last executing test programs: 1m16.80516188s ago: executing program 2 (id=120): r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) openat(0xffffffffffffffff, &(0x7f0000000000)='./tracing\x00', 0x4000, 0x142) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f00000001c0)='p:s/- ./file0:0', 0xf) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffff, &(0x7f00000002c0)=[{0x800000000, 0x0, 0x7fff}], 0x1, 0x2, 0x1e, 0x0, 0xc, 0x21}) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) (async) openat(0xffffffffffffffff, &(0x7f0000000000)='./tracing\x00', 0x4000, 0x142) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) (async) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async) openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) (async) write(r1, &(0x7f00000001c0)='p:s/- ./file0:0', 0xf) (async) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f0000000140)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0xffff, &(0x7f00000002c0)=[{0x800000000, 0x0, 0x7fff}], 0x1, 0x2, 0x1e, 0x0, 0xc, 0x21}) (async) 1m16.753801617s ago: executing program 2 (id=121): capset(0x0, &(0x7f0000000000)={0x200005, 0x200003, 0x804, 0x4, 0x107}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1a00000007"], 0x50) r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x1e88, 0x2) ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000440)={0x1d39dce1, 0x0, 0x4, {0x1, @win={{0x1, 0xfffff7e0, 0x1, 0x200}, 0x4, 0x3, 0x0, 0x2, 0x0, 0x3}}, 0x80}) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000280)='gid', &(0x7f0000000580)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) close_range(r4, 0xffffffffffffffff, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000), 0xd) 1m16.753240433s ago: executing program 2 (id=122): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r2 = socket$inet(0x2, 0x2, 0x0) r3 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f00000000c0)='source', &(0x7f00000001c0)='source', 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8) ioctl$GIO_SCRNMAP(r4, 0x4b40, &(0x7f0000000240)=""/205) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000200)={'syzkaller0\x00', 0x1}) r5 = socket$inet_sctp(0x2, 0x1, 0x84) bind(r5, &(0x7f0000000000)=@in={0x2, 0x3210, @rand_addr=0xac140001}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r9, 0x0, r10, 0x0, 0x2, 0x6) write$cgroup_pid(r10, &(0x7f0000000000), 0xffffff98) splice(0xffffffffffffffff, 0x0, r10, 0x0, 0x80000000, 0x3) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, &(0x7f0000000340)=0xc, 0x4) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x2, 0x0, 0x1}}]}}]}, 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=@newqdisc={0x200, 0x24, 0x41f, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x1d0, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0xa, 0x64, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x200}}, 0x0) listen(r5, 0x5) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800010000000000140008004500003c000000004084ca2502020202ac14000104d2321000000000000000000100001c112233440008000000050005"], 0x4a) 1m13.603519958s ago: executing program 2 (id=146): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x141) ioctl(r0, 0x80285442, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="05000000080000004200000040"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r1}, 0x38) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001580)={r1, &(0x7f0000000180), 0x0}, 0x20) r2 = syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x11) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) read$FUSE(r4, &(0x7f0000000d40)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r4, &(0x7f0000002f00)={0x130, 0x0, r5, {0x4, 0x1, 0x0, '\x00', {0x10000, 0x0, 0x7, 0x3d0, 0x0, 0x0, 0x6000, '\x00', 0x9, 0x4, 0x7, 0x9, {0x200, 0x78}, {0x6, 0x1}, {0x0, 0x3}, {0xb, 0x4}, 0xc221, 0x0, 0xe, 0x200}}}, 0x130) write(r3, &(0x7f0000000100)='* ./tmp 2147483647 0 0 0 0 secinfo 1 1 0\n', 0x29) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1, 0x0) setrlimit(0x1, &(0x7f0000000140)={0xbfffffffffffffff, 0xffffffffffffffff}) write(r6, &(0x7f0000000f00)='0', 0x1) utimes(0x0, 0x0) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000940)={0xa, 0x100, 0x3, {0x8, 0x1000, 0x4, 0x2}}) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000180)={0x2, @win={{0xc78e, 0xffffcaca, 0x5, 0x7}, 0x8, 0x5, 0x0, 0xfffffeff, 0x0, 0x5}}) 1m13.50528188s ago: executing program 2 (id=147): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000003c0)=0x499b, 0x4) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000000f060502000000000000000001000009"], 0x14}, 0x1, 0x0, 0x0, 0x8490}, 0x80) recvmsg$can_raw(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000900)=""/110, 0x14}], 0x1}, 0x40000040) r3 = syz_open_dev$radio(&(0x7f00000005c0), 0x1, 0x2) r4 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x5c1002) ioctl$EVIOCSABS20(r4, 0x401845e0, &(0x7f0000000200)={0x53b, 0x7b000000, 0x200, 0x1ff, 0xf7f0, 0x2}) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000080)={0xa10000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x9b0906, 0x2, '\x00', @p_u32=&(0x7f00000000c0)}}) shutdown(r0, 0x1) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000000)={0xa, 0x4c28, 0x0, @mcast2, 0x1}, 0x1c, 0x0}}], 0x1, 0x0) 1m13.083466475s ago: executing program 2 (id=154): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)={0x2000, 0x104, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)={0x0, 0xfb, 0x71, 0x4, 0x0, "1d68434ecefd87d65fa9031ff80737df", "9f109daa58b10441e30531be47a54c6c7176ad0e06e7e509e961cb7994d7fd89c221f106d46d585123efda1839765c8b02bf6a2bae1724003bee1a81a2d6d5ec75638a802e3a55796f26b42a57e83d4c59dc250ff421e9e6c01be3d9"}, 0x71, 0x1) syz_emit_ethernet(0x26f, &(0x7f0000000580)={@local, @random="429e82211cf8", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "406417", 0x235, 0x3a, 0x0, @mcast1, @rand_addr=' \x01\x00', {[@routing={0x87, 0x12, 0x2, 0xb, 0x0, [@private2, @private2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @empty, @local, @local, @private1]}, @dstopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}, @dstopts={0x32, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0xfffb}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xc}]}, @fragment={0x33, 0x0, 0x9, 0x1, 0x0, 0x1a, 0x64}, @routing={0x2c, 0x6, 0x1, 0xf5, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}, @srh={0x6c, 0x4, 0x4, 0x2, 0x4, 0x0, 0x1314, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x21, 0x0, 0x1, 0x1, 0x0, 0x5, 0x68}, @dstopts={0x2f, 0x0, '\x00', [@padn]}], @param_prob={0x4, 0x0, 0x0, 0xfffffff6, {0x2, 0x6, "d49c69", 0x6, 0x73, 0x1, @local, @loopback, [@routing={0x88, 0xa, 0x1, 0x8c, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x62, 0x0, 0x7a, 0x1, 0x0, 0xc, 0x67}, @routing={0x0, 0x4, 0x1, 0x24, 0x0, [@private0, @remote]}], "910bbcacdf9898b96bcce20565c2ac05bab9c11f8670fad5fc97c9413f32ee5d5f38913181ecf2d4244a48f222326cba592b927102"}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000180)=0x4) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000001c0)="dc72fb3eb172f774b1ea2df8d1d060e71828eab49f3cdd479ba52b4cec9aaa9a531dc83753dd5beb97bb4b55d75567626b39ddee9d0bab44e2cda281ea70c8319dc5e52c77360fd6780053f01a", 0x4d}], 0x1, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r6, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x50, 0x4f, 0x50]}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r0, 0x4068aea3, &(0x7f0000000440)={0xeb, 0x0, 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x60000, 0x156) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x42000, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) 1m13.052771124s ago: executing program 32 (id=154): r0 = openat2$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f00000000c0)={0x2000, 0x104, 0x6}, 0x18) r1 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000280), &(0x7f0000000340)={0x0, 0xfb, 0x71, 0x4, 0x0, "1d68434ecefd87d65fa9031ff80737df", "9f109daa58b10441e30531be47a54c6c7176ad0e06e7e509e961cb7994d7fd89c221f106d46d585123efda1839765c8b02bf6a2bae1724003bee1a81a2d6d5ec75638a802e3a55796f26b42a57e83d4c59dc250ff421e9e6c01be3d9"}, 0x71, 0x1) syz_emit_ethernet(0x26f, &(0x7f0000000580)={@local, @random="429e82211cf8", @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @icmpv6={0x7, 0x6, "406417", 0x235, 0x3a, 0x0, @mcast1, @rand_addr=' \x01\x00', {[@routing={0x87, 0x12, 0x2, 0xb, 0x0, [@private2, @private2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, @loopback, @empty, @local, @local, @private1]}, @dstopts={0x3b, 0x0, '\x00', [@jumbo={0xc2, 0x4, 0x8}]}, @dstopts={0x32, 0x2, '\x00', [@jumbo={0xc2, 0x4, 0x7}, @ra={0x5, 0x2, 0xfffb}, @enc_lim={0x4, 0x1, 0x2}, @ra={0x5, 0x2, 0xc}]}, @fragment={0x33, 0x0, 0x9, 0x1, 0x0, 0x1a, 0x64}, @routing={0x2c, 0x6, 0x1, 0xf5, 0x0, [@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty]}, @srh={0x6c, 0x4, 0x4, 0x2, 0x4, 0x0, 0x1314, [@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02']}, @fragment={0x21, 0x0, 0x1, 0x1, 0x0, 0x5, 0x68}, @dstopts={0x2f, 0x0, '\x00', [@padn]}], @param_prob={0x4, 0x0, 0x0, 0xfffffff6, {0x2, 0x6, "d49c69", 0x6, 0x73, 0x1, @local, @loopback, [@routing={0x88, 0xa, 0x1, 0x8c, 0x0, [@ipv4={'\x00', '\xff\xff', @broadcast}, @ipv4={'\x00', '\xff\xff', @multicast2}, @private1, @mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}]}, @fragment={0x62, 0x0, 0x7a, 0x1, 0x0, 0xc, 0x67}, @routing={0x0, 0x4, 0x1, 0x24, 0x0, [@private0, @remote]}], "910bbcacdf9898b96bcce20565c2ac05bab9c11f8670fad5fc97c9413f32ee5d5f38913181ecf2d4244a48f222326cba592b927102"}}}}}}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="14000000130001ffffff7f8cd913e90002"], 0x14}], 0x1}, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f0000000040), &(0x7f0000000180)=0x4) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f00000001c0)="dc72fb3eb172f774b1ea2df8d1d060e71828eab49f3cdd479ba52b4cec9aaa9a531dc83753dd5beb97bb4b55d75567626b39ddee9d0bab44e2cda281ea70c8319dc5e52c77360fd6780053f01a", 0x4d}], 0x1, 0x0) recvfrom$inet(r2, 0x0, 0x0, 0x40000000, 0x0, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1a, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x1c, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2, r6, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) write$binfmt_register(r1, &(0x7f0000000100)={0x3a, 'syz2', 0x3a, 'E', 0x3a, 0xfffffffffffffff7, 0x3a, '\xe2\xbf\xd9\xafk\xd3~a3\xd0\x94', 0x3a, 'u', 0x3a, './file0', 0x3a, [0x46, 0x43, 0x50, 0x4f, 0x50]}, 0x38) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CAP_VM_TYPES(r0, 0x4068aea3, &(0x7f0000000440)={0xeb, 0x0, 0x4}) openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x60000, 0x156) umount2(&(0x7f00000001c0)='./file0\x00', 0x1) open$dir(&(0x7f0000000000)='./file0\x00', 0x42000, 0x20) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101240, 0x10a) 4.374653249s ago: executing program 0 (id=940): r0 = syz_usb_connect(0x3, 0x86, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40cd060f010001010203010902740001010080fa090400000effffff00070581024000000705820240000007058302400000070584024000000705850240000007058602400000070587024000000705010240000007050202400000070503024000000705040240000007050502"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000440)={0x14, &(0x7f0000000380)={0x40, 0x23, 0x45, {0x45, 0xc, "b13b2c1b26b729000b681d651e1c867b4f692e58d4a9be80558835eae27b9dd273d53f21ff1c249ea6be6de3c1f9222935c2996507f6e0139793b44031192e5ad064b7"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f00000006c0)={0x44, &(0x7f0000000480)={0x0, 0x16, 0x4b, "53716890fe1db2c293bfef1ba04517ad54ce58b8c498430d813da4851ed0f5f43c4cd66819813de334ac79e5174992150bb3b02cd3e7ce9c3a905c2ee69239eb7090499d4bc1fe7cd1d098"}, &(0x7f0000000500)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000540)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000580)={0x20, 0x80, 0x1c, {0x3ff, 0x4, 0x2, 0x0, 0xb8e6, 0x5, 0x9, 0x6, 0x5, 0x3, 0x0, 0x7}}, &(0x7f00000005c0)={0x20, 0x85, 0x4, 0x80000000}, &(0x7f0000000600)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000640)={0x20, 0x87, 0x2, 0x400}, &(0x7f0000000680)={0x20, 0x89, 0x2}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r1, 0x4b70, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) fanotify_mark(0xffffffffffffffff, 0x101, 0x8000031, 0xffffffffffffffff, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) ioctl$CDROM_GET_MCN(r2, 0x5311, &(0x7f00000001c0)) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x2, 0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r4, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) mlock(&(0x7f0000ffe000/0x1000)=nil, 0x1000) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) ftruncate(r3, 0x6) gettid() 3.041842324s ago: executing program 1 (id=943): syz_usb_connect_ath9k(0x3, 0x5a, 0xfffffffffffffffe, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25010000001d000a00626c6b696f2e6266712e6176675f71756575655f73697a650000000008000100000c0004"], 0x54}}, 0x20004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff) mount(&(0x7f0000000900)=@filename='mtd1\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000a00)='jffs2\x00', 0x0, 0x0) 2.502267731s ago: executing program 1 (id=950): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000580)=[@ioring_restriction_register_op={0x0, 0x1d}], 0x1) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="dc000000", @ANYRES16, @ANYBLOB="000829bd7000fddbdf2504000000040006801c00098008000200f10b00000800020005000000080001002700000020000280040004000800010001"], 0xdc}}, 0x24000840) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) syz_ublk_setup_queues(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x0, 0x3bef, 0x1, 0x2, 0x6f}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xefae, 0x400, 0x3, 0x227}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x29da, 0x4, 0x0, 0x32e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8db5, 0x40, 0x0, 0x2f9}, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x838f, 0x20000, 0x0, 0x2fb}}], 0x4, &(0x7f0000001840)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, '\x00', {0x2, 0x44c, 0x0, &(0x7f0000000840)=@buf_512="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"}}, &(0x7f00000018c0)) r1 = io_uring_setup(0x1b7b, &(0x7f0000000240)={0x0, 0xc89f, 0x80000, 0x8, 0x20002f8, 0x0, r0}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000580), 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) r2 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.413343294s ago: executing program 1 (id=951): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 2.353390741s ago: executing program 1 (id=953): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000400)={0x50, 0x0, r1, {0x7, 0x2b, 0x10, 0x1c20040, 0x0, 0x0, 0xc0000000, 0x1, 0x0, 0x0, 0x100}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x1004, 0x4, 0x4, 0x2000, 0x101, r2, r3, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x1802, 0x40) pread64(r4, &(0x7f00000005c0)=""/227, 0xe3, 0x3) 1.610920869s ago: executing program 4 (id=964): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'veth1_to_team\x00', 0x0}) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x7fffffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xfff6}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x6c9618d9}]}, 0x2c}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaa9caaaa00000000000086dd60a2160000302b00fe8000000000000000000000000000bbfe8000000000000000000000000000aa3a00000100000000200700000000000000000000000000004e2200000018907804000000000000000000000000000000fe0c424bba6ac576c5dc6b6f09b743ed2e2dd3"], 0x0) mount(&(0x7f00000025c0)=@sg0, &(0x7f0000000300)='./file1\x00', &(0x7f0000000000)='ntfs3\x00', 0x0, &(0x7f0000000380)='acl') bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3c}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0) (rerun: 32) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x832}) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000017c0)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r2, @ANYRES32=r7, @ANYBLOB="040000000200"/28], 0x50) (async) r9 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r9, 0x42, 0x1ff) (async) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) (async) r11 = getpid() r12 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r10, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000640)=[0x4], 0x0, 0x0, 0x1, 0x1, r11}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r12, 0x0, 0x0}, 0x10) (async) preadv(r8, &(0x7f00000016c0)=[{&(0x7f0000001740)=""/67, 0x43}, {&(0x7f0000000500)=""/72, 0x48}, {&(0x7f0000000580)=""/180, 0xb4}, {&(0x7f0000000640)=""/10, 0xa}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/5, 0x5}], 0x6, 0xffffffff, 0x1) (async, rerun: 32) write$tun(r5, &(0x7f0000000440)={@val={0x70, 0x9300}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x4000, 0x2, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0x5865}}}}}}}, 0x3e) (rerun: 32) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 1.463810089s ago: executing program 1 (id=965): r0 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000001c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x20}, &(0x7f0000000300)='./file1\x00', 0x18, 0x0, 0x12345}) io_uring_enter(r0, 0x1, 0x1, 0x1, 0x0, 0x0) (async, rerun: 32) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/ima/policy\x00', 0x1, 0x0) (rerun: 32) mount(&(0x7f0000000080)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='hfs\x00', 0x200013, 0x0) (async, rerun: 32) write(r4, &(0x7f0000000100)='measure func=FILE_CHECK obj_type=unconfined_t', 0x2d) (async, rerun: 32) sendmsg$IPSET_CMD_SAVE(r4, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000080605000000000000000000050000010900020073797a30000000006b14ef702880"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x48014) (async) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x8c, 0x453, 0x4f811911e84a1ffa, 0x70bd2c, 0x25dfdbfb, "5f779a1df1e27e9a8f914c6ea23bcbc5a56cb40b844c892af9f841e2210bffd57e4bc8f184e83725aa2b0ba8a0518ddad05929c6a1e978be0d5b80e99ef62205b3dd180d6e277c5981fbd4d4d48bed765e3119ec816dca72b3f07aeb837166243a0399a955e6fb2229f7ff557dcf51391429cb4f627e874e7980d7", ["", "", "", "", ""]}, 0x8c}, 0x1, 0x0, 0x0, 0xb71e6512765f7777}, 0x20000800) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200001, 0x0) 1.285096458s ago: executing program 4 (id=966): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a28000000000a010200000000000000000200000908000240000000030900010073797a300000000098000000160a030000000000000000000200000a6c000380180003801400010064756d6d7930000000000000000000000800014000000000400003801400010073797a6b616c6c65723100000000000014000100697036677265746170edffadf3000000140001006970366772657461703000000000000008000240000000020900020073797a31000000000900010073797a300000000014000000110001"], 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/config.gz\x00', 0x0, 0x80) read$proc_mixer(r3, 0x0, 0x0) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000040)) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0x4) 1.068945446s ago: executing program 0 (id=968): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="2800000010000100000000000000000085ff000035000000000000000000000008001c00c9"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r2, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x0, 0x2c}}}}, [@NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2c}, @NL80211_ATTR_BANDS={0x8}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0xb}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x9}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x6}, @NL80211_ATTR_BANDS={0x8, 0xef, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000800}, 0x24000104) 934.578232ms ago: executing