last executing test programs: 1m49.188541939s ago: executing program 1 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x47) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chmod(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x47) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) (async) chmod(&(0x7f0000000080)='./file0\x00', 0x0) (async) 1m49.100710465s ago: executing program 1 (id=25): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) (async) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$AUDIT_USER_AVC(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x80}, 0x4040800) (async) sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/152, 0x98, 0x1, 0x0}, &(0x7f0000000180)=0x40) syz_ublk_setup_io_uring(0x20, &(0x7f00000000c0)={0x0, 0x7540, 0x52fa27a174f0ad35, 0x80002, 0x800001e5, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit$UBLK(r2, r3, r4, &(0x7f0000001a00)=@ublk_io_need_get_data_sqe={0x2e, 0x60, 0x0, 0xffffffffffffffff, 0xc0107522, 0x0, 0x0, 0x0, 0x1e0303d7fa4e9fa1, {0x7}, 0x0, 0x0, '\x00', {0x2, 0x15d, 0x3, 0x0}}) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_NOP128={0x3f, 0x41, 0x0, 0xffffffffffffffff, 0x51125861, 0x3, 0xad95fb1, 0xa, 0x1, {0xffff}}) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x1, 0x0) link(0x0, 0x0) (async) r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) (async) syz_usb_control_io$hid(r5, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000000b2e2b5ab40bf85edaca83"], 0x0}, 0x0) (async) syz_usb_control_io(r5, 0x0, &(0x7f0000000c00)={0x44, &(0x7f0000000580)=ANY=[@ANYBLOB="000301"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r6 = syz_open_dev$hiddev(&(0x7f0000000000), 0x104, 0x88180) ioctl$HIDIOCSFLAG(r6, 0x4004480f, &(0x7f0000000040)=0x3) (async) ioctl$HIDIOCGUSAGE(r6, 0xc018480b, 0x0) readv(r6, &(0x7f00000003c0)=[{&(0x7f0000001cc0)=""/4096, 0x1000}], 0x1) (async) r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x13, r7, 0x0) (async) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0x402a1, 0x21, &(0x7f00000001c0)={0x0, 0x8, 0x4e, 0x8}, 0x8, 0x6, 0x6, 0x0, 0x1, 0x101, 0x0}) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x958b4000) (async) ioctl$USBDEVFS_REAPURBNDELAY(r7, 0x4008550d, 0x0) (async) capset(0x0, 0x0) r8 = syz_io_uring_setup(0x1c8d, &(0x7f0000000180)={0x0, 0x1775, 0x40, 0x2, 0x27}, &(0x7f0000000300), &(0x7f0000000240), &(0x7f0000000000)) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r9, 0x0) (async) io_uring_register$IORING_REGISTER_RESTRICTIONS(r8, 0xb, &(0x7f0000000040)=[@ioring_restriction_sqe_flags_required={0x3, 0x18}], 0x1) 1m48.271215698s ago: executing program 1 (id=41): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0xfffff000) (async) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000005c0)=0x2, 0x4) r1 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x0, 0xeb}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x2200}], 0x0, 0xa}, 0x20) 1m48.111153448s ago: executing program 1 (id=43): r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x6805, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x6805, 0x0) r1 = openat$nmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) 1m48.110946368s ago: executing program 1 (id=44): r0 = syz_open_dev$ndb(&(0x7f0000000080), 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0xfffffffffffffd2b, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)=ANY=[@ANYBLOB="dc0200000d0a010800000000000000000a0000010900020073797a31000000000900010073797a3100000000b0020380ac0200800c000180060001001e1c00000c000a"], 0x2dc}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x24, r3, 0x1, 0x4070bd28, 0x1, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8c4}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x437, 0x1, 0x25dfdbf8, {0x0, 0x0, 0x0, 0x0, 0x40c89}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close_range(r0, r1, 0x0) r8 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x20, r8, 0x1, 0x70bd2a, 0xfffffffe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000810) 1m48.051997278s ago: executing program 1 (id=46): pipe(&(0x7f0000000340)={0xffffffffffffffff}) (async) syz_emit_ethernet(0x2502, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0)="d5ed", 0x2, r6) r8 = add_key$user(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x2}, &(0x7f0000001740)="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", 0x801, r6) keyctl$dh_compute(0x17, &(0x7f0000002740)={r7, r8, r7}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000280)="527f03", 0x3}], 0x1) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x14) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000640)={0x0, r1, 0x4, 0x4, 0x1, 0xd}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r10) r11 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)=0x2) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) 1m32.88989371s ago: executing program 32 (id=46): pipe(&(0x7f0000000340)={0xffffffffffffffff}) (async) syz_emit_ethernet(0x2502, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0) (async) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc}) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r6 = add_key$keyring(&(0x7f0000001580), &(0x7f00000015c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x2}, &(0x7f00000014c0)="d5ed", 0x2, r6) r8 = add_key$user(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x2}, &(0x7f0000001740)="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", 0x801, r6) keyctl$dh_compute(0x17, &(0x7f0000002740)={r7, r8, r7}, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) writev(r5, &(0x7f0000000300)=[{&(0x7f0000000280)="527f03", 0x3}], 0x1) (async) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d300000000000000500190001000000080008000700000008001700ff000000050018"], 0x4c}}, 0x14) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000640)={0x0, r1, 0x4, 0x4, 0x1, 0xd}) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) ioctl$LOOP_CHANGE_FD(r10, 0x4c06, r10) r11 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r11, 0x0, 0x0) ioctl$EVIOCRMFF(0xffffffffffffffff, 0x40044581, &(0x7f0000000080)=0x2) (async) syz_open_dev$I2C(&(0x7f0000000040), 0x2, 0x402) 1m5.610022709s ago: executing program 4 (id=532): mount$9p_virtio(&(0x7f0000000040), &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x4, &(0x7f0000000200)={'trans=virtio,', {[{@ignoreqv}]}}) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000004c0)={0x5, 0x40000}, 0x10) sendmsg$nl_route(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001200375f3fbd7000fcffffff07000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x8884) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) 1m5.560987689s ago: executing program 4 (id=534): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @random="72b400000059", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x16}, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @remote}}}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000010) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket(0x2, 0x2, 0x1) bind$unix(r2, &(0x7f0000000000)=@abs, 0x6e) (async) r3 = socket(0x2, 0x2, 0x1) bind$unix(r3, &(0x7f0000000000)=@abs, 0x6e) (async) r4 = socket(0x2, 0x2, 0x1) bind$unix(r4, &(0x7f0000000000)=@abs, 0x6e) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc14001180090001006c617374"], 0xb8}, 0x1, 0x0, 0x0, 0x4000854}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m5.42192261s ago: executing program 4 (id=535): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r1 = mq_open(&(0x7f00000079c0)='.:-\\!\x00', 0x40, 0x12, 0x0) read(r1, &(0x7f0000000000)=""/142, 0x8e) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) getpriority(0x1, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x57, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, 0x0, 0x9}], 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2) 1m5.371988105s ago: executing program 4 (id=536): r0 = socket(0x2, 0x80805, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040), 0x3, 0x40000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xb976}, &(0x7f0000000000)=0x8) 1m5.368613022s ago: executing program 4 (id=537): syslog(0x9, 0x0, 0x0) r0 = socket(0x2, 0x80000, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bridge0\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/bridge0/bridge/root_port\x00', 0x0, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) (async) r3 = landlock_create_ruleset(&(0x7f00000001c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) landlock_restrict_self(r3, 0x3) (async, rerun: 64) r4 = getpgid(0x0) (rerun: 64) r5 = syz_pidfd_open(r4, 0x0) pidfd_send_signal(r5, 0x0, 0x0, 0x4) (async) sendfile(r2, r2, 0x0, 0x40008) read(r1, &(0x7f0000000500), 0x100) 1m5.280685534s ago: executing program 4 (id=538): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0xfff1, 0xfff0}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50040) r0 = socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f0000000680)='y\x105\xfbZ7\xeda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\xacj\x90\x8f\x9d__\xff\x00\x00\x00\x00\x00\xd4\x9f\x92\xbb\x9d\x19\xa6\xa5o\xe44k\x87\xf5u\xf0\xf5v\n\xdb\xcb\xd2\xa6\xa5\xad\xb2\x10\xf9CDP4\xeb\xef\xbe\x03\xb8\xd0[\xf3c\xe50\xaa\xe1\x1bngb\x94\xf4^\x88\ax\x99\n(\x1d\xd7b\x8f,(\xc9\xdb2\x9c\xca\xf9\xad4\x11\xf6!H\xc9d\"\xac55$\xef?\x8c\xbd\x03\x92\xf8\xad\xf7{\t\rB\'\xce\xc0\xf1\xde\xf5\xac\x88\xc2\x06\x00\x04\x00\x00\x00\x00\x00\x00\x00%\xa8\x1ed\xda\xff!|J6\xfc\x17\xdb\xa2X\xc4\x14\xfagvh\x92[t\xaaJ\r\x97\xb1G\x97\xc7/\x82\x02h\x9b\x8c\xa0\xab\x1d\xbc\xbb\xb7\x11\xb1\xa59v\xd3<~\xc4\x00\xeef\v\xc5\r\xa1\xac\xf9\a6\xdcj\xee\xfd\x9b\xc9\xf8B\xa6v\xb6\xc9P\v\x85\xee\x9dv\xf3y,\x86\xa3\x80R\xd7', 0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000300)="0ee2eca76e429ae9c5ac969932ca7cf170e6e5257cfbff08a57afcfcc03c0092a01f74768e0316fb56b8397eccfd19eb0134d86370e16be002f7438105a326377bf2cf52e2c6feaaa240ba4d91ddc62d39a970f4c2ea5164185d2aaf0d36a992784bebad7c92d63ce83365b51115eb246ccfab326b01287cf01f3d8033456077dd59c3aa311849fb42fc", 0x8a}, {&(0x7f00000006c0)="d29f327c4502494867210fe9c00434ee4759b158943e105ad28eb64030d05bab2b3c37150305071abc0f41ba30aefef620d28f1630", 0x35}], 0x3, 0x0, 0x128}}], 0x1, 0xfc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0xfff1, 0xfff0}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50040) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) memfd_create(&(0x7f0000000680)='y\x105\xfbZ7\xeda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\xacj\x90\x8f\x9d__\xff\x00\x00\x00\x00\x00\xd4\x9f\x92\xbb\x9d\x19\xa6\xa5o\xe44k\x87\xf5u\xf0\xf5v\n\xdb\xcb\xd2\xa6\xa5\xad\xb2\x10\xf9CDP4\xeb\xef\xbe\x03\xb8\xd0[\xf3c\xe50\xaa\xe1\x1bngb\x94\xf4^\x88\ax\x99\n(\x1d\xd7b\x8f,(\xc9\xdb2\x9c\xca\xf9\xad4\x11\xf6!H\xc9d\"\xac55$\xef?\x8c\xbd\x03\x92\xf8\xad\xf7{\t\rB\'\xce\xc0\xf1\xde\xf5\xac\x88\xc2\x06\x00\x04\x00\x00\x00\x00\x00\x00\x00%\xa8\x1ed\xda\xff!|J6\xfc\x17\xdb\xa2X\xc4\x14\xfagvh\x92[t\xaaJ\r\x97\xb1G\x97\xc7/\x82\x02h\x9b\x8c\xa0\xab\x1d\xbc\xbb\xb7\x11\xb1\xa59v\xd3<~\xc4\x00\xeef\v\xc5\r\xa1\xac\xf9\a6\xdcj\xee\xfd\x9b\xc9\xf8B\xa6v\xb6\xc9P\v\x85\xee\x9dv\xf3y,\x86\xa3\x80R\xd7', 0x6) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00'}) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000300)="0ee2eca76e429ae9c5ac969932ca7cf170e6e5257cfbff08a57afcfcc03c0092a01f74768e0316fb56b8397eccfd19eb0134d86370e16be002f7438105a326377bf2cf52e2c6feaaa240ba4d91ddc62d39a970f4c2ea5164185d2aaf0d36a992784bebad7c92d63ce83365b51115eb246ccfab326b01287cf01f3d8033456077dd59c3aa311849fb42fc", 0x8a}, {&(0x7f00000006c0)="d29f327c4502494867210fe9c00434ee4759b158943e105ad28eb64030d05bab2b3c37150305071abc0f41ba30aefef620d28f1630", 0x35}], 0x3, 0x0, 0x128}}], 0x1, 0xfc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) (async) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) (async) sendto$inet6(r1, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 50.288759802s ago: executing program 33 (id=538): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0xfff1, 0xfff0}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50040) r0 = socket$inet_sctp(0x2, 0x1, 0x84) memfd_create(&(0x7f0000000680)='y\x105\xfbZ7\xeda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\xacj\x90\x8f\x9d__\xff\x00\x00\x00\x00\x00\xd4\x9f\x92\xbb\x9d\x19\xa6\xa5o\xe44k\x87\xf5u\xf0\xf5v\n\xdb\xcb\xd2\xa6\xa5\xad\xb2\x10\xf9CDP4\xeb\xef\xbe\x03\xb8\xd0[\xf3c\xe50\xaa\xe1\x1bngb\x94\xf4^\x88\ax\x99\n(\x1d\xd7b\x8f,(\xc9\xdb2\x9c\xca\xf9\xad4\x11\xf6!H\xc9d\"\xac55$\xef?\x8c\xbd\x03\x92\xf8\xad\xf7{\t\rB\'\xce\xc0\xf1\xde\xf5\xac\x88\xc2\x06\x00\x04\x00\x00\x00\x00\x00\x00\x00%\xa8\x1ed\xda\xff!|J6\xfc\x17\xdb\xa2X\xc4\x14\xfagvh\x92[t\xaaJ\r\x97\xb1G\x97\xc7/\x82\x02h\x9b\x8c\xa0\xab\x1d\xbc\xbb\xb7\x11\xb1\xa59v\xd3<~\xc4\x00\xeef\v\xc5\r\xa1\xac\xf9\a6\xdcj\xee\xfd\x9b\xc9\xf8B\xa6v\xb6\xc9P\v\x85\xee\x9dv\xf3y,\x86\xa3\x80R\xd7', 0x6) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00'}) sendmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000300)="0ee2eca76e429ae9c5ac969932ca7cf170e6e5257cfbff08a57afcfcc03c0092a01f74768e0316fb56b8397eccfd19eb0134d86370e16be002f7438105a326377bf2cf52e2c6feaaa240ba4d91ddc62d39a970f4c2ea5164185d2aaf0d36a992784bebad7c92d63ce83365b51115eb246ccfab326b01287cf01f3d8033456077dd59c3aa311849fb42fc", 0x8a}, {&(0x7f00000006c0)="d29f327c4502494867210fe9c00434ee4759b158943e105ad28eb64030d05bab2b3c37150305071abc0f41ba30aefef620d28f1630", 0x35}], 0x3, 0x0, 0x128}}], 0x1, 0xfc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) sendto$inet6(r1, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@getqdisc={0x24, 0x26, 0x0, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0xfff3, 0xc}, {0xfff1, 0xfff0}, {0x2, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50040) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) memfd_create(&(0x7f0000000680)='y\x105\xfbZ7\xeda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!\xacj\x90\x8f\x9d__\xff\x00\x00\x00\x00\x00\xd4\x9f\x92\xbb\x9d\x19\xa6\xa5o\xe44k\x87\xf5u\xf0\xf5v\n\xdb\xcb\xd2\xa6\xa5\xad\xb2\x10\xf9CDP4\xeb\xef\xbe\x03\xb8\xd0[\xf3c\xe50\xaa\xe1\x1bngb\x94\xf4^\x88\ax\x99\n(\x1d\xd7b\x8f,(\xc9\xdb2\x9c\xca\xf9\xad4\x11\xf6!H\xc9d\"\xac55$\xef?\x8c\xbd\x03\x92\xf8\xad\xf7{\t\rB\'\xce\xc0\xf1\xde\xf5\xac\x88\xc2\x06\x00\x04\x00\x00\x00\x00\x00\x00\x00%\xa8\x1ed\xda\xff!|J6\xfc\x17\xdb\xa2X\xc4\x14\xfagvh\x92[t\xaaJ\r\x97\xb1G\x97\xc7/\x82\x02h\x9b\x8c\xa0\xab\x1d\xbc\xbb\xb7\x11\xb1\xa59v\xd3<~\xc4\x00\xeef\v\xc5\r\xa1\xac\xf9\a6\xdcj\xee\xfd\x9b\xc9\xf8B\xa6v\xb6\xc9P\v\x85\xee\x9dv\xf3y,\x86\xa3\x80R\xd7', 0x6) (async) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x800, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'veth0\x00'}) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000300)="0ee2eca76e429ae9c5ac969932ca7cf170e6e5257cfbff08a57afcfcc03c0092a01f74768e0316fb56b8397eccfd19eb0134d86370e16be002f7438105a326377bf2cf52e2c6feaaa240ba4d91ddc62d39a970f4c2ea5164185d2aaf0d36a992784bebad7c92d63ce83365b51115eb246ccfab326b01287cf01f3d8033456077dd59c3aa311849fb42fc", 0x8a}, {&(0x7f00000006c0)="d29f327c4502494867210fe9c00434ee4759b158943e105ad28eb64030d05bab2b3c37150305071abc0f41ba30aefef620d28f1630", 0x35}], 0x3, 0x0, 0x128}}], 0x1, 0xfc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000580)=ANY=[], 0x8) (async) connect$inet6(r1, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="82", 0x1}, {&(0x7f00000001c0)=' ', 0x1}], 0x2}}], 0x1, 0x4400c800) (async) sendto$inet6(r1, &(0x7f0000000300), 0x1c, 0x3b00, 0x0, 0xfffffffffffffdfd) (async) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000080)={0x6}, 0x4) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) 15.861641483s ago: executing program 0 (id=1161): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000005c0)={"f3a0b35ad5c7aa0969c57df5883b1908", 0x0, 0x0, {0x40, 0x968}, {0x8000000000000000, 0xa}, 0x8, [0xc34, 0x2, 0x0, 0xc397, 0x7, 0x1, 0xffff, 0xe269, 0x8, 0x5, 0x7, 0x3, 0x9, 0x7, 0x400, 0x2]}) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f00000006c0)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000700)={"916f26f707b32687cd2b0d6484677997", r1, r2, {0x3, 0x3}, {0xd05, 0x9}, 0x80, [0x1491a44f, 0xe, 0xffffffffffffffc3, 0x8f47, 0xfcb, 0x2, 0xfffffffffffffff8, 0x1ff, 0xfff, 0xcc49, 0x8000000000000001, 0x3, 0x2, 0x8, 0xf, 0xa09d]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x80400, 0x0) ioctl$COMEDI_CMDTEST(r3, 0x8050640a, &(0x7f0000000200)={0x2, 0x10000, 0x10, 0x57, 0x4, 0x6, 0x10, 0xd, 0x4, 0x5, 0x40, 0x10001, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x400000, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8008, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) ioctl$NS_GET_OWNER_UID(r4, 0xb704, &(0x7f0000000380)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}}}, &(0x7f00000004c0)=0xe8) mount$9p_virtio(&(0x7f0000000280), &(0x7f00000002c0)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', &(0x7f0000000340), 0x3, &(0x7f0000000500)={'trans=virtio,', {[{@uname={'uname', 0x3d, '$\x1b'}}, {@access_user}, {@cache_mmap}, {@dfltuid={'dfltuid', 0x3d, r6}}], [{@fowner_eq={'fowner', 0x3d, r7}}]}}) mount(0x0, &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/devices/0000:00:01.0/config\x00', 0x2, 0x0) write$binfmt_format(r8, &(0x7f0000000080)='-1\x00', 0x3) syz_fuse_handle_req(r8, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(r5, &(0x7f0000000300)='./file1\x00', 0x88700, 0x36) pread64$ublk_bdev(r4, &(0x7f00000001c0)=""/55, 0x37, 0x2) 15.861086293s ago: executing program 0 (id=1162): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x1f, 0x3, 0xffffffffdab30f4f, 0x7, 0x8002, 0x604, 0xc8, 0x0, 0x0, 0x8, 0x7}}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000580)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b30, &(0x7f0000000200)={'wlan1\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.710389977s ago: executing program 0 (id=1166): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/platform/drivers/vhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='vhci_hcd.0\x00', 0xa) r2 = syz_open_dev$vim2m(&(0x7f0000000380), 0x8, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0x100007, 0x81}) r3 = syz_open_dev$audion(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f0000000080)={0x6, 0x102, 0x1, {0x8001, 0x4, 0x10000, 0x4}}) 15.301742148s ago: executing program 0 (id=1168): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x40fff, 0x4) (async) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x7fff, 0x20) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f00000003c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) dup3(r2, r1, 0x80000) (async) ioctl$DRM_IOCTL_SET_MASTER(r2, 0x641e) 15.301008761s ago: executing program 0 (id=1169): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) (async) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r2, &(0x7f0000001200)=[{&(0x7f0000000080)=""/4097, 0x1001}], 0x1, 0x9, 0x6a76) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_clone(0x21000200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r5 = syz_open_dev$sndpcmc(&(0x7f0000000080), 0x0, 0x0) (async) r6 = openat$audio1(0xffffffffffffff9c, &(0x7f0000001580), 0x138a09f12d120b2d, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r6, 0xc004500a, &(0x7f0000000200)=0x12) ioctl$SNDCTL_DSP_GETODELAY(r6, 0x80045017, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r5, 0x80184132, &(0x7f0000000340)) (async) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000000180)={0x0, 0xffff, 0x0, 0x0, r4}) rt_tgsigqueueinfo(r4, r7, 0x1f, &(0x7f0000000480)={0x2b, 0x0, 0x76cb}) (async, rerun: 32) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r3) (rerun: 32) sendmsg$ETHTOOL_MSG_FEATURES_SET(r3, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000100)={0x4c, r8, 0x1, 0x70bd27, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '($@\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004801}, 0x0) 15.219681415s ago: executing program 0 (id=1170): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) 4.491482074s ago: executing program 3 (id=1267): r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000600), &(0x7f0000001380)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000440)=""/101, 0x65}], 0x1}, 0x40000162) timer_create(0x5, &(0x7f0000000600)={0x0, 0x1a, 0x2, @thr={&(0x7f00000004c0)="ddac420fe90cd4ae803050cbfee756cb59b1f244629c1e56057a7f66000abdc2adf4ce02e6fe171eb6d8d757ae5372a4e023eff26127fed6aed0850978bce5389e4a285ceeac1f87838ad9612336eb724437c80f267a34b20cdf04bb8ec5ae7fd641141c77cddf30a27395b25b43b0e5653fc4af618a55ebb296e1a98581baf27ffb25dcae6d526e55ce9a0fc93f0bf4092b561d87b28cd0c742803b8113749b690a42157447d95fbb838e6db7c7b921b813b4acf1ec2a3881a5a0a86db07f6093596bec4e53d64df46b", &(0x7f00000005c0)="0f0924ada7393a40aabb9fd24ee6ebaa5952eade5e2919c598100110aa61cf5fb5c49bb33541a1c972fded6eb3d748168a570f33930c8720790ed694143417ad"}}, &(0x7f0000000640)=0x0) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) timer_settime(r2, 0x0, &(0x7f00000006c0)={{r3, r4+60000000}, {0x77359400}}, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c00020008000100", @ANYRES16=r7], 0x3c}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x3c}}, 0x8000) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r7, 0x0, 0x4040) ioctl$SIOCSIFMTU(r5, 0x8923, &(0x7f0000000000)={'dummy0\x00', 0x1}) syz_emit_vhci(&(0x7f0000000380)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x0, 0x0, 0x24}, @l2cap_cid_signaling={{0x20}, [@l2cap_conf_rsp={{0x5, 0x9, 0xa}, {0xffff, 0x4, 0x6, [@l2cap_conf_ews={0x7, 0x2, 0x9}]}}, @l2cap_info_req={{0xa, 0x6, 0x2}, {0x81}}, @l2cap_conn_rsp={{0x3, 0x2, 0x8}, {0x9, 0x4, 0x6, 0x7f}}]}}, 0x29) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(0xffffffffffffffff, 0x0, 0x40) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, 0x0) r9 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$kcm(r9, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000) sendmsg$inet(r9, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x30004001) 3.621749111s ago: executing program 3 (id=1280): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x4200, 0x0) r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000340)={@in={{0x2, 0x4e22, @local}}, 0x0, 0x0, 0x33, 0x0, "cebd7ceedb7b0ad952e966bbe242b92b746b023df2cb59e32e10366456deac64e782206bd4aee372005a52a40b7161161a8b2749fe184fb0d08bc63f90010a1ed2bf603d2c3fcc250c30136f9ef2ef8b"}, 0xd8) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='coredump_filter\x00') writev(r3, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r4, 0x4b47, &(0x7f0000000040)={0x8, 0x0, 0x27f}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r3, &(0x7f0000000180)='cgroup.threads\x00', 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) write$cgroup_pid(r6, &(0x7f0000000140), 0x12) r7 = openat$cgroup_procs(r5, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) pread64(r7, &(0x7f0000001840)=""/4096, 0x1000, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000240), 0x12) r10 