3.968'. [ 132.087807][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.114986][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 132.142437][ T10] usb 2-1: New USB device found, idVendor=0627, idProduct=0001, bcdDevice= 0.00 [ 132.146219][ T10] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=10 [ 132.149970][ T10] usb 2-1: Product: QEMU USB Tablet [ 132.152220][ T10] usb 2-1: Manufacturer: QEMU [ 132.154187][ T10] usb 2-1: SerialNumber: 28754-0000:00:1d.7-1 [ 132.167782][ T5738] Bluetooth: hci1: command 0x040f tx timeout [ 132.184543][ T10] input: QEMU QEMU USB Tablet as /devices/pci0000:00/0000:00:1d.0/usb2/2-1/2-1:1.0/0003:0627:0001.0008/input/input17 [ 132.263960][ T5738] Bluetooth: hci1: unexpected event for opcode 0x200b [ 132.264124][ T9620] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 132.290828][ T10] hid-generic 0003:0627:0001.0008: input,hidraw0: USB HID v0.01 Mouse [QEMU QEMU USB Tablet] on usb-0000:00:1d.0-1/input0 [ 132.337654][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 132.337666][ T42] audit: type=1400 audit(2000000078.399:816): avc: denied { map } for pid=9624 comm="syz.5.974" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=746 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 132.447184][ T9639] 9pnet_fd: p9_fd_create_tcp (9639): problem connecting socket to 127.0.0.1 [ 132.533452][ T42] audit: type=1400 audit(2000000078.599:817): avc: denied { remount } for pid=9646 comm="syz.6.980" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 132.533455][ T9647] tracefs: Bad value for 'gid' [ 132.546121][ T9652] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 132.547796][ T9647] tracefs: Bad value for 'gid' [ 132.594350][ T9654] bond2: entered promiscuous mode [ 132.682721][ T9664] netlink: 'syz.3.986': attribute type 178 has an invalid length. [ 132.731054][ T1442] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.733340][ T1442] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.781762][ T9674] netlink: 'syz.3.987': attribute type 1 has an invalid length. [ 132.816290][ T9674] bond3: entered promiscuous mode [ 132.828013][ T9674] 8021q: adding VLAN 0 to HW filter on device bond3 [ 132.858016][ T5827] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 132.866965][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.5.989'. [ 133.006979][ T42] audit: type=1400 audit(2000000079.069:818): avc: denied { map } for pid=9693 comm="syz.3.991" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.008116][ T9642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.016720][ T5827] usb 11-1: Using ep0 maxpacket: 8 [ 133.023052][ T42] audit: type=1400 audit(2000000079.069:819): avc: denied { execute } for pid=9693 comm="syz.3.991" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 133.036459][ T5827] usb 11-1: config index 0 descriptor too short (expected 301, got 45) [ 133.040060][ T5827] usb 11-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 133.047891][ T5827] usb 11-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.058224][ T5827] usb 11-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.062408][ T5827] usb 11-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 133.072924][ T5827] usb 11-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.078789][ T5827] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.095169][ T5827] usbtmc 11-1:16.0: bulk endpoints not found [ 133.155847][ T9703] overlay: Bad value for 'workdir' [ 133.168002][ T9705] bond0: entered promiscuous mode [ 133.170132][ T9705] bond_slave_0: entered promiscuous mode [ 133.172504][ T9705] bond_slave_1: entered promiscuous mode [ 133.276238][ T42] audit: type=1400 audit(2000000079.339:820): avc: denied { write } for pid=9707 comm="syz.5.996" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 133.414849][ T42] audit: type=1400 audit(2000000079.479:821): avc: denied { append } for pid=9714 comm="syz.3.998" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 133.433494][ T9715] syzkaller0: entered promiscuous mode [ 133.435286][ T9715] syzkaller0: entered allmulticast mode [ 133.448034][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.633677][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1001'. [ 133.714965][ T9722] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1001'. [ 133.762454][ T42] audit: type=1400 