program 4 (id=969): ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000000000)) r0 = accept$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000140)=0x10) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f0000000180)={'filter\x00', 0x0, [0x10, 0x8, 0x5]}, &(0x7f0000000200)=0x44) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000340), 0x4080, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000003c0)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000440)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000480)={'ip6gre0\x00', 0x0, 0x29, 0x1, 0xf9, 0x7ff, 0xf2ce3ec9e3264a82, @remote, @local, 0x8, 0x700, 0x2, 0x6}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000540)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x13, &(0x7f0000000600)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000640), &(0x7f0000000680), 0x8, 0x60, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'ip6tnl0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000900)={'tunl0\x00', &(0x7f0000000880)={'gre0\x00', 0x0, 0x8, 0x40, 0xffffffff, 0x5, {{0x11, 0x4, 0x1, 0x1, 0x44, 0x67, 0x0, 0x23, 0x4, 0x0, @broadcast, @remote, {[@end, @timestamp={0x44, 0x8, 0xcb, 0x0, 0x5, [0x65c]}, @timestamp_addr={0x44, 0x24, 0xb9, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@multicast1, 0x7}, {@broadcast, 0x1}, {@empty, 0x1}]}]}}}}}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r1, &(0x7f0000000ac0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000a80)={&(0x7f0000000940)={0x110, 0x0, 0x8, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x7c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x24004000}, 0x44000) sendmsg$kcm(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000b00)="1b4e136aa24f339e332740f71520db", 0xf}], 0x1, &(0x7f0000000b80)=[{0xd8, 0x100, 0x6, "9b1967b256041236c2b5f50d0dcfaeef373ca51a9c21b90d06a5a2f535dd0cdb3f0ef9512106bb5eac2a09b6ac66fc5bff5eae5e74e53d25861a8f3a6f713e8520afea7da85c3c3e3e63d18958168278296eff82f29bb4ec43c59136847f13c059ab8b51532f6faa8aa3ff6eca7fdeb068333a6cb5b18feda55fee751247fc9b68aac1116fd8794fe778d486fc40173c59dd4d74d249d945f5831cdc1133544931758385b39c20f50591d22df686c5bee58550541ff3e468c34f9fad3d4ee23ffb7877"}, {0xa8, 0x84, 0x2e, "3d72e2baf0406e5480b8dd72bd42a26699227df2ea05ade202ff37c013145ca36a9eb655c00ac87735a0b3557c57236b4970c27edf77801842a8bdfdbc4dd4912fead32491f194461f45061503baa7c161bbbada488569af11c926a427a2164df99019f6161a80e94f56b46e1c176b565cccc320b8a6df88a58b13f5727bc73945c315fbfc4c9148c8ab20c074773b2d6d83cdf520f9379a"}], 0x180}, 0xc001) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000d40)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000e40)={{{@in=@multicast1, @in=@initdev}}, {{@in=@dev}, 0x0, @in6=@private2}}, &(0x7f0000000f40)=0xe8) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000f80), 0x2, 0x0) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000fc0)='/proc/zoneinfo\x00', 0x0, 0x0) close(r9) r10 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001000), 0x101003, 0x0) ioctl$sock_inet_SIOCADDRT(r10, 0x890b, &(0x7f0000001080)={0x0, {0x2, 0x4e22, @multicast2}, {0x2, 0x4e21, @remote}, {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001040)='ip6gretap0\x00', 0x5, 0x59c2, 0x4}) r11 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r10) sendmsg$TIPC_NL_KEY_SET(r9, &(0x7f0000001240)={&(0x7f0000001100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001200)={&(0x7f0000001180)={0x70, r11, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_PUBL={0x4}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x943}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}, @TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0xdb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3b78000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ff}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xfffff74d}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x324}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x8040}, 0x4044800) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f0000001500)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001340)={0x174, r12, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_IE={0xaf, 0x2a, [@erp={0x2a, 0x1}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0x7, @device_a, 0x8, @value=@device_b, 0x79b95d27, 0x7, @device_a, 0x7fff}}, @preq={0x82, 0x51, {{0x0, 0x1}, 0x3, 0x10, 0x7, @device_a, 0x7fff, @void, 0x800, 0x9, 0x5, [{{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x1, 0x0, 0x1}, @device_b, 0x5}, {{0x1, 0x0, 0x1}, @broadcast, 0xa4}, {{0x0, 0x0, 0x1}, @device_b, 0x7}, {{0x0, 0x0, 0x1}, @broadcast, 0x5}]}}, @dsss={0x3, 0x1, 0x7c}, @random={0x2, 0x26, "23bfa46f0fee277ae0e92be4e08329750227e92df8227dc4cecb18ae26a34e28f5ccd4cbfa6c"}]}, @NL80211_ATTR_BSS_SELECT={0x24, 0xe3, 0x0, 0x1, {0x20, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0xd, 0x7}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x4}}, @NL80211_BSS_SELECT_ATTR_RSSI_ADJUST={0x6, 0x3, {0x2, 0x1}}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}]}}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac0d, 0xfac02, 0xfac12]}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_PREAUTH={0x4}, @NL80211_ATTR_AKM_SUITES={0x20, 0x4c, [0xfac08, 0xfac10, 0xfac06, 0xfac03, 0xfac03, 0xfac03, 0xfac06]}], @NL80211_ATTR_PREV_BSSID={0xa, 0x4f, @random="4ccebf1fd7d9"}, @NL80211_ATTR_PREV_BSSID={0xa}, @NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_MAC_HINT={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0xc, {0x8, 0x3, 0x1}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x174}, 0x1, 0x0, 0x0, 0x4090}, 0x810) ioctl$sock_inet_udp_SIOCOUTQ(r10, 0x5411, &(0x7f0000001540)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000015c0)=@bloom_filter={0x1e, 0x8, 0x9, 0x8000, 0x6241, r14, 0x4000000, '\x00', r4, r9, 0x5, 0x2, 0x3, 0x7}, 0x50) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, &(0x7f0000001680)) 933.999639ms ago: executing program 4 (id=970): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x3, 0x3, 0x2, 0xb, 0x10}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x80, '\x00', 0x0, 0x24}, 0x94) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x5678\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='1234567890\n', 0xb) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cec", 0x39) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000000)={0x0, 0x5f5e100}, 0x0) write(r6, &(0x7f00000004c0)='\n', 0x1) unlinkat(0xffffffffffffff9c, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) read$FUSE(r7, 0x0, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0xc, &(0x7f0000000500), 0x4) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000200)={{0x80a0000, 0x2000, 0x0, 0x8, 0x90, 0x0, 0x2, 0xfe, 0xf, 0xfe, 0x0, 0xf4}, {0x10000, 0x80dd001, 0xe, 0xf8, 0x5, 0x0, 0xb, 0x72, 0xcc, 0x7, 0x3, 0x3}, {0xeeef0000, 0x0, 0x10, 0x7, 0xae, 0x3, 0x3, 0x8, 0x6, 0x81, 0x12, 0xa9}, {0x7000, 0x54000, 0x3, 0xe5, 0x3, 0x0, 0x15, 0x10, 0x3, 0x5, 0x9, 0x5}, {0x38000, 0xc000, 0x8, 0x1, 0x5, 0x2, 0x8, 0x0, 0x9, 0xf8, 0x81}, {0x0, 0xe000, 0xc, 0xb, 0x9, 0x8, 0xa, 0x8, 0x5, 0x3, 0x6, 0x2}, {0x9000, 0x4, 0x8, 0x10, 0xf, 0x9, 0x1, 0x2, 0x9, 0x5, 0x3e}, {0x54000, 0x7000, 0xb, 0x59, 0x3, 0x5, 0x98, 0x5, 0x4c, 0x5, 0x4, 0xf}, {0x26000, 0x3}, {0x70000, 0x800}, 0x80000000, 0x0, 0xeeee0000, 0x40000, 0x3, 0x8400, 0x80a0000, [0x4, 0x8000, 0x9, 0x9]}) 814.629551ms ago: executing program 0 (id=971): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b400000090ff00007910900000000000620000000000000095000000000000009e574bffff1729aba9b39a58e3cd8757e44cf3611b8e327a0279acba1f7791408d1efa421239728e2e5cc319b58520609dfd4a1a021d000000000000efffff75c3d894d99aef659f8b0000c515d8c219fbd9da31fc3ce3e9a2653000aec385a84a3d3f466bba30ac1486a70037fb03adef1a427fb0f4cb3072182da7c30000000000000000000000000000000000000000000000000000297e9fed660213ecb576987ad0972f18fbb7c9ecc03901f028b15b30ecf3205f90c9684ddc80d13bf37afc00e5efd686e6fb5ef4ee00b66126f773434a5c0d2ad3526bc484a6b94396117615f78f97637d8f8838aa75efb657ddafb15b88d97e47731cc3f55ce4e6a42562e6fb1f0000003030249c350044b09c36d10549a5949ff21418f1517508fb13540a82b5030cd9bb1bb066ca833c1fef6cefa28543ee520e46a3e96aca0d5a5f8cb34ad9c54c3a9a698f835bb83bcfd81ac5cfa18ce0740717994b5152cd0fa735433e50dccee16a208245b4366d44bb7ebd169b9e3a66d0cb29291a50f642ae4cb007540c806cd1cf88fdcaa393d1e1a697649401a802b474e374c767cb1ce52fd917d6af3de547be8429540de37f868a7f25d47c4b710836436008d4e8c8b42aeee84629d06d75ef09e0260b41de1f750480e492b6822d6275b7ccda1141707069cdb21de7a98dc37efdd806cc3619ad0659998bdd90b008c1aed04ee682b8ffd25741abbd9c6482ca45b82b6b7f25f71280cd6ba8bbb1e32dfe84831d1fc132755ce9aaf1952cb6829e9d6f4cbd8a07dc0cebcad512b3e0f2daa622bc805d2e152e0765b20cd6c8e2f4fff81e1458a43f35d36b25225dc0fbaf3b8131f5a8ae73e8badc519350edf048d5f56617"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 795.685357ms ago: executing program 3 (id=972): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r0, 0x400, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008001}, 0x4000) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x28}, 0x1, 0x0, 0x0, 0x4001}, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r3) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000340)=0x0) sendmsg$NFC_CMD_GET_DEVICE(r3, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x802, 0x70bd28, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000004c0)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000500)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000600)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x6c, r7, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8000}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r9}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4010}, 0x20000040) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMK(r10, &(0x7f0000000780)={&(0x7f0000000640), 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x44, r11, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x200000d0) munmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000) r12 = syz_genetlink_get_family_id$team(&(0x7f0000000800), r10) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000840)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000900)={'syztnl1\x00', &(0x7f0000000880)={'gretap0\x00', 0x0, 0x80, 0x80, 0x7, 0x0, {{0xc, 0x4, 0x1, 0x9, 0x30, 0x65, 0x0, 0x5, 0x4, 0x0, @broadcast, @private=0xa010101, {[@rr={0x7, 0x1b, 0x8b, [@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @local, @private=0x1, @multicast2]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000940)={'team0\x00', 0x0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000980)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, &(0x7f00000009c0)=[0x0], &(0x7f0000000a00)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x96, &(0x7f0000000a40)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0xc, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d00)={0xffffffffffffffff, 0x58, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001000)={0xffffffffffffffff, 0xe0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000d40)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f0000000d80)=[0x0, 0x0], &(0x7f0000000dc0)=[0x0, 0x0, 0x0, 0x0], 0x0, 0xb3, &(0x7f0000000e00)=[{}], 0x8, 0x10, &(0x7f0000000e40), &(0x7f0000000e80), 0x8, 0x4c, 0x8, 0x8, &(0x7f0000000ec0)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001040)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r10, 0x8933, &(0x7f0000001080)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f0000002280)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002240)={&(0x7f00000019c0)={0x844, r12, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r13}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r14}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3d24}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r15}, {0x17c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x10001}}, {0x8, 0x6, r17}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x1, 0x66, 0x10, 0x2}, {0x0, 0xa, 0x0, 0x5}, {0xd, 0xfa, 0x1}, {0x8, 0x9, 0xff, 0x3}, {0x462, 0x9d, 0x5, 0x2}, {0xb76, 0x1, 0x1, 0x6ca}, {0xfff, 0x81, 0x6, 0x6}, {0x2, 0x6, 0xc0, 0x4}, {0x6, 0xff, 0x81, 0x400000}]}}}]}}, {{0x8, 0x1, r19}, {0xa0, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r20}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x9, 0x0, 0x40, 0xbeff}, {0xfe01, 0xa, 0x3, 0x9}, {0x0, 0x7, 0x5}, {0x1, 0x8, 0xf, 0xc}, {0x8, 0xf, 0x6, 0x3}]}}}]}}, {{0x8, 0x1, r21}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x148, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x1ec, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xc}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x3, 0x10, 0xd, 0x100}, {0x40, 0x8e, 0x5, 0x9}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffb963}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x401}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}]}, 0x844}, 0x1, 0x0, 0x0, 0x884}, 0x20004000) 731.24066ms ago: executing program 0 (id=973): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = syz_open_dev$mtd(&(0x7f00000000c0), 0x260c, 0x8a42) r1 = dup(r0) write$cgroup_subtree(r1, 0x0, 0x32600) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) ioctl$FS_IOC_ENABLE_VERITY(0xffffffffffffffff, 0x40806685, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008050) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbfa, {0x0, 0x0, 0x0, 0x0, 0x40810}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008011}, 0x4080) r7 = syz_io_uring_setup(0x29d7, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r8, r9, r10, &(0x7f0000000280)=@IORING_OP_WAITID={0x32, 0x51, 0x0, 0x7, &(0x7f0000000780)={0x10, 0x8, 0xa}, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x4}}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_uring_enter(r7, 0x1, 0x1, 0x61, 0x0, 0x0) ioctl$NILFS_IOCTL_RESIZE(r2, 0x40086e8b, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xffee, 0xffe0}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r2) 561.105269ms ago: executing program 1 (id=974): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x1f, 0x6, 0x390, 0x0, 0x98, 0x130, 0x1c8, 0x2f8, 0x0, 0x98, 0x130, 0x260, 0x2f8, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x30, 0x0, 0x3}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r3, &(0x7f0000000100)='bRequestType=\'', 0xe) syz_genetlink_get_family_id$team(&(0x7f0000000400), r3) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)="e7b2", 0x2}], 0x1}, 0x98) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff}, 0x48) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000001800)={0x38, 0x43, 0x107, 0x70bd2a, 0x25dfdbfc, {0x2, 0x7c}, [@nested={0x1c, 0x145, 0x0, 0x1, [@typed={0x4, 0x4}, @nested={0x14, 0x3, 0x0, 0x1, [@nested={0xd, 0x3e, 0x0, 0x1, [@typed={0x8, 0x101, 0x0, 0x0, @fd}, @generic="c4"]}]}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8}, 0x2004c000) 560.625948ms ago: executing program 3 (id=975): syz_emit_vhci(0x0, 0x5) unshare(0xd256bc88cea82616) 535.4171ms ago: executing program 4 (id=976): r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000004540)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000004400)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000002400)=[{&(0x7f0000000080)=""/128, 0x80}, {&(0x7f0000000100)=""/110, 0x6e}, {&(0x7f0000000180)=""/136, 0x88}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/231, 0xe7}, {&(0x7f0000001340)=""/18, 0x12}, {&(0x7f0000001380)=""/4096, 0x1000}, {&(0x7f0000002380)=""/117, 0x75}], 0x8, &(0x7f0000002480)=""/217, 0xd9}, 0x5a}, {{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002580)=""/248, 0xf8}, {&(0x7f0000002680)=""/156, 0x9c}, {&(0x7f0000002740)=""/245, 0xf5}, {&(0x7f0000002840)=""/195, 0xc3}, {&(0x7f0000002940)=""/128, 0x80}, {&(0x7f00000029c0)=""/127, 0x7f}, {&(0x7f0000002a40)=""/185, 0xb9}, {&(0x7f0000002b00)=""/4096, 0x1000}], 0x8, &(0x7f0000003b80)=""/9, 0x9}, 0x3}, {{&(0x7f0000003bc0)=@l2tp={0x2, 0x0, @multicast1}, 0x80, &(0x7f0000003d00)=[{&(0x7f0000003c40)=""/150, 0x96}], 0x1, &(0x7f0000003d40)=""/155, 0x9b}, 0x5}, {{&(0x7f0000003e00)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000003e80)=""/18, 0x12}, {&(0x7f0000003ec0)=""/162, 0xa2}, {&(0x7f0000003f80)=""/182, 0xb6}, {&(0x7f0000004040)=""/83, 0x53}], 0x4}, 0x7}, {{0x0, 0x0, &(0x7f0000004380)=[{&(0x7f0000004100)=""/21, 0x15}, {&(0x7f0000004140)=""/30, 0x1e}, {&(0x7f0000004180)=""/144, 0x90}, {&(0x7f0000004240)=""/177, 0xb1}, {&(0x7f0000004300)=""/31, 0x1f}, {&(0x7f0000004340)=""/53, 0x35}], 0x6}, 0x1ff}], 0x5, 0x10001, &(0x7f0000004580)={r2, r3+10000000}) (async) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000045c0)={0x0, 0x0, @ioapic={0x4000, 0xf1f9, 0x2, 0x4, 0x0, [{0x31, 0x6, 0xac, '\x00', 0x5}, {0x5, 0x7, 0x2e, '\x00', 0x3}, {0x5, 0x5, 0x6, '\x00', 0x81}, {0x7, 0xd, 0x8e, '\x00', 0x3}, {0x6, 0x3, 0xb, '\x00', 0x9}, {0x4, 0x0, 0x2, '\x00', 0xfb}, {0x3, 0xd, 0xae, '\x00', 0x7}, {0x81, 0xa, 0x2, '\x00', 0x7f}, {0xf8, 0x7f, 0xf1, '\x00', 0x3}, {0x6, 0x7f, 0x0, '\x00', 0x9}, {0x9, 0x40, 0x5f, '\x00', 0x1}, {0x8, 0x5d, 0x3, '\x00', 0x3}, {0x8, 0x9, 0x5, '\x00', 0xc}, {0xb, 0x7f, 0x80, '\x00', 0x1}, {0x5, 0x2, 0x6, '\x00', 0x4}, {0x39, 0xf, 0x1, '\x00', 0x2a}, {0x2d, 0xd, 0x2, '\x00', 0x5}, {0x1, 0x3, 0x10, '\x00', 0x1}, {0x1, 0x0, 0x3, '\x00', 0x53}, {0x1, 0x1, 0x1c, '\x00', 0x6}, {0x1, 0xf9, 0x4, '\x00', 0x4}, {0xf, 0x3, 0xe, '\x00', 0xd4}, {0x7f, 0xfa, 0x6, '\x00', 0x4}, {0xc, 0x0, 0x9, '\x00', 0x5}]}}) (async) timer_create(0x0, &(0x7f0000005880)={0x0, 0x4, 0x4, @thr={&(0x7f0000004800)="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", &(0x7f0000005800)="e5fb01ec322f7b00769cce27236db28553231243b880c26fb6682ea566dae7f023efe2a0ab24ab0914bc963d7cd8ff4fca4b83e131fbb1a743fa6d65a27f89d7d39b14c11c464a446011b03fc361f0591cdf5d0fb56856c96b0195f4ba"}}, &(0x7f00000058c0)=0x0) timer_delete(r5) (async) r6 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000005900), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r6, 0xc0d05605, &(0x7f0000005940)={0xe, @sdr={0x31364d59, 0xba}}) (async) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000005a40), 0x40a601, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, &(0x7f0000005a80)={0x48, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) (async) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000005b00)={0xc, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r7, 0x3ba0, &(0x7f0000005b40)={0x48, 0xa, r8, 0x0, r9}) ioctl$KVM_SET_REGS(r0, 0x4090ae82, &(0x7f0000005bc0)={[0x7, 0x6fde, 0x800000000000, 0x4, 0xbb3, 0xfffffffffffffffa, 0x6, 0x1, 0x8, 0x3, 0x9732, 0x4, 0x3, 0x3, 0x8, 0x73], 0xffffffff, 0x8600}) ioctl$VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000005c80)={0xe000000, 0xddd6022ad6623a93, 0x2, "b72ea88d7b5bcc19eb827ee30884eaa1d5aad4e235bad2e60ace6f9dd046bcbf", 0x31364d59}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r7, 0x3b85, &(0x7f0000005cc0)={0x28, 0x6, r9, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xe3}) listen(r1, 0xa26) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000005d00), 0x2840, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r10, 0x3ba0, &(0x7f0000005d40)={0x48, 0xa, r8, 0x0, r9}) (async) ioctl$TCSETSW(r7, 0x5403, &(0x7f0000005dc0)={0x9, 0x3, 0x4, 0x6, 0x2, "7a9ff065eb555fbfd7a76c27f3e101bfdd12eb"}) (async) mkdirat(r7, &(0x7f0000005e00)='./file0\x00', 0x120) ioctl$VIDIOC_DBG_G_CHIP_INFO(r7, 0xc0c85666, &(0x7f0000005e40)={{0x3, @name="81867f214bc3e797296a9ab5e82a8de380c14d25cf2ac49ca0bcd300270546ac"}, "885355b3f2a25e40a0a8006f3a5ad265a5b3adad0dbc155896eaddfaff21cdfb"}) (async) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r1, 0x40106e8c, &(0x7f0000005f40)=[0x7, 