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r10, 0xffffffffffffffff, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x202000, 0x0) close(r12) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 3.500964762s ago: executing program 3 (id=1282): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000731ffbaa196d61c51dd30bf56cdbdffcffffff00000000000000001800000003000000000f48a4083fe6d3b8f2574a4c03685704d0b9ca02531c4478fe23f4e6a582395c048783befa4e34733ec597ab702cc19737c15fc0e421dab215e6a00911700d95b15e6e1e6805c9d68bf8638d41063843a86b3ce5dc4fdcdacf1d3f38ce28af864aa2"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) setsockopt$inet_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x9, 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) (async) connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) (async) writev(r1, &(0x7f0000001a00)=[{&(0x7f0000000880)="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", 0x481}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000600)="87fc5d85da21530562070095c108", 0x0, 0x8011, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x40}, 0x50) 3.499415316s ago: executing program 3 (id=1283): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r2, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010023010000340200000200000008000100", @ANYRES32=r5], 0x1c}}, 0x0) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000280)={0x27, r5, 0x1, 0x4, 0x0, 0x7, "dfd6a64498ddeb64d6b67fe2c6912f9ceea11d329b5cb307562b2573cc3f84fb733a4b755fd1a2f960cabda9fde710440686ea3dba2da2476b66490603536f", 0x3f}, 0x60) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x187) syz_open_dev$vbi(0x0, 0x1, 0x2) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) umount2(&(0x7f0000000140)='./file0\x00', 0x1) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYRESOCT=r0, @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x4fafb960470cc441) 3.411725175s ago: executing program 2 (id=1284): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000000)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='dctcp-reno', 0xa) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @multicast2}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r4, &(0x7f000000c1c0)={0x0, 0x0, 0x0}, 0x20) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xffff}, {}, {}, {}, {0xffffffff}, {}, {}, {}, {}, {0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe81}, {}, {}, {}, {0x0, 0x0, 0x17d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffe}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendmsg$802154_dgram(r0, &(0x7f0000000200)={&(0x7f0000000080), 0x14, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 3.411448322s ago: executing program 2 (id=1285): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x22826, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r1, 0x4068aea3, &(0x7f0000000000)={0xda, 0x0, 0x1}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x9) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000280)=@arm64) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f0000000500)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=0x0]) chdir(&(0x7f0000000140)='./file0\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r3, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r3, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.210042829s ago: executing program 2 (id=1286): r0 = socket$inet_tcp(0x2, 0x1, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="fbe45499e30191ea90e16bcd9281d5999422049cd67955e29d757255efb422a9670da649004086b70767d4f73f29883388ba86ff11f845f28a3be640ea755ff31d92e94f17", 0x45}], 0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f00000000c0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async) bind$inet(r0, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000400)={'syztnl1\x00', &(0x7f0000000340)={'syztnl1\x00', 0x0, 0x10, 0x700, 0x1, 0x0, {{0x1c, 0x4, 0x2, 0x34, 0x70, 0x64, 0x0, 0xff, 0x29, 0x0, @rand_addr=0x64010100, @remote, {[@timestamp_prespec={0x44, 0x34, 0x7, 0x3, 0x8, [{@loopback, 0x8}, {@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x1b}, 0x8001}, {@loopback, 0x8001}, {@local, 0x6}, {@local, 0x87d}]}, @ssrr={0x89, 0x27, 0xbc, [@multicast1, @rand_addr=0x64010100, @broadcast, @multicast2, @rand_addr=0x64010102, @private=0xa010102, @multicast2, @dev={0xac, 0x14, 0x14, 0xb}, @remote]}]}}}}}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000440)={r1, 0x1, 0x6, @broadcast}, 0x10) (async) flistxattr(r0, &(0x7f0000000480)=""/130, 0x82) (async) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r2, 0x29, 0xcf, &(0x7f0000000540)=0xfe, 0x4) write(r0, &(0x7f0000000580)="12317428aadded8702504d21b7a866edbb1c9f8e8e488d60d43caa0f31739bd704abd56a0739671204de5d02cb4262647fd37e745dc073a731be0f6d9eb6e332d21378bf42a8436c7cb40426d2851ee3457d752abd631af07badb57c1eeaae50e93e99c5cc76d1bd86b730454ba4fa69d4bd130d93aae80df4468ecb1bf04a793bc125d2ebaa3f2ea609c742827f6d2802e5f7df02a9948cebecf195718726ac03f85b191e5da701a24d61186dcd2d353a", 0xb1) (async) r3 = syz_open_dev$loop(&(0x7f0000000640), 0x2, 0x210100) ioctl$LOOP_GET_STATUS64(r3, 0x4c05, &(0x7f0000000680)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f00000007c0)={0x7, &(0x7f0000000780)=[{0x2, 0x40, 0x8, 0x6}, {0x0, 0x1, 0x3, 0xfffffff9}, {0x9, 0x7, 0x3, 0x1}, {0x9, 0xc9, 0xff, 0x7e44}, {0xc, 0xfb, 0xff, 0x8}, {0xa, 0x6, 0xfd}, {0xd, 0x4, 0x4, 0x3}]}) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000840)={&(0x7f0000000800)=[0x0], 0x1, 0x80400, 0x0, 0xffffffffffffffff}) ioctl$VHOST_VDPA_SET_STATUS(r4, 0x4001af72, &(0x7f0000000880)) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r4) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000001e80)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001e40)={&(0x7f0000000940)={0x14ec, r5, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4c}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x10e2, 0x33, @data_frame={@msdu=@type00={{0x0, 0x2, 0xc, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {}, @device_b, @broadcast, @random="e9e9792fe3da", {0x9, 0xff}, "", @value={0x8, 0x1, 0x1, 0x0, 0x7}, @value=@ver_80211n={0x0, 0x80, 0x1, 0x2, 0x0, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b, 0x1000, "4877877be377f00728f277cc1ffa6bdfb4a642bbe910b1df602595bb9ee2e1fe3f22289eb14d87bbc431cc2b74691391e60b7337eace28134c62325cd7305d2bfcd7b99988d19cc4bb66008ad129eaa212ab9eb2c8eee469613741a68746691a37e886e6dda4b6aec7340746b7987c06f8bb3db70a079591e6f9375987822396f7fb38c9c3f0871fb73b008e67a3c6a55b37574a6921b8443a29eec91d5cfad91a2c28b634c51a55ac9172a4be65d14c1dc108d0bf191d3c4e9154732e76eb186a9c976428cee2957a3c722f460fb76de654a61641a41f88f49b811b77b9f6916995e80e05e0772a301c9020679a1ede9cd8febbde658c8c037cd81753f7a27e4caffb47760f907a979e2636d88a92bbf68accc32dbdb155e086bcc9fd7ccc6e99a6f641ae60d80534e700fe0a19894764620c94f59b7dab0457279b525f9b23f5c82ef610c34eb19aa29a7fd4d8f67c55e0a6d944b02fde17b5d0ccde9be7888807a6016a860f494d0ba4af5edba99ebcd348854ce2c0818d378cd0ccb935fa195b6960cfece05cec3e25924cac45933d8ca5ac63bb698abcc139ab04adf5fe9cdc4136c134cc0c530e9dbd72f6eaa0f28455c84611073078acca95f607fa7299581f5be831156823bed93ed1f8f71593ada858a5fde1222d33e602e958c006b73c7839046aeffefd82f8b743652ae38b79c1e6e5d90d9b74d2f5fe11b20d4b5a80ab2643aa2cf63473b2f2e94d0597140e8a68119ebb9fb78ca90b257f50cac52554a8c2e56842846bdf6f919c3cefaff1f324471dc6dcad417be2d289e1e39b4e9ec526de85f7dae831670d44c71c1b808b4ead3a39ab40025494f98e053ef3dc5c8a5035b757d08e82f0c64a7a9c2fcbc290111c666f6ee2c6439140dae9c1e572fad2d49d85b25a62013adf4a1c068d92532ff7002dbf1e9bfcc3aad8426bf6262d7dff8024f0bc4b0ad5ef5008a93b8e0a25a59e2e4395b52503db112288786b336dfcc0cf6580f3812d720ef22dd60f29627dc3fb615a1760c0f48eef11cc766b482c1d985e2dc14ea6affd1b3d0f87e15abcae2a28eb4b16133e3e440fb42ff5abff2eb92ce677b363e2ff2a0c63516a3f60e67b8788e6e168d4656f34ac72b337f33436dc2abcef1bddec361f6c3b964de16e5dde05875729882da68598fff905be47f7f93e61e37cf1677dbb9a0a7d2bb36b8873b200855fafc214cb17c8025d3eb4d04a67392c1f8c49fcc9c0a08948018b98de8d577f6c93b81442250d71f1ea219b576fe0d15d1b873e4bcd796896507fa2dcd9f6b560d50340e43483a3167da89bd05a9d6fd4b9262d2311cf6adeacdd97dac1892aa6bd77d810503cf99134efeb39e8451301ad79cef5d1fdb8152d7e4d07f251bf3b636d274d9737de1643daaf3a86ed630c0688cb7cb679d927b2b7d95997d9c6fb9cae99f77f46481627c90239c5a8bd0cfede31c9657d7606b330a765f67b6eba5d5499832bbe399c55c90a3961c6b7da60eaf91cdc0418b118166169c22da547dbe3a47397a540003cdf6bdfd6bdcabd536bb920467ee5d21259bccaee3c7296893cc2fe66c04d2757a99ffb26a5e9d26447d622567fd9a119de6b5df3735eab70570e211d69626fb1430f03bdfce91ca98268053649548fb7c7cfdcd351b35b3efe228dea93a0471b47598b0e4103f927f11fc0708231dd5029e99d25ef97fedaf81a097f9b1fa09504ae255cb150742159a7a4d2e14d16f7a45dcdff2bd653db963ab368cbd08cb3b330a869f38b9f867f73b5e0ea66d6167099cdd583b00de449f3c1a2e4f6d8a7d7a896a5a1aeb54ba558d4868a6bedb4550d98eeebac981d2167a93598ea73c68296275978a9e1c850826f925521b75f502a6450c287ac6850fcc593484d45ceb0748e2b11d45544f721b4fa7900fcaf6608572aecd009fb987b6e4f3c2ae500cb86a241a2a05596b449264fd100ae0ed33028e2080ebe38d47b829509b7cdd54fba9619e28e3b98a7767b5db3b643dd0e22148b1426714a4f0700052f4e13d7aec00e3db7cda4c2bbb9bd9767be53b2a4ba0c8b94a0b3bc3bbd368872e06f91217450d6510e2448d6c1daa908e3212b2de33c7ddc1ee32c359bccb143d2383792fbccaed188f1db1ae2082dd062200c55900a9e1f5360a2c663a8388400e47eb141f46b45586a34126c05910dc2a3b63eb16a1fcf486b2d24b5a911801b9fdc9f8ef5dd02ec5a12ec1638a7eead18f11489887818b30c4ef09d19a7716c64910e8ab151b3cf8e3534ccb23e6c6ffffda70a0c68f20c7003deefa0fa438f27c6b1a0ce00e8f8cfe82d61e0ecc643de15a8317d1eb05dfda92f3875e5896d5577180c92ef99e26ea831f15787adbacfe337b97dc3bf2a6a1f3c1a0d209db4f22349edf8d156d179dd036f4e7fea01616d9378af4ab04d57e185ba207de58e16fd529fe0b1746705fa925e13b66213f94efd7e67c435fd7e7b57f8df430c7895653b31a03966f8c766953bd21606d289ff076fcf1e612cc7f0fea7cc9bce177d6865e09f4ca1187b52c187d42b6a61510e684f66e3024333634e1ceca0b1ad58a865640e1b6f4369c4d4c8888a5f9613443a6d8e20b456c8f04d9f7f04777b60cc22bcf37b04b73a8bc1a67e030e4783d52bdc603502c1b3d728f56f97354516d7a53dafae16a758165cb3762a6531447cd3498eb9ac8116f04fd69778d6390960abcf8af5c791264e2c9fcacb0640cda6a27c5d5476464abea4f7849fd4f3898058c6e58e98146f6140f01586219a63592ba118e4a25fcd115872bf8aaacf022cf335ba51eb05e30c2aac0af17e949de92e7a81e8bf329fda7615f31d6d2fe9480994974a52719625f1d25593fa5055a38750bcb55fd743176e9641016519a937c015ac86eb05ef82a9bb3f335922ca2122726c33ed55d5b70ff710460bdaf37282b826b8f1268b092429c5f584d3d9868ba1e1eb3953709e60a17acc5c97cea640071b60a9a531e2d255cd4f669887b65c2d5a13cf655a00ef6adf0204f2c535161f48a58d6df5c6442e877c5ad9fb55880f5d7ff682d57ccc05c4f746050de40bc82690a506930207877d8526ef2b1eea3448a2a9d3df16eb45463b376bd2dc3154ce1123047c7e8b5736f10fd3f0308a642ed79b08184d51e1eb5816496015fafaa100dd7247fa73395e86cd88e5ab5d70546aaee8af1344a091935ed40cb5f5c0691bcb2edbd1cbcd9ca1d83d13210186585774bd90d240fef2f247ed739f9180211287d8b44786bc152b03c6863db06f605dd342e6753dc93924c2701f1cc10324e09af24f671523ae725a0428f1f0ea7d5cb670a2e202046cd26d1a3815b82cda47e400b905d932b8809fe596d5150f257c8c70962f8a9ff09c67e300ed97fb79fc2c4bb71b88c395496455002d847d024be9c0d043e230ce382ab38160b9972bcdc25f47a945548f248d594a485199e9dbe76ef7e1a2868bf40186bb4edbdeaf4d5ae35fa1bd6a495482bb40feb89189d1d2d7dca574faef6b3626aa956e3a12457ff31f7501c70b518a5bc6345e88b34e81f46396d10bb235bfd7e9917be8651bfbd536dcb20e6b98d42c7aae325314e06215ed80c8506d709461be6be7e715f06ce41fd0c35685148cab479f40a964c47255ea0db94647c0fb06f379726bc14b63b74e112147bab7b860594d9643ece3133acdc57d09401ca2444d31858834d0cd4c9693b457976722c3bdc06575e13a1f2718279b1a341e99491d56ebc19511827cf33feac9d34abe3105235f032f66510102c713980aa02357c783e6ab35f47275caf56ca826530b043a0d019b82652033fda84bbf20ebbb5cff8a506dfa93811851ca3670d6f28d883d187b36f17fb2b4e44e0b9c6c4e4648f0571e0137173fc89d21d3fb764a45317b33a5ccb908c75470eb7ac5be5257983fd1fd8519595515f76a1e4e90d825ebf6d4c5c48b0fefdbec2222f84aa303a608ab02016437e5de9478d8ff417d44849249d016beb1f9843170b1aeaf9c5dedc0419ae2aa4237ba4f5e4718cc1448e1b150eac7d6703413ca92b1b3da198bc4154f0d005fb712ef0b98931aab1859b5654fb8dddfa98d5e1fd792a74adf5496624f4087886812d46e9ee4b14637e52086cec64b1f685469f1310924ee96badd4dc72783e3ca59a16818eac10b64a54b49b86d6307ec651458ccf9d97a936d4419f239dce36766da38d7da0440bfd15232149976ea86041748db6a270c3dd58d76d414f5331dca69cf6d11a0e5d0a3477675d4214c20d7100c7f51a234a1fdc79235cbd19a7c680ffeb5400aea4caba1e0916be76000c74df699f1aa43925fe139d1b27511e5f34e7ca98c6b4dcc5e43a5c13d8cd2360fc1830872c86b77a3ef1a0183e25b3ea418f93238bd0039f723211fc94d302b369a512069f94d8cec32722c3950e2d2456aef7ca11d4bae45067347a222e0c2cdff70d4e8018a3f7a17204d36cece4b8dac2ee22d17bcd68a9b36a3f8a54cfabdfde127e52b71423ed899f83987968220a27a1378c4dba7f6142ae40a1467f7042667e6222adeada9f27dce40a134d538fba70d2491419c562b057f681a16028e7e02d4f20f22d908efa91dd62e876c03f85733a53d72ca6fdbb0d5d7435b851ecd30e3051c4109286bca5c200a16be95a205792878f540a537d494d14e36bbaf66b74a7560f6a5a9aa2b31ff657ae11919172c0ac79cd01a9cf9b507a4f4c399d89d8845f9ba94154f9bc3c275a311fface25704e912b0a91e23c0cd3deb2393150474f8f70f57d137f51fa5e3a786402d056f6ffad27378e20638f0c45fd2ad318d1175ebc04e554eb27648065ac5a0617749d3297ecfc40c60f064f57fc7d0bf1de091dcb319c44bdcd085a2e783b50d5b2940b240ba24ef2983bf0ff8ca95ea352cc653de676c0b6338e46acc7ae610bffb00cd4337620f4135ac204bc13357d339b46e709532b97a4506f08329d6fd1de685394607fa8ebd6f69f597dbd5f529605794d32ca8bda2d859bb0db52687e51aa51080e655712337c028f77bd3ee6fff53a20b6385bf290d70b4b59c95e83d914eb520c7f8dbbfc4a7e9ec7ff961f481541605725e90710daa3ac1be2d6945af292bc95edb8bc470e40f957b220b2c34f9398b0f773b54ef9167b9533292cb447ee243bbf8b2c9610606e36ed337c7f71ab38c3254b1b3b8ad01a952212ada1a7dc2b81f92fa0fef021b3d6987246aea113ea121bfdf0ee4d3c03324e0caf2559e9115ab3de66ba61db6ce1e1d062ec5238e3e2cec971c62d3a2e13d358567d7491102246ddf53055bc52c997957e4a7fd8b0dbd4f835c78037a6cd86e623900517145fb31685d73eb52eb4127b8240212f77c84df9387f6f7ff77b87e5008a225333bca40d3a1adecc1b211db8e6e084583be29d8d24064d9f4fd2f777afb9491943e628e8a3e912887b6441a98bc30a0708f29b6a1f995f32f56f07750949abfc6e1744e0f66485006c0e08b5d4d4acb6a34f2c9a6e8e47afacd2b1e278454acee7a30474bd0253dc72368b9eadc41a57488ec6623e3c8c681e8fc87eb63d2bfb783a7cf4e66bb5ca1c5432abeb320133857ce6e2dbed164a62d3c156a7b6fd424ef4a40e3a0dc21bee4c739e43eea4caee8e7e333051189c43c0f4b23759ebff601b60ef2cf0c2633758f6fc397ddc30a6058721f569c0cb58bccfbf1a0b8d17b5ad1c9af74c16d83423c988b42cbdd058b09470d38e216d2d5a04f83e165b452b1a07409174706f0c90da2b47ccff503"}, {@broadcast, @device_b, 0xb, "8617b83b99229a8a6ed588"}, {@device_a, @broadcast, 0x8, "ec8424b631864ab4"}, {@broadcast, @broadcast, 0x1c, "09d04482abb08d41377f426ae77889b77411628a8b0a2ce5a1b0ec2e"}, {@device_a, @device_a, 0x31, "f0e7c0035ebbe7687178f25b4c508963eddea90d7176a0198d27d7f6b852fff0715940daf264b851f77b2bf6c53c80c825"}, {@broadcast}]}}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_FRAME={0x3cd, 0x33, @data_frame={@msdu=@type01={{0x0, 0x2, 0x9, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x2}, @broadcast, @random="cd9069e199ac", @broadcast, {0x7, 0x1}, "", @value={0x0, 0x0, 0x1, 0x0, 0x9}, @value=@ver_80211n={0x0, 0xcc, 0x3, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, @random="7d0ed08696ba49dd15a07b2af252810f59b7491e12f165dcb2f7729d1ab1d7944781a1a722068ae1e15df3b0c8f0b3b35699e4f1f3a67d4804f3f37e9e37906bebeae82dff920a8cc5e1f82707872aaa664b4352b5f0064287f9e3450aa396920b67f1fd2493c04b052148fd5ad9797cbb976dedd845663a913ae66c581d3f6b09620243897cee43d61f695d335dd39ed381b5709775d679bd761976295ca352b79e0ba1ee1b1522b86b351be18a2e0381c890377e510d281c9c86eef321c2badcba09a37831f3172c7eca3978f19e88ad17b6ffeb4ffaba394680cf60d94217189dae263f77cc964c6322907bb256ba0ff96743cb013646ce31557dcf047c755b8d0069bbfbaae5d947d5f3f8a4cf7c081ed314b1556d6af14df74a981f115373ffe586347c6dd5b1d6e6bdddfd51b3b5056668e00745752e8f45da94fcf6c43c1ad6f43c171c1c07faf4aa8c90079d921f5f789dc229e74fcf41509a27dec6b61cd6104da691bf130354b40fba1757ff8eaa2d95b0d68c280aac524568125c938e6d0d3c5b27cbeee3eb87e161358771f92c0fe63ef8bd39d9ba1133d8695ab68cbd4f923200454f45313aaf436490d7db553c2738cfc524ba95a638ea5a73852d791e78b6d05092041410a66733244567c535891ae2df45bf71546b68d85e8c0bd29d685cc8ed16859709334eb7ec248a144f3fcd9ea38d04b52281ec0c9794025d1f95c27d623d936dd646f4ed07270e8ee2c8386962ce9e71b72b3900e073277ec5c121c349b5cfe32aa4cbbcb4336e2034cd761ce27d110a4d4372cf83f790187dc2e6300242bef92673409002dca94ee73b5031ac6d53234b124e3b84ab63a5f632e7a03e87cbf933a31b36377e003ae902b38243b686a16f66e74e5fd9a036cc341f91b8e91bbb7542f81b69f5787f60b4baa32cbee26289bf71cd21715a272ba2f0cabe9e3101c2995d82d0a5f9de72409974883f328a3cde45d570f8c8d979d0e883d4e66db7f080b167160af21b5164def0618a79716c2ee5d23c8647aa4eb1775eb8ffaf1da5b13f07ace0427b6a133fd6856430fcc066d7a06f8b302b026a54ef570fc22096acafef8e5f2539dc70a2eb99fec38260f808afc9c130b20714bb4f95e199d8e9a8c9c2adf829266915bcdcfd90359e4403e6e3d451e2945fab990c6845a0a285ff992ddf7c5ed4e37ef92cfe33983cc82befb5ec8fdc1309e2e5350bf342461cf0e1cb43a37e77564ba051918c7f159252b46eaa3663866e666f8834199d437f6cb79a04653f0917d37995c0472ff54f7138bc5883cc6cbc78d0d6ab27b38c"}}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x48040}, 0x40) (async) io_setup(0xbe, &(0x7f0000001ec0)) (async) sendmsg$AUDIT_GET_FEATURE(r4, &(0x7f0000001fc0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001f80)={&(0x7f0000001f40)={0x10, 0x3fb, 0x10, 0x70bd26, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x404c800}, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000002000)={0x0, @in={{0x2, 0x4e20, @rand_addr=0x64010102}}, 0x10001, 0x6, 0x1ff, 0x7, 0xe}, &(0x7f00000020c0)=0x98) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000002100)={r7, 0x2}, &(0x7f0000002140)=0x8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000002180)={0x2, 0x0, 0xe50d, 0x9, 0x2, 0xfd, 0x69}, 0xc) (async) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000002280)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002240)={&(0x7f0000002200)={0x24, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_I_TEI={0x8, 0x8, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4801) getsockopt$TIPC_SRC_DROPPABLE(r4, 0x10f, 0x80, &(0x7f00000022c0), &(0x7f0000002300)=0x4) (async) ioctl$XFS_IOC_RTGROUP_GEOMETRY(r4, 0xc0805841, &(0x7f0000002340)={0x4, 0x7, 0x21, 0x81, 0x48}) (async) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000023c0), 0x200, 0x0) ioctl$CDROM_NEXT_WRITABLE(r8, 0x5394, &(0x7f0000002400)) (async) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000002440), 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000002500)) 2.551516137s ago: executing program 5 (id=1289): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000002f0089002abd7000000000000400000005001180e7000000"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) 421.181161ms ago: executing program 3 (id=1290): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0800002c0007012bbd7000000000e5087c00000c00018006000600843b000009000280040071008c0000000800e400", @ANYRES32, @ANYBLOB="2d0529800c00f800030000000000000004006080fa003b800400df00c1becb03dbe55b6c782cebd6a7bc78a21d1bc9f3c1bd441ada5266780599eaf18965bbfcc07c2037129672275c399e1e03f8a0664d807385cc4d566f230400db800400498096d9641e8b1887b25501b11ecd71313a47df368b078d7b825bff33b9eab3964d7b2394b1950c7aeaba6014fe2cd33c89fd070ce0f1f306494a44adf6609d8ad55a5080b36b"], 0x85c}, 0x1, 0x0, 0x0, 0x24048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x4044091}, 0x4010800) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x0, 0x6bd5, 0x1000, 0x2, 0x23a}, &(0x7f00000002c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6aed, 0x200, 0xfffffffe, 0x12f}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x186a, 0x4, 0x3, 0x8}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xd782, 0x80000, 0x2, 0x230}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x102c, 0x2000, 0x1, 0xde}}], 0x4, &(0x7f0000001900)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x2}, 0x0, 0x0, '\x00', {0x1, 0xc7, 0x0, &(0x7f0000000900)=@buf_1k="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"}}, &(0x7f0000001980)) io_uring_enter(r0, 0x2f12, 0xfcd0, 0x1f, &(0x7f00000019c0)={[0xa000000000000000]}, 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee0800080e408e8d8ef52a98516277ce06ebace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad8099639cace81ed0bffec193e2a9ecbee5de6ccd4d6e4ed6f3d93452a92954b43370e970189", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') sendfile(r1, r3, &(0x7f0000000540)=0x93, 0xb) process_vm_writev(0x0, &(0x7f0000001ac0)=[{&(0x7f0000000580)=""/253, 0xfd}, {&(0x7f0000000680)=""/43, 0x2b}, {&(0x7f00000006c0)=""/212, 0xd4}, {&(0x7f00000007c0)=""/227, 0xe3}, {&(0x7f0000001a00)=""/162, 0xa2}], 0x5, &(0x7f00000030c0)=[{&(0x7f0000001b40)=""/111, 0x6f}, {&(0x7f0000001bc0)=""/41, 0x29}, {&(0x7f0000001c00)=""/248, 0xf8}, {&(0x7f0000001d00)=""/175, 0xaf}, {&(0x7f0000001dc0)=""/94, 0x5e}, {&(0x7f0000001e40)=""/203, 0xcb}, {&(0x7f0000001f40)=""/230, 0xe6}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/68, 0x44}], 0x9, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) sendmmsg(r4, &(0x7f0000003500), 0x0, 0x0) 420.94361ms ago: executing program 5 (id=1291): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x25dfdbfc, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x89}]}}}]}, 0x3c}}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) (async) 371.751626ms ago: executing program 5 (id=1292): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x94}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ad432bbd7000000036960f"], 0x14}}, 0x0) 371.377644ms ago: executing program 5 (id=1293): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x2800000, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000dc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fedbdf25210000000c000600010000000100000024002d800800030000200000050001000700000008000200030000000500040000000000"], 0x44}}, 0x40004044) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x3505c, &(0x7f0000000040)={[{@uuid_auto}, {@workdir={'workdir', 0x3d, '.\x02'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) r2 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000700), 0x8000, 0x0) ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000340)={0x7, 0x1, &(0x7f0000000240)=[0x0], &(0x7f0000000280), &(0x7f00000002c0), 0x0}) chdir(&(0x7f0000000000)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x2) write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000140)={0x10, 0x17, 0x1, {0x7, './file0'}}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) mkdirat(r3, &(0x7f0000000280)='.\x02\x00', 0x102) renameat2(0xffffffffffffff9c, &(0x7f0000000100)='.