last executing test programs: 39.858641403s ago: executing program 3 (id=46): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2c0000001d00070f", @ANYBLOB="e649c486bb7186cad04d87caca8d19a7515bb83cbad8711ac9f4018bf34e8df4969ffb83040d1dd9719b38afdd111c8ea129e54afca646dedb38d4da6a119d9cf84f0088f790c799b91f4a7e21939fb05b0db241a84c3f6eeccf42cf52cf9df5507ef7f704d0c59759d0f68ca6b0ca9cbdca2a8f39933dfe9421c53327bdd216b6fdd8ddddad2f6d267aeb0da26dd3b3615611efbf8043f6b0071892cb30"], 0x2c}}, 0x20008000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2004c800) 39.857752136s ago: executing program 3 (id=49): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f00000000c0)={0x1, 0x4, 0x8, 0x3}, 0x10) r1 = io_uring_setup(0x2491, &(0x7f0000000000)={0x0, 0xdb2a, 0x10000, 0x1, 0x129}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000001740)=[{0x0}], 0x1) r2 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r9 = socket$kcm(0x11, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000004800)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x4, 0xb, 0xdc}, 0x2, r6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r9, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r9, &(0x7f0000000280)={&(0x7f0000000140)=@xdp={0x2c, 0x0, r8, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000002c0)="27030200dc0f14000e0003000024c1020005ffac0900004f6b3d327db412f40000000000000000", 0x27}], 0x1}, 0x4005) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r12 = fsmount(r2, 0x1, 0xe) fchdir(r12) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r12, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {r0}}, '.\x00'}) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000001a00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000680)=""/4096, 0x1000}], &(0x7f00000019c0)=[0x8], 0x1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x864, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404}, @TCA_POLICE_RATE={0x404}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) syz_usb_connect$sierra_net(0x4, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x80, 0x2, 0x20, 0x2, 0x0, 0xe8}, {0x9, 0x5, 0x3, 0x2, 0x8, 0x80, 0x9, 0x3}, {0x9, 0x5, 0x3, 0x3, 0x200, 0x0, 0x7, 0x3}}}}}}]}}, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 37.769063421s ago: executing program 3 (id=81): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0x3, 0x0, 0x0, 0xe, 0x3, 0x1}]}, {0x0, [0x30, 0x30, 0x2e, 0x61, 0x0, 0x61]}}, &(0x7f0000000080)=""/109, 0x30, 0x6d, 0x0, 0xe0f8}, 0x28) (async) r3 = bpf$TOKEN_CREATE(0x24, &(0x7f00000001c0)={0x0, r0}, 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x5, 0xa1, 0xffffffff, 0x30004, r1, 0xffffffff, '\x00', 0x0, r2, 0x0, 0x1, 0x2, 0x2, @void, @value, @value=r3}, 0x50) (async) ioctl$NBD_DO_IT(r1, 0xab03) 37.756111928s ago: executing program 3 (id=83): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdir(0x0, 0x0) rmdir(&(0x7f0000000000)='./file0\x00') setns(0xc9, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000006c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000680)={&(0x7f0000000700)={0x2f4, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x1b0, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x31}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}]}, {0x174, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x168, 0xd, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x1b, 0x36, 0x0, 0x6, 0x2, 0x9, 0x37, 0x9, 0x30, 0x4, 0x2, 0x18, 0x60, 0x18, 0x6, 0x36, 0x24, 0x6, 0x4, 0x60, 0x5, 0x48, 0xc, 0x1, 0x1, 0x6c, 0xb, 0x5, 0x30, 0x18, 0x5]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7fff, 0x710, 0xd7a, 0x1000, 0xf8, 0x6, 0x8, 0x81]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x8, 0x5, 0x9, 0x4, 0x9b5f, 0x6, 0xb]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x2, 0x6, 0x24, 0x30, 0x9, 0x6, 0x24, 0x1a, 0x4, 0x3, 0x30, 0x18, 0x18, 0x22, 0x4, 0x1, 0x18, 0x3, 0x48, 0x9, 0x3, 0x3, 0x1, 0x1b, 0x7f, 0x1, 0x2, 0x30, 0x18, 0x4, 0x16]}]}, @NL80211_BAND_6GHZ={0x48, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x8, 0xf, 0x7ff, 0x1, 0x100, 0x1]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x2}, {}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0xa}, {0x3, 0x3}, {0x5, 0x6}, {0x1, 0x2}, {0x0, 0x4}, {0x6, 0x2}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xfff8, 0x9, 0x8, 0x5, 0xe, 0x527c, 0x7ff, 0x2544]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x1, 0x18, 0x1, 0xc, 0x1b, 0x1, 0x6, 0x1b, 0x12, 0xc, 0x48, 0x9, 0x18, 0x16, 0x1b, 0x18, 0x0, 0x4, 0x30, 0x1b, 0x60, 0x24, 0x24, 0x6c, 0x3, 0x6, 0x5, 0xb]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x60, 0x48, 0x24, 0x5b43d37a91d93c0c, 0x5]}, @NL80211_TXRATE_HT={0xa, 0x2, [{0x4, 0x5}, {0x4, 0x2}, {0x1, 0x5}, {0x1, 0x2}, {0x3, 0x9}, {0x4, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x0, 0x401, 0x9, 0x5, 0x100, 0x6, 0x101]}}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x12, 0x5, 0x1, 0xce475d1e9c409219, 0xc, 0xb, 0x6c, 0xc, 0x36, 0x1b, 0x12, 0x60, 0x2, 0x30, 0xb, 0x36, 0x2, 0x12, 0x1d, 0xc, 0x9, 0x16, 0x60, 0x36, 0x16, 0x18, 0x6c, 0xb]}]}]}]}]}, @NL80211_ATTR_TID_CONFIG={0x38, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x54}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x2}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xec}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0xf8, 0x11d, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x40, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0xc, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x30, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0xd, 0x1, [0x2, 0x30, 0x48, 0x16, 0x24, 0x60, 0x9, 0x48, 0x9]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xe, 0xe7d3, 0xf098, 0xb568, 0xfff4, 0x2, 0x2, 0x7]}}]}]}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x94, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x84, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x4, 0x9, 0x0, 0x1, 0x5, 0x0, 0xe, 0x5]}}, @NL80211_TXRATE_LEGACY={0x17, 0x1, [0x12, 0x48, 0xc, 0x9, 0x36, 0xb, 0x48, 0x21, 0x81cbd48e2f6678f1, 0x24, 0x53, 0x9, 0x48, 0xb, 0xb, 0x4, 0x48, 0x1, 0x9]}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x48, 0x16, 0x9, 0x2, 0xb, 0x16, 0x1, 0xc, 0x6c, 0x4, 0x2]}, @NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x1b, 0x7, 0x1, 0x4, 0x36, 0x48, 0x6, 0x5, 0x48, 0xe619dcc98645ae9d, 0x3, 0x6c, 0xc, 0x24, 0x12, 0x18, 0x12, 0x2, 0x3, 0x5, 0x3, 0x36]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0xfff7, 0x200, 0xde19, 0x6, 0x431, 0x7, 0x5c3]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x5bdc, 0x9, 0x0, 0x1, 0x2, 0x8, 0x4]}}]}, @NL80211_BAND_6GHZ={0xc, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x7, 0x2, [{0x1, 0x2}, {0x5, 0x2}, {}]}]}]}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xd}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x24040000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @empty}], 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x1, 0x8, 0x81}]}, 0x10) sendto$inet(r0, &(0x7f0000000100)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 37.690391821s ago: executing program 3 (id=84): syz_clone3(&(0x7f0000000300)={0x40000000, 0x0, 0x0, 0x0, {0x3e}, 0x0, 0x0, 0x0, 0x0}, 0x58) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1fe) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='isp1301 0x2', 0xb) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000000380)={0x20000000, 0x0, 0x0, 0x0, {0x37}, 0x0, 0x0, 0x0, 0x0}, 0x58) 37.560213938s ago: executing program 3 (id=86): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="e0eb8b04bda3545e397f790f9eb90d0dbf416b53166a295a215f", 0x1a}, {&(0x7f0000000140)="a638ee8c780d675ecf6926d4b2f2b97c1f1e0ead287acfdce3049c38daef22d44c4980953ef811cc658bce3b455c0e17226a717e6586ca87892f693558c1ab0e8e22d0839c083bc84471c18764ab2ba3c8e8241f1b", 0x55}, {&(0x7f00000001c0)="8f22bf13dbba8f58591ad58a5cf1a973925d765efeb4e5bb7da3858d40ec9330f7b5b2bd617af4ac9c8b4c3d48d5", 0x2e}], 0x3}, 0x20000040) (async) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x28, 0x802000, 0xff7f, 0x9, 0xffffffff, 0x550, 0x0, 0x0, 0x38, 0x8001}}, 0x50) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r3, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 22.504394727s ago: executing program 32 (id=86): r0 = socket$kcm(0x10, 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) sendmsg$inet(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="e0eb8b04bda3545e397f790f9eb90d0dbf416b53166a295a215f", 0x1a}, {&(0x7f0000000140)="a638ee8c780d675ecf6926d4b2f2b97c1f1e0ead287acfdce3049c38daef22d44c4980953ef811cc658bce3b455c0e17226a717e6586ca87892f693558c1ab0e8e22d0839c083bc84471c18764ab2ba3c8e8241f1b", 0x55}, {&(0x7f00000001c0)="8f22bf13dbba8f58591ad58a5cf1a973925d765efeb4e5bb7da3858d40ec9330f7b5b2bd617af4ac9c8b4c3d48d5", 0x2e}], 0x3}, 0x20000040) (async) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x28, 0x802000, 0xff7f, 0x9, 0xffffffff, 0x550, 0x0, 0x0, 0x38, 0x8001}}, 0x50) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000b00)='/dev/bsg/0:0:0:0\x00', 0x40040, 0x0) ioctl$BSG_IO(r3, 0x2285, &(0x7f0000000dc0)={0x51, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0xfffffffffffffeac, 0x0, 0x0, &(0x7f0000000c00)="d6", 0x0, 0xc30, 0x30, 0x0, 0x4}) (async) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000200)="d80000001800eb054e81f783db4cb9040a1d080006007c09e8fc55a10a0015000600142603600e1208000f00060004010c00080008000c4004000300035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace81ed0bffece8b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 2.460037238s ago: executing program 1 (id=444): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r2) r4 = socket$kcm(0x23, 0x5, 0x0) sendmmsg$inet(r4, &(0x7f0000006c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) listen(r4, 0x800) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001040)={@local, @random="0100000000f6", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfe, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff, 0x0, 0x4}}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000001840)=@filter={'filter\x00', 0x42, 0x4, 0x1310, 0xffffffff, 0x98, 0x98, 0x11e0, 0xffffffff, 0xffffffff, 0x1278, 0x1278, 0x1278, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28}}, {{@ip={@private=0xa010101, @multicast2, 0xff, 0x0, 'netpci0\x00', 'team_slave_1\x00'}, 0x287, 0x10e8, 0x1148, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x0, './cgroup.cpu/syz1\x00'}}, @common=@unspec=@limit={{0x48}, {0xfffffffe, 0x7}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0xffff, [0x5]}}}}, {{@ip={@dev, @remote, 0x0, 0xff000000, 'veth1_to_team\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x1370) 2.398299867s ago: executing program 1 (id=446): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000e80), 0x2000, 0x0) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000f00)={0x28, 0x4, 0x0, 0x0, 0x1ac715, 0x4b3, 0x6, 0x1fd829}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="300000001e000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000a00020000000000000000000800090002"], 0x30}}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mprotect(&(0x7f0000006000/0x1000)=nil, 0x1000, 0x2000009) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) getsockopt$inet6_buf(r4, 0x29, 0x18, 0x0, &(0x7f00000000c0)) 1.258796811s ago: executing program 1 (id=451): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0x3c}}, 0x0) r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000600), 0x40102, 0x0) read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) writev(r0, &(0x7f0000000280)=[{&(0x7f0000002080)="e4ad42af", 0x4}], 0x1) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=@delchain={0x3c, 0x64, 0xf31, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xfff3, 0xffff}, {0xa, 0x1b}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40054}, 0x4804) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='10000', 0x5) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r2, &(0x7f0000000200)='1', 0x1) r3 = fanotify_init(0x1a, 0x800) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0xa8) fanotify_mark(r3, 0x441, 0x4800001a, r4, 0x0) fanotify_mark(r3, 0x1, 0x20, r4, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'macvtap0\x00'}) write(r5, &(0x7f0000000280)='0', 0x1) syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000000)) 1.052739319s ago: executing program 2 (id=457): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000040)='120000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, 0x0, 0x0) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) unshare(0x42000000) 944.666056ms ago: executing program 0 (id=459): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0x15) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB="9fcf01001800759d377c0000000000004c0000004c000000020000000000000000000003000000000200000002000000000000000000000000000001050000000800000000000000020000050000000000000000010000000000000000000000018000000000"], 0x0, 0x66}, 0x28) ioctl(r0, 0x404c4701, &(0x7f00000001c0)="0100000000000000000000000100000001000000010000000000000020000000200000000100000001") ioctl$SG_IO(0xffffffffffffffff, 0x2279, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0xf9) r1 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r1, 0x1, 0x48, &(0x7f0000000700), 0x4) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='syscall\x00') preadv(r3, &(0x7f00000031c0)=[{&(0x7f0000005e40)=""/4102, 0x1006}], 0x1, 0x0, 0x0) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x3) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r3, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000100)=0x80) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000242)=0x3f) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x1) ioctl$KDSKBMETA(r3, 0x4b63, &(0x7f0000000080)=0x4) r5 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000b, 0x68010, r5, 0x100000000) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000380)={0x48, 0x1, 0x0, 0x0, 0xfffffffffffffff8, 0x5}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000244)=0x1c) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3e, &(0x7f00000000c0)=0x808, 0x4) setns(0xc9, 0x0) r7 = socket(0x2a, 0x2, 0x9) ioctl$sock_inet6_SIOCADDRT(r7, 0x5411, 0x0) write(r6, 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000245)=0xf9) 937.710858ms ago: executing program 2 (id=460): openat$sysfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/rcu_expedited', 0x161b82, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000004c0), 0x4) r1 = socket$inet6(0xa, 0x80003, 0xff) socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_int(r1, 0x29, 0x16, &(0x7f0000fcb000), 0x4) close_range(r0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x1, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x7, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}, @TCA_INGRESS_BLOCK={0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0x0, 0xb}, {0xfff1, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x1c, 0x2, [@TCA_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_CODEL_INTERVAL={0x8, 0x3, 0x9}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x375}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240048e0}, 0x20000810) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./mnt_nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./mnt_nfsd\x00', &(0x7f00000001c0)='nfsd\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt_nfsd/portlist\x00', 0x2, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet_tcp_int(r9, 0x6, 0x18, 0x0, &(0x7f0000000340)) write(r8, &(0x7f0000000340)='4', 0x1) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4000080, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYRESOCT=r2], 0x64}}, 0x4841) 699.898313ms ago: executing program 2 (id=461): mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') preadv(r0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x12e, 0x0) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000040)={0x0, 0x7, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000000c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x9, @empty, 0x7}, r2}}, 0x30) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x1, 0x30) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10}}, 0xb0}}, 0x0) (async) write(r5, &(0x7f0000000100)="a667f6ff4507658e5595316d274ba10fc4a45c0e17ada2a830f83065bbc9769494e0448ce66a35d2fe9498e6f2bb061bde9bfa122dd03bdf37517ec27b7b99caff73030afc28423269ab25dc4d40183d97fa28e1675729c26e8ec277be52a3c437ab6e6b4f457df93167c1cd1d1454cc9d7f886d18b67d136b809194b88e71363dffc0", 0x83) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_KEY(r6, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x1c, r4, 0x703, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044004}, 0x4040800) write(r3, &(0x7f0000000500)='!', 0x1) 608.292108ms ago: executing program 2 (id=462): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./lower\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./upper\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./work\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./mnt\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./lower/dir\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./upper/dir\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000240)='overlay\x00', 