0x3]) write(r0, &(0x7f0000005f80)="bf1d05e6e14cd401439c6f8d733a312c8c4abdb351d96596911f097e0e5a972b4044863ea2b1f3452de136f1e277f0bfea6d5cc90a1cdd9a21f8253d0ffa3158d6062df1f8847bf6c00af98508fa44f6dd84d9774d283cda5c8b82edbb8e4a06086e1cd420ef7e11e3baa1c129614e8873ab02b3bf861430c4750ae4d0f138f6d05be6ab5aea35e77e965ae85c83a517e5c69ed523aada55e6a7a079bfc65e256b9c6d1493d8df1332c917541ab40255350b7533f884dd18293ef1cb25a63b7d6617b971e82331e1d00ebebc4ac21f8c09f325fba7107a95e268dfa31f260687ad41bb", 0xe3) (async) r11 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_pktinfo(r11, 0x0, 0x8, &(0x7f0000006080)={r4, @multicast2, @multicast2}, 0xc) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000006100), r7) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000006400)={r7, 0xe0, &(0x7f0000006300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000006140)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, &(0x7f0000006180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000061c0)=[0x0, 0x0, 0x0], 0x0, 0x86, &(0x7f0000006200)=[{}], 0x8, 0x10, &(0x7f0000006240), &(0x7f0000006280), 0x8, 0x8, 0x8, 0x8, &(0x7f00000062c0)}}, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f0000007c00)={&(0x7f00000060c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000007bc0)={&(0x7f0000006440)={0x1744, r12, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1094, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x2a, 0x5, "bc8e0cbf581d596ad8aa2f627cfc8e3c98a951a870804de6ef5647bc52c3b4d6d1c0a6e1f96e"}, @ETHTOOL_A_BITSET_VALUE={0x3c, 0x4, "d12e8b9a036cf61da2172479454c93f5d97f9d069193904f1552b5f2feb3ef50008c3d052c6e2e6cc016abb8500b58f11b3a828a905e2642"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x1004, 0x5, "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"}, @ETHTOOL_A_BITSET_VALUE={0x13, 0x4, "f606bf748d361b5bb6412cb2e6c035"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x3dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xb2, 0x4, "cc562b5d8b6cc6e08cd7ff88fa9e3d909fbb2baaa2625fc0b5ba57ea1500e3e89250ec107004674cc3c409010372fa87f8a7737901fbc0f4322435a9978e486a204c0d9823f1b394f69d9c7a9f8889da877fb08433e9168d613cb6c514ce2b37d47db128dd649a9fbdb0d6f321a5088a1306a75abfb1da0a77563459e29371f3b9e55f06be871fb871f096776dbf38c43c01590e17ef1e79f6c11b85ee541b28405e96ecd8c25d6e1df7b597ce04"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x5}, @ETHTOOL_A_BITSET_VALUE={0x87, 0x4, "729d62dfb3bdb803cd1abf619efff42b6b2a7f914ac3cafca41aec761cfa01ecb22adaa43bee3b04c6e2f97019d111546eb91df70ab66d3f14840af7e106579ae590fe256f8faa3bbf65fca08509ad8395c3226c2eeeeca5e12539e67ffc9a29debc31dfd3de8abd618de5d1d851f9ea21e93fe53340aa533e3726c1581c5f1ef7bd49"}, @ETHTOOL_A_BITSET_BITS={0x238, 0x3, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffff2f}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/iommu\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/video37\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/video37\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, '/dev/iommu\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}]}, {0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '-(\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x15, 0x2, ')&\\#*:#-*+)-%-}@\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '%\x9e}\\\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/video37\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '---N.\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '()\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x17\'.\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6c}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffffe}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbf}]}, {0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/video37\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x400}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfffffff7}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x345c}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x13\x8f%\x00'}]}]}, @ETHTOOL_A_BITSET_MASK={0x32, 0x5, "d19be05aa1614ffd081c3df6863f1f0a9d08074a8fe2bbe0f73df9a0da1b207777d37d6bfa4e319fb5ecff7dd7b3"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xb}, @ETHTOOL_A_BITSET_BITS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd19}]}]}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x1d4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1ff}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xf0, 0x3, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x996e}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '+#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x953}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe90a}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x42a337cc}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_NAME={0xd, 0x2, '/dev/vcs\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x13, 0x2, '^\\){<\\@,,#&\'{+\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, ',//,-&%\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/video37\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_BITS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xad, 0x4, "d2ecb850e76c28b2a52fb9250cbc40724f2ee3104bef28ca56dde1129f6d1010245ce157e44b097ab7bae0eafc02f8468920828c8f88ff22110137da5fd2ed68094b546431174a12147322e4179765b44f74f1bda9fb4888dae0b34f895dce0f7c22b22c113f1f3f0f8c71ccbce5cc2524767aed757fb4e18a88a5a1ddd8fd0400db05b885b82ba413eb120256c215380d8e3721045b2f4e2790210c271dfdeb9bad01b67ef0747faf"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}]}]}, 0x1744}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008000) 474.168136ms ago: executing program 3 (id=977): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="30000000111401fffc000000ffdb9f2508004a0000000000080001000000000008004b00130000000800030001"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1ff, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x13, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) 473.199424ms ago: executing program 4 (id=978): syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0cbb45", 0x28, 0x3a, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x2, 0x0, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x2003fffe, 0x0, 0x2, 0x8, 0xfffffffd, 0x100000, 0x7}}) socket$packet(0x11, 0x3, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000000080)=""/122, 0x7a}, {0x0}, {0x0}], 0x3, 0x16ab, 0x7fff) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff00"/104], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r4, 0x1000) r5 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) ioctl$HIDIOCGFEATURE(r5, 0xc0404807, &(0x7f0000000080)={0x3, "8faa7ab68aefc96940add94dd986d4f32634f14a10c1df59d27a3e745fb11661b2c297044eb0864509a8cbc7c48a18ef12f2fb379d0c1959605e2a52b1586bde"}) r6 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b41889160001010203010902220002010080fa090400000003000000090401"], 0x0) syz_usb_control_io(r6, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="db070100000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = syz_open_dev$I2C(&(0x7f0000000400), 0x2, 0x0) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000500)={&(0x7f0000001540)=[{0x10, 0x4810, 0x0, 0x0}, {0xe94, 0x800, 0x0, 0x0}], 0x2}) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x20, r8, 0x1, 0x0, 0x25dfdbfc, {0x7}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x10001}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x5, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x6e}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4040}, 0x80) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x2f, 0x1, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x200, 0x0, 0x3}}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 334.765463ms ago: executing program 3 (id=979): unshare(0x2a020480) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x22304000, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r1}, @CGW_DST_IF={0x8, 0xa, r1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 103.916658ms ago: executing program 3 (id=980): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x60004, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000040)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x24, r3, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x4000000) sendmsg$NFC_CMD_DEV_DOWN(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x123, 0x234, {0x7}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r1}]}, 0x1c}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000000206030000000000000000000700000405000100bf52d03d48fe5a87a8d2093e20fb0600000005000500020000000500040003000000090002007379b847abc52541276f7a310000000016000300686173683a6e65742c706f72742c6e6574000000"], 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$TIOCVHANGUP(0xffffffffffffffff, 0x5437, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}}, 0x4044050) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f00007eb000/0x3000)=nil, 0x3000, 0x6) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETGEN(0xffffffffffffffff, 0x0, 0x400c000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/block/sda/device/scsi_disk/0:0:0:0/provisioning_mode\x00', 0x2, 0x0) write(r6, &(0x7f00000001c0)='writesame_16', 0xc) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) 103.530241ms ago: executing program 0 (id=981): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) 2.51902ms ago: executing program 0 (id=982): r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3401) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x60000, 0x0, &(0x7f00000004c0)={0x4b5a9da54893e123, 0x3, 0x12, 0x1}, 0x8, 0x0, 0x8, 0x0, 0x5, 0x0, 0x0}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='\\x 1000000 2000000000 0 0', 0x19) (async, rerun: 64) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040), 0x412940, 0x0) (rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000080)={'wg1\x00'}) 0s ago: executing program 3 (id=983): r0 = socket$can_bcm(0x1d, 0x2, 0x2) recvmsg$can_bcm(r0, &(0x7f0000000680)={&(0x7f0000000200)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/234, 0xea}, {&(0x7f0000000500)=""/96, 0x60}, {&(0x7f0000000580)}, {&(0x7f00000005c0)=""/105, 0x69}], 0x4}, 0x2001) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) shmget(0x1, 0x4000, 0x200, &(0x7f0000ff8000/0x4000)=nil) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newsa={0x140, 0x10, 0x113, 0x0, 0x0, {{@in=@loopback, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@multicast1, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0xa, 0x3}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @tfcpad={0x8, 0x16, 0x1000}]}, 0x140}, 0x1, 0x0, 0x0, 0x40080}, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000140)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x6, 0x244c, 0xffffffffffffffff, 0x101, 0x0, 0xfffffffc}) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r2, 0x7a4, &(0x7f0000000000)={{@host}, 0x200000000000, 0x0, 0x0, 0xfffffffc}) r3 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') lseek(r3, 0x7fffffff, 0x1) ioctl$FE_SET_PROPERTY(r3, 0x40106f52, &(0x7f0000000a40)={0x3f, &(0x7f0000000780)=[{0x1, '\x00', @data=0x5, 0x3}, {0x13, '\x00', @buffer={"288b572ef5ecdbab4768c7fbde95143056eb4561f2886b66f0faa0c03f0cc025", 0x20}, 0x8}, {0x38, '\x00', @buffer={"79a08035eac709d7232f0bad3f68b8254bde5cda46072d5cd3f4b6c59f17b4dc", 0x20}, 0xf}, {0x1d, '\x00', @buffer={"68184eed82662e869c60eb29a73da607354f63d11a5d0369394e88e578f04d11", 0x20}, 0x8d88}, {0x26, '\x00', @st={0x4, [{0x1, @uvalue=0x1}, {0x1, @uvalue=0x673089d3}, {0x2, @uvalue=0xffffffffffff2fb2}, {0x1, @svalue=0xffffffffffffffff}]}, 0x101}, {0x2b, '\x00', @buffer={"09a5ec0de770d51605f15cd72f0e0986331f7da66226381430122f84f601e7c7", 0x20}, 0x3}, {0x16, '\x00', @st={0x4, [{0x3, @uvalue=0xffffffff}, {0x1, @uvalue=0xd7b}, {0x3, @svalue=0xd19}, {0x3, @uvalue=0x3}]}, 0x5}, {0x43, '\x00', @st={0x4, [{0x1, @svalue=0x7}, {0x0, @svalue=0x8}, {0x3, @uvalue=0x5}, {0x3, @svalue=0x8000}]}, 0x4}, {0x32, '\x00', @st={0x4, [{0x3, @svalue=0x1}, {0x0, @uvalue=0x8}, {0x1, @svalue=0x3}, {0x2, @uvalue=0x4}]}, 0x8}]}) close(0x3) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/mdstat\x00', 0x0, 0x0) poll(&(0x7f0000000140)=[{r4, 0x4100}], 0x1, 0x1) 0s ago: executing program 1 (id=984): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x119) (async) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mkdirat(r1, &(0x7f0000000140)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x2) (async) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='squashfs\x00', 0x8404, 0x0) (async) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000000)=""/58, &(0x7f0000000040)=0x3a) (async) rt_tgsigqueueinfo(0x0, 0x0, 0xffffffff, &(0x7f0000000000)={0x0, 0x0, 0x2127}) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/tracing/events/kvm/kvm_apic_accept_irq/enable\x00', 0x82800, 0x0) write(r2, &(0x7f0000002080)="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", 0x1000) (async) read(r2, 0x0, 0x0) kernel console output (not intermixed with test programs): 308.927:587): avc: denied { append } for pid=7003 comm="syz.1.287" name="nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 75.071714][ T7023] netlink: 'syz.0.293': attribute type 8 has an invalid length. [ 75.102014][ T7026] fuse: Unknown parameter 'Vrup^id' [ 75.126002][ T7028] CacheFiles: Failed to register: -95 [ 75.139162][ T7030] tipc: Started in network mode [ 75.139227][ T7030] tipc: Node identity 4, cluster identity 4711 [ 75.145711][ T7030] tipc: Node number set to 4 [ 75.154375][ T43] audit: type=1400 audit(1788158309.067:588): avc: denied { accept } for pid=7029 comm="syz.1.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.227804][ T7045] ip6gre1: entered promiscuous mode [ 75.227838][ T7045] ip6gre1: entered allmulticast mode [ 75.233549][ T7053] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 75.448886][ T7062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.304'. [ 75.459061][ T7062] netlink: 40 bytes leftover after parsing attributes in process `syz.3.304'. [ 75.576484][ T35] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 75.610699][ T43] audit: type=1400 audit(1788158309.527:589): avc: denied { accept } for pid=7063 comm="syz.3.305" lport=36816 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 75.611517][ T43] audit: type=1400 audit(1788158309.527:590): avc: denied { getopt } for pid=7063 comm="syz.3.305" lport=36816 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 75.611731][ T7066] sctp: [Deprecated]: syz.3.305 (pid 7066) Use of int in max_burst socket option. [ 75.611731][ T7066] Use struct sctp_assoc_value instead [ 75.667005][ T853] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.726623][ T35] usb 6-1: Invalid ep0 maxpacket: 16 [ 75.810082][ T6213] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.856497][ T35] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 76.006442][ T35] usb 6-1: Invalid ep0 maxpacket: 16 [ 76.007719][ T35] usb usb6-port1: attempt power cycle [ 76.072822][ T7073] program syz.0.308 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.298937][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.356492][ T35] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 76.376818][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.378702][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.388298][ T35] usb 6-1: Invalid ep0 maxpacket: 16 [ 76.414262][ T7085] input: syz1 as /devices/virtual/input/input5 [ 76.506430][ T10] usb 5-1: device descriptor read/64, error -71 [ 76.517919][ T35] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 76.539823][ T35] usb 6-1: Invalid ep0 maxpacket: 16 [ 76.540098][ T35] usb usb6-port1: unable to enumerate USB device [ 76.746422][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 76.876499][ T10] usb 5-1: device descriptor read/64, error -71 [ 76.987499][ T10] usb usb5-port1: attempt power cycle [ 77.322886][ T7114] ip6t_rt: too many addresses specified [ 77.325661][ T7114] tmpfs: Bad value for 'huge' [ 77.327507][ T10] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 77.331276][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.346927][ T10] usb 5-1: device descriptor read/8, error -71 [ 77.373650][ T7116] netlink: 8 bytes leftover after parsing attributes in process `syz.4.314'. [ 77.373702][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.4.314'. [ 77.373927][ T7116] netlink: 'syz.4.314': attribute type 7 has an invalid length. [ 77.508108][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.569746][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.586406][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 77.607253][ T10] usb 5-1: device descriptor read/8, error -71 [ 77.716626][ T10] usb usb5-port1: unable to enumerate USB device [ 77.879879][ T7145] 9pnet_fd: p9_fd_create_unix (7145): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 77.935200][ T7149] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7149 comm=syz.4.325 [ 77.991766][ T7156] bridge0: mtu less than device minimum [ 78.313232][ T7160] Bluetooth: hci0: unsupported parameter 5135 [ 78.313283][ T7160] Bluetooth: hci0: unsupported parameter 8192 [ 78.316540][ T7160] Bluetooth: hci0: unsupported parameter 5135 [ 78.316554][ T7160] Bluetooth: hci0: unsupported parameter 8192 [ 78.367738][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.491013][ T7170] binder: 7169:7170 ioctl 5501 0 returned -22 [ 78.491203][ T7170] binder: 7169:7170 ioctl 400c6615 200000000180 returned -22 [ 78.577307][ T7168] CIFS: Attempting to mount //::1/share [ 78.582772][ T7168] CIFS: VFS: Error connecting to socket. Aborting operation. [ 78.584047][ T7168] CIFS: VFS: cifs_mount failed w/return code = -4 [ 78.668377][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.795173][ T7195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 78.795619][ T7195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 78.803797][ T43] kauditd_printk_skb: 23 callbacks suppressed [ 78.804099][ T43] audit: type=1400 audit(1788158312.717:614): avc: denied { getopt } for pid=7192 comm="syz.1.339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 78.835649][ T43] audit: type=1400 audit(1788158312.747:615): avc: denied { read write } for pid=7199 comm="syz.3.340" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 78.835721][ T43] audit: type=1400 audit(1788158312.747:616): avc: denied { read write } for pid=7199 comm="syz.3.340" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 78.835874][ T43] audit: type=1400 audit(1788158312.747:617): avc: denied { open } for pid=7199 comm="syz.3.340" path="/97/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 79.308680][ T7229] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.323044][ T43] audit: type=1400 audit(1788158313.237:618): avc: denied { mounton } for pid=7238 comm="syz.0.354" path="/72/file0" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 79.323259][ T7239] fuse: Unknown parameter 'dont_measure' [ 79.380427][ T7245] program syz.4.349 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.416768][ T70] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.484470][ T7229] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.502283][ T43] audit: type=1400 audit(1788158313.417:619): avc: denied { read write } for pid=7253 comm="syz.1.356" name="uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.502386][ T43] audit: type=1400 audit(1788158313.417:620): avc: denied { open } for pid=7253 comm="syz.1.356" path="/dev/uhid" dev="devtmpfs" ino=1293 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.502469][ T43] audit: type=1400 audit(1788158313.417:621): avc: denied { ioctl } for pid=7253 comm="syz.1.356" path="/dev/uhid" dev="devtmpfs" ino=1293 