\x02\x00', r3, &(0x7f0000000000)='./file0\x00', 0x0) 368.353777ms ago: executing program 2 (id=1294): r0 = open_tree(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xc8201) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "00b147fbbfc100", "d6dc09ff", "16de86d67a8426bd"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f00000000c0)=0x80008, 0x4) pselect6(0x40, &(0x7f00000001c0)={0x3f, 0x0, 0x3, 0xfffffffffffffffd, 0x4}, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$ublk_chdev(&(0x7f0000000080), 0x0, 0x80) pidfd_getfd(r0, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xc0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001300)=@newqdisc={0x105c, 0x28, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xfff3}, {0x0, 0xfff1}, {0x2, 0x8}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x1028, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x8000}, @TCA_TBF_RTAB={0x404, 0x2, [0xa3, 0x1, 0x80, 0x7, 0x400, 0x7, 0x6, 0x1, 0x84e1, 0x9e1, 0x5, 0x6, 0x2, 0x800, 0x8, 0x7, 0x5, 0xb31b, 0x6, 0x8, 0xb4, 0x8, 0xee1, 0x1, 0x3, 0x5, 0xfffffffb, 0x7f, 0x3, 0x3, 0x101, 0x9, 0x8, 0x6, 0x3, 0x1000, 0x1, 0x0, 0x6, 0x2, 0x71c7, 0x5, 0x1, 0x6, 0xed2, 0xbd0f, 0x5, 0xd, 0x8, 0x1, 0xa, 0x6, 0x3, 0x2, 0x9, 0x0, 0xe0000000, 0x9, 0x80, 0x100, 0x1, 0x9, 0x6, 0x2, 0x40, 0xe, 0xa, 0x0, 0x2, 0x4f39, 0x2, 0x7f, 0x9, 0x5, 0x4, 0x8, 0x9, 0x4, 0x9, 0xc, 0x7, 0xb32, 0x7, 0x0, 0x1, 0x7ff, 0x1000, 0x1ff, 0xb9d8, 0x40, 0x8, 0x6e38, 0x5, 0x1, 0x2, 0xc5, 0x5786, 0xd490, 0x28000000, 0x5, 0x9d, 0x2, 0x4, 0x270000, 0x9, 0x8001, 0x0, 0x6e5, 0xfffffffb, 0x9, 0x2, 0x8, 0x7ff, 0x1, 0x4521, 0xfffffff7, 0x9, 0x9, 0xb9db, 0xa, 0xfffffff9, 0x40, 0xed8b, 0x9, 0x88, 0xe072, 0x800, 0x2, 0x4b, 0x7fff, 0x81, 0x0, 0x4, 0x4, 0x9, 0x2, 0x0, 0x0, 0x2, 0xece, 0x1, 0x9b3, 0x0, 0x2, 0x7, 0xfffffffe, 0xff, 0x6, 0x7, 0x6, 0x6, 0x5, 0x800, 0x80, 0x401, 0x2, 0x1, 0x5e53, 0xf, 0x642e76cb, 0xfffffffd, 0xff, 0x2, 0x6, 0x1, 0x40ed, 0x1, 0x101, 0x6, 0x5, 0x6, 0xa, 0x200, 0x5fb3, 0xc0, 0x6, 0x2, 0xfffffffc, 0x4, 0x0, 0x8, 0x81, 0x3, 0x8000, 0x60, 0xf, 0x8, 0x38000000, 0x14d7f742, 0x8, 0x5, 0x9, 0x6, 0x6, 0x2, 0x800, 0x0, 0xb, 0x1ff, 0x2, 0x10000, 0xfff, 0xb354, 0x7, 0x2, 0xffffffff, 0x9, 0x7, 0x13e287e7, 0x10, 0xc, 0x40, 0x4, 0x6, 0x4, 0xffff0ca5, 0x1, 0x3, 0x9, 0x3, 0x9, 0x8001, 0x7, 0x1d, 0x55, 0x6, 0x7, 0x100, 0x16d, 0x1, 0x5920e84, 0xffff1fc8, 0x9, 0xe7, 0x5, 0x1, 0x9f3, 0x1d, 0x7, 0x7fffffff, 0xa632, 0x7, 0x24, 0xffffe89c, 0x80000001, 0x9, 0x8, 0x5, 0x5, 0xfffffff1, 0x8001, 0xd3, 0x6, 0x39, 0x5ae]}, @TCA_TBF_RATE64={0xc, 0x4, 0xa3aac32288a24c66}, @TCA_TBF_RTAB={0x404, 0x2, [0x0, 0xaaa, 0x7, 0x0, 0x2, 0x7, 0x0, 0x7, 0x800, 0x2, 0x3, 0x7fffffff, 0x8e0, 0xfffffffa, 0x4, 0x1, 0x1, 0x9, 0x0, 0x3, 0x5, 0xe253, 0x10001, 0x0, 0xec27, 0x40, 0x6, 0x2, 0x3, 0x2, 0x708, 0x8f, 0x10, 0x2, 0x1000, 0x9, 0x0, 0xfffffe01, 0x7, 0x8, 0x5, 0x4, 0x10000, 0x9, 0x8, 0x6, 0x8, 0x1ff, 0x3, 0xd53f, 0x5, 0x7fff, 0x9, 0x4, 0x5, 0xff, 0x8, 0x3, 0x9, 0x3, 0x6a0, 0x2, 0x8, 0xff, 0x6, 0x9, 0x7, 0x2db8, 0x10000, 0x3, 0x5, 0x7, 0x1, 0x9, 0x4, 0x1, 0x549a, 0x6, 0xff8f, 0xd9, 0xffff, 0x5e, 0x1, 0x54, 0x5, 0x4, 0x401, 0x25, 0x5, 0x79fa4a4b, 0x8, 0x1000, 0x4, 0x2, 0x8f19, 0x4, 0x81, 0x80000, 0x6, 0x0, 0x3, 0x7, 0xffffffff, 0x80000001, 0x0, 0x1, 0x657, 0x5, 0xfffffff5, 0x0, 0x1, 0xc766, 0x10001, 0x0, 0x2, 0x0, 0x1, 0x401, 0x1, 0x7fff, 0x800, 0x1ec, 0xa, 0x7fffffff, 0x8, 0x5, 0x7, 0x7, 0xc6c, 0x7, 0x400, 0x8, 0x5, 0x626, 0x3, 0x400, 0x8, 0x1, 0x0, 0xa, 0x7, 0x2, 0x0, 0x10, 0x5, 0x9, 0xffffffff, 0x8, 0x9, 0xa, 0x2, 0xad, 0xa, 0x18c, 0x0, 0x6, 0x12ea, 0x2, 0x9, 0xd6, 0x2, 0x8, 0x8000, 0xc65, 0x4, 0x5, 0x5, 0x7, 0x8, 0x1, 0x3, 0x1, 0xffff6e06, 0x9, 0x3, 0x9, 0x6, 0x19, 0x6, 0x800, 0x5, 0xa0, 0x8000, 0x97, 0x3, 0x3c2, 0x2, 0x6, 0x5, 0x0, 0x0, 0x6, 0x0, 0x0, 0x7, 0x90, 0x40, 0x4, 0x80000000, 0x74, 0xfffffff8, 0xfffffffc, 0xfffffffa, 0x3, 0x9, 0x56f, 0x9, 0x0, 0x7fff, 0x6, 0x2, 0x2, 0x3, 0x95c, 0x4, 0xd, 0x4, 0x7, 0x80000001, 0xa, 0x6, 0xff, 0xfffffeff, 0x4, 0x3, 0xf94d, 0x3, 0xffffffff, 0x100, 0x7, 0x48c, 0x0, 0x3, 0x7, 0x4, 0x2, 0x3, 0x6, 0x4, 0xc98, 0x1, 0x9, 0x8, 0xa, 0x9, 0xfffffff9, 0x7fffffff, 0x6, 0x1, 0x9, 0x8, 0xf, 0xfffffffa, 0x8, 0x1, 0xa83]}, @TCA_TBF_PTAB={0x404, 0x3, [0xb105, 0x10001, 0x5, 0x7, 0x9, 0x15, 0x8ae, 0x3, 0x5, 0x71ef, 0xc, 0x3, 0x1000, 0x6, 0x2, 0xa, 0x8c28, 0x1ff, 0x3, 0x0, 0xc, 0x6, 0x2, 0xd, 0x8, 0x10000, 0x5, 0xf25, 0x1, 0x6, 0x4, 0x3, 0xb, 0x10000, 0xffff, 0x0, 0x9, 0x7, 0x3, 0x7, 0x3, 0x401, 0x2, 0x101, 0x6, 0x9, 0x3, 0x1000, 0x3, 0x1, 0x9, 0x2ad84a96, 0x80000001, 0x0, 0x5, 0x0, 0x9, 0x7, 0x6, 0x4, 0x5, 0x10b9800, 0x3919, 0x1000, 0x2f3b1f20, 0x7, 0x9, 0xff, 0x2, 0x4, 0x8, 0xb, 0x9, 0x1, 0x86, 0x0, 0x9, 0x1, 0x84e, 0x2, 0x1, 0x8, 0x80, 0x9, 0xfffffffd, 0x10000, 0x200, 0x5, 0x3, 0x8, 0xff, 0x9, 0x7, 0x6, 0x8001, 0x70, 0x3, 0x8, 0x80000001, 0x8, 0x9, 0x806a, 0x8001, 0x7, 0x3, 0xd, 0x3, 0x6, 0x2, 0x80, 0x8, 0xe6b, 0x200, 0xc7, 0x6, 0x4, 0x8, 0x8, 0x4, 0x2, 0x1, 0x4, 0x4, 0x5, 0x2, 0x6, 0xfffffffd, 0x0, 0x1, 0x4, 0x9, 0x8, 0xfffffffa, 0x5, 0x4, 0x81, 0x5, 0xfffffff7, 0x0, 0x400, 0xffff903b, 0xfffff4c6, 0x7, 0x3011, 0x6, 0x0, 0x8001, 0x2, 0x2, 0x5, 0x70000000, 0x6, 0xd, 0x2, 0x0, 0xd, 0x7, 0x81, 0xe, 0x7137f1b4, 0xe17c, 0x9, 0x101, 0x40, 0x7, 0x7, 0x2, 0x101, 0x2, 0x1000, 0xf, 0xff, 0x811, 0x9, 0x80000000, 0x2, 0x3, 0x6, 0xc, 0x88b7, 0x5, 0x4, 0x9c6f, 0x8, 0x4, 0x1, 0xf9, 0x6, 0x0, 0x7604, 0x33, 0x10, 0x10000, 0x3b, 0x8, 0x6, 0x6, 0x1, 0x8, 0x0, 0x1bd, 0x6, 0x1, 0x1, 0x1, 0x3, 0x30, 0x5, 0x0, 0x7, 0x2, 0x3, 0x0, 0x3, 0x0, 0x200, 0x56f, 0x0, 0x8, 0x9, 0x6, 0x9, 0x0, 0x6, 0xf, 0x9, 0x1, 0x6, 0x0, 0xe31, 0x8, 0x5, 0x36, 0x8, 0x3, 0x3, 0x5, 0x8, 0x9, 0x1, 0x4, 0x4, 0xa, 0x8, 0x6, 0x3, 0xfffffffa, 0xd, 0x2, 0x40, 0x4, 0x401, 0x8, 0x81, 0x2, 0x1800]}, @TCA_TBF_PTAB={0x404, 0x3, [0x5, 0x6, 0xbe1, 0x5, 0x2, 0x7, 0x5, 0x7, 0x9, 0x5, 0x2a7, 0x1000, 0xcd, 0x6, 0x3, 0xfffffffd, 0xffffffc0, 0x0, 0x6, 0x2, 0x736c1724, 0x100, 0x3, 0x3, 0xc, 0x1, 0x7, 0x9, 0x1, 0x10, 0x401, 0x1, 0x10001, 0x7, 0xa, 0x0, 0x80000000, 0x4, 0xbd45, 0x1, 0x8, 0x3, 0x1, 0x1, 0x3, 0xfffffff8, 0x4d316448, 0xf, 0x9862, 0x5, 0x7f, 0x3ff, 0xff, 0x1, 0x4, 0x4, 0x6, 0x5, 0x9, 0x6, 0x7, 0x10, 0x1, 0x0, 0x6, 0x5, 0xfef, 0x65d, 0x8, 0x2, 0x80000001, 0x7, 0x8, 0x4, 0x4, 0x6, 0xffffff1a, 0x7, 0xef, 0x0, 0x2, 0x401, 0x8, 0xffffffff, 0xc774, 0x5, 0x269, 0x3, 0x0, 0xdc97, 0xbfe, 0x3, 0x5, 0x1f, 0x6, 0x5, 0x800, 0x4, 0x81, 0x80e, 0x100, 0x4, 0x7fe0, 0x10001, 0x1, 0xde, 0x4, 0x2, 0x2, 0x3, 0xf, 0x9, 0x2, 0x511, 0x6, 0x80000001, 0x0, 0x6a, 0x2, 0x2, 0x9, 0x3, 0x9, 0x80000001, 0x0, 0x2, 0x0, 0x800, 0x1, 0xf, 0x1, 0x9, 0x9, 0x7f, 0x4, 0x8, 0x4, 0x2, 0x0, 0x8926, 0x0, 0x0, 0x7f, 0x9, 0x7fffffff, 0x4, 0x6, 0xffff, 0x9, 0xf, 0x5, 0x1, 0x3, 0x0, 0x80, 0x0, 0x50, 0x1ff, 0x1, 0x80000001, 0xffffffff, 0x10, 0x4, 0x4, 0x1, 0x2, 0x45a95d62, 0x6, 0x1000, 0xffffffff, 0x20000, 0x0, 0x8, 0x8, 0x9, 0xff, 0x9, 0x2f, 0x5, 0xfff, 0xe39, 0x9, 0x6, 0x8001, 0x6, 0x0, 0x800, 0x8000, 0x8, 0x7, 0x7ff, 0x7, 0x3, 0x3, 0x1, 0x7f, 0x40, 0x0, 0xfffffffd, 0x1ff, 0x3, 0x81, 0x6a, 0x1, 0x7048, 0xa87, 0xfffffffd, 0x6, 0x5, 0x4, 0x3, 0x1, 0x8, 0xffffbd97, 0xface, 0x0, 0x7, 0x0, 0x9, 0x3, 0x3, 0x7, 0x4, 0xffffffff, 0xb5, 0x4, 0x81, 0x92, 0x7, 0x8, 0x2, 0x8, 0xc58, 0x612, 0x8, 0x0, 0x5, 0x8, 0x1, 0x5, 0x5, 0x6, 0x7ff, 0xff25, 0x9, 0xffff, 0x3, 0x1, 0x8, 0x3, 0x1, 0x0, 0x5, 0xffff, 0x518]}]}}, @TCA_RATE={0x6, 0x5, {0x0, 0x11}}]}, 0x105c}, 0x1, 0x0, 0x0, 0x40098}, 0x4000000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000001010400000000141a000002000010240001801400018008000100e000000108000200e00000010c00028005000100000000001800028014000180080001"], 0x50}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a1b000000000000000000050000000900010073797a30000000000900030073797a300000000008000a40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60000000020601080000000000000000000000080900020073797a3100000000050004000000030011000300686173683a6e65742c6e65740000000014000780050015004b0000000800114000000000050005000a0000000500010006"], 0x60}}, 0x0) syz_open_dev$loop(&(0x7f00000000c0), 0x5, 0x30200) 299.213608ms ago: executing program 5 (id=1295): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x0, 0x1) ptrace$cont(0x18, r0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) ptrace$setregs(0x4212, r0, 0x58, &(0x7f0000000080)="0100000000000000000000000000000000000000000000000100"/96) ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup(r1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000012c0)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11, 0x1, 0x0, 0xba}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xf9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000180)=0xffe00001) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x143) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x10000, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="6800000010400104fcffffff8100000000000000", @ANYRES32=0x0, @ANYBLOB="0315000000000000400012800c0001006d6163766c616e00300002800e0005800a000420aac4aaaaaaaa00000a000400aaaaaaaaaaaa000008d21d582e16a3e1af15d5e900050000000000006f172d9b3359d179b6614386fc7651d8944b6ebc356fbd890464a9c552f262447017b246a1b1e0b6b3d0d41aaaa81a031d1496710ad468744c54544fa70e70587f882081", @ANYRES16=r1], 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x4000050) 296.64331ms ago: executing program 2 (id=1296): r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000180)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0xa, 0xc, 0x40000004, 0x12, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1, 0x80, 0xfffffffc, 0x4c51}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', 0x0}) sendmmsg$inet(r0, &(0x7f0000000000), 0x0, 0x4040050) 194.965289ms ago: executing program 34 (id=1170): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) syz_emit_ethernet(0xfef3, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x64, 0x11, 0x0, @remote, @local, {[], {0x4e20, 0xe22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x100004, "628e0960f6d6d3f6ee6d6b84b345dccac643e7df3e526ff07833b291322d4a74", "882ed6741e7632daeaec0c95f2ad1cd6", {"8fb3d9fd3efe8e4ea8b5ec7448ddd6a3", "215990e1b896120966af96b22cf049f0"}}}}}}}}, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000000180)=""/140, 0x8c}], 0x1, 0x1000, 0x0) 150.131619ms ago: executing program 5 (id=1298): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="40000000090601080000000000000000020000050900020073797a310000000008000940000000390500e0d0295c99d133d008800c800780080009400000008276bf58a85ef2e45c57b913e6d375d71f354ca56ca4f72acaeee2e7e258d9220139e5e3d73a7d57d21d5436dcd21fb143d1ebad395dfa1c146876c2b09fbf0cd89b47f526a40667f9914e20b4abbc1cbddd3b7eb822aa"], 0x40}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xf5) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000b40)={r5, 0xffffffffffffffff, 0x39, 0x0, @val=@uprobe_multi={0x0, 0x0}}, 0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000800)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0xffea, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3000000070000100000000000000000007000000", @ANYRES32=r6, @ANYBLOB="0c00018008000100000001000c0002"], 0x30}}, 0x0) 147.367798ms ago: executing program 2 (id=1299): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)="b82ca8", 0x3) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/remove\x00', 0x1, 0x0) r3 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSRS485(r3, 0x542f, &(0x7f0000000080)={0x7, 0x6, 0xffffffff}) write(r2, &(0x7f0000000140)='1', 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x5e) write(r4, &(0x7f00000001c0)='1', 0x1) 0s ago: executing program 3 (id=1300): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x103080, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) ioctl$KVM_SET_CLOCK(r2, 0x4188aec6, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x20000000000003, 0x1004}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000680)=[@text16={0x10, &(0x7f0000000080)="66b9800000c00f326635010000000f3064660f38828e4258660f08676ac744240012e93bf96766c744240201000000f20f78ecf5543e660f3829544e66b9800000c00f326635002000000f300f01df66b805000000f3a5baf80c66b80e5ca48f66efbafc0cec0f01310f019c09000f01c2", 0x71}], 0x1, 0x7d, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f0000000100)={0xbc, 0x0, 0x4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000000)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e0b2c6ed515651056c705918431d6a", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x8, 0x2) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)) kernel console output (not intermixed with test programs): tering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.753691][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.756001][ T8396] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.758536][ T8396] bridge_slave_0: entered allmulticast mode [ 109.761122][ T8396] bridge_slave_0: entered promiscuous mode [ 109.764581][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.766954][ T8396] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.770980][ T8396] bridge_slave_1: entered allmulticast mode [ 109.773675][ T8396] bridge_slave_1: entered promiscuous mode [ 109.790196][ T8396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.794610][ T8396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.811069][ T8396] team0: Port device team_slave_0 added [ 109.814452][ T8396] team0: Port device team_slave_1 added [ 109.856037][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.868601][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.872749][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.880767][ T8396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.885450][ T8396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.888499][ T8396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.896598][ T8396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.928454][ T8396] hsr_slave_0: entered promiscuous mode [ 109.930733][ T8396] hsr_slave_1: entered promiscuous mode [ 109.932801][ T8396] debugfs: 'hsr0' already exists in 'hsr' [ 109.934589][ T8396] Cannot create hsr debugfs directory [ 109.949204][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.048527][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.100059][ T8396] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 110.105720][ T8396] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.109709][ T8396] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 110.116941][ T8396] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.120842][ T8396] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.127967][ T8396] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.131481][ T8396] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.136898][ T8396] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.168861][ T5883] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 110.191565][ T8396] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.194574][ T8396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.197425][ T8396] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.199899][ T8396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.236147][ T12] bridge_slave_1: left allmulticast mode [ 110.240710][ T12] bridge_slave_1: left promiscuous mode [ 110.244105][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.251606][ T12] bridge_slave_0: left allmulticast mode [ 110.251977][ T42] audit: type=1400 audit(1785255430.385:1917): avc: denied { write } for pid=8435 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.253428][ T12] bridge_slave_0: left promiscuous mode [ 110.263486][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.312425][ T42] audit: type=1400 audit(1785255430.445:1918): avc: denied { write } for pid=8438 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.318570][ T5883] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 110.322905][ T5883] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 110.326072][ T5883] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 110.329042][ T5883] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.334126][ T5883] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 110.337020][ T5883] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 110.339917][ T5883] usb 7-1: Product: syz [ 110.341282][ T5883] usb 7-1: Manufacturer: syz [ 110.350330][ T5883] cdc_wdm 7-1:1.0: skipping garbage [ 110.351987][ T5883] cdc_wdm 7-1:1.0: skipping garbage [ 110.358508][ T5883] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 110.360527][ T5883] cdc_wdm 7-1:1.0: Unknown control protocol [ 110.396813][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 110.402877][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 110.407702][ T12] bond0 (unregistering): Released all slaves [ 110.418162][ T5447] 8021q: adding VLAN 0 to HW filter on device eth1 [ 110.420950][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.423769][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.456933][ T8396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.466941][ T8396] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.481525][ T5963] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.483767][ T5963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.491263][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.492657][ T42] audit: type=1400 audit(1785255430.625:1919): avc: denied { write } for pid=8446 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.494033][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.538775][ T42] audit: type=1400 audit(1785255430.675:1920): avc: denied { write } for pid=8451 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.551807][ T42] audit: type=1400 audit(1785255430.685:1921): avc: denied { read write } for pid=8426 comm="syz.2.710" name="cdc-wdm0" dev="devtmpfs" ino=3020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 110.562071][ T42] audit: type=1400 audit(1785255430.685:1922): avc: denied { open } for pid=8426 comm="syz.2.710" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3020 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 110.597688][ T5447] 8021q: adding VLAN 0 to HW filter on device eth2 [ 110.740750][ T5447] 8021q: adding VLAN 0 to HW filter on device eth3 [ 110.866684][ T8396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.870930][ T5840] usb 7-1: USB disconnect, device number 21 [ 110.910169][ T5447] 8021q: adding VLAN 0 to HW filter on device eth4 [ 110.949428][ T12] hsr_slave_0: left promiscuous mode [ 110.951763][ T12] hsr_slave_1: left promiscuous mode [ 110.953854][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 110.956240][ T12] batadv0: mtu less than device minimum [ 110.959222][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.964164][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.967872][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.971516][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.975128][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.978838][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.982453][ T12] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.994143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 110.997277][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 111.010677][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 111.013710][ T12] batman_adv: batadv0: Interface deactivated: dummy0 [ 111.015758][ T12] batman_adv: batadv0: Removing interface: dummy0 [ 111.021474][ T12] veth1_macvtap: left promiscuous mode [ 111.023343][ T12] veth0_macvtap: left promiscuous mode [ 111.025171][ T12] veth1_vlan: left promiscuous mode [ 111.026859][ T12] veth0_vlan: left promiscuous mode [ 111.161087][ T12] team0 (unregistering): Port device team_slave_1 removed [ 111.170843][ T12] team0 (unregistering): Port device team_slave_0 removed [ 111.313622][ T8396] veth0_vlan: entered promiscuous mode [ 111.335597][ T8396] veth1_vlan: entered promiscuous mode [ 111.363109][ T8396] veth0_macvtap: entered promiscuous mode [ 111.369548][ T8396] veth1_macvtap: entered promiscuous mode [ 111.390913][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.401408][ T8396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.407810][ T5813] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.411082][ T5813] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.415813][ T5813] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.419460][ T5813] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.477340][ T5750] Bluetooth: hci5: command tx timeout [ 111.539136][ T6954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.543519][ T6954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.575533][ T6954] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.580172][ T6954] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.625449][ T8532] size and base must be multiples of 4 kiB [ 111.628949][ T8532] CPU: 0 UID: 0 PID: 8532 Comm: syz.5.701 Tainted: G L syzkaller #0 PREEMPT(full) [ 111.628969][ T8532] Tainted: [L]=SOFTLOCKUP [ 111.628973][ T8532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 111.628980][ T8532] Call Trace: [ 111.628984][ T8532] [ 111.628989][ T8532] dump_stack_lvl+0x100/0x190 [ 111.629021][ T8532] mtrr_del.cold+0x72/0x85 [ 111.629038][ T8532] mtrr_ioctl+0xbc8/0xcf0 [ 111.629053][ T8532] ? __pfx_mtrr_ioctl+0x10/0x10 [ 111.629076][ T8532] ? __pfx_mtrr_ioctl+0x10/0x10 [ 111.629091][ T8532] proc_reg_unlocked_ioctl+0x229/0x320 [ 111.629113][ T8532] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 111.629128][ T8532] __x64_sys_ioctl+0x18e/0x210 [ 111.629146][ T8532] do_syscall_64+0x115/0x870 [ 111.629162][ T8532] ? clear_bhb_loop+0x40/0x90 [ 111.629176][ T8532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.629189][ T8532] RIP: 0033:0x7f571079de99 [ 111.629199][ T8532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.629210][ T8532] RSP: 002b:00007f571162d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 111.629221][ T8532] RAX: ffffffffffffffda RBX: 00007f5710a26090 RCX: 00007f571079de99 [ 111.629228][ T8532] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000005 [ 111.629234][ T8532] RBP: 00007f5710833eaf R08: 0000000000000000 R09: 0000000000000000 [ 111.629241][ T8532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.629247][ T8532] R13: 00007f5710a26128 R14: 00007f5710a26090 R15: 00007fffef8e67c8 [ 111.629260][ T8532] [ 111.658227][ T8535] cgroup: Need name or subsystem set [ 111.710608][ T8537] overlayfs: failed lookup in lower (newroot/170, name='file0', err=-40): overlapping layers [ 112.058125][ T8556] kvm: user requested TSC rate below hardware speed [ 112.108734][ T29] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 112.153284][ T8564] netlink: 'syz.0.732': attribute type 1 has an invalid length. [ 112.171047][ T8564] __nla_validate_parse: 3 callbacks suppressed [ 112.171059][ T8564] netlink: 48 bytes leftover after parsing attributes in process `syz.0.732'. [ 112.213250][ T8571] netlink: 'syz.0.735': attribute type 1 has an invalid length. [ 112.235550][ T8571] bond5: entered promiscuous mode [ 112.238664][ T8571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.256660][ T8571] 8021q: adding VLAN 0 to HW filter on device bond5 [ 112.259638][ T8571] bond5: (slave vti1): The slave device specified does not support setting the MAC address [ 112.262738][ T8571] bond5: (slave vti1): Setting fail_over_mac to active for active-backup mode [ 112.268912][ T29] usb 10-1: config 0 interface 0 has no altsetting 0 [ 112.271042][ T29] usb 10-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 112.275129][ T8571] bond5: (slave vti1): making interface the new active one [ 112.277498][ T8571] vti1: entered promiscuous mode [ 112.279861][ T8571] bond5: (slave vti1): Enslaving as an active interface with an up link [ 112.282559][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.291369][ T29] usb 10-1: config 0 descriptor?? [ 112.377092][ T8583] gfs2: Unknown parameter '/dev/comedi4' [ 112.561084][ T8545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 112.567038][ T8545] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 112.588630][ T29] usbhid 10-1:0.0: can't add hid device: -71 [ 112.590572][ T29] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 112.600962][ T29] usb 10-1: USB disconnect, device number 2 [ 112.605427][ T8594] netlink: 'syz.5.743': attribute type 1 has an invalid length. [ 112.637241][ T10] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 112.676625][ T8599] configfs-gadget.g1 gadget.0: USB CDC Phonet function [ 112.680091][ T8599] configfs-gadget.g1 gadget.0: using dummy_udc, OUT ep2out-bulk, IN ep1in-bulk [ 112.788746][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 112.792412][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 112.795863][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 112.799581][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 112.803576][ T10] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 112.806395][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.810587][ T10] usb 8-1: config 0 descriptor?? [ 112.813124][ T8585] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 112.917238][ T61] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 112.987512][ T29] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 113.007267][ T8601] netlink: 'syz.2.745': attribute type 27 has an invalid length. [ 113.069444][ T61] usb 5-1: Dual-Role OTG device on HNP port [ 113.073024][ T61] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 7.02 [ 113.076392][ T61] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.099950][ T8603] xt_ipcomp: unknown flags 1D [ 113.131840][ T8603] usb_phy_generic usb_phy_generic.2.