last executing test programs: 3m7.838118847s ago: executing program 0 (id=443): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) preadv(r0, &(0x7f00000018c0)=[{&(0x7f00000001c0)=""/67, 0x43}], 0x1, 0x5, 0x3bed) 3m7.769977626s ago: executing program 0 (id=444): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86dd, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, 0x0, 0x1) 3m7.769863893s ago: executing program 0 (id=445): r0 = syz_io_uring_setup(0x4b5, &(0x7f0000000180)={0x0, 0x86dd, 0x40, 0x8, 0x3d6}, &(0x7f0000010080), &(0x7f0000000000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000100)=[0x81, 0x10000], 0x2) 3m7.718791856s ago: executing program 0 (id=447): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) 3m7.718590377s ago: executing program 0 (id=449): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x200, 0x85) read$FUSE(r0, &(0x7f0000003bc0)={0x2020}, 0x2020) 3m7.419474891s ago: executing program 0 (id=454): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa402, 0x0) pwrite64(r0, 0x0, 0x0, 0x7) 3m7.367864671s ago: executing program 32 (id=454): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0xa402, 0x0) pwrite64(r0, 0x0, 0x0, 0x7) 3.828366584s ago: executing program 2 (id=1678): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 3.698710802s ago: executing program 2 (id=1679): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r0) socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000200)=r0, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x800, 0x3, 0x55}, 0x0, 0x0, 0x0) syz_usb_connect(0x3, 0x3f, &(0x7f00000065c0)=ANY=[@ANYBLOB="12012103c3c97710"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xa0002, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x3}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0x1, 0xb}, {0xf, 0xfff2}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x1, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240048e4}, 0x4890) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket$kcm(0x11, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r7, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r9, 0x7}, 0x80, &(0x7f0000004900)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 2.458434963s ago: executing program 3 (id=1696): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03076844268cb89eccf888a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.338748442s ago: executing program 4 (id=1697): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r1, 0x0, 0x0) lseek(r1, 0x5, 0x1) getdents64(r1, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r3, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r1, 0x4068aea3, &(0x7f0000000140)={0xc5, 0x0, r2}) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f00000001c0)="c4e1fd10fdc44164596512c744240047d60000c744240247000000ff1c24b9800000c00f3235002000000f300f20e035000002000e0f22e0e0b8390140d84f2c66ba420066b8dd94b9310200000f32efc4a17853abb00c00003e470f019c1030000000440f20c08f48309fc500440f22c0", 0x71}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x72, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.208415837s ago: executing program 4 (id=1698): socket(0x25, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000440), 0x0, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000040)=0xfc, 0x4) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bind$l2tp6(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x46, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0xffff}], 0x1, 0x40000022, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0xc, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0xff000000, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 2.208090014s ago: executing program 4 (id=1699): capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x8000801, 0x4, 0xbe67}) mount$9p_tcp(&(0x7f0000000640), &(0x7f0000000680)='.\x00', &(0x7f0000000040), 0x8010, &(0x7f0000000080)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@privport}]}}) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xd3f, 0x70bd2d, 0x255fdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xa}, {0x0, 0x9}, {0x10, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_LABEL={0x8, 0x5, {0x9, 0x0, 0x1}}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x4080) write$tun(r0, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x27, 0x0, 0x27}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffff20, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x18, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2, 0x0, 0xb00}, @generic={0x0, 0x2, "d58838000391"}]}}}}}}, 0xfd6c) syz_open_dev$dvb_demux(&(0x7f0000000280), 0x0, 0x101800) 2.128589501s ago: executing program 4 (id=1700): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x48, 0x30, 0x727, 0x7ffffc, 0x2000000, {}, [{0x34, 0x1, [@m_gact={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000100)) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r3 = dup3(r2, r1, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x1c8) mount$bind(&(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x315901c, 0x0) chroot(&(0x7f0000001140)='./file0\x00') r4 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0xc8902, 0x0) write$binfmt_misc(r4, 0x0, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00') r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r5, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r5, 0x4018620d, &(0x7f00000003c0)={0x73622a85, 0x100b, 0x3}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000600)="b3185d7bb56f70f003360fa8bf71ac3086aedebf6fff904f92849a7a07395ee7f0e4cb1d78001c08a0ab73ffcf5ad07693727980eea946e6cba1723e81bfa5c3688803c8a124dcb27df7938e7ddfdd52"}) recvmsg$inet_nvme(r3, &(0x7f0000005900)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000005780)=[{&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/173, 0xad}, {&(0x7f00000034c0)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/109, 0x6d}, {&(0x7f0000004540)=""/180, 0xb4}, {&(0x7f0000004600)=""/4096, 0x1000}, {&(0x7f0000005600)=""/45, 0x2d}, {&(0x7f0000005640)=""/109, 0x6d}, {&(0x7f00000056c0)=""/138, 0x8a}], 0x9, &(0x7f0000005840)=""/173, 0xad}, 0x40000000) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000007fc0)={0x2020}, 0x2020) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@gettaction={0xf0, 0x32, 0xe72c5f922f23cad9, 0x70bd2a, 0x25dfdbf7}, 0xf0}, 0x1, 0x0, 0x0, 0x8080}, 0x10000084) 2.128334931s ago: executing program 4 (id=1701): r0 = syz_usb_connect(0x0, 0x371, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000057ec0020c215dcff30bd0102030109025f03019b000000090400000b403b4e000905e2379c"], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, &(0x7f0000006800)="10", 0x20) close(r1) r2 = socket(0x1e, 0x1, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000021c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) rmdir(&(0x7f00000000c0)='./file1\x00') chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) 1.888106367s ago: executing program 3 (id=1702): syz_emit_ethernet(0x3e, &(0x7f00000016c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x8, 0x3a, 0x0, @dev, @local, {[], @echo_request}}}}}, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="66643d0c79d38461", @ANYRESHEX]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000d00), 0x0, 0x48040) r2 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="04040a0000fbfeb4fbb30b4302"], 0xd) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) r6 = open(&(0x7f0000000280)='.\x00', 0x163480, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$KDGKBLED(r7, 0x4b64, &(0x7f0000000dc0)) fsetxattr$security_selinux(r6, &(0x7f0000000000), &(0x7f00000000c0)='system_u:object_r:dlm_control_device_t:s0\x00', 0x2a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r6, 0xc0c89425, &(0x7f0000000100)={'\x00', 0x0, 0x0, {0x3d29, 0x2}, {0xeb89, 0x5}, 0xab4, [0x0, 0x7b, 0x3, 0x4000000005, 0x40, 0x64, 0x1000, 0x5f, 0x4, 0x8, 0x10, 0x80000000011, 0x0, 0xffdffffffffffff7, 0x8, 0xe3]}) r8 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$DRM_IOCTL_GEM_FLINK(r8, 0xc008640a, &(0x7f0000000180)) sendmmsg$alg(r6, &(0x7f0000001bc0)=[{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="113e5f7157bd5fa866e8beaca05bcacfea21fe83299dea6f952149c02c67f3da7ccdf1a5c45b9c14e738333104d5e9fa8d24ed093fde48b6e1c2880281e7baf412bb4dcefa79239ac87cc74f2074e73f19ba20f233215b041c5c7212cad9534ff76603d45ad05c4a68b2375b939465889f791118957a875644668a4f09ad22fe5ac521b277a02f172657684aa6a0de623f135c61033b0bd62df1a8269d798460fced885a4ccb8b17173593ed4c545e5aea2cac82cfa13e6418c63fb202bf8dca65c2d08e00cfbfe4e30895612baf22fecfe5957fbcb83e7cb88e7d37", 0xdc}, {&(0x7f0000000100)="fae967e19e40930b2d58e6b6af33815f47d3c3092aa8d3596e73ea8b546430d64c4cd73f62681a00bb16d407c924587e4d067efbecba70e3f98f0418d1580ba13a531590ae331448af42de6f3dd57058109300849a69c33f156caf91106167aa29b9c71df12672c5dedac8decf7608211645e5f3d811ea29c8e2c481d4", 0x7d}, {&(0x7f0000000180)="4c6a079995cc9e8486ad26fd4d62dd540f28f4ff0480a7b354ecfdd855f253f776c1916c04826b7a27a0af273eb6ff6e5fff0945fa1fa7435a1a0bec3ce588d95feaf128e7dc77da3eac88", 0x4b}, {&(0x7f0000000200)="f0a3b9ae30519bab60a9b7395b9923eb580489325df6a7003eee735e4d2440fc64e335b84587768127", 0x29}], 0x4, &(0x7f0000000440)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x50, 0x117, 0x2, 0x39, "d22841bf67a7170b12fffe1c8dd0a5910cb99f7b6d29981e92b3b07847cee9212d3663845942848e89d8f7d47467d88dde75abb696f84976c1"}, @assoc={0x18, 0x117, 0x4, 0xe99b}, @op={0x18}, @iv={0x88, 0x117, 0x2, 0x71, "e27459a14db744e08703d8b2be2519068585291a9005920c0a78931fffcfe4f08fcc8765fd5eb0495ee2a07877dca53245a5574b9671938fb1a171212f4647366e688ac332b70e19a8f6e629b555b8d1dc1a99c35f1cbb9b8c1f2edd2adc4d859aae9bace3cb215ce928b1a82571f4801a"}, @assoc={0x18}], 0x150, 0x40040}, {0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000005c0)="08387bf79b1e9b24b07d3f9a1fb105ab6c07aa116971b72cb850e1a40344758b21889432dae89d2eee1f633efad9f8fe17b13f25afeaf121e66b7e7bbbba740e62930fff19e9e604209c6b0eed8776da9b30a923ef3268ba7ef6787d", 0x5c}, {&(0x7f0000000640)="176f278646fda2375c011258ee9bc76275369872c27e4017c2a86c7591aa8fa2e77b1ce72d4cb9831227315c83d9c313993558e49cc63db30c331e6decca8eafd1edea7305f796cdf750d61b30c7cf2fef80fd1ac61d65abc5d0f629ebb1519111bb796a2394c973c92dd1809b4bfe17bdd77b6650f81734bc990d664bd260b403879f32274a1e309045d505074db89fc21ea8a9fc24c8f828b147883a660e26ea2a9e0c24d057b6d785fd1933fbb3a1b0fa8dbe281e986bfd01048c688e1fb58552205c970e42c7aa7fb0c6a2366f48f8f79caf34e20126542e5c7e63483fd417a55b0c5a319b27d7aac0cb696ce3a251853dd1bc8773c00ff4", 0xfa}, {&(0x7f0000000740)="3f3e22223a44e8e37e88565312837fabdad605fb555e9be493", 0x19}], 0x3, &(0x7f00000007c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x3ff}, @iv={0xe8, 0x117, 0x2, 0xd4, "a3b5b52a204d4428ecb4609a1e39315a9f6793b82b4112841834664b2ac6d11d64125c98f21b21d68a51d95286d9af13053c36087d5f73c57db45ef43c92ba230ddc146f7c3037a6704116272bc6436310a4a064741b5bee53d1caf2e1b214ebd0fb7a440819ac3da0dd3e2f5f29c695d4d41d9c21cef108dec54070049679dddfbd59bc5bbe2ebdc54179e51dcc33879b8576d46809a6671e04c22053b9d6688227e215a20ebbe8b63c1ff286cd356050d21c2bc318f9995d93a94cc522dc99b0217f495be767e23c8da8d9a473b3e5755040ab"}, @iv={0x48, 0x117, 0x2, 0x34, "6dda2297708d345e75cb44ea8f29e555515436b40fa4f42782ef50612683ea9175cd304fd153232342ea2b215696dc5c9fdf5a1c"}], 0x178, 0x14}, {0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000940)="d2b881368a481ee116412ee9d46401b781eee541a343b17b5f29ccc078611e79c1adda64dfc84ada67b16da0ef21f20695760660b12365b3afc3908b645e845ff3533e59874a1c26233ed5bd59b8222b07ddfe104f9fde7980cd682f7b1fa3d46ed58e057b598d6403c39d993b950f6d898a11662e812b2e71ce1536c6e1c287390aa6b79e677e86b3434e50cf599f7f53c15b2eb905a8c9362b6ab4d4350507e7cc64c88cd48219f0943ad36d151e6155bb5b934d5c42a8d70ba9e7670b373af2642dd6bda6ae9916013b384829520546209974199ced9480ca3daf857c63941ce034bf6a965ef2384858c3331f7376f4847e2dd1866b81be43c7b1a2368e3a0631c72cdbc6cdb3316949558fecd4d1d1e2ad458ca4875d04387c73d1b7e38a0ed50168c14e1e87805a7f2a5b5df53f5cf56dbfacf0fc6c194c4ea391e38aec8d3a54ea7486c71a68d9e3ded08c4a38c08e72788ae2e983badc6917d0ded056925208c4e26c04f0d619c0835051a9f4adc05c67b48e5fca9b0b40fc0d0112c3cc7ec6a421528f0743e04a466d6d51039e60366dfa0178222618b86aabbdac704945a30e42a4d5a4447b33836011d6e345162c8e8e22a956368cb609c575f3e3a2c5c0f10d2b3cff019367671525d179b4d881fa0a45423410eb6944dfaf4857c76773534b821e1477966d4b6b6e33a0b40f6701f4cbe7300e640c71bccc7c0720414aa0096b378c01079eae1885721be2e0d63ae0c13c1df3ddf24a89fcc7f769426fe2a3016fcb47946261c8230c193f1d79f590443e6ee9a7de69bbd02b258f2d4891e2eeda288d6fe22a0030c2e508f94ab14b4415dfdd8197142b2e9e1cf141c5fcc0a8c400c5e9c63d7bd29552457794ab0894e8631aa2d939e56ecb6ba188253b30ff69c77b09ac2f1eff07a73ad2df78c887053fcad36caea4f1cd4557dcb9beb817289b60fcd51222cee8b44e4756f2ae211e5572acaaafa204e644b9d41ca7e81c86ac19d426f19fd5e37d6eb42cef733859adcd16ca2d49d8ac0a835b90206288cbf5775e3b389d7e2e9b1923952c58f44b5440e14a428071751a6d19d7f4d677e4d7c549387987db2ed2c27cd597fd4c140e97aaef06b950c0657f10b793e08e5a521f2f163b73dc010d1803b7887e9095f0968444e8dd2cb828fa73dce48cee3777b7426a11892f471faa0d5b1a174d70996b552085608e6bc916cf26267818f8464827d62601000070fe9e8652a04705c938415c98f55e5ca32746df56fa271b69be99cd3596dbae27600f47d12c2c6b8213c9ad3d13a8ec94e18ebd54fe90a16e19aeb13c3bee298dd4c95543a0a29be278ca13a6f0f3247b07560c395fb312f56f3230fa014cf99305153bd13647e622b85ad133f3b298affc35584e4103409d8e185c379a9bdc4a6abac98a21daabf20d2fc9e6f54aef78e1bc32d8d12d998fd07364ab545655bb319aa765167fcd1b647b53feee7abfd098836de2c23a4b15a2fe12042b8ac9743d010ac1d923c36a3d8873f5eabc33c9758b56020a9ca50c8603cfaf5611cd6c376275d1b0731f46dcc3b427dd05366861f4ae64864fda71a10a03390ad3a94eaaec0a07e8b436eb243b716022c9f769b26d802a530f134c5d9aa225bc01789bc1a13c6f9a399505119c038906c2013e55a8a02ac00754f9f2f6f3ad6ed68df48e2c400898136f7fefb0c3dc6bda0b1bce9ac516ec65a261cb3f078f78864669f29b0114cd48162c98486b1669ccb79a1b2a516cd09f0e612c6589ef33fa5ad281dbae21d547420b70fac7012968e13327247881a249760cefe341ecb4defe3dc038afe0faf0830b3b7b2307af3a9b0e8f4d428f819d2ce7f08a6df2d3d1f82d84c573e11b1ce7192c6c2c5bdcd8954dcfcd216c4aa5183ac979c1107419574cec0bb8aef656f1e5eed1454f21cc2b3b860f564b49954be58f143d3b020bd8f9e4368cacb19a5e711c9011bd89ca38295e6180eb964207551b3a76e53c24d70f6c6af6ffbbe900a9d1a1828051742a720f9d85c85ed1b14d477cad8cb84de1ab4cb0c2b87731a1c04e127c543bd9a0a4c4b553b920905ab7a6c5d6c4dc6b4b0ab954ec665ef12edaa228d7fceed4296eb0d2f2fc3be9b1d5c6657d02f117f418aa62fb7d983c22222ad9a39d971f8f3b613f2facb176b65cb9223703ef53f5b6fd7c6819233e2ceed6038932dfd9590593cc710e930ce5f23d6c762454a8cda023cb1f78d768bfe542c1be60a46c81f463dd13b5e45cb9753289a4c7f7b822000798584346f698266a925fb75b639239091fe48adb90e5c259537c99a676885cd52e746ccb17b0af61e2132bb6c2dc707c52194ee6fcaf00702e953c48533f762a68235a0e59ad45de8e2f61a170ed4c9bc26c019c61f686aca051d9911fe161d4846f363c7e188d11fca38b92eeb643a0fa15480852a242ca524c8727e5284a91cfbc3b6d577c7ff31726f98ed4d4fe783a7f4076713e8b75454d93fe6670ea0fec428d35d1efc371c9ee83c4f25649c04a8cbc84ec3614181e86117325141e68a247c8c020f6a50c7dffa2ddfa6ec350c393547fc69ff82dde9201b826434ca195e03f57aa397d3ba982dff00c43e8ca7537ef18e5c9eb4acbb0f25bfe3f03d011ffe9fc27672a70fa8acd2fd8ec4a24801afb8dbc02870aac7e149559a05271b900de7a5f9b213d7c5a2cd3418417aa17bef609f8fea03acfd5e6fdaeef6136ef33356bce16dc6c9d897115dda00e444cd56dff279377be9f9fa47bf9bdda57547163578d47e457f2f072a6bd5a67712bd0b8cb8863a7a24e37a6976ae79a792ca7c6e366c4bed3dc0fd651600e86ac12ba527e75ad97b969fd621d65e441686e3a3a29761b0f2df8c69f0828d97f8895b5a05fe61f363f1f56a6d1a69da2fa830304ed25ac85279472c2eb14cad9d3bb5b68591bd89c6be242dc0d290528183d29f146ada0412005db80d6e294f41f93911c28097fffe3b9ac73f7e424ee4bc6f2cf2c3b07f4c5ed694811eb3aa04200beb060b283204ca8fe7a21258eeac78c9a3d39baabd98b94de5eeeef5f341ee2c893eb5f51d98db3a1afd5a1e1a8e2c990955fc9dd4162f92f79527fa3533f4aa51791244449651065802a37dda8a79d901c63974dfe0a1e57fa070d32c7f93bde4cf33c50a037d48b97e92e192f96e6979bd07c37c58ab57aed6873db64ec927a8ec3936635ed6819572991d639efcf6cc8ab2bbb8b26e9ca9ed30bb18004d46fd69b20fcc8b07ed158bee98aae04f8cbf21e77743033e3aae89587e93e9c0fcc0b56906877d7731c9aa8135e5ba890f7c9bfd59acbb491dcd0b1e2277d63977d9f62853916876d99dae746cca3e06120c7ee17ccf1c9d13c70664d2ee538d88277bc624f20134bffdd6e250aa34289c87fd156588f9d4b4adb7590e8dfad5ae11903d8b2d9b81e969685323c00c9ff221f3e24dd8c82109291bb1989ac1e1ab9a87b28b5270d13eb8b78918274653e33a13ff84eb444f0de955916820229c1981dd8661f58aa8833ed54a860a380f91a58ac8e5e8d1d92005fd86e45c34754dca094cf1d72945f9c789c58d5115320c8e65cda6fd3d277da2e34ca9f1a85c43c6bef3fa37a2bc58d459790e509d47538c764e20454baa1f178151951fbd9d4b1977a821e167e6a8942527c22636a44d5af711b4f3c53e6496efab69a0b6d62e2753e6d6d5435b1f4f93595248fec9dd2a7157e95660e4d0da102c1c65539960280ad0d4e0b111f780e1704ef28683cdd709d68e777b5860eeaf138fedd5f9ef2219baaf3c472df2758047ab8011cd74b27c7a41ad2de939e6c7819265b945b1c4a28be23c0452e848a76df07d57210eae5e4831d7a15765bfc76b232c47423ee9454c2199b5c426a00bae700498fc4ffd2d8843faaec88e722dcb3dc7f86488d05b8fd68ec40be41d600ba16288dd7e93b6971107f6bc3d9eef740ac145bf938590aa023d5e438f70566117347b716e1a0033d3dad9882bf9453c957df45b2c22b04b4833b284638daa62f48e7e170708113b148a9cbf957f2b52ee00ff6e5d29942d8503ca56c3d73ffd0f089dada2b8ea1faf9933d0050c704e61628635c746ec7124645e5e0a5cc8a8d6fcb4d048821f7213e81efbc070e9601428c383548340006e0bfead120b6fe4f94a76e5667b2f73676a8554eb0d83a2cf71b989a76aead00bba140776e86b345bc07bdb5220b62f5b0ed92829fead7a5c440adf588a64833a331c61453ca228056754e3ca3c0ebad51b7e6a71edf90a2c6aea470de02aa8a5df7c8821f6c5419b3a67ea867cc29958aeafcd350fcef8a663543468064641e991d92564f518079b411528f9a7752595567c5c2cd511ce8149d085034b9062295e736cc6f143db36dd8d95f0b6eba6241a1cd29a51048ecf3903bbe1104503023dc096771f44b8a3f3430becb2e73b2ab22b37f9a713d9eeb764e17451bcd44742459ca46e858eaf0ea9e9c23d851cb6601e6d659bbe5dc88499fff9b02a41638bdec78fe5a8ab964acd00ee5ba4f4f4233a5343f1a6d985b020950cca61f648aab594a47e56e5fbbe3b96b428c2c4267caef4e1970477a9bf69dbf35d019b001c10c0a91b7eec7ce2d7c8b65250f30aa59b7d4ff4402215eb513405e3e6adf71c4970e00235a48a4e385ef98a5a7c55d3c8b67ee98867b7448019bf2908a4d55d019805dc7dbf75fd8452d2b65e88299ae93ee53c504b33d29354124ef396bf4b2a930c287391d31a36107220c3d45cd81701dee4cc71a33f3206664c36c234e82600e00a6cb5f15806825fa7b7660b08fa0e2566834f79e9b2d6817d6cf9787905aab840083b0e6a38c2fb749580bf10da7195f99b1b0c9359d60c8278dd4078f471eb1ffea2dc36aba1080afb4ecbf03b6436bb4886bc85a92a2a727929f8ce8a0e2a73eeb5d2235dc34df6da018f8c7abaa124ccc84871e3f2dd9099e73884cab951aa4fdb645e9fa25e02cf15732f07d141827b830530662c4bf652cefef952bd78bfd9496c8cc0b7af25574e187c71347e73b4f51643d7dfc9e45a663679db3f9eea2de438231fd24a655853b3ae753b86a356ca0370dcdced373988cb35fc3e6b876465a288b65d8010f9c8b23db59c810522a00cbd513400acd969b3d96048f8a43657bc0b19b88338d58f70d4a56b00bef30319458c6e98a5f9a0f7d42e6ef34d7e2e908f12bc8df692f24ff4c5327fca1e9974eeef3c0e9be6beef227d9172d9c4d1e88a294a8cf8389cf75d5b9ed2ff9ebddbeff28cb15d0dfd7c8c86b2838b73fc89ff8185dd11bda3ec23f683b54e4ddd6d3714d224fadb1143d5191f1926a36bc6f26bb62062ad505746e230450ff808600e5e8962884432a141e697c6ea3e01ddd2414477e0eb56f2294c96bf2f996ef99d21dd72011baff8ce0115a2c559a0a351ea8bf88cb880d2d56ebcd6a351c79391ff133f4bf0687fc47f2e46f59fc3acdb49832f3e2a343e56b34c22bbb97a50f3cccc4176cee0d50baea59eb6a9bcee350c5ace5b292f3d7c9fef32810bedac3c24d8e19bedbadc826cbb378e7e7900ada86f24e72e133bd113139b5388b20123d324fb719d524d6a97d16af35be1b3aaff615cc270339706345c863f4b68012a909f86b3ca6d851d6e4b993fb59015d262423478b318f6768abc2916daede64cd613034a1b261ce1debed3cd895c4795fa1046ba8b8a321e46af08b441bfff10d86838a93ffdd94bc8dd4033a2d44f0baf56845dc70022ecb62d430f70ea97870", 0x1000}], 0x1, &(0x7f0000001980)=[@iv={0x58, 0x117, 0x2, 0x41, "57c37770aadd57b8257506fd45c12ab2c6388b24a7f8da2129744b82c9273e105ad8eb067168ec61623345d260e61738777a5b0b0c288a50412f79579820d192d9"}, @assoc={0x18, 0x117, 0x4, 0x20}, @iv={0xd8, 0x117, 0x2, 0xbe, "1a8c4d75d46302d1953abbff0b614c64f18c15fa918bc3ec950653400cc1e6f4e39ff915951bdf36e9e5871e9dd8a85966e7fe959381f7e9b0fb93b3ac7816345e53a5f82330718d68d93689f14eef00e362c341cf74f2d00cc96f7632ad313c86c433b322a786efa9c42ced59240faf82e19aaed24d57df9a7357b7cf8f95419a63c5b2ae2144e88e2570e3b26c208ac2d796aacbfbfc978dd862a4a285b55606136375b24da9bdceef18eb4419850b3925b439cb99f49a8b6fc0aea291"}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0xd8, 0x117, 0x2, 0xbf, "fecc5588b32a29729756aaf7d5670458291d8eddb44a47e4d752ac9f2cb37f7edc3c05f1eeec474aca6d57a3102c57e0f7c9afed4667745577f8664d8ff427a37c34b956afeb328ff3d7d0d48bd956e6be2e272f44f01eb321d52f7a9942517d582e21b27f8c60fdf5dbb4ea26f65d87004f8fe62055d2350b9c3c092be400c74322a548a1a3f0783d2da04d61f6b2ea8a5cf704a719dab6fad5b376569a0bcd671ae1cba43339803c4bfa6171fbdaee5bffd6905437c7e0165e21641558bf"}], 0x238, 0x800}], 0x3, 0x20040840) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r5, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e, 0x2}}]}, 0x4c}}, 0x0) 