ioctlcmd=0x6687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 79.513460][ T7245] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.544803][ T7261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.358'. [ 79.567123][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.581627][ T7229] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.674160][ T7229] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.805501][ T43] audit: type=1400 audit(1788158313.717:622): avc: denied { bind } for pid=7277 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.815419][ T43] audit: type=1400 audit(1788158313.727:623): avc: denied { write } for pid=7277 comm="syz.0.362" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.819477][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.844368][ T5570] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.846567][ T5570] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.868434][ T5570] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.868551][ T5570] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.888178][ T7283] erspan1: entered promiscuous mode [ 80.069450][ T7295] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.288886][ T5844] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 80.390145][ T7313] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 80.393146][ T7314] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 80.439525][ T7316] netlink: 64 bytes leftover after parsing attributes in process `syz.1.371'. [ 80.447244][ T5844] usb 5-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 80.453313][ T5844] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.453424][ T5844] usb 5-1: Product: syz [ 80.453461][ T5844] usb 5-1: Manufacturer: syz [ 80.453499][ T5844] usb 5-1: SerialNumber: syz [ 80.668570][ T7323] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.668914][ T7323] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.761431][ T7328] xt_ipcomp: unknown flags 1D [ 80.786532][ T25] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 80.912027][ T5844] rtl8150 5-1:1.0: couldn't reset the device [ 80.912217][ T5844] rtl8150 5-1:1.0: probe with driver rtl8150 failed with error -5 [ 80.915382][ T5844] usb 5-1: USB disconnect, device number 10 [ 80.936912][ T25] usb 6-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 80.938930][ T25] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.955855][ T25] i2c-tiny-usb 6-1:1.0: version 1.00 found at bus 006 address 007 [ 81.092853][ T7334] netlink: 'syz.3.377': attribute type 10 has an invalid length. [ 81.093167][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.093601][ T7334] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.101715][ T7334] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.101773][ T7334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.101991][ T7334] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.102039][ T7334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.104008][ T7334] bridge0: entered promiscuous mode [ 81.104938][ T7334] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 81.255021][ T7337] netlink: 20 bytes leftover after parsing attributes in process `syz.3.378'. [ 81.424247][ T7343] bridge_slave_0: left allmulticast mode [ 81.424373][ T7343] bridge_slave_0: left promiscuous mode [ 81.425120][ T7343] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.454727][ T7343] bridge_slave_1: left allmulticast mode [ 81.454787][ T7343] bridge_slave_1: left promiscuous mode [ 81.456174][ T7343] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.485658][ T7343] bond0: (slave bond_slave_0): Releasing backup interface [ 81.504630][ T7343] bond0: (slave bond_slave_1): Releasing backup interface [ 81.514013][ T7343] team0: Port device team_slave_0 removed [ 81.515368][ T7344] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 81.527901][ T7343] team0: Port device team_slave_1 removed [ 81.528355][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.528367][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.536920][ T25] (null): failure reading functionality [ 81.544042][ T7343] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.544102][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.550716][ T25] i2c i2c-2: failure reading functionality [ 81.562922][ T25] i2c i2c-2: connected i2c-tiny-usb device [ 81.845072][ T7357] sctp: [Deprecated]: syz.0.382 (pid 7357) Use of struct sctp_assoc_value in delayed_ack socket option. [ 81.845072][ T7357] Use struct sctp_sack_info instead [ 82.429256][ T7382] netlink: 'syz.3.388': attribute type 10 has an invalid length. [ 82.442295][ T7382] team0: Port device dummy0 added [ 82.446752][ T7382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.388'. [ 82.446858][ T7382] netlink: 56 bytes leftover after parsing attributes in process `syz.3.388'. [ 82.528937][ T30] net_ratelimit: 10 callbacks suppressed [ 82.529019][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 82.539872][ T7384] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.620511][ T7388] jffs2: notice: (7388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 82.717707][ T7398] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 82.717767][ T7398] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 1th superblock [ 82.718862][ T7398] F2FS-fs (nbd0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 82.718875][ T7398] F2FS-fs (nbd0): Can't find valid F2FS filesystem in 2th superblock [ 82.735904][ T7401] tipc: Can't bind to reserved service type 0 [ 82.742377][ T7404] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7404 comm=syz.3.396 [ 82.742481][ T7402] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7402 comm=syz.3.396 [ 82.811305][ T7407] key id 000004d2 not found [ 82.872795][ T7412] netlink: 24 bytes leftover after parsing attributes in process `syz.0.398'. [ 82.944153][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.0.399'. [ 82.993384][ T7416] netlink: 'syz.0.400': attribute type 2 has an invalid length. [ 82.997586][ T7416] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 83.186663][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.576651][ T5611] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 83.647651][ T9] usb 6-1: USB disconnect, device number 7 [ 83.806378][ T43] kauditd_printk_skb: 5106 callbacks suppressed [ 83.806799][ T43] audit: type=1326 audit(1788158317.717:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.806842][ T43] audit: type=1326 audit(1788158317.727:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.806878][ T43] audit: type=1326 audit(1788158317.727:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.806970][ T43] audit: type=1326 audit(1788158317.727:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.807114][ T43] audit: type=1326 audit(1788158317.727:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.807245][ T43] audit: type=1326 audit(1788158317.727:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.807369][ T43] audit: type=1326 audit(1788158317.727:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.807508][ T43] audit: type=1326 audit(1788158317.727:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.807744][ T43] audit: type=1326 audit(1788158317.727:5737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.807788][ T43] audit: type=1326 audit(1788158317.727:5738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7421 comm="syz.0.403" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4bc19e159 code=0x50000 [ 83.978203][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.127317][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.306597][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.327038][ T7457] netlink: 'syz.1.414': attribute type 2 has an invalid length. [ 84.606932][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 84.866619][ T7494] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 84.889048][ T7496] netlink: 28 bytes leftover after parsing attributes in process `syz.1.422'. [ 84.917119][ T7502] netlink: 36 bytes leftover after parsing attributes in process `syz.4.424'. [ 84.917919][ T7502] siw: device registration error -23 [ 85.394561][ T7529] netlink: 24 bytes leftover after parsing attributes in process `syz.4.432'. [ 85.439346][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.657369][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.816430][ T7553] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 85.897292][ T7556] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 86.015091][ T7565] No source specified [ 86.017060][ T7563] netlink: 24 bytes leftover after parsing attributes in process `syz.1.442'. [ 86.361587][ T7581] fuse: Bad value for 'fd' [ 86.368641][ T7581] netlink: 'syz.0.447': attribute type 64 has an invalid length. [ 86.368718][ T7581] netlink: 'syz.0.447': attribute type 4 has an invalid length. [ 86.368762][ T7581] netlink: 152 bytes leftover after parsing attributes in process `syz.0.447'. [ 86.424762][ T7583] faux_driver vgem: [drm] Unknown color mode 1024; guessing buffer size. [ 86.566710][ T5813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 86.645172][ T7594] lo speed is unknown, defaulting to 1000 [ 86.668123][ T7595] lo speed is unknown, defaulting to 1000 [ 87.303342][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 87.303395][ T7624] netlink: 8 bytes leftover after parsing attributes in process `syz.4.457'. [ 87.566429][ T1582] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 87.728510][ T5570] net_ratelimit: 2 callbacks suppressed [ 87.730823][ T5570] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.735425][ T30] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.735495][ T1582] usb 6-1: Using ep0 maxpacket: 32 [ 87.741362][ T1582] usb 6-1: New USB device found, idVendor=12d1, idProduct=36d7, bcdDevice=ca.fc [ 87.743057][ T1582] usb 6-1: config 3 has an invalid interface number: 168 but max is 0 [ 87.743081][ T1582] usb 6-1: config 3 contains an unexpected descriptor of type 0x2, skipping [ 87.743096][ T1582] usb 6-1: config 3 has no interface number 0 [ 87.743125][ T1582] usb 6-1: config 3 interface 168 altsetting 8 bulk endpoint 0x1 has invalid maxpacket 16 [ 87.743144][ T1582] usb 6-1: config 3 interface 168 altsetting 8 endpoint 0x9 has invalid maxpacket 1112, setting to 64 [ 87.743163][ T1582] usb 6-1: config 3 interface 168 altsetting 8 endpoint 0xF has invalid maxpacket 64765, setting to 64 [ 87.743182][ T1582] usb 6-1: config 3 interface 168 altsetting 8 bulk endpoint 0xE has invalid maxpacket 64 [ 87.743199][ T1582] usb 6-1: config 3 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 87.743214][ T1582] usb 6-1: config 3 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 87.743231][ T1582] usb 6-1: config 3 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 87.743246][ T1582] usb 6-1: config 3 interface 168 altsetting 8 has a duplicate endpoint with address 0x1, skipping [ 87.743263][ T1582] usb 6-1: config 3 interface 168 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 87.743282][ T1582] usb 6-1: config 3 interface 168 has no altsetting 0 [ 87.764223][ T1582] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.764249][ T1582] usb 6-1: Product: syz [ 87.764261][ T1582] usb 6-1: Manufacturer: syz [ 87.764271][ T1582] usb 6-1: SerialNumber: syz [ 87.782463][ T7620] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.782874][ T7620] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 87.796443][ T6213] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 87.881563][ T7637] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.881833][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 87.946368][ T6213] usb 9-1: Using ep0 maxpacket: 32 [ 87.947420][ T6213] usb 9-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 87.948880][ T6213] usb 9-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 87.948923][ T6213] usb 9-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 87.949008][ T6213] usb 9-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 87.949028][ T6213] usb 9-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 87.951249][ T6213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.951269][ T6213] usb 9-1: Product: syz [ 87.951280][ T6213] usb 9-1: Manufacturer: syz [ 87.951292][ T6213] usb 9-1: SerialNumber: syz [ 87.972437][ C2] imon 9-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 88.007383][ T6213] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/input/input7 [ 88.036424][ T7620] jffs2: notice: (7620) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 88.197818][ T6213] imon 9-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 88.197881][ T6213] (id 0x00) [ 88.269355][ T6213] rc_core: IR keymap rc-imon-pad not found [ 88.269421][ T6213] Registered IR keymap rc-empty [ 88.269549][ T6213] imon 9-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 88.269565][ T6213] imon 9-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 88.391437][ T1582] option 6-1:3.168: GSM modem (1-port) converter detected [ 88.405297][ T1582] usb 6-1: USB disconnect, device number 8 [ 88.418335][ T6213] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0 [ 88.429926][ T6213] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:155.0/rc/rc0/input8 [ 88.431857][ T1582] option 6-1:3.168: device disconnected [ 88.446066][ T6213] imon 9-1:155.0: iMON device (15c2:ffdc, intf0) on usb<9:2> initialized [ 88.576443][ T35] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 88.737342][ T35] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 88.740366][ T35] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 88.740415][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 88.740431][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 88.740444][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 88.741243][ T35] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 88.741257][ T35] usb 5-1: Manufacturer: syz [ 88.747733][ T35] usb 5-1: config 0 descriptor?? [ 88.962946][ T35] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 89.004713][ T35] appleir 0003:05AC:8243.0002: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 89.088209][ T43] kauditd_printk_skb: 19244 callbacks suppressed [ 89.088658][ T43] audit: type=1400 audit(1788158323.007:24983): avc: denied { append } for pid=7653 comm="syz.1.467" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 89.215714][ T43] audit: type=1400 audit(1788158323.127:24984): avc: denied { getopt } for pid=7656 comm="syz.1.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 89.239527][ T7657] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 44 [ 89.483239][ T7669] hsr_slave_0: left promiscuous mode [ 89.496044][ T7668] can: request_module (can-proto-4) failed. [ 89.501072][ T7669] hsr_slave_1: left promiscuous mode [ 89.735770][ T7668] can: request_module (can-proto-4) failed. [ 89.803294][ T7668] can: request_module (can-proto-4) failed. [ 89.915102][ T7668] can: request_module (can-proto-4) failed. [ 89.985509][ T7668] can: request_module (can-proto-4) failed. [ 90.052344][ T7668] can: request_module (can-proto-4) failed. [ 90.117900][ T7668] can: request_module (can-proto-4) failed. [ 90.160796][ T10] usb 5-1: USB disconnect, device number 11 [ 90.204176][ T7668] can: request_module (can-proto-4) failed. [ 90.216507][ T7668] can: request_module (can-proto-4) failed. [ 90.380447][ T43] audit: type=1400 audit(1788158324.297:24985): avc: denied { mounton } for pid=7707 comm="syz.3.475" path="/130/config" dev="configfs" ino=1065 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 90.431592][ C3] blk_print_req_error: 82 callbacks suppressed [ 90.431681][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.431738][ C3] buffer_io_error: 80 callbacks suppressed [ 90.431748][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.434952][ C3] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435018][ C3] Buffer I/O error on dev loop6, logical block 1, async page read [ 90.435041][ C3] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435092][ C3] Buffer I/O error on dev loop6, logical block 2, async page read [ 90.435114][ C3] I/O error, dev loop6, sector 3 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435167][ C3] Buffer I/O error on dev loop6, logical block 3, async page read [ 90.435185][ C3] I/O error, dev loop6, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435234][ C3] Buffer I/O error on dev loop6, logical block 4, async page read [ 90.435253][ C3] I/O error, dev loop6, sector 5 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435302][ C3] Buffer I/O error on dev loop6, logical block 5, async page read [ 90.435320][ C3] I/O error, dev loop6, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435374][ C3] Buffer I/O error on dev loop6, logical block 6, async page read [ 90.435698][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435755][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 90.435774][ C3] I/O error, dev loop6, sector 1 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435824][ C3] Buffer I/O error on dev loop6, logical block 1, async page read [ 90.435840][ C3] I/O error, dev loop6, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 90.435894][ C3] Buffer I/O error on dev loop6, logical block 2, async page read [ 90.441907][ T5141] ldm_validate_partition_table(): Disk read failed. [ 90.449980][ T5141] Dev loop6: unable to read RDB block 0 [ 90.453360][ T5141] loop6: unable to read partition table [ 90.453590][ T5141] loop6: partition table beyond EOD, truncated [ 90.611797][ T43] audit: type=1400 audit(1788158324.527:24986): avc: denied { read write } for pid=7716 comm="syz.3.477" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.612304][ T43] audit: type=1400 audit(1788158324.527:24987): avc: denied { open } for pid=7716 comm="syz.3.477" path="/131/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.614757][ T43] audit: type=1400 audit(1788158324.527:24988): avc: denied { ioctl } for pid=7716 comm="syz.3.477" path="/131/file0/file0" dev="fuse" ino=0 ioctlcmd=0x620b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 90.614861][ T7717] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 90.708990][ T7721] new mount options do not match the existing superblock, will be ignored [ 90.820168][ T7725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.480'. [ 90.825196][ T43] audit: type=1400 audit(1788158324.737:24989): avc: denied { setopt } for pid=7724 comm="syz.1.480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.853199][ T7725] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 90.865044][ T7725] CIFS: Attempting to mount //127.0.0.1/test [ 90.869058][ T7725] CIFS: VFS: Error connecting to socket. Aborting operation. [ 90.869139][ T7725] CIFS: VFS: cifs_mount failed w/return code = -101 [ 90.877309][ T43] audit: type=1400 audit(1788158324.797:24990): avc: denied { mounton } for pid=7726 comm="syz.3.481" path="/133/file0" dev="tmpfs" ino=749 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 90.905724][ T35] usb 9-1: USB disconnect, device number 2 [ 91.245003][ T43] audit: type=1400 audit(1788158325.157:24991): avc: denied { map } for pid=7750 comm="syz.3.487" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.601095][ T7768] FAULT_INJECTION: forcing a failure. [ 91.601095][ T7768] name failslab, interval 1, probability 0, space 0, times 1 [ 91.601151][ T7768] CPU: 3 UID: 0 PID: 7768 Comm: syz.1.495 Tainted: G L syzkaller #0 PREEMPT(full) [ 91.601185][ T7768] Tainted: [L]=SOFTLOCKUP [ 91.601191][ T7768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 91.601199][ T7768] Call Trace: [ 91.601204][ T7768] [ 91.601210][ T7768] dump_stack_lvl+0x100/0x190 [ 91.601234][ T7768] should_fail_ex.cold+0x5/0xa [ 91.601253][ T7768] should_failslab+0xc2/0x120 [ 91.601279][ T7768] __kmalloc_noprof+0xfc/0x840 [ 91.601293][ T7768] ? tomoyo_encode2+0xfb/0x3c0 [ 91.601310][ T7768] tomoyo_encode2+0xfb/0x3c0 [ 91.601326][ T7768] tomoyo_encode+0x29/0x50 [ 91.601338][ T7768] tomoyo_realpath_from_path+0x18c/0x690 [ 91.601373][ T7768] tomoyo_path_number_perm+0x23c/0x580 [ 91.601395][ T7768] ? tomoyo_path_number_perm+0x22e/0x580 [ 91.601415][ T7768] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 91.601441][ T7768] ? __lock_acquire+0x4c5/0x1ec0 [ 91.601463][ T7768] ? __fget_files+0x34/0x3d0 [ 91.601479][ T7768] ? find_held_lock+0x2b/0x80 [ 91.601496][ T7768] ? hook_file_ioctl_common+0x140/0x440 [ 91.601515][ T7768] ? __fget_files+0x21f/0x3d0 [ 91.601537][ T7768] security_file_ioctl+0xd3/0x230 [ 91.601559][ T7768] __x64_sys_ioctl+0xb7/0x210 [ 91.601580][ T7768] do_syscall_64+0x123/0x790 [ 91.601598][ T7768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.601612][ T7768] RIP: 0033:0x7fb5c659e159 [ 91.601623][ T7768] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.601636][ T7768] RSP: 002b:00007fb5c73e5028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.601649][ T7768] RAX: ffffffffffffffda RBX: 00007fb5c6826090 RCX: 00007fb5c659e159 [ 91.601658][ T7768] RDX: 0000000000000000 RSI: 00000000c018620b RDI: 0000000000000004 [ 91.601666][ T7768] RBP: 00007fb5c73e5090 R08: 0000000000000000 R09: 0000000000000000 [ 91.601673][ T7768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 91.601681][ T7768] R13: 00007fb5c6826128 R14: 00007fb5c6826090 R15: 00007ffd439584c8 [ 91.601698][ T7768] [ 91.601784][ T7768] ERROR: Out of memory at tomoyo_realpath_from_path. [ 91.601810][ T7768] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 91.773279][ T43] audit: type=1400 audit(1788158325.687:24992): avc: denied { create } for pid=7771 comm="syz.3.