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 113.137276][ T29] usb 10-1: Using ep0 maxpacket: 8 [ 113.138210][ T8603] dwc2 dwc2.3.auto: supply vusb_d not found, using dummy regulator [ 113.140721][ T29] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 113.144936][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 113.149071][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 113.153089][ T29] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 113.155269][ T8603] dwc2 dwc2.3.auto: supply vusb_a not found, using dummy regulator [ 113.157441][ T29] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 113.157467][ T29] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 113.157506][ T29] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 113.161914][ T8603] dwc2 dwc2.3.auto: Configuration mismatch. dr_mode forced to host [ 113.163738][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.167811][ T8603] dwc2 dwc2.3.auto: Bad value for GSNPSID: 0x52540012 [ 113.228211][ T10] hid_parser_main: 7 callbacks suppressed [ 113.228225][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.233729][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.236108][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.238947][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.241354][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.243983][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.246310][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.246339][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 113.254199][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.257365][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.258607][ T8609] batadv0: entered promiscuous mode [ 113.260803][ T10] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 113.266095][ T8609] macsec0: entered promiscuous mode [ 113.266105][ T10] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 113.269658][ T8609] macsec0: entered allmulticast mode [ 113.274005][ T8609] batadv0: entered allmulticast mode [ 113.276266][ T8609] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 113.280835][ T8609] batadv0: left allmulticast mode [ 113.282593][ T8609] batadv0: left promiscuous mode [ 113.377736][ T29] usb 10-1: GET_CAPABILITIES returned 0 [ 113.379463][ T29] usbtmc 10-1:16.0: can't read capabilities [ 113.429668][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.436226][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.531184][ T29] usb 8-1: USB disconnect, device number 8 [ 113.557285][ T5750] Bluetooth: hci5: command tx timeout [ 113.622263][ T8624] SELinux: ebitmap: empty map [ 113.623794][ T8624] SELinux: failed to load policy [ 113.638639][ T8599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.645035][ T8617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.646637][ T8599] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.650381][ T8617] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.655761][ T41] usb 5-1: USB disconnect, device number 11 [ 113.744191][ T5884] usb 10-1: USB disconnect, device number 3 [ 113.765979][ T8632] netlink: 'syz.2.754': attribute type 1 has an invalid length. [ 113.768935][ T8632] netlink: 'syz.2.754': attribute type 12 has an invalid length. [ 113.771342][ T8632] netlink: 228 bytes leftover after parsing attributes in process `syz.2.754'. [ 114.116486][ T8641] netlink: 24 bytes leftover after parsing attributes in process `syz.3.756'. [ 114.499844][ T8685] netlink: 28 bytes leftover after parsing attributes in process `syz.5.768'. [ 114.593016][ T8689] kvm: kvm [8688]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x4000007b) = 0x3f [ 114.731650][ T8699] SELinux: Context system_u:object_r:fsadm_exec_t:s0 is not valid (left unmapped). [ 114.736699][ T42] kauditd_printk_skb: 21 callbacks suppressed [ 114.736712][ T42] audit: type=1400 audit(1785255434.865:1944): avc: denied { relabelto } for pid=8698 comm="syz.0.773" name="syz1" dev="cgroup2" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 114.749643][ T42] audit: type=1400 audit(1785255434.865:1945): avc: denied { associate } for pid=8698 comm="syz.0.773" name="syz1" dev="cgroup2" ino=258 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 srawcon="system_u:object_r:fsadm_exec_t:s0" [ 114.757784][ T42] audit: type=1400 audit(1785255434.875:1946): avc: denied { write } for pid=8698 comm="syz.0.773" name="syz1" dev="cgroup2" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 114.765922][ T42] audit: type=1400 audit(1785255434.875:1947): avc: denied { add_name } for pid=8698 comm="syz.0.773" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 114.773677][ T42] audit: type=1400 audit(1785255434.875:1948): avc: denied { create } for pid=8698 comm="syz.0.773" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 114.780406][ T42] audit: type=1400 audit(1785255434.875:1949): avc: denied { associate } for pid=8698 comm="syz.0.773" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 114.786969][ T42] audit: type=1400 audit(1785255434.875:1950): avc: denied { write } for pid=8698 comm="syz.0.773" name="syz1" dev="cgroup2" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsadm_exec_t:s0" [ 114.795264][ T42] audit: type=1400 audit(1785255434.915:1951): avc: denied { write } for pid=8700 comm="syz.2.774" name="btrfs-control" dev="devtmpfs" ino=1341 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 114.925688][ T24] Process accounting resumed [ 114.969102][ T8713] netlink: 20 bytes leftover after parsing attributes in process `syz.5.780'. [ 114.972538][ T8713] net_ratelimit: 32 callbacks suppressed [ 114.972549][ T8713] openvswitch: netlink: Flow key attr not present in new flow. [ 114.978975][ T8714] netlink: 20 bytes leftover after parsing attributes in process `syz.5.780'. [ 114.982451][ T8714] openvswitch: netlink: Flow key attr not present in new flow. [ 115.029991][ T42] audit: type=1400 audit(1785255435.165:1952): avc: denied { append } for pid=8719 comm="syz.2.782" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 115.135398][ T42] audit: type=1400 audit(1785255435.265:1953): avc: denied { read } for pid=8722 comm="syz.2.783" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 115.247499][ T61] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 115.288738][ T8736] 9pnet_fd: Insufficient options for proto=fd [ 115.334924][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.2.789'. [ 115.397581][ T61] usb 10-1: Using ep0 maxpacket: 16 [ 115.400881][ T61] usb 10-1: config index 0 descriptor too short (expected 65, got 36) [ 115.403477][ T61] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 115.407001][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 115.410426][ T61] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 115.413777][ T61] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 115.418124][ T61] usb 10-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 115.420943][ T61] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.424691][ T61] usb 10-1: config 0 descriptor?? [ 115.426752][ T8718] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 115.432048][ T61] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input11 [ 115.467385][ T24] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 115.557430][ T34] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 115.619630][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 115.622926][ T24] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 115.626465][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 115.627557][ T5750] Bluetooth: hci5: command tx timeout [ 115.630420][ T24] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 255, setting to 64 [ 115.630438][ T24] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 115.631975][ T24] usb 8-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 115.634469][ T10] usb 10-1: USB disconnect, device number 4 [ 115.636773][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.647998][ T24] usb 8-1: Product: syz [ 115.649365][ T24] usb 8-1: Manufacturer: syz [ 115.650940][ T24] usb 8-1: SerialNumber: syz [ 115.658426][ T24] usb 8-1: config 0 descriptor?? [ 115.660827][ T8727] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 115.665349][ T24] input: KB Gear Tablet as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input12 [ 115.710279][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 115.714938][ T34] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 115.718747][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.724203][ T34] usb 5-1: config 0 descriptor?? [ 115.933969][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 115.935813][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 115.940997][ T34] usb 5-1: USB disconnect, device number 12 [ 116.059295][ T10] usb 8-1: USB disconnect, device number 9 [ 116.147449][ T8746] x_tables: arp_tables: NFQUEUE target: not valid for this family [ 116.152166][ T8746] capability: warning: `syz.2.791' uses 32-bit capabilities (legacy support in use) [ 116.377208][ T34] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 116.527329][ T34] usb 5-1: Using ep0 maxpacket: 32 [ 116.530212][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.533700][ T34] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 116.536611][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.541477][ T34] usb 5-1: config 0 descriptor?? [ 116.544617][ T34] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 116.551563][ T34] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 116.566912][ T8761] netlink: 'syz.5.795': attribute type 39 has an invalid length. [ 116.889770][ T8776] ntfs3(sr0): Primary boot signature is not NTFS. [ 116.892299][ T8776] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 116.900601][ T8776] ntfs3(sr0): Primary boot signature is not NTFS. [ 116.903258][ T8776] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 117.008928][ T847] usb 5-1: USB disconnect, device number 13 [ 117.014643][ T847] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 117.042494][ T8792] gretap0: mtu less than device minimum [ 117.100922][ T8797] netlink: 4 bytes leftover after parsing attributes in process `syz.2.806'. [ 117.220607][ T8800] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 117.550974][ T8822] netlink: 'syz.3.814': attribute type 1 has an invalid length. [ 117.556294][ T8820] netlink: 20 bytes leftover after parsing attributes in process `syz.0.813'. [ 117.562323][ T8822] 8021q: adding VLAN 0 to HW filter on device bond5 [ 117.567528][ T8822] netlink: 36 bytes leftover after parsing attributes in process `syz.3.814'. [ 117.678237][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz.5.818'. [ 117.707333][ T5750] Bluetooth: hci5: command tx timeout [ 117.733712][ T8839] xt_bpf: check failed: parse error [ 117.827776][ T5883] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 117.830219][ T10] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 117.997272][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 118.000876][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.004048][ T10] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.007482][ T5883] usb 8-1: config 0 has no interfaces? [ 118.009250][ T10] usb 7-1: config 0 has no interfaces? [ 118.010983][ T5883] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 118.013827][ T5883] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.018297][ T10] usb 7-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 118.022543][ T5883] usb 8-1: config 0 descriptor?? [ 118.024177][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.026783][ T10] usb 7-1: Product: syz [ 118.030422][ T10] usb 7-1: Manufacturer: syz [ 118.032429][ T10] usb 7-1: SerialNumber: syz [ 118.038222][ T10] usb 7-1: config 0 descriptor?? [ 118.232760][ T8822] bond5 (unregistering): Released all slaves [ 118.293663][ T8855] netlink: 'syz.0.824': attribute type 4 has an invalid length. [ 118.319943][ T41] usb 8-1: USB disconnect, device number 10 [ 118.324544][ T8858] netlink: 44 bytes leftover after parsing attributes in process `syz.0.825'. [ 118.637215][ T847] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 118.747983][ T8878] xt_hashlimit: size too large, truncated to 1048576 [ 118.787226][ T847] usb 10-1: Using ep0 maxpacket: 32 [ 118.790299][ T847] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 118.795026][ T847] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 118.798446][ T847] usb 10-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 118.800949][ T847] usb 10-1: Product: syz [ 118.802285][ T847] usb 10-1: Manufacturer: syz [ 118.803854][ T847] usb 10-1: SerialNumber: syz [ 118.806656][ T847] usb 10-1: config 0 descriptor?? [ 118.809092][ T8864] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 118.812184][ T847] hub 10-1:0.0: bad descriptor, ignoring hub [ 118.814128][ T847] hub 10-1:0.0: probe with driver hub failed with error -5 [ 118.957954][ T8900] xt_hashlimit: size too large, truncated to 1048576 [ 119.232483][ T24] usb 10-1: USB disconnect, device number 5 [ 119.750412][ T8910] hpfs: hpfs_map_sector(): read error [ 119.790258][ T8917] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.796008][ T8917] netlink: 12 bytes leftover after parsing attributes in process `syz.5.842'. [ 119.803249][ T42] kauditd_printk_skb: 25 callbacks suppressed [ 119.803262][ T42] audit: type=1326 audit(1785255439.935:1979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8920 comm="syz.3.844" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f674af9de99 code=0x0 [ 119.809498][ T8917] netlink: 16 bytes leftover after parsing attributes in process `syz.5.842'. [ 119.815596][ T8917] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 119.998154][ T8937] overlayfs: missing 'lowerdir' [ 120.097518][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 120.247174][ T5883] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 120.249060][ T24] usb 10-1: unable to get BOS descriptor or descriptor too short [ 120.252845][ T24] usb 10-1: config 4 has an invalid interface number: 13 but max is 0 [ 120.255457][ T24] usb 10-1: config 4 has no interface number 0 [ 120.257510][ T24] usb 10-1: config 4 interface 13 has no altsetting 0 [ 120.261347][ T24] usb 10-1: New USB device found, idVendor=0bda, idProduct=0184, bcdDevice=6f.98 [ 120.264194][ T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.266775][ T24] usb 10-1: Product: syz [ 120.268773][ T24] usb 10-1: Manufacturer: syz [ 120.270384][ T24] usb 10-1: SerialNumber: syz [ 120.398764][ T5883] usb 5-1: not running at top speed; connect to a high speed hub [ 120.402071][ T5883] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 120.405574][ T5883] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 120.408414][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.417500][ T5883] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 120.424904][ T5883] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 120.456176][ T847] usb 7-1: USB disconnect, device number 22 [ 120.477369][ T42] audit: type=1400 audit(1785255440.615:1980): avc: denied { create } for pid=8927 comm="syz.5.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 120.478133][ T8928] 9p: Bad value for 'wfdno' [ 120.494881][ T24] ums-realtek 10-1:4.13: USB Mass Storage device detected [ 120.537596][ T24] usb 10-1: USB disconnect, device number 6 [ 120.654154][ T29] Process accounting resumed [ 120.683776][ T8945] netlink: 172 bytes leftover after parsing attributes in process `syz.3.849'. [ 120.686943][ T8945] mmap: syz.3.849 (8945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 120.753888][ T8950] tmpfs: User quota block hardlimit too large. [ 120.965778][ T42] audit: type=1400 audit(1785255441.095:1981): avc: denied { read } for pid=8951 comm="syz.3.852" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 121.106913][ T42] audit: type=1400 audit(1785255441.235:1982): avc: denied { mounton } for pid=8956 comm="syz.5.854" path="/29/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 121.120101][ T8958] fuse: blksize only supported for fuseblk [ 121.259247][ T42] audit: type=1400 audit(1785255441.395:1983): avc: denied { setopt } for pid=8970 comm="syz.5.858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 121.388968][ T42] audit: type=1800 audit(1785255441.525:1984): pid=8975 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.860" name="file1" dev="overlay" ino=198 res=0 errno=0 [ 121.413455][ T8977] overlayfs: failed to verify index (index/00fb2100011a933652f6b8428aa01dd5da42b81691eb9d37b38e04000000000000, ftype=8000, err=-61) [ 121.418245][ T8977] overlayfs: failed index dir cleanup (-61) [ 121.422146][ T8977] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 121.950530][ T9016] x_tables: duplicate underflow at hook 1 [ 122.187269][ T847] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 122.339595][ T847] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 122.342149][ T847] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 122.345061][ T847] usb 7-1: config 0 interface 0 has no altsetting 0 [ 122.349772][ T847] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 122.352497][ T847] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 122.355075][ T847] usb 7-1: Product: syz [ 122.356331][ T847] usb 7-1: Manufacturer: syz [ 122.357933][ T847] usb 7-1: SerialNumber: syz [ 122.362099][ T847] usb 7-1: config 0 descriptor?? [ 122.365541][ T847] hub 7-1:0.0: bad descriptor, ignoring hub [ 122.367663][ T847] hub 7-1:0.0: probe with driver hub failed with error -5 [ 122.374813][ T847] usb 7-1: selecting invalid altsetting 0 [ 122.392970][ T42] audit: type=1400 audit(2000000000.460:1985): avc: denied { read } for pid=9034 comm="syz.5.