1.795519312s ago: executing program 4 (id=1703): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0", @ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000000)=[{r1, 0x100}, {r1, 0x140}, {r1, 0x1328}, {r1, 0x8302}, {0xffffffffffffffff, 0x2000}, {r1, 0x10}, {r1, 0x8}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x300}, {r1, 0x121}], 0xa, 0x9) syz_usb_disconnect(r0) 1.712844278s ago: executing program 33 (id=1703): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0", @ANYRESHEX], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) poll(&(0x7f0000000000)=[{r1, 0x100}, {r1, 0x140}, {r1, 0x1328}, {r1, 0x8302}, {0xffffffffffffffff, 0x2000}, {r1, 0x10}, {r1, 0x8}, {0xffffffffffffffff, 0x4}, {0xffffffffffffffff, 0x300}, {r1, 0x121}], 0xa, 0x9) syz_usb_disconnect(r0) 1.658112475s ago: executing program 3 (id=1705): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 1.656609171s ago: executing program 3 (id=1706): ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(0xffffffffffffffff, 0xc01864ba, &(0x7f0000000000)={0xfff, 0x0, 0x0, 0xc0c0c0c0}) ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000180)={r0, 0x2b}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) r2 = socket(0x29, 0x2, 0x1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x2ef) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="20007000fadbdf25050054000000000008000100"/32], 0x20}}, 0x800) shutdown(r2, 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x2040, 0x1) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r8, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@deltclass={0x2c, 0x29, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xfff1, 0xd}, {0xb, 0xe}, {0x1, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xfc, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200040d4}, 0x0) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r9, 0x8971, &(0x7f0000000180)={'veth1_to_bridge\x00', @ifru_flags=0x1000}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r10 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) syz_open_dev$vim2m(&(0x7f0000000000), 0x8005, 0x2) move_mount(r10, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r10, &(0x7f0000000100)='./file0\x00', 0x280) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180), 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000700)={&(0x7f0000000340)=@in6={0xa, 0x4e23, 0x800fff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x4048000) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000200)) 1.524987954s ago: executing program 3 (id=1707): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x2, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x118]}) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000400)={r0, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x7, 0x0, 0x0, 0x16, 0x15, "fee8a2ab78fc979fd1e00d96f72000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af0000000000000000132900", "2809e8dbe108598948224add4afac11d875397bdb22d0000b420a1a93c52cdec5f819e01177d3d458dd4992861abffe3000000000000000000000000ffff00", "f42205000000000000000000000000000000002000", [0x9, 0x2000000000001]}}) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, &(0x7f00000017c0)={0x7a6, 0xc0f, 0xfffffffb, 0x0, 0x7, 0xa, 0x0, &(0x7f0000000240)=[{0xb, 0xfe, 0x1}, {0x17, 0x1ff, 0xf}, {0x15, 0x1ff, 0x8}, {0xe, 0xfe}, {0x19, 0x1ff, 0xfffffffa}, {0xf, 0x1ff, 0x2}, {0x21, 0xfe, 0xa}, {0x13, 0x101, 0x3}, {0x10, 0x101, 0x4}, {0x9, 0x1ff, 0x7ff}]}) ioctl$LOOP_GET_STATUS64(r1, 0x4c05, &(0x7f0000000540)) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r3, 0x7b2, &(0x7f0000001780)={&(0x7f0000000780)=[0x7, 0x1, 0xa, 0x7fff, 0xffff0d18, 0x7, 0x1, 0x800, 0x8, 0x9, 0x7, 0x1, 0x0, 0x4, 0x3ff, 0x200, 0xcc0, 0x800, 0x2, 0x2, 0x0, 0x7, 0x0, 0xfffffffd, 0x5d5d, 0x6, 0xba, 0x59c, 0x5, 0x2, 0x2, 0x80, 0x6, 0x5, 0x3, 0x101, 0x8, 0x1, 0x7, 0xf, 0x7, 0xd78d, 0x0, 0x7, 0xfffffff8, 0xfffffff7, 0x10001, 0x9, 0x0, 0x7, 0x1, 0xff, 0x1, 0x3ff, 0x2, 0x80000000, 0x9, 0x3, 0x1, 0x5, 0x5, 0x44, 0x1, 0x100, 0xf3, 0x0, 0x3, 0x2, 0x800, 0x1, 0x2, 0x1, 0x6, 0x5d38, 0x1, 0x0, 0x8b, 0xc8a, 0x3, 0x0, 0x9, 0x9, 0xffffebff, 0x9, 0x3, 0xfffffff8, 0x7fffffff, 0x5, 0xa, 0x6, 0x3, 0x0, 0x8, 0x2, 0x1, 0x4, 0xad6, 0x100, 0x3, 0x7fff, 0x8, 0xfff, 0x8, 0x6, 0x433, 0xf, 0xfffffffe, 0xfffffff7, 0x3bd, 0x5, 0x0, 0x10b8, 0x0, 0x3, 0x4, 0x92b, 0xd0, 0xffffffff, 0x0, 0x2, 0x0, 0x4, 0xda5d, 0x0, 0x2, 0x2, 0x1000, 0xc5, 0x3, 0x0, 0x4, 0x4, 0x4, 0x80000000, 0x1ff, 0x9, 0x5, 0x26, 0x8, 0x0, 0xe3b4, 0x8, 0x1, 0x1, 0x1000000, 0xfc, 0x930, 0x7f, 0x0, 0x4000000, 0x3, 0x7, 0x2, 0xf, 0x800, 0x4, 0x2, 0xa, 0x1, 0xa, 0xad86, 0x2d3, 0x6, 0x5, 0x372, 0x8, 0x0, 0x6, 0x7fffffff, 0x7, 0x7, 0x6, 0x1, 0x2, 0x2, 0xe0a, 0x53a, 0x1, 0x2, 0x8, 0x9, 0xff, 0x0, 0x7ff, 0xfffffff9, 0x4, 0x9, 0x8, 0x2, 0x3, 0xcb, 0x101, 0x24, 0x4, 0x8, 0xbd, 0xef5f, 0x8, 0x7, 0x6, 0x1, 0xb, 0x4, 0x10, 0x80000000, 0x10, 0x1, 0xffff, 0x3, 0x9, 0x9, 0x87d, 0x6, 0x101, 0x2845, 0x22, 0x6e, 0x40, 0x7, 0x4, 0x0, 0x10, 0x10, 0xfff, 0x8, 0x5, 0x7f, 0xffca, 0x2, 0xffffffff, 0x4, 0x9, 0x0, 0x8, 0x1, 0x8, 0x9, 0x9, 0x9, 0x0, 0x796b, 0x1000, 0x5, 0xffffffff, 0x6, 0x2, 0x7, 0x3, 0xfc, 0x10000, 0xb87, 0x3, 0x3, 0x5b, 0x9, 0x40c1, 0x4, 0x8, 0x2, 0xf73, 0x40, 0x80, 0x7e, 0x3, 0x3, 0xb, 0x8, 0x100, 0x2, 0x9, 0x400, 0x8, 0xfffffff7, 0x7, 0x4, 0xff, 0x7, 0x7, 0x1000, 0x1, 0x9, 0xbeee, 0x3, 0x11d4, 0x3, 0x9, 0xe, 0x80, 0x10000, 0x6, 0xfffffff8, 0x4, 0x1, 0xd, 0x8001, 0x8, 0x401, 0x0, 0x100, 0x200, 0x80, 0x40, 0x80000001, 0x4, 0x4, 0xad7f, 0x3, 0x9c3, 0x5, 0x4, 0x7fffffff, 0x88, 0x8, 0x9, 0x4800, 0x4, 0x0, 0x6, 0x40, 0x7f58, 0x67b5, 0x8, 0x1, 0x6, 0x401, 0x1, 0x1, 0x7, 0x1, 0xffff, 0x7ff, 0x7fffffff, 0x10, 0x6, 0x6, 0x200, 0x7aa, 0x6, 0x8, 0x9, 0x7b, 0x9, 0x101, 0xc7, 0x0, 0x6, 0x3, 0x2, 0x6c4f, 0xbc, 0x6a, 0x2, 0xe46, 0x9, 0x3ff, 0x7368, 0x3, 0x6, 0x88, 0x0, 0x3, 0x3, 0x0, 0x669a3794, 0x3, 0x1, 0x80, 0x6, 0x6, 0x9, 0xcd, 0x6, 0xe, 0x9, 0x29a6, 0x478f80, 0x0, 0xfff, 0x7, 0x8001, 0x80000000, 0x3, 0x2, 0x101, 0x3, 0x4, 0xffff9125, 0x6, 0x103, 0x6, 0x3, 0x99, 0x5, 0x9, 0xa8, 0x2, 0x0, 0x2, 0x2, 0x8, 0x3, 0x3, 0x6bc7, 0x0, 0x8, 0x2, 0x8, 0x8, 0x80000000, 0x5, 0x80000001, 0x3, 0x9, 0x7, 0xc48, 0xff, 0x5, 0x3, 0x2, 0x0, 0x6dcd, 0xc0c, 0x9, 0x7, 0x80000000, 0x4, 0xfffff800, 0xa6b0, 0x5, 0x0, 0x7, 0xfffffffc, 0xd92, 0x4, 0x7fff, 0x4696, 0x1ff, 0xfffffffd, 0x5, 0xa0c, 0x2, 0x1, 0x2, 0x2, 0x0, 0x5, 0x6, 0x5, 0x19, 0x8, 0x635e, 0x5, 0xe, 0x6, 0x10001, 0x50, 0x6, 0x80, 0x6, 0x2, 0x200, 0x8000, 0x2, 0x0, 0x7, 0x6, 0x0, 0xff, 0x6, 0x7, 0xffffd66d, 0xa, 0x7, 0x6, 0x9, 0x9, 0x3, 0x10, 0x86f, 0x3, 0x81, 0x7, 0x97, 0x6, 0x7, 0x1, 0x8, 0x9, 0x3, 0x7f, 0x9, 0x0, 0xa, 0x7, 0x7ff, 0x8, 0x6, 0x4, 0x1, 0x3ff, 0x89f, 0x33, 0x400, 0x57, 0x4, 0x3, 0x3, 0x2, 0x8b2, 0x5, 0x6, 0x5, 0xc, 0x6, 0x2a5, 0x401, 0x586, 0xffff, 0x3, 0x8, 0x5, 0x0, 0x7, 0x0, 0x9, 0x907a, 0xa, 0xb, 0x81, 0x7, 0x804, 0x8, 0x7ff, 0x4, 0x4, 0x10, 0x3, 0x1000, 0x10001, 0x8, 0x5, 0x2, 0x81, 0xfffffff8, 0x8, 0x7, 0x8, 0x8, 0x8, 0x5, 0x9, 0x7fffffff, 0x9, 0x23df, 0x4, 0xffff0001, 0x2, 0x91, 0x6, 0x1, 0x1, 0x401, 0x200, 0x7, 0x6, 0x6, 0x6, 0x2, 0x10000, 0x8000000, 0xe765, 0xffffffff, 0x4, 0x6, 0x10000, 0xfffffffd, 0xba0, 0x17, 0xffffffff, 0xd, 0x65253a73, 0x10001, 0x9, 0x1, 0x0, 0x6, 0x5, 0x4f8, 0x9, 0x1a7f, 0x7e9, 0x1, 0x4, 0x6cb, 0x40, 0x3, 0x5, 0x7, 0x0, 0x1, 0x2, 0x2, 0x5, 0x3, 0x9, 0x1ff, 0x10001, 0xfffffff8, 0xfffffff8, 0x8, 0x8, 0x3, 0x9, 0x7fff, 0x4, 0x1ff, 0x0, 0x7, 0x9, 0x2, 0x80, 0x3, 0x2000, 0x2, 0x4, 0x9, 0xe, 0x6, 0xb, 0x35916e6e, 0xccea, 0xec, 0x1, 0x0, 0x2, 0x1ff, 0x50486dfe, 0x3, 0x2, 0xb, 0x7, 0x4, 0x7ff, 0x6, 0x2, 0x80000000, 0x7, 0x7, 0x6, 0x1ff, 0x6, 0x9, 0x80000001, 0xcc0, 0x9, 0x1, 0x0, 0xfffffffd, 0x2, 0x5, 0xffffffff, 0x5, 0x0, 0xa, 0x8, 0x4, 0x9, 0x0, 0x80000001, 0x1, 0x6, 0x4b, 0x4, 0x6, 0xfffffff8, 0x2, 0x46b5, 0x5, 0x8, 0x1000, 0x9, 0x4, 0x1, 0x401, 0x8, 0x8, 0xbbae, 0x80, 0x7, 0x2, 0x7, 0x3, 0xffff, 0xff, 0x9, 0x101000, 0x3ff, 0x3, 0x9, 0x1, 0xa, 0x1, 0x8, 0x4, 0x80, 0x9, 0x499e, 0xc, 0x973f, 0x5, 0xfffffffd, 0xc5b4, 0x6, 0x6, 0x9, 0x94, 0x49deebdd, 0x6, 0x1000, 0x0, 0x5, 0x6, 0xa, 0x7, 0x1, 0x9, 0x5, 0x6, 0x4, 0x6, 0x1, 0x96, 0x192, 0x7, 0x6f5c, 0x4, 0x6, 0x7, 0x3, 0x0, 0x6098, 0x9, 0xccf, 0x8, 0x0, 0x5, 0x800, 0x3ff, 0xc, 0x10001, 0x80000000, 0x7, 0x5, 0xe6, 0x8, 0x4c, 0x2e85, 0x9, 0xa, 0x2, 0x6, 0x7, 0x6, 0xb86, 0x6, 0x0, 0x1, 0x0, 0xadc, 0xf, 0x9, 0x2, 0x36, 0x6, 0x3, 0x3fc0000, 0x9, 0x7fffffff, 0x9, 0x2, 0xb, 0xe, 0x6, 0x3, 0x81, 0x2, 0x8000, 0x4, 0x0, 0x709e, 0x7fffffff, 0x7, 0xa, 0x0, 0xfffffff4, 0x2, 0x4, 0x9, 0x1, 0x90, 0x3, 0xcf, 0x8, 0x1, 0xfff, 0x7, 0xea, 0x40, 0x8, 0x0, 0xb60, 0x8a4a, 0x4, 0x7, 0x63, 0x3, 0x7fffffff, 0x9, 0x0, 0x9, 0x9, 0x6, 0x5b67, 0x4, 0x9, 0x3, 0x9, 0x22, 0xb2, 0xf369, 0x1, 0x2, 0x2, 0x7ff, 0x8001, 0x5be3, 0x1, 0x2, 0x4e6a, 0x2, 0xb7, 0x11, 0xfffffff8, 0x49, 0x3ff, 0x8, 0x0, 0x5185, 0x3, 0x7ff, 0x3, 0x7fffffff, 0xffffc20e, 0x6, 0x3, 0x2, 0x7, 0x1, 0x6, 0x5, 0xffffffe3, 0x10000, 0x0, 0x1, 0x8000, 0x43b2, 0x9, 0x401, 0x4, 0x0, 0x80, 0xff, 0x7fff, 0x3, 0x400, 0xfffffff9, 0x6, 0x5, 0xc71, 0x800, 0xf, 0x77, 0x9, 0x2800000, 0x9, 0xfffffffb, 0x6, 0xa7a, 0x80000000, 0x3, 0x0, 0x8, 0x5, 0x4, 0x6, 0x6, 0x1, 0x8001, 0x40, 0x3, 0x81, 0x4, 0xf5, 0x2400, 0x8001, 0x6, 0x3, 0x22200, 0x3, 0x7, 0x1d5, 0x8, 0xfffffffc, 0x0, 0x0, 0x2, 0x8, 0xb, 0x1, 0x6, 0x0, 0x0, 0x0, 0x7, 0x1ff, 0x5, 0x30a0, 0x0, 0xa8, 0x2, 0x8, 0xfc000000, 0x8, 0x7fff, 0x5, 0x8, 0x5, 0x46f65108, 0x29, 0x0, 0x0, 0x8, 0xac58, 0xffff, 0x80f, 0xfffffff8, 0x2, 0xde7, 0x10, 0x8001, 0x9, 0x6, 0xfffff467, 0x2, 0x7, 0x8000, 0x54f, 0xb12, 0x4, 0xab08, 0x400, 0x81, 0x7, 0x9, 0xa0, 0xffffff80, 0xc0b, 0x8, 0x1, 0x8, 0x9, 0xe2, 0xf, 0xfffffffa, 0x8, 0xffffff6a, 0x7fff, 0x5, 0x499, 0x4, 0x10001, 0x2, 0x5, 0xa, 0x8, 0x101, 0xfffffffe, 0x80, 0xa, 0x2, 0x8000, 0x6b602f4e, 0x10000, 0x2, 0x5, 0x10001, 0x9, 0xfffff801, 0x0, 0x4, 0x2, 0x0, 0x228, 0x7fff, 0x7, 0x81, 0x8, 0x7, 0xc9e, 0xc9f, 0x5, 0xffff6b04, 0x2, 0xdc2, 0x1, 0x76, 0x1, 0x997, 0x8, 0x487, 0x3, 0x59c7, 0x0, 0x4], 0x2, 0x400, 0xfffff3d6}) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb46c4c0a285057e3061b9781e", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/62, 0x3e}, {&(0x7f0000000a80)=""/175, 0xb2}, {&(0x7f0000001f00)=""/4131, 0x1023}, {&(0x7f0000000c00)=""/205, 0xc3}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000400)=""/175, 0xaf}, {&(0x7f0000000600)=""/186, 0xfffffea9}, {&(0x7f0000000700)=""/187, 0xbb}, {&(0x7f0000000200)=""/19, 0x13}], 0x9}, 0x10040) recvmsg$kcm(r4, &(0x7f0000000bc0)={0x0, 0x0, 0x0}, 0x0) 1.523309133s ago: executing program 1 (id=1708): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x2}, {}, {0xa, 0x27}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x0) 988.555935ms ago: executing program 3 (id=1709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @multicast1}, {0x4e23, 0x4e24, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}, 0x3b) 988.231872ms ago: executing program 1 (id=1710): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe80, 0x0, &(0x7f0000000100)="b9ff03076844268cb89eccf888a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 872.952932ms ago: executing program 34 (id=1709): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0x2d, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @multicast1}, {0x4e23, 0x4e24, 0x19, 0x0, @gue={{0x2, 0x0, 0x0, 0xff}, '\x00\x00\x00\x00\x00\x00\x00\x00\x00'}}}}, 0x3b) 716.486289ms ago: executing program 2 (id=1712): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYBLOB="480000001000010027bd7000fbd9dfa500000000", @ANYRES32, @ANYBLOB="104e0600d5ba2259280012800900010076657468000000001800028014000100000000000206e9b43d"], 0x7c}, 0x1, 0x0, 0x0, 0x404c000}, 0x2) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) (async, rerun: 64) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) (rerun: 64) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r2, 0x0) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x100, 0x70bd2d, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async, rerun: 64) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000140)="f2e100660f3881b448d166b80500000066b9b89600000f01c10f20c06635020000000f22c036f2360f2085440f20c066350d000000440f22c089e80fb7fe9a6ee3fe00f76cd3", 0x46}], 0x1, 0x43, 0x0, 0x0) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 518.760941ms ago: executing program 2 (id=1713): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040040}, 0x0) 464.134217ms ago: executing program 2 (id=1714): sendmsg$key(0xffffffffffffffff, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000640)=ANY=[@ANYBLOB="020300030c0000002cbd7000eedbdf25030009004800000000050006003c0000000a004e2400000008ff010000000000000000000000000001000000000011dc0002000100000000000000070c000000c0cf9f724be4da226b41c446fe3eba6b0dc521eeb8e26e931de79760afcff254cc16c5231203cc75f62c374bd779261b8d321ee221dc00032d56813a312858c9455ad249ef0f567b15650dccae06634625d222af22bdeac4b54ad2f42a4841b227f01f23f205b94453830ee08636054847815047cedf14c68c7d1f1e6065d59d81d05413a9476ce696dd5b2ab68a6341300bbe1407dc10"], 0x60}, 0x1, 0x7}, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=\fy']) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000880)={r3, 0xffffffffffffffff, 0x6, 0x0, @val=@uprobe_multi={&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)=[0x100000001, 0x80, 0xff, 0x9, 0x61d88ee4, 0x5, 0x7ff, 0x7ff, 0x5593, 0x0], &(0x7f0000000800)=[0x4, 0x1, 0x2, 0x4, 0x1, 0x4, 0x1], 0x4, 0xa}}, 0x40) r5 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r5, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) recvmmsg(r5, &(0x7f0000003b40)=[{{&(0x7f0000000940)=@ax25={{0x3, @netrom}, [@null, @bcast, @remote, @netrom, @default, @remote, @netrom, @default]}, 0x80, &(0x7f0000000b80)=[{&(0x7f00000009c0)=""/217, 0xd9}, {&(0x7f0000000ac0)=""/70, 0x46}, {&(0x7f0000000b40)}], 0x3}, 0x8}, {{&(0x7f0000000bc0)=@qipcrtr, 0x80, &(0x7f0000002040)=[{&(0x7f0000000c40)=""/4096, 0x1000}, {&(0x7f0000001c40)=""/239, 0xef}, {&(0x7f0000001d40)=""/30, 0x1e}, {&(0x7f0000001d80)=""/58, 0x3a}, {&(0x7f0000001dc0)=""/207, 0xcf}, {&(0x7f0000001ec0)=""/42, 0x2a}, {&(0x7f0000001f00)=""/147, 0x93}, {&(0x7f0000001fc0)=""/126, 0x7e}], 0x8, &(0x7f00000020c0)=""/52, 0x34}, 0x4}, {{&(0x7f0000002100)=@can, 0x80, &(0x7f00000033c0)=[{&(0x7f0000002180)=""/231, 0xe7}, {&(0x7f0000002280)=""/159, 0x9f}, {&(0x7f0000002340)=""/4096, 0x1000}, {&(0x7f0000003340)=""/111, 0x6f}], 0x4, &(0x7f0000003400)=""/252, 0xfc}, 0x9}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000003500)=""/65, 0x41}], 0x1, &(0x7f00000035c0)=""/8, 0x8}, 0x101}, {{&(0x7f0000003600)=@can, 0x80, &(0x7f0000003900)=[{&(0x7f0000003680)=""/25, 0x19}, {&(0x7f00000036c0)=""/187, 0xbb}, {&(0x7f0000003780)=""/88, 0x58}, {&(0x7f0000003800)=""/196, 0xc4}], 0x4, &(0x7f0000003940)=""/90, 0x5a}, 0x100}, {{&(0x7f00000039c0)=@xdp, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003a40)=""/150, 0x96}], 0x1}, 0x1}], 0x6, 0x41, &(0x7f0000003cc0)={0x77359400}) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) close(r6) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r6, r6, 0x19, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) r7 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$loop(&(0x7f0000000500), 0x6, 0x1000) bind$alg(r8, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r9 = accept4(r8, 0x0, 0x0, 0x800) r10 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x20002, 0x0) ioctl$PTP_PIN_SETFUNC2(r10, 0x40603d10, &(0x7f00000000c0)={'\x00', 0x1, 0x2, 0x1}) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r11 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000280)="0f209ec4e235dfcd2e0f3765660fefb084c264835d06dc0ffedc81e80d80baf80c66b868b2fc8366efbafc0c66ed660f01df660ffb9f0000", 0x38}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) 463.922591ms ago: executing program 1 (id=1715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x4d, 0xfffffffb, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000022c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0xfff1}, {0x0, 0xfff1}, {0x8, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x2, 0xfff1}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0xf7513c36066f8950}, 0x20000010) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001740)=@newqdisc={0x6c, 0x28, 0x4ee4e6a52ff56541, 0x4801, 0xfffffdf8, {0x0, 0x0, 0x0, r3, {0x2}, {}, {0xa, 0x27}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x3c, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0xa32, 0x6, 0x1, 0xc, 0x0, 0x4, 0x8, 0x4, 0x68d8, 0x5, 0x4, 0x3, 0x12, 0x6, 0xfffffffd, 0xfffffe01}}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40098}, 0x1000000) 348.094503ms ago: executing program 2 (id=1716): mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000001d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x0, {0x0, 0x1a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x11, &(0x7f0000000280)=@framed={{0x18, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}]}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x78, 0x0, 0x6, {0x8, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x1, 0x3966, 0x1, 0x8000, 0xfffffffc, r2, r3, 0x1, 0x8}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) write$tcp_congestion(r4, &(0x7f00000000c0)='lp\x00', 0xfffffdef) dup2(r4, r0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000100)={0xfffffffffffffeab, 0x1, 0x0, {0x2}}, 0xffffffe8) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r5, &(0x7f0000001f00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x0, 0x1, 0x25, 0x8}}]}}], 0x4000000000000a2, 0x4004) 167.559639ms ago: executing program 1 (id=1717): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x4, 0x4) listen(r0, 0x7f) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000005c0)=ANY=[@ANYBLOB="14000000040000000800000006"], 0x48) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r2, 0x40085112, &(0x7f0000000d80)=@l={0x92, 0x1, 0xb0, 0x6, 0x7, 0x2, 0x7}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r1, &(0x7f0000000280), &(0x7f0000000a80)=@tcp6=r0}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000000), &(0x7f00000002c0)=@tcp6=r0, 0x1}, 0x20) 106.383043ms ago: executing program 1 (id=1718): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x4f7}, 0x1c) shutdown(r0, 0x1) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @empty}, 0x8}, 0x1c) syz_open_dev$sndctrl(&(0x7f0000000000), 0x5, 0x10500) 58.572828ms ago: executing program 1 (id=1719): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) mmap(&(0x7f00003f8000/0x3000)=nil, 0x3000, 0x4, 0x40010, r0, 0x599e1000) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400ac5d", @ANYRES16=r2, @ANYBLOB="010028bd7000000000008900000008000300", @ANYRES32=r4, @ANYBLOB="18001d801400008006000500c000000005000800be000000"], 0x34}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x48041}, 0x8000041) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r6 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x88000, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e0, 0xd0, 0x0, 0xd0, 0x3f8, 0x1e8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@empty, 0x40, 0x30, 0x7fff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x4}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xba496e1eb728c50e}}, @common=@ipv6header={{0x28}, {0x8, 0x62}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, @ipv4=@remote, 0x36, 0xe, 0x8}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xffffffff, 0x0, 0xffffff00], [0x0, 0xff000000, 0x0, 0xff000000], 'veth0_to_bridge\x00', 'bond0\x00', {0xff}, {}, 0x89, 0x1d, 0x6}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@icmp6={{0x28}, {0x10, "b3bb"}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev={0xfe, 0x80, '\x00', 0x30}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x37, 0x24, 0xfff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) ioctl$XFS_IOC_SCRUBV_METADATA(r6, 0xc0285840, &(0x7f0000000280)={0x8001, 0x0, 0xffffff7e, 0x0, 0x96cb, 0x8, 0x0, &(0x7f0000000200)=[{0x37, 0x1ff, 0x9}, {0x8, 0x101, 0x8}, {0x19, 0x101, 0x1}, {0x11, 0x101, 0x3}, {0xc, 0xfe, 0x6}, {0x10, 0x101, 0x3}, {0x7, 0xfe, 0x4}, {0x13, 0x101, 0x2}]}) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000005c0)=0x2, 0x4) 0s ago: executing program 6 (id=1711): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB='\a'], 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0) write$cgroup_devices(r4, 0x0, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000200)=ANY=[@ANYRESOCT=r3, @ANYRESOCT=r0, @ANYBLOB="5c5c5699d6cdb136394ba65c5ac9b23590e7eaf84447a6657aaddfa22a3f53629331960ecb76cba74978b1e16c2fc1e07db04a3995619e773923f5e012132bd314ce2b34f43e18cd90dfb265ddcb515d4510b506e7b9628e7715042fb947667d24fe01fc1435218fecd04677063be610732b8dc16454e128ddece0b9a9f639185e1da2cb50c0c04b0507e613fe23af3f1a9e4c6e82d1eb49652e104eadf2d91669934b5443d3af377dec557790e4965b793b0209aa3f016e2dde8239736618655608d1056b4982bada56e4301ff92e79096aaa6c625106768f655ef004bef57165c8de2342776532a3", @ANYRESDEC=r0, @ANYRES64=r3], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB='\a'], 