0x0, &(0x7f0000000300)='lowerdir=lower,upperdir=upper,workdir=work,index=on,nfs_export=on\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt/dir\x00', 0x0, 0x0) name_to_handle_at(r1, &(0x7f0000000500)='\x00', &(0x7f0000000600)=@FILEID_INO32_GEN={0x80}, &(0x7f0000000700), 0x1000) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) open_by_handle_at(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="80000000b8c859062178431c00000000"], 0x0) 559.919835ms ago: executing program 2 (id=463): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="dc0000001a4cdc03a2bd7000fcdbdf251c302006fd000900000000000800010000000c"], 0xdc}, 0x1, 0x0, 0x0, 0x80c}, 0x40) 559.361605ms ago: executing program 2 (id=464): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$khugepaged_scan(r7, &(0x7f00000000c0), 0x8) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000), 0xfffffecc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x44, 0x32, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_bpf={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="01002bbd7000fedbdf25070000000a0004007770616e3000000008000100010000000800050000000000080003"], 0x40}}, 0x8084) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2506"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0x36, 0x0, &(0x7f0000000380)="3d6ee2e04b91ab10143d9abe86dde5b21365c1ed1785bf79e0f3eb2dba93774cc6b23d0016dd6bd64414ce22c0f77c2158222ff96093", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r11 = socket$netlink(0x10, 0x3, 0x0) writev(r11, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r12 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x28, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000080025bd7000fcdbff2500000000", @ANYRES32=0x0, @ANYBLOB="1000000082040400240012800b0001006272696467650000140002800800020001000000080003"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYRES16], 0x40}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg$alg(r12, &(0x7f00000000c0), 0x492492492492627, 0x0) writev(r11, &(0x7f0000000100)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) 425.828901ms ago: executing program 0 (id=465): socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = syz_open_dev$ptys(0xc, 0x3, 0x1) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000040)={0x800, 0x5, 0x1ff, 0x66, 0x15, "1e46ffaaf4d1ac5b4c4bbb4b087714296b5522"}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x2) r2 = socket$packet(0x11, 0x3, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19}, 0x42) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000008c0)=r3, 0x4) syz_emit_ethernet(0xd0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0) ioctl$TIOCGDEV(r1, 0x80045432, &(0x7f0000000000)) 425.486023ms ago: executing program 1 (id=466): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="380000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000e00010069703667726574617000000004000280"], 0x38}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)=ANY=[@ANYBLOB="780023e3070a0102000000000000e96db119af190d91d83cf022d771468600000a0000060900020073797a30000000005800048054000180090001006d657461000000004400028008000140000056d60800f80d0000000008000140000000010800014000000009080001400000000b08"], 0x78}, 0x1, 0x0, 0x0, 0x48055}, 0x1000c080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r1, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r3 = accept(r1, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) writev(r2, &(0x7f0000002640)=[{&(0x7f00000001c0)="80", 0x1}], 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000940), &(0x7f00000002c0)=@tcp6=r3}, 0x20) recvmmsg$unix(r3, &(0x7f0000000c40), 0x40002ce, 0x80, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000100)={0xf0f017, 0x3}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x6, 0xf}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_SRC_PORT={0x6}, @TCA_FLOWER_KEY_ENC_IPV4_SRC={0x8, 0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}}]}}]}, 0x44}}, 0x24040084) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 424.19488ms ago: executing program 4 (id=467): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000080)=0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000500)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000000c0)="04474093fcc697b62badc8dc637cc0f9f8a4c3b99f2753b02aa8436617d6f8ae5e9246ae2d5ffc478a2947274ee6f93442f95e0b", 0x34}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa909, 0x1f480, 0x2, 0x254}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x28, 0x0, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49', 0xb) r5 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x10000, 0x3, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r5, 0xc, 0x0, 0x0) syz_io_uring_submit(r6, r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x40000102, 0x1}) io_uring_enter(r5, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) 339.745946ms ago: executing program 0 (id=468): r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000080)={'batadv_slave_0\x00', @ifru_map={0x1, 0x9, 0x10d, 0x1, 0x1, 0x6}}) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x41, 0x0) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000040)='syz1\x00') ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000002c0)={0x0, &(0x7f0000000280)=[&(0x7f0000000080)="d3a34f19e26e72c8120c844720215b422abf86a632e0e97ec02ab387e060ca57a5b19a8405b483781986c21f64c21b5a89c7347b78f045de1f9a1ef3cc6dca26dac994cee8962de2b7eeafd1af8bf834212a646242e569b677f46a3107299f80f8e2538f4dc70fc4620c98682c8268a08812de049b8d3a78f1490b12899dcba636fe31db9409d21f5d46be4f904d44db9930fb35a2e49f2601daaa4311a8da7bcf47e53b92cccfc2d758fd923b2b9d4ac47dce5c05971e8de2ac36", &(0x7f0000000140)="d05739711e7477d7fb803c9b8ff5f115e08a74255996141415b431cffcd2d7322103ef4ae8a2da07192290f67cac43697ad6ba28556f4c9132608d4721add11d3dd530f22ee079040f587117f8625627f0bf0da868e0e1e89ed890f52c13de74f2fb8654708949c70bd319b28ec66b630a9e7551f167308bb67f5019ae370aae16b20ad6d3e2a67e8d6a533dc20fe2a42c44ba1c9bd0677946817f94e62b9df7e5c04961286f2abca8592f623d87fc50663a3e992eb40c2a39dac62dab54a23d926f3da7cbabdd9c68b5691744f4ee6f022d0fe917d1324da67055", &(0x7f0000000240)="970de4322216742f777b44ef5fefef4aa7ad322aef36bfb1ded8483f6304a6c5cb1d8ee394db1457502f6b5ca6dc8824"]}) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) (async) mmap$binder(&(0x7f0000000000/0x4000)=nil, 0x1fffff, 0x1, 0x11, r0, 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) syz_clone3(&(0x7f0000000140)={0x21000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0) (async) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) (async) write$binfmt_format(r2, &(0x7f0000000300)='1\x00', 0x2) (async) ioctl$sock_ifreq(r1, 0x8937, &(0x7f0000000080)={'batadv_slave_0\x00', @ifru_map={0x1, 0x9, 0x10d, 0x1, 0x1, 0x6}}) (async) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x41, 0x0) (async) ioctl$UI_SET_PHYS(r3, 0x4008556c, &(0x7f0000000040)='syz1\x00') (async) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r3, 0x80184153, &(0x7f00000002c0)={0x0, &(0x7f0000000280)=[&(0x7f0000000080)="d3a34f19e26e72c8120c844720215b422abf86a632e0e97ec02ab387e060ca57a5b19a8405b483781986c21f64c21b5a89c7347b78f045de1f9a1ef3cc6dca26dac994cee8962de2b7eeafd1af8bf834212a646242e569b677f46a3107299f80f8e2538f4dc70fc4620c98682c8268a08812de049b8d3a78f1490b12899dcba636fe31db9409d21f5d46be4f904d44db9930fb35a2e49f2601daaa4311a8da7bcf47e53b92cccfc2d758fd923b2b9d4ac47dce5c05971e8de2ac36", &(0x7f0000000140)="d05739711e7477d7fb803c9b8ff5f115e08a74255996141415b431cffcd2d7322103ef4ae8a2da07192290f67cac43697ad6ba28556f4c9132608d4721add11d3dd530f22ee079040f587117f8625627f0bf0da868e0e1e89ed890f52c13de74f2fb8654708949c70bd319b28ec66b630a9e7551f167308bb67f5019ae370aae16b20ad6d3e2a67e8d6a533dc20fe2a42c44ba1c9bd0677946817f94e62b9df7e5c04961286f2abca8592f623d87fc50663a3e992eb40c2a39dac62dab54a23d926f3da7cbabdd9c68b5691744f4ee6f022d0fe917d1324da67055", &(0x7f0000000240)="970de4322216742f777b44ef5fefef4aa7ad322aef36bfb1ded8483f6304a6c5cb1d8ee394db1457502f6b5ca6dc8824"]}) (async) 269.713608ms ago: executing program 0 (id=469): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) write(0xffffffffffffffff, &(0x7f0000000040)='120000', 0x6) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r0, &(0x7f0000000280), 0x0) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) unshare(0x42000000) 269.186986ms ago: executing program 4 (id=470): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x45, 0x0, &(0x7f0000cab000)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_coalesce={0xf, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xffffffff}}) 268.737876ms ago: executing program 4 (id=471): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x42040, 0x0) lseek(r0, 0xfffffffffffffff9, 0x2) r1 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0x1b6c, 0x80, 0x1024002, 0x804d}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) read(r0, &(0x7f00000002c0)=""/22, 0x16) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) write(r6, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=172.20.20.24,trsvcid=4', 0x38) 190.017144ms ago: executing program 1 (id=472): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x1c3902, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) r1 = fsopen(&(0x7f0000000700)='affs\x00', 0x1) r2 = fcntl$dupfd(r1, 0x0, r1) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f0000000080)={0xc69c, 0x7, 0x0, 'queue1\x00', 0x5}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4004844) r4 = io_uring_setup(0x56ab, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) sendfile(r0, r0, 0x0, 0x200000) 172.58907ms ago: executing program 4 (id=473): r0 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x6a, 0x5, 0x20000000, 0x3) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 168.246048ms ago: executing program 0 (id=474): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r4, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r2], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x4004004, &(0x7f0000000180)={0xc9, 0x4, r4, 0x1, 0x2, 0x6, @broadcast}, 0x14) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) close_range(r6, r5, 0x2) writev(r5, &(0x7f0000000c40)=[{&(0x7f0000000080)="2e1221b23bb601c494d3df173e75963d86dd9d90491c3248320001dbb8910529cb572d4fa1f1eb5690", 0x29}, {&(0x7f0000000300)="0400000002e87fda30", 0x9}, {&(0x7f0000000180)="5d6d5a39fc44e10be7265c681a2064dc", 0x10}], 0x3) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000000000000000005000200fc0000000800050064000000050006"], 0x44}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 108.915886ms ago: executing program 4 (id=475): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r0 = fspick(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x1) fsconfig$FSCONFIG_SET_PATH(r0, 0x3, &(0x7f0000000140)='\xff\xff\xff\xff\xff\xff', &(0x7f00000001c0)='./file0\x00', 0xffffffffffffff9c) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd600a843500142f00fe8000000000000000000000000000bbfe8000000020000000000000000000aa3c0022eb1a32f308cda96a99584349a35590415e3a64859ddcb18c4f7e30188c2c64b817c63c7bf4", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f00000000c0)={@dev={0xac, 0x14, 0x14, 0x27}, @local, r2}, 0xc) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001000010025bd7000fddbdf2500000000", @ANYRES32=r2, @ANYBLOB="10080400895504002c001280110001006272696467655f736c6176650000000014000580050028"], 0x4c}, 0x1, 0x0, 0x0, 0x200404c1}, 0x4040050) 108.532556ms ago: executing program 1 (id=476): ioctl$BTRFS_IOC_SEND(0xffffffffffffffff, 0x40489426, &(0x7f0000000200)={{}, 0x0, 0x0, 0x1, 0x4, 0x1}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001800050000000000000000002d00000000000001010100000500010008000000080004"], 0x2c}}, 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x82002, 0x0) read$dsp(r0, &(0x7f0000000100)=""/145, 0x91) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000500)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0x8, 0x2, 0x8, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x6, 0x2dcd, 0x1, 0xb4, 0x8, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0xfffffff7, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8002, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x5, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x709, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x5, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x8, 0x4], [0x401, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x5, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x9, 0x80000001, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x40000004, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x3, 0x9, 0xffffffff, 0x5, 0x3fe, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfdfffff9, 0x18e, 0x1001, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0x10, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x4000006, 0x7ffe, 0x28, 0x5, 0xd500, 0x1, 0x77, 0x5, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x4, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0x200d8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x7, 0x9, 0x9, 0x4, 0x463f, 0xf, 0xdab, 0x5, 0x8, 0x13fff, 0x8, 0x9]}, 0x45c) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)={0x1c, 0x3a, 0x505, 0x201, 0x0, {0x1, 0x1}, [@generic="0f00010070"]}, 0x1c}}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)={0x10, 0x11, 0x1}, 0x10}], 0x1, 0x0, 0x0, 0x24008800}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r3, 0x4020aed2, &(0x7f00000001c0)={0x60000, 0x18000, 0x9fef19c9430e26b8}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) syz_open_dev$vcsa(&(0x7f0000000380), 0x7b95b611, 0x802) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="c00000002100000125bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1800000082280100140014006d6163766c616e300000000000000000080025000000000008000d0001000000680034801400350070696d367265673100000000000000001400350076657468305f746f5f7465616d0000001400350069705f767469300000000000000000001400350069705f7674693000000000000000000014003500736974300000000000000000000000000a000100aaaaaaaaaa23000008000a00", @ANYRES32=0x0, @ANYBLOB], 0xc0}, 0x1, 0x0, 0x0, 0x2000}, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 193.988µs ago: executing program 4 (id=477): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x76, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x4, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) syz_clone(0x54800500, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) r4 = openat$kvm(0xffffff9c, &(0x7f0000000140), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_PIT(r5, 0x8048ae66, &(0x7f00000000c0)={[{0x4, 0x200, 0x8, 0x84, 0x0, 0x7, 0xc4, 0x1, 0x0, 0x9, 0xf, 0x8, 0x9}, {0x8, 0xaff3, 0xa, 0x5, 0xc, 0x2, 0x9, 0x3, 0x4, 0x13, 0x1, 0x6, 0x12005}, {0x2, 0x7, 0xa, 0xf, 0x1, 0x14, 0x0, 0x3, 0x7, 0xfb, 0x1, 0x3, 0x2}], 0x8}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000b40)={[0x9, 0x400000000006, 0xfffffffffffffffd, 0x0, 0x3, 0xfffffffffffffffd, 0x4002004c3, 0xffe, 0x0, 0x2a, 0x14, 0xffff, 0x4, 0x0, 0x8, 0x7], 0xeeee8000, 0x2011c0}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) r10 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, r10, 0x300000b, 0x11, r9, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1c, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="c32d00000000000073113600007f2239e56f81c75d42817732d73dda00000116f1f654be2405e2d21948b3cb84c722e02fda3feed0e726a42b2bfb97294b0b56781cd56db0d03310d4150e72c059850efe2b0be5671254dfd1e74e6e008035704962dd3f5d60cda238065db46c73836ad5d333078d1acef7b56b22d60138c360a551085a12756c5fa1a5334c32136dd9d9225c386e5242f29094877f73f63ddd4ca49c16e8"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1f}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x2c, 0x10, 0x401, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x190, 0x5230}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_XMIT_HASH_POLICY={0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f00000000c0)={[0x6a, 0x0, 0x0, 0x7, 0x8000004, 0x0, 0x106c, 0x405, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x2, 0x3, 0x0, 0x2], 0xeeee8000, 0x346210}) ioctl$KVM_RUN(r9, 0xae80, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x20846, 0x2) 0s ago: executing program 0 (id=478): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LOG_LEVEL={0x8, 0x5, 0x1, 0x0, 0x3ff}, @NFTA_LOG_PREFIX={0x6, 0x2, 0x1, 0x0, '}\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) ioctl$NILFS_IOCTL_GET_CPINFO(r1, 0x80186e82, &(0x7f0000000600)={&(0x7f0000000500)=[{0x0, 0x0, 0xd, 0x5dbc, 0x8, 0x7, 0x7, 0x7}, {0x2, 0x0, 0xffffffffffffffc5, 0x8000000000000001, 0xf, 0x80, 0x6b, 0x1}, {0x2, 0x0, 0x8000000000000000, 0x7, 0x401, 0x1000, 0x1758, 0x1}, {0x2, 0x0, 0x0, 0x0, 0x6, 0x5, 0x6, 0x7}], 0x4, 0x38, 0x0, 0x34d}) write(r1, &(0x7f0000000480)='usbip-vudc.0', 0xc) write(r1, &(0x7f00000004c0)='\n', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:26646' (ED25519) to the list of known hosts. [ 39.662681][ T43] kauditd_printk_skb: 17 callbacks suppressed [ 39.662807][ T43] audit: type=1400 audit(1788005757.653:138): avc: denied { name_bind } for pid=5718 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.696272][ T43] audit: type=1400 audit(1788005757.683:139): avc: denied { execute } for pid=5719 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.696843][ T43] audit: type=1400 audit(1788005757.683:140): avc: denied { execute_no_trans } for pid=5719 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.915828][ T43] audit: type=1400 audit(1788005759.903:141): avc: denied { mounton } for pid=5719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.924857][ T43] audit: type=1400 audit(1788005759.913:142): avc: denied { mount } for pid=5719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.926542][ T5719] cgroup: Unknown subsys name 'net' [ 41.930666][ T43] audit: type=1400 audit(1788005759.923:143): avc: denied { unmount } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.100137][ T5719] cgroup: Unknown subsys name 'cpuset' [ 42.104440][ T5719] cgroup: Unknown subsys name 'rlimit' [ 42.275521][ T43] audit: type=1400 audit(1788005760.263:144): avc: denied { setattr } for pid=5719 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.276064][ T43] audit: type=1400 audit(1788005760.263:145): avc: denied { create } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.276413][ T43] audit: type=1400 audit(1788005760.263:146): avc: denied { write } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.276837][ T43] audit: type=1400 audit(1788005760.263:147): avc: denied { read } for pid=5719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 42.337766][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.027217][ T5719] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.510744][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 46.510831][ T43] audit: type=1400 audit(1788005764.503:156): avc: denied { execmem } for pid=5726 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 46.687015][ T43] audit: type=1400 audit(1788005764.673:157): avc: denied { create } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.690434][ T43] audit: type=1400 audit(1788005764.683:158): avc: denied { read write } for pid=5731 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.690742][ T43] audit: type=1400 audit(1788005764.683:159): avc: denied { open } for pid=5731 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 46.704736][ T43] audit: type=1400 audit(1788005764.693:160): avc: denied { ioctl } for pid=5731 comm="syz-executor" path="socket:[5857]" dev="sockfs" ino=5857 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 46.730449][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 46.731309][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 46.735843][ T5741] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 46.735940][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 46.737656][ T5739] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.737739][ T5745] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 46.738201][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 46.738613][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 46.738701][ T5741] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 46.739237][ T5745] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 46.739736][ T5739] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 46.740637][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 46.741535][ T5741] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.741926][ T5747] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.742083][ T5747] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 46.742621][ T5747] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.742683][ T5746] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.744724][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.746226][ T43] audit: type=1400 audit(1788005764.733:161): avc: denied { read } for pid=5731 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.746862][ T43] audit: type=1400 audit(1788005764.733:162): avc: denied { open } for pid=5731 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.747582][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.752420][ T43] audit: type=1400 audit(1788005764.743:163): avc: denied { mounton } for pid=5731 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.754211][ T5746] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.758967][ T43] audit: type=1400 audit(1788005764.743:164): avc: denied { module_request } for pid=5730 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.783830][ T43] audit: type=1400 audit(1788005764.773:165): avc: denied { sys_module } for pid=5743 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.328016][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.328240][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.328577][ T5743] bridge_slave_0: entered allmulticast mode [ 47.329845][ T5743] bridge_slave_0: entered promiscuous mode [ 47.371583][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.374356][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.374433][ T5743] bridge_slave_1: entered allmulticast mode [ 47.375428][ T5743] bridge_slave_1: entered promiscuous mode [ 47.450699][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.451253][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.451424][ T5735] bridge_slave_0: entered allmulticast mode [ 47.452172][ T5735] bridge_slave_0: entered promiscuous mode [ 47.454554][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.454594][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.454647][ T5735] bridge_slave_1: entered allmulticast mode [ 47.455527][ T5735] bridge_slave_1: entered promiscuous mode [ 47.476385][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.498355][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.498438][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.498610][ T5731] bridge_slave_0: entered allmulticast mode [ 47.499365][ T5731] bridge_slave_0: entered promiscuous mode [ 47.502980][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.503951][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.518825][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.518916][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.520512][ T5731] bridge_slave_1: entered allmulticast mode [ 47.521232][ T5731] bridge_slave_1: entered promiscuous mode [ 47.529191][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.543521][ T5743] team0: Port device team_slave_0 added [ 47.543635][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.543674][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.543724][ T5730] bridge_slave_0: entered allmulticast mode [ 47.545458][ T5730] bridge_slave_0: entered promiscuous mode [ 47.546735][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.546780][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.547251][ T5730] bridge_slave_1: entered allmulticast mode [ 47.548180][ T5730] bridge_slave_1: entered promiscuous mode [ 47.556586][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.563945][ T5743] team0: Port device team_slave_1 added [ 47.564845][ T5735] team0: Port device team_slave_0 added [ 47.566181][ T5735] team0: Port device team_slave_1 added [ 47.580056][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.602817][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.604432][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.617961][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.618007][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.618042][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.620336][ T5731] team0: Port device team_slave_0 added [ 47.633368][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.633378][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.633391][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.640592][ T5731] team0: Port device team_slave_1 added [ 47.641550][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.641560][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.641577][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.663902][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.663915][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.663929][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.679875][ T5730] team0: Port device team_slave_0 added [ 47.683425][ T5730] team0: Port device team_slave_1 added [ 47.692073][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.692114][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.692150][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.721246][ T5735] hsr_slave_0: entered promiscuous mode [ 47.722163][ T5735] hsr_slave_1: entered promiscuous mode [ 47.723394][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.723407][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.723427][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.724470][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.724478][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.724490][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.743408][ T5743] hsr_slave_0: entered promiscuous mode [ 47.743869][ T5743] hsr_slave_1: entered promiscuous mode [ 47.744180][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 47.744241][ T5743] Cannot create hsr debugfs directory [ 47.744633][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.744640][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.744653][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.802635][ T5730] hsr_slave_0: entered promiscuous mode [ 47.803222][ T5730] hsr_slave_1: entered promiscuous mode [ 47.803655][ T5730] debugfs: 'hsr0' already exists in 'hsr' [ 47.803674][ T5730] Cannot create hsr debugfs directory [ 47.819664][ T5731] hsr_slave_0: entered promiscuous mode [ 47.820126][ T5731] hsr_slave_1: entered promiscuous mode [ 47.820411][ T5731] debugfs: 'hsr0' already exists in 'hsr' [ 47.820421][ T5731] Cannot create hsr debugfs directory [ 48.071625][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 48.077923][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.078412][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 48.082748][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.086113][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 48.090852][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.097480][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 48.102372][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.148312][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.148535][ T5735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.149449][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.149518][ T5735] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.153128][ T5743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 48.159064][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.165055][ T1180] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.168316][ T1180] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.176822][ T5743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 48.181673][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.182753][ T5743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 48.186794][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.188957][ T5743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 48.192383][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.253584][ T5730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 48.260710][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.264055][ T5730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 48.269364][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.276692][ T5730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 48.283834][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.284307][ T5730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 48.290000][ T5730] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.348020][ T5731] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 48.352737][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.358215][ T5731] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 48.362341][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.363990][ T5731] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 48.367081][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.370592][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.375097][ T5731] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 48.380667][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.419963][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.422829][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.431874][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.431963][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.450739][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.453240][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.453285][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.471171][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.471255][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.480065][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.480199][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.519483][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.561028][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.576049][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.578722][ T1180] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.578765][ T1180] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.590197][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.590286][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.613872][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.621881][ T74] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.622259][ T74] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.636921][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.637017][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.789713][ T5742] Bluetooth: hci2: command tx timeout [ 48.789961][ T5741] Bluetooth: hci1: command tx timeout [ 48.790289][ T5742] Bluetooth: hci0: command tx timeout [ 48.798888][ T5742] Bluetooth: hci3: command tx timeout [ 48.803372][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.836650][ T5735] veth0_vlan: entered promiscuous mode [ 48.845128][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.853253][ T5735] veth1_vlan: entered promiscuous mode [ 48.883735][ T5743] veth0_vlan: entered promiscuous mode [ 48.887194][ T5735] veth0_macvtap: entered promiscuous mode [ 48.894488][ T5735] veth1_macvtap: entered promiscuous mode [ 48.898632][ T5743] veth1_vlan: entered promiscuous mode [ 48.906670][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.915725][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.916701][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.941784][ T5743] veth0_macvtap: entered promiscuous mode [ 48.945254][ T5743] veth1_macvtap: entered promiscuous mode [ 48.989442][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.994797][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.016491][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.025883][ T5730] veth0_vlan: entered promiscuous mode [ 49.039037][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.039088][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.042582][ T5730] veth1_vlan: entered promiscuous mode [ 49.093378][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.093440][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.093593][ T5731] veth0_vlan: entered promiscuous mode [ 49.107645][ T5818] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.108030][ T5818] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.108053][ T5818] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109245][ T5818] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.109559][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.109569][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.116351][ T5731] veth1_vlan: entered promiscuous mode [ 49.117800][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.117837][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.117866][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.117895][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.121562][ T5730] veth0_macvtap: entered promiscuous mode [ 49.133530][ T5730] veth1_macvtap: entered promiscuous mode [ 49.142053][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.142065][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.158258][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.165924][ T5735] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 49.166885][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.179185][ T5731] veth0_macvtap: entered promiscuous mode [ 49.187728][ T5731] veth1_macvtap: entered promiscuous mode [ 49.208091][ T5568] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.208165][ T5568] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.208206][ T5568] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.208240][ T5568] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.217284][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.226405][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.282381][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.282451][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.319843][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.319890][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.336223][ T1164] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.336283][ T1164] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.368706][ T1164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.368737][ T1164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.380753][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.381410][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.391850][ T5568] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.392620][ T5568] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.509142][ T5908] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.509203][ T5908] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1'. [ 49.631264][ T5926] netlink: 8 bytes leftover after parsing attributes in process `syz.3.11'. [ 49.655247][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655330][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655396][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655448][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655485][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655528][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655566][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655615][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655657][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655695][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655733][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655782][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655819][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655856][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655894][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655943][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.655980][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656017][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656055][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656094][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656133][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656169][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656204][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656241][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656276][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656312][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656381][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656420][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656457][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656499][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656535][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.656571][ T5928] tun0: tun_chr_ioctl cmd 1074025673 [ 49.658340][ T5928] tun0: tun_chr_ioctl cmd 1074025675 [ 49.658351][ T5928] tun0: persist enabled [ 49.857663][ T5821] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 49.973599][ T5945] random: crng reseeded on system resumption [ 50.019726][ T5821] usb 6-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 50.030402][ T5821] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 50.030466][ T5821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.030543][ T5821] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 50.030581][ T5821] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 50.052351][ T5956] netlink: 'syz.3.23': attribute type 15 has an invalid length. [ 50.052395][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 50.061584][ T5821] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.061607][ T5821] usb 6-1: Product: syz [ 50.061618][ T5821] usb 6-1: Manufacturer: syz [ 50.061630][ T5821] usb 6-1: SerialNumber: syz [ 50.063845][ T5956] netlink: 'syz.3.23': attribute type 15 has an invalid length. [ 50.063857][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 50.063919][ T5956] Zero length message leads to an empty skb [ 50.078427][ T13] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 50.078456][ T13] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 50.078481][ T13] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 50.078508][ T13] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 50.115604][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.24'. [ 50.120002][ T5962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.24'. [ 50.130663][ T5962] batadv0: entered promiscuous mode [ 50.134977][ T5962] macsec1: entered promiscuous mode [ 50.137905][ T5962] macsec1: entered allmulticast mode [ 50.137922][ T5962] batadv0: entered allmulticast mode [ 50.139154][ T5962] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 50.164383][ T5964] netlink: 24 bytes leftover after parsing attributes in process `syz.0.25'. [ 50.434262][ T5988] loop5: detected capacity change from 0 to 7 [ 50.438597][ T5917] ushc 6-1:1.0: probe with driver ushc failed with error -110 [ 50.445737][ T5988] Dev loop5: unable to read RDB block 7 [ 50.445793][ T5988] loop5: unable to read partition table [ 50.445904][ T5988] loop5: partition table beyond EOD, truncated [ 50.445979][ T5988] loop_reread_partitions: partition scan of loop5 (被x ) failed (rc=-5) [ 50.452122][ T5737] usb 6-1: USB disconnect, device number 2 [ 50.471605][ T5990] netlink: 32 bytes leftover after parsing attributes in process `syz.3.34'. [ 50.551918][ T5995] binder: 5994:5995 ioctl c0306201 2000000004c0 returned -22 [ 50.556619][ T13] af_packet: tpacket_rcv: packet too big, clamped from 96 to 4294967272. macoff=96 [ 50.556897][ T5995] comedi comedi2: pcmda12: a I/O base address must be specified [ 50.665406][ T6002] capability: warning: `syz.3.39' uses deprecated v2 capabilities in a way that may be insecure [ 50.796827][ T5742] Bluetooth: hci1: Invalid connection link type handle 0x00c8 [ 50.797210][ T6010] netlink: Invalid conntrack timeout [ 50.797233][ T6010] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 50.869694][ T5742] Bluetooth: hci3: command tx timeout [ 50.869721][ T5741] Bluetooth: hci0: command tx timeout [ 50.869774][ T5741] Bluetooth: hci2: command tx timeout [ 50.878347][ T5746] Bluetooth: hci1: command tx timeout [ 50.933140][ T6017] netlink: 12 bytes leftover after parsing attributes in process `syz.3.43'. [ 51.047185][ T6035] syzkaller0: entered promiscuous mode [ 51.047237][ T6035] syzkaller0: entered allmulticast mode [ 51.127193][ T2325] libceph: mon0 (1)[c::]:6789 socket closed (con state V1_BANNER) [ 51.171272][ T6038] ceph: No mds server is up or the cluster is laggy [ 51.244618][ T6043] netlink: Unknown conntrack attr (type=12, max=9) [ 51.244673][ T6043] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.267590][ T2223] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 51.288534][ T6045] netlink: 'syz.2.53': attribute type 1 has an invalid length. [ 51.332164][ T6047] uprobe: syz.2.54:6047 failed to unregister, leaking uprobe [ 51.380656][ T6049] netlink: 'syz.2.55': attribute type 1 has an invalid length. [ 51.392609][ T6049] 8021q: adding VLAN 0 to HW filter on device bond1 [ 51.417399][ T2223] usb 5-1: Using ep0 maxpacket: 8 [ 51.418478][ T2223] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.419475][ T2223] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 51.419499][ T2223] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.419511][ T2223] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.419522][ T2223] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.419534][ T2223] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.419553][ T2223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.452630][ T6052] cramfs: checking physical address 0x000000002b240000 for linear cramfs image [ 51.452841][ T6052] cramfs: wrong magic [ 51.455435][ T6052] cramfs: wrong magic [ 51.503037][ T6054] SELinux: Context system_u:object_r:public_content_rw_t:s0 is not valid (left unmapped). [ 51.541746][ T43] kauditd_printk_skb: 155 callbacks suppressed [ 51.542046][ T43] audit: type=1400 audit(1788005769.533:321): avc: denied { append } for pid=6055 comm="syz.2.58" name="random" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 51.584097][ T6059] netlink: 'syz.2.60': attribute type 1 has an invalid length. [ 51.629048][ T43] audit: type=1400 audit(1788005769.623:322): avc: denied { connect } for pid=6031 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.635360][ T43] audit: type=1400 audit(1788005769.623:323): avc: denied { name_connect } for pid=6031 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 51.635387][ T43] audit: type=1400 audit(1788005769.623:324): avc: denied { listen } for pid=6031 comm="syz.0.48" lport=45828 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.635407][ T43] audit: type=1400 audit(1788005769.623:325): avc: denied { accept } for pid=6031 comm="syz.0.48" lport=45828 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 51.635427][ T43] audit: type=1400 audit(1788005769.623:326): avc: denied { setopt } for pid=6031 comm="syz.0.48" lport=45828 faddr=::ffff:100.1.1.0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 51.636012][ T2223] usb 5-1: usb_control_msg returned -32 [ 51.636042][ T2223] usbtmc 5-1:16.0: can't read capabilities [ 51.767117][ T6070] ceph: No source [ 51.841165][ T43] audit: type=1400 audit(1788005769.833:327): avc: denied { call } for pid=6031 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 51.843217][ T43] audit: type=1400 audit(1788005769.833:328): avc: denied { create } for pid=6031 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.843627][ T43] audit: type=1400 audit(1788005769.833:329): avc: denied { bind } for pid=6031 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.844004][ T43] audit: type=1400 audit(1788005769.833:330): avc: denied { setopt } for pid=6031 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 51.854729][ T2223] usb 5-1: USB disconnect, device number 2 [ 51.875140][ T6073] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.875887][ T6073] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.787119][ T6094] SELinux: policydb magic number 0x100 does not match expected magic number 0xf97cff8c [ 52.787477][ T6094] SELinux: failed to load policy [ 52.852254][ T6101] netlink: 'syz.1.74': attribute type 21 has an invalid length. [ 52.852408][ T6101] netlink: 'syz.1.74': attribute type 4 has an invalid length. [ 52.852421][ T6101] netlink: 'syz.1.74': attribute type 5 has an invalid length. [ 52.903274][ T6105] binder: 6104:6105 ioctl 4c06 ffffffffffffffff returned -22 [ 52.947778][ T5746] Bluetooth: hci3: command tx timeout [ 52.958251][ T5746] Bluetooth: hci1: command tx timeout [ 52.958295][ T5741] Bluetooth: hci0: command tx timeout [ 52.958500][ T5742] Bluetooth: hci2: command tx timeout [ 53.034850][ T6117] syzkaller0: entered promiscuous mode [ 53.034923][ T6117] syzkaller0: entered allmulticast mode [ 53.111778][ T6127] sctp: [Deprecated]: syz.3.83 (pid 6127) Use of int in max_burst socket option. [ 53.111778][ T6127] Use struct sctp_assoc_value instead [ 53.138155][ T6128] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 53.142199][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.146289][ T1164] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.146364][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.146528][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.146560][ T1162] Bluetooth: hci4: Frame reassembly failed (-84) [ 53.162216][ T6134] process 'syz.2.85' launched './file1' with NULL argv: empty string added [ 53.216039][ T6136] i2c i2c-1: new_device: Instantiated device isp1301 at 0x02 [ 53.527122][ T6141] netlink: 'syz.0.87': attribute type 1 has an invalid length. [ 53.610279][ T6143] team0: Device vlan2 is already an upper device of the team interface [ 53.827074][ T6153] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 53.933371][ T6165] hsr_slave_0: left promiscuous mode [ 53.935973][ T6165] hsr_slave_1: left promiscuous mode [ 54.097843][ T6165] syz.2.93 uses obsolete (PF_INET,SOCK_PACKET) [ 54.692738][ T6187] ceph: No source [ 55.030137][ T5741] Bluetooth: hci3: command tx timeout [ 55.030198][ T5741] Bluetooth: hci2: command tx timeout [ 55.030247][ T5741] Bluetooth: hci0: command tx timeout [ 55.030284][ T5741] Bluetooth: hci1: command tx timeout [ 55.045341][ T6197] team0 (unregistering): Port device team_slave_0 removed [ 55.052539][ T6197] team0 (unregistering): Port device team_slave_1 removed [ 55.197548][ T5742] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 55.214407][ T6204] __nla_validate_parse: 11 callbacks suppressed [ 55.214635][ T6204] netlink: 28 bytes leftover after parsing attributes in process `syz.0.100'. [ 55.270130][ T6208] binder_alloc: 6207: binder_alloc_buf size 1024 failed, no address space [ 55.270223][ T6208] binder_alloc: allocated: 12288 (num: 2 largest: 12280), free: 0 (num: 0 largest: 0) [ 55.306393][ T6213] netlink: 16 bytes leftover after parsing attributes in process `syz.0.103'. [ 55.665178][ T6226] openvswitch: netlink: IP tunnel dst address not specified [ 56.606506][ T43] kauditd_printk_skb: 76 callbacks suppressed [ 56.606564][ T43] audit: type=1400 audit(1788005774.593:407): avc: denied { mounton } for pid=6260 comm="syz.2.117" path="/proc/103/net/netfilter" dev="proc" ino=4026533285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 56.609700][ T43] audit: type=1400 audit(1788005774.603:408): avc: denied { mount } for pid=6261 comm="syz.1.118" name="/" dev="ramfs" ino=11768 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.610503][ T43] audit: type=1400 audit(1788005774.603:409): avc: denied { unmount } for pid=6261 comm="syz.1.118" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 56.614236][ T43] audit: type=1400 audit(1788005774.603:410): avc: denied { execute } for pid=6261 comm="syz.1.118" path="/dev/audio" dev="devtmpfs" ino=1314 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 56.663352][ T6272] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 56.694027][ T43] audit: type=1400 audit(1788005774.683:411): avc: denied { nlmsg_read } for pid=6273 comm="syz.1.121" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 56.694325][ T6272] TC_ACT_REPEAT abuse ? [ 56.739915][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.1.122'. [ 56.740219][ T6277] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 56.741056][ T43] audit: type=1400 audit(1788005774.733:412): avc: denied { read } for pid=6276 comm="syz.1.122" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 56.741954][ T43] audit: type=1400 audit(1788005774.733:413): avc: denied { map } for pid=6278 comm="syz.0.123" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 56.747262][ T6277] netlink: 'syz.1.122': attribute type 10 has an invalid length. [ 56.771211][ T43] audit: type=1400 audit(1788005774.763:414): avc: denied { connect } for pid=6280 comm="syz.0.124" lport=135 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.788537][ T6282] loop7: detected capacity change from 0 to 1 [ 56.811199][ T43] audit: type=1400 audit(1788005774.803:415): avc: denied { ioctl } for pid=6283 comm="syz.1.125" path="socket:[12542]" dev="sockfs" ino=12542 ioctlcmd=0x8971 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.811821][ T6284] program syz.1.125 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.840348][ T43] audit: type=1400 audit(1788005774.833:416): avc: denied { setopt } for pid=6285 comm="syz.2.126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.860361][ T6291] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 56.862909][ T6281] loop7: detected capacity change from 1 to 0 [ 57.000408][ T6308] program syz.2.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.000418][ T6307] program syz.2.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.000775][ T6307] program syz.2.