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 122.529259][ T42] audit: type=1400 audit(2000000000.600:1986): avc: denied { write } for pid=9036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.579302][ T42] audit: type=1400 audit(2000000000.650:1987): avc: denied { write } for pid=9039 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.661876][ T42] audit: type=1400 audit(2000000000.730:1988): avc: denied { write } for pid=9047 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 122.835500][ T10] usb 7-1: USB disconnect, device number 23 [ 122.961098][ T5883] usb 5-1: USB disconnect, device number 14 [ 122.976991][ T9065] netlink: 28 bytes leftover after parsing attributes in process `syz.3.883'. [ 122.978284][ T5883] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 122.980193][ T9065] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 122.990963][ T5883] garmin_gps 5-1:1.0: device disconnected [ 123.177211][ T10] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 123.239509][ T9077] fuse: Bad value for 'group_id' [ 123.241561][ T9077] fuse: Bad value for 'group_id' [ 123.244129][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'. [ 123.248285][ T9077] netlink: 28 bytes leftover after parsing attributes in process `syz.0.886'. [ 123.254457][ T9077] gretap0: entered promiscuous mode [ 123.259333][ T9077] gretap0: left promiscuous mode [ 123.337204][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 123.361611][ T9088] VFS: Lookup of 'file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' in fuse fuse would have caused loop [ 123.381971][ T9090] binder: 9089:9090 ioctl c0306201 200000000640 returned -22 [ 123.409115][ T9092] SELinux: policydb version 1086002015 does not match my version range 15-35 [ 123.411883][ T9092] SELinux: failed to load policy [ 123.413842][ T9092] SELinux: policydb magic number 0xa2855042 does not match expected magic number 0xf97cff8c [ 123.416984][ T9092] SELinux: failed to load policy [ 123.487276][ T10] usb 7-1: new low-speed USB device number 25 using dummy_hcd [ 123.522124][ T9100] nvme_fabrics: missing parameter 'transport=%s' [ 123.527211][ T9100] nvme_fabrics: missing parameter 'nqn=%s' [ 123.631369][ T9114] netlink: 132 bytes leftover after parsing attributes in process `syz.3.893'. [ 123.634790][ T9114] Option ''MO' to dns_resolver key: bad/missing value [ 123.638429][ T9115] netlink: 132 bytes leftover after parsing attributes in process `syz.3.893'. [ 123.639708][ T9116] Option ''MO' to dns_resolver key: bad/missing value [ 123.647301][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 123.649426][ T10] usb usb7-port1: attempt power cycle [ 123.699994][ T9120] Cannot find set identified by id 65534 to match [ 123.807876][ T847] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 123.944988][ T9140] SELinux: Context system_u:system_r:kernel_t:s0 is not valid (left unmapped). [ 123.957720][ T847] usb 5-1: Using ep0 maxpacket: 16 [ 123.960803][ T847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 123.964440][ T847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 123.968005][ T847] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 123.970985][ T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.973606][ T847] usb 5-1: Product: syz [ 123.975092][ T847] usb 5-1: Manufacturer: syz [ 123.976534][ T847] usb 5-1: SerialNumber: syz [ 123.977007][ T9144] netlink: 'syz.5.904': attribute type 3 has an invalid length. [ 123.979686][ T847] usb 5-1: config 0 descriptor?? [ 123.982278][ T9144] random: crng reseeded on system resumption [ 123.997286][ T10] usb 7-1: new low-speed USB device number 26 using dummy_hcd [ 124.018949][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 124.076519][ T9151] netlink: 24 bytes leftover after parsing attributes in process `syz.3.906'. [ 124.098056][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.3.906'. [ 124.157189][ T10] usb 7-1: new low-speed USB device number 27 using dummy_hcd [ 124.177634][ T10] usb 7-1: Invalid ep0 maxpacket: 64 [ 124.179829][ T10] usb usb7-port1: unable to enumerate USB device [ 124.195438][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 124.211789][ T847] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input13 [ 124.226853][ T847] imon:send_packet: packet tx failed (-71) [ 124.258836][ T847] imon 5-1:0.0: panel buttons/knobs setup failed [ 124.317231][ T847] rc_core: IR keymap rc-imon-pad not found [ 124.319129][ T847] Registered IR keymap rc-empty [ 124.320760][ T847] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 124.323645][ T847] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 124.327936][ T847] imon:send_packet: packet tx failed (-71) [ 124.350188][ T847] imon 5-1:0.0: remote input dev register failed [ 124.352424][ T847] imon 5-1:0.0: imon_init_intf0: rc device setup failed [ 124.365625][ T847] imon 5-1:0.0: unable to initialize intf0, err 0 [ 124.367784][ T847] imon:imon_probe: failed to initialize context! [ 124.369712][ T847] imon 5-1:0.0: unable to register, err -19 [ 124.377295][ T847] usb 5-1: USB disconnect, device number 15 [ 124.677248][ T41] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 124.717244][ T847] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 124.837265][ T41] usb 10-1: Using ep0 maxpacket: 16 [ 124.840194][ T41] usb 10-1: config 1 interface 0 altsetting 250 bulk endpoint 0x82 has invalid maxpacket 16 [ 124.843467][ T41] usb 10-1: config 1 interface 0 altsetting 250 bulk endpoint 0x3 has invalid maxpacket 1023 [ 124.846617][ T41] usb 10-1: config 1 interface 0 has no altsetting 0 [ 124.850499][ T41] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 124.853416][ T41] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.855916][ T41] usb 10-1: Product: syz [ 124.857383][ T41] usb 10-1: Manufacturer: syz [ 124.859083][ T41] usb 10-1: SerialNumber: syz [ 124.862957][ T9174] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 124.865635][ T9174] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 124.868656][ T847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 124.871990][ T847] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid maxpacket 198, setting to 64 [ 124.875314][ T847] usb 5-1: config 0 interface 0 has no altsetting 0 [ 124.879125][ T847] usb 5-1: New USB device found, idVendor=15c2, idProduct=0045, bcdDevice=1f.20 [ 124.881838][ T847] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.884292][ T847] usb 5-1: Product: syz [ 124.885534][ T847] usb 5-1: Manufacturer: syz [ 124.886943][ T847] usb 5-1: SerialNumber: syz [ 124.891201][ T847] usb 5-1: config 0 descriptor?? [ 124.893601][ T9108] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.968870][ T42] kauditd_printk_skb: 14 callbacks suppressed [ 124.968893][ T42] audit: type=1400 audit(2000000003.040:2003): avc: denied { ioctl } for pid=9175 comm="syz.3.914" path="socket:[29487]" dev="sockfs" ino=29487 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 124.983097][ T42] audit: type=1400 audit(2000000003.040:2004): avc: denied { create } for pid=9175 comm="syz.3.914" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 125.077172][ T41] cdc_ether 10-1:1.0: probe with driver cdc_ether failed with error -71 [ 125.087735][ T41] usb 10-1: USB disconnect, device number 7 [ 125.102444][ T9190] netlink: 'syz.3.917': attribute type 1 has an invalid length. [ 125.106907][ C3] imon 5-1:0.0: imon usb_rx_callback_intf0: status(-71) [ 125.113943][ T847] input: iMON Panel, Knob and Mouse(15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input15 [ 125.128941][ T9190] 8021q: adding VLAN 0 to HW filter on device bond5 [ 125.169067][ T42] audit: type=1400 audit(2000000003.240:2005): avc: denied { create } for pid=9195 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.176448][ T42] audit: type=1400 audit(2000000003.240:2006): avc: denied { setopt } for pid=9195 comm="syz.3.918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 125.212276][ T9198] ubi0: attaching mtd0 [ 125.215246][ T9198] ubi0: scanning is finished [ 125.316868][ T9200] UBIFS error (pid: 9200): cannot open "ubi0_0", error -19 [ 125.350912][ T9198] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 125.355485][ T9198] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 125.357435][ T847] rc_core: IR keymap rc-imon-pad not found [ 125.357988][ T9198] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 125.359830][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 125.361915][ T9198] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 125.361949][ T847] Registered IR keymap rc-empty [ 125.362010][ T847] imon 5-1:0.0: Looks like you're trying to use an IR protocol this device does not support [ 125.362021][ T847] imon 5-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 125.377205][ T9198] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 125.379432][ T9198] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 125.381886][ T9198] ubi0: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 4247345135 [ 125.384970][ T9198] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 125.391618][ T9202] ubi0: background thread "ubi_bgt0d" started, PID 9202 [ 125.504665][ T9108] syzkaller0: entered promiscuous mode [ 125.506550][ T9108] syzkaller0: entered allmulticast mode [ 125.508371][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 125.512095][ T24] usb 7-1: unable to get BOS descriptor or descriptor too short [ 125.518030][ T24] usb 7-1: string descriptor 0 read error: -22 [ 125.520014][ T24] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 125.522821][ T24] usb 7-1: New USB device strings: Mfr=1, Product=252, SerialNumber=3 [ 125.528908][ T24] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 125.531284][ T24] dw2102: su3000_power_ctrl: 1, initialized 0 [ 125.533416][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 125.539011][ T847] rc rc0: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 125.549573][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.549787][ T847] input: iMON Remote (15c2:0045) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input16 [ 125.552911][ T24] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 125.560108][ T24] usb 7-1: media controller created [ 125.561641][ T847] imon 5-1:0.0: iMON device (15c2:0045, intf0) on usb<5:16> initialized [ 125.561930][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 125.566760][ T24] dw2102: i2c transfer failed. [ 125.568541][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 125.570251][ T24] dw2102: i2c transfer failed. [ 125.571829][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 125.573522][ T24] dw2102: i2c transfer failed. [ 125.580256][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 125.588575][ T24] dw2102: i2c transfer failed. [ 125.592068][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 125.593761][ T24] dw2102: i2c transfer failed. [ 125.595324][ T24] dvb-usb: bulk message failed: -22 (6/0) [ 125.597349][ T24] dw2102: i2c transfer failed. [ 125.598798][ T24] dvb-usb: MAC address: 02:02:02:02:02:02 [ 125.607698][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.638280][ T42] audit: type=1400 audit(2000000003.710:2007): avc: denied { mount } for pid=9203 comm="syz.5.920" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 125.646982][ T42] audit: type=1400 audit(2000000003.710:2008): avc: denied { open } for pid=9203 comm="syz.5.920" path="/51/dir0/per_cpu/cpu0/trace" dev="tracefs" ino=2517 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 125.650552][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 125.657146][ T24] dw2102: command 0x0e transfer failed. [ 125.660129][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 125.662031][ T24] dw2102: command 0x0e transfer failed. [ 125.664803][ T9204] bond2: invalid ARP target 0.0.0.0 specified for addition [ 125.666962][ T9204] bond2: option arp_ip_target: invalid value (0) [ 125.670364][ T9204] bond2 (unregistering): Released all slaves [ 125.765447][ T29] usb 5-1: USB disconnect, device number 16 [ 125.766262][ T9108] imon:send_packet: packet tx failed (-71) [ 125.766861][ T42] audit: type=1400 audit(2000000003.830:2009): avc: denied { unmount } for pid=8396 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 125.797447][ T9108] imon:lcd_write: send packet failed! [ 125.980032][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 125.982255][ T24] dw2102: command 0x0e transfer failed. [ 125.984745][ T24] dvb-usb: bulk message failed: -22 (3/0) [ 125.987796][ T24] dw2102: command 0x0e transfer failed. [ 125.989496][ T24] dvb-usb: bulk message failed: -22 (1/0) [ 125.991166][ T24] dw2102: command 0x51 transfer failed. [ 126.010723][ T24] DVB: Unable to find symbol ds3000_attach() [ 126.012639][ T24] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 126.057168][ T24] rc_core: IR keymap rc-su3000 not found [ 126.061180][ T24] Registered IR keymap rc-empty [ 126.065609][ T24] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 126.069145][ T9230] netlink: 'syz.3.926': attribute type 2 has an invalid length. [ 126.071448][ T9230] netlink: 4 bytes leftover after parsing attributes in process `syz.3.926'. [ 126.075014][ T24] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input17 [ 126.081135][ T9232] xt_hashlimit: size too large, truncated to 1048576 [ 126.090773][ T24] dvb-usb: schedule remote query interval to 150 msecs. [ 126.093072][ T24] dw2102: su3000_power_ctrl: 0, initialized 1 [ 126.095153][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 126.101760][ T24] usb 7-1: USB disconnect, device number 28 [ 126.103093][ T42] audit: type=1326 audit(2000000004.170:2010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9233 comm="syz.3.928" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f674af9de99 code=0x0 [ 126.140985][ T24] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 126.247176][ T42] audit: type=1400 audit(2000000004.310:2011): avc: denied { create } for pid=9249 comm="syz.3.931" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 126.349013][ T42] audit: type=1400 audit(2000000004.420:2012): avc: denied { ioctl } for pid=9254 comm="syz.3.932" path="socket:[31352]" dev="sockfs" ino=31352 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 126.537396][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 126.690500][ T24] usb 7-1: config index 0 descriptor too short (expected 39, got 27) [ 126.693115][ T24] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 126.696235][ T24] usb 7-1: config 0 interface 0 has no altsetting 0 [ 126.701087][ T24] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 126.704000][ T24] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 126.706472][ T24] usb 7-1: Product: syz [ 126.708280][ T24] usb 7-1: Manufacturer: syz [ 126.709987][ T24] usb 7-1: SerialNumber: syz [ 126.713289][ T24] usb 7-1: config 0 descriptor?? [ 126.718174][ T24] hub 7-1:0.0: bad descriptor, ignoring hub [ 126.720421][ T24] hub 7-1:0.0: probe with driver hub failed with error -5 [ 126.724833][ T24] usb 7-1: selecting invalid altsetting 0 [ 126.848014][ T34] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 126.855228][ T9279] 9p: Bad value for 'wfdno' [ 126.999389][ T34] usb 8-1: config 0 has no interfaces? [ 127.003604][ T34] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 127.007657][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 127.010940][ T34] usb 8-1: Product: syz [ 127.012607][ T34] usb 8-1: Manufacturer: syz [ 127.014475][ T34] usb 8-1: SerialNumber: syz [ 127.019402][ T34] usb 8-1: config 0 descriptor?? [ 127.062441][ T9284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.225666][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.236696][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.303159][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.5.943'. [ 127.306785][ T9289] bridge_slave_1: left allmulticast mode [ 127.309182][ T9289] bridge_slave_1: left promiscuous mode [ 127.311819][ T9289] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.318026][ T9289] bridge_slave_0: left allmulticast mode [ 127.319892][ T9289] bridge_slave_0: left promiscuous mode [ 127.321741][ T9289] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.341288][ T9245] usb 7-1: reset high-speed USB device number 29 using dummy_hcd [ 127.353037][ T9245] usb 7-1: device reset changed ep0 maxpacket size! [ 127.359116][ T41] usb 7-1: USB disconnect, device number 29 [ 127.494783][ T9263] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 127.497852][ T9263] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 127.500623][ T9263] Invalid logical block size (-1) [ 127.504025][ T10] usb 8-1: USB disconnect, device number 11 [ 127.527321][ T41] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 127.654514][ T9292] kvm: user requested TSC rate below hardware speed [ 127.657043][ T9292] kvm: user requested TSC rate below hardware speed [ 127.687187][ T41] usb 7-1: Using ep0 maxpacket: 8 [ 127.690302][ T41] usb 7-1: unable to get BOS descriptor or descriptor too short [ 127.698748][ T41] usb 7-1: string descriptor 0 read error: -22 [ 127.700599][ T41] usb 7-1: New USB device found, idVendor=18d1, idProduct=2d04, bcdDevice= 0.40 [ 127.703822][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.912817][ T41] usb 7-1: USB disconnect, device number 30 [ 127.974353][ T9312] binder: BINDER_SET_CONTEXT_MGR already set [ 127.977991][ T9313] binder: BINDER_SET_CONTEXT_MGR already set [ 127.979886][ T9313] binder: 9310:9313 ioctl 4018620d 2000000001c0 returned -16 [ 127.982429][ T9312] binder: 9310:9312 ioctl 4018620d 200000000040 returned -16 [ 127.982585][ T9311] binder_alloc: binder_alloc_mmap_handler: 9310 200000ffd000-200001000000 already mapped failed -16 [ 127.989597][ T9312] binder: 9310:9312 ioctl c0306201 2000000003c0 returned -14 [ 128.005759][ T9311] binder: 9310:9311 ioctl 400c620e 2000000006c0 returned -22 [ 128.005766][ T9312] binder: 9310:9312 ioctl 400c620e 2000000006c0 returned -22 [ 128.123789][ T9304] vfio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 128.126940][ T9304] vfio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem [ 128.184662][ T9324] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=9324 comm=syz.0.951 [ 128.195711][ T9328] overlayfs: failed to resolve './file2': -2 [ 128.437517][ T60] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 128.597324][ T60] usb 5-1: Using ep0 maxpacket: 8 [ 128.603141][ T60] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 128.606510][ T60] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 128.610838][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 128.614653][ T60] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 128.620015][ T60] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 128.621592][ T9364] netlink: 'syz.3.962': attribute type 1 has an invalid length. [ 128.625846][ T60] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 128.632866][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.684789][ T9366] bridge0: port 3(syz_tun) entered blocking state [ 128.688118][ T9366] bridge0: port 3(syz_tun) entered disabled state [ 128.690274][ T9366] syz_tun: entered allmulticast mode [ 128.693118][ T9366] syz_tun: entered promiscuous mode [ 128.840059][ T60] usb 5-1: usb_control_msg returned -32 [ 128.841866][ T60] usbtmc 5-1:16.0: can't read capabilities [ 128.929659][ T9374] kvm: MWAIT instruction emulated as NOP! [ 128.997686][ T9374] trusted_key: encrypted_key: insufficient parameters specified [ 129.085180][ T9385] i2c i2c-1: DVB: adapter 0 frontend 0 frequency 13 out of range (51000000..2150000000) [ 129.091612][ T9385] netlink: 'syz.3.968': attribute type 1 has an invalid length. [ 129.198506][ T9391] usbtmc 5-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 129.261886][ T9385] 8021q: adding VLAN 0 to HW filter on device bond6 [ 129.341782][ T9405] SELinux: ebitmap start bit (202309632) is beyond the end of the bitmap (1472) [ 129.345211][ T9405] SELinux: invalid class [ 129.360724][ T9405] SELinux: failed to load policy [ 129.404720][ T60] usb 5-1: USB disconnect, device number 17 [ 129.443245][ T9422] overlay: Bad value for 'workdir' [ 129.914789][ T9456] binder_alloc: 9455: binder_alloc_buf size 4096 failed, no address space [ 129.924617][ T9456] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0) [ 130.005107][ T42] kauditd_printk_skb: 22 callbacks suppressed [ 130.005119][ T42] audit: type=1400 audit(2000000008.070:2035): avc: denied { mount } for pid=9461 comm="syz.0.990" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 130.037381][ T60] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 130.047817][ T9456] SELinux: failed to load policy [ 130.188782][ T60] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 130.191829][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 130.195667][ T60] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 130.198959][ T60] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 130.201549][ T60] usb 7-1: Product: syz [ 130.203067][ T60] usb 7-1: Manufacturer: syz [ 130.204585][ T60] usb 7-1: SerialNumber: syz [ 130.207637][ T60] usb 7-1: config 0 descriptor?? [ 130.213587][ T60] usb 7-1: selecting invalid altsetting 0 [ 130.420272][ T60] usb 7-1: USB disconnect, device number 31 [ 130.943767][ T42] audit: type=1400 audit(2000000009.010:2036): avc: denied { setopt } for pid=9465 comm="syz.3.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.679550][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.079687][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 133.178910][ T42] audit: type=1326 audit(2000000011.250:2037): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9492 comm="syz.2.999" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f744c19de99 code=0x0 [ 133.190585][ T42] audit: type=1400 audit(2000000011.260:2038): avc: denied { write } for pid=9499 comm="syz.5.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.196501][ T42] audit: type=1400 audit(2000000011.260:2039): avc: denied { read } for pid=9499 comm="syz.5.1002" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 133.283758][ T9509] netlink: 20 bytes leftover after parsing attributes in process `syz.2.999'. [ 133.348901][ T9495] usb_phy_generic usb_phy_generic.4.auto: dummy supplies not allowed for exclusive requests (id=vbus) [ 133.354013][ T9495] dwc2 dwc2.5.auto: error -EBUSY: can't request region for resource [mem 0x0000c0a0-0x0000c0bf] [ 133.357897][ T9495] dwc2 dwc2.5.auto: probe with driver dwc2 failed with error -16 [ 133.366793][ T42] audit: type=1400 audit(2000000011.430:2040): avc: denied { bind } for pid=9506 comm="syz.5.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 133.433970][ T9519] syzkaller0: entered promiscuous mode [ 133.435911][ T9519] syzkaller0: entered allmulticast mode [ 133.655278][ T42] audit: type=1400 audit(2000000011.720:2041): avc: denied { setopt } for pid=9520 comm="syz.0.1006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 133.948951][ T42] audit: type=1400 audit(2000000012.020:2042): avc: denied { connect } for pid=9528 comm="syz.3.1009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 133.990641][ T42] audit: type=1400 audit(2000000012.060:2043): avc: denied { write } for pid=9526 comm="syz.0.1008" name="functions" dev="configfs" ino=11468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 133.999844][ T42] audit: type=1400 audit(2000000012.060:2044): avc: denied { write } for pid=9535 comm="syz.3.1011" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 134.024648][ T9534] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1008'. [ 134.053102][ T9542] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 134.058504][ T9541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62998 sclass=netlink_route_socket pid=9541 comm=syz.2.1012 [ 134.267271][ T24] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 134.281064][ T9558] dlm: no locking on control device [ 134.282891][ T9558] dlm: no locking on control device [ 134.284700][ T9558] dlm: no locking on control device [ 134.286579][ T9558] dlm: no locking on control device [ 134.288374][ T9558] dlm: no locking on control device [ 134.290452][ T9558] dlm: no locking on control device [ 134.292099][ T9558] dlm: no locking on control device [ 134.293760][ T9558] dlm: no locking on control device [ 134.295330][ T9558] dlm: no locking on control device [ 134.296986][ T9558] dlm: no locking on control device [ 134.298734][ T9558] dlm: no locking on control device [ 134.300364][ T9558] dlm: no locking on control device [ 134.301983][ T9558] dlm: no locking on control device [ 134.303523][ T9558] dlm: no locking on control device [ 134.305098][ T9558] dlm: no locking on control device [ 134.306768][ T9558] dlm: no locking on control device [ 134.308779][ T9558] dlm: no locking on control device [ 134.310556][ T9558] dlm: no locking on control device [ 134.312203][ T9558] dlm: no locking on control device [ 134.313979][ T9558] dlm: no locking on control device [ 134.315706][ T9558] dlm: no locking on control device [ 134.318341][ T9558] dlm: no locking on control device [ 134.320004][ T9558] dlm: no locking on control device [ 134.321639][ T9558] dlm: no locking on control device [ 134.323215][ T9558] dlm: no locking on control device [ 134.324764][ T9558] dlm: no locking on control device [ 134.326384][ T9558] dlm: no locking on control device [ 134.328049][ T9558] dlm: no locking on control device [ 134.329652][ T9558] dlm: no locking on control device [ 134.331193][ T9558] dlm: no locking on control device [ 134.332750][ T9558] dlm: no locking on control device [ 134.334343][ T9558] dlm: no locking on control device [ 134.335921][ T9558] dlm: no locking on control device [ 134.418533][ T24] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 134.421157][ T24] usb 8-1: config 1 has no interface number 0 [ 134.423135][ T24] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 134.426799][ T24] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 134.433301][ T24] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 134.436136][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.439049][ T24] usb 8-1: Product: syz [ 134.440620][ T24] usb 8-1: Manufacturer: syz [ 134.442191][ T24] usb 8-1: SerialNumber: syz [ 134.446884][ T9537] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.650324][ T9537] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 134.858388][ T24] usb 8-1: Incompatible driver and firmware versions [ 134.875327][ T24] usb 8-1: USB disconnect, device number 12 [ 134.895174][ T9594] futex_wake_op: syz.2.1025 tries to shift op by -1; fix this program [ 134.923169][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1024'. [ 134.935486][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1024'. [ 135.272903][ T42] kauditd_printk_skb: 4 callbacks suppressed [ 135.272915][ T42] audit: type=1400 audit(2000000013.340:2049): avc: denied { create } for pid=9604 comm="syz.0.1028" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 135.425110][ T9607] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.428002][ T9607] IPv6: NLM_F_CREATE should be set when creating new route [ 135.430766][ T9607] IPv6: NLM_F_CREATE should be set when creating new route [ 135.433818][ T9608] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 135.793605][ T9615] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 135.799213][ T42] audit: type=1400 audit(2000000013.870:2050): avc: denied { setopt } for pid=9625 comm="syz.0.1033" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.032530][ T9640] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1037'. [ 136.043388][ T42] audit: type=1400 audit(2000000014.110:2051): avc: denied { append } for pid=9639 comm="syz.2.1037" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 136.123820][ T24] libceph: connect (1)127.0.0.1:6789 error -101 [ 136.132203][ T24] libceph: mon0 (1)127.0.0.1:6789 connect error [ 136.142970][ T24] libceph: connect (1)127.0.0.1:6789 error -101 [ 136.145710][ T24] libceph: mon0 (1)127.0.0.1:6789 connect error [ 136.209322][ T9657] binder: 9656:9657 ioctl c018620b 0 returned -14 [ 136.213384][ T42] audit: type=1400 audit(2000000014.280:2052): avc: denied { connect } for pid=9656 comm="syz.3.1041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.225430][ T9659] use of bytesused == 0 is deprecated and will be removed in the future, [ 136.229116][ T9659] use the actual size instead. [ 136.273437][ T42] audit: type=1400 audit(2000000014.340:2053): avc: denied { bind } for pid=9663 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 136.298602][ T42] audit: type=1400 audit(2000000014.370:2054): avc: denied { read } for pid=9663 comm="syz.3.1043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 136.299026][ T9664] netlink: 'syz.3.1043': attribute type 1 has an invalid length. [ 136.305499][ T42] audit: type=1400 audit(2000000014.370:2055): avc: denied { ioctl } for pid=9670 comm="syz.0.1045" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 136.336303][ T9671] input: syz0 as /devices/virtual/input/input18 [ 136.380556][ T42] audit: type=1400 audit(2000000014.450:2056): avc: denied { create } for pid=9670 comm="syz.0.