0x10) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r6, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r6, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmmsg$inet(r6, &(0x7f0000004680)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)="c6fb3f171cfc6e1e6153f53752a9cf4819c36347770d18559f013acd25a4023f601a2c5211a57011f89db802e399b189dd979aa17017322bf37d921850f37febe8876ed0f6fbcd6cb905f7685984ca8396a4c5e0a099d3f50dcacceed6c9987e56d82ed0eb12344207e819a8f7c83fcfc3c15b8c17c559718cd3b331706d5d6314f70a18828e940915133ab764e5dd7884d8e5efb0113717df629424de67c9c1d39080335c9eba9c19873b3d5ff2712aded4f9ce91000677af17b6c9", 0xbc}, {&(0x7f0000000600)="a97ab661d6d8079b5563e26b6d25b5b2ce40dd69de10a107d20503fbe419f712e021b28e981b2c1ee6a0f008f5269ef24f8e404e265e36177416132890f3ce5151df397e9425dfdc2c40a47cccf8129c9e80f6ca2ceeb2232773839f9c0654db5e52e86fae27db0df745dfd837e230cf8a1f6599e8c6038d1ac4c67ab1585eaa8c289149e680cf7b6b7acbecef328d685dc3a2a26a37250490d031d14ee0a5442cf7a0c45477f3682310a5d807", 0xad}, {&(0x7f0000000700)="f475455a018c98cc7569b6c1608a6ea393b7ee651aa4bb29743b8789104240475cd74e2d22c395da2a6fea53622509f967eff6ac8b33fc89f7469551ce4ccc303df2144a7de31dff9706f049177f9f30a826933cbd09321a5eea35cd3d2f8fe6467d5d82cef844f30f264a440ebebea73dd612a8b5961c489f7c6d14d69c01df1adb5618161e70535dfc71a11179c62eb79919af108e7047ad1a62629e1d61e9084166604259e42e1e60045d013912aa", 0xb0}], 0x3}}], 0x1, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r6, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) setsockopt$inet_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r6, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f0000000080)={0xf920, [0x2, 0x3], 0x3}, 0x10) kernel console output (not intermixed with test programs): 1] binder: 9010:9011 ioctl c0306201 200000000180 returned -14 [ 187.082087][ T42] audit: type=1400 audit(1784503979.509:710): avc: denied { ioctl } for pid=8991 comm="syz.3.1043" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 187.258936][ T50] usb 8-1: 1:1: All rates were zero [ 187.276453][ T50] usb 8-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 187.318423][ T50] usb 8-1: USB disconnect, device number 16 [ 187.338620][ T5738] udevd[5738]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 187.460273][ T9018] Bluetooth: MGMT ver 1.23 [ 187.786461][ T42] audit: type=1400 audit(1784503980.221:711): avc: denied { getopt } for pid=9021 comm="syz.4.1056" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 188.514244][ T50] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 188.694270][ T50] usb 6-1: Using ep0 maxpacket: 8 [ 188.733541][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 188.889787][ T50] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 188.894078][ T50] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.900684][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.905147][ T50] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.910078][ T50] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.916126][ T50] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.920130][ T50] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.172084][ T50] usb 6-1: usb_control_msg returned -32 [ 189.179877][ T50] usbtmc 6-1:16.0: can't read capabilities [ 189.237265][ T50] usb 6-1: USB disconnect, device number 28 [ 189.511698][ T5741] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 189.521410][ T64] Bluetooth: hci2: command 0x2016 tx timeout [ 190.008210][ T42] audit: type=1400 audit(1784503982.436:712): avc: denied { nlmsg_read } for pid=9057 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 190.148892][ T42] audit: type=1400 audit(1784503982.577:713): avc: denied { connect } for pid=9060 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.161957][ T42] audit: type=1400 audit(1784503982.597:714): avc: denied { listen } for pid=9060 comm="syz.3.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 190.858377][ T1351] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 190.948740][ T9076] syz.2.1076 (9076): attempted to duplicate a private mapping with mremap. This is not supported. [ 190.965075][ T9076] tipc: Enabling of bearer rejected, failed to enable media [ 190.988334][ T5822] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 191.008005][ T1351] usb 9-1: Using ep0 maxpacket: 8 [ 191.011872][ T1351] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 191.015478][ T1351] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 191.019467][ T1351] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 191.023462][ T1351] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 191.027375][ T1351] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.032781][ T1351] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 191.035921][ T1351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.138042][ T5822] usb 8-1: Using ep0 maxpacket: 16 [ 191.151393][ T5822] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 191.154575][ T5822] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 191.160465][ T5822] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.163180][ T5822] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.165708][ T5822] usb 8-1: Product: syz [ 191.167063][ T5822] usb 8-1: Manufacturer: syz [ 191.168645][ T5822] usb 8-1: SerialNumber: syz [ 191.179905][ T5822] usb 8-1: 0:2 : does not exist [ 191.181559][ T5822] usb 8-1: unit 6 not found! [ 191.245119][ T1351] usb 9-1: usb_control_msg returned -32 [ 191.246887][ T1351] usbtmc 9-1:16.0: can't read capabilities [ 191.379142][ T6099] usb 8-1: USB disconnect, device number 17 [ 191.424123][ T5753] udevd[5753]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.548709][ T9085] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1078'. [ 191.607059][ T9086] usbtmc 9-1:16.0: usbtmc488_ioctl_trigger returned -90 [ 193.254274][ T9105] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1086'. [ 193.293607][ T5886] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 193.497387][ T5886] usb 6-1: Using ep0 maxpacket: 8 [ 193.502403][ T5886] usb 6-1: unable to get BOS descriptor or descriptor too short [ 193.512556][ T5886] usb 6-1: config 4 interface 0 has no altsetting 0 [ 193.526025][ T5886] usb 6-1: string descriptor 0 read error: -22 [ 193.530257][ T5886] usb 6-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 193.540270][ T5886] usb 6-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 193.582084][ T5886] usb 6-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 193.587467][ T5886] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 193.593552][ T5886] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 193.596509][ T5886] usb 6-1: media controller created [ 193.608628][ T5886] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 193.697352][ T5835] usb 9-1: USB disconnect, device number 24 [ 193.747677][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.751665][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.902279][ T9116] binder: 9114:9116 ioctl c0306201 200000000180 returned -14 [ 194.003440][ T42] audit: type=1400 audit(1784503986.445:715): avc: denied { connect } for pid=9112 comm="syz.4.1090" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 194.283550][ T9125] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1094'. [ 194.306112][ T9128] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 194.309192][ T9128] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 194.517845][ T9137] binder: 9136:9137 ioctl c0306201 200000000180 returned -14 [ 194.526982][ T50] usb 6-1: USB disconnect, device number 29 [ 194.782092][ T5835] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 194.865368][ T9159] binder_alloc: 9158: binder_alloc_buf, no vma [ 194.867922][ T9159] binder: 9158:9159 ioctl c0306201 200000000180 returned -14 [ 194.996814][ T5835] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 195.000783][ T5835] usb 8-1: config 0 has no interface number 0 [ 195.003291][ T5835] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.012119][ T5835] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 195.016072][ T5835] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.019349][ T5835] usb 8-1: Product: syz [ 195.021383][ T5835] usb 8-1: Manufacturer: syz [ 195.023336][ T5835] usb 8-1: SerialNumber: syz [ 195.028640][ T5835] usb 8-1: config 0 descriptor?? [ 195.042440][ T5835] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 195.298062][ C0] usb 8-1: yurex_control_callback - control failed: -2 [ 195.302641][ T5822] usb 8-1: USB disconnect, device number 18 [ 195.314129][ T5822] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 195.369427][ T1351] usb 9-1: new high-speed USB device number 25 using dummy_hcd [ 195.538971][ T1351] usb 9-1: Using ep0 maxpacket: 16 [ 195.542078][ T1351] usb 9-1: config 1 interface 0 has no altsetting 0 [ 195.545943][ T1351] usb 9-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 195.549093][ T1351] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.551717][ T1351] usb 9-1: Product: syz [ 195.553041][ T1351] usb 9-1: Manufacturer: syz [ 195.554544][ T1351] usb 9-1: SerialNumber: syz [ 195.771218][ T1351] usbhid 9-1:1.0: can't add hid device: -71 [ 195.773112][ T1351] usbhid 9-1:1.0: probe with driver usbhid failed with error -71 [ 195.779295][ T1351] usb 9-1: USB disconnect, device number 25 [ 195.857187][ T9181] comedi comedi3: 8255: I/O base address not correctly aligned [ 196.607236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 196.695708][ T9186] binder_alloc: 9185: binder_alloc_buf, no vma [ 196.699162][ T9186] binder: 9185:9186 ioctl c0306201 200000000180 returned -14 [ 196.959341][ T9197] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 197.201754][ T9204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1122'. [ 197.210940][ T9204] vlan2: entered promiscuous mode [ 197.212946][ T9204] syz_tun: entered promiscuous mode [ 197.822683][ T42] audit: type=1400 audit(1784503990.272:716): avc: denied { create } for pid=9211 comm="syz.3.1127" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 198.239342][ T9217] binder_alloc: 9216: binder_alloc_buf, no vma [ 198.242222][ T9217] binder: 9216:9217 ioctl c0306201 200000000180 returned -14 [ 198.247571][ T42] audit: type=1400 audit(1784503990.702:717): avc: denied { ioctl } for pid=9218 comm="syz.4.1130" path="socket:[29003]" dev="sockfs" ino=29003 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 198.386359][ T42] audit: type=1400 audit(1784503990.842:718): avc: denied { write } for pid=9226 comm="syz.4.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 198.611683][ T9234] overlayfs: missing 'lowerdir' [ 199.144818][ T9251] 8021q: adding VLAN 0 to HW filter on device bond1 [ 199.155303][ T5835] wlan0 speed is unknown, defaulting to 1000 [ 199.852126][ T9279] binder: 9278:9279 ioctl c0306201 200000000180 returned -14 [ 200.008459][ T9286] openvswitch: netlink: Tunnel attr 157 out of range max 16 [ 200.820972][ T1047] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 200.982384][ T1047] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 200.992572][ T1047] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 200.996751][ T1047] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.000476][ T1047] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.017698][ T1047] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.021644][ T1047] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.025061][ T1047] usb 6-1: Product: syz [ 201.026914][ T1047] usb 6-1: Manufacturer: syz [ 201.026976][ T42] audit: type=1804 audit(1784503993.476:719): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.3.1158" name="/newroot/318/file1" dev="fuse" ino=1 res=1 errno=0 [ 201.036844][ T42] audit: type=1800 audit(1784503993.476:720): pid=9294 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1158" name="/" dev="fuse" ino=1 res=0 errno=0 [ 201.068534][ T1047] cdc_wdm 6-1:1.0: skipping garbage [ 201.070568][ T1047] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 201.091437][ T9297] sch_tbf: burst 6 is lower than device lo mtu (65550) ! [ 201.270540][ T1047] usb 6-1: USB disconnect, device number 30 [ 201.709607][ T1047] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 201.860423][ T9304] binder: 9303:9304 ioctl c0306201 200000000180 returned -14 [ 201.863200][ T1047] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 201.868683][ T1047] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 201.875016][ T1047] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 201.877886][ T1047] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.888614][ T1047] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 201.894332][ T1047] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 201.897379][ T1047] usb 6-1: Product: syz [ 201.898710][ T1047] usb 6-1: Manufacturer: syz [ 201.905278][ T1047] cdc_wdm 6-1:1.0: skipping garbage [ 201.908936][ T1047] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 202.059580][ C2] Unknown status report in ack skb [ 202.588481][ T6099] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 202.739583][ T6099] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 202.744143][ T6099] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 202.748478][ T6099] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 202.752114][ T6099] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.759839][ T9318] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 202.766144][ T6099] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 202.966767][ T6099] usb 9-1: USB disconnect, device number 26 [ 203.667194][ T5740] usb 6-1: USB disconnect, device number 31 [ 203.706706][ T9327] binder: BINDER_SET_CONTEXT_MGR already set [ 203.711566][ T9327] binder: 9325:9327 ioctl 4018620d 200000000040 returned -16 [ 203.715550][ T9327] binder: 9325:9327 ioctl c0306201 200000000180 returned -14 [ 203.853522][ T9331] futex_wake_op: syz.4.1173 tries to shift op by 144; fix this program [ 203.996398][ T5740] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 204.148345][ T5740] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 204.151607][ T5740] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 204.157893][ T5740] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 204.161992][ T5740] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 204.165659][ T5740] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.183141][ T5740] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 204.187617][ T5740] usb 6-1: invalid MIDI out EP 0 [ 204.253705][ T5740] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 204.381443][ T1351] usb 6-1: USB disconnect, device number 32 [ 204.507402][ T42] audit: type=1400 audit(1784503996.971:721): avc: denied { map } for pid=9338 comm="syz.3.1178" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 204.517015][ T42] audit: type=1400 audit(1784503996.971:722): avc: denied { execute } for pid=9338 comm="syz.3.1178" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 204.969771][ T9346] 9p: Bad value for 'wfdno' [ 205.247487][ T9352] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.418171][ T9358] binder: BINDER_SET_CONTEXT_MGR already set [ 205.420549][ T9358] binder: 9357:9358 ioctl 4018620d 200000000040 returned -16 [ 205.423893][ T9358] binder: 9357:9358 ioctl c0306201 200000000180 returned -14 [ 206.623559][ T6099] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 206.783275][ T6099] usb 6-1: Using ep0 maxpacket: 32 [ 206.788940][ T6099] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 206.791866][ T6099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.801328][ T6099] usb 6-1: config 0 descriptor?? [ 206.916427][ T9381] binder: BINDER_SET_CONTEXT_MGR already set [ 206.918356][ T9381] binder: 9380:9381 ioctl 4018620d 200000000040 returned -16 [ 206.921256][ T9381] binder: 9380:9381 ioctl c0306201 200000000180 returned -14 [ 206.974235][ T9383] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1194'. [ 207.014509][ T6099] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 207.020211][ T6099] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 207.024615][ T6099] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 207.027174][ T6099] usb 6-1: media controller created [ 207.033978][ T6099] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 207.038534][ T9387] netlink: 'syz.3.1196': attribute type 30 has an invalid length. [ 207.052816][ T9] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 207.202661][ T9] usb 9-1: Using ep0 maxpacket: 32 [ 207.206567][ T9] usb 9-1: config 0 has an invalid interface number: 188 but max is 0 [ 207.210005][ T9] usb 9-1: config 0 has no interface number 0 [ 207.212655][ T9] usb 9-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 207.218747][ T9] usb 9-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 207.222599][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.225773][ T9] usb 9-1: Product: syz [ 207.227468][ T9] usb 9-1: Manufacturer: syz [ 207.229333][ T9] usb 9-1: SerialNumber: syz [ 207.235285][ T9] usb 9-1: config 0 descriptor?? [ 207.237921][ T9379] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 207.372672][ T5740] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 207.445170][ T9379] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 207.522626][ T5740] usb 8-1: Using ep0 maxpacket: 16 [ 207.525886][ T5740] usb 8-1: config 1 interface 0 has no altsetting 0 [ 207.530207][ T5740] usb 8-1: New USB device found, idVendor=056a, idProduct=0012, bcdDevice= 0.40 [ 207.533184][ T5740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 207.535799][ T5740] usb 8-1: Product: syz [ 207.537223][ T5740] usb 8-1: Manufacturer: syz [ 207.538707][ T5740] usb 8-1: SerialNumber: syz [ 207.731074][ T6099] az6027: usb out operation failed. (-71) [ 207.733690][ T6099] az6027: usb out operation failed. (-71) [ 207.735657][ T6099] stb0899_attach: Driver disabled by Kconfig [ 207.737590][ T6099] az6027: no front-end attached [ 207.737590][ T6099] [ 207.740065][ T6099] az6027: usb out operation failed. (-71) [ 207.741897][ T6099] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 207.745281][ T6099] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input19 [ 207.750798][ T6099] dvb-usb: schedule remote query interval to 400 msecs. [ 207.754381][ T6099] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 207.759621][ T6099] usb 6-1: USB disconnect, device number 33 [ 207.766889][ T5740] usbhid 8-1:1.0: can't add hid device: -71 [ 207.769390][ T5740] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 207.787870][ T5740] usb 8-1: USB disconnect, device number 19 [ 207.834849][ T6099] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 207.862894][ T9399] binder: 9398:9399 ioctl c0306201 200000000180 returned -14 [ 208.118048][ T42] audit: type=1400 audit(1784504000.575:723): avc: denied { create } for pid=9400 comm="syz.1.1203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 208.655472][ T9] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 208.828469][ T9416] bridge0: port 3(dummy0) entered blocking state [ 208.832200][ T9416] bridge0: port 3(dummy0) entered disabled state [ 208.835974][ T9416] dummy0: entered allmulticast mode [ 208.851670][ T9416] dummy0: entered promiscuous mode [ 208.857600][ T9416] bridge0: port 3(dummy0) entered blocking state [ 208.861370][ T9416] bridge0: port 3(dummy0) entered forwarding state [ 208.905179][ T9420] binder: 9419:9420 ioctl c0306201 200000000180 returned -14 [ 209.114517][ T9] asix 9-1:0.188 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x00b0: ffffffb9 [ 209.130672][ T9] asix 9-1:0.188: probe with driver asix failed with error -71 [ 209.141425][ T9] usb 9-1: USB disconnect, device number 27 [ 210.849497][ T9453] binder: 9451:9453 ioctl c0306201 200000000180 returned -14 [ 211.322553][ T9459] syzkaller0: entered promiscuous mode [ 211.324367][ T9459] syzkaller0: entered allmulticast mode [ 211.424379][ T9465] fuse: Unknown parameter 'fd0x0000000000000004' [ 211.441907][ T42] audit: type=1400 audit(1784504003.908:724): avc: denied { bind } for pid=9464 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.454396][ T42] audit: type=1400 audit(1784504003.908:725): avc: denied { connect } for pid=9464 comm="syz.4.