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.000832][ T6308] program syz.2.131 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.406584][ T6325] capability: warning: `syz.1.136' uses 32-bit capabilities (legacy support in use) [ 57.475762][ T6329] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 57.475839][ T6329] overlayfs: overlapping lowerdir path [ 57.513109][ T6331] netlink: 16 bytes leftover after parsing attributes in process `syz.1.139'. [ 57.526514][ T6331] nfs4: Unknown parameter 'syz' [ 57.749154][ T5819] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 57.852237][ T6346] netlink: 64 bytes leftover after parsing attributes in process `syz.1.140'. [ 57.888744][ T5819] usb 7-1: device descriptor read/64, error -71 [ 57.893637][ T6352] netlink: 'syz.0.145': attribute type 1 has an invalid length. [ 57.893723][ T6352] netlink: 224 bytes leftover after parsing attributes in process `syz.0.145'. [ 57.927185][ T6355] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 57.927248][ T6355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.018381][ T6366] netlink: 'syz.1.150': attribute type 3 has an invalid length. [ 58.018425][ T6366] netlink: 'syz.1.150': attribute type 3 has an invalid length. [ 58.018622][ T6366] netlink: 'syz.1.150': attribute type 3 has an invalid length. [ 58.127688][ T5819] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 58.132034][ T6372] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 58.199032][ T6372] md: loop0 has zero or unknown size, marking faulty! [ 58.249283][ T851] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 58.277942][ T5819] usb 7-1: device descriptor read/64, error -71 [ 58.388184][ T5819] usb usb7-port1: attempt power cycle [ 58.410435][ T851] usb 5-1: unable to get BOS descriptor or descriptor too short [ 58.413463][ T851] usb 5-1: New USB device found, idVendor=1430, idProduct=6cdc, bcdDevice=85.cc [ 58.418040][ T851] usb 5-1: config 8 has an invalid interface number: 198 but max is 0 [ 58.422452][ T851] usb 5-1: config 8 has no interface number 0 [ 58.422493][ T851] usb 5-1: config 8 interface 198 altsetting 0 endpoint 0xA has invalid maxpacket 1023, setting to 8 [ 58.432600][ T851] usb 5-1: string descriptor 0 read error: -22 [ 58.434763][ T851] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.442296][ T6363] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 58.477475][ T70] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 58.637756][ T70] usb 6-1: Using ep0 maxpacket: 8 [ 58.639463][ T70] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 58.640404][ T70] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 58.640427][ T70] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 58.640438][ T70] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 58.640450][ T70] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 58.640468][ T70] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.640488][ T70] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.665236][ T851] usb 5-1: USB disconnect, device number 3 [ 58.727452][ T5819] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 58.748182][ T5819] usb 7-1: device descriptor read/8, error -71 [ 58.855399][ T70] usb 6-1: usb_control_msg returned -32 [ 58.856720][ T70] usbtmc 6-1:16.0: can't read capabilities [ 58.987537][ T5819] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 59.009094][ T5819] usb 7-1: device descriptor read/8, error -71 [ 59.118178][ T5819] usb usb7-port1: unable to enumerate USB device [ 59.209286][ T6380] usbtmc 6-1:16.0: INITIATE_ABORT_BULK_IN returned 0 [ 59.218072][ T5848] usb 6-1: USB disconnect, device number 3 [ 60.130854][ T6394] trusted_key: encrypted_key: master key parameter '=6AĄz8\v՞LG [ 60.130854][ T6394] K5DL\Iڝ.#~Q|*cqKE [ 60.130854][ T6394] Pg' is invalid [ 60.191512][ T6396] warning: `syz.0.160' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 60.403702][ T6404] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 60.553453][ T6410] random: crng reseeded on system resumption [ 60.581500][ T6412] netlink: 40 bytes leftover after parsing attributes in process `syz.2.163'. [ 60.613743][ T6415] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 60.622492][ T6415] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 60.780191][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.2.169'. [ 60.839622][ T6431] bond1: entered promiscuous mode [ 60.854449][ T6431] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.876593][ T6433] bond1: (slave ipip0): refused to change device type [ 61.012241][ T6441] SELinux: DCCP has been removed, pid=6441 comm=syz.2.170 [ 61.013072][ T6441] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.462099][ T6467] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=6467 comm=syz.0.177 [ 61.671512][ T30] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.824550][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 61.824641][ T30] usb 7-1: New USB device found, idVendor=bd6d, idProduct=0070, bcdDevice=db.fc [ 61.824699][ T30] usb 7-1: no configurations [ 61.824728][ T30] usb 7-1: can't read configurations, error -22 [ 61.887830][ T5737] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.038140][ T5737] usb 6-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 62.038963][ T5737] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.038987][ T5737] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 62.039000][ T5737] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 62.039012][ T5737] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 62.039025][ T5737] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 62.039038][ T5737] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 62.039050][ T5737] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 62.039061][ T5737] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 62.039080][ T5737] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 62.039091][ T5737] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 62.039102][ T5737] usb 6-1: config 1 interface 0 altsetting 0 has 8 endpoint descriptors, different from the interface descriptor's value: 14 [ 62.041527][ T5737] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.041540][ T5737] usb 6-1: Product: syz [ 62.041547][ T5737] usb 6-1: Manufacturer: syz [ 62.041555][ T5737] usb 6-1: SerialNumber: syz [ 62.048012][ T6487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.048103][ T6487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.048152][ T6487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.048214][ T6487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.048299][ T6487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.048343][ T6487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.048426][ T6487] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 62.061614][ T5737] keyspan 6-1:1.0: Keyspan 2 port adapter converter detected [ 62.063225][ T5737] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 7 [ 62.067499][ T5737] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 62.067606][ T5737] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 5 [ 62.076918][ T5737] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 62.091898][ T5737] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 3 [ 62.091962][ T5737] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 4 [ 62.092037][ T5737] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 62.096371][ T5737] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 62.183882][ T43] kauditd_printk_skb: 46 callbacks suppressed [ 62.183950][ T43] audit: type=1400 audit(1788005780.173:463): avc: denied { bind } for pid=6488 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.184520][ T43] audit: type=1400 audit(1788005780.173:464): avc: denied { listen } for pid=6488 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.192057][ T43] audit: type=1400 audit(1788005780.183:465): avc: denied { accept } for pid=6488 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.192715][ T43] audit: type=1400 audit(1788005780.183:466): avc: denied { write } for pid=6488 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.193121][ T43] audit: type=1400 audit(1788005780.183:467): avc: denied { read } for pid=6488 comm="syz.0.181" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 62.193686][ T6489] netlink: 12 bytes leftover after parsing attributes in process `syz.0.181'. [ 62.347538][ T6494] syzkaller0: entered promiscuous mode [ 62.347578][ T6494] syzkaller0: entered allmulticast mode [ 62.348073][ T6494] TC_ACT_REPEAT abuse ? [ 62.351790][ T6494] TC_ACT_REPEAT abuse ? [ 62.678321][ T30] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 62.828012][ T30] usb 7-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 62.833574][ T30] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.864458][ T30] i2c-tiny-usb 7-1:1.0: version 1.00 found at bus 007 address 007 [ 63.277990][ T30] (null): failure reading functionality [ 63.283281][ T30] i2c i2c-2: failure reading functionality [ 63.312231][ T30] i2c i2c-2: connected i2c-tiny-usb device [ 63.433677][ T43] audit: type=1400 audit(1788005781.423:468): avc: denied { create } for pid=6503 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.436434][ T43] audit: type=1400 audit(1788005781.423:469): avc: denied { bind } for pid=6503 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.438954][ T43] audit: type=1400 audit(1788005781.423:470): avc: denied { write } for pid=6503 comm="syz.0.185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 63.479468][ T43] audit: type=1400 audit(1788005781.473:471): avc: denied { read } for pid=6505 comm="syz.0.186" name="loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.479771][ T43] audit: type=1400 audit(1788005781.473:472): avc: denied { open } for pid=6505 comm="syz.0.186" path="/dev/loop-control" dev="devtmpfs" ino=655 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 63.546553][ T6501] i2c i2c-2: failure reading status [ 63.546634][ T6501] ucsi-stm32g0-i2c 2-0003: i2c read 03, 00 error: -5 [ 63.548874][ T6501] ucsi-stm32g0-i2c 2-0003: probe with driver ucsi-stm32g0-i2c failed with error -5 [ 63.549192][ T6501] i2c i2c-2: new_device: Instantiated device stm32g0-typec at 0x03 [ 63.550742][ T6501] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 63.555165][ T57] usb 7-1: USB disconnect, device number 7 [ 64.236921][ T6525] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 64.245501][ T6532] netlink: 'syz.0.193': attribute type 1 has an invalid length. [ 64.246820][ T6525] bond2: entered promiscuous mode [ 64.247041][ T6525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.251693][ T6532] netlink: 4 bytes leftover after parsing attributes in process `syz.0.193'. [ 64.262401][ T6525] 8021q: adding VLAN 0 to HW filter on device bond2 [ 64.262623][ T6525] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 64.262635][ T6525] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 64.268271][ T6525] bond2: (slave ip6gre1): making interface the new active one [ 64.268284][ T6525] ip6gre1: entered promiscuous mode [ 64.274056][ T6525] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 64.311683][ T6534] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 64.321350][ T6536] kAFS: unable to lookup cell '(,c' [ 64.361003][ T6541] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 64.368910][ T6541] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 64.376232][ T6541] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 64.380502][ T6541] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 64.384676][ T6541] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 64.389086][ T5742] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 64.389196][ T5742] Bluetooth: hci1: Injecting HCI hardware error event [ 64.389618][ T5742] Bluetooth: hci1: hardware error 0x00 [ 64.512661][ T6556] netlink: 128 bytes leftover after parsing attributes in process `syz.0.200'. [ 64.560175][ T6561] netlink: 128 bytes leftover after parsing attributes in process `syz.0.200'. [ 64.606701][ T6572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.203'. [ 64.612917][ T6572] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'. [ 64.616322][ T6572] netlink: 'syz.2.203': attribute type 12 has an invalid length. [ 64.735907][ T9] usb 6-1: USB disconnect, device number 4 [ 64.755451][ T6580] netlink: 'syz.2.206': attribute type 39 has an invalid length. [ 64.774101][ T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 64.776658][ T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 64.777194][ T9] keyspan 6-1:1.0: device disconnected [ 64.852839][ T74] IPVS: starting estimator thread 0... [ 64.937944][ T6603] IPVS: using max 44 ests per chain, 105600 per kthread [ 65.127653][ T6615] overlayfs: missing 'lowerdir' [ 65.150186][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.1.215'. [ 65.364944][ T6628] netlink: 104 bytes leftover after parsing attributes in process `syz.1.219'. [ 65.565756][ T6633] sctp: [Deprecated]: syz.1.221 (pid 6633) Use of int in maxseg socket option. [ 65.565756][ T6633] Use struct sctp_assoc_value instead [ 66.468427][ T5742] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 66.937365][ T6658] ======================================================= [ 66.937365][ T6658] WARNING: The mand mount option has been deprecated and [ 66.937365][ T6658] and is ignored by this kernel. Remove the mand [ 66.937365][ T6658] option from the mount to silence this warning. [ 66.937365][ T6658] ======================================================= [ 67.194383][ T43] kauditd_printk_skb: 35 callbacks suppressed [ 67.196953][ T43] audit: type=1400 audit(1788005785.183:508): avc: denied { write } for pid=6674 comm="syz.1.232" name="/" dev="9p" ino=79691901 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 67.196987][ T43] audit: type=1400 audit(1788005785.183:509): avc: denied { write } for pid=6674 comm="syz.1.232" name="file1" dev="9p" ino=79691935 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 67.200167][ T6675] netlink: 8 bytes leftover after parsing attributes in process `syz.1.232'. [ 67.244873][ T6675] zswap: compressor z not available [ 67.253457][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.253713][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.253855][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.253950][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.254047][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.254140][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.254233][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.254399][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.254499][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.233'. [ 67.481662][ T43] audit: type=1400 audit(1788005785.473:510): avc: denied { unmount } for pid=5735 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 67.514480][ T43] audit: type=1400 audit(1788005785.503:511): avc: denied { create } for pid=6686 comm="syz.1.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 67.575930][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.577567][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.634742][ T43] audit: type=1400 audit(1788005785.623:512): avc: denied { read write } for pid=6690 comm="syz.0.235" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 67.635002][ T43] audit: type=1400 audit(1788005785.623:513): avc: denied { open } for pid=6690 comm="syz.0.235" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 67.661238][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.676710][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.686892][ T43] audit: type=1400 audit(1788005785.673:514): avc: denied { create } for pid=6690 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.697972][ T43] audit: type=1400 audit(1788005785.693:516): avc: denied { getopt } for pid=6690 comm="syz.0.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.698043][ T43] audit: type=1400 audit(1788005785.693:515): avc: denied { ioctl } for pid=6690 comm="syz.0.235" path="/dev/input/mice" dev="devtmpfs" ino=938 ioctlcmd=0x64b9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 67.709992][ T43] audit: type=1400 audit(1788005785.703:517): avc: denied { ioctl } for pid=6690 comm="syz.0.235" path="socket:[13215]" dev="sockfs" ino=13215 ioctlcmd=0x581f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 67.741843][ T6698] jffs2: notice: (6698) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 67.930021][ T6716] bridge1: entered promiscuous mode [ 67.930102][ T6716] bridge1: entered allmulticast mode [ 67.947443][ T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.947518][ T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.947560][ T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.947579][ T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.976848][ T6718] IPv6: sit1: Disabled Multicast RS [ 68.141075][ T6735] syz_tun: entered allmulticast mode [ 68.146163][ T6735] device-mapper: ioctl: Unable to rename non-existent device, to $ [ 68.146517][ T6734] syz_tun: left allmulticast mode [ 68.208320][ T6741] netlink: 'syz.1.246': attribute type 10 has an invalid length. [ 68.210676][ T6741] ipvlan0: entered allmulticast mode [ 68.210697][ T6741] veth0_vlan: entered allmulticast mode [ 68.216013][ T6741] team0: Device ipvlan0 failed to register rx_handler [ 68.254970][ T6743] xt_ipcomp: unknown flags 1D [ 68.470986][ T6758] syzkaller0: entered promiscuous mode [ 68.471056][ T6758] syzkaller0: entered allmulticast mode [ 68.498993][ T5746] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.501674][ T5746] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.504167][ T5746] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.511556][ T5746] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.517623][ T5746] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.600001][ T6770] netlink: 'syz.2.255': attribute type 39 has an invalid length. [ 68.789017][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 68.789080][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.817759][ T6782] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6782 comm=syz.0.257 [ 68.818153][ T6782] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 68.885604][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 68.886040][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.990441][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 68.990517][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.077207][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 