audit(2000000079.829:822): avc: granted { setsecparam } for pid=9732 comm="syz.5.1003" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 133.799996][ T42] audit: type=1400 audit(2000000079.869:823): avc: denied { lock } for pid=9735 comm="syz.2.1004" path="socket:[32664]" dev="sockfs" ino=32664 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 133.921979][ T42] audit: type=1326 audit(2000000079.989:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9737 comm="syz.5.1006" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7cfdf9de99 code=0x0 [ 134.168690][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 134.244602][ T9756] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1010'. [ 134.280464][ T9758] bridge4: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms) [ 134.456185][ T42] audit: type=1400 audit(2000000080.519:825): avc: denied { create } for pid=9764 comm="syz.2.1013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 134.556140][ T9771] netlink: 'syz.3.1015': attribute type 1 has an invalid length. [ 134.593742][ T9774] capability: warning: `syz.2.1016' uses 32-bit capabilities (legacy support in use) [ 134.602330][ T9771] 8021q: adding VLAN 0 to HW filter on device bond4 [ 134.620375][ T9776] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 134.721970][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.764845][ T9789] syzkaller0: entered promiscuous mode [ 134.766909][ T9789] syzkaller0: entered allmulticast mode [ 134.847923][ T13] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 134.868256][ T5827] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 134.956789][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1020'. [ 134.998252][ T5827] usb 8-1: device descriptor read/64, error -71 [ 135.246819][ T5827] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 135.387886][ T5827] usb 8-1: device descriptor read/64, error -71 [ 135.429041][ T9800] dwc2-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 135.500922][ T5827] usb usb8-port1: attempt power cycle [ 135.527787][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.544366][ T9810] qnx6: unable to set blocksize [ 135.642151][ T5813] usb 11-1: USB disconnect, device number 2 [ 135.850081][ T5827] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 135.907070][ T5827] usb 8-1: device descriptor read/8, error -71 [ 136.093324][ T9830] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1031'. [ 136.147895][ T5827] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 136.173020][ T5827] usb 8-1: device descriptor read/8, error -71 [ 136.248133][ T5738] Bluetooth: hci2: command 0x0c1a tx timeout [ 136.265205][ T9849] cgroup: none used incorrectly [ 136.278730][ T5827] usb usb8-port1: unable to enumerate USB device [ 136.301284][ T9851] openvswitch: netlink: Duplicate key (type 6). [ 136.303378][ T9849] kvm: MWAIT instruction emulated as NOP! [ 136.545947][ T9863] sctp: [Deprecated]: syz.6.1040 (pid 9863) Use of struct sctp_assoc_value in delayed_ack socket option. [ 136.545947][ T9863] Use struct sctp_sack_info instead [ 136.587732][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 136.593243][ T9862] syz.6.1040 (9862): drop_caches: 2 [ 136.758459][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 136.761766][ T10] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 136.766585][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 136.770891][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 136.773918][ T10] usb 7-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.777579][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 136.781184][ T9872] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1044'. [ 136.781842][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 136.788090][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.797101][ T10] usbtmc 7-1:16.0: bulk endpoints not found [ 136.843898][ T9874] binder: 9873:9874 ioctl c0306201 200000000080 returned -14 [ 136.856460][ T9874] binder: 9873:9874 ioctl c0306201 2000000003c0 returned -14 [ 136.862630][ T9875] binder: BINDER_SET_CONTEXT_MGR already set [ 136.864797][ T9875] binder: 9873:9875 ioctl 4018620d 200000003280 returned -16 [ 137.137563][ T9881] ================================================================== [ 137.141015][ T9881] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 137.144427][ T9881] Read of size 8 at addr ffff88802e85fe38 by task syz.5.1048/9881 [ 137.149071][ T9881] [ 137.150416][ T9881] CPU: 3 UID: 0 PID: 9881 Comm: syz.5.1048 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.150447][ T9881] Tainted: [L]=SOFTLOCKUP [ 137.150455][ T9881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.150467][ T9881] Call Trace: [ 137.150495][ T9881] [ 137.150502][ T9881] dump_stack_lvl+0x100/0x190 [ 137.150560][ T9881] print_report+0x13d/0x4b0 [ 137.150612][ T9881] ? __virt_addr_valid+0x239/0x430 [ 137.150639][ T9881] ? __release_resource+0x276/0x2c0 [ 137.150667][ T9881] kasan_report+0xdf/0x1c0 [ 137.150711][ T9881] ? __release_resource+0x276/0x2c0 [ 137.150741][ T9881] __release_resource+0x276/0x2c0 [ 137.150772][ T9881] release_resource+0x26/0x40 [ 137.150798][ T9881] pci_remove_bus_device+0x2d3/0x3b0 [ 137.150865][ T9881] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 137.150890][ T9881] remove_store+0x123/0x140 [ 137.150914][ T9881] ? __pfx_remove_store+0x10/0x10 [ 137.150938][ T9881] ? find_held_lock+0x2b/0x80 [ 137.150967][ T9881] ? sysfs_file_kobj+0xe4/0x290 [ 137.151003][ T9881] ? sysfs_file_kobj+0xe4/0x290 [ 137.151030][ T9881] ? __pfx_remove_store+0x10/0x10 [ 137.151054][ T9881] dev_attr_store+0x58/0x80 [ 137.151115][ T9881] ? __pfx_dev_attr_store+0x10/0x10 [ 137.151140][ T9881] sysfs_kf_write+0xf2/0x150 [ 137.151168][ T9881] kernfs_fop_write_iter+0x3e0/0x5f0 [ 137.151191][ T9881] ? __pfx_sysfs_kf_write+0x10/0x10 [ 137.151218][ T9881] vfs_write+0x6ac/0x1050 [ 137.151248][ T9881] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 137.151271][ T9881] ? __pfx_vfs_write+0x10/0x10 [ 137.151304][ T9881] ksys_write+0x12a/0x250 [ 137.151331][ T9881] ? __pfx_ksys_write+0x10/0x10 [ 137.151361][ T9881] do_syscall_64+0x115/0x870 [ 137.151412][ T9881] ? clear_bhb_loop+0x40/0x90 [ 137.151434][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.151454][ T9881] RIP: 0033:0x7f7cfdf9de99 [ 137.151472][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.151489][ T9881] RSP: 002b:00007f7cfee70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.151517][ T9881] RAX: ffffffffffffffda RBX: 00007f7cfe225fa0 RCX: 00007f7cfdf9de99 [ 137.151530][ T9881] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 137.151541][ T9881] RBP: 00007f7cfe033eaf R08: 0000000000000000 R09: 0000000000000000 [ 137.151554][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.151565][ T9881] R13: 00007f7cfe226038 R14: 00007f7cfe225fa0 R15: 00007ffc169186e8 [ 137.151588][ T9881] [ 137.151595][ T9881] [ 137.257437][ T9881] Allocated by task 6373: [ 137.259304][ T9881] kasan_save_stack+0x30/0x50 [ 137.261289][ T9881] kasan_save_track+0x14/0x30 [ 137.263311][ T9881] __kasan_kmalloc+0xaa/0xb0 [ 137.265253][ T9881] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 137.267933][ T9881] kmemdup_noprof+0x29/0x60 [ 137.269846][ T9881] platform_device_add_resources+0x37/0x100 [ 137.272330][ T9881] dwc2_pci_probe+0x1d3/0x360 [ 137.274358][ T9881] local_pci_probe+0xdd/0x1b0 [ 137.276361][ T9881] pci_call_probe+0x176/0x800 [ 137.278360][ T9881] pci_device_probe+0x1cd/0x370 [ 137.280415][ T9881] really_probe+0x241/0xa60 [ 137.282364][ T9881] __driver_probe_device+0x20e/0x450 [ 137.284563][ T9881] driver_probe_device+0x4a/0x140 [ 137.286708][ T9881] __driver_attach+0x21f/0x5b0 [ 137.288771][ T9881] bus_for_each_dev+0x13e/0x1d0 [ 137.290846][ T9881] pci_add_dynid+0x2b5/0x370 [ 137.292797][ T9881] new_id_store+0x2a9/0x5b0 [ 137.294728][ T9881] drv_attr_store+0x74/0xb0 [ 137.296615][ T9881] sysfs_kf_write+0xf2/0x150 [ 137.298619][ T9881] kernfs_fop_write_iter+0x3e0/0x5f0 [ 137.300862][ T9881] vfs_write+0x6ac/0x1050 [ 137.302718][ T9881] ksys_write+0x12a/0x250 [ 137.304558][ T9881] do_syscall_64+0x115/0x870 [ 137.306525][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.309034][ T9881] [ 137.310083][ T9881] Freed by task 9881: [ 137.311864][ T9881] kasan_save_stack+0x30/0x50 [ 137.313876][ T9881] kasan_save_track+0x14/0x30 [ 137.315950][ T9881] kasan_save_free_info+0x3b/0x70 [ 137.318107][ T9881] __kasan_slab_free+0x5f/0x80 [ 137.320155][ T9881] kfree+0x22b/0x6c0 [ 137.321807][ T9881] platform_device_release+0x8a/0xb0 [ 137.324059][ T9881] device_release+0xd2/0x270 [ 137.326027][ T9881] kobject_put+0x1f7/0x640 [ 137.327926][ T9881] put_device+0x1f/0x30 [ 137.329678][ T9881] platform_device_unregister+0x45/0x50 [ 137.332053][ T9881] dwc2_pci_remove+0x55/0xd0 [ 137.334029][ T9881] pci_device_remove+0xb2/0x1d0 [ 137.336099][ T9881] device_remove+0xcb/0x180 [ 137.338022][ T9881] device_release_driver_internal+0x44e/0x620 [ 137.340588][ T9881] pci_stop_bus_device+0x120/0x160 [ 137.342760][ T9881] pci_stop_and_remove_bus_device+0x58/0xa0 [ 137.345132][ T9881] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 137.347866][ T9881] remove_store+0x123/0x140 [ 137.349792][ T9881] dev_attr_store+0x58/0x80 [ 137.351727][ T9881] sysfs_kf_write+0xf2/0x150 [ 137.353664][ T9881] kernfs_fop_write_iter+0x3e0/0x5f0 [ 137.355896][ T9881] vfs_write+0x6ac/0x1050 [ 137.357735][ T9881] ksys_write+0x12a/0x250 [ 137.359565][ T9881] do_syscall_64+0x115/0x870 [ 137.361544][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.364037][ T9881] [ 137.365092][ T9881] The buggy address belongs to the object at ffff88802e85fe00 [ 137.365092][ T9881] which belongs to the cache kmalloc-128 of size 128 [ 137.370858][ T9881] The buggy address is located 56 bytes inside of [ 137.370858][ T9881] freed 128-byte region [ffff88802e85fe00, ffff88802e85fe80) [ 137.376481][ T9881] [ 137.377511][ T9881] The buggy address belongs to the physical page: [ 137.380204][ T9881] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e85f [ 137.383838][ T9881] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 137.386785][ T9881] page_type: f5(slab) [ 137.388460][ T9881] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 137.391974][ T9881] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 137.395498][ T9881] page dumped because: kasan: bad access detected [ 137.398159][ T9881] page_owner tracks the page as allocated [ 137.400544][ T9881] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 37, tgid 37 (kworker/u33:1), ts 13542959293, free_ts 13542878732 [ 137.408875][ T9881] post_alloc_hook+0xfd/0x120 [ 137.410909][ T9881] get_page_from_freelist+0xf48/0x3530 [ 137.413212][ T9881] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 137.415610][ T9881] new_slab+0xa2/0x640 [ 137.417300][ T9881] refill_objects+0xe3/0x410 [ 137.419247][ T9881] __pcs_replace_empty_main+0x376/0x680 [ 137.421522][ T9881] __kmalloc_noprof+0x66d/0x820 [ 137.423559][ T9881] lsm_blob_alloc+0x68/0x90 [ 137.425505][ T9881] security_task_alloc+0x2a/0x260 [ 137.427557][ T9881] copy_process+0x2b94/0x8030 [ 137.429470][ T9881] kernel_clone+0x176/0x9d0 [ 137.431356][ T9881] user_mode_thread+0xcc/0x110 [ 137.433289][ T9881] call_usermodehelper_exec_work+0xcb/0x180 [ 137.435673][ T9881] process_one_work+0xa23/0x1940 [ 137.437699][ T9881] worker_thread+0x5ef/0xe50 [ 137.439629][ T9881] kthread+0x370/0x450 [ 137.441364][ T9881] page last free pid 37 tgid 37 stack trace: [ 137.443854][ T9881] __free_frozen_pages+0x79f/0x1090 [ 137.445948][ T9881] __kasan_populate_vmalloc+0x1ea/0x210 [ 137.448195][ T9881] alloc_vmap_area+0x95d/0x2bb0 [ 137.450258][ T9881] __get_vm_area_node+0x1ca/0x330 [ 137.452379][ T9881] __vmalloc_node_range_noprof+0x228/0x1630 [ 137.454833][ T9881] __vmalloc_node_noprof+0xad/0xf0 [ 137.456911][ T9881] copy_process+0x7fb/0x8030 [ 137.458834][ T9881] kernel_clone+0x176/0x9d0 [ 137.460717][ T9881] user_mode_thread+0xcc/0x110 [ 137.462696][ T9881] call_usermodehelper_exec_work+0xcb/0x180 [ 137.465192][ T9881] process_one_work+0xa23/0x1940 [ 137.467296][ T9881] worker_thread+0x5ef/0xe50 [ 137.469277][ T9881] kthread+0x370/0x450 [ 137.470985][ T9881] ret_from_fork+0x72b/0xd50 [ 137.472868][ T9881] ret_from_fork_asm+0x1a/0x30 [ 137.474862][ T9881] [ 137.475907][ T9881] Memory state around the buggy address: [ 137.478233][ T9881] ffff88802e85fd00: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 137.481597][ T9881] ffff88802e85fd80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.484954][ T9881] >ffff88802e85fe00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 137.488304][ T9881] ^ [ 137.490826][ T9881] ffff88802e85fe80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 137.494133][ T9881] ffff88802e85ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 137.497476][ T9881] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 137.502551][ T9881] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.505776][ T9881] CPU: 3 UID: 0 PID: 9881 Comm: syz.5.1048 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.510206][ T9881] Tainted: [L]=SOFTLOCKUP [ 137.512010][ T9881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.516070][ T9881] Call Trace: [ 137.517448][ T9881] [ 137.518696][ T9881] dump_stack_lvl+0x100/0x190 [ 137.520689][ T9881] vpanic+0x552/0x970 [ 137.522385][ T9881] ? __pfx_vpanic+0x10/0x10 [ 137.524314][ T9881] ? mark_held_locks+0x40/0x70 [ 137.526273][ T9881] ? irqentry_exit+0x24d/0xa00 [ 137.528219][ T9881] ? __release_resource+0x276/0x2c0 [ 137.530385][ T9881] panic+0xd1/0xe0 [ 137.532248][ T9881] ? __pfx_panic+0x10/0x10 [ 137.534071][ T9881] check_panic_on_warn.cold+0x19/0x34 [ 137.536316][ T9881] end_report.part.0+0x3a/0x90 [ 137.538386][ T9881] kasan_report.cold+0xe/0x18 [ 137.540420][ T9881] ? __release_resource+0x276/0x2c0 [ 137.542666][ T9881] __release_resource+0x276/0x2c0 [ 137.544798][ T9881] release_resource+0x26/0x40 [ 137.546802][ T9881] pci_remove_bus_device+0x2d3/0x3b0 [ 137.549056][ T9881] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 137.551808][ T9881] remove_store+0x123/0x140 [ 137.553742][ T9881] ? __pfx_remove_store+0x10/0x10 [ 137.555919][ T9881] ? find_held_lock+0x2b/0x80 [ 137.557945][ T9881] ? sysfs_file_kobj+0xe4/0x290 [ 137.560018][ T9881] ? sysfs_file_kobj+0xe4/0x290 [ 137.562120][ T9881] ? __pfx_remove_store+0x10/0x10 [ 137.564248][ T9881] dev_attr_store+0x58/0x80 [ 137.566206][ T9881] ? __pfx_dev_attr_store+0x10/0x10 [ 137.568419][ T9881] sysfs_kf_write+0xf2/0x150 [ 137.570358][ T9881] kernfs_fop_write_iter+0x3e0/0x5f0 [ 137.572597][ T9881] ? __pfx_sysfs_kf_write+0x10/0x10 [ 137.574834][ T9881] vfs_write+0x6ac/0x1050 [ 137.576707][ T9881] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 137.579255][ T9881] ? __pfx_vfs_write+0x10/0x10 [ 137.581302][ T9881] ksys_write+0x12a/0x250 [ 137.583170][ T9881] ? __pfx_ksys_write+0x10/0x10 [ 137.585262][ T9881] do_syscall_64+0x115/0x870 [ 137.587261][ T9881] ? clear_bhb_loop+0x40/0x90 [ 137.589242][ T9881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.591701][ T9881] RIP: 0033:0x7f7cfdf9de99 [ 137.593562][ T9881] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.601559][ T9881] RSP: 002b:00007f7cfee70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.605054][ T9881] RAX: ffffffffffffffda RBX: 00007f7cfe225fa0 RCX: 00007f7cfdf9de99 [ 137.608322][ T9881] RDX: 0000000000000001 RSI: 00002000000000c0 RDI: 0000000000000004 [ 137.611663][ T9881] RBP: 00007f7cfe033eaf R08: 0000000000000000 R09: 0000000000000000 [ 137.614900][ T9881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.618147][ T9881] R13: 00007f7cfe226038 R14: 00007f7cfe225fa0 R15: 00007ffc169186e8 [ 137.621457][ T9881] [ 137.623582][ T9881] Kernel Offset: disabled [ 137.625410][ T9881] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:51:02 Registers: info registers vcpu 0 CPU#0 RAX=000000000018b06d RBX=ffffffff8e891480 RCX=ffffffff8bbb22d5 RDX=0000000000000000 RSI=ffffffff8e1a5f23 RDI=ffffffff8c401680 RBP=fffffbfff1d12290 RSP=ffffffff8e807de8 R8 =0000000000000001 R9 =ffffed100d48678d R10=ffff88806a433c6b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d00fc6 R15=dffffc0000000000 RIP=ffffffff810014b0 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c31ec8e CR3=000000002d690000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73657479625f6563 69767265735f6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93729266 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93729266 00007ffc9372926c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1363e34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1363e344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1363e34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1363e344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff96712ae8 RBX=00000000000001ee RCX=00000000000001ef RDX=ffffffff96712ab8 RSI=00000000000001ef RDI=ffffffff9808e658 RBP=0000000000000030 RSP=ffffc9000499efa8 R8 =ffffffff96712ae8 R9 =0000000000000002 R10=ffffc9000499f138 R11=0000000000000000 R12=ffffffff81e57ce0 R13=ffffc9000499f050 R14=ffffffff81e58af0 R15=ffffffff9808e658 RIP=ffffffff81e595b7 RFL=00000016 [----AP-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f7cfee6fff8 CR3=000000002d698000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465636976726573 5f6f692e656c7474 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc16918bd6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc16918bd6 