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 211.641015][ T9475] binder: BINDER_SET_CONTEXT_MGR already set [ 211.643123][ T9475] binder: 9474:9475 ioctl 4018620d 200000000040 returned -16 [ 211.655659][ T9475] binder: 9474:9475 ioctl c0306201 200000000180 returned -14 [ 211.798121][ T5883] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 211.957850][ T5883] usb 8-1: Using ep0 maxpacket: 16 [ 211.965852][ T5883] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 211.975322][ T5883] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 211.987362][ T5883] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 211.996819][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.003763][ T5883] usb 8-1: Product: syz [ 212.007903][ T5883] usb 8-1: Manufacturer: syz [ 212.012183][ T5883] usb 8-1: SerialNumber: syz [ 212.043702][ T5883] usb 8-1: 0:2 : does not exist [ 212.077845][ T1351] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 212.236646][ T5883] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 212.259197][ T1351] usb 9-1: Using ep0 maxpacket: 8 [ 212.279183][ T1351] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 212.291674][ T1351] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 212.302707][ T1351] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 212.340614][ T1351] usb 9-1: config 0 descriptor?? [ 212.616117][ T1351] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 212.625340][ T5883] usb 8-1: USB disconnect, device number 20 [ 212.782276][ T5753] udevd[5753]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 212.836485][ T6617] usb 9-1: USB disconnect, device number 28 [ 212.836489][ C2] iowarrior 9-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 213.312461][ T9502] binder: BINDER_SET_CONTEXT_MGR already set [ 213.315170][ T9502] binder: 9501:9502 ioctl 4018620d 200000000040 returned -16 [ 213.319514][ T9502] binder: 9501:9502 ioctl c0306201 200000000180 returned -14 [ 213.916394][ T1047] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 214.085866][ T1047] usb 9-1: Using ep0 maxpacket: 32 [ 214.091883][ T1047] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 214.095069][ T1047] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.106108][ T1047] usb 9-1: config 0 descriptor?? [ 214.116157][ T1047] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 214.367004][ T9527] binder: BINDER_SET_CONTEXT_MGR already set [ 214.372131][ T9527] binder: 9526:9527 ioctl 4018620d 200000000040 returned -16 [ 214.375206][ T9527] binder: 9526:9527 ioctl c0306201 200000000180 returned -14 [ 214.775767][ T42] audit: type=1400 audit(215.313:726): avc: denied { write } for pid=9536 comm="syz.1.1257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 215.342254][ T1047] gspca_vc032x: reg_w err -71 [ 215.344025][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.349083][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.350910][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.352722][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.354476][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.356371][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.358149][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.359946][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.361755][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.363553][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.365399][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.367253][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.369024][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.370711][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.372427][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.374102][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.376067][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.378082][ T1047] gspca_vc032x: I2c Bus Busy Wait 00 [ 215.380268][ T1047] gspca_vc032x: Unknown sensor... [ 215.382136][ T1047] vc032x 9-1:0.0: probe with driver vc032x failed with error -22 [ 215.394282][ T1047] usb 9-1: USB disconnect, device number 29 [ 215.579031][ T9547] fuse: Bad value for 'fd' [ 216.716070][ T5883] usb 6-1: new full-speed USB device number 34 using dummy_hcd [ 216.868066][ T5883] usb 6-1: not running at top speed; connect to a high speed hub [ 216.878239][ T5883] usb 6-1: config 2 has an invalid interface number: 85 but max is 0 [ 216.886374][ T5883] usb 6-1: config 2 has no interface number 0 [ 216.893865][ T5883] usb 6-1: config 2 interface 85 has no altsetting 0 [ 216.915760][ T5883] usb 6-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=a7.d5 [ 216.920227][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 216.922805][ T5883] usb 6-1: Product: syz [ 216.924130][ T5883] usb 6-1: Manufacturer: syz [ 216.925650][ T5883] usb 6-1: SerialNumber: syz [ 217.167706][ T5883] gspca_main: conex-2.14.0 probing 0572:0041 [ 217.413914][ T5883] usb 6-1: USB disconnect, device number 34 [ 218.275530][ T5740] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 218.425535][ T5740] usb 8-1: Using ep0 maxpacket: 32 [ 218.433989][ T5740] usb 8-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 218.443088][ T5740] usb 8-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 218.449700][ T5740] usb 8-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 218.455503][ T5740] usb 8-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 218.468749][ T5740] usb 8-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 218.472656][ T5740] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.478893][ T5740] usb 8-1: Product: syz [ 218.480448][ T5740] usb 8-1: Manufacturer: syz [ 218.483252][ T5740] usb 8-1: SerialNumber: syz [ 218.489807][ C0] imon 8-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 218.500392][ T5740] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/input/input20 [ 218.707065][ T5740] imon 8-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 218.714327][ T5740] (id 0x00) [ 218.756218][ T5740] rc_core: IR keymap rc-imon-pad not found [ 218.758822][ T5740] Registered IR keymap rc-empty [ 218.760923][ T5740] imon 8-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 218.765199][ T5740] imon 8-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 218.894938][ T42] audit: type=1326 audit(219.423:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 218.903534][ T42] audit: type=1326 audit(219.423:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 218.911502][ T42] audit: type=1326 audit(219.443:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 218.919946][ T5740] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0 [ 218.926113][ T42] audit: type=1326 audit(219.443:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 218.965978][ T42] audit: type=1326 audit(219.443:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=440 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 218.974068][ T42] audit: type=1326 audit(219.443:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 218.983037][ T42] audit: type=1326 audit(219.443:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 218.991322][ T42] audit: type=1326 audit(219.443:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 218.999617][ T42] audit: type=1326 audit(219.443:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9622 comm="syz.4.1284" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0e65f9de99 code=0x7ffc0000 [ 219.063127][ T5740] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:155.0/rc/rc0/input21 [ 219.073073][ T5740] imon 8-1:155.0: iMON device (15c2:ffdc, intf0) on usb<8:21> initialized [ 219.110290][ T50] usb 8-1: USB disconnect, device number 21 [ 219.495690][ T6617] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 219.646982][ T6617] usb 9-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 219.651299][ T6617] usb 9-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 219.654475][ T6617] usb 9-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 219.658764][ T6617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.666083][ T9631] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 219.671966][ T6617] usb 9-1: Quirk or no altset; falling back to MIDI 1.0 [ 219.791234][ T9637] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 219.865877][ T6099] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 219.914064][ T5883] usb 9-1: USB disconnect, device number 30 [ 220.039097][ T6099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 220.042833][ T6099] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 220.047050][ T6099] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 220.051073][ T6099] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 220.053905][ T6099] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.062826][ T6099] usb 6-1: config 0 descriptor?? [ 220.475165][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.478118][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.480556][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.483032][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.485510][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.487997][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.490342][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.492699][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.495164][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.497720][ T6099] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 220.509781][ T6099] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 220.758519][ T5883] usb 6-1: USB disconnect, device number 35 [ 221.244328][ T42] audit: type=1400 audit(221.773:736): avc: denied { read } for pid=9658 comm="syz.2.1297" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 221.254257][ T42] audit: type=1400 audit(221.773:737): avc: denied { open } for pid=9658 comm="syz.2.1297" path="net:[4026532895]" dev="nsfs" ino=4026532895 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 221.979083][ T42] audit: type=1400 audit(222.513:738): avc: denied { shutdown } for pid=9658 comm="syz.2.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 222.585744][ T6099] usb 9-1: new full-speed USB device number 31 using dummy_hcd [ 222.747162][ T6099] usb 9-1: config 10 has an invalid interface number: 2 but max is 0 [ 222.749765][ T6099] usb 9-1: config 10 has no interface number 0 [ 222.753831][ T6099] usb 9-1: New USB device found, idVendor=09fb, idProduct=6025, bcdDevice=8e.90 [ 222.757427][ T6099] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.760461][ T6099] usb 9-1: Product: syz [ 222.762077][ T6099] usb 9-1: Manufacturer: syz [ 222.763863][ T6099] usb 9-1: SerialNumber: syz [ 222.978648][ T6099] ftdi_sio 9-1:10.2: FTDI USB Serial Device converter detected [ 223.000142][ T6099] ftdi_sio ttyUSB0: unknown device type: 0x8e90 [ 223.019034][ T6099] usb 9-1: USB disconnect, device number 31 [ 223.027904][ T6099] ftdi_sio 9-1:10.2: device disconnected [ 223.096370][ T9688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.494726][ T42] audit: type=1400 audit(224.023:739): avc: denied { accept } for pid=9694 comm="syz.1.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 224.583865][ T9739] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1328'. [ 224.848173][ T1047] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 224.965506][ T50] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 224.995480][ T1047] usb 6-1: Using ep0 maxpacket: 8 [ 224.998490][ T1047] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 225.001869][ T1047] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 225.004645][ T1047] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.008960][ T1047] usb 6-1: config 0 descriptor?? [ 225.115424][ T50] usb 8-1: Using ep0 maxpacket: 32 [ 225.118826][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 225.122205][ T50] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 225.125244][ T50] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 225.128505][ T50] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 225.132885][ T50] usb 8-1: config 0 descriptor?? [ 225.137904][ T50] hub 8-1:0.0: USB hub found [ 225.275450][ T1047] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 225.343512][ T50] hub 8-1:0.0: 1 port detected [ 225.422928][ T1047] usb 6-1: USB disconnect, device number 36 [ 225.949058][ T50] hub 8-1:0.0: activate --> -90 [ 226.168226][ T50] hub 8-1:0.0: hub_ext_port_status failed (err = -71) [ 226.172258][ T1047] usb 8-1: USB disconnect, device number 22 [ 226.418281][ T42] audit: type=1400 audit(226.773:740): avc: denied { read write } for pid=9755 comm="syz.1.1336" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.444143][ T42] audit: type=1400 audit(226.773:741): avc: denied { open } for pid=9755 comm="syz.1.1336" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.523163][ T42] audit: type=1400 audit(226.773:742): avc: denied { ioctl } for pid=9755 comm="syz.1.1336" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 226.930061][ T42] audit: type=1400 audit(227.463:743): avc: denied { ioctl } for pid=9763 comm="syz.2.1338" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 227.715753][ T5740] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 227.839391][ T9783] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1346'. [ 227.853674][ T9783] ipvlan2: entered allmulticast mode [ 227.875496][ T5740] usb 6-1: Using ep0 maxpacket: 8 [ 227.884597][ T5740] usb 6-1: New USB device found, idVendor=0b05, idProduct=17a0, bcdDevice= 0.40 [ 227.889203][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.899520][ T5740] usb 6-1: Product: syz [ 227.902071][ T5740] usb 6-1: Manufacturer: syz [ 227.904578][ T5740] usb 6-1: SerialNumber: syz [ 227.922610][ T9784] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1347'. [ 227.945626][ T9] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 228.146432][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 228.314090][ T9] usb 9-1: no configurations [ 228.324566][ T9] usb 9-1: can't read configurations, error -22 [ 228.729126][ T5740] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 228.731891][ T5740] usb 6-1: unit 3 not found! [ 228.764938][ T5740] usb 6-1: USB disconnect, device number 37 [ 228.833787][ T5753] udevd[5753]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 228.845514][ T9] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 228.904904][ T9803] binder: 9802:9803 ioctl 4018620d 0 returned -22 [ 229.015501][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 229.018610][ T9] usb 9-1: no configurations [ 229.020632][ T9] usb 9-1: can't read configurations, error -22 [ 229.023784][ T9] usb usb9-port1: attempt power cycle [ 229.145808][ T5883] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 229.200630][ T9809] netlink: 'syz.1.1358': attribute type 3 has an invalid length. [ 229.295458][ T5883] usb 8-1: Using ep0 maxpacket: 32 [ 229.299108][ T5883] usb 8-1: config 0 has an invalid interface number: 12 but max is 0 [ 229.301885][ T5883] usb 8-1: config 0 has no interface number 0 [ 229.304338][ T5883] usb 8-1: config 0 interface 12 has no altsetting 0 [ 229.308631][ T5883] usb 8-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 229.312274][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.314768][ T5883] usb 8-1: Product: syz [ 229.316788][ T5883] usb 8-1: Manufacturer: syz [ 229.318729][ T5883] usb 8-1: SerialNumber: syz [ 229.322070][ T5883] usb 8-1: config 0 descriptor?? [ 229.365747][ T9] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 229.386329][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 229.388828][ T9] usb 9-1: no configurations [ 229.390235][ T9] usb 9-1: can't read configurations, error -22 [ 229.475555][ T5740] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 229.516074][ T9] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 229.536176][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 229.538414][ T9] usb 9-1: no configurations [ 229.539907][ T9] usb 9-1: can't read configurations, error -22 [ 229.542146][ T9] usb usb9-port1: unable to enumerate USB device [ 229.637543][ T5740] usb 6-1: unable to get BOS descriptor or descriptor too short [ 229.642007][ T5740] usb 6-1: no configurations [ 229.644071][ T5740] usb 6-1: can't read configurations, error -22 [ 230.344247][ T5883] f81534 8-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 230.346724][ T5883] f81534 8-1:0.12: f81534_find_config_idx: read failed: -71 [ 230.349100][ T5883] f81534 8-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 230.351654][ T5883] f81534 8-1:0.12: probe with driver f81534 failed with error -71 [ 230.360130][ T5883] usb 8-1: USB disconnect, device number 23 [ 230.476676][ T9819] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1363'. [ 230.958341][ T5740] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 231.185616][ T5740] usb 6-1: Using ep0 maxpacket: 32 [ 231.214250][ T5740] usb 6-1: unable to get BOS descriptor or descriptor too short [ 231.260223][ T5740] usb 6-1: config 14 has an invalid interface number: 57 but max is 1 [ 231.300738][ T5740] usb 6-1: config 14 has an invalid interface number: 228 but max is 1 [ 231.355137][ T5740] usb 6-1: config 14 has no interface number 0 [ 231.388815][ T5740] usb 6-1: config 14 has no interface number 1 [ 231.427564][ T5740] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 231.450063][ T5740] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 231.460364][ T5740] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 231.471655][ T5740] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 231.478660][ T5740] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 231.483840][ T5740] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 231.493719][ T5740] usb 6-1: config 14 interface 57 has no altsetting 0 [ 231.500149][ T5740] usb 6-1: config 14 interface 228 has no altsetting 0 [ 231.545456][ T5883] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 231.554665][ T5740] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 231.580942][ T5740] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.584289][ T5740] usb 6-1: Product: syz [ 231.586302][ T5740] usb 6-1: Manufacturer: syz [ 231.588354][ T5740] usb 6-1: SerialNumber: syz [ 231.716797][ T5883] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 231.719496][ T5883] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 231.722699][ T5883] usb 8-1: config 220 has no interface number 2 [ 231.724710][ T5883] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 231.728966][ T5883] usb 8-1: config 220 interface 0 has no altsetting 0 [ 231.731094][ T5883] usb 8-1: config 220 interface 76 has no altsetting 0 [ 231.733226][ T5883] usb 8-1: config 220 interface 1 has no altsetting 0 [ 231.736995][ T5883] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 231.740075][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.742617][ T5883] usb 8-1: Product: syz [ 231.743956][ T5883] usb 8-1: Manufacturer: syz [ 231.745503][ T5883] usb 8-1: SerialNumber: syz [ 231.960003][ T5883] uvcvideo 8-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 231.962661][ T5883] uvcvideo 8-1:220.0: No valid video chain found. [ 231.964842][ T5883] usb 8-1: selecting invalid altsetting 0 [ 231.971623][ T5883] usb 8-1: selecting invalid altsetting 0 [ 231.973773][ T5883] usbtest 8-1:220.1: probe with driver usbtest failed with error -22 [ 231.978053][ T5883] usb 8-1: USB disconnect, device number 24 [ 232.125073][ T5740] legousbtower 6-1:14.57: interrupt endpoints not found [ 232.194486][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.506437][ T5740] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507 [ 232.511835][ T5740] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 232.747981][ T5883] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 232.905662][ T5883] usb 8-1: Using ep0 maxpacket: 8 [ 232.909590][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 232.914020][ T5883] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 232.918085][ T5883] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 232.921891][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 232.927635][ T5883] usb 8-1: config 0 descriptor?? [ 233.059471][ T9852] usb 6-1: LEGO USB Tower reset control request failed [ 233.261717][ T9842] usb 6-1: LEGO USB Tower reset control request failed [ 233.265774][ T5883] usb 6-1: USB disconnect, device number 39 [ 233.267639][ T6099] usb 8-1: USB disconnect, device number 25 [ 233.286192][ T5883] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected [ 233.615514][ T6617] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 233.765477][ T6617] usb 9-1: Using ep0 maxpacket: 8 [ 233.769457][ T6617] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 233.774185][ T6617] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 233.778578][ T6617] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.792634][ T6617] usb 9-1: config 0 descriptor?? [ 234.006297][ T6617] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 234.125519][ T5740] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 234.209871][ T50] usb 9-1: USB disconnect, device number 36 [ 234.277143][ T5740] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 234.280751][ T5740] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 