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 136.409208][ T24] libceph: connect (1)127.0.0.1:6789 error -101 [ 136.411388][ T24] libceph: mon0 (1)127.0.0.1:6789 connect error [ 136.443207][ T9676] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 136.443207][ T9676] The task syz.3.1047 (9676) triggered the difference, watch for misbehavior. [ 136.589546][ T9696] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1051'. [ 136.592694][ T9696] openvswitch: netlink: Flow actions attr not present in new flow. [ 136.618366][ T9703] xt_l2tp: invalid flags combination: 8 [ 136.690298][ T9705] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1053'. [ 136.767710][ T9715] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.770092][ T9715] bridge0: port 2(bridge_slave_1) entered listening state [ 136.772535][ T9715] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.774781][ T9715] bridge0: port 1(bridge_slave_0) entered listening state [ 136.785144][ T9715] bond0: (slave bond_slave_1): Error -28 calling ndo_bpf [ 136.791466][ T9715] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 136.922044][ T9644] ceph: No mds server is up or the cluster is laggy [ 136.931563][ T24] libceph: connect (1)127.0.0.1:6789 error -101 [ 136.934506][ T24] libceph: mon0 (1)127.0.0.1:6789 connect error [ 137.067714][ T10] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 137.071119][ T9722] 9p: Bad value for 'rfdno' [ 137.238991][ T9735] uhci_hcd 0000:00:1d.0: remove, state 4 [ 137.240599][ T10] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x5 has an invalid bInterval 0, changing to 4 [ 137.241859][ T9735] usb usb2: USB disconnect, device number 1 [ 137.245176][ T10] usb 8-1: config 0 interface 0 has no altsetting 0 [ 137.254031][ T10] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 137.257948][ T10] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 137.261023][ T10] usb 8-1: Product: syz [ 137.262647][ T10] usb 8-1: Manufacturer: syz [ 137.264388][ T10] usb 8-1: SerialNumber: syz [ 137.272096][ T10] usb 8-1: config 0 descriptor?? [ 137.283752][ T10] usb 8-1: selecting invalid altsetting 0 [ 137.290831][ T9735] uhci_hcd 0000:00:1d.0: USB bus 2 deregistered [ 137.432200][ T9744] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9744 comm=syz.0.1065 [ 137.470857][ T42] audit: type=1400 audit(2000000015.540:2057): avc: denied { create } for pid=9746 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 137.479563][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.482455][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.485034][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.488344][ T42] audit: type=1400 audit(2000000015.560:2058): avc: denied { connect } for pid=9746 comm="syz.2.1066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 137.488518][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.497447][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.500761][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.504429][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.517461][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.521148][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.523781][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.524376][ T9755] dlm: no local IP address has been set [ 137.526350][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.526511][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.526670][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.526833][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.526990][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.529224][ T9717] usb 8-1: cannot submit urb 0, error -2: endpoint not enabled [ 137.530154][ T9755] dlm: cannot start dlm midcomms -107 [ 137.531524][ T24] usb 8-1: USB disconnect, device number 13 [ 137.532399][ T9717] usb 8-1: cannot submit urb 0, error -19: no device [ 137.624464][ T9765] efs: device does not support 512 byte blocks [ 137.629266][ T9765] device does not support 512 byte blocks [ 137.629266][ T9765] [ 137.663084][ T9775] xt_TPROXY: Can be used only with -p tcp or -p udp [ 137.670088][ T9777] binder: 9776:9777 ioctl c0306201 200000000080 returned -14 [ 137.670367][ T9775] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1073'. [ 137.673759][ T9777] binder: 9776:9777 ioctl c0306201 2000000003c0 returned -14 [ 137.686973][ T9773] anx7411 0-002c: fail to probe typec property. [ 137.696566][ T9773] i2c i2c-0: new_device: Instantiated device anx7411 at 0x2c [ 137.760285][ T9782] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1074'. [ 137.783610][ T9784] netlink: 'syz.3.1075': attribute type 1 has an invalid length. [ 137.803580][ T9784] 8021q: adding VLAN 0 to HW filter on device bond7 [ 137.821450][ T9784] bond7: (slave ip6erspan0): making interface the new active one [ 137.831611][ T9784] bond7: (slave ip6erspan0): Enslaving as an active interface with an up link [ 137.868404][ T12] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 137.908850][ T9796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.911817][ T9796] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 138.082268][ T9813] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 138.151442][ T9817] 9p: Bad value for 'wfdno' [ 138.167166][ T5840] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 138.317214][ T5840] usb 8-1: Using ep0 maxpacket: 16 [ 138.324169][ T5840] usb 8-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 138.329937][ T5840] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.332640][ T5840] usb 8-1: Product: syz [ 138.333873][ T9834] netlink: 'syz.5.1086': attribute type 2 has an invalid length. [ 138.333924][ T5840] usb 8-1: Manufacturer: syz [ 138.333934][ T5840] usb 8-1: SerialNumber: syz [ 138.378563][ T9834] : entered promiscuous mode [ 138.387421][ T9834] IPVS: set_ctl: invalid protocol: 135 10.1.1.1:20000 [ 138.391398][ T10] bridge0: entered promiscuous mode [ 138.460838][ T9841] macvlan0: entered promiscuous mode [ 138.472742][ T9843] openvswitch: netlink: Flow key attribute not present in set flow. [ 138.489801][ T9843] netlink: 'syz.5.1090': attribute type 11 has an invalid length. [ 138.562627][ T5840] usb 8-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 138.566719][ T9850] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.571203][ T5840] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 138.574821][ T5840] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 138.579510][ T5840] usb 8-1: media controller created [ 138.595036][ T5840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.600350][ T9860] xt_NFQUEUE: number of queues (5) out of range (got 65536) [ 138.607623][ T5840] zl10353_read_register: readreg error (reg=127, ret==-71) [ 138.640612][ T5840] dvb_usb_gl861 8-1:157.0: probe with driver dvb_usb_gl861 failed with error -5 [ 138.647483][ T5840] usb 8-1: USB disconnect, device number 14 [ 138.689036][ T9854] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.740863][ T9872] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1098'. [ 138.750960][ T9872] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1098'. [ 138.750980][ T29] IPVS: starting estimator thread 0... [ 138.757744][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.760101][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.767402][ T41] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 138.796991][ T9877] loop3: detected capacity change from 0 to 7 [ 138.804462][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.807592][ C0] buffer_io_error: 19 callbacks suppressed [ 138.807601][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.812206][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.815067][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.818619][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.821689][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.826467][ C2] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.829564][ C2] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.832217][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.835123][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.837760][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.840670][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.843321][ C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.847305][ T9873] IPVS: using max 43 ests per chain, 103200 per kthread [ 138.847336][ C1] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.852816][ T9877] ldm_validate_partition_table(): Disk read failed. [ 138.854993][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.858711][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.861763][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.865135][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.867950][ C0] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 138.870847][ C0] Buffer I/O error on dev loop3, logical block 0, async page read [ 138.873528][ T9877] Dev loop3: unable to read RDB block 0 [ 138.876007][ T9877] loop3: unable to read partition table [ 138.878157][ T9877] loop3: partition table beyond EOD, truncated [ 138.880113][ T9877] loop_reread_partitions: partition scan of loop3 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 138.930693][ T41] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 138.933880][ T41] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 138.936793][ T41] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 138.939777][ T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.943886][ T41] usb 5-1: config 0 descriptor?? [ 138.953353][ T41] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 138.958660][ T41] dvb-usb: bulk message failed: -22 (3/0) [ 138.970190][ T41] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 138.971802][ T9883] sctp: [Deprecated]: syz.2.1101 (pid 9883) Use of int in maxseg socket option. [ 138.971802][ T9883] Use struct sctp_assoc_value instead [ 138.977358][ T41] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 138.977475][ T41] usb 5-1: media controller created [ 138.978598][ T41] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 138.983220][ T41] dvb-usb: bulk message failed: -22 (6/0) [ 138.989518][ T41] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 138.999627][ T41] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb5/5-1/input/input19 [ 139.007941][ T41] dvb-usb: schedule remote query interval to 150 msecs. [ 139.010210][ T41] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 139.100134][ T9888] 9pnet_virtio: no channels available for device c::: [ 139.157989][ T9847] dvb-usb: bulk message failed: -22 (4/0) [ 139.183914][ T41] dvb-usb: bulk message failed: -22 (1/0) [ 139.189021][ T41] dvb-usb: error while querying for an remote control event. [ 139.194235][ T9846] ALSA: mixer_oss: invalid OSS volume ';' [ 139.201712][ T41] usb 5-1: USB disconnect, device number 18 [ 139.225501][ T41] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 139.259893][ T9908] overlayfs: failed to resolve './file0': -2 [ 139.514848][ T9925] pim6reg9: entered allmulticast mode [ 139.623000][ T9937] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1116'. [ 139.884088][ T9947] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1119'. [ 142.511186][ T9928] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 142.550138][ T9960] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1125'. [ 142.587055][ T9971] overlayfs: failed to resolve './sys_mount': -2 [ 142.634637][ T9973] syzkaller0: entered promiscuous mode [ 142.636410][ T9973] syzkaller0: entered allmulticast mode [ 142.735150][ T9979] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 142.740451][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 142.740462][ T42] audit: type=1400 audit(575537165.230:2075): avc: denied { bind } for pid=9977 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 142.749316][ T42] audit: type=1400 audit(575537165.230:2076): avc: denied { write } for pid=9977 comm="syz.0.1129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 142.755320][ T42] audit: type=1400 audit(575537165.250:2077): avc: denied { setattr } for pid=9978 comm="syz.5.1128" name="ptp1" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 142.774248][ T42] audit: type=1400 audit(575537165.270:2078): avc: denied { ioctl } for pid=9983 comm="syz.5.1131" path="socket:[37373]" dev="sockfs" ino=37373 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 142.798385][ T9987] binder: 9985:9987 ioctl c0306201 200000000080 returned -14 [ 142.799400][ T9987] binder: 9985:9987 ioctl c0306201 2000000003c0 returned -14 [ 142.804176][ T9987] veth1_to_batadv: entered promiscuous mode [ 142.804287][ T9988] dns_resolver: Unsupported content type (234) [ 142.806346][ T9985] veth1_to_batadv: left promiscuous mode [ 142.838448][ T9994] netlink: 'syz.2.1134': attribute type 5 has an invalid length. [ 142.841600][ T9994] netlink: 'syz.2.1134': attribute type 5 has an invalid length. [ 142.861632][ T42] audit: type=1400 audit(575537165.350:2079): avc: denied { write } for pid=9990 comm="syz.0.1135" name="0x409" dev="configfs" ino=22135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.870741][ T42] audit: type=1400 audit(575537165.360:2080): avc: denied { write } for pid=9990 comm="syz.0.1135" name="0x409" dev="configfs" ino=22135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 142.981581][T10011] Device name not specified. [ 142.981581][T10011] [ 143.093006][T10013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1142'. [ 143.133130][T10009] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 143.147314][ T5840] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 143.160251][ T42] audit: type=1400 audit(575537165.660:2081): avc: denied { getopt } for pid=10016 comm="syz.5.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 143.287237][ T5840] usb 7-1: device descriptor read/64, error -71 [ 143.318544][ T60] IPVS: starting estimator thread 0... [ 143.320527][T10028] futex_wake_op: syz.3.1147 tries to shift op by -1; fix this program [ 143.326315][ T42] audit: type=1400 audit(575537165.820:2082): avc: denied { execute } for pid=10027 comm="syz.3.1147" path="/dev/audio" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 143.417388][T10041] IPVS: using max 43 ests per chain, 103200 per kthread [ 143.508834][T10057] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 143.538807][ T5840] usb 7-1: new full-speed USB device number 33 using dummy_hcd [ 143.662155][ T42] audit: type=1400 audit(575537166.160:2084): avc: denied { write } for pid=10069 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.668272][ T42] audit: type=1400 audit(575537166.160:2083): avc: denied { write } for pid=10069 comm="syz.0.1160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 143.687274][ T5840] usb 7-1: device descriptor read/64, error -71 [ 143.797482][ T5840] usb usb7-port1: attempt power cycle [ 143.835872][T10088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1165'. [ 143.842583][T10088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1165'. [ 143.866069][T10093] vhci_hcd vhci_hcd.0: remove, state 4 [ 143.869384][T10093] usb usb38: USB disconnect, device number 1 [ 143.910091][ T8440] vhci_hcd vhci_hcd.0: stop threads [ 143.911969][ T8440] vhci_hcd vhci_hcd.0: release socket [ 143.913908][ T8440] vhci_hcd vhci_hcd.0: disconnect device [ 143.915864][ T8440] vhci_hcd vhci_hcd.0: stop threads [ 143.917907][ T8440] vhci_hcd vhci_hcd.0: release socket [ 143.919607][ T8440] vhci_hcd vhci_hcd.0: disconnect device [ 143.921475][ T8440] vhci_hcd vhci_hcd.0: stop threads [ 143.922996][ T8440] vhci_hcd vhci_hcd.0: release socket [ 143.924568][ T8440] vhci_hcd vhci_hcd.0: disconnect device [ 143.926481][ T8440] vhci_hcd vhci_hcd.0: stop threads [ 143.928140][ T8440] vhci_hcd vhci_hcd.0: release socket [ 143.929754][ T8440] vhci_hcd vhci_hcd.0: disconnect device [ 143.931530][ T8440] vhci_hcd vhci_hcd.0: stop threads [ 143.933016][ T8440] vhci_hcd vhci_hcd.0: release socket [ 143.934576][ T8440] vhci_hcd vhci_hcd.0: disconnect device [ 143.936760][ T8440] vhci_hcd vhci_hcd.0: stop threads [ 143.938869][ T8440] vhci_hcd vhci_hcd.0: release socket [ 143.940600][ T8440] vhci_hcd vhci_hcd.0: disconnect device [ 143.942485][ T8440] vhci_hcd vhci_hcd.0: stop threads [ 143.944022][ T8440] vhci_hcd vhci_hcd.0: release socket [ 143.945818][ T8440] vhci_hcd vhci_hcd.0: disconnect device [ 143.949924][ T8440] vhci_hcd vhci_hcd.0: stop threads [ 143.951719][ T8440] vhci_hcd vhci_hcd.0: release socket [ 143.953459][ T8440] vhci_hcd vhci_hcd.0: disconnect device [ 143.955634][T10093] vhci_hcd vhci_hcd.0: USB bus 38 deregistered [ 143.966821][T10093] vhci_hcd vhci_hcd.0: remove, state 4 [ 143.968531][T10093] usb usb37: USB disconnect, device number 1 [ 143.990785][ T13] vhci_hcd vhci_hcd.0: stop threads [ 143.992940][ T13] vhci_hcd vhci_hcd.0: release socket [ 143.994997][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 143.999112][ T13] vhci_hcd vhci_hcd.0: stop threads [ 144.001236][ T13] vhci_hcd vhci_hcd.0: release socket [ 144.002820][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 144.004539][ T13] vhci_hcd vhci_hcd.0: stop threads [ 144.006549][ T13] vhci_hcd vhci_hcd.0: release socket [ 144.008711][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 144.011044][ T13] vhci_hcd vhci_hcd.0: stop threads [ 144.013019][ T13] vhci_hcd vhci_hcd.0: release socket [ 144.015129][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 144.018784][ T13] vhci_hcd vhci_hcd.0: stop threads [ 144.020814][ T13] vhci_hcd vhci_hcd.0: release socket [ 144.022830][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 144.025076][ T13] vhci_hcd vhci_hcd.0: stop threads [ 144.027387][ T13] vhci_hcd vhci_hcd.0: release socket [ 144.029586][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 144.031950][ T13] vhci_hcd vhci_hcd.0: stop threads [ 144.034053][ T13] vhci_hcd vhci_hcd.0: release socket [ 144.036089][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 144.039027][ T13] vhci_hcd vhci_hcd.0: stop threads [ 144.041093][ T13] vhci_hcd vhci_hcd.0: release socket [ 144.043157][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 144.045394][T10093] vhci_hcd vhci_hcd.0: USB bus 37 deregistered [ 144.057537][T10096] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 144.073179][T10096] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 2 [ 144.076366][T10096] vhci_hcd vhci_hcd.0: created sysfs vhci_hcd.0 [ 144.081603][T10096] usb usb2: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 144.084279][T10096] usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 144.086859][T10096] usb usb2: Product: USB/IP Virtual Host Controller [ 144.089139][T10096] usb usb2: Manufacturer: Linux syzkaller vhci_hcd [ 144.091111][T10096] usb usb2: SerialNumber: vhci_hcd.0 [ 144.107693][T10096] hub 2-0:1.0: USB hub found [ 144.114384][T10096] hub 2-0:1.0: 8 ports detected [ 144.127211][ T60] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 144.135673][T10096] vhci_hcd vhci_hcd.0: USB/IP Virtual Host Controller [ 144.146772][T10096] vhci_hcd vhci_hcd.0: new USB bus registered, assigned bus number 37 [ 144.153378][T10096] usb usb37: We don't know the algorithms for LPM for this host, disabling LPM. [ 144.157084][T10096] usb usb37: New USB device found, idVendor=1d6b, idProduct=0003, bcdDevice= 7.02 [ 144.157264][ T5840] usb 7-1: new full-speed USB device number 34 using dummy_hcd [ 144.160129][T10096] usb usb37: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 144.165572][T10096] usb usb37: Product: USB/IP Virtual Host Controller [ 144.167849][T10096] usb usb37: Manufacturer: Linux syzkaller vhci_hcd [ 144.169914][T10096] usb usb37: SerialNumber: vhci_hcd.0 [ 144.184378][T10096] hub 37-0:1.0: USB hub found [ 144.186387][T10096] hub 37-0:1.0: 8 ports detected [ 144.187974][ T5840] usb 7-1: device descriptor read/8, error -71 [ 144.287301][ T60] usb 10-1: Using ep0 maxpacket: 16 [ 144.291970][ T60] usb 