2816 - 0 [ 69.077258][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.187547][ T30] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 69.351532][ T30] usb 5-1: not running at top speed; connect to a high speed hub [ 69.351587][ T30] usb 5-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 69.352998][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8E has invalid maxpacket 512, setting to 64 [ 69.353017][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 69.353032][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 69.353046][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 69.353061][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 512, setting to 64 [ 69.353076][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 69.354700][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.354714][ T30] usb 5-1: Product: syz [ 69.354722][ T30] usb 5-1: Manufacturer: syz [ 69.354730][ T30] usb 5-1: SerialNumber: syz [ 69.360162][ T6795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.360262][ T6795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.360310][ T6795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.360355][ T6795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.360455][ T6795] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 69.364314][ T30] usb 5-1: USB2VGA dongle found at address 4 [ 69.369344][ T30] usb 5-1: Allocated 8 output buffers [ 69.369356][ T30] usb 5-1: Not attached to USB 2.0 hub, deferring init [ 69.370264][ T6760] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.370333][ T6760] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.370415][ T6760] bridge_slave_0: entered allmulticast mode [ 69.385322][ T6760] bridge_slave_0: entered promiscuous mode [ 69.415880][ T13] bridge_slave_1: left allmulticast mode [ 69.415957][ T13] bridge_slave_1: left promiscuous mode [ 69.416165][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.423002][ T13] bridge_slave_0: left allmulticast mode [ 69.423087][ T13] bridge_slave_0: left promiscuous mode [ 69.423386][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.528918][ T6814] netlink: 'syz.2.264': attribute type 15 has an invalid length. [ 69.528963][ T6814] netlink: 'syz.2.264': attribute type 18 has an invalid length. [ 69.543471][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.549207][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.552999][ T13] bond0 (unregistering): Released all slaves [ 69.559412][ T6760] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.559513][ T6760] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.559608][ T6760] bridge_slave_1: entered allmulticast mode [ 69.560795][ T6760] bridge_slave_1: entered promiscuous mode [ 69.562946][ T6795] usb 5-1: Device not attached to USB 2.0 hub [ 69.568569][ T6816] usb 5-1: Device not attached to USB 2.0 hub [ 69.568876][ T6815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 69.569078][ T6815] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 69.607892][ T6819] syzkaller0: entered promiscuous mode [ 69.607950][ T6819] syzkaller0: entered allmulticast mode [ 69.616199][ T9] usb 5-1: USB disconnect, device number 4 [ 69.671139][ T6760] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.673849][ T6760] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.704892][ T6760] team0: Port device team_slave_0 added [ 69.710242][ T6760] team0: Port device team_slave_1 added [ 69.749106][ T6823] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 69.765647][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.765690][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.765720][ T6760] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.766664][ T6760] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.766672][ T6760] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 69.766685][ T6760] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.801883][ T6760] hsr_slave_0: entered promiscuous mode [ 69.802430][ T6760] hsr_slave_1: entered promiscuous mode [ 69.802842][ T6760] debugfs: 'hsr0' already exists in 'hsr' [ 69.802855][ T6760] Cannot create hsr debugfs directory [ 69.856898][ T13] hsr_slave_0: left promiscuous mode [ 69.859781][ T13] hsr_slave_1: left promiscuous mode [ 69.861429][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.861448][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.864779][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.864791][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.873117][ T13] batadv0: left allmulticast mode [ 69.873264][ T13] batadv0: left promiscuous mode [ 69.873305][ T13] veth1_macvtap: left promiscuous mode [ 69.873325][ T13] veth0_macvtap: left promiscuous mode [ 69.873372][ T13] veth1_vlan: left promiscuous mode [ 69.873411][ T13] veth0_vlan: left promiscuous mode [ 70.011960][ T13] team0 (unregistering): Port device team_slave_1 removed [ 70.027468][ T13] team0 (unregistering): Port device team_slave_0 removed [ 70.077432][ T2325] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 70.092522][ T5445] 8021q: adding VLAN 0 to HW filter on device eth2 [ 70.238144][ T2325] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 70.243290][ T2325] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 70.243362][ T2325] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 70.243407][ T2325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.254039][ T6849] ceph: Path missing in source [ 70.267585][ T2325] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 70.298872][ T6760] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 70.308486][ T6760] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 70.312518][ T6760] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 70.327828][ T6760] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 70.328496][ T6760] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 70.333399][ T6760] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 70.334345][ T6760] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.344409][ T6760] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 70.352806][ T5445] 8021q: adding VLAN 0 to HW filter on device eth3 [ 70.413938][ T6860] usb usb5: usbfs: process 6860 (syz.2.273) did not claim interface 0 before use [ 70.421800][ T6760] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.433300][ T6760] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.442768][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.442860][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.454306][ T74] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.454458][ T74] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.460381][ T6865] MTD: Couldn't look up 'mtd0/file0': -2 [ 70.521858][ T5445] 8021q: adding VLAN 0 to HW filter on device eth4 [ 70.601172][ T6882] comedi comedi3: comedi_test: 4 microvolt, 2 microsecond waveform attached [ 70.628822][ T5746] Bluetooth: hci4: command tx timeout [ 70.685094][ T5445] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.765066][ T6905] bridge_slave_0 (unregistering): left allmulticast mode [ 70.766058][ T6905] bridge_slave_0 (unregistering): left promiscuous mode [ 70.766190][ T6905] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.790687][ T6760] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.926847][ T6760] veth0_vlan: entered promiscuous mode [ 70.930936][ T6760] veth1_vlan: entered promiscuous mode [ 70.945924][ T6760] veth0_macvtap: entered promiscuous mode [ 70.948782][ T6760] veth1_macvtap: entered promiscuous mode [ 70.956930][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.961809][ T6760] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.971553][ T5568] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.991950][ T70] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 71.008720][ T5818] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.008789][ T5818] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.008845][ T5818] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.038951][ T6925] netlink: 'syz.2.285': attribute type 2 has an invalid length. [ 71.040127][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.040143][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.073160][ T74] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.073226][ T74] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.127189][ T6931] netlink: 'syz.4.250': attribute type 12 has an invalid length. [ 71.133788][ T6931] netlink: 'syz.4.250': attribute type 12 has an invalid length. [ 71.137491][ T70] usb 5-1: Invalid ep0 maxpacket: 64 [ 71.147480][ T5818] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.147545][ T5818] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.147583][ T5818] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.147615][ T5818] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 71.272093][ T70] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 71.274579][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.274896][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.282650][ T25] cfg80211: failed to load regulatory.db [ 71.338564][ T6946] pim6reg9: entered allmulticast mode [ 71.417624][ T70] usb 5-1: Invalid ep0 maxpacket: 64 [ 71.417918][ T70] usb usb5-port1: attempt power cycle [ 71.568074][ T5848] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 71.587660][ T9] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 71.719699][ T5848] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 71.720755][ T5848] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 71.720773][ T5848] usb 9-1: config 1 has no interface number 0 [ 71.723475][ T5848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.723499][ T5848] usb 9-1: Product: syz [ 71.723510][ T5848] usb 9-1: Manufacturer: syz [ 71.723521][ T5848] usb 9-1: SerialNumber: syz [ 71.731614][ T5848] usb 9-1: 3:1 : does not exist [ 71.731629][ T5848] usb 9-1: 3:2 : does not exist [ 71.741533][ T9] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 71.755434][ T9] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 71.755486][ T9] usb 7-1: Product: syz [ 71.755519][ T9] usb 7-1: Manufacturer: syz [ 71.755528][ T9] usb 7-1: SerialNumber: syz [ 71.757561][ T70] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 71.763773][ T9] usb 7-1: config 0 descriptor?? [ 71.777879][ T70] usb 5-1: Invalid ep0 maxpacket: 64 [ 71.917552][ T70] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 71.930162][ T2325] usb 9-1: USB disconnect, device number 2 [ 71.947858][ T70] usb 5-1: Invalid ep0 maxpacket: 64 [ 71.948174][ T70] usb usb5-port1: unable to enumerate USB device [ 72.241158][ T70] usb 6-1: USB disconnect, device number 5 [ 72.247966][ T70] idmouse 6-1:1.0: disconnected [ 72.341371][ T2325] usb 7-1: USB disconnect, device number 8 [ 72.565103][ T43] kauditd_printk_skb: 43 callbacks suppressed [ 72.565215][ T43] audit: type=1400 audit(1788005790.553:561): avc: denied { create } for pid=6961 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 72.565806][ T43] audit: type=1400 audit(1788005790.553:562): avc: denied { setopt } for pid=6961 comm="syz.4.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.566707][ T6963] __nla_validate_parse: 71 callbacks suppressed [ 72.566716][ T6963] netlink: 36 bytes leftover after parsing attributes in process `syz.4.291'. [ 72.717660][ T5746] Bluetooth: hci4: command tx timeout [ 72.937632][ T6969] batadv_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 73.035595][ T6971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 73.036378][ T6971] block nbd0: server does not support multiple connections per device. [ 73.038955][ T6971] block nbd0: shutting down sockets [ 73.210612][ T43] audit: type=1400 audit(1788005791.203:563): avc: denied { write } for pid=6974 comm="syz.2.295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 73.406788][ T43] audit: type=1400 audit(1788005791.393:564): avc: denied { mmap_zero } for pid=6979 comm="syz.4.297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 73.557818][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.4.298'. [ 73.572791][ T6982] hsr_slave_1 (unregistering): left promiscuous mode [ 73.758388][ T43] audit: type=1400 audit(1788005791.753:565): avc: denied { read } for pid=6985 comm="syz.1.299" path="socket:[14892]" dev="sockfs" ino=14892 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 73.801806][ T43] audit: type=1804 audit(1788005791.793:566): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.300" name="/newroot/89/file0" dev="tmpfs" ino=483 res=1 errno=0 [ 73.802599][ T6989] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: 1 [ 73.802610][ T6989] ref_ctr increment failed for inode: 0x1e3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026ca0cc0 [ 73.803131][ T6989] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -22341, delta: -1 [ 73.803141][ T6989] ref_ctr decrement failed for inode: 0x1e3 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888026ca0cc0 [ 73.803158][ T6989] uprobe: syz.0.300:6989 failed to unregister, leaking uprobe [ 73.856470][ T43] audit: type=1400 audit(1788005791.843:567): avc: denied { open } for pid=6991 comm="syz.0.301" path="/dev/ptyq5" dev="devtmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.206300][ T43] audit: type=1400 audit(1788005792.193:568): avc: denied { ioctl } for pid=6994 comm="syz.2.302" path="/dev/ptyq8" dev="devtmpfs" ino=135 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 74.260233][ T6997] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 74.269735][ T43] audit: type=1400 audit(1788005792.263:569): avc: denied { read } for pid=5127 comm="acpid" name="mouse2" dev="devtmpfs" ino=3044 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.269798][ T43] audit: type=1400 audit(1788005792.263:570): avc: denied { open } for pid=5127 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=3044 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.453657][ T7006] XFS (nbd4): SB validate failed with error -5. [ 74.485087][ T7006] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 74.502455][ T7013] xfs: Unknown parameter 'grpquota_bridge' [ 74.505145][ T7006] device-mapper: ioctl: device name cannot be "control", ".", or ".." [ 74.625733][ T7021] jffs2: notice: (7021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 74.653344][ T7021] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 74.788117][ T5746] Bluetooth: hci4: command tx timeout [ 74.798147][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 74.857597][ T5848] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 74.949762][ T9] usb 6-1: Using ep0 maxpacket: 32 [ 74.952760][ T9] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 74.960264][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 74.960311][ T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 228 [ 74.962596][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.962616][ T9] usb 6-1: Product: syz [ 74.962627][ T9] usb 6-1: Manufacturer: syz [ 74.962638][ T9] usb 6-1: SerialNumber: syz [ 74.968554][ T9] usb 6-1: config 0 descriptor?? [ 74.969217][ T7019] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.007430][ T5848] usb 5-1: Using ep0 maxpacket: 8 [ 75.008266][ T5848] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 75.009213][ T5848] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 75.009237][ T5848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 75.009257][ T5848] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 75.009276][ T5848] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 75.009310][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.177755][ T9] usb 6-1: USB disconnect, device number 6 [ 75.215318][ T5848] usb 5-1: GET_CAPABILITIES returned 0 [ 75.215457][ T5848] usbtmc 5-1:16.0: can't read capabilities [ 75.278836][ T7041] netlink: 12 bytes leftover after parsing attributes in process `syz.4.313'. [ 75.481485][ T2325] usb 5-1: USB disconnect, device number 9 [ 75.783100][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 75.789023][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 75.796517][ T7062] netlink: 4 bytes leftover after parsing attributes in process `syz.1.320'. [ 75.796711][ T7062] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 75.798016][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 75.798035][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.320'. [ 76.260582][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.261746][ T57] libceph: connect (1)[c::]:6789 error -101 [ 76.261848][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 76.335757][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.367450][ T70] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 76.402931][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.475423][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.519365][ T70] usb 9-1: Using ep0 maxpacket: 32 [ 76.520400][ T70] usb 9-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 76.521832][ T70] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 76.521862][ T70] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 228 [ 76.527701][ T70] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.527723][ T70] usb 9-1: Product: syz [ 76.527734][ T70] usb 9-1: Manufacturer: syz [ 76.527745][ T70] usb 9-1: SerialNumber: syz [ 76.531578][ T70] usb 9-1: config 0 descriptor?? [ 76.533286][ T7083] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.545014][ T57] libceph: connect (1)[c::]:6789 error -101 [ 76.545152][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 76.569444][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.632636][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.695526][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.742008][ T70] usb 9-1: USB disconnect, device number 3 [ 76.771061][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.826181][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.903389][ T7091] xt_hashlimit: size too large, truncated to 1048576 [ 76.926576][ T7112] sd 0:0:0:0: PR command failed: 1026 [ 76.926644][ T7112] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 76.926830][ T7112] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 76.980721][ T7115] block2mtd: error: cannot open device %Yh [ 77.049652][ T57] libceph: connect (1)[c::]:6789 error -101 [ 77.052754][ T57] libceph: mon0 (1)[c::]:6789 connect error [ 77.276881][ T7122] bond0: option ad_select: unable to set because the bond device is up [ 77.359845][ T7093] ceph: No mds server is up or the cluster is laggy [ 77.442260][ T7135] netlink: 'syz.4.336': attribute type 6 has an invalid length. [ 77.445131][ T7135] netlink: 'syz.4.336': attribute type 5 has an invalid length. [ 77.697111][ T43] kauditd_printk_skb: 22 callbacks suppressed [ 77.697183][ T43] audit: type=1400 audit(1788005795.683:593): avc: denied { read } for pid=7143 comm="syz.1.339" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.697221][ T43] audit: type=1400 audit(1788005795.683:594): avc: denied { open } for pid=7143 comm="syz.1.339" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.698017][ T7144] __nla_validate_parse: 68 callbacks suppressed [ 77.698028][ T7144] netlink: 16 bytes leftover after parsing attributes in process `syz.1.339'. [ 77.698579][ T43] audit: type=1400 audit(1788005795.683:595): avc: denied { ioctl } for pid=7143 comm="syz.1.339" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 77.997443][ T57] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 78.157489][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 78.158344][ T57] usb 6-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 78.159256][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 78.159284][ T57] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 228 [ 78.160960][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.160975][ T57] usb 6-1: Product: syz [ 78.160983][ T57] usb 6-1: Manufacturer: syz [ 78.161062][ T57] usb 6-1: SerialNumber: syz [ 78.162637][ T57] usb 6-1: config 0 descriptor?? [ 78.163351][ T7146] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 78.377515][ T851] usb 6-1: USB disconnect, device number 7 [ 78.386294][ T7149] loop5: detected capacity change from 0 to 2640 [ 78.387074][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387142][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387178][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387213][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387247][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387369][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387418][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387464][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387496][ T7149] ldm_validate_partition_table(): Disk read failed. [ 78.387539][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387584][ T7149] Buffer I/O error on dev loop5, logical block 0, async page read [ 78.387640][ T7149] Dev loop5: unable to read RDB block 0 [ 78.387754][ T7149] loop5: unable to read partition table [ 78.387877][ T7149] loop_reread_partitions: partition scan of loop5 (3 ) failed (rc=-5) [ 78.473004][ T43] audit: type=1400 audit(1788005796.463:596): avc: denied { name_bind 0x1000000 } for pid=7151 comm="syz.4.342" path="socket:[19813]" dev="sockfs" ino=19813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 78.504593][ T43] audit: type=1400 audit(1788005796.493:597): avc: denied { search } for pid=7154 comm="syz.2.343" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 78.504935][ T7155] 9pnet_virtio: no channels available for device syz [ 78.507407][ T43] audit: type=1400 audit(1788005796.493:598): avc: denied { mounton } for pid=7154 comm="syz.2.343" path="/97/mnt_trace/trace_pipe" dev="tracefs" ino=5204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 78.519355][ T43] audit: type=1400 audit(1788005796.513:599): avc: denied { read } for pid=7157 comm="syz.4.344" name="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.519512][ T43] audit: type=1400 audit(1788005796.513:600): avc: denied { read open } for pid=7157 comm="syz.4.344" path="/" dev="configfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.523243][ T7158] netlink: 'syz.4.344': attribute type 20 has an invalid length. [ 78.539379][ T43] audit: type=1400 audit(1788005796.533:601): avc: denied { module_load } for pid=7157 comm="syz.4.344" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=system permissive=1 [ 78.539760][ T7158] kernel read not supported for file /policy (pid: 7158 comm: syz.4.344) [ 78.542920][ T43] audit: type=1400 audit(1788005796.533:602): avc: denied { ioctl } for pid=7157 comm="syz.4.344" path="/" dev="configfs" ino=48 ioctlcmd=0x6e8d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 78.602911][ T7164] befs: (loop2): No write support. Marking filesystem read-only [ 78.607080][ T7164] befs: (loop2): unable to read superblock [ 78.766193][ T7173] ip6t_frag: unknown flags 6 [ 78.823718][ T7180] Bluetooth: MGMT ver 1.23 [ 79.062049][ T7196] netlink: 28 bytes leftover after parsing attributes in process `syz.2.356'. [ 79.617757][ T7223] netlink: 'syz.2.365': attribute type 10 has an invalid length. [ 79.617820][ T7223] netlink: 40 bytes leftover after parsing attributes in process `syz.2.365'. [ 79.619237][ T7223] bond0: entered promiscuous mode [ 79.619258][ T7223] bond_slave_0: entered promiscuous mode [ 79.619454][ T7223] bond_slave_1: entered promiscuous mode [ 79.619956][ T7223] bridge0: port 1(bond0) entered blocking state [ 79.620110][ T7223] bridge0: port 1(bond0) entered disabled state [ 79.620262][ T7223] bond0: entered allmulticast mode [ 79.620278][ T7223] bond_slave_0: entered allmulticast mode [ 79.620295][ T7223] bond_slave_1: entered allmulticast mode [ 80.058502][ T2325] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 80.227836][ T2325] usb 7-1: Using ep0 maxpacket: 8 [ 80.231624][ T2325] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.236083][ T2325] usb 7-1: config 0 has no interfaces? [ 80.238475][ T2325] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.247220][ T2325] usb 7-1: config 0 descriptor?? [ 80.375419][ T7252] comedi comedi2: pcmda12: a I/O base address must be specified [ 80.420324][ T7255] netlink: 'syz.4.375': attribute type 1 has an invalid length. [ 80.439516][ T7255] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.461983][ T9] usb 7-1: USB disconnect, device number 9 [ 80.508519][ T7257] bond2: (slave geneve2): making interface the new active one [ 80.511728][ T7257] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 80.703749][ T7268] program syz.4.378 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.712094][ T7268] overlayfs: missing 'workdir' [ 81.029915][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.030001][ T7275] netlink: 28 bytes leftover after parsing attributes in process `syz.1.380'. [ 81.037929][ T7275] gretap0: entered promiscuous mode [ 81.040410][ T7275] gretap0: left promiscuous mode [ 81.082612][ T7277] devpts: Bad value for 'max' [ 81.178547][ T7283] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 81.717037][ T7304] netlink: 148 bytes leftover after parsing attributes in process `syz.4.384'. [ 81.721992][ T1170] Bluetooth: hci3: Frame reassembly failed (-84) [ 81.722079][ T1170] Bluetooth: hci3: Frame reassembly failed (-84) [ 81.936359][ T7308] program syz.2.386 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.947564][ T2325] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 82.127771][ T2325] usb 5-1: Using ep0 maxpacket: 32 [ 82.130296][ T2325] usb 5-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 82.134815][ T2325] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 82.134863][ T2325] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 228 [ 82.144881][ T2325] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.144918][ T2325] usb 5-1: Product: syz [ 82.144966][ T2325] usb 5-1: Manufacturer: syz [ 82.144989][ T2325] usb 5-1: SerialNumber: syz [ 82.149327][ T2325] usb 5-1: config 0 descriptor?? [ 82.156017][ T7303] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 82.366369][ T9] usb 5-1: USB disconnect, device number 10 [ 83.014264][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.0.390'. [ 83.014334][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.390'. [ 83.014533][ T7336] netlink: 'syz.0.390': attribute type 15 has an invalid length. [ 83.014543][ T7336] netlink: 'syz.0.390': attribute type 18 has an invalid length. [ 83.045172][ T7336] xt_policy: output policy not valid in PREROUTING and INPUT [ 83.200240][ T43] kauditd_printk_skb: 21 callbacks suppressed [ 83.200342][ T43] audit: type=1400 audit(1788005801.193:624): avc: denied { bpf } for pid=7337 comm="syz.0.391" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.200401][ T43] audit: type=1400 audit(1788005801.193:625): avc: denied { perfmon } for pid=7337 comm="syz.0.391" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 83.747690][ T5746] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 84.562912][ T7294] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 84.671233][ T43] audit: type=1400 audit(1788005802.663:626): avc: denied { write } for pid=7353 comm="syz.4.395" name="core" dev="configfs" ino=4975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 84.672704][ T7356] Unable to locate "_" for $SUBSYSTEM_PLUGIN_$HOST_ID [ 84.674426][ T43] audit: type=1400 audit(1788005802.663:627): avc: denied { getopt } for pid=7351 comm="syz.0.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 84.695972][ T43] audit: type=1400 audit(1788005802.673:628): avc: denied { execute_no_trans } for pid=7353 comm="syz.4.395" path=2F6D656D66643AA39F6EE2ED5204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F522C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=21099 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 84.742702][ T43] audit: type=1400 audit(1788005802.733:629): avc: denied { execute } for pid=7364 comm="syz.4.401" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 84.855261][ T43] audit: type=1400 audit(1788005802.843:630): avc: denied { module_request } for pid=7370 comm="syz.1.404" kmod="ipt_icmp" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 84.907516][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 84.950624][ T43] audit: type=1400 audit(1788005802.943:631): avc: denied { ioctl } for pid=7372 comm="syz.0.405" path="socket:[18841]" dev="sockfs" ino=18841 ioctlcmd=0x8934 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 84.951683][ T7375] netlink: 'syz.0.405': attribute type 10 has an invalid length. [ 84.962743][ T7375] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 84.996831][ T7392] netlink: 348 bytes leftover after parsing attributes in process `syz.4.409'. [ 85.010614][ T7392] can0: slcan on ttynull. [ 85.067625][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 85.069335][ T7391] can0 (unregistered): slcan off ttynull. [ 85.073275][ T9] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 85.078582][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 128, changing to 11 [ 85.083359][ T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 228 [ 85.096176][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.099863][ T9] usb 7-1: Product: syz [ 85.101705][ T9] usb 7-1: Manufacturer: syz [ 85.103778][ T9] usb 7-1: SerialNumber: syz [ 85.110997][ T9] usb 7-1: config 0 descriptor?? [ 85.118157][ T7397] binder: 7396:7397 ioctl c0306201 2000000001c0 returned -14 [ 85.118497][ T7352] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 85.118868][ T7397] binder: 7396:7397 ioctl 1 200000000200 returned -22 [ 85.180366][ T851] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 85.328064][ T851] usb 6-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 85.328130][ T30] usb 7-1: USB disconnect, device number 10 [ 85.331874][ T851] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.334986][ T851] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.335007][ T851] usb 6-1: Product: syz [ 85.335020][ T851] usb 6-1: Manufacturer: syz [ 85.335032][ T851] usb 6-1: SerialNumber: syz [ 85.351622][ T851] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 85.427954][ T2325] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 85.455127][ T7404] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 85.455236][ T7404] netlink: 'syz.0.412': attribute type 1 has an invalid length. [ 85.551459][ T851] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in cold state [ 85.557133][ T851] usb 6-1: Direct firmware load for dvb-usb-ec168.fw failed with error -2 [ 85.561413][ T851] usb 6-1: Falling back to sysfs fallback for: dvb-usb-ec168.fw [ 85.561425][ T43] audit: type=1400 audit(1788005803.553:632): avc: denied { firmware_load } for pid=851 comm="kworker/3:2" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 85.579385][ T2325] usb 9-1: not running at top speed; connect to a high speed hub [ 85.579458][ T2325] usb 9-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 85.580499][ T2325] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 127, changing to 4 [ 85.582529][ T2325] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.582544][ T2325] usb 9-1: Product: ࠬ [ 85.582553][ T2325] usb 9-1: Manufacturer: Ц [ 85.582562][ T2325] usb 9-1: SerialNumber: 爋⮨螱त첟㍄냏돘翭家দⅶ眗⃉하ꩻ [ 85.786775][ T43] audit: type=1400 audit(1788005803.773:633): avc: denied { read write } for pid=7416 comm="syz.0.417" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 85.799918][ T2325] usb 9-1: Audio class v2/v3 interfaces need an interface association [ 85.832820][ T5821] logitech-hidpp-device 0005:046D:B012.0002: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 85.888393][ T7421] fido_id[7421]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 85.918658][ T2325] snd-usb-audio 9-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 85.963971][ T6434] udevd[6434]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 86.033066][ T7400] Invalid ELF header type: 2 != 1 [ 86.188700][ T70] usb 9-1: USB disconnect, device number 4 [ 86.229684][ T7440] netlink: 'syz.0.424': attribute type 2 has an invalid length. [ 86.229732][ T7440] netlink: 232 bytes leftover after parsing attributes in process `syz.0.424'. [ 86.295869][ T7444] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 86.295941][ T7444] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 87.063456][ T7452] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 87.063539][ T7452] netlink: 'syz.2.423': attribute type 2 has an invalid length. [ 87.206887][ T7470] netlink: 12 bytes leftover after parsing attributes in process `syz.4.428'. [ 87.377003][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 87.377213][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 87.426369][ T7493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.434'. [ 87.432104][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 87.438762][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 87.495936][ T7493] netlink: 24 bytes leftover after parsing attributes in process `syz.2.434'. [ 87.501600][ T7496] macsec0: entered promiscuous mode [ 87.505728][ T7496] macsec0: entered allmulticast mode [ 87.507422][ T7496] veth1_macvtap: entered allmulticast mode [ 87.643174][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 87.643336][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 87.699719][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 87.699968][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 87.796531][ T7515] netlink: 12 bytes leftover after parsing attributes in process `syz.0.440'. [ 87.796610][ T7515] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 88.157948][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 88.158164][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 88.176722][ T7482] ceph: No mds server is up or the cluster is laggy [ 88.182225][ T7483] ceph: No mds server is up or the cluster is laggy [ 88.208129][ T5821] libceph: connect (1)[c::]:6789 error -101 [ 88.208343][ T5821] libceph: mon0 (1)[c::]:6789 connect error [ 88.324066][ T7524] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 88.340767][ T7524] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 88.394400][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 88.394495][ T43] audit: type=1400 audit(1788005806.383:653): avc: denied { write } for pid=7530 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.394969][ T43] audit: type=1400 audit(1788005806.383:654): avc: denied { listen } for pid=7530 comm="syz.1.