234.284556][ T5740] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 234.288176][ T5740] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 234.292842][ T5740] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 234.298436][ T5740] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 234.301510][ T5740] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 234.304141][ T5740] usb 8-1: Product: syz [ 234.305790][ T5740] usb 8-1: Manufacturer: syz [ 234.312608][ T5740] cdc_wdm 8-1:1.0: skipping garbage [ 234.315270][ T5740] cdc_wdm 8-1:1.0: skipping garbage [ 234.320079][ T5740] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 234.322618][ T5740] cdc_wdm 8-1:1.0: Unknown control protocol [ 234.694007][ T9864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.717016][ T42] audit: type=1400 audit(235.253:744): avc: denied { read write } for pid=9860 comm="syz.3.1381" name="cdc-wdm0" dev="devtmpfs" ino=3322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 234.734930][ T42] audit: type=1400 audit(235.253:745): avc: denied { open } for pid=9860 comm="syz.3.1381" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3322 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 234.936910][ T5740] usb 8-1: USB disconnect, device number 26 [ 235.095565][ T50] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 235.269881][ T50] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 235.273526][ T50] usb 9-1: config 2 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 235.277372][ T50] usb 9-1: config 2 interface 0 has no altsetting 0 [ 235.279700][ T50] usb 9-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00 [ 235.282687][ T50] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.695034][ T50] hid_parser_main: 5 callbacks suppressed [ 235.695049][ T50] elo 0003:04E7:0009.0007: unknown main item tag 0x0 [ 235.699540][ T50] elo 0003:04E7:0009.0007: unknown main item tag 0x0 [ 235.701616][ T50] elo 0003:04E7:0009.0007: unknown main item tag 0x0 [ 235.704091][ T50] elo 0003:04E7:0009.0007: unknown main item tag 0x0 [ 235.706550][ T50] elo 0003:04E7:0009.0007: unknown main item tag 0x0 [ 235.712850][ T50] elo 0003:04E7:0009.0007: hidraw1: USB HID vff.ff Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0 [ 235.755469][ T1047] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 235.877680][ T9884] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.895729][ T29] usb 9-1: USB disconnect, device number 37 [ 235.915783][ T1047] usb 8-1: Using ep0 maxpacket: 8 [ 235.919173][ T1047] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.925477][ T1047] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 235.928330][ T1047] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 235.931115][ T1047] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.941171][ T1047] usb 8-1: config 0 descriptor?? [ 236.162793][ T5740] usb 8-1: USB disconnect, device number 27 [ 236.200159][ T9892] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.459643][ T9901] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 236.736067][ T5740] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 236.935425][ T5740] usb 9-1: Using ep0 maxpacket: 8 [ 237.261719][ T5740] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 237.265405][ T5740] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 237.670467][ T5740] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.676977][ T5740] usb 9-1: config 0 descriptor?? [ 237.737965][ T9924] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 237.756058][ T9924] audit: audit_backlog=65 > audit_backlog_limit=64 [ 237.758787][ T9924] audit: audit_lost=73 audit_rate_limit=0 audit_backlog_limit=64 [ 237.761987][ T9924] audit: backlog limit exceeded [ 237.764281][ T9924] audit: audit_backlog=65 > audit_backlog_limit=64 [ 237.767064][ T9924] audit: audit_lost=74 audit_rate_limit=0 audit_backlog_limit=64 [ 237.770227][ T9924] audit: backlog limit exceeded [ 237.772279][ T9924] audit: audit_backlog=65 > audit_backlog_limit=64 [ 237.774980][ T9924] audit: audit_lost=75 audit_rate_limit=0 audit_backlog_limit=64 [ 237.890802][ T9926] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.955533][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 239.652179][ T5740] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 239.657277][ T5740] usb 9-1: USB disconnect, device number 38 [ 240.225702][ T6617] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 240.375785][ T6617] usb 6-1: Using ep0 maxpacket: 32 [ 240.379943][ T6617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 240.386302][ T6617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 240.391224][ T6617] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 240.395279][ T6617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.401464][ T6617] usb 6-1: config 0 descriptor?? [ 240.404572][ T9952] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 240.813256][ T6617] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 240.815603][ T6617] ft260 0003:0403:6030.0008: unknown main item tag 0x0 [ 240.941266][ T42] kauditd_printk_skb: 258 callbacks suppressed [ 240.941288][ T42] audit: type=1400 audit(241.473:811): avc: denied { read } for pid=9962 comm="syz.4.1421" name="usbmon7" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.954616][ T42] audit: type=1400 audit(241.473:812): avc: denied { open } for pid=9962 comm="syz.4.1421" path="/dev/usbmon7" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 240.964445][ T42] audit: type=1400 audit(241.483:813): avc: denied { ioctl } for pid=9962 comm="syz.4.1421" path="/dev/usbmon7" dev="devtmpfs" ino=760 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 241.013711][ T6617] ft260 0003:0403:6030.0008: chip code: 0002 0000 [ 241.264760][ T6617] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.1-1/input0 [ 241.875525][ T5741] Bluetooth: hci2: command 0x2016 tx timeout [ 242.181700][ T6617] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup [ 242.265468][ T29] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 242.437143][ T29] usb 8-1: Using ep0 maxpacket: 16 [ 242.442245][ T29] usb 8-1: unable to get BOS descriptor or descriptor too short [ 242.446758][ T29] usb 8-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 242.454221][ T29] usb 8-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 242.458090][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.461835][ T29] usb 8-1: Product: syz [ 242.463641][ T29] usb 8-1: Manufacturer: syz [ 242.466239][ T29] usb 8-1: SerialNumber: syz [ 242.680749][ T29] usb 8-1: Audio class v2/v3 interfaces need an interface association [ 242.685937][ T29] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 242.842796][ T6617] ft260 0003:0403:6030.0008: failed to retrieve status: -32 [ 242.928973][ T29] usb 8-1: 2:1 : can't get High Capability descriptor [ 243.097046][ T5740] usb 8-1: USB disconnect, device number 28 [ 243.276319][ T5753] udevd[5753]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 243.892850][T10023] syzkaller0: entered promiscuous mode [ 243.897672][T10023] syzkaller0: entered allmulticast mode [ 243.913156][T10024] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 244.077505][T10031] binder: 10030:10031 ioctl c0306201 0 returned -14 [ 244.081796][T10031] binder: 10030:10031 ioctl c0306201 200000000180 returned -14 [ 244.111227][ T42] audit: type=1400 audit(244.643:814): avc: denied { write } for pid=10032 comm="syz.1.1449" path="socket:[30892]" dev="sockfs" ino=30892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 244.202334][ T6617] usb 6-1: USB disconnect, device number 40 [ 244.725425][ T1351] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 244.876745][ T1351] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 244.879409][ T1351] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 244.882554][ T1351] usb 8-1: config 0 has no interface number 0 [ 244.884463][ T1351] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.888041][ T1351] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 244.891170][ T1351] usb 8-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 244.894993][ T1351] usb 8-1: New USB device found, idVendor=04d9, idProduct=a04a, bcdDevice= 0.00 [ 244.897990][ T1351] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 244.902085][ T1351] usb 8-1: config 0 descriptor?? [ 245.128457][T10056] binder: 10055:10056 ioctl c0306201 200000000180 returned -14 [ 245.151829][ T1351] usbhid 8-1:0.1: can't add hid device: -71 [ 245.153848][ T1351] usbhid 8-1:0.1: probe with driver usbhid failed with error -71 [ 245.160231][ T1351] usb 8-1: USB disconnect, device number 29 [ 245.532332][T10075] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.865967][ T5835] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 246.251141][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.256744][ T5835] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.263450][ T5835] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 246.274587][ T5835] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 246.280300][ T5835] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.286894][ T5835] usb 9-1: config 0 descriptor?? [ 247.105993][T10090] binder: 10089:10090 ioctl c0306201 200000000180 returned -14 [ 247.171676][T10093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1469'. [ 247.575330][T10101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.232410][T10116] binder: 10115:10116 ioctl c0306201 200000000180 returned -14 [ 248.468068][ T5835] usbhid 9-1:0.0: can't add hid device: -71 [ 248.487235][ T5835] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 248.543038][ T5835] usb 9-1: USB disconnect, device number 39 [ 248.796972][T10128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.454244][T10141] binder: 10140:10141 ioctl c0306201 200000000180 returned -14 [ 250.384011][T10162] input: syz0 as /devices/virtual/input/input22 [ 250.657658][T10169] binder: 10168:10169 ioctl c0306201 200000000180 returned -14 [ 250.684249][T10170] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.414086][ T42] audit: type=1400 audit(251.943:815): avc: denied { execute } for pid=10172 comm="syz.4.1498" path="/dev/snd/pcmC0D0c" dev="devtmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 252.725453][ T29] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 252.877632][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 252.882167][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 252.886382][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 252.891800][ T29] usb 8-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 252.895874][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.902826][ T29] usb 8-1: config 0 descriptor?? [ 253.098755][T10193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.118064][ T5835] usb 8-1: USB disconnect, device number 30 [ 253.700464][T10203] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.885830][ T6617] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 254.055494][ T6617] usb 6-1: Using ep0 maxpacket: 32 [ 254.059094][ T6617] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 254.065744][ T6617] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 254.069181][ T6617] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 254.072640][ T6617] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 254.085580][ T6617] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 254.088576][ T6617] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 254.092535][ T6617] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 254.096038][ T6617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.101150][ T6617] usb 6-1: config 0 descriptor?? [ 254.313883][ T6617] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 254.344213][T10211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.523412][ T5835] usb 6-1: USB disconnect, device number 41 [ 254.541193][ T5835] usblp0: removed [ 254.561742][ T42] audit: type=1400 audit(255.093:816): avc: denied { ioctl } for pid=10214 comm="syz.3.1512" path="socket:[31898]" dev="sockfs" ino=31898 ioctlcmd=0x4801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.601858][ T42] audit: type=1400 audit(255.133:817): avc: denied { mounton } for pid=10216 comm="syz.3.1513" path="/" dev="ramfs" ino=31903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 254.878124][T10225] binder: 10224:10225 ioctl c0306201 200000000180 returned -14 [ 255.158674][ T1443] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.161773][ T1443] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.195460][ T5883] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 255.221111][ T42] audit: type=1400 audit(255.753:818): avc: denied { read } for pid=10234 comm="syz.2.1522" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.236868][T10237] syzkaller0: entered promiscuous mode [ 255.239029][T10237] syzkaller0: entered allmulticast mode [ 255.245152][ T42] audit: type=1400 audit(255.753:819): avc: denied { open } for pid=10234 comm="syz.2.1522" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.327812][ T5883] usb 9-1: device descriptor read/64, error -71 [ 255.332060][ T42] audit: type=1400 audit(255.863:820): avc: denied { ioctl } for pid=10234 comm="syz.2.1522" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.578040][ T5883] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 255.597168][T10242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.714529][T10249] binder: 10248:10249 ioctl c0306201 200000000180 returned -14 [ 255.715802][ T5883] usb 9-1: device descriptor read/64, error -71 [ 255.794201][ T42] audit: type=1400 audit(256.323:821): avc: denied { write } for pid=10252 comm="syz.3.1530" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 255.835842][ T5883] usb usb9-port1: attempt power cycle [ 255.945483][ T6617] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 256.116015][ T6617] usb 6-1: Using ep0 maxpacket: 8 [ 256.119056][ T6617] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 256.122101][ T6617] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 256.126350][ T6617] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 256.130295][ T6617] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 256.134266][ T6617] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 256.138535][ T6617] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 256.141896][ T6617] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.153797][ T6617] usbtmc 6-1:16.0: bulk endpoints not found [ 256.185532][ T5883] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 256.207189][ T5883] usb 9-1: device descriptor read/8, error -71 [ 256.445529][ T5883] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 256.466091][ T5883] usb 9-1: device descriptor read/8, error -71 [ 256.585854][ T5883] usb usb9-port1: unable to enumerate USB device [ 257.061053][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 257.136709][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1536'. [ 257.228775][T10273] binder: 10272:10273 ioctl 4018620d 0 returned -22 [ 257.232038][T10273] binder: 10272:10273 ioctl c0306201 200000000180 returned -14 [ 258.687584][ T9] usb 6-1: USB disconnect, device number 42 [ 258.743137][ T42] audit: type=1400 audit(259.273:822): avc: denied { write } for pid=10292 comm="syz.1.1543" name="/" dev="9p" ino=73412009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 258.753482][ T42] audit: type=1400 audit(259.283:823): avc: denied { create } for pid=10292 comm="syz.1.1543" name="blkio.bfq.io_service_time_recursive" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 258.762131][ T42] audit: type=1400 audit(259.283:824): avc: denied { read append open } for pid=10292 comm="syz.1.1543" path="/354/file0/blkio.bfq.io_service_time_recursive" dev="9p" ino=73412113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 258.939073][T10301] binder: 10300:10301 ioctl 4018620d 0 returned -22 [ 258.942360][T10301] binder: 10300:10301 ioctl c0306201 200000000180 returned -14 [ 259.175585][ T5883] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 259.325762][ T5883] usb 6-1: Using ep0 maxpacket: 8 [ 259.328736][ T5883] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 259.331278][ T5883] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.334342][ T5883] usb 6-1: config 0 has no interface number 0 [ 259.336372][ T5883] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 259.339220][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.343209][ T5883] usb 6-1: config 0 descriptor?? [ 259.347639][ T5883] ldusb 6-1:0.55: Interrupt in endpoint not found [ 259.552719][ T6617] usb 6-1: USB disconnect, device number 43 [ 259.797122][ T50] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 259.945627][ T50] usb 9-1: Using ep0 maxpacket: 8 [ 259.949609][ T50] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 259.953031][ T50] usb 9-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 259.957335][ T50] usb 9-1: config 250 has no interfaces? [ 259.961449][ T50] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 259.965109][ T50] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 259.968535][ T50] usb 9-1: Product: syz [ 259.970270][ T50] usb 9-1: SerialNumber: syz [ 260.302149][T10278] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 260.325457][ T9] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 260.352836][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 260.426956][T10310] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1552'. [ 260.485493][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 260.489447][ T9] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 260.493009][ T9] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 260.497245][ T9] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 260.501036][ T9] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 260.504983][ T9] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 260.510277][ T9] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 260.515329][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.523084][ T9] usbtmc 6-1:16.0: bulk endpoints not found [ 262.362713][T10335] binder: 10334:10335 ioctl c0306201 0 returned -14 [ 262.366099][T10335] binder: 10334:10335 ioctl c0306201 200000000180 returned -14 [ 262.396436][T10336] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.560394][ T6617] usb 9-1: USB disconnect, device number 44 [ 262.652008][T10347] tmpfs: Bad value for 'mpol' [ 262.654608][ T42] audit: type=1400 audit(263.183:825): avc: denied { bind } for pid=10346 comm="syz.4.1564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 262.710247][ T42] audit: type=1400 audit(263.243:826): avc: denied { append } for pid=10348 comm="syz.4.1565" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 263.088148][ T9] usb 6-1: USB disconnect, device number 44 [ 263.567598][T10366] FAULT_INJECTION: forcing a failure. [ 263.567598][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 263.571655][T10366] CPU: 3 UID: 0 PID: 10366 Comm: syz.3.1569 Tainted: G L syzkaller #0 PREEMPT(full) [ 263.571673][T10366] Tainted: [L]=SOFTLOCKUP [ 263.571676][T10366] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 263.571709][T10366] Call Trace: [ 263.571736][T10366] [ 263.571740][T10366] dump_stack_lvl+0x100/0x190 [ 263.572047][T10366] should_fail_ex.cold+0x5/0xa [ 263.572124][T10366] should_failslab+0xc2/0x120 [ 263.572238][T10366] kmem_cache_alloc_noprof+0x91/0x6a0 [ 263.572271][T10366] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 263.572309][T10366] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 263.572326][T10366] mmu_topup_memory_caches+0x25/0x170 [ 263.572366][T10366] kvm_mmu_load+0xd6/0x23e0 [ 263.572417][T10366] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 263.572430][T10366] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 263.572442][T10366] ? __pfx_kvm_mmu_load+0x10/0x10 [ 263.572456][T10366] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 263.572470][T10366] ? kvm_check_and_inject_events+0x961/0x1070 [ 263.572486][T10366] ? record_steal_time+0x370/0xbb0 [ 263.572499][T10366] vcpu_run+0x3a57/0x5d50 [ 263.572514][T10366] ? mark_held_locks+0x40/0x70 [ 263.572575][T10366] ? __pfx_vcpu_run+0x10/0x10 [ 263.572595][T10366] ? rcu_is_watching+0x12/0xc0 [ 263.572631][T10366] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 263.572647][T10366] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 263.572666][T10366] kvm_vcpu_ioctl+0x730/0x1700 [ 263.572679][T10366] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 263.572691][T10366] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 263.572726][T10366] ? do_vfs_ioctl+0x226/0x13e0 [ 263.572762][T10366] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 263.572776][T10366] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 