00007ffc16918bdc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cfe034492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cfe0344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cfe034636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7cfe0344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000060 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000060 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000001 RSI=0000000000001000 RDI=ffff88804c14b000 RBP=000000004c14b000 RSP=ffffc900055bfa98 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000001000 R13=ffff88803179a540 R14=0000000000000202 R15=ffffffff8e464f50 RIP=ffffffff81e59ad9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5fdc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fc8d5869d50 CR3=00000000309fa000 CR4=00352ef0 DR0=0000000000000004 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556348b078 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28469f0e80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f28469f0e80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555563482ad8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08000e8004040177 960031313230386c 6e01ffffffffffff ffffef080e80033c ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00236365632f7665 642f01ffffffffff ffffffeb08088003 2008000610002010 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001880300000000 080801800305b9c2 1000002080808090 00088004061e78c6 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a0031c0800019803 1ffffffff2080001 9003040200018e03 0a0200018c030004 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 080801c603010000 00080801be030000 0021000000000000 02000000001e0801 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010180041885e384 8808000100001e08 06060112a20000f8 00ffff009f6400d7 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001808029e030000 77e705efaa55d29b 5c45180802860300 0000000004000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000180801ee03 0000000000000000 10c0d5fd180801d6 0307f80000080801 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ce038f0052000808 01c6030100000008 0801be0300000021 0000000000000200 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e206c6c61637379 7320746820737320 3265737320657373 207273786620786d ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6373745f746e6174 736e6f63206d6c20 7063737464722062 6731657064702078 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 706f74736e6f6e20 79676f6c6f706f74 78206c706f6e2064 6f6f675f70657220 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6973796870207374 6962203634203a09 73657a6973207373 65726464610a3436 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67616e616d207265 776f700a6c617574 7269762073746962 203834202c6c6163 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000060000006f 666e697570632f63 6f72702f0000000d 0a0a3a746e656d65 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000ffffffb0 0000000400000018 0000002c00000040 0000005400000070 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38b65 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc900034df548 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000038383954 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b6fa1e5 R15=ffffffff85a38b00 RIP=ffffffff85a38b8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f7cfee706c0 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2e5685 CR3=0000000060389000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000000 Opmask02=00000000ffff7fdf Opmask03=0000000082000020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055588554b6f0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f24db329b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffff0000000000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c57a841e823 73730c57a841e823 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737332 7373262bf6279273 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 317075656b61772f 7075656b61772f30 2e31303a30303a30 3030302f30303a30 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 0000555dd0de3461 0000000000000021 0000000000317075 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000041 000055588557e570 000055588557e500 307761726469682f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000