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 91.885616][ T7777] netlink: 24 bytes leftover after parsing attributes in process `syz.1.498'. [ 92.416262][ T7799] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 92.420586][ T7799] FAULT_INJECTION: forcing a failure. [ 92.420586][ T7799] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 92.425968][ T7799] CPU: 3 UID: 0 PID: 7799 Comm: syz.1.504 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.426015][ T7799] Tainted: [L]=SOFTLOCKUP [ 92.426023][ T7799] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.426036][ T7799] Call Trace: [ 92.426044][ T7799] [ 92.426051][ T7799] dump_stack_lvl+0x100/0x190 [ 92.426081][ T7799] should_fail_ex.cold+0x5/0xa [ 92.426098][ T7799] _copy_to_user+0x32/0xd0 [ 92.426116][ T7799] simple_read_from_buffer+0xcb/0x170 [ 92.426131][ T7799] proc_fail_nth_read+0x1af/0x230 [ 92.426145][ T7799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.426158][ T7799] ? rw_verify_area+0xce/0x6d0 [ 92.426174][ T7799] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 92.426186][ T7799] vfs_read+0x1e4/0xb40 [ 92.426203][ T7799] ? lock_acquire+0x1d1/0x380 [ 92.426214][ T7799] ? __fget_files+0x34/0x3d0 [ 92.426226][ T7799] ? __pfx_vfs_read+0x10/0x10 [ 92.426241][ T7799] ? find_held_lock+0x2b/0x80 [ 92.426270][ T7799] ? __fget_files+0x215/0x3d0 [ 92.426285][ T7799] ? __fget_files+0x21f/0x3d0 [ 92.426303][ T7799] ksys_read+0x12a/0x250 [ 92.426321][ T7799] ? __pfx_ksys_read+0x10/0x10 [ 92.426342][ T7799] do_syscall_64+0x123/0x790 [ 92.426357][ T7799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.426368][ T7799] RIP: 0033:0x7fb5c655e98e [ 92.426378][ T7799] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 92.426389][ T7799] RSP: 002b:00007fb5c7405fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 92.426400][ T7799] RAX: ffffffffffffffda RBX: 00007fb5c74066c0 RCX: 00007fb5c655e98e [ 92.426407][ T7799] RDX: 000000000000000f RSI: 00007fb5c74060a0 RDI: 0000000000000005 [ 92.426413][ T7799] RBP: 00007fb5c7406090 R08: 0000000000000000 R09: 0000000000000000 [ 92.426420][ T7799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.426426][ T7799] R13: 00007fb5c6826038 R14: 00007fb5c6825fa0 R15: 00007ffd439584c8 [ 92.426440][ T7799] [ 93.006435][ T64] Bluetooth: hci4: command 0x1003 tx timeout [ 93.006527][ T5088] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 93.246060][ T7822] netlink: 12 bytes leftover after parsing attributes in process `syz.4.508'. [ 93.281304][ T7822] netlink: 'syz.4.508': attribute type 10 has an invalid length. [ 93.285640][ T7822] netlink: 40 bytes leftover after parsing attributes in process `syz.4.508'. [ 93.290492][ T7822] dummy0: entered promiscuous mode [ 93.295586][ T7822] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 93.303046][ T7822] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 93.308630][ T7822] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 93.311625][ T7822] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 93.353827][ T7821] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 93.504054][ T7825] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 93.536323][ T7827] CUSE: info not properly terminated [ 93.725773][ T7843] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 93.729273][ T7843] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 93.738797][ T7843] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 93.747318][ T7843] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 93.814194][ T7847] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 93.848594][ T7847] VFS: Can't find a romfs filesystem on dev nullb0. [ 93.848594][ T7847] [ 93.853640][ T7847] netlink: 8 bytes leftover after parsing attributes in process `syz.1.514'. [ 93.854170][ T7847] netlink: 'syz.1.514': attribute type 30 has an invalid length. [ 93.876533][ T5813] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.886660][ T5813] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.886837][ T5813] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.886926][ T5813] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.982584][ T7852] CacheFiles: No cache directory specified [ 94.056044][ T7855] jffs2: notice: (7855) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 94.213832][ T43] kauditd_printk_skb: 2 callbacks suppressed [ 94.213935][ T43] audit: type=1400 audit(1788158328.127:24995): avc: denied { setopt } for pid=7862 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 94.246314][ T43] audit: type=1400 audit(1788158328.157:24996): avc: denied { write } for pid=7862 comm="syz.4.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 94.258055][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.519'. [ 94.622591][ T7872] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 94.622632][ T7872] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 94.622671][ T7872] overlayfs: fs on '.' does not support file handles, falling back to xino=off. [ 94.861241][ T7876] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 94.861369][ T7876] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 94.864760][ T7876] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 94.867800][ T7876] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 95.008039][ T43] audit: type=1400 audit(1788158328.927:24997): avc: denied { write } for pid=7882 comm="syz.4.527" name="functions" dev="configfs" ino=17279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 95.012039][ T43] audit: type=1800 audit(1788158328.927:24998): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.527" name="c_srate" dev="configfs" ino=35859 res=0 errno=0 [ 95.023384][ T7883] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 95.063947][ T7883] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 95.064090][ T7883] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 95.075977][ T7883] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 95.081935][ T7883] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 95.284075][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.530'. [ 95.293631][ T7891] mac80211_hwsim hwsim1 wlan1: entered promiscuous mode [ 95.295998][ T7891] macvlan0: entered allmulticast mode [ 95.296017][ T7891] mac80211_hwsim hwsim1 wlan1: entered allmulticast mode [ 95.328353][ T43] audit: type=1400 audit(1788158329.247:24999): avc: denied { write } for pid=7899 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.335063][ T7901] FAULT_INJECTION: forcing a failure. [ 95.335063][ T7901] name failslab, interval 1, probability 0, space 0, times 0 [ 95.335103][ T7901] CPU: 2 UID: 0 PID: 7901 Comm: syz.0.532 Tainted: G L syzkaller #0 PREEMPT(full) [ 95.335133][ T7901] Tainted: [L]=SOFTLOCKUP [ 95.335141][ T7901] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 95.335153][ T7901] Call Trace: [ 95.335160][ T7901] [ 95.335168][ T7901] dump_stack_lvl+0x100/0x190 [ 95.335201][ T7901] should_fail_ex.cold+0x5/0xa [ 95.335230][ T7901] should_failslab+0xc2/0x120 [ 95.335259][ T7901] __kvmalloc_node_noprof+0x113/0x9b0 [ 95.335279][ T7901] ? __pfx_lockdep_hardirqs_on+0x1/0x10 [ 95.335302][ T7901] ? bpf_compute_postorder+0x158/0x860 [ 95.335335][ T7901] bpf_compute_postorder+0x158/0x860 [ 95.335362][ T7901] ? bpf_check_cfg+0x4a3/0x990 [ 95.335395][ T7901] bpf_check+0x7a42/0xa7c0 [ 95.335418][ T7901] ? __css_rstat_updated+0x1ce/0x590 [ 95.335449][ T7901] ? __lock_acquire+0x4c5/0x1ec0 [ 95.335490][ T7901] ? __pfx_bpf_check+0x10/0x10 [ 95.335515][ T7901] ? lock_acquire+0x1d1/0x380 [ 95.335533][ T7901] ? bpf_prog_load+0x1a09/0x2a80 [ 95.335555][ T7901] ? find_held_lock+0x2b/0x80 [ 95.335577][ T7901] ? bpf_prog_load+0x1a09/0x2a80 [ 95.335601][ T7901] ? __asan_memset+0x23/0x50 [ 95.335631][ T7901] ? bpf_prog_load+0x1ac3/0x2a80 [ 95.335652][ T7901] bpf_prog_load+0x1ac3/0x2a80 [ 95.335679][ T7901] ? __pfx_bpf_prog_load+0x10/0x10 [ 95.335722][ T7901] __sys_bpf+0x1f46/0x4a30 [ 95.335755][ T7901] ? __pfx___sys_bpf+0x10/0x10 [ 95.335779][ T7901] ? __pfx_futex_hash+0x10/0x10 [ 95.335801][ T7901] ? get_pid_task+0xfc/0x250 [ 95.335824][ T7901] ? get_pid_task+0xfc/0x250 [ 95.335854][ T7901] ? find_held_lock+0x2b/0x80 [ 95.335919][ T7901] ? rcu_read_lock_any_held+0x6a/0x90 [ 95.335945][ T7901] ? find_held_lock+0x2b/0x80 [ 95.335968][ T7901] ? ksys_write+0x190/0x250 [ 95.335985][ T7901] ? ksys_write+0x190/0x250 [ 95.336019][ T7901] ? __x64_sys_futex+0x34f/0x4d0 [ 95.336044][ T7901] ? __x64_sys_futex+0x358/0x4d0 [ 95.336071][ T7901] ? xfd_validate_state+0x129/0x190 [ 95.336095][ T7901] ? __x64_sys_bpf+0xce/0x140 [ 95.336113][ T7901] __x64_sys_bpf+0xce/0x140 [ 95.336133][ T7901] ? do_syscall_64+0xae/0x790 [ 95.336158][ T7901] do_syscall_64+0x123/0x790 [ 95.336181][ T7901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.336202][ T7901] RIP: 0033:0x7fc4bc19e159 [ 95.336227][ T7901] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.336246][ T7901] RSP: 002b:00007fc4bd133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 95.336308][ T7901] RAX: ffffffffffffffda RBX: 00007fc4bc425fa0 RCX: 00007fc4bc19e159 [ 95.336322][ T7901] RDX: 0000000000000048 RSI: 00002000000054c0 RDI: 0000000000000005 [ 95.336336][ T7901] RBP: 00007fc4bc235024 R08: 0000000000000000 R09: 0000000000000000 [ 95.336348][ T7901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.336359][ T7901] R13: 00007fc4bc426038 R14: 00007fc4bc425fa0 R15: 00007ffcfecaecb8 [ 95.336384][ T7901] [ 95.395786][ T43] audit: type=1400 audit(1788158329.307:25000): avc: denied { write } for pid=7904 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.414616][ T43] audit: type=1400 audit(1788158329.327:25001): avc: denied { mount } for pid=7906 comm="syz.3.534" name="/" dev="pstore" ino=4811 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 95.423378][ T7908] ip_tables: iptables: counters copy to user failed while replacing table [ 95.449521][ T7911] netlink: 'syz.0.535': attribute type 21 has an invalid length. [ 95.482188][ T43] audit: type=1400 audit(1788158329.397:25002): avc: denied { bpf } for pid=7905 comm="syz.1.533" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.482342][ T43] audit: type=1400 audit(1788158329.397:25003): avc: denied { perfmon } for pid=7905 comm="syz.1.533" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 95.492213][ T43] audit: type=1400 audit(1788158329.407:25004): avc: denied { module_request } for pid=7905 comm="syz.1.533" kmod="netdev-netdevsim0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 95.551072][ T7922] loop5: detected capacity change from 0 to 7 [ 95.555754][ T6360] buffer_io_error: 130 callbacks suppressed [ 95.555834][ T6360] Buffer I/O error on dev loop5, logical block 0, async page read [ 95.556128][ T6360] Buffer I/O error on dev loop5, logical block 0, async page read [ 95.557661][ T6360] Buffer I/O error on dev loop5, logical block 0, async page read [ 95.557948][ T6360] Buffer I/O error on dev loop5, logical block 0, async page read [ 95.558211][ T6360] Buffer I/O error on dev loop5, logical block 0, async page read [ 95.560200][ T7918] No source specified [ 95.596107][ T7927] tmpfs: Bad value for 'mpol' [ 95.606459][ T7931] tmpfs: Unknown parameter '' [ 95.625709][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.3.538'. [ 95.666618][ T7924] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 95.666670][ T7924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 95.708174][ T7917] netlink: Unknown conntrack attr (type=3333, max=9) [ 95.708323][ T7917] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.812182][ T7942] bond3: (slave veth0_to_batadv): Device is not bonding slave [ 95.815010][ T7942] bond3: option active_slave: invalid value (veth0_to_batadv) [ 95.935873][ T7942] bond3 (unregistering): Released all slaves [ 96.147685][ T7962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.545'. [ 96.191235][ T7964] team1: entered promiscuous mode [ 96.191321][ T7964] team1: entered allmulticast mode [ 96.191800][ T7964] 8021q: adding VLAN 0 to HW filter on device team1 [ 96.388828][ T7983] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 96.508361][ T7991] ip6t_rt: too many addresses specified [ 96.516716][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.526735][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.536699][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 96.893987][ T8001] __nla_validate_parse: 2 callbacks suppressed [ 96.894088][ T8001] netlink: 96 bytes leftover after parsing attributes in process `syz.4.552'. [ 97.136692][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.237049][ T8012] ipvlan2: entered allmulticast mode [ 97.237245][ T8012] batadv_slave_1: entered allmulticast mode [ 97.242631][ T8012] batman_adv: batadv0: Adding interface: ipvlan2 [ 97.246754][ T8012] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 97.256212][ T8012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.260046][ T8012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.264230][ T8012] batman_adv: batadv0: Interface activated: ipvlan2 [ 97.276681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.452284][ T8023] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 97.452422][ T8023] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 97.458114][ T8023] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 97.474405][ T8023] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 97.477391][ T8028] netlink: 'syz.1.560': attribute type 11 has an invalid length. [ 97.477407][ T8028] netlink: 'syz.1.560': attribute type 4 has an invalid length. [ 97.477414][ T8028] netlink: 224 bytes leftover after parsing attributes in process `syz.1.560'. [ 97.481822][ T8026] ufs: You didn't specify the type of your ufs filesystem [ 97.481822][ T8026] [ 97.481822][ T8026] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 97.481822][ T8026] [ 97.481822][ T8026] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 97.481845][ T8026] ufs: ufstype=old is supported read-only [ 97.485802][ T8026] ufs: ufs_fill_super(): bad magic number [ 97.506938][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.516970][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.526808][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 97.805750][ T8047] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 97.806793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.451568][ T8083] NILFS (loop4): device size too small [ 98.640889][ T8092] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8092 comm=syz.1.575 [ 98.736920][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 98.782223][ T8095] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 98.915647][ T8102] base or size exceeds the MTRR width [ 98.922821][ T8102] netlink: 40 bytes leftover after parsing attributes in process `syz.1.579'. [ 98.940354][ T8100] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 99.223911][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 99.224013][ T43] audit: type=1400 audit(1788158333.137:25024): avc: denied { create } for pid=8103 comm="syz.1.580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.224525][ T43] audit: type=1400 audit(1788158333.137:25025): avc: denied { ioctl } for pid=8103 comm="syz.1.580" path="socket:[36353]" dev="sockfs" ino=36353 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 99.269759][ T43] audit: type=1400 audit(1788158333.187:25026): avc: denied { mounton } for pid=8110 comm="syz.4.582" path="/proc/342/task" dev="proc" ino=32275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 99.476614][ T43] audit: type=1326 audit(1788158333.397:25027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 99.476690][ T43] audit: type=1326 audit(1788158333.397:25028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 99.478420][ T8123] netlink: 'syz.4.584': attribute type 10 has an invalid length. [ 99.484917][ T8123] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 99.516373][ T43] audit: type=1326 audit(1788158333.427:25029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.585" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 99.516445][ T43] audit: type=1326 audit(1788158333.427:25030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 99.516502][ T43] audit: type=1326 audit(1788158333.427:25031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 99.520894][ T43] audit: type=1326 audit(1788158333.437:25032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.585" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 99.522800][ T43] audit: type=1326 audit(1788158333.437:25033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8127 comm="syz.3.585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 99.605890][ T8136] UBIFS error (pid: 8136): cannot open "ubi0_0", error -19 [ 99.753632][ T8141] vhci_hcd vhci_hcd.0: failed to lookup sock [ 99.818936][ T8140] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1005 sclass=netlink_route_socket pid=8140 comm=syz.1.590 [ 99.845239][ T8140] mmap: syz.1.590 (8140) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 99.914493][ T8153] ima: policy update failed [ 99.967020][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 99.986998][ T8158] netlink: 'syz.1.594': attribute type 2 has an invalid length. [ 99.987057][ T8158] netlink: 'syz.1.594': attribute type 2 has an invalid length. [ 100.735761][ T8179] netlink: 32 bytes leftover after parsing attributes in process `syz.3.599'. [ 100.791294][ T8181] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 100.791356][ T8181] overlayfs: failed to set xattr on upper [ 100.791383][ T8181] overlayfs: ...falling back to redirect_dir=nofollow. [ 100.791400][ T8181] overlayfs: ...falling back to index=off. [ 100.791406][ T8181] overlayfs: ...falling back to uuid=null. [ 101.316683][ T6213] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 101.456393][ T1042] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 101.467241][ T6213] usb 