263.572907][T10366] ? __fget_files+0x215/0x3d0 [ 263.572935][T10366] ? hook_file_ioctl_common+0x140/0x440 [ 263.572950][T10366] ? selinux_file_ioctl+0x13b/0x290 [ 263.572964][T10366] ? selinux_file_ioctl+0xb6/0x290 [ 263.572980][T10366] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 263.572992][T10366] __x64_sys_ioctl+0x18e/0x210 [ 263.573007][T10366] do_syscall_64+0x115/0x870 [ 263.573081][T10366] ? clear_bhb_loop+0x40/0x90 [ 263.573110][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.573121][T10366] RIP: 0033:0x7f913259de99 [ 263.573132][T10366] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 263.573142][T10366] RSP: 002b:00007f913341a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 263.573172][T10366] RAX: ffffffffffffffda RBX: 00007f9132825fa0 RCX: 00007f913259de99 [ 263.573178][T10366] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 263.573185][T10366] RBP: 00007f913341a090 R08: 0000000000000000 R09: 0000000000000000 [ 263.573191][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 263.573197][T10366] R13: 00007f9132826038 R14: 00007f9132825fa0 R15: 00007ffe37905978 [ 263.573210][T10366] [ 263.872629][ T42] audit: type=1400 audit(264.403:827): avc: denied { unmount } for pid=7235 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 263.914937][T10375] netlink: 190972 bytes leftover after parsing attributes in process `syz.4.1573'. [ 263.919562][T10375] openvswitch: netlink: ufid size 21390 bytes exceeds the range (1, 16) [ 263.923224][T10375] openvswitch: netlink: Message has 4 unknown bytes. [ 263.980267][T10381] binder: 10380:10381 ioctl c0306201 200000000180 returned -14 [ 264.025699][ T5883] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 264.032992][T10386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.185551][ T5883] usb 8-1: Using ep0 maxpacket: 8 [ 264.190179][ T5883] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 264.193619][ T5883] usb 8-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 264.197945][ T5883] usb 8-1: config 250 has no interfaces? [ 264.201951][ T5883] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 264.205722][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 264.209089][ T5883] usb 8-1: Product: syz [ 264.210909][ T5883] usb 8-1: SerialNumber: syz [ 264.245599][ T57] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 264.292882][T10389] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1578'. [ 264.302139][ T42] audit: type=1400 audit(264.833:828): avc: denied { read write } for pid=10388 comm="syz.2.1578" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.312198][ T42] audit: type=1400 audit(264.833:829): avc: denied { open } for pid=10388 comm="syz.2.1578" path="/dev/btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 264.342783][T10391] FAULT_INJECTION: forcing a failure. [ 264.342783][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 264.348468][T10391] CPU: 3 UID: 0 PID: 10391 Comm: syz.2.1579 Tainted: G L syzkaller #0 PREEMPT(full) [ 264.348494][T10391] Tainted: [L]=SOFTLOCKUP [ 264.348499][T10391] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 264.348509][T10391] Call Trace: [ 264.348516][T10391] [ 264.348523][T10391] dump_stack_lvl+0x100/0x190 [ 264.348555][T10391] should_fail_ex.cold+0x5/0xa [ 264.348578][T10391] should_failslab+0xc2/0x120 [ 264.348602][T10391] __kmalloc_cache_noprof+0x91/0x6c0 [ 264.348628][T10391] ? fl_change+0x2e5/0x7cb0 [ 264.348716][T10391] fl_change+0x2e5/0x7cb0 [ 264.348744][T10391] ? __lock_acquire+0x49f/0x1a40 [ 264.348765][T10391] ? tcf_chain0_head_change.isra.0+0x52/0x130 [ 264.348787][T10391] ? find_held_lock+0x2b/0x80 [ 264.348812][T10391] ? tcf_chain0_head_change.isra.0+0xec/0x130 [ 264.348842][T10391] ? __pfx_fl_change+0x10/0x10 [ 264.348862][T10391] ? find_held_lock+0x2b/0x80 [ 264.348885][T10391] ? fl_get+0x20a/0x3d0 [ 264.348902][T10391] ? fl_get+0x20a/0x3d0 [ 264.348924][T10391] ? fl_get+0x214/0x3d0 [ 264.348942][T10391] ? __pfx_fl_get+0x10/0x10 [ 264.348965][T10391] ? __pfx_fl_change+0x10/0x10 [ 264.348984][T10391] tc_new_tfilter+0x9df/0x24a0 [ 264.349022][T10391] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 264.349044][T10391] ? __pfx_tc_new_tfilter+0x10/0x10 [ 264.349093][T10391] ? find_held_lock+0x2b/0x80 [ 264.349118][T10391] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 264.349140][T10391] ? __pfx_tc_new_tfilter+0x10/0x10 [ 264.349165][T10391] rtnetlink_rcv_msg+0x95e/0xe90 [ 264.349189][T10391] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.349215][T10391] ? ref_tracker_free+0x37e/0x6c0 [ 264.349267][T10391] netlink_rcv_skb+0x159/0x420 [ 264.349293][T10391] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 264.349317][T10391] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 264.349350][T10391] ? netlink_deliver_tap+0x1ae/0xcc0 [ 264.349381][T10391] netlink_unicast+0x585/0x850 [ 264.349410][T10391] ? __pfx_netlink_unicast+0x10/0x10 [ 264.349436][T10391] ? __pfx_sock_has_perm+0x10/0x10 [ 264.349464][T10391] netlink_sendmsg+0x8b0/0xda0 [ 264.349495][T10391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.349524][T10391] ? selinux_socket_sendmsg+0x198/0x2f0 [ 264.349551][T10391] ____sys_sendmsg+0xa4d/0xbe0 [ 264.349574][T10391] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.349602][T10391] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.349638][T10391] ___sys_sendmsg+0x190/0x1e0 [ 264.349665][T10391] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.349688][T10391] ? __lock_acquire+0x49f/0x1a40 [ 264.349708][T10391] ? get_pid_task+0x106/0x250 [ 264.349793][T10391] __sys_sendmsg+0x160/0x210 [ 264.349813][T10391] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.349854][T10391] do_syscall_64+0x115/0x870 [ 264.349872][T10391] ? clear_bhb_loop+0x40/0x90 [ 264.349895][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.349914][T10391] RIP: 0033:0x7f79de39de99 [ 264.349931][T10391] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 264.349948][T10391] RSP: 002b:00007f79df212028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.349968][T10391] RAX: ffffffffffffffda RBX: 00007f79de625fa0 RCX: 00007f79de39de99 [ 264.349979][T10391] RDX: 0000000000000040 RSI: 0000200000000200 RDI: 0000000000000004 [ 264.349995][T10391] RBP: 00007f79df212090 R08: 0000000000000000 R09: 0000000000000000 [ 264.350006][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 264.350016][T10391] R13: 00007f79de626038 R14: 00007f79de625fa0 R15: 00007ffd4041e788 [ 264.350041][T10391] [ 264.395453][ T57] usb 9-1: Using ep0 maxpacket: 8 [ 264.477204][ T57] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 264.479855][ T57] usb 9-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 264.482954][ T57] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 264.487088][ T57] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 264.490133][ T57] usb 9-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 264.494104][ T57] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 264.497554][ T57] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.509494][ T57] usbtmc 9-1:16.0: bulk endpoints not found [ 264.648542][T10403] 9pnet_fd: p9_fd_create_tcp (10403): problem creating socket [ 265.477708][T10413] binder: 10412:10413 ioctl c0306201 200000000180 returned -14 [ 265.508541][T10415] netlink: 'syz.2.1586': attribute type 1 has an invalid length. [ 265.544119][T10415] 8021q: adding VLAN 0 to HW filter on device bond1 [ 265.566171][T10415] bond1: (slave veth0_to_bond): making interface the new active one [ 265.570209][T10415] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 265.604649][ T42] audit: type=1400 audit(266.133:830): avc: denied { getopt } for pid=10419 comm="syz.1.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 265.852124][T10427] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.762675][ T6617] usb 8-1: USB disconnect, device number 31 [ 266.794415][T10442] binder: 10441:10442 ioctl c0306201 200000000180 returned -14 [ 267.021583][ T57] usb 9-1: USB disconnect, device number 45 [ 267.087705][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 267.177353][T10453] netlink: 19 bytes leftover after parsing attributes in process `syz.4.1600'. [ 267.201140][T10452] NFSD: Failed to start, no listeners configured. [ 267.294606][T10457] netlink: 344 bytes leftover after parsing attributes in process `syz.2.1602'. [ 267.392549][ T42] audit: type=1400 audit(267.923:831): avc: denied { create } for pid=10458 comm="syz.1.1603" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 267.418470][ T42] audit: type=1400 audit(267.953:832): avc: denied { write } for pid=10456 comm="syz.2.1602" name="/" dev="9p" ino=73412009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 267.422517][T10461] afs: Unknown parameter 'ock' [ 267.560968][ T64] Bluetooth: hci1: unexpected event for opcode 0x0c14 [ 267.620294][T10465] netlink: 7 bytes leftover after parsing attributes in process `syz.4.1604'. [ 268.015681][ T57] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 268.166625][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 268.171153][ T57] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 268.174784][ T57] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 268.179241][ T57] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 268.183074][ T57] usb 8-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 268.187346][ T57] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 268.191771][ T57] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 268.194929][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.205407][ T57] usbtmc 8-1:16.0: bulk endpoints not found [ 268.541138][T10488] binder: 10487:10488 ioctl c0306201 200000000180 returned -14 [ 268.589819][ T64] Bluetooth: hci2: unexpected event for opcode 0x0c1b [ 268.680995][T10501] Failed to initialize the IGMP autojoin socket (err -2) [ 269.594540][T10520] FAULT_INJECTION: forcing a failure. [ 269.594540][T10520] name failslab, interval 1, probability 0, space 0, times 0 [ 269.599403][T10520] CPU: 1 UID: 0 PID: 10520 Comm: syz.4.1621 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.599423][T10520] Tainted: [L]=SOFTLOCKUP [ 269.599427][T10520] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.599456][T10520] Call Trace: [ 269.599483][T10520] [ 269.599488][T10520] dump_stack_lvl+0x100/0x190 [ 269.599820][T10520] should_fail_ex.cold+0x5/0xa [ 269.599907][T10520] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 269.600011][T10520] should_failslab+0xc2/0x120 [ 269.600132][T10520] kmem_cache_alloc_noprof+0x91/0x6a0 [ 269.600166][T10520] ? skb_clone+0x190/0x400 [ 269.600235][T10520] skb_clone+0x190/0x400 [ 269.600247][T10520] netlink_deliver_tap+0xaed/0xcc0 [ 269.600266][T10520] netlink_unicast+0x6a5/0x850 [ 269.600284][T10520] ? __pfx_netlink_unicast+0x10/0x10 [ 269.600300][T10520] ? genl_rcv_msg+0x4be/0x800 [ 269.600315][T10520] netlink_ack+0x655/0xb80 [ 269.600334][T10520] netlink_rcv_skb+0x333/0x420 [ 269.600350][T10520] ? __pfx_genl_rcv_msg+0x10/0x10 [ 269.600361][T10520] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 269.600382][T10520] ? __rcu_read_unlock+0x26a/0x5e0 [ 269.600456][T10520] ? rcu_is_watching+0x12/0xc0 [ 269.600494][T10520] genl_rcv+0x28/0x40 [ 269.600502][T10520] netlink_unicast+0x585/0x850 [ 269.600520][T10520] ? __pfx_netlink_unicast+0x10/0x10 [ 269.600536][T10520] ? __pfx_sock_has_perm+0x10/0x10 [ 269.600574][T10520] netlink_sendmsg+0x8b0/0xda0 [ 269.600592][T10520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.600610][T10520] ? selinux_socket_sendmsg+0x198/0x2f0 [ 269.600626][T10520] __sys_sendto+0x48b/0x4e0 [ 269.600636][T10520] ? __pfx_netlink_sendmsg+0x10/0x10 [ 269.600653][T10520] ? __pfx___sys_sendto+0x10/0x10 [ 269.600667][T10520] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 269.600747][T10520] ? ksys_write+0x1ac/0x250 [ 269.600786][T10520] ? __pfx_ksys_write+0x10/0x10 [ 269.600807][T10520] __x64_sys_sendto+0xe0/0x1c0 [ 269.600817][T10520] ? do_syscall_64+0x90/0x870 [ 269.600827][T10520] ? lockdep_hardirqs_on+0x78/0x100 [ 269.600844][T10520] do_syscall_64+0x115/0x870 [ 269.600853][T10520] ? clear_bhb_loop+0x40/0x90 [ 269.600884][T10520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.600895][T10520] RIP: 0033:0x7f0e65f5e6ce [ 269.600906][T10520] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 269.600917][T10520] RSP: 002b:00007f0e66e3de88 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 269.600948][T10520] RAX: ffffffffffffffda RBX: 00007f0e66e3f6c0 RCX: 00007f0e65f5e6ce [ 269.600972][T10520] RDX: 0000000000000020 RSI: 00007f0e66e3e000 RDI: 0000000000000003 [ 269.600980][T10520] RBP: 0000000000000000 R08: 00007f0e66e3df04 R09: 000000000000000c [ 269.600986][T10520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 269.600992][T10520] R13: 00007f0e66e3df58 R14: 00007f0e66e3e000 R15: 0000000000000000 [ 269.601007][T10520] [ 269.753507][T10527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1624'. [ 269.802134][ T42] audit: type=1400 audit(270.333:833): avc: denied { cmd } for pid=10530 comm="syz.4.1626" path="/dev/ublk-control" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 269.839773][T10531] syzkaller0: entered promiscuous mode [ 269.841648][T10531] syzkaller0: entered allmulticast mode [ 270.708008][T10540] kvm: kvm [10539]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 270.712655][T10540] kvm: kvm [10539]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 270.774039][ T57] usb 8-1: USB disconnect, device number 32 [ 270.967457][T10548] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1630'. [ 271.248027][ T42] audit: type=1400 audit(271.783:834): avc: denied { accept } for pid=10551 comm="syz.2.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 271.568162][ T42] audit: type=1400 audit(272.103:835): avc: denied { ioctl } for pid=10562 comm="syz.3.1635" path="socket:[31508]" dev="sockfs" ino=31508 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 271.640069][T10569] FAULT_INJECTION: forcing a failure. [ 271.640069][T10569] name failslab, interval 1, probability 0, space 0, times 0 [ 271.648025][T10569] CPU: 0 UID: 0 PID: 10569 Comm: syz.3.1636 Tainted: G L syzkaller #0 PREEMPT(full) [ 271.648054][T10569] Tainted: [L]=SOFTLOCKUP [ 271.648060][T10569] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 271.648070][T10569] Call Trace: [ 271.648077][T10569] [ 271.648084][T10569] dump_stack_lvl+0x100/0x190 [ 271.648114][T10569] should_fail_ex.cold+0x5/0xa [ 271.648137][T10569] should_failslab+0xc2/0x120 [ 271.648160][T10569] __kmalloc_cache_noprof+0x91/0x6c0 [ 271.648187][T10569] ? dput+0x24/0x30 [ 271.648214][T10569] ? relay_open+0x121/0xa00 [ 271.648279][T10569] relay_open+0x121/0xa00 [ 271.648304][T10569] ? debugfs_create_file_full+0x41/0x60 [ 271.648392][T10569] blk_trace_setup_prepare+0x35c/0x6c0 [ 271.648441][T10569] blk_trace_setup2+0x1a1/0x350 [ 271.648473][T10569] ? __pfx_blk_trace_setup2+0x10/0x10 [ 271.648516][T10569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 271.648537][T10569] ? do_vfs_ioctl+0x226/0x13e0 [ 271.648564][T10569] blk_trace_ioctl+0x1db/0x320 [ 271.648582][T10569] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 271.648604][T10569] ? __fget_files+0x215/0x3d0 [ 271.648664][T10569] ? hook_file_ioctl_common+0x140/0x440 [ 271.648686][T10569] blkdev_ioctl+0x17c/0x6f0 [ 271.648713][T10569] ? __pfx_blkdev_ioctl+0x10/0x10 [ 271.648735][T10569] ? selinux_file_ioctl+0x13b/0x290 [ 271.648760][T10569] ? selinux_file_ioctl+0xb6/0x290 [ 271.648785][T10569] ? __pfx_blkdev_ioctl+0x10/0x10 [ 271.648811][T10569] __x64_sys_ioctl+0x18e/0x210 [ 271.648837][T10569] do_syscall_64+0x115/0x870 [ 271.648853][T10569] ? clear_bhb_loop+0x40/0x90 [ 271.648876][T10569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.648894][T10569] RIP: 0033:0x7f913259de99 [ 271.648910][T10569] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 271.648927][T10569] RSP: 002b:00007f913341a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 271.648945][T10569] RAX: ffffffffffffffda RBX: 00007f9132825fa0 RCX: 00007f913259de99 [ 271.648957][T10569] RDX: 0000200000000140 RSI: 00000000c0c0128e RDI: 0000000000000003 [ 271.648968][T10569] RBP: 00007f913341a090 R08: 0000000000000000 R09: 0000000000000000 [ 271.648979][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 271.648989][T10569] R13: 00007f9132826038 R14: 00007f9132825fa0 R15: 00007ffe37905978 [ 271.649014][T10569] [ 271.777675][ T42] audit: type=1400 audit(272.313:836): avc: denied { mount } for pid=10573 comm="syz.3.1638" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 272.537878][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1641'. [ 272.541331][T10581] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1641'. [ 272.681972][T10590] FAULT_INJECTION: forcing a failure. [ 272.681972][T10590] name failslab, interval 1, probability 0, space 0, times 0 [ 272.689667][T10590] CPU: 2 UID: 0 PID: 10590 Comm: syz.2.1642 Tainted: G L syzkaller #0 PREEMPT(full) [ 272.689686][T10590] Tainted: [L]=SOFTLOCKUP [ 272.689690][T10590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 272.689697][T10590] Call Trace: [ 272.689745][T10590] [ 272.689750][T10590] dump_stack_lvl+0x100/0x190 [ 272.689770][T10590] should_fail_ex.cold+0x5/0xa [ 272.689785][T10590] should_failslab+0xc2/0x120 [ 272.689799][T10590] kmem_cache_alloc_noprof+0x91/0x6a0 [ 272.689812][T10590] ? __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 272.689850][T10590] __kvm_mmu_topup_memory_cache+0x18f/0x5f0 [ 272.689866][T10590] mmu_topup_memory_caches+0x25/0x170 [ 272.689913][T10590] kvm_mmu_load+0xd6/0x23e0 [ 272.689964][T10590] ? kvm_apic_has_interrupt+0xfe/0x1f0 [ 272.689984][T10590] ? __pfx_kvm_apic_has_interrupt+0x10/0x10 [ 272.690004][T10590] ? __pfx_kvm_mmu_load+0x10/0x10 [ 272.690023][T10590] ? kvm_cpu_has_injectable_intr+0x9c/0x1a0 [ 272.690042][T10590] ? kvm_check_and_inject_events+0x961/0x1070 [ 272.690063][T10590] ? record_steal_time+0x370/0xbb0 [ 272.690083][T10590] vcpu_run+0x3a57/0x5d50 [ 272.690115][T10590] ? __pfx_vcpu_run+0x10/0x10 [ 272.690145][T10590] ? rcu_is_watching+0x12/0xc0 [ 272.690172][T10590] ? kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 272.690195][T10590] kvm_arch_vcpu_ioctl_run+0x5b6/0x1890 [ 272.690231][T10590] kvm_vcpu_ioctl+0x730/0x1700 [ 272.690253][T10590] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.690271][T10590] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 272.690292][T10590] ? do_vfs_ioctl+0x226/0x13e0 [ 272.690316][T10590] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 272.690340][T10590] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 272.690372][T10590] ? __fget_files+0x215/0x3d0 [ 272.690388][T10590] ? hook_file_ioctl_common+0x140/0x440 [ 272.690412][T10590] ? selinux_file_ioctl+0x13b/0x290 [ 272.690427][T10590] ? selinux_file_ioctl+0xb6/0x290 [ 272.690443][T10590] ? __pfx_kvm_vcpu_ioctl+0x10/0x10 [ 272.690455][T10590] __x64_sys_ioctl+0x18e/0x210 [ 272.690471][T10590] do_syscall_64+0x115/0x870 [ 272.690481][T10590] ? clear_bhb_loop+0x40/0x90 [ 272.690513][T10590] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.690524][T10590] RIP: 0033:0x7f79de39de99 [ 272.690534][T10590] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 272.690545][T10590] RSP: 002b:00007f79df212028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 272.690558][T10590] RAX: ffffffffffffffda RBX: 00007f79de625fa0 RCX: 00007f79de39de99 [ 272.690565][T10590] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006 [ 272.690571][T10590] RBP: 00007f79df212090 R08: 0000000000000000 R09: 0000000000000000 [ 272.690577][T10590] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 272.690583][T10590] R13: 00007f79de626038 R14: 00007f79de625fa0 R15: 00007ffd4041e788 [ 272.690597][T10590] [ 272.834428][T10595] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1644'. [ 272.918443][T10602] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 272.926575][T10602] CIFS mount error: No usable UNC path provided in device string! [ 272.926575][T10602] [ 272.930561][T10602] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 273.025589][T10613] FAULT_INJECTION: forcing a failure. [ 273.025589][T10613] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 273.030571][T10613] CPU: 3 UID: 0 PID: 10613 Comm: syz.3.1651 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.030602][T10613] Tainted: [L]=SOFTLOCKUP [ 273.030609][T10613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.030618][T10613] Call Trace: [ 273.030625][T10613] [ 273.030629][T10613] dump_stack_lvl+0x100/0x190 [ 273.030664][T10613] should_fail_ex.cold+0x5/0xa [ 273.030686][T10613] ? prepare_alloc_pages+0x16d/0x5f0 [ 273.030711][T10613] should_fail_alloc_page+0xeb/0x140 [ 273.030728][T10613] prepare_alloc_pages+0x1f0/0x5f0 [ 273.030744][T10613] __alloc_frozen_pages_noprof+0x1af/0x2dc0 [ 