10-1: config 1 has an invalid interface number: 127 but max is 2 [ 144.295127][ T60] usb 10-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 144.298576][ T60] usb 10-1: config 1 has an invalid interface number: 233 but max is 2 [ 144.301266][ T60] usb 10-1: config 1 has an invalid interface number: 115 but max is 2 [ 144.304288][ T60] usb 10-1: config 1 has no interface number 0 [ 144.306214][ T60] usb 10-1: config 1 has no interface number 1 [ 144.308362][ T60] usb 10-1: config 1 has no interface number 2 [ 144.310267][ T60] usb 10-1: config 1 interface 127 altsetting 15 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 144.313811][ T60] usb 10-1: config 1 interface 127 altsetting 15 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 144.317402][ T60] usb 10-1: config 1 interface 127 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 144.320908][ T60] usb 10-1: config 1 interface 127 altsetting 15 has an invalid descriptor for endpoint zero, skipping [ 144.324675][ T60] usb 10-1: config 1 interface 127 altsetting 15 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 144.329551][ T60] usb 10-1: config 1 interface 127 altsetting 15 endpoint 0x4 has an invalid bInterval 129, changing to 11 [ 144.333535][ T60] usb 10-1: config 1 interface 127 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 144.337223][ T60] usb 10-1: config 1 interface 127 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 144.340941][ T60] usb 10-1: config 1 interface 127 altsetting 15 has a duplicate endpoint with address 0x9, skipping [ 144.344642][ T60] usb 10-1: config 1 interface 127 altsetting 15 endpoint 0xB has invalid maxpacket 512, setting to 64 [ 144.348287][ T60] usb 10-1: config 1 interface 127 altsetting 15 has a duplicate endpoint with address 0x2, skipping [ 144.351873][ T60] usb 10-1: config 1 interface 127 altsetting 15 has a duplicate endpoint with address 0x7, skipping [ 144.355769][ T60] usb 10-1: config 1 interface 233 altsetting 6 endpoint 0xE has invalid maxpacket 1023, setting to 64 [ 144.359580][ T60] usb 10-1: config 1 interface 233 altsetting 6 has a duplicate endpoint with address 0xB, skipping [ 144.363390][ T60] usb 10-1: config 1 interface 233 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 144.367335][ T60] usb 10-1: config 1 interface 233 altsetting 6 has an invalid descriptor for endpoint zero, skipping [ 144.371108][ T60] usb 10-1: config 1 interface 233 altsetting 6 has a duplicate endpoint with address 0x9, skipping [ 144.377200][ T60] usb 10-1: config 1 interface 115 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 144.380609][ T60] usb 10-1: config 1 interface 115 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 144.384049][ T60] usb 10-1: config 1 interface 115 altsetting 0 has a duplicate endpoint with address 0x9, skipping [ 144.388244][ T60] usb 10-1: config 1 interface 115 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 144.392143][ T60] usb 10-1: config 1 interface 115 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 144.395879][ T60] usb 10-1: config 1 interface 115 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.400461][ T60] usb 10-1: config 1 interface 115 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 144.403911][ T60] usb 10-1: config 1 interface 115 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 144.407694][ T60] usb 10-1: config 1 interface 115 altsetting 0 has a duplicate endpoint with address 0xE, skipping [ 144.411339][ T60] usb 10-1: config 1 interface 127 has no altsetting 0 [ 144.413841][ T60] usb 10-1: config 1 interface 233 has no altsetting 0 [ 144.419507][ T60] usb 10-1: New USB device found, idVendor=16d8, idProduct=6001, bcdDevice=e1.a5 [ 144.422759][ T60] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.425634][ T60] usb 10-1: Product: ј [ 144.426963][ T60] usb 10-1: SerialNumber: й [ 144.432256][T10095] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 144.436150][T10117] binder: 10116:10117 ioctl c0306201 200000000080 returned -14 [ 144.438685][ T5840] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 144.442296][T10095] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 144.443103][T10117] binder: 10116:10117 ioctl c0306201 2000000003c0 returned -14 [ 144.448115][T10117] syz_tun: left allmulticast mode [ 144.449671][T10117] syz_tun: left promiscuous mode [ 144.451293][T10117] bridge0: port 3(syz_tun) entered disabled state [ 144.454907][T10117] bridge_slave_1: left allmulticast mode [ 144.456609][T10117] bridge_slave_1: left promiscuous mode [ 144.460495][T10117] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.462976][ T5840] usb 7-1: device descriptor read/8, error -71 [ 144.466307][T10117] bridge_slave_0: left allmulticast mode [ 144.469288][T10117] bridge_slave_0: left promiscuous mode [ 144.472183][T10117] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.577697][ T5840] usb usb7-port1: unable to enumerate USB device [ 144.584270][T10120] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 144.588822][T10120] Invalid ELF header len 18 [ 144.651543][ T60] option 10-1:1.127: GSM modem (1-port) converter detected [ 144.661535][ T60] option 10-1:1.233: GSM modem (1-port) converter detected [ 144.666780][ T60] usb 10-1: No union descriptors [ 144.669235][ T60] option 10-1:1.115: GSM modem (1-port) converter detected [ 144.674819][ T60] usb 10-1: USB disconnect, device number 8 [ 144.688993][ T60] option 10-1:1.127: device disconnected [ 144.698642][ T60] option 10-1:1.233: device disconnected [ 144.703282][ T60] option 10-1:1.115: device disconnected [ 144.828362][T10124] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1175'. [ 144.858489][T10126] xt_TPROXY: Can be used only with -p tcp or -p udp [ 144.905618][T10128] bond8: option downdelay: invalid value (18446744073709551615) [ 144.908060][T10128] bond8: option downdelay: allowed values 0 - 2147483647 [ 144.912933][T10128] bond8 (unregistering): Released all slaves [ 145.270841][T10146] bond3: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 145.378951][T10146] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 145.381694][T10146] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 145.601832][T10154] SELinux: Context system_u:object_r:nvram_device_t:s0 is not valid (left unmapped). [ 145.700899][T10163] netlink: 'syz.5.1187': attribute type 1 has an invalid length. [ 145.718045][T10163] 8021q: adding VLAN 0 to HW filter on device bond4 [ 145.729223][T10163] bond4: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 145.791945][T10166] zram0: detected capacity change from 0 to 20480 [ 145.857509][T10168] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1189'. [ 146.128810][T10181] xt_hashlimit: size too large, truncated to 1048576 [ 146.162006][ T847] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 146.228307][T10187] syzkaller0: entered promiscuous mode [ 146.230026][T10187] syzkaller0: entered allmulticast mode [ 146.320770][ T847] usb 10-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 146.323998][ T847] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.326620][ T847] usb 10-1: Product: syz [ 146.328800][ T847] usb 10-1: Manufacturer: syz [ 146.330534][ T847] usb 10-1: SerialNumber: syz [ 146.567949][ T847] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO [ 146.572445][ T847] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71 [ 146.575624][ T847] lan78xx 10-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 146.581745][ T847] lan78xx 10-1:1.0: probe with driver lan78xx failed with error -71 [ 146.588447][ T847] usb 10-1: USB disconnect, device number 9 [ 148.038434][T10215] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1204'. [ 148.041622][T10215] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1204'. [ 148.044901][T10215] netlink: 472 bytes leftover after parsing attributes in process `syz.3.1204'. [ 148.902353][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 148.902365][ T42] audit: type=1400 audit(575537171.400:2100): avc: denied { relabelfrom } for pid=10224 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.913014][ T42] audit: type=1400 audit(575537171.400:2101): avc: denied { relabelto } for pid=10224 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 148.924383][ T42] audit: type=1400 audit(575537171.400:2102): avc: denied { open } for pid=10224 comm="syz.2.1207" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 149.030359][ T42] audit: type=1400 audit(575537171.530:2103): avc: denied { create } for pid=10230 comm="syz.2.1209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 149.047231][ T5840] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 149.147633][ T42] audit: type=1400 audit(575537171.640:2104): avc: denied { getopt } for pid=10238 comm="syz.5.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 149.217372][ T5840] usb 8-1: Using ep0 maxpacket: 16 [ 149.220297][ T5840] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.223482][ T5840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.226856][ T5840] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.230410][ T5840] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 149.233376][ T5840] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.239240][ T5840] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 149.242307][ T5840] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 149.246942][ T5840] usb 8-1: Manufacturer: syz [ 149.253425][T10245] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 149.254352][ T5840] usb 8-1: config 0 descriptor?? [ 149.266330][T10245] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 149.417251][ T34] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 149.505159][ T42] audit: type=1400 audit(575537172.000:2105): avc: denied { name_bind } for pid=10249 comm="syz.3.1215" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 149.527326][ T5840] rc_core: IR keymap rc-hauppauge not found [ 149.530805][ T5840] Registered IR keymap rc-empty [ 149.533955][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.534343][ T42] audit: type=1400 audit(575537172.030:2106): avc: denied { write } for pid=10254 comm="syz.3.1216" name="usb_gadget" dev="configfs" ino=5552 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.544003][ T42] audit: type=1800 audit(575537172.040:2107): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1216" name="idProduct" dev="configfs" ino=38419 res=0 errno=0 [ 149.547760][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.551555][ T42] audit: type=1400 audit(575537172.040:2108): avc: denied { write } for pid=10254 comm="syz.3.1216" name="functions" dev="configfs" ino=38414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.554694][T10255] udc usbip-vudc.0: soft-connect without a gadget driver [ 149.560998][ T42] audit: type=1400 audit(575537172.040:2109): avc: denied { write } for pid=10254 comm="syz.3.1216" name="configs" dev="configfs" ino=38415 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 149.568449][ T5840] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 149.572703][ T34] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 149.575536][ T5840] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input20 [ 149.579655][ T34] usb 7-1: New USB device found, idVendor=0499, idProduct=7010, bcdDevice= 0.40 [ 149.582809][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.584134][ T34] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.584147][ T34] usb 7-1: Product: ﳿ [ 149.584155][ T34] usb 7-1: Manufacturer: В [ 149.584163][ T34] usb 7-1: SerialNumber: syz [ 149.607222][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.627303][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.647248][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.667269][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.687963][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.707253][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.729578][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.747455][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.767889][ T5840] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 149.792225][ T5840] mceusb 8-1:0.0: Registered with mce emulator interface version 1 [ 149.792885][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.795199][ T5840] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 149.799197][ T34] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 149.805158][ T5840] usb 8-1: USB disconnect, device number 15 [ 149.817740][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.821769][ T34] snd-usb-audio 7-1:1.1: probe with driver snd-usb-audio failed with error -2 [ 149.843396][ T34] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 149.871531][ T34] snd-usb-audio 7-1:1.2: probe with driver snd-usb-audio failed with error -2 [ 149.889397][ T6666] udevd[6666]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 149.990968][T10243] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 149.994445][T10243] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 150.000732][ T34] usb 7-1: USB disconnect, device number 36 [ 150.045340][T10266] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1221'. [ 150.127220][ T5840] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 150.152870][T10272] program syz.5.1224 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.267634][ T5840] usb 8-1: device descriptor read/64, error -71 [ 150.284875][T10276] netlink: 'syz.5.1225': attribute type 1 has an invalid length. [ 150.287256][T10276] netlink: 756 bytes leftover after parsing attributes in process `syz.5.1225'. [ 150.507244][ T5840] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 150.658774][ T5840] usb 8-1: device descriptor read/64, error -71 [ 150.692889][T10286] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 150.707024][T10286] bond0: (slave veth0_to_bond): Releasing backup interface [ 150.712035][T10286] veth0_to_bond: left allmulticast mode [ 150.717980][T10286] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 150.729901][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1228'. [ 150.735321][T10286] tipc: Started in network mode [ 150.737029][T10286] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 150.739888][T10286] tipc: Enabled bearer , priority 0 [ 150.742503][T10286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=10286 comm=syz.2.1228 [ 150.767523][ T5840] usb usb8-port1: attempt power cycle [ 151.059639][T10304] netlink: 'syz.2.1235': attribute type 39 has an invalid length. [ 151.117264][ T5840] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 151.139228][ T5840] usb 8-1: device descriptor read/8, error -71 [ 151.149073][T10308] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1236'. [ 151.240960][T10316] cgroup: subsys name conflicts with all [ 151.253590][T10316] loop5: detected capacity change from 0 to 7 [ 151.265879][T10316] loop5: p1 < > p3 p4 [ 151.268631][T10316] loop5: partition table partially beyond EOD, truncated [ 151.281499][T10316] loop5: p3 size 3645588866 extends beyond EOD, truncated [ 151.325447][ T5739] udevd[5739]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 151.329828][ T5916] udevd[5916]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 151.334151][ T6666] udevd[6666]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 151.398234][ T5840] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 151.419101][ T5840] usb 8-1: device descriptor read/8, error -71 [ 151.528181][ T5840] usb usb8-port1: unable to enumerate USB device [ 151.607339][ T60] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 151.664630][T10335] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.766509][ T5840] tipc: Node number set to 11578026 [ 151.767931][ T60] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 151.771908][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.775077][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.778527][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.781344][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.784337][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.787954][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.791734][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.794590][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.798412][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.801245][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.804080][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.807667][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.810517][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.813376][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.816737][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.819755][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.822633][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.825960][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.829172][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.832661][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.836001][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.840153][ T60] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 151.842845][ T60] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 151.846019][ T60] usb 7-1: config 0 interface 0 has no altsetting 0 [ 151.849750][ T60] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 151.852521][ T60] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 151.853486][T10335] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.854978][ T60] usb 7-1: Product: syz [ 151.854993][ T60] usb 7-1: Manufacturer: syz [ 151.855001][ T60] usb 7-1: SerialNumber: syz [ 151.867017][ T60] usb 7-1: config 0 descriptor?? [ 151.877467][ T60] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 151.993776][T10335] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.079694][ T5840] usb 7-1: USB disconnect, device number 37 [ 152.083578][ T5840] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 152.130829][T10335] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.241825][ T12] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.261984][ T8440] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.264606][ T8440] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.288510][ T8440] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.664797][T10333] Set syz1 is full, maxelem 65536 reached [ 152.671272][T10339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1248'. [ 152.801850][T10343] netlink: 'syz.5.1249': attribute type 49 has an invalid length. [ 152.818972][T10343] bond0: (slave bond_slave_0): Releasing backup interface [ 152.894639][T10343] bond_slave_0: entered promiscuous mode [ 152.896580][T10343] bond_slave_0: entered allmulticast mode [ 152.907786][T10345] overlayfs: unescaped trailing colons in lowerdir mount option. [ 152.972691][T10349] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1251'. [ 153.040873][T10358] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1253'. [ 153.227458][ T34] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 153.378773][ T34] usb 8-1: config 0 has an invalid interface number: 120 but max is 0 [ 153.382869][ T34] usb 8-1: config 0 has no interface number 0 [ 153.384805][ T34] usb 8-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 153.397383][ T34] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 39, changing to 9 [ 153.403258][ T34] usb 8-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 9403, setting to 1024 [ 153.410957][ T34] usb 8-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58 [ 153.417174][ T34] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.423458][ T34] usb 8-1: config 0 descriptor?? [ 153.425656][T10353] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 153.440803][ T34] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.120/input/input21 [ 153.635200][ T34] usb 8-1: USB disconnect, device number 20 [ 153.868729][T10377] netlink: 'syz.5.1257': attribute type 1 has an invalid length. [ 153.883236][T10377] 8021q: adding VLAN 0 to HW filter on device bond5 [ 153.896967][T10377] bond5: (slave geneve2): making interface the new active one [ 153.900703][T10377] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 153.929783][T10381] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1258'. [ 153.939178][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 153.939188][ T42] audit: type=1400 audit(575537176.440:2118): avc: denied { unlink } for pid=5744 comm="syz-executor" name="file0" dev="tmpfs" ino=1708 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 153.957399][ T42] audit: type=1326 audit(575537176.440:2119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10380 comm="syz.5.1258" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f571079de99 code=0x0 [ 153.977420][T10384] tipc: Resetting bearer [ 153.982708][T10384] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 154.032783][T10384] team0: Port device xfrm0 added [ 154.036944][T10384] tipc: Enabling of bearer rejected, already enabled [ 154.134013][T10387] kvm: pic: non byte write [ 154.182857][ T42] audit: type=1400 audit(575537176.680:2120): avc: denied { read } for pid=10389 comm="syz.3.