9-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 101.469678][ T6213] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 101.469700][ T6213] usb 9-1: Product: syz [ 101.469711][ T6213] usb 9-1: Manufacturer: syz [ 101.485754][ T6213] input: syz syz as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input10 [ 101.606346][ T1042] usb 6-1: Using ep0 maxpacket: 8 [ 101.607496][ T1042] usb 6-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 101.608310][ T1042] usb 6-1: config index 0 descriptor too short (expected 5924, got 36) [ 101.608324][ T1042] usb 6-1: config 250 has an invalid interface number: 228 but max is -1 [ 101.608333][ T1042] usb 6-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 101.608343][ T1042] usb 6-1: config 250 has no interface number 0 [ 101.608364][ T1042] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 101.608377][ T1042] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 101.608388][ T1042] usb 6-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 101.608399][ T1042] usb 6-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 101.608411][ T1042] usb 6-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 101.608424][ T1042] usb 6-1: config 250 interface 228 has no altsetting 0 [ 101.609603][ T1042] usb 6-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 101.609615][ T1042] usb 6-1: Product: syz [ 101.609622][ T1042] usb 6-1: SerialNumber: syz [ 101.614404][ T1042] hub 6-1:250.228: bad descriptor, ignoring hub [ 101.614421][ T1042] hub 6-1:250.228: probe with driver hub failed with error -5 [ 101.646888][ T7631] usb 5-1: new low-speed USB device number 12 using dummy_hcd [ 101.730636][ T8191] xt_TCPMSS: Only works on TCP SYN packets [ 101.755460][ T6213] usb 9-1: USB disconnect, device number 3 [ 101.797081][ T7631] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.798085][ T7631] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 101.798128][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.798152][ T7631] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.798172][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.798192][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.799283][ T7631] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 101.799309][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.799323][ T7631] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.799337][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.799350][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.802462][ T7631] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 101.802486][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 101.802504][ T7631] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 101.802519][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 101.802532][ T7631] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 101.814151][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.814463][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.815188][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.815506][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.825475][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.825803][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.826606][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.826878][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.833231][ T8198] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 101.833536][ T8198] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 101.870246][ T1042] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 9 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 101.876718][ T8199] overlayfs: missing 'workdir' [ 101.906569][ T7631] usb 5-1: string descriptor 0 read error: -22 [ 101.906702][ T7631] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.946886][ T7631] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 102.021122][ T8213] netlink: 28 bytes leftover after parsing attributes in process `syz.3.611'. [ 102.182846][ T1042] usb 5-1: USB disconnect, device number 12 [ 102.191333][ T7631] usb 6-1: USB disconnect, device number 9 [ 102.216997][ T7631] usblp0: removed [ 102.509500][ T8234] kernel profiling enabled (shift: 5) [ 102.538301][ T8234] netlink: 64 bytes leftover after parsing attributes in process `syz.4.615'. [ 102.677096][ T8238] bridge2: entered promiscuous mode [ 102.677232][ T8238] bridge2: entered allmulticast mode [ 102.910678][ T8254] binder: 8253:8254 ioctl c0306201 2000000003c0 returned -14 [ 102.947273][ T8255] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 102.952742][ T8255] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 102.955312][ T8255] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 102.967180][ T8255] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 102.968766][ T8255] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 103.010523][ T5088] Bluetooth: Unexpected continuation frame (len 16) [ 103.024048][ T8265] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 103.024313][ T8265] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 103.182264][ T8272] syzkaller0: entered promiscuous mode [ 103.182548][ T8272] syzkaller0: entered allmulticast mode [ 103.266355][ T5844] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 103.396404][ T5844] usb 6-1: device descriptor read/64, error -71 [ 103.633054][ T8284] netlink: Conntrack attr has 4 unknown bytes [ 103.633126][ T8284] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 103.659371][ T5844] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 103.786326][ T5844] usb 6-1: device descriptor read/64, error -71 [ 103.868761][ T8302] netlink: 180 bytes leftover after parsing attributes in process `syz.4.637'. [ 103.872631][ T8302] netlink: 180 bytes leftover after parsing attributes in process `syz.4.637'. [ 103.899831][ T5844] usb usb6-port1: attempt power cycle [ 103.939267][ T5088] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 103.939360][ T5088] CPU: 2 UID: 0 PID: 5088 Comm: kworker/u34:1 Tainted: G L syzkaller #0 PREEMPT(full) [ 103.939392][ T5088] Tainted: [L]=SOFTLOCKUP [ 103.939399][ T5088] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 103.939409][ T5088] Workqueue: hci1 hci_rx_work [ 103.939435][ T5088] Call Trace: [ 103.939440][ T5088] [ 103.939445][ T5088] dump_stack_lvl+0x100/0x190 [ 103.939466][ T5088] sysfs_warn_dup.cold+0x1c/0x28 [ 103.939485][ T5088] sysfs_create_dir_ns+0x24b/0x2b0 [ 103.939504][ T5088] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 103.939522][ T5088] ? find_held_lock+0x2b/0x80 [ 103.939540][ T5088] ? kobject_add_internal+0x25f/0x930 [ 103.939559][ T5088] ? kobject_add_internal+0x25f/0x930 [ 103.939579][ T5088] ? do_raw_spin_unlock+0x145/0x1e0 [ 103.939598][ T5088] kobject_add_internal+0x2c8/0x930 [ 103.939619][ T5088] kobject_add+0x16a/0x1e0 [ 103.939635][ T5088] ? __pfx_kobject_add+0x10/0x10 [ 103.939650][ T5088] ? class_to_subsys+0x10f/0x150 [ 103.939667][ T5088] ? kobject_put+0xb9/0x640 [ 103.939680][ T5088] ? _raw_spin_unlock+0x28/0x50 [ 103.939701][ T5088] device_add+0x294/0x1970 [ 103.939714][ T5088] ? __pfx_dev_set_name+0x10/0x10 [ 103.939729][ T5088] ? __pfx_device_add+0x10/0x10 [ 103.939766][ T5088] ? mgmt_send_event_skb+0x2fb/0x460 [ 103.939786][ T5088] hci_conn_add_sysfs+0x1a3/0x260 [ 103.939804][ T5088] le_conn_complete_evt+0x122f/0x2130 [ 103.939829][ T5088] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 103.939848][ T5088] ? hci_event_packet+0x186/0xcd0 [ 103.939867][ T5088] ? hci_event_packet+0x186/0xcd0 [ 103.939891][ T5088] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 103.939914][ T5088] ? skb_pull_data+0x15f/0x1e0 [ 103.939930][ T5088] hci_le_meta_evt+0x34a/0x5f0 [ 103.939942][ T5088] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 103.939962][ T5088] hci_event_packet+0x51c/0xcd0 [ 103.939980][ T5088] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 103.939992][ T5088] ? __pfx_hci_event_packet+0x10/0x10 [ 103.940016][ T5088] ? lockdep_hardirqs_on+0x7d/0x110 [ 103.940032][ T5088] hci_rx_work+0x451/0xfc0 [ 103.940055][ T5088] process_one_work+0xac7/0x1b10 [ 103.940083][ T5088] ? __pfx_process_one_work+0x10/0x10 [ 103.940105][ T5088] ? lock_acquire+0x1d1/0x380 [ 103.940122][ T5088] ? __pfx_hci_rx_work+0x10/0x10 [ 103.940143][ T5088] worker_thread+0x5ef/0xe50 [ 103.940165][ T5088] ? kthread+0x13a/0x450 [ 103.940180][ T5088] ? __pfx_worker_thread+0x10/0x10 [ 103.940195][ T5088] kthread+0x373/0x450 [ 103.940209][ T5088] ? __pfx_kthread+0x10/0x10 [ 103.940253][ T5088] ret_from_fork+0x730/0xd60 [ 103.940270][ T5088] ? __pfx_ret_from_fork+0x10/0x10 [ 103.940285][ T5088] ? __switch_to+0x800/0x10f0 [ 103.940303][ T5088] ? __pfx_kthread+0x10/0x10 [ 103.940321][ T5088] ret_from_fork_asm+0x1a/0x30 [ 103.940342][ T5088] [ 103.940384][ T5088] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 103.940421][ T5088] Bluetooth: hci1: failed to register connection device [ 104.018934][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 104.018949][ T8309] netlink: 14 bytes leftover after parsing attributes in process `syz.3.636'. [ 104.127032][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802a22f000: rx timeout, send abort [ 104.236353][ T5844] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 104.258224][ T5844] usb 6-1: device descriptor read/8, error -71 [ 104.300384][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b68800: rx timeout, send abort [ 104.328587][ T8332] binder: BC_ACQUIRE_RESULT not supported [ 104.328654][ T8332] binder: 8331:8332 ioctl c0306201 2000000003c0 returned -22 [ 104.332931][ T8332] binder: 8331:8332 ioctl 82307201 200000000480 returned -22 [ 104.333147][ T8332] netlink: 28 bytes leftover after parsing attributes in process `syz.4.645'. [ 104.335607][ T8332] x_tables: duplicate underflow at hook 1 [ 104.421360][ T43] kauditd_printk_skb: 75 callbacks suppressed [ 104.421431][ T43] audit: type=1400 audit(1788158338.337:25109): avc: denied { connect } for pid=8333 comm="syz.4.646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.476572][ T8335] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 104.506413][ T5844] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 104.527233][ T5844] usb 6-1: device descriptor read/8, error -71 [ 104.628286][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802a22ec00: rx timeout, send abort [ 104.629171][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802a22f000: abort rx timeout. Force session deactivation [ 104.637136][ T5844] usb usb6-port1: unable to enumerate USB device [ 104.800517][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b6a800: rx timeout, send abort [ 104.800650][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b68800: abort rx timeout. Force session deactivation [ 105.109482][ T8353] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 105.111974][ T8353] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 105.118590][ T8353] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 105.123580][ T8353] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 105.128543][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88802a22ec00: abort rx timeout. Force session deactivation [ 105.210403][ T43] audit: type=1400 audit(1788158339.127:25110): avc: denied { getopt } for pid=8356 comm="syz.3.653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 105.300672][ C0] vcan0: j1939_tp_rxtimer: 0xffff888058b6a800: abort rx timeout. Force session deactivation [ 105.349833][ T8368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.656'. [ 105.580560][ T8380] sg_write: data in/out 196864/172 bytes for SCSI command 0x0-- guessing data in; [ 105.580560][ T8380] program syz.4.660 not setting count and/or reply_len properly [ 105.607290][ T8380] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 105.607384][ T8380] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 105.610468][ T8380] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 105.612824][ T8380] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 105.652048][ T8383] netlink: 2552 bytes leftover after parsing attributes in process `syz.4.661'. [ 105.660145][ T8383] loop0: detected capacity change from 0 to 4096 [ 105.690989][ T43] audit: type=1400 audit(1788158339.607:25111): avc: denied { map } for pid=8361 comm="syz.0.654" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.691689][ T43] audit: type=1400 audit(1788158339.607:25112): avc: denied { execute } for pid=8361 comm="syz.0.654" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.694801][ T8383] set match dimension is over the limit! [ 106.258558][ T43] audit: type=1400 audit(1788158340.177:25113): avc: denied { mount } for pid=8412 comm="syz.3.667" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 106.489971][ T8426] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 106.710545][ T43] audit: type=1400 audit(1788158340.627:25114): avc: denied { setopt } for pid=8431 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.710786][ T43] audit: type=1400 audit(1788158340.627:25115): avc: denied { read } for pid=8431 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 106.850483][ T43] audit: type=1400 audit(1788158340.767:25116): avc: denied { write } for pid=8458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.946426][ T43] audit: type=1400 audit(1788158340.857:25117): avc: denied { write } for pid=8465 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.405660][ T43] audit: type=1400 audit(1788158341.317:25118): avc: denied { bind } for pid=8480 comm="syz.0.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 107.478672][ T8485] fuse: Bad value for 'fd' [ 107.518455][ T8487] affs: No valid root block on device sr0 [ 107.566537][ T35] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 107.717840][ T35] usb 6-1: not running at top speed; connect to a high speed hub [ 107.717925][ T35] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 107.719020][ T35] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 41, changing to 4 [ 107.721066][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.721085][ T35] usb 6-1: Product: 쌥扉贐ۅ砝렇䵻ᜓ粑쥅㷕䃒澩ﰊ遨뇽⛄霄㊆㙽痜薣箓椥톱ᖕꬠ뒳ꋟ嬚ⲑ裙븰㑂찟ⴿ聼汫〻糀䀼顚꫐廏皬蟕嫻㞥☹崄❃♈꣆揵⏒缹晾쨗鵄遑ᙁ׽蛣╅陮䖒⍻岾畜ⷜ췍癋✱鍢㇑軜켖ᮀ腢ﯣﵯ䳀鍤¡똛擓욬⨼鷝ຑᄷ㞲䆡攪졸ާ᪭輸 [ 107.721114][ T35] usb 6-1: Manufacturer: М [ 107.721126][ T35] usb 6-1: SerialNumber: 課賺亲㴵憊切ꕵ歯᤺䄙ij㊒䴰ꏨ啬ꊅ靀窅亦鳳軌뎅괗뽀돷撋쁡ሞ扊꽿뀩嚢ƍ鸧鶝䰧⑜斨팫Ž띙튙俶务₢漇睞ŵᰢ욓≠頊袿瞛㼭넣⍞ꁀ砖詠俨讕墳廣쐑䗌삻Ṕ諘鼷丷퍰缈ᰶﭝ櫙⮹庖铚罈吧嘏濽綨᡽শᷢﰳ볖舙毘䘇袆日ꢘ䚒뚎ᑘꛕ캏✝콱啼䑵꬏쒗W䊄Ꞵ貼ᘪ [ 107.928061][ T35] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 108.129625][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.129961][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.332569][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.332961][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.335363][ T8476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.336037][ T8476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.515390][ T8498] netlink: 'syz.0.685': attribute type 1 has an invalid length. [ 108.539474][ T35] usb 6-1: 2:1 : no UAC_FORMAT_TYPE desc [ 108.546539][ T8498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 108.551207][ T8498] bond1: (slave bond2): making interface the new active one [ 108.554150][ T8498] bond1: (slave bond2): Enslaving as an active interface with an up link [ 108.583446][ T35] usb 6-1: USB disconnect, device number 14 [ 108.606021][ T8502] netlink: 'syz.0.686': attribute type 30 has an invalid length. [ 108.626793][ T6360] udevd[6360]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 108.637326][ T8502] bond3: option arp_missed_max: invalid value (0) [ 108.641988][ T8502] bond3: option arp_missed_max: allowed values 1 - 255 [ 108.648425][ T8502] bond3 (unregistering): Released all slaves [ 108.769974][ T8506] __nla_validate_parse: 2 callbacks suppressed [ 108.770287][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 108.770311][ T8506] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 108.776653][ T8506] geneve0: entered promiscuous mode [ 108.784163][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 108.784275][ T8509] netlink: 20 bytes leftover after parsing attributes in process `syz.0.687'. [ 108.799657][ T8507] kernel read not supported for file /! (pid: 8507 comm: syz.0.687) [ 109.009626][ T8394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 109.372803][ T8523] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 109.463250][ T43] kauditd_printk_skb: 7 callbacks suppressed [ 109.463645][ T43] audit: type=1400 audit(1788158343.377:25126): avc: denied { write } for pid=8540 comm="syz.0.696" name="functions" dev="configfs" ino=17279 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.480995][ T43] audit: type=1400 audit(1788158343.397:25127): avc: denied { write } for pid=8540 comm="syz.0.696" name="configs" dev="configfs" ino=17280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.508089][ T43] audit: type=1400 audit(1788158343.427:25128): avc: denied { write } for pid=8540 comm="syz.0.696" name="c.1" dev="configfs" ino=38055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.509986][ T43] audit: type=1400 audit(1788158343.427:25129): avc: denied { write } for pid=8540 comm="syz.0.696" name="c.1" dev="configfs" ino=38055 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 109.537198][ T43] audit: type=1326 audit(1788158343.457:25130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8549 comm="syz.4.698" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1686d9e159 code=0x0 [ 109.562853][ T8548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.563945][ T8542] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 110.010594][ T43] audit: type=1400 audit(1788158343.927:25131): avc: denied { name_bind } for pid=8570 comm="syz.1.702" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 110.086362][ T43] audit: type=1400 audit(1788158343.997:25132): avc: denied { append } for pid=8570 comm="syz.1.702" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 110.130094][ T43] audit: type=1400 audit(1788158344.047:25133): avc: denied { call } for pid=8570 comm="syz.1.702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 110.248058][ T43] audit: type=1326 audit(1788158344.167:25134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.3.704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 110.248156][ T43] audit: type=1326 audit(1788158344.167:25135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8580 comm="syz.3.704" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7db019e159 code=0x7ffc0000 [ 112.423639][ T8550] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 112.601711][ T8613] netlink: 196 bytes leftover after parsing attributes in process `syz.4.712'. [ 112.601895][ T8613] netlink: 196 bytes leftover after parsing attributes in process `syz.4.712'. [ 112.601914][ T8613] netlink: 19 bytes leftover after parsing attributes in process `syz.4.712'. [ 112.615039][ T8614] netlink: 196 bytes leftover after parsing attributes in process `syz.4.712'. [ 112.616126][ T8614] netlink: 196 bytes leftover after parsing attributes in process `syz.4.712'. [ 112.616136][ T8614] netlink: 19 bytes leftover after parsing attributes in process `syz.4.712'. [ 112.662843][ T8611] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 112.817737][ T853] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 112.966388][ T853] usb 8-1: Using ep0 maxpacket: 16 [ 112.969000][ T853] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 112.975032][ T853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.978697][ T853] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 112.982137][ T853] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 112.987176][ T853] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.991426][ T853] usb 8-1: config 0 descriptor?? [ 