273.030765][T10613] ? find_held_lock+0x2b/0x80 [ 273.030782][T10613] ? is_bpf_text_address+0x8a/0x1a0 [ 273.030825][T10613] ? is_bpf_text_address+0x8a/0x1a0 [ 273.030838][T10613] ? bpf_ksym_find+0x128/0x1c0 [ 273.030854][T10613] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 273.030874][T10613] ? is_bpf_text_address+0x94/0x1a0 [ 273.030887][T10613] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 273.030904][T10613] ? __page_table_check_zero+0x27f/0x410 [ 273.030918][T10613] ? __kernel_text_address+0xd/0x30 [ 273.030952][T10613] ? unwind_get_return_address+0x59/0xa0 [ 273.031017][T10613] ? arch_stack_walk+0xa6/0xf0 [ 273.031060][T10613] ? __pfx_stack_trace_save+0x10/0x10 [ 273.031070][T10613] ? stack_depot_save_flags+0x27/0x9d0 [ 273.031086][T10613] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 273.031099][T10613] ? policy_nodemask+0xed/0x4f0 [ 273.031119][T10613] alloc_pages_mpol+0x1fb/0x540 [ 273.031134][T10613] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 273.031151][T10613] alloc_pages_noprof+0x1a/0x160 [ 273.031166][T10613] get_free_pages_noprof+0x10/0xb0 [ 273.031178][T10613] __kasan_populate_vmalloc+0xa0/0x210 [ 273.031192][T10613] alloc_vmap_area+0x95d/0x2bb0 [ 273.031211][T10613] ? kasan_save_track+0x14/0x30 [ 273.031223][T10613] ? __kasan_kmalloc+0xaa/0xb0 [ 273.031233][T10613] ? __pfx_alloc_vmap_area+0x10/0x10 [ 273.031246][T10613] ? __get_vm_area_node+0x101/0x330 [ 273.031261][T10613] __get_vm_area_node+0x1ca/0x330 [ 273.031276][T10613] __vmalloc_node_range_noprof+0x228/0x1630 [ 273.031292][T10613] ? bpf_check+0x1cc/0xb7d0 [ 273.031307][T10613] ? rcu_is_watching+0x12/0xc0 [ 273.031325][T10613] ? bpf_check+0x1cc/0xb7d0 [ 273.031338][T10613] ? rcu_read_unlock+0x17/0x60 [ 273.031353][T10613] ? rcu_read_unlock+0x17/0x60 [ 273.031368][T10613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.031382][T10613] ? rcu_is_watching+0x12/0xc0 [ 273.031398][T10613] ? rcu_is_watching+0x12/0xc0 [ 273.031412][T10613] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 273.031425][T10613] ? find_held_lock+0x2b/0x80 [ 273.031443][T10613] ? bpf_check+0x1cc/0xb7d0 [ 273.031454][T10613] __vmalloc_node_noprof+0xad/0xf0 [ 273.031468][T10613] ? bpf_check+0x1cc/0xb7d0 [ 273.031482][T10613] bpf_check+0x1cc/0xb7d0 [ 273.031495][T10613] ? __lock_acquire+0x49f/0x1a40 [ 273.031513][T10613] ? find_held_lock+0x2b/0x80 [ 273.031528][T10613] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 273.031540][T10613] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 273.031553][T10613] ? __pfx_bpf_check+0x10/0x10 [ 273.031564][T10613] ? avc_has_perm_noaudit+0x145/0x3b0 [ 273.031577][T10613] ? avc_has_perm+0x135/0x1e0 [ 273.031587][T10613] ? __pfx_avc_has_perm+0x10/0x10 [ 273.031598][T10613] ? lsm_blob_alloc+0x68/0x90 [ 273.031616][T10613] ? bpf_prog_load+0x244d/0x2fa0 [ 273.031639][T10613] bpf_prog_load+0x244d/0x2fa0 [ 273.031669][T10613] ? __pfx_bpf_prog_load+0x10/0x10 [ 273.031695][T10613] ? avc_has_perm_noaudit+0x145/0x3b0 [ 273.031734][T10613] __sys_bpf+0x18dc/0x4e80 [ 273.031756][T10613] ? __pfx___sys_bpf+0x10/0x10 [ 273.031772][T10613] ? find_held_lock+0x2b/0x80 [ 273.031787][T10613] ? get_pid_task+0xfc/0x250 [ 273.031803][T10613] ? get_pid_task+0xfc/0x250 [ 273.031822][T10613] ? find_held_lock+0x2b/0x80 [ 273.031840][T10613] ? rcu_read_lock_any_held+0x6a/0xa0 [ 273.031857][T10613] ? find_held_lock+0x2b/0x80 [ 273.031871][T10613] ? ksys_write+0x190/0x250 [ 273.031887][T10613] ? ksys_write+0x190/0x250 [ 273.031911][T10613] ? fput+0x79/0x100 [ 273.031925][T10613] ? __x64_sys_bpf+0xce/0x140 [ 273.031934][T10613] __x64_sys_bpf+0xce/0x140 [ 273.031944][T10613] ? do_syscall_64+0x90/0x870 [ 273.031955][T10613] do_syscall_64+0x115/0x870 [ 273.031965][T10613] ? clear_bhb_loop+0x40/0x90 [ 273.031978][T10613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.031990][T10613] RIP: 0033:0x7f913259de99 [ 273.032000][T10613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.032011][T10613] RSP: 002b:00007f913341a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.032022][T10613] RAX: ffffffffffffffda RBX: 00007f9132825fa0 RCX: 00007f913259de99 [ 273.032029][T10613] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 273.032035][T10613] RBP: 00007f913341a090 R08: 0000000000000000 R09: 0000000000000000 [ 273.032041][T10613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.032047][T10613] R13: 00007f9132826038 R14: 00007f9132825fa0 R15: 00007ffe37905978 [ 273.032061][T10613] [ 273.032332][T10613] syz.3.1651: vmalloc error: size 2176, vm_struct allocation failed, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null) [ 273.098159][ T42] audit: type=1400 audit(273.633:837): avc: denied { create } for pid=10614 comm="syz.1.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 273.099038][T10613] ,cpuset= [ 273.152297][T10615] syz.1.1652: attempt to access beyond end of device [ 273.152297][T10615] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 273.154330][T10613] / [ 273.156296][T10615] gfs2: error -5 reading superblock [ 273.158345][T10613] ,mems_allowed=0-1 [ 273.232934][T10613] CPU: 3 UID: 0 PID: 10613 Comm: syz.3.1651 Tainted: G L syzkaller #0 PREEMPT(full) [ 273.232951][T10613] Tainted: [L]=SOFTLOCKUP [ 273.232955][T10613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 273.232963][T10613] Call Trace: [ 273.232967][T10613] [ 273.232972][T10613] dump_stack_lvl+0x100/0x190 [ 273.232992][T10613] warn_alloc.cold+0x94/0xa8 [ 273.233005][T10613] ? __pfx_warn_alloc+0x10/0x10 [ 273.233023][T10613] ? lockdep_hardirqs_on+0x78/0x100 [ 273.233041][T10613] ? __get_vm_area_node+0x2cd/0x330 [ 273.233058][T10613] ? __get_vm_area_node+0x208/0x330 [ 273.233074][T10613] __vmalloc_node_range_noprof+0xccd/0x1630 [ 273.233091][T10613] ? rcu_is_watching+0x12/0xc0 [ 273.233108][T10613] ? bpf_check+0x1cc/0xb7d0 [ 273.233123][T10613] ? rcu_read_unlock+0x17/0x60 [ 273.233138][T10613] ? rcu_read_unlock+0x17/0x60 [ 273.233153][T10613] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 273.233168][T10613] ? rcu_is_watching+0x12/0xc0 [ 273.233183][T10613] ? rcu_is_watching+0x12/0xc0 [ 273.233197][T10613] ? __kmalloc_large_node_noprof+0x5d/0x70 [ 273.233211][T10613] ? find_held_lock+0x2b/0x80 [ 273.233229][T10613] ? bpf_check+0x1cc/0xb7d0 [ 273.233241][T10613] __vmalloc_node_noprof+0xad/0xf0 [ 273.233263][T10613] ? bpf_check+0x1cc/0xb7d0 [ 273.233284][T10613] bpf_check+0x1cc/0xb7d0 [ 273.233305][T10613] ? __lock_acquire+0x49f/0x1a40 [ 273.233334][T10613] ? find_held_lock+0x2b/0x80 [ 273.233358][T10613] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 273.233373][T10613] ? avc_has_perm_noaudit+0x11e/0x3b0 [ 273.233386][T10613] ? __pfx_bpf_check+0x10/0x10 [ 273.233398][T10613] ? avc_has_perm_noaudit+0x145/0x3b0 [ 273.233410][T10613] ? avc_has_perm+0x135/0x1e0 [ 273.233421][T10613] ? __pfx_avc_has_perm+0x10/0x10 [ 273.233432][T10613] ? lsm_blob_alloc+0x68/0x90 [ 273.233447][T10613] ? bpf_prog_load+0x244d/0x2fa0 [ 273.233464][T10613] bpf_prog_load+0x244d/0x2fa0 [ 273.233483][T10613] ? __pfx_bpf_prog_load+0x10/0x10 [ 273.233499][T10613] ? avc_has_perm_noaudit+0x145/0x3b0 [ 273.233522][T10613] __sys_bpf+0x18dc/0x4e80 [ 273.233542][T10613] ? __pfx___sys_bpf+0x10/0x10 [ 273.233558][T10613] ? find_held_lock+0x2b/0x80 [ 273.233572][T10613] ? get_pid_task+0xfc/0x250 [ 273.233594][T10613] ? get_pid_task+0xfc/0x250 [ 273.233625][T10613] ? find_held_lock+0x2b/0x80 [ 273.233656][T10613] ? rcu_read_lock_any_held+0x6a/0xa0 [ 273.233683][T10613] ? find_held_lock+0x2b/0x80 [ 273.233707][T10613] ? ksys_write+0x190/0x250 [ 273.233723][T10613] ? ksys_write+0x190/0x250 [ 273.233750][T10613] ? fput+0x79/0x100 [ 273.233764][T10613] ? __x64_sys_bpf+0xce/0x140 [ 273.233773][T10613] __x64_sys_bpf+0xce/0x140 [ 273.233783][T10613] ? do_syscall_64+0x90/0x870 [ 273.233793][T10613] do_syscall_64+0x115/0x870 [ 273.233802][T10613] ? clear_bhb_loop+0x40/0x90 [ 273.233816][T10613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.233826][T10613] RIP: 0033:0x7f913259de99 [ 273.233836][T10613] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 273.233847][T10613] RSP: 002b:00007f913341a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 273.233858][T10613] RAX: ffffffffffffffda RBX: 00007f9132825fa0 RCX: 00007f913259de99 [ 273.233865][T10613] RDX: 0000000000000094 RSI: 00002000000004c0 RDI: 0000000000000005 [ 273.233872][T10613] RBP: 00007f913341a090 R08: 0000000000000000 R09: 0000000000000000 [ 273.233878][T10613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.233884][T10613] R13: 00007f9132826038 R14: 00007f9132825fa0 R15: 00007ffe37905978 [ 273.233897][T10613] [ 273.233930][T10613] Mem-Info: [ 273.354015][T10613] active_anon:15042 inactive_anon:24365 isolated_anon:0 [ 273.354015][T10613] active_file:1088 inactive_file:52022 isolated_file:0 [ 273.354015][T10613] unevictable:1768 dirty:53 writeback:17 [ 273.354015][T10613] slab_reclaimable:8793 slab_unreclaimable:71824 [ 273.354015][T10613] mapped:26341 shmem:31099 pagetables:3815 [ 273.354015][T10613] sec_pagetables:299 bounce:0 [ 273.354015][T10613] kernel_misc_reclaimable:0 [ 273.354015][T10613] free:421527 free_pcp:13955 free_cma:0 [ 273.369304][T10613] Node 0 active_anon:53220kB inactive_anon:97460kB active_file:4352kB inactive_file:207628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:105364kB dirty:212kB writeback:68kB shmem:113952kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14400kB pagetables:5988kB sec_pagetables:1196kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.381064][T10613] Node 1 active_anon:6948kB inactive_anon:0kB active_file:0kB inactive_file:460kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:10444kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:96kB pagetables:9272kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 273.391769][T10613] Node 0 DMA free:14092kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:264kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:272kB local_pcp:104kB free_cma:0kB [ 273.401756][T10613] lowmem_reserve[]: 0 1225 1225 1225 1225 [ 273.403665][T10613] Node 0 DMA32 free:54492kB boost:0kB min:27396kB low:34244kB high:41092kB reserved_highatomic:0KB free_highatomic:0KB active_anon:53212kB inactive_anon:97460kB active_file:4352kB inactive_file:207364kB unevictable:3536kB writepending:280kB zspages:0kB present:2080628kB managed:1255356kB mlocked:0kB bounce:0kB free_pcp:40764kB local_pcp:15092kB free_cma:0kB [ 273.414178][T10613] lowmem_reserve[]: 0 0 0 0 0 [ 273.415929][T10613] Node 1 Normal free:1617524kB boost:0kB min:39840kB low:49800kB high:59760kB reserved_highatomic:0KB free_highatomic:0KB active_anon:6948kB inactive_anon:0kB active_file:0kB inactive_file:460kB unevictable:3536kB writepending:0kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:14844kB local_pcp:4208kB free_cma:0kB [ 273.426522][T10613] lowmem_reserve[]: 0 0 0 0 0 [ 273.428153][T10613] Node 0 DMA: 23*4kB (UME) 24*8kB (UME) 23*16kB (UME) 26*32kB (UME) 13*64kB (UME) 10*128kB (UME) 13*256kB (UME) 4*512kB (M) 3*1024kB (UME) 1*2048kB (M) 0*4096kB = 14092kB [ 273.434479][T10613] Node 0 DMA32: 124*4kB (UME) 86*8kB (UME) 200*16kB (UME) 149*32kB (UME) 107*64kB (UME) 50*128kB (UME) 26*256kB (UME) 22*512kB (UM) 8*1024kB (M) 3*2048kB (UM) 0*4096kB = 54656kB [ 273.440200][T10613] Node 1 Normal: 265*4kB (UME) 240*8kB (UME) 193*16kB (UME) 236*32kB (UME) 259*64kB (UME) 245*128kB (UME) 238*256kB (UM) 240*512kB (UM) 232*1024kB (UME) 20*2048kB (UME) 267*4096kB (UM) = 1617524kB [ 273.446254][T10613] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.449278][T10613] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.452171][T10613] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 273.456317][T10613] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 273.460175][T10613] 84205 total pagecache pages [ 273.462304][T10613] 0 pages in swap cache [ 273.464087][T10613] Free swap = 124996kB [ 273.465966][T10613] Total swap = 124996kB [ 273.467688][T10613] 1048443 pages RAM [ 273.469214][T10613] 0 pages HighMem/MovableOnly [ 273.471187][T10613] 285293 pages reserved [ 273.472509][T10613] 0 pages cma reserved [ 273.652064][T10631] syzkaller0: entered promiscuous mode [ 273.654476][T10631] syzkaller0: entered allmulticast mode [ 273.762556][T10634] netlink: 45 bytes leftover after parsing attributes in process `syz.1.1660'. [ 274.978712][ T57] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 275.158419][ T57] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 275.161704][ T57] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 275.166334][ T57] usb 9-1: config 0 interface 0 has no altsetting 0 [ 275.171753][ T57] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 275.176367][ T57] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 275.179867][ T57] usb 9-1: Product: syz [ 275.181552][ T57] usb 9-1: Manufacturer: syz [ 275.182546][T10645] macvlan2: entered promiscuous mode [ 275.183545][ T57] usb 9-1: SerialNumber: syz [ 275.189199][ T57] usb 9-1: config 0 descriptor?? [ 275.193984][ T57] hub 9-1:0.0: bad descriptor, ignoring hub [ 275.196209][T10645] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 275.196946][ T57] hub 9-1:0.0: probe with driver hub failed with error -5 [ 275.202893][T10645] netlink: 'syz.2.1663': attribute type 4 has an invalid length. [ 275.210270][T10645] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1663'. [ 275.213450][ T57] usb 9-1: selecting invalid altsetting 0 [ 275.216476][T10645] netlink: 'syz.2.1663': attribute type 1 has an invalid length. [ 275.221931][T10645] netlink: 'syz.2.1663': attribute type 4 has an invalid length. [ 275.224476][T10645] netlink: 9462 bytes leftover after parsing attributes in process `syz.2.1663'. [ 275.262304][ T42] audit: type=1400 audit(275.793:838): avc: denied { listen } for pid=10650 comm="syz.1.1666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 275.315317][T10658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1669'. [ 275.320123][ T42] audit: type=1400 audit(275.853:839): avc: denied { watch } for pid=10655 comm="syz.2.1668" path="/369/file0" dev="tmpfs" ino=1956 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 275.483029][ T6617] Process accounting resumed [ 275.645468][ T29] usb 6-1: new full-speed USB device number 45 using dummy_hcd [ 275.799281][ T29] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 275.804038][ T29] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 275.809639][ T29] usb 6-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 275.812578][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 275.815099][ T29] usb 6-1: Product: Ѝ [ 275.816742][ T29] usb 6-1: Manufacturer: ⪂遢ퟰ并怽㓔૾閗럠稼茊뺜됮㞥ﳥ푒ꚷ➉耖龶衫ᗹ쌵놈牔ヂ瞳澸ᖲ໳紂引猄篽⶧恡푚䙈멠諧덏混睊鬻矑 [ 275.821932][ T29] usb 6-1: SerialNumber: 頉㚹뮅韍魙荈辑菺ࡃ⊌︛둖㶅ጯ촽⑞࿵먠⾞ⅳ䎺棫䅟⠐퍕ꐉ抡轌∟⫋㪦獡땥骬閏Թ쉲⶷ご간ﺡ綝辠縺Ꙧꙏ୎ж쇷✧偨ѻ舏倒ᣑˊ챃䓠꒯ḿ注๱鸬峿ఝ [ 275.829269][T10641] usb 9-1: reset high-speed USB device number 46 using dummy_hcd [ 275.982603][T10641] usb 9-1: device firmware changed [ 275.987484][ T34] usb 9-1: USB disconnect, device number 46 [ 276.036618][T10666] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.1673'. [ 276.039666][T10666] veth0_to_bond: default FDB implementation only supports local addresses [ 276.044112][ T42] audit: type=1400 audit(276.573:840): avc: denied { setattr } for pid=10665 comm="syz.1.1673" name="MCTP" dev="sockfs" ino=34850 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 276.145492][ T34] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 276.248264][ T29] usb 6-1: selecting invalid altsetting 1 [ 276.250800][ T29] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 276.255705][ T29] usb 6-1: selecting invalid altsetting 1 [ 276.258197][ T29] snd-usb-audio 6-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 276.262202][ T29] usb 6-1: selecting invalid altsetting 1 [ 276.285968][ T29] snd-usb-audio 6-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 276.290843][ T29] usb 6-1: USB disconnect, device number 45 [ 276.297505][ T34] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 276.302688][ T34] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 276.305934][ T5753] udevd[5753]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 276.307180][ T34] usb 9-1: config 0 interface 0 has no altsetting 0 [ 276.319886][ T34] usb 9-1: string descriptor 0 read error: -22 [ 276.322908][ T34] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 276.327142][ T34] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 276.334140][ T34] usb 9-1: config 0 descriptor?? [ 276.339336][ T34] hub 9-1:0.0: bad descriptor, ignoring hub [ 276.342388][ T34] hub 9-1:0.0: probe with driver hub failed with error -5 [ 276.350726][ T34] usb 9-1: selecting invalid altsetting 0 [ 276.464895][T10682] bond2: option downdelay: invalid value (18446744073709551615) [ 276.468232][T10682] bond2: option downdelay: allowed values 0 - 2147483647 [ 276.472007][T10682] bond2 (unregistering): Released all slaves [ 276.615493][ T57] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 276.655719][ T5883] usb 9-1: USB disconnect, device number 47 [ 276.780121][ T42] audit: type=1400 audit(277.313:841): avc: denied { getopt } for pid=10686 comm="syz.1.1680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 276.787270][T10687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.795481][ T57] usb 8-1: Using ep0 maxpacket: 8 [ 276.803622][ T57] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 276.808698][ T57] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 276.811374][ T57] usb 8-1: config 250 has an invalid descriptor of length 102, skipping remainder of the config [ 276.814951][ T57] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 276.818706][ T57] usb 8-1: config 250 has no interface number 0 [ 276.820955][ T57] usb 8-1: config 250 interface 228 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 276.825037][ T57] usb 8-1: config 250 interface 228 has no altsetting 0 [ 276.828527][ T57] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 276.831441][ T57] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 276.833997][ T57] usb 8-1: Product: syz [ 276.835310][ T57] usb 8-1: SerialNumber: syz [ 276.840543][ T57] hub 8-1:250.228: bad descriptor, ignoring hub [ 276.842534][ T57] hub 8-1:250.228: probe with driver hub failed with error -5 [ 277.158259][ T5883] usb 8-1: USB disconnect, device number 33 [ 277.166724][T10691] syzkaller0: entered promiscuous mode [ 277.168530][T10691] syzkaller0: entered allmulticast mode [ 277.172080][T10691] FAULT_INJECTION: forcing a failure. [ 277.172080][T10691] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 277.176426][T10691] CPU: 0 UID: 0 PID: 10691 Comm: syz.4.1682 Tainted: G L syzkaller #0 PREEMPT(full) [ 277.176443][T10691] Tainted: [L]=SOFTLOCKUP [ 277.176447][T10691] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 277.176454][T10691] Call Trace: [ 277.176458][T10691] [ 277.176463][T10691] dump_stack_lvl+0x100/0x190 [ 277.176482][T10691] should_fail_ex.cold+0x5/0xa [ 277.176497][T10691] _copy_from_iter+0x1f4/0x1690 [ 277.176513][T10691] ? _copy_from_iter+0x270/0x1690 [ 277.176527][T10691] ? __pfx__copy_from_iter+0x10/0x10 [ 277.176542][T10691] ? __pfx__copy_from_iter+0x10/0x10 [ 277.176561][T10691] ? _copy_from_iter+0x270/0x1690 [ 277.176576][T10691] copy_page_from_iter+0x238/0x300 [ 277.176591][T10691] skb_copy_datagram_from_iter+0x399/0x720 [ 277.176613][T10691] packet_sendmsg+0x227e/0x5100 [ 277.176652][T10691] ? avc_has_perm_noaudit+0x2fa/0x3b0 [ 277.176669][T10691] ? sock_has_perm+0x25a/0x2f0 [ 277.176682][T10691] ? __pfx_sock_has_perm+0x10/0x10 [ 277.176697][T10691] ? __pfx_packet_sendmsg+0x10/0x10 [ 277.176712][T10691] ? selinux_socket_sendmsg+0x198/0x2f0 [ 277.176728][T10691] ____sys_sendmsg+0xa4d/0xbe0 [ 277.176742][T10691] ? __pfx_packet_sendmsg+0x10/0x10 [ 277.176753][T10691] ? __pfx_____sys_sendmsg+0x10/0x10 [ 277.176773][T10691] ___sys_sendmsg+0x190/0x1e0 [ 277.176789][T10691] ? __pfx____sys_sendmsg+0x10/0x10 [ 277.176803][T10691] ? __lock_acquire+0x49f/0x1a40 [ 277.176816][T10691] ? get_pid_task+0x106/0x250 [ 277.176846][T10691] __sys_sendmsg+0x160/0x210 [ 277.176858][T10691] ? __pfx___sys_sendmsg+0x10/0x10 [ 277.176876][T10691] do_syscall_64+0x115/0x870 [ 277.176886][T10691] ? clear_bhb_loop+0x40/0x90 [ 277.176899][T10691] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 277.176910][T10691] RIP: 0033:0x7f0e65f9de99 [ 277.176920][T10691] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 277.176930][T10691] RSP: 002b:00007f0e66e3f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 277.176941][T10691] RAX: ffffffffffffffda RBX: 00007f0e66225fa0 RCX: 00007f0e65f9de99 [ 277.176948][T10691] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 277.176954][T10691] RBP: 00007f0e66e3f090 R08: 0000000000000000 R09: 0000000000000000 [ 277.176960][T10691] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 277.176967][T10691] R13: 