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 154.796469][ T42] audit: type=1400 audit(575537177.290:2121): avc: denied { write } for pid=10393 comm="syz.5.1262" name="kmsg" dev="devtmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1 [ 154.870749][ T42] audit: type=1326 audit(575537177.370:2122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10398 comm="syz.5.1264" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f571079de99 code=0x0 [ 154.923802][T10400] loop2: detected capacity change from 0 to 7 [ 154.930172][T10400] Dev loop2: unable to read RDB block 7 [ 154.932167][T10400] loop2: AHDI p1 p2 p3 [ 154.935004][T10400] loop2: partition table partially beyond EOD, truncated [ 154.937920][T10400] loop2: p1 start 1601398130 is beyond EOD, truncated [ 154.940130][T10400] loop2: p2 start 1702059890 is beyond EOD, truncated [ 154.975827][ T5145] Dev loop2: unable to read RDB block 7 [ 154.977681][ T5145] loop2: AHDI p1 p2 p3 [ 154.979032][ T5145] loop2: partition table partially beyond EOD, truncated [ 154.981394][ T5145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 154.983746][ T5145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.002484][ T42] audit: type=1400 audit(575537177.500:2123): avc: denied { write } for pid=10401 comm="syz.2.1265" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 155.036661][ T5145] Dev loop2: unable to read RDB block 7 [ 155.039826][ T5145] loop2: AHDI p1 p2 p3 [ 155.041259][ T5145] loop2: partition table partially beyond EOD, truncated [ 155.046212][ T5145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.048797][ T5145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.058634][T10404] netlink: 'syz.3.1267': attribute type 1 has an invalid length. [ 155.082167][T10407] BIDI support in bsg has been removed. [ 155.104651][T10404] 8021q: adding VLAN 0 to HW filter on device bond8 [ 155.125558][T10404] bond8: (slave dummy0): making interface the new active one [ 155.130321][T10404] bond8: (slave dummy0): Enslaving as an active interface with an up link [ 155.137535][T10404] : renamed from dummy0 (while UP) [ 155.230607][ T5145] Dev loop2: unable to read RDB block 7 [ 155.232409][ T5145] loop2: AHDI p1 p2 p3 [ 155.233830][ T5145] loop2: partition table partially beyond EOD, truncated [ 155.236234][ T5145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.238929][ T5145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.405752][ T5145] Dev loop2: unable to read RDB block 7 [ 155.407968][ T5145] loop2: AHDI p1 p2 p3 [ 155.409377][ T5145] loop2: partition table partially beyond EOD, truncated [ 155.411720][ T5145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.413875][ T5145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.427782][T10414] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2525402522 (323251522816 ns) > initial count (185678303104 ns). Using initial count to start timer. [ 155.522469][ T5145] Dev loop2: unable to read RDB block 7 [ 155.524963][ T5145] loop2: AHDI p1 p2 p3 [ 155.526845][ T5145] loop2: partition table partially beyond EOD, truncated [ 155.530393][ T5145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.532568][ T5145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.606572][ T5145] Dev loop2: unable to read RDB block 7 [ 155.608459][ T5145] loop2: AHDI p1 p2 p3 [ 155.609852][ T5145] loop2: partition table partially beyond EOD, truncated [ 155.612380][ T5145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.614525][ T5145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.619216][T10421] autofs4:pid:10421:validate_dev_ioctl: invalid path supplied for cmd(0xc0189375) [ 155.629894][ T42] audit: type=1400 audit(575537178.130:2124): avc: denied { read } for pid=10420 comm="syz.2.1271" name="usbmon2" dev="devtmpfs" ino=3239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.647425][ T42] audit: type=1400 audit(575537178.130:2125): avc: denied { open } for pid=10420 comm="syz.2.1271" path="/dev/usbmon2" dev="devtmpfs" ino=3239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 155.664880][ T5145] Dev loop2: unable to read RDB block 7 [ 155.666901][ T5145] loop2: AHDI p1 p2 p3 [ 155.668918][ T5145] loop2: partition table partially beyond EOD, truncated [ 155.671317][ T5145] loop2: p1 start 1601398130 is beyond EOD, truncated [ 155.674027][ T5145] loop2: p2 start 1702059890 is beyond EOD, truncated [ 155.676851][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10423 comm=syz.2.1272 [ 155.682090][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10423 comm=syz.2.1272 [ 155.686354][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10423 comm=syz.2.1272 [ 155.686550][T10424] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 155.691375][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10423 comm=syz.2.1272 [ 155.699074][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10423 comm=syz.2.1272 [ 155.699795][ T42] audit: type=1400 audit(575537178.200:2126): avc: denied { create } for pid=10422 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.712135][T10423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10423 comm=syz.2.1272 [ 155.712635][ T42] audit: type=1400 audit(575537178.210:2127): avc: denied { write } for pid=10422 comm="syz.2.1272" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 155.823370][T10439] fuse: Bad value for 'user_id' [ 155.828625][T10439] fuse: Bad value for 'user_id' [ 155.830508][T10439] fuse: Bad value for 'user_id' [ 155.832102][T10439] fuse: Bad value for 'user_id' [ 155.833846][T10439] fuse: Bad value for 'user_id' [ 155.835628][T10439] fuse: Bad value for 'user_id' [ 155.837651][T10439] fuse: Bad value for 'user_id' [ 155.839291][T10439] fuse: Bad value for 'user_id' [ 155.842547][T10439] fuse: Bad value for 'user_id' [ 155.846727][T10439] fuse: Bad value for 'user_id' [ 155.861076][T10444] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1279'. [ 155.868426][T10444] gretap0: entered promiscuous mode [ 155.929084][T10446] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1279'. [ 155.940247][T10446] syzkaller0: entered promiscuous mode [ 155.942006][T10446] syzkaller0: entered allmulticast mode [ 156.236646][T10466] overlayfs: statfs failed on './file0' [ 156.867063][T10480] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1288'. [ 156.886131][T10480] team0: Port device team_slave_0 removed [ 159.066401][T10455] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 159.309263][T10493] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16400 sclass=netlink_route_socket pid=10493 comm=syz.5.1295 [ 159.346870][T10501] netlink: 'syz.3.1290': attribute type 12 has an invalid length. [ 159.349696][T10501] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1290'. [ 159.404974][T10504] block2mtd: illegal erase size [ 159.463293][ T5738] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 159.476978][ T5738] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 159.481017][ T5738] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 159.486100][ T5738] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 159.489805][ T5738] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 159.538804][T10511] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1298'. [ 159.611396][T10504] ================================================================== [ 159.614898][T10504] BUG: KASAN: slab-use-after-free in __release_resource+0x276/0x2c0 [ 159.618312][T10504] Read of size 8 at addr ffff888043774738 by task syz.2.1299/10504 [ 159.623290][T10504] [ 159.624471][T10504] CPU: 1 UID: 0 PID: 10504 Comm: syz.2.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.624499][T10504] Tainted: [L]=SOFTLOCKUP [ 159.624507][T10504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.624517][T10504] Call Trace: [ 159.624524][T10504] [ 159.624531][T10504] dump_stack_lvl+0x100/0x190 [ 159.624577][T10504] print_report+0x13d/0x4b0 [ 159.624605][T10504] ? __virt_addr_valid+0x239/0x430 [ 159.624627][T10504] ? __release_resource+0x276/0x2c0 [ 159.624651][T10504] kasan_report+0xdf/0x1c0 [ 159.624673][T10504] ? __release_resource+0x276/0x2c0 [ 159.624697][T10504] __release_resource+0x276/0x2c0 [ 159.624720][T10504] release_resource+0x26/0x40 [ 159.624743][T10504] pci_remove_bus_device+0x2d3/0x3b0 [ 159.624776][T10504] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 159.624799][T10504] remove_store+0x123/0x140 [ 159.624821][T10504] ? __pfx_remove_store+0x10/0x10 [ 159.624842][T10504] ? find_held_lock+0x2b/0x80 [ 159.624866][T10504] ? sysfs_file_kobj+0xe4/0x290 [ 159.624889][T10504] ? sysfs_file_kobj+0xe4/0x290 [ 159.624919][T10504] ? __pfx_remove_store+0x10/0x10 [ 159.624941][T10504] dev_attr_store+0x58/0x80 [ 159.624963][T10504] ? __pfx_dev_attr_store+0x10/0x10 [ 159.624984][T10504] sysfs_kf_write+0xf2/0x150 [ 159.625009][T10504] kernfs_fop_write_iter+0x3e0/0x5f0 [ 159.625029][T10504] ? __pfx_sysfs_kf_write+0x10/0x10 [ 159.625053][T10504] vfs_write+0x6ac/0x1050 [ 159.625079][T10504] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 159.625101][T10504] ? __pfx_vfs_write+0x10/0x10 [ 159.625131][T10504] ksys_write+0x12a/0x250 [ 159.625154][T10504] ? __pfx_ksys_write+0x10/0x10 [ 159.625181][T10504] do_syscall_64+0x115/0x870 [ 159.625206][T10504] ? clear_bhb_loop+0x40/0x90 [ 159.625226][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.625243][T10504] RIP: 0033:0x7f744c19de99 [ 159.625258][T10504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.625274][T10504] RSP: 002b:00007f744d0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.625293][T10504] RAX: ffffffffffffffda RBX: 00007f744c425fa0 RCX: 00007f744c19de99 [ 159.625305][T10504] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 159.625316][T10504] RBP: 00007f744c233eaf R08: 0000000000000000 R09: 0000000000000000 [ 159.625326][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.625336][T10504] R13: 00007f744c426038 R14: 00007f744c425fa0 R15: 00007ffd4d0536e8 [ 159.625353][T10504] [ 159.625358][T10504] [ 159.675776][T10518] overlayfs: unescaped trailing colons in lowerdir mount option. [ 159.677544][T10504] Allocated by task 8603: [ 159.677561][T10504] kasan_save_stack+0x30/0x50 [ 159.677586][T10504] kasan_save_track+0x14/0x30 [ 159.677604][T10504] __kasan_kmalloc+0xaa/0xb0 [ 159.677621][T10504] __kmalloc_node_track_caller_noprof+0x331/0x830 [ 159.677640][T10504] kmemdup_noprof+0x29/0x60 [ 159.677656][T10504] platform_device_add_resources+0x37/0x100 [ 159.677682][T10504] dwc2_pci_probe+0x1d3/0x360 [ 159.677706][T10504] local_pci_probe+0xdd/0x1b0 [ 159.677721][T10504] pci_call_probe+0x176/0x800 [ 159.677736][T10504] pci_device_probe+0x1cd/0x370 [ 159.677752][T10504] really_probe+0x241/0xa60 [ 159.740061][T10504] __driver_probe_device+0x20e/0x450 [ 159.741641][T10504] device_driver_attach+0xd1/0x220 [ 159.743180][T10504] bind_store+0xf4/0x190 [ 159.744424][T10504] drv_attr_store+0x74/0xb0 [ 159.745754][T10504] sysfs_kf_write+0xf2/0x150 [ 159.747193][T10504] kernfs_fop_write_iter+0x3e0/0x5f0 [ 159.749196][T10504] vfs_write+0x6ac/0x1050 [ 159.749900][T10523] : renamed from bond0 (while UP) [ 159.750520][T10504] ksys_write+0x12a/0x250 [ 159.750540][T10504] do_syscall_64+0x115/0x870 [ 159.750552][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.750564][T10504] [ 159.750567][T10504] Freed by task 10504: [ 159.758928][T10504] kasan_save_stack+0x30/0x50 [ 159.760498][T10504] kasan_save_track+0x14/0x30 [ 159.762009][T10504] kasan_save_free_info+0x3b/0x70 [ 159.763507][T10504] __kasan_slab_free+0x5f/0x80 [ 159.765008][T10504] kfree+0x22b/0x6c0 [ 159.766245][T10504] platform_device_release+0x8a/0xb0 [ 159.767874][T10504] device_release+0xd2/0x270 [ 159.769273][T10504] kobject_put+0x1f7/0x640 [ 159.770597][T10504] put_device+0x1f/0x30 [ 159.771858][T10504] platform_device_unregister+0x45/0x50 [ 159.773510][T10504] dwc2_pci_remove+0x55/0xd0 [ 159.774907][T10504] pci_device_remove+0xb2/0x1d0 [ 159.776498][T10504] device_remove+0xcb/0x180 [ 159.777898][T10504] device_release_driver_internal+0x44e/0x620 [ 159.779867][T10504] pci_stop_bus_device+0x120/0x160 [ 159.781447][T10504] pci_stop_and_remove_bus_device+0x58/0xa0 [ 159.783193][T10504] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 159.785130][T10504] remove_store+0x123/0x140 [ 159.786550][T10504] dev_attr_store+0x58/0x80 [ 159.788191][T10504] sysfs_kf_write+0xf2/0x150 [ 159.789621][T10504] kernfs_fop_write_iter+0x3e0/0x5f0 [ 159.791215][T10504] vfs_write+0x6ac/0x1050 [ 159.792517][T10504] ksys_write+0x12a/0x250 [ 159.793825][T10504] do_syscall_64+0x115/0x870 [ 159.795202][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.796989][T10504] [ 159.797755][T10504] The buggy address belongs to the object at ffff888043774700 [ 159.797755][T10504] which belongs to the cache kmalloc-128 of size 128 [ 159.801889][T10504] The buggy address is located 56 bytes inside of [ 159.801889][T10504] freed 128-byte region [ffff888043774700, ffff888043774780) [ 159.805877][T10504] [ 159.806627][T10504] The buggy address belongs to the physical page: [ 159.808568][T10504] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x43774 [ 159.811365][T10504] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 159.813446][T10504] page_type: f5(slab) [ 159.814630][T10504] raw: 00fff00000000000 ffff88801bc42a00 dead000000000100 dead000000000122 [ 159.817212][T10504] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 159.819828][T10504] page dumped because: kasan: bad access detected [ 159.821795][T10504] page_owner tracks the page as allocated [ 159.823492][T10504] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2, tgid 2 (kthreadd), ts 107447835183, free_ts 107447448635 [ 159.829348][T10504] post_alloc_hook+0xfd/0x120 [ 159.830748][T10504] get_page_from_freelist+0xf48/0x3530 [ 159.832357][T10504] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 159.834442][T10504] new_slab+0xa2/0x640 [ 159.835708][T10504] refill_objects+0xe3/0x410 [ 159.837358][T10504] __pcs_replace_empty_main+0x376/0x680 [ 159.839419][T10504] __kmalloc_noprof+0x66d/0x820 [ 159.840969][T10504] lsm_blob_alloc+0x68/0x90 [ 159.842451][T10504] security_task_alloc+0x2a/0x260 [ 159.844023][T10504] copy_process+0x2b94/0x8030 [ 159.845547][T10504] kernel_clone+0x176/0x9d0 [ 159.846997][T10504] kernel_thread+0xdb/0x120 [ 159.848433][T10504] kthreadd+0x498/0x7a0 [ 159.849683][T10504] ret_from_fork+0x72b/0xd50 [ 159.851244][T10504] ret_from_fork_asm+0x1a/0x30 [ 159.852802][T10504] page last free pid 8280 tgid 8279 stack trace: [ 159.854854][T10504] __free_frozen_pages+0x79f/0x1090 [ 159.856772][T10504] inode_doinit_with_dentry+0x99d/0x1320 [ 159.858588][T10504] selinux_d_instantiate+0x26/0x40 [ 159.860122][T10504] security_d_instantiate+0x14c/0x1b0 [ 159.861743][T10504] d_make_persistent+0x64/0x180 [ 159.863226][T10504] __debugfs_create_file+0x25e/0x4f0 [ 159.864806][T10504] debugfs_create_file_full+0x41/0x60 [ 159.866445][T10504] ref_tracker_dir_debugfs+0x19e/0x2e0 [ 159.868047][T10504] alloc_netdev_mqs+0x314/0x15c0 [ 159.869500][T10504] rtnl_create_link+0xc13/0xf80 [ 159.870994][T10504] rtnl_newlink+0x13bd/0x2380 [ 159.872379][T10504] rtnetlink_rcv_msg+0x95e/0xe90 [ 159.873837][T10504] netlink_rcv_skb+0x159/0x420 [ 159.875261][T10504] netlink_unicast+0x585/0x850 [ 159.876717][T10504] netlink_sendmsg+0x8b0/0xda0 [ 159.878161][T10504] ____sys_sendmsg+0xa4d/0xbe0 [ 159.879632][T10504] [ 159.880368][T10504] Memory state around the buggy address: [ 159.882047][T10504] ffff888043774600: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 159.884373][T10504] ffff888043774680: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 159.886777][T10504] >ffff888043774700: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 159.889304][T10504] ^ [ 159.891130][T10504] ffff888043774780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 159.893501][T10504] ffff888043774800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 159.895839][T10504] ================================================================== [ 159.898771][T10504] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 159.900955][T10504] CPU: 1 UID: 0 PID: 10504 Comm: syz.2.1299 Tainted: G L syzkaller #0 PREEMPT(full) [ 159.904054][T10504] Tainted: [L]=SOFTLOCKUP [ 159.905352][T10504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 159.908392][T10504] Call Trace: [ 159.909415][T10504] [ 159.910315][T10504] dump_stack_lvl+0x100/0x190 [ 159.911840][T10504] vpanic+0x552/0x970 [ 159.913083][T10504] ? __pfx_vpanic+0x10/0x10 [ 159.914445][T10504] ? mark_held_locks+0x40/0x70 [ 159.915883][T10504] ? irqentry_exit+0x24d/0xa00 [ 159.917365][T10504] ? __release_resource+0x276/0x2c0 [ 159.918920][T10504] panic+0xd1/0xe0 [ 159.920048][T10504] ? __pfx_panic+0x10/0x10 [ 159.921373][T10504] check_panic_on_warn.cold+0x19/0x34 [ 159.922954][T10504] end_report.part.0+0x3a/0x90 [ 159.924364][T10504] kasan_report.cold+0xe/0x18 [ 159.925798][T10504] ? __release_resource+0x276/0x2c0 [ 159.927396][T10504] __release_resource+0x276/0x2c0 [ 159.928910][T10504] release_resource+0x26/0x40 [ 159.930306][T10504] pci_remove_bus_device+0x2d3/0x3b0 [ 159.931890][T10504] pci_stop_and_remove_bus_device_locked+0x1a/0x20 [ 159.933892][T10504] remove_store+0x123/0x140 [ 159.935242][T10504] ? __pfx_remove_store+0x10/0x10 [ 159.936753][T10504] ? find_held_lock+0x2b/0x80 [ 159.938141][T10504] ? sysfs_file_kobj+0xe4/0x290 [ 159.939573][T10504] ? sysfs_file_kobj+0xe4/0x290 [ 159.941139][T10504] ? __pfx_remove_store+0x10/0x10 [ 159.942656][T10504] dev_attr_store+0x58/0x80 [ 159.944050][T10504] ? __pfx_dev_attr_store+0x10/0x10 [ 159.945615][T10504] sysfs_kf_write+0xf2/0x150 [ 159.947015][T10504] kernfs_fop_write_iter+0x3e0/0x5f0 [ 159.948571][T10504] ? __pfx_sysfs_kf_write+0x10/0x10 [ 159.950142][T10504] vfs_write+0x6ac/0x1050 [ 159.951415][T10504] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 159.953102][T10504] ? __pfx_vfs_write+0x10/0x10 [ 159.954499][T10504] ksys_write+0x12a/0x250 [ 159.955770][T10504] ? __pfx_ksys_write+0x10/0x10 [ 159.957269][T10504] do_syscall_64+0x115/0x870 [ 159.958622][T10504] ? clear_bhb_loop+0x40/0x90 [ 159.960121][T10504] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.962055][T10504] RIP: 0033:0x7f744c19de99 [ 159.963394][T10504] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.969050][T10504] RSP: 002b:00007f744d0c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 159.971504][T10504] RAX: ffffffffffffffda RBX: 00007f744c425fa0 RCX: 00007f744c19de99 [ 159.973866][T10504] RDX: 0000000000000001 RSI: 0000200000000140 RDI: 0000000000000005 [ 159.976284][T10504] RBP: 00007f744c233eaf R08: 0000000000000000 R09: 0000000000000000 [ 159.978658][T10504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.980988][T10504] R13: 00007f744c426038 R14: 00007f744c425fa0 R15: 00007ffd4d0536e8 [ 159.983322][T10504] [ 159.984833][T10504] Kernel Offset: disabled [ 159.986076][T10504] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:17:59 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000000 RCX=ffffffff829081da RDX=ffff888024fa4a80 RSI=ffffffff829081e7 RDI=ffff888024fa4a80 RBP=ffffc9000369fdb0 RSP=ffffc9000369fca0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=0000000000000900 R13=00000000000007ff R14=1ffff920006d3f98 R15=ffffc9000369fce0 RIP=ffffffff820a607f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f49a3b8c880 ffffffff 00c00000 GS =0000 ffff8880d5ddc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f57115556b8 CR3=0000000050f00000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000dffffe20 Opmask01=00000000000007ff Opmask02=00000000003f37ff Opmask03=0000000040000000 Opmask04=00000000fffff7ff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49a35f1b20 00007f49a35f1b20 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd03aafe40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffd03ab1390 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49a33d17f0 00007f49a33d17e0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49a35f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffff000000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a2a556389618a4a 2a2a2a2a4159434e ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 754f4645425d051a 474f475a05414945 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f49a35f1ac0 000055f20035706f 6f6c2f2e2e2f2e2e ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 35386632785c7165 736b7369642d7962 6632785c6b736964 6632785c2f736b6e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00184d4554535953 4255530018485441 505645440056001f 56000e004c004b00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 0000000000000000 00007ffd03ab1390 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 66666f3d73657469 72775f776f6c6c61 000035360035363a 0035363a3331632f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f28a43d9e0 000055f28a44a740 000055f28a44a6c0 000055f28a44a640 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f28a1fe0a0 000055f28a449e90 000055f28a1fe120 000055f28a449d90 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f28a449d10 000055f28a4388f0 000055f28a6994e0 000055f28a699470 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 696400644e2d4953 2f4554584500484f 49534e4554574544 485449575f242d57 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554500484e2d4945 2f45524144004449 0053242d5457452d 484e2d4953242d54 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85a38525 RDI=ffffffff9ba07b40 RBP=ffffffff9ba07b00 RSP=ffffc9000f6ef548 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=3430383838666666 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b6fa213 R15=ffffffff85a384c0 RIP=ffffffff85a3854f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f744d0c86c0 ffffffff 00c00000 GS =0000 ffff8880d5edc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f571155da08 CR3=0000000027d0f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f736e6f69746365 6e6e6f632f657375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffef8e6cb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffef8e6cb6 00007fffef8e6cbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5710834492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57108344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5710834636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57108344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000038 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00007fb7eb911e50 RBX=00007fb7eb61955f RCX=00007fb7eb61957f RDX=00000000000000d8 RSI=00007fb7eb911ab0 RDI=00007fb7eb61955f RBP=00007fff25091ec8 RSP=00007fff25091d40 R8 =00007fb7eb614860 R9 =00007fb7eb950608 R10=00007fb7eb614860 R11=000000000edb87f0 R12=00007fb7eb614860 R13=00007fb7eb911ab0 R14=00000000cc4d31c8 R15=0000000000000007 RIP=00007fb7eb923ca6 RFL=00000202 [-------] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb7eb5a5c80 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb7eb779a90 CR3=0000000046e15000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7eb67c488 00007fb7eb9105f0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4c4700362e322e32 5f4342494c470035 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000706d ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 696c6f707465675f 78756e696c657300 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000016b0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000438 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb7eb910b20 00007fb7eb911050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffffff91d476e1 RBX=0000000000000001 RCX=ffffffff91d476de RDX=0000000000000000 RSI=0000000000000000 RDI=ffffffff91d476e0 RBP=ffffc90006ddee18 RSP=ffffc90006dded60 R8 =1ffffffff23a8edc R9 =0000000000000007 R10=0000000000000200 R11=000000000001856f R12=ffffc90006ddee20 R13=ffffc90006ddedd0 R14=ffffc90006ddf018 R15=ffffc90006ddee04 RIP=ffffffff81b87800 RFL=00000a02 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f571164e6c0 ffffffff 00c00000 GS =0000 ffff8880d60dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000037c0 CR3=000000003946e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffef8e6cb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffef8e6cb6 00007fffef8e6cbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5710834492 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57108344d2 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5710834636 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57108344c4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000070 304431436d63702f 646e732f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000053 134412434e40530c 474d500c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f57109f05f8 00007f57109f05c8 00007f57109f0600 00007f57109f05e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000038 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000