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.395166][ T7531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.444'. [ 88.396031][ T7531] Cannot find add_set index 0 as target [ 88.524670][ T7536] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 88.557432][ T43] audit: type=1400 audit(1788005806.543:655): avc: denied { read } for pid=7533 comm="syz.1.446" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.557515][ T43] audit: type=1400 audit(1788005806.543:656): avc: denied { open } for pid=7533 comm="syz.1.446" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 88.698640][ T43] audit: type=1400 audit(1788005806.693:657): avc: denied { connect } for pid=7541 comm="syz.4.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 88.720873][ T43] audit: type=1400 audit(1788005806.713:658): avc: denied { watch } for pid=7541 comm="syz.4.449" path="/54" dev="tmpfs" ino=308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 88.963421][ T43] audit: type=1400 audit(1788005806.953:659): avc: denied { read } for pid=7545 comm="syz.2.445" dev="nsfs" ino=4026533283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.114851][ T43] audit: type=1400 audit(1788005806.963:660): avc: denied { open } for pid=7545 comm="syz.2.445" path="net:[4026533283]" dev="nsfs" ino=4026533283 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 89.118046][ T7546] netlink: 'syz.2.445': attribute type 1 has an invalid length. [ 89.159515][ T7544] i2c i2c-0: new_device: Extra parameters [ 89.259258][ T7552] veth2: entered allmulticast mode [ 89.467197][ T7556] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 89.567550][ T7552] bond3: (slave veth3): Enslaving as an active interface with a down link [ 89.573485][ T7553] bond3: entered promiscuous mode [ 89.577153][ T7553] bond3: entered allmulticast mode [ 89.577469][ T7553] 8021q: adding VLAN 0 to HW filter on device bond3 [ 89.630198][ T7556] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.631551][ T7556] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.740023][ T43] audit: type=1400 audit(1788005807.733:661): avc: denied { ioctl } for pid=7567 comm="syz.2.455" path="socket:[24086]" dev="sockfs" ino=24086 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.896881][ T43] audit: type=1400 audit(1788005807.883:662): avc: denied { watch_reads } for pid=7581 comm="syz.1.451" path="/112" dev="tmpfs" ino=622 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.292664][ T7601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=19482 sclass=netlink_route_socket pid=7601 comm=syz.2.463 [ 90.385271][ T7605] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 90.385337][ T7605] netlink: 'syz.2.464': attribute type 8 has an invalid length. [ 90.385375][ T7605] netlink: 212 bytes leftover after parsing attributes in process `syz.2.464'. [ 90.391467][ T7605] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 90.405108][ T7605] netlink: 8 bytes leftover after parsing attributes in process `syz.2.464'. [ 90.405171][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 90.406185][ T7605] netlink: 'syz.2.464': attribute type 4 has an invalid length. [ 90.516610][ T7611] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 90.653256][ T7625] nvme nvme0: rdma connection establishment failed (-104) [ 90.811874][ T7637] netlink: 8 bytes leftover after parsing attributes in process `syz.4.475'. [ 90.898431][ T7646] ================================================================== ** replaying previous printk message ** [ 90.898431][ T7646] ================================================================== [ 90.898465][ T7646] BUG: KASAN: global-out-of-bounds in usb_copy_descriptors+0x18d/0x320 [ 90.898505][ T7646] Read of size 160 at addr ffffffff9bcacc60 by task syz.0.478/7646 [ 90.898516][ T7646] [ 90.898525][ T7646] CPU: 0 UID: 0 PID: 7646 Comm: syz.0.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 90.898545][ T7646] Tainted: [L]=SOFTLOCKUP [ 90.898550][ T7646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 90.898558][ T7646] Call Trace: [ 90.898563][ T7646] [ 90.898568][ T7646] dump_stack_lvl+0x100/0x190 [ 90.898588][ T7646] print_report+0x13d/0x4b0 [ 90.898607][ T7646] ? __virt_addr_valid+0x239/0x430 [ 90.898621][ T7646] ? usb_copy_descriptors+0x18d/0x320 [ 90.898635][ T7646] kasan_report+0xdf/0x1c0 [ 90.898655][ T7646] ? usb_copy_descriptors+0x18d/0x320 [ 90.898671][ T7646] kasan_check_range+0x10f/0x1e0 [ 90.898690][ T7646] __asan_memcpy+0x23/0x60 [ 90.898709][ T7646] usb_copy_descriptors+0x18d/0x320 [ 90.898755][ T7646] usb_assign_descriptors+0xd2/0x470 [ 90.898772][ T7646] f_audio_bind+0x243a/0x3950 [ 90.898793][ T7646] ? __pfx_f_audio_bind+0x10/0x10 [ 90.898811][ T7646] usb_add_function+0x219/0x890 [ 90.898827][ T7646] ? composite_dev_prepare+0x251/0x420 [ 90.898845][ T7646] configfs_composite_bind+0xd83/0x1960 [ 90.898863][ T7646] ? kernfs_create_link+0x1bd/0x240 [ 90.898879][ T7646] gadget_bind_driver+0x28c/0xbf0 [ 90.898898][ T7646] ? __pfx_gadget_bind_driver+0x10/0x10 [ 90.898923][ T7646] really_probe+0x241/0xa60 [ 90.898945][ T7646] __driver_probe_device+0x210/0x460 [ 90.898966][ T7646] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 90.898996][ T7646] driver_probe_device+0x4a/0x140 [ 90.899017][ T7646] __driver_attach+0x21f/0x5b0 [ 90.899037][ T7646] ? __pfx___driver_attach+0x10/0x10 [ 90.899058][ T7646] bus_for_each_dev+0x13e/0x1d0 [ 90.899075][ T7646] ? __pfx_bus_for_each_dev+0x10/0x10 [ 90.899092][ T7646] ? bus_add_driver+0x2b5/0x5b0 [ 90.899113][ T7646] bus_add_driver+0x305/0x5b0 [ 90.899132][ T7646] driver_register+0x1e2/0x360 [ 90.899146][ T7646] usb_gadget_register_driver_owner+0x132/0x210 [ 90.899165][ T7646] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 90.899180][ T7646] configfs_write_iter+0x302/0x4e0 [ 90.899198][ T7646] vfs_write+0x6af/0x1050 [ 90.899218][ T7646] ? __pfx_configfs_write_iter+0x10/0x10 [ 90.899236][ T7646] ? __pfx_vfs_write+0x10/0x10 [ 90.899254][ T7646] ? find_held_lock+0x2b/0x80 [ 90.899275][ T7646] ksys_write+0x12a/0x250 [ 90.899286][ T7646] ? __pfx_ksys_write+0x10/0x10 [ 90.899299][ T7646] do_syscall_64+0x123/0x790 [ 90.899313][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.899327][ T7646] RIP: 0033:0x7fa58399e159 [ 90.899338][ T7646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.899351][ T7646] RSP: 002b:00007fa58490c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 90.899383][ T7646] RAX: ffffffffffffffda RBX: 00007fa583c25fa0 RCX: 00007fa58399e159 [ 90.899392][ T7646] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000004 [ 90.899401][ T7646] RBP: 00007fa583a35024 R08: 0000000000000000 R09: 0000000000000000 [ 90.899412][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.899420][ T7646] R13: 00007fa583c26038 R14: 00007fa583c25fa0 R15: 00007ffd650257e8 [ 90.899432][ T7646] [ 90.899437][ T7646] [ 90.899460][ T7646] The buggy address belongs to the variable: [ 90.899465][ T7646] ac_header_desc+0x0/0x40 [ 90.899478][ T7646] [ 90.899482][ T7646] The buggy address belongs to the physical page: [ 90.899487][ T7646] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1bcac [ 90.899500][ T7646] flags: 0xfff00000002000(reserved|node=0|zone=1|lastcpupid=0x7ff) [ 90.899517][ T7646] raw: 00fff00000002000 ffffea00006f2b08 ffffea00006f2b08 0000000000000000 [ 90.899529][ T7646] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 90.899536][ T7646] page dumped because: kasan: bad access detected [ 90.899542][ T7646] page_owner info is not present (never set?) [ 90.899547][ T7646] [ 90.899551][ T7646] Memory state around the buggy address: [ 90.899557][ T7646] ffffffff9bcacb00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 90.899565][ T7646] ffffffff9bcacb80: 00 00 00 00 00 00 00 00 f9 f9 f9 f9 00 f9 f9 f9 [ 90.899573][ T7646] >ffffffff9bcacc00: f9 f9 f9 f9 00 f9 f9 f9 f9 f9 f9 f9 00 f9 f9 f9 [ 90.899579][ T7646] ^ [ 90.899586][ T7646] ffffffff9bcacc80: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 90.899595][ T7646] ffffffff9bcacd00: f9 f9 f9 f9 00 00 f9 f9 f9 f9 f9 f9 00 00 f9 f9 [ 90.899601][ T7646] ================================================================== [ 90.902954][ T7646] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.100455][ T7646] CPU: 2 UID: 0 PID: 7646 Comm: syz.0.478 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.105851][ T7646] Tainted: [L]=SOFTLOCKUP [ 91.107686][ T7646] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.111823][ T7646] Call Trace: [ 91.113207][ T7646] [ 91.114473][ T7646] dump_stack_lvl+0x100/0x190 [ 91.116449][ T7646] vpanic+0x553/0x970 [ 91.118303][ T7646] ? __pfx_vpanic+0x10/0x10 [ 91.120399][ T7646] ? mark_held_locks+0x40/0x70 [ 91.122843][ T7646] ? usb_copy_descriptors+0x18d/0x320 [ 91.125255][ T7646] panic+0xd1/0xe0 [ 91.126856][ T7646] ? __pfx_panic+0x10/0x10 [ 91.128686][ T7646] ? usb_copy_descriptors+0x18d/0x320 [ 91.130842][ T7646] ? preempt_schedule_common+0x3c/0xb0 [ 91.133208][ T7646] check_panic_on_warn.cold+0x19/0x34 [ 91.135751][ T7646] end_report.part.0+0x3a/0x90 [ 91.137911][ T7646] kasan_report.cold+0xe/0x18 [ 91.140131][ T7646] ? usb_copy_descriptors+0x18d/0x320 [ 91.142387][ T7646] kasan_check_range+0x10f/0x1e0 [ 91.144448][ T7646] __asan_memcpy+0x23/0x60 [ 91.146296][ T7646] usb_copy_descriptors+0x18d/0x320 [ 91.148452][ T7646] usb_assign_descriptors+0xd2/0x470 [ 91.150602][ T7646] f_audio_bind+0x243a/0x3950 [ 91.152789][ T7646] ? __pfx_f_audio_bind+0x10/0x10 [ 91.155392][ T7646] usb_add_function+0x219/0x890 [ 91.157739][ T7646] ? composite_dev_prepare+0x251/0x420 [ 91.160023][ T7646] configfs_composite_bind+0xd83/0x1960 [ 91.162145][ T7646] ? kernfs_create_link+0x1bd/0x240 [ 91.164287][ T7646] gadget_bind_driver+0x28c/0xbf0 [ 91.166188][ T7646] ? __pfx_gadget_bind_driver+0x10/0x10 [ 91.168524][ T7646] really_probe+0x241/0xa60 [ 91.170481][ T7646] __driver_probe_device+0x210/0x460 [ 91.172814][ T7646] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 91.175446][ T7646] driver_probe_device+0x4a/0x140 [ 91.177716][ T7646] __driver_attach+0x21f/0x5b0 [ 91.179898][ T7646] ? __pfx___driver_attach+0x10/0x10 [ 91.182378][ T7646] bus_for_each_dev+0x13e/0x1d0 [ 91.184568][ T7646] ? __pfx_bus_for_each_dev+0x10/0x10 [ 91.186895][ T7646] ? bus_add_driver+0x2b5/0x5b0 [ 91.188993][ T7646] bus_add_driver+0x305/0x5b0 [ 91.191140][ T7646] driver_register+0x1e2/0x360 [ 91.193474][ T7646] usb_gadget_register_driver_owner+0x132/0x210 [ 91.196603][ T7646] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 91.198944][ T7646] configfs_write_iter+0x302/0x4e0 [ 91.201063][ T7646] vfs_write+0x6af/0x1050 [ 91.202897][ T7646] ? __pfx_configfs_write_iter+0x10/0x10 [ 91.205304][ T7646] ? __pfx_vfs_write+0x10/0x10 [ 91.207444][ T7646] ? find_held_lock+0x2b/0x80 [ 91.209784][ T7646] ksys_write+0x12a/0x250 [ 91.212146][ T7646] ? __pfx_ksys_write+0x10/0x10 [ 91.214586][ T7646] do_syscall_64+0x123/0x790 [ 91.216622][ T7646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.219065][ T7646] RIP: 0033:0x7fa58399e159 [ 91.220959][ T7646] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.228596][ T7646] RSP: 002b:00007fa58490c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 91.232089][ T7646] RAX: ffffffffffffffda RBX: 00007fa583c25fa0 RCX: 00007fa58399e159 [ 91.235732][ T7646] RDX: 000000000000000c RSI: 0000200000000480 RDI: 0000000000000004 [ 91.239982][ T7646] RBP: 00007fa583a35024 R08: 0000000000000000 R09: 0000000000000000 [ 91.243521][ T7646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.246841][ T7646] R13: 00007fa583c26038 R14: 00007fa583c25fa0 R15: 00007ffd650257e8 [ 91.250137][ T7646] [ 91.252115][ T7646] Kernel Offset: disabled [ 91.253453][ T7646] Rebooting in 86400 seconds.. VM DIAGNOSIS: 12:16:49 Registers: info registers vcpu 0 CPU#0 RAX=00000000001077a9 RBX=ffffffff8ea91500 RCX=ffffffff8bcf2115 RDX=0000000000000001 RSI=ffffffff8e3eaa9f RDI=ffffffff8c620c80 RBP=fffffbfff1d522a0 RSP=ffffffff8ea07cf0 R8 =0000000000000001 R9 =ffffed100d4867bd R10=ffff88806a433deb R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1d40fa2 R15=dffffc0000000000 RIP=ffffffff8bcf06bf RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d5b64000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fcd993eb840 CR3=0000000034239000 CR4=00352ef0 DR0=0000000000000006 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000020000000 Opmask01=0000000000000000 Opmask02=00000000f0400000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055a6a4e43600 000055a6a4e43600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff25b1f040 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 69636e797320746f 6e202d2063696e61 70206c656e72654b 205d363436375420 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203865203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffff52000026fb6 RBX=ffffffff8fbd3c60 RCX=dffffc0000000000 RDX=0000000000000001 RSI=ffffffff8c620c00 RDI=ffffffff8c620c40 RBP=ffffc90000137da8 RSP=ffffc90000137958 R8 =0000000000000000 R9 =fffffbfff1f7a78c R10=ffffffff8fbd3c63 R11=3d3d3d3d3d3d3d3d R12=ffffffff8fbd3bc0 R13=ffffc90000137da8 R14=0000000000000000 R15=ffffc90000137db4 RIP=ffffffff820bd730 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa58490bff8 CR3=00000000354ac000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000025dfdbff 0070bd2501000021 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedd232bc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedd232bc6 00007ffedd232bcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd99435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd99435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd994357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd99435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 201df9e2c4f76a0f 66000053f3990b32 0f0000028db9300f 00000000ba000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306974765f7069 0035001400000000 0000000000306974 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000a0008000023aa aaaaaaaa0001000a 0000000000000000 0000000030746973 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0035001400000000 0000000000306974 765f706900350014 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00306974765f7069 003500140000006d 6165745f6f745f30 6874657600350014 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 31676572366d6970 0035001480340068 00000001000d0008 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85afb6c5 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc90003986f40 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000034363754 R12=0000000000000000 R13=0000000000000030 R14=0000000000000005 R15=ffffc90003987258 RIP=ffffffff85afb6ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fa58490c6c0 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c31c83e CR3=00000000344e8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6465636976726573 5f6f692e656c7474 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedd232bc6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffedd232bc6 00007ffedd232bcc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd99435607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd99435647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd994357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd99435639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=ffffffff8fa6e2a0 RCX=ffffffff81e76ac3 RDX=0000000000000000 RSI=0000000000000004 RDI=ffffffff8fa6e2a0 RBP=ffffffff8fa6e2a8 RSP=ffffc900034e72a8 R8 =0000000000000000 R9 =fffffbfff1f4dc54 R10=ffffffff8fa6e2a3 R11=0000000000000000 R12=ffffffff8fa6e2b0 R13=0000000000000014 R14=ffff88804a443d50 R15=ffff88816d4257f0 RIP=ffffffff8bd213c3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f025d9cc6c0 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000001000 CR3=000000003d0fa000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 006e616c78760001 000a801200280000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb0410c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdcb0410c6 00007ffdcb0410cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79f0035607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79f0035647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79f00357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f79f0035639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3231f90000000000 0406000000000000 0200ad0004000400 1900000025000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7f834c320a0c583 94e0938151d57122 62f131ff71000080 01dffd9362a2279b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cffca64a051ab64 a7c91ddf8a842366 0000000000000095 00000000000000b7 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100040465 000000000005642d ffffffff000006b7 00000000fff0a479 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001f00000085 00090040fe000a6a 00000000000003b7 607d000100000414 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0cffca64a051ab64 a7c91ddf8a842366 0000000000000095 00000000000000b7 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 12b1c1a166dd1660 49a12d2ac5a669bf 64e57a0a35a27a10 bebe63ecc2126bd1 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000