00007f0e66226038 R14: 00007f0e66225fa0 R15: 00007ffc4eb0b1a8 [ 277.176980][T10691] [ 277.375468][T10699] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 277.377545][T10699] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 277.380956][T10699] vhci_hcd vhci_hcd.0: Device attached [ 277.428372][T10699] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 277.472955][T10699] kvm: user requested TSC rate below hardware speed [ 277.555942][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 277.584672][T10712] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1689'. [ 277.625696][ T34] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 277.693092][T10714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1690'. [ 277.745667][ T6617] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 277.854422][T10725] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.905867][ T6617] usb 6-1: Using ep0 maxpacket: 16 [ 277.909626][ T6617] usb 6-1: config 0 has no interfaces? [ 277.913428][ T6617] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 4.00 [ 277.916781][ T6617] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.919636][ T6617] usb 6-1: Product: syz [ 277.921042][ T6617] usb 6-1: Manufacturer: syz [ 277.922654][ T6617] usb 6-1: SerialNumber: syz [ 277.930282][ T6617] usb 6-1: config 0 descriptor?? [ 278.107449][T10735] 9pnet_fd: p9_fd_create_tcp (10735): problem creating socket [ 278.134580][T10700] usb 39-1: recv xbuf, 0 [ 278.138466][ T5835] usb 6-1: USB disconnect, device number 46 [ 278.140856][ T5813] vhci_hcd vhci_hcd.1: stop threads [ 278.142444][ T5813] vhci_hcd vhci_hcd.1: release socket [ 278.144915][ T5813] vhci_hcd vhci_hcd.1: disconnect device [ 278.151004][T10737] netlink: 168 bytes leftover after parsing attributes in process `syz.4.1700'. [ 278.153968][T10737] tc_dump_action: action bad kind [ 278.207137][ T34] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 278.460980][T10739] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 278.468780][ T42] audit: type=1400 audit(279.003:842): avc: denied { relabelto } for pid=10738 comm="syz.3.1702" name="463" dev="tmpfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 278.481259][ T42] audit: type=1400 audit(279.003:843): avc: denied { associate } for pid=10738 comm="syz.3.1702" name="463" dev="tmpfs" ino=2419 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:dlm_control_device_t:s0" [ 278.492318][ T42] audit: type=1400 audit(279.003:844): avc: denied { ioctl } for pid=10738 comm="syz.3.1702" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 278.540839][ T5813] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.575962][ T42] audit: type=1400 audit(279.103:845): avc: denied { write } for pid=5743 comm="syz-executor" name="463" dev="tmpfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 278.587226][ T42] audit: type=1400 audit(279.113:846): avc: denied { remove_name } for pid=5743 comm="syz-executor" name="binderfs" dev="tmpfs" ino=2423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 278.599783][ T42] audit: type=1400 audit(279.113:847): avc: denied { write } for pid=5743 comm="syz-executor" name="463" dev="tmpfs" ino=2419 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:dlm_control_device_t:s0" [ 278.634640][ T5813] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.700314][ T5741] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 278.704985][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 278.709577][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 278.712922][ T5741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 278.716383][ T5741] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 278.776930][ T5813] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.130885][ T5813] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.174387][T10747] Failed to initialize the IGMP autojoin socket (err -2) [ 279.285279][T10766] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.457405][ T5813] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 279.460579][ T5813] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 279.463410][ T5813] bridge0: port 3(wlan1) entered disabled state [ 279.469579][ T5813] bridge_slave_1: left allmulticast mode [ 279.471818][ T5813] bridge_slave_1: left promiscuous mode [ 279.474100][ T5813] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.480608][ T5813] bridge_slave_0: left allmulticast mode [ 279.482822][ T5813] bridge_slave_0: left promiscuous mode [ 279.485103][ T5813] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.496525][ T5813] veth0: left allmulticast mode [ 279.513040][ T5741] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 279.519259][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 279.525575][ T5741] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 279.529929][ T5741] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 279.552822][ T5741] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 279.687817][ T5813] bond1 (unregistering): (slave bond0): Releasing backup interface [ 279.696443][ T5813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 279.701683][ T5813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 279.707346][ T5813] bond0 (unregistering): Released all slaves [ 279.718430][ T5813] bond1 (unregistering): Released all slaves [ 279.899939][T10747] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.903168][T10747] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.907317][T10747] bridge_slave_0: entered allmulticast mode [ 279.911318][T10747] bridge_slave_0: entered promiscuous mode [ 279.964778][T10747] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.968151][T10747] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.971208][T10747] bridge_slave_1: entered allmulticast mode [ 279.975002][T10747] bridge_slave_1: entered promiscuous mode [ 280.084925][T10747] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.090339][T10776] Failed to initialize the IGMP autojoin socket (err -2) [ 280.106266][T10747] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.212510][T10747] team0: Port device team_slave_0 added [ 280.274238][T10747] team0: Port device team_slave_1 added [ 280.359869][T10747] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.364811][T10747] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.386163][T10747] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.415042][T10814] ================================================================== [ 280.417636][T10814] BUG: KASAN: slab-out-of-bounds in l2cap_sock_setsockopt+0x22c3/0x2330 [ 280.420295][T10814] Read of size 1 at addr ffff88802803c362 by task syz.1.1719/10814 [ 280.423056][T10814] [ 280.424585][T10814] CPU: 1 UID: 0 PID: 10814 Comm: syz.1.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.424604][T10814] Tainted: [L]=SOFTLOCKUP [ 280.424609][T10814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.424646][T10814] Call Trace: [ 280.424695][T10814] [ 280.424700][T10814] dump_stack_lvl+0x100/0x190 [ 280.424868][T10814] print_report+0x13d/0x4b0 [ 280.424942][T10814] ? __virt_addr_valid+0x239/0x430 [ 280.425020][T10814] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 280.425036][T10814] kasan_report+0xdf/0x1c0 [ 280.425112][T10814] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 280.425128][T10814] l2cap_sock_setsockopt+0x22c3/0x2330 [ 280.425143][T10814] ? __pfx_sock_has_perm+0x10/0x10 [ 280.425225][T10814] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 280.425242][T10814] ? find_held_lock+0x2b/0x80 [ 280.425281][T10814] ? __fget_files+0x215/0x3d0 [ 280.425295][T10814] ? selinux_socket_setsockopt+0x6a/0x80 [ 280.425311][T10814] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 280.425326][T10814] do_sock_setsockopt+0xf3/0x1d0 [ 280.425342][T10814] __sys_setsockopt+0x195/0x220 [ 280.425358][T10814] __x64_sys_setsockopt+0xbd/0x160 [ 280.425369][T10814] ? do_syscall_64+0x90/0x870 [ 280.425379][T10814] ? lockdep_hardirqs_on+0x78/0x100 [ 280.425396][T10814] do_syscall_64+0x115/0x870 [ 280.425405][T10814] ? clear_bhb_loop+0x40/0x90 [ 280.425418][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.425429][T10814] RIP: 0033:0x7fbdccd9de99 [ 280.425439][T10814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.425449][T10814] RSP: 002b:00007fbdcaff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.425482][T10814] RAX: ffffffffffffffda RBX: 00007fbdcd025fa0 RCX: 00007fbdccd9de99 [ 280.425490][T10814] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000004 [ 280.425498][T10814] RBP: 00007fbdcce33eaf R08: 0000000000000004 R09: 0000000000000000 [ 280.425506][T10814] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 280.425514][T10814] R13: 00007fbdcd026038 R14: 00007fbdcd025fa0 R15: 00007fffc6ab0ee8 [ 280.425526][T10814] [ 280.425531][T10814] [ 280.438845][ T6259] smbdirect: ib_dev[syz0] removed [ 280.440076][T10814] The buggy address belongs to the object at ffff88802803c340 [ 280.440076][T10814] which belongs to the cache skbuff_small_head of size 704 [ 280.440090][T10814] The buggy address is located 34 bytes inside of [ 280.440090][T10814] allocated 704-byte region [ffff88802803c340, ffff88802803c600) [ 280.440101][T10814] [ 280.440105][T10814] The buggy address belongs to the physical page: [ 280.440111][T10814] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2803c [ 280.440147][T10814] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 280.511310][T10814] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 280.513354][T10814] page_type: f5(slab) [ 280.514610][T10814] raw: 00fff00000000040 ffff88801cb40500 dead000000000122 0000000000000000 [ 280.517288][T10814] raw: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 280.519938][T10814] head: 00fff00000000040 ffff88801cb40500 dead000000000122 0000000000000000 [ 280.522587][T10814] head: 0000000000000000 0000000800130013 00000000f5000000 0000000000000000 [ 280.525249][T10814] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 280.527910][T10814] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 280.530483][T10814] page dumped because: kasan: bad access detected [ 280.532467][T10814] page_owner tracks the page as allocated [ 280.534231][T10814] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd2000(__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5813, tgid 5813 (kworker/u32:4), ts 280325981720, free_ts 280258613659 [ 280.540289][T10814] post_alloc_hook+0xfd/0x120 [ 280.541792][T10814] get_page_from_freelist+0xf48/0x3530 [ 280.543493][T10814] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 280.545351][T10814] new_slab+0xa2/0x650 [ 280.546652][T10814] refill_objects+0xe3/0x410 [ 280.548143][T10814] __pcs_replace_empty_main+0x376/0x680 [ 280.549871][T10814] kmem_cache_alloc_node_noprof+0x52c/0x6b0 [ 280.551733][T10814] kmalloc_reserve+0x148/0x350 [ 280.553238][T10814] __alloc_skb+0x185/0x710 [ 280.554638][T10814] alloc_uevent_skb+0x7d/0x210 [ 280.556174][T10814] kobject_uevent_env+0xd2d/0x18b0 [ 280.557781][T10814] device_del+0x605/0x9b0 [ 280.559260][T10814] device_unregister+0x1d/0xe0 [ 280.560769][T10814] hwsim_exit_net+0x8c2/0x14f0 [ 280.562313][T10814] ops_undo_list+0x2ee/0xab0 [ 280.563788][T10814] cleanup_net+0x499/0x920 [ 280.565199][T10814] page last free pid 10776 tgid 10776 stack trace: [ 280.567211][T10814] __free_frozen_pages+0x79f/0x1090 [ 280.568860][T10814] hci_release_dev+0x4ef/0x630 [ 280.570369][T10814] bt_host_release+0x6b/0xb0 [ 280.571843][T10814] device_release+0xd2/0x270 [ 280.573296][T10814] kobject_put+0x1f7/0x640 [ 280.574702][T10814] put_device+0x1f/0x30 [ 280.576046][T10814] vhci_release+0x185/0x230 [ 280.577503][T10814] __fput+0x3ff/0xb50 [ 280.578788][T10814] task_work_run+0x150/0x240 [ 280.580277][T10814] do_exit+0x951/0x2ae0 [ 280.581595][T10814] do_group_exit+0xd5/0x2a0 [ 280.583040][T10814] __x64_sys_exit_group+0x3e/0x50 [ 280.584623][T10814] x64_sys_call+0x102c/0x1530 [ 280.586124][T10814] do_syscall_64+0x115/0x870 [ 280.587578][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.589435][T10814] [ 280.590203][T10814] Memory state around the buggy address: [ 280.591953][T10814] ffff88802803c200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 280.594418][T10814] ffff88802803c280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 280.596921][T10814] >ffff88802803c300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 280.599391][T10814] ^ [ 280.601610][T10814] ffff88802803c380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 280.604079][T10814] ffff88802803c400: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 280.606543][T10814] ================================================================== SYZFAIL: failed to recv rpc [ 280.611205][T10814] Kernel panic - not syncing: KASAN: panic_on_warn set ... fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 280.613692][T10814] CPU: 1 UID: 0 PID: 10814 Comm: syz.1.1719 Tainted: G L syzkaller #0 PREEMPT(full) [ 280.617098][T10814] Tainted: [L]=SOFTLOCKUP [ 280.618412][T10814] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 280.621484][T10814] Call Trace: [ 280.622524][T10814] [ 280.623469][T10814] dump_stack_lvl+0x100/0x190 [ 280.624949][T10814] vpanic+0x552/0x970 [ 280.626219][T10814] ? __pfx_vpanic+0x10/0x10 [ 280.627654][T10814] ? mark_held_locks+0x40/0x70 [ 280.629185][T10814] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 280.630957][T10814] panic+0xd1/0xe0 [ 280.632139][T10814] ? __pfx_panic+0x10/0x10 [ 280.633533][T10814] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 280.635287][T10814] ? preempt_schedule_common+0x42/0xc0 [ 280.637035][T10814] check_panic_on_warn.cold+0x19/0x34 [ 280.638701][T10814] end_report.part.0+0x3a/0x90 [ 280.640207][T10814] kasan_report.cold+0xe/0x18 [ 280.641691][T10814] ? l2cap_sock_setsockopt+0x22c3/0x2330 [ 280.643436][T10814] l2cap_sock_setsockopt+0x22c3/0x2330 [ 280.645131][T10814] ? __pfx_sock_has_perm+0x10/0x10 [ 280.646738][T10814] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 280.648570][T10814] ? find_held_lock+0x2b/0x80 [ 280.650047][T10814] ? __fget_files+0x215/0x3d0 [ 280.651517][T10814] ? selinux_socket_setsockopt+0x6a/0x80 [ 280.653256][T10814] ? __pfx_l2cap_sock_setsockopt+0x10/0x10 [ 280.655096][T10814] do_sock_setsockopt+0xf3/0x1d0 [ 280.656670][T10814] __sys_setsockopt+0x195/0x220 [ 280.658192][T10814] __x64_sys_setsockopt+0xbd/0x160 [ 280.659803][T10814] ? do_syscall_64+0x90/0x870 [ 280.661268][T10814] ? lockdep_hardirqs_on+0x78/0x100 [ 280.662894][T10814] do_syscall_64+0x115/0x870 [ 280.664340][T10814] ? clear_bhb_loop+0x40/0x90 [ 280.665830][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.667697][T10814] RIP: 0033:0x7fbdccd9de99 [ 280.669110][T10814] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 280.675137][T10814] RSP: 002b:00007fbdcaff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 280.677698][T10814] RAX: ffffffffffffffda RBX: 00007fbdcd025fa0 RCX: 00007fbdccd9de99 [ 280.680100][T10814] RDX: 0000000000000008 RSI: 0000000000000112 RDI: 0000000000000004 [ 280.682508][T10814] RBP: 00007fbdcce33eaf R08: 0000000000000004 R09: 0000000000000000 [ 280.684934][T10814] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000000 [ 280.687315][T10814] R13: 00007fbdcd026038 R14: 00007fbdcd025fa0 R15: 00007fffc6ab0ee8 [ 280.689717][T10814] [ 280.691348][T10814] Kernel Offset: disabled [ 280.692659][T10814] Rebooting in 86400 seconds.. VM DIAGNOSIS: 23:34:32 Registers: info registers vcpu 0 CPU#0 RAX=ffffffff9b8ca9c0 RBX=0000000000000000 RCX=0000000000000000 RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff9b8e5c90 RBP=ffffffff9b8e5c90 RSP=ffffc90005cf7958 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000000 R11=0000000000000000 R12=0000000000000001 R13=0000000000000001 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81e557e6 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5de7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007effb3269d50 CR3=0000000050582000 CR4=00352ef0 DR0=0000000000000008 DR1=0000000000000002 DR2=0000000000000404 DR3=ffffffffefffff14 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000000000000 Opmask02=0000000080000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f65676173 752e746363617570 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc6ab13d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc6ab13d6 00007fffc6ab13dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcce34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcce344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcce34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcce344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000034 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a2caa5 RDI=ffffffff9b9fcb40 RBP=ffffffff9b9fcb00 RSP=ffffc9000c08f6e8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3230383838666666 R12=0000000000000000 R13=0000000000000034 R14=ffffffff9b6ef1f4 R15=ffffffff85a2ca40 RIP=ffffffff85a2cacf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fbdcaff66c0 ffffffff 00c00000 GS =0000 ffff8880d5ee7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000005c0 CR3=000000003dc09000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff80 Opmask01=0000000000000000 Opmask02=0000000080000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc6ab13d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc6ab13d6 00007fffc6ab13dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcce34492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcce344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcce34636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdcce344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbdccff05f8 00007fbdccff05c8 00007fbdccff0600 00007fbdccff05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000001 RBX=0000000000000002 RCX=ffffffff81d4eddf RDX=0000000000000001 RSI=0000000000000008 RDI=ffffffff91224590 RBP=ffffc90005b6fb80 RSP=ffffc90005b6f9e8 R8 =0000000000000000 R9 =fffffbfff22448b2 R10=ffffffff91224597 R11=0000000000000000 R12=0000000000000000 R13=ffff88802ea53300 R14=ffff8880594fca80 R15=ffff88806a63b4c0 RIP=ffffffff8bb9fb40 RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff978147880 ffffffff 00c00000 GS =0000 ffff8880d5fe7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbdccd874c0 CR3=00000000341df000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000000000080 Opmask02=00000000ffff7fdf Opmask03=0000000020400004 Opmask04=00000000ffffefff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632ab56d0d0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005632ab55b000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffff00000000ff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73732541d8428383 73732541d8268683 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373f2 737373435c021e73 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312d307a79732d70 72732f7072735f64 6e6162696e69666e 692f6c6175747269 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 005600051f40494c 43055c5155484005 424b4c55554c4e53 004057005b1a0f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00004d554e514553 0000000000000021 0000000000312d78 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 6c2f0073656c7572 000000337400322d 6332692f7665642d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3937312c3136 312c3131312c3031 312c32452c34442c 30442c45412c3841 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c34412c42382c30 382c33372c32372c 31376b2c34312c32 2c312c30652d3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4442654344464670 3243353176333030 30623a7475706e69 3d5341494c41444f ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff888058aaa000 RCX=1ffff92000c92f45 RDX=ffff88805c348000 RSI=ffffffff865c3c99 RDI=ffff888058aaa4e8 RBP=dffffc0000000000 RSP=ffffc90006497ac0 R8 =0000000000000001 R9 =fffff52000c92f28 R10=ffffc90006497947 R11=0000000000000000 R12=ffff888058aaa4d8 R13=ffff88805a548ed8 R14=ffff88802f588648 R15=ffff888058aaa4e8 RIP=ffffffff88de271d RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d60e7000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000002da7a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79df15d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4041ec76 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd4041ec76 00007ffd4041ec7c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79de434492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79de4344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79de434636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79de4344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79de5f0600 00007f79de5f05e0 00007f79de5f05e8 00007f79de5f0618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79de5f05f8 00007f79de5f05c8 00007f79de5f0600 00007f79de5f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000