113.009819][ T853] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input11 [ 113.025346][ T5125] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.067756][ T5125] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.079881][ T5125] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.102727][ T5125] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.107649][ T5740] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.118014][ T5125] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.127036][ T5125] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.135248][ T5125] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.146758][ T8633] kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 113.161168][ T8633] kvm: pic: level sensitive irq not supported [ 113.163375][ T8633] netlink: 'syz.0.715': attribute type 1 has an invalid length. [ 113.164690][ T8633] NCSI netlink: No device for ifindex 0 [ 113.210163][ T8610] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 113.236720][ T70] usb 8-1: USB disconnect, device number 3 [ 113.281218][ T8646] netlink: 'syz.0.721': attribute type 7 has an invalid length. [ 113.282076][ T8646] netlink: 'syz.0.721': attribute type 7 has an invalid length. [ 113.434430][ T8655] zram: failed to load dictionary d (err=-2) [ 113.512689][ T8678] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 113.716230][ T8692] netlink: 'syz.1.728': attribute type 39 has an invalid length. [ 113.853837][ T8701] xt_SECMARK: invalid mode: 2 [ 113.878168][ T8703] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 114.088654][ T8714] __nla_validate_parse: 2 callbacks suppressed [ 114.088783][ T8714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.734'. [ 114.088815][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.734'. [ 114.466314][ T43] kauditd_printk_skb: 2260 callbacks suppressed [ 114.466389][ T43] audit: type=1326 audit(1788158348.377:27397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466427][ T43] audit: type=1326 audit(1788158348.377:27398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466462][ T43] audit: type=1326 audit(1788158348.377:27399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466499][ T43] audit: type=1326 audit(1788158348.377:27400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466540][ T43] audit: type=1326 audit(1788158348.377:27401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466580][ T43] audit: type=1326 audit(1788158348.377:27402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466617][ T43] audit: type=1326 audit(1788158348.377:27403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466656][ T43] audit: type=1326 audit(1788158348.377:27404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466694][ T43] audit: type=1326 audit(1788158348.377:27405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.466733][ T43] audit: type=1326 audit(1788158348.377:27389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8710 comm="syz.1.733" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5c659e159 code=0x50000 [ 114.534946][ T8724] SELinux: Context system_u:object_r:system_map_t:s0 is not valid (left unmapped). [ 114.577689][ T8734] overlayfs: upper fs does not support tmpfile. [ 114.756477][ T8741] netlink: 4 bytes leftover after parsing attributes in process `syz.4.740'. [ 114.802910][ T8744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.741'. [ 114.834143][ T8745] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 115.841377][ T8788] FAULT_INJECTION: forcing a failure. [ 115.841377][ T8788] name failslab, interval 1, probability 0, space 0, times 0 [ 115.841459][ T8788] CPU: 0 UID: 0 PID: 8788 Comm: syz.4.745 Tainted: G L syzkaller #0 PREEMPT(full) [ 115.841486][ T8788] Tainted: [L]=SOFTLOCKUP [ 115.841493][ T8788] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 115.841503][ T8788] Call Trace: [ 115.841511][ T8788] [ 115.841519][ T8788] dump_stack_lvl+0x100/0x190 [ 115.841567][ T8788] should_fail_ex.cold+0x5/0xa [ 115.841592][ T8788] should_failslab+0xc2/0x120 [ 115.841619][ T8788] __kmalloc_noprof+0xfc/0x840 [ 115.841637][ T8788] ? lockdep_hardirqs_on+0x7d/0x110 [ 115.841665][ T8788] ? io_futexv_prep+0x24a/0x520 [ 115.841688][ T8788] io_futexv_prep+0x24a/0x520 [ 115.841710][ T8788] io_submit_sqes+0xa03/0x2480 [ 115.841752][ T8788] __do_sys_io_uring_enter+0xa88/0x1b10 [ 115.841786][ T8788] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 115.841814][ T8788] ? __x64_sys_futex+0x34f/0x4d0 [ 115.841838][ T8788] ? __x64_sys_futex+0x358/0x4d0 [ 115.841877][ T8788] ? xfd_validate_state+0x129/0x190 [ 115.841915][ T8788] do_syscall_64+0x123/0x790 [ 115.841937][ T8788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.841956][ T8788] RIP: 0033:0x7f1686d9e159 [ 115.841973][ T8788] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 115.841991][ T8788] RSP: 002b:00007f1687ca1028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 115.842014][ T8788] RAX: ffffffffffffffda RBX: 00007f1687026180 RCX: 00007f1686d9e159 [ 115.842028][ T8788] RDX: 00000000fffffffd RSI: 0000000001000001 RDI: 000000000000000f [ 115.842039][ T8788] RBP: 00007f1686e35024 R08: 0000000000000000 R09: 0000000000000000 [ 115.842049][ T8788] R10: 000000000000004b R11: 0000000000000246 R12: 0000000000000000 [ 115.842060][ T8788] R13: 00007f1687026218 R14: 00007f1687026180 R15: 00007ffe50e2f658 [ 115.842088][ T8788] [ 115.945102][ T8792] xt_time: unknown flags 0x78 [ 116.277756][ T8803] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 116.278092][ T8803] orangefs: client-core tried to read wrong size [ 116.278689][ T8803] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018937b, magic 93 != 6b] [ 116.279422][ T8803] CUSE: unknown device info "" [ 116.279430][ T8803] CUSE: unknown device info "" [ 116.279434][ T8803] CUSE: unknown device info "" [ 116.279438][ T8803] CUSE: unknown device info "" [ 116.279442][ T8803] CUSE: DEVNAME unspecified [ 116.282416][ T8803] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018937b, magic 93 != 6b] [ 117.084147][ T8819] netlink: 11396 bytes leftover after parsing attributes in process `syz.3.756'. [ 117.144468][ T8829] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 117.144581][ T8829] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 117.147984][ T8829] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 117.149787][ T8829] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 117.509668][ T8816] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.511099][ T8816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.525263][ T8816] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 117.531598][ T8816] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.531916][ T8816] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.540219][ T8816] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 117.548456][ T8816] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.549088][ T8816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.554791][ T8816] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 117.558868][ T8816] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.558967][ T8816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.568834][ T8816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.573761][ T8816] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 117.850788][ T8848] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 117.853703][ T8859] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.767'. [ 117.855421][ T8859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8859 comm=syz.0.767 [ 117.855440][ T8859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=8859 comm=syz.0.767 [ 117.855450][ T8859] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=8859 comm=syz.0.767 [ 117.856384][ T8859] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.767'. [ 117.860459][ T8848] orangefs: client-core tried to read wrong size [ 117.861957][ T8848] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018937b, magic 93 != 6b] [ 117.864971][ T8848] CUSE: unknown device info "" [ 117.864986][ T8848] CUSE: unknown device info "" [ 117.864994][ T8848] CUSE: unknown device info "" [ 117.865001][ T8848] CUSE: unknown device info "" [ 117.865007][ T8848] CUSE: DEVNAME unspecified [ 117.866789][ T8848] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018937b, magic 93 != 6b] [ 118.023481][ T8872] netlink: 'syz.0.770': attribute type 1 has an invalid length. [ 118.105508][ T8880] netlink: 8 bytes leftover after parsing attributes in process `syz.4.771'. [ 118.118719][ T8880] netlink: 76 bytes leftover after parsing attributes in process `syz.4.771'. [ 118.208419][ T8887] lo: entered allmulticast mode [ 118.208922][ T8887] bond0: entered allmulticast mode [ 118.209349][ T8887] dummy0: entered allmulticast mode [ 118.209866][ T8887] eql: entered allmulticast mode [ 118.210004][ T8887] ifb0: entered allmulticast mode [ 118.210341][ T8887] ifb1: entered allmulticast mode [ 118.213792][ T8887] e1000 0000:00:06.0 eth0: entered allmulticast mode [ 118.225530][ T8887] e1000e 0000:00:02.0 eth1: entered allmulticast mode [ 118.231258][ T8887] mac80211_hwsim hwsim0 wlan0: entered allmulticast mode [ 118.233255][ T8887] hwsim0: entered allmulticast mode [ 118.233423][ T8887] ieee802154 phy0 wpan0: entered allmulticast mode [ 118.234790][ T8887] ieee802154 phy1 wpan1: entered allmulticast mode [ 118.235473][ T8887] teql0: entered allmulticast mode [ 118.235771][ T8887] tunl0: entered allmulticast mode [ 118.235982][ T8887] gre0: entered allmulticast mode [ 118.236134][ T8887] gretap0: entered allmulticast mode [ 118.237740][ T8887] erspan0: entered allmulticast mode [ 118.238262][ T8887] ip_vti0: entered allmulticast mode [ 118.238472][ T8887] ip6_vti0: entered allmulticast mode [ 118.238617][ T8887] sit0: entered allmulticast mode [ 118.238762][ T8887] ip6tnl0: entered allmulticast mode [ 118.238909][ T8887] ip6gre0: entered allmulticast mode [ 118.239160][ T8887] lapb0: entered allmulticast mode [ 118.239539][ T8887] lapb1: entered allmulticast mode [ 118.239846][ T8887] lapb2: entered allmulticast mode [ 118.240240][ T8887] lapb3: entered allmulticast mode [ 118.240558][ T8887] lapb4: entered allmulticast mode [ 118.240701][ T8887] lapb5: entered allmulticast mode [ 118.240832][ T8887] lapb6: entered allmulticast mode [ 118.244174][ T8887] lowpan0: entered allmulticast mode [ 118.244494][ T8887] netdevsim netdevsim2 eth2: entered allmulticast mode [ 118.264700][ T8887] netdevsim netdevsim2 eth3: entered allmulticast mode [ 118.265349][ T8887] netdevsim netdevsim2 eth4: entered allmulticast mode [ 118.266151][ T8887] netdevsim netdevsim2 eth5: entered allmulticast mode [ 118.267538][ T8887] bridge0: entered allmulticast mode [ 118.268121][ T8887] lapb7: entered allmulticast mode [ 118.272528][ T8887] lapb8: entered allmulticast mode [ 118.272927][ T8887] geneve0: entered allmulticast mode [ 118.471589][ T8901] ***************************************************** [ 118.471657][ T8901] ORANGEFS Device Error: You cannot open the device file [ 118.473717][ T8901] [ 118.473717][ T8901] /dev/pvfs2-req more than once. Please make sure that [ 118.473717][ T8901] there are no [ 118.473728][ T8901] instances of a program using this device [ 118.473728][ T8901] currently running. (You must verify this!) [ 118.473733][ T8901] For example, you can use the lsof program as follows: [ 118.473737][ T8901] 'lsof | grep pvfs2-req' (run this as root) [ 118.473742][ T8901] open_access_count = 1 [ 118.473747][ T8901] ***************************************************** [ 118.523408][ T8905] netlink: 44 bytes leftover after parsing attributes in process `syz.4.781'. [ 118.858884][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.393861][ T8925] kvm: pic: level sensitive irq not supported [ 119.403523][ T8925] kvm: pic: non byte write [ 119.416483][ T5088] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 119.419639][ T8931] : renamed from vlan0 (while UP) [ 119.509654][ T8939] tipc: Started in network mode [ 119.509711][ T8939] tipc: Node identity ac1414aa, cluster identity 4711 [ 119.510367][ T8939] tipc: New replicast peer: 172.20.20.187 [ 119.519453][ T8939] tipc: Enabled bearer , priority 10 [ 119.566500][ T5088] Bluetooth: hci1: command 0x0405 tx timeout [ 119.566927][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.566951][ T5088] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.595457][ T8945] qnx4: unable to read the superblock [ 119.604709][ T8942] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 119.605533][ T43] kauditd_printk_skb: 27867 callbacks suppressed [ 119.605543][ T43] audit: type=1400 audit(1788158353.517:55273): avc: denied { append } for pid=8947 comm="syz.1.792" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 119.672992][ T8955] netlink: 60 bytes leftover after parsing attributes in process `syz.1.794'. [ 119.978432][ T8969] xt_TCPMSS: Only works on TCP SYN packets [ 120.009060][ T8969] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8969 comm=syz.0.797 [ 120.172757][ T8976] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 120.172909][ T8976] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 120.175970][ T8976] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 120.178335][ T8976] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 120.257024][ T8978] tmpfs: Bad value for 'mpol' [ 120.554488][ T43] audit: type=1326 audit(1788158354.467:55274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1686d9e159 code=0x7fc00000 [ 120.557267][ T43] audit: type=1326 audit(1788158354.477:55275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7f1686d9e159 code=0x7fc00000 [ 120.621157][ T8992] lo speed is unknown, defaulting to 1000 [ 120.639629][ T57] tipc: Node number set to 2886997162 [ 120.719255][ T43] audit: type=1326 audit(1788158354.637:55276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1686d9e159 code=0x0 [ 120.841924][ T43] audit: type=1326 audit(1788158354.757:55277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1686d9e159 code=0x7fc00000 [ 120.842015][ T9000] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 120.842544][ T43] audit: type=1326 audit(1788158354.757:55278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f1686d9e159 code=0x7fc00000 [ 120.842742][ T43] audit: type=1326 audit(1788158354.757:55279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1686d9e159 code=0x7fc00000 [ 120.842926][ T43] audit: type=1326 audit(1788158354.757:55280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1686d9e159 code=0x7fc00000 [ 120.843210][ T43] audit: type=1326 audit(1788158354.757:55281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1686d9e159 code=0x7fc00000 [ 120.843446][ T43] audit: type=1326 audit(1788158354.757:55282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8990 comm="syz.4.804" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1686d9e159 code=0x7fc00000 [ 120.927614][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 121.169235][ T64] Bluetooth: hci0: Unable to find connection with handle 0x00c8 [ 121.169336][ T9015] netlink: Invalid conntrack timeout [ 121.169368][ T9015] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.391500][ T9027] netlink: 32 bytes leftover after parsing attributes in process `syz.3.814'. [ 121.466619][ T9033] x_tables: duplicate underflow at hook 1 [ 121.486220][ T9026] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 121.646362][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 121.646406][ T5747] Bluetooth: hci1: command 0x0405 tx timeout [ 121.646805][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 121.671602][ T9041] ima: policy update completed [ 121.699756][ T9041] ima: policy update failed [ 122.405745][ T9073] netlink: 4 bytes leftover after parsing attributes in process `syz.4.827'. [ 122.411682][ T9073] input: syz0 as /devices/virtual/input/input12 [ 122.484300][ T9083] overlay: Bad value for 'workdir' [ 122.558135][ T9083] pcieport 0000:00:04.0: PCI bridge to [bus 01] [ 122.560745][ T9083] pcieport 0000:00:04.0: bridge window [io 0x1000-0x1fff] [ 122.563007][ T9083] pcieport 0000:00:04.0: bridge window [mem 0xfe800000-0xfe9fffff] [ 122.564290][ T9083] pcieport 0000:00:04.0: bridge window [mem 0x380000000000-0x3807ffffffff 64bit pref] [ 122.568063][ T9083] fuse: Bad value for 'fd' [ 122.653046][ T9092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 122.653105][ T9092] netlink: 'syz.3.834': attribute type 30 has an invalid length. [ 122.655809][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 122.655833][ T9095] netlink: 'syz.3.834': attribute type 30 has an invalid length. [ 122.676453][ T5813] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.676525][ T5813] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.676570][ T5813] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.676591][ T5813] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 122.747796][ T9106] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 122.966445][ T57] usb 9-1: new full-speed USB device number 4 using dummy_hcd [ 123.006978][ T5088] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.119057][ T57] usb 9-1: not running at top speed; connect to a high speed hub [ 123.119151][ T57] usb 9-1: New USB device found, idVendor=0ea0, idProduct=6858, bcdDevice= 0.40 [ 123.120564][ T57] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 123.123912][ T57] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.123934][ T57] usb 9-1: Product: syz [ 123.123945][ T57] usb 9-1: Manufacturer: syz [ 123.123958][ T57] usb 9-1: SerialNumber: syz [ 123.130908][ T57] oti6858 9-1:1.0: oti6858 converter detected [ 123.171426][ T57] usb 9-1: oti6858 converter now attached to ttyUSB0 [ 123.335430][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.335825][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.343404][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.343791][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.344630][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.344926][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.358521][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.358743][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.359210][ T9100] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 123.359458][ T9100] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 123.603263][ T9138] netlink: 12 bytes leftover after parsing attributes in process `syz.0.838'. [ 123.728087][ T5088] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.729753][ T5747] Bluetooth: hci1: command 0x0405 tx timeout [ 123.730263][ T5747] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.771317][ T9151] netlink: 28 bytes leftover after parsing attributes in process `syz.3.842'. [ 123.771392][ T9151] netlink: 'syz.3.842': attribute type 7 has an invalid length. [ 123.778088][ T9151] netlink: 'syz.3.842': attribute type 8 has an invalid length. [ 123.778107][ T9151] netlink: 4 bytes leftover after parsing attributes in process `syz.3.842'. [ 123.923166][ T9151] loop7: detected capacity change from 0 to 7 [ 124.056525][ T6213] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.064252][ T9151] Dev loop7: unable to read RDB block 7 [ 124.064313][ T9151] loop7: unable to read partition table [ 124.064539][ T9151] loop7: partition table beyond EOD, truncated [ 124.064598][ T9151] loop_reread_partitions: partition scan of loop7 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 124.187845][ T6213] usb 5-1: device descriptor read/64, error -71 [ 124.255794][ T9167] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c018620b, magic 62 != 6b] [ 124.426702][ T6213] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 124.566662][ T6213] usb 5-1: device descriptor read/64, error -71 [ 124.677283][ T6213] usb usb5-port1: attempt power cycle [ 124.721838][ T43] kauditd_printk_skb: 7969 callbacks suppressed [ 124.721921][ T43] audit: type=1800 audit(1788158358.637:63252): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 124.742554][ T43] audit: type=1800 audit(1788158358.657:63253): pid=9200 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.847" name="quirks" dev="sysfs" ino=62594 res=0 errno=0 [ 124.799934][ T43] audit: type=1800 audit(1788158358.717:63254): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 124.821735][ T1042] usb 9-1: USB disconnect, device number 4 [ 124.844975][ T1042] oti6858 ttyUSB0: oti6858 converter now disconnected from ttyUSB0 [ 124.849047][ T1042] oti6858 9-1:1.0: device disconnected [ 124.875614][ T43] audit: type=1800 audit(1788158358.787:63255): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34887 res=0 errno=0 [ 124.884654][ T43] audit: type=1800 audit(1788158358.797:63256): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=34910 res=0 errno=0 [ 125.016393][ T6213] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 125.037120][ T6213] usb 5-1: device descriptor read/8, error -71 [ 125.086913][ T57] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 125.237618][ T57] usb 6-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 125.238840][ T57] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 125.240856][ T57] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.240872][ T57] usb 6-1: Product: syz [ 125.240881][ T57] usb 6-1: Manufacturer: syz [ 125.240891][ T57] usb 6-1: SerialNumber: syz [ 125.246176][ T43] audit: type=1800 audit(1788158359.157:63257): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=140979 res=0 errno=0 [ 125.249740][ T57] sisusb 6-1:1.0: Invalid USB2VGA device [ 125.249760][ T57] sisusb 6-1:1.0: probe with driver sisusb failed with error -22 [ 125.250943][ T43] audit: type=1800 audit(1788158359.167:63258): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="descriptors" dev="sysfs" ino=141011 res=0 errno=0 [ 125.250989][ T43] audit: type=1800 audit(1788158359.167:63259): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idVendor" dev="sysfs" ino=140986 res=0 errno=0 [ 125.251714][ T43] audit: type=1800 audit(1788158359.167:63260): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="idProduct" dev="sysfs" ino=140987 res=0 errno=0 [ 125.252619][ T43] audit: type=1800 audit(1788158359.167:63261): pid=6360 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="manufacturer" dev="sysfs" ino=141008 res=0 errno=0 [ 125.276626][ T6213] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 125.297116][ T6213] usb 5-1: device descriptor read/8, error -71 [ 125.407701][ T6213] usb usb5-port1: unable to enumerate USB device [ 125.450810][ T5844] usb 6-1: USB disconnect, device number 15 [ 125.795890][ T9242] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 125.810156][ T64] Bluetooth: hci1: command 0x0405 tx timeout [ 126.160037][ T9266] tmpfs: Unknown parameter 'mpOl' [ 126.335099][ T9274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.335434][ T9274] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 126.343766][ T9275] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 126.606810][ T9289] Invalid source name [ 126.606869][ T9289] UBIFS error (pid: 9289): cannot open "/dev/sg0", error -22 [ 126.713467][ T9295] MTRR 1 not used [ 126.713700][ T9294] netlink: 52 bytes leftover after parsing attributes in process `syz.4.875'. [ 126.713716][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 126.713730][ T9294] netlink: 52 bytes leftover after parsing attributes in process `syz.4.875'. [ 126.713740][ T9294] netlink: 12 bytes leftover after parsing attributes in process `syz.4.875'. [ 126.713751][ T9294] netlink: 52 bytes leftover after parsing attributes in process `syz.4.875'. [ 126.733035][ T9301] netlink: 'syz.1.874': attribute type 11 has an invalid length. [ 126.733053][ T9301] netlink: 224 bytes leftover after parsing attributes in process `syz.1.874'. [ 126.994068][ T9310] ip6t_srh: unknown srh match flags 4000 [ 126.995376][ T9321] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 127.126765][ T9326] kernel read not supported for file /policy (pid: 9326 comm: syz.3.880) [ 127.739868][ T9346] netlink: 'syz.4.887': attribute type 11 has an invalid length. [ 127.874564][ T9356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.889'. [ 128.140966][ T9377] netlink: 8 bytes leftover after parsing attributes in process `syz.4.898'. [ 128.144527][ T9377] netlink: 24 bytes leftover after parsing attributes in process `syz.4.898'. [ 128.166160][ T9382] netlink: 20 bytes leftover after parsing attributes in process `syz.3.899'. [ 128.176587][ T6213] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 128.230183][ T9393] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 128.239137][ T9393] x_tables: duplicate underflow at hook 1 [ 128.291322][ T9394] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 128.326989][ T6213] usb 6-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.01 [ 128.327887][ T6213] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.327911][ T6213] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 128.327935][ T6213] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.466695][ T1042] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 128.633098][ T1042] usb 8-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 128.634197][ T1042] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50223, setting to 1024 [ 128.634222][ T1042] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 128.634259][ T1042] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.637725][ T9391] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 128.640012][ T1042] opticon 8-1:1.0: opticon converter detected [ 128.646889][ T1042] usb 8-1: opticon converter now attached to ttyUSB0 [ 128.894143][ T9397] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 128.894325][ T9397] lpc_ich 0000:00:00.0: I/O space for ACPI uninitialized [ 128.894403][ T9397] lpc_ich 0000:00:00.0: I/O space for GPIO uninitialized [ 128.894416][ T9397] lpc_ich 0000:00:00.0: No MFD cells added [ 129.069113][ T9399] netlink: 'syz.4.905': attribute type 5 has an invalid length. [ 129.205936][ T30] usb 6-1: USB disconnect, device number 16 [ 129.550053][ T9425] CIFS mount error: No usable UNC path provided in device string! [ 129.550053][ T9425] [ 129.553775][ T9425] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 129.757441][ T43] kauditd_printk_skb: 107 callbacks suppressed [ 129.757495][ T43] audit: type=1800 audit(1788158363.677:63369): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0 [ 129.815879][ T43] audit: type=1400 audit(1788158363.727:63370): avc: denied { write } for pid=9441 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.832907][ T43] audit: type=1800 audit(1788158363.747:63371): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0 [ 129.859521][ T43] audit: type=1800 audit(1788158363.777:63372): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141772 res=0 errno=0 [ 129.929524][ T43] audit: type=1400 audit(1788158363.847:63373): avc: denied { write } for pid=9452 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.971949][ T43] audit: type=1800 audit(1788158363.887:63374): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 130.018302][ T9457] program syz.4.917 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 130.031541][ T43] audit: type=1800 audit(1788158363.947:63375): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0 [ 130.066037][ T43] audit: type=1800 audit(1788158363.977:63376): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 130.084377][ T43] audit: type=1800 audit(1788158363.997:63377): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=141791 res=0 errno=0 [ 130.183886][ T43] audit: type=1800 audit(1788158364.097:63378): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 130.265863][ T9470] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 130.777197][ T64] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 131.026614][ T6213] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 131.182570][ T6213] usb 9-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 131.183656][ T6213] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.183671][ T6213] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 131.183688][ T6213] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.190151][ T6213] spcp8x5 9-1:1.0: SPCP8x5 converter detected [ 131.203256][ T6213] usb 9-1: SPCP8x5 converter now attached to ttyUSB1 [ 131.440293][ T9530] MINIX-fs: blocksize too small for device [ 131.448128][ T9531] MINIX-fs: blocksize too small for device [ 131.600433][ T9528] ip6erspan0: entered promiscuous mode [ 131.869301][ T9549] loop4: detected capacity change from 0 to 7 [ 132.283978][ T9549] Dev loop4: unable to read RDB block 7 [ 132.284053][ T9549] loop4: unable to read partition table [ 132.284249][ T9549] loop4: partition table beyond EOD, truncated [ 132.284285][ T9549] loop_reread_partitions: partition scan of loop4 (gCj̖P=!MX %`搘ȵ4FLQk݊5) failed (rc=-5) [ 132.593499][ T9560] CUSE: unknown device info "" [ 132.595793][ T9560] CUSE: unknown device info "" [ 132.596412][ T1347] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 132.601326][ T9560] CUSE: unknown device info "" [ 132.603387][ T9560] CUSE: unknown device info "" [ 132.605064][ T9560] CUSE: DEVNAME unspecified [ 132.747261][ T1347] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice= 1.00 [ 132.749146][ T1347] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.749188][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 132.749210][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 132.749232][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 132.749253][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 132.749274][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 132.749295][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 132.749317][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 64 [ 132.749336][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 132.749355][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 132.749375][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 132.749395][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 132.749414][ T1347] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.749431][ T1347] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.749449][ T1347] usb 5-1: config 1 interface 0 altsetting 0 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 132.751589][ T1347] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.751613][ T1347] usb 5-1: Product: syz [ 132.751629][ T1347] usb 5-1: Manufacturer: syz [ 132.751643][ T1347] usb 5-1: SerialNumber: syz [ 132.759664][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.759822][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.759969][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.760207][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.760365][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.760499][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.760666][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.760802][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.760879][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.761009][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.761159][ T9556] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 132.763178][ T1347] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 132.764745][ T1347] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 7 [ 132.770817][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.770868][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.774236][ T1347] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 132.775723][ T1347] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 132.782245][ T1347] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 132.864496][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 132.925045][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 132.938835][ T9562] nvme nvme0: failed to connect socket: -101 [ 133.000441][ T9571] nvme nvme0: failed to connect socket: -101 [ 133.681149][ T9578] __nla_validate_parse: 3 callbacks suppressed [ 133.681382][ T9578] netlink: 24 bytes leftover after parsing attributes in process `syz.1.943'. [ 133.681404][ T9578] nbd: illegal input index 67111936 [ 133.682753][ T9578] MTDSB: Device #1 doesn't appear to exist [ 133.682753][ T9578] [ 133.738001][ T853] usb 9-1: USB disconnect, device number 5 [ 133.757026][ T853] SPCP8x5 ttyUSB1: SPCP8x5 converter now disconnected from ttyUSB1 [ 133.763216][ T853] spcp8x5 9-1:1.0: device disconnected [ 133.959614][ T9583] netlink: 16 bytes leftover after parsing attributes in process `syz.4.945'. [ 133.983519][ T6213] usb 8-1: USB disconnect, device number 4 [ 134.036208][ T6213] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 134.036757][ T6213] opticon 8-1:1.0: device disconnected [ 134.120523][ T9590] device-mapper: ioctl: Unable to rename non-existent device, to  [ 134.154278][ T9595] nvmet_tcp: enabling port 1 (127.0.0.1:8009) [ 134.409737][ T64] Bluetooth: hci1: unexpected event for opcode 0x0c56 [ 134.627395][ T9624] Unable to extract alua_access_type [ 134.827077][ T43] kauditd_printk_skb: 90 callbacks suppressed [ 134.827149][ T43] audit: type=1400 audit(1788158368.747:63469): avc: denied { read } for pid=9627 comm="syz.3.959" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 134.881137][ T43] audit: type=1800 audit(1788158368.797:63470): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 134.932252][ T43] audit: type=1800 audit(1788158368.847:63471): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 135.105220][ T43] audit: type=1800 audit(1788158369.017:63472): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 135.137479][ T9645] /dev/sg0: Can't lookup blockdev [ 135.250547][ T43] audit: type=1800 audit(1788158369.167:63473): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15882 res=0 errno=0 [ 135.364098][ T9655] XFS (nullb0): Invalid superblock magic number [ 135.428991][ T43] audit: type=1800 audit(1788158369.347:63474): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 135.613511][ T6213] usb 5-1: USB disconnect, device number 17 [ 135.643068][ T6213] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 135.656853][ T43] audit: type=1800 audit(1788158369.577:63475): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=15753 res=0 errno=0 [ 135.663968][ T6213] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 135.683707][ T6213] keyspan 5-1:1.0: device disconnected [ 135.766304][ T43] audit: type=1800 audit(1788158369.677:63476): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 135.792207][ T43] audit: type=1400 audit(1788158369.707:63477): avc: denied { ioctl } for pid=9681 comm="syz.4.969" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 135.823756][ T43] audit: type=1800 audit(1788158369.737:63478): pid=5141 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:initrc_t op=collect_data cause=failed comm="udevd" name="uevent" dev="sysfs" ino=16269 res=0 errno=0 [ 135.998167][ T9693] configfs-gadget.g1 gadget.0: HOST MAC 1a:94:48:98:95:31 [ 136.002482][ T9693] configfs-gadget.g1 gadget.0: MAC 66:3e:e0:64:15:9f [ 136.192846][ T9715] ip_tables: iptables: counters copy to user failed while replacing table [ 136.520280][ T9697] vlan2: left promiscuous mode [ 136.520329][ T9697] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 136.520973][ T9697] bridge2: left promiscuous mode [ 136.520983][ T9697] bridge2: left allmulticast mode [ 136.521195][ T9697] ip6gre1: left promiscuous mode [ 136.521207][ T9697] ip6gre1: left allmulticast mode [ 136.525089][ T9697] team1: left promiscuous mode [ 136.525105][ T9697] team1: left allmulticast mode [ 136.549629][ T5443] veth0_vlan: left promiscuous mode [ 136.565418][ T1347] veth0_vlan: entered promiscuous mode [ 136.569852][ T7831] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.569917][ T7831] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.569971][ T7831] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.569999][ T7831] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.570032][ T7831] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.570060][ T7831] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.570093][ T7831] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.570143][ T7831] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.642803][ T9736] netlink: 52 bytes leftover after parsing attributes in process `syz.3.980'. [ 136.806395][ T1347] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 136.970147][ T1347] usb 9-1: New USB device found, idVendor=18b4, idProduct=1689, bcdDevice= 1.00 [ 136.970986][ T1347] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.973025][ T1347] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.973043][ T1347] usb 9-1: Product: syz [ 136.973054][ T1347] usb 9-1: Manufacturer: syz [ 136.973065][ T1347] usb 9-1: SerialNumber: syz [ 136.987785][ T1347] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 137.071479][ T9770] ================================================================== [ 137.071503][ T9770] BUG: KASAN: vmalloc-out-of-bounds in sys_fillrect+0x174a/0x1910 [ 137.071540][ T9770] Write of size 8 at addr ffffc9000524d000 by task syz.1.984/9770 [ 137.071549][ T9770] [ 137.071558][ T9770] CPU: 2 UID: 0 PID: 9770 Comm: syz.1.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.071573][ T9770] Tainted: [L]=SOFTLOCKUP [ 137.071578][ T9770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.071584][ T9770] Call Trace: [ 137.071589][ T9770] [ 137.071593][ T9770] dump_stack_lvl+0x100/0x190 [ 137.071611][ T9770] print_report+0x13d/0x4b0 [ 137.071628][ T9770] ? _raw_spin_lock_irqsave+0x52/0x60 [ 137.071652][ T9770] ? sys_fillrect+0x174a/0x1910 [ 137.071667][ T9770] kasan_report+0xdf/0x1c0 [ 137.071681][ T9770] ? sys_fillrect+0x174a/0x1910 [ 137.071699][ T9770] sys_fillrect+0x174a/0x1910 [ 137.071717][ T9770] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 137.071736][ T9770] bit_clear+0x17d/0x220 [ 137.071750][ T9770] ? __pfx_bit_clear+0x10/0x10 [ 137.071763][ T9770] ? fb_get_color_depth+0x120/0x250 [ 137.071777][ T9770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.071791][ T9770] __fbcon_clear+0x633/0x760 [ 137.071804][ T9770] ? __pfx_bit_clear+0x10/0x10 [ 137.071818][ T9770] fbcon_scroll+0x48b/0x650 [ 137.071831][ T9770] con_scroll+0x464/0x690 [ 137.071861][ T9770] csi_ECMA.constprop.0+0x1238/0x3b60 [ 137.071873][ T9770] ? find_held_lock+0x2b/0x80 [ 137.071889][ T9770] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 137.071902][ T9770] do_con_write+0x35dc/0x4980 [ 137.071916][ T9770] ? __pfx_do_con_write+0x10/0x10 [ 137.071926][ T9770] ? add_softcursor+0x190/0x290 [ 137.071942][ T9770] ? con_write+0x96/0xb0 [ 137.071952][ T9770] con_write+0x23/0xb0 [ 137.071962][ T9770] n_tty_write+0x431/0x1160 [ 137.071978][ T9770] ? __pfx_n_tty_write+0x10/0x10 [ 137.071990][ T9770] ? __kasan_kmalloc+0xaa/0xb0 [ 137.072001][ T9770] ? __pfx_woken_wake_function+0x10/0x10 [ 137.072014][ T9770] ? rcu_is_watching+0x13/0xc0 [ 137.072029][ T9770] ? file_tty_write.isra.0+0x694/0x890 [ 137.072046][ T9770] ? kfree+0x1e5/0x6d0 [ 137.072081][ T9770] ? __pfx_n_tty_write+0x10/0x10 [ 137.072095][ T9770] file_tty_write.isra.0+0x4d2/0x890 [ 137.072114][ T9770] vfs_write+0x6af/0x1050 [ 137.072132][ T9770] ? __pfx_tty_write+0x10/0x10 [ 137.072148][ T9770] ? __pfx_vfs_write+0x10/0x10 [ 137.072163][ T9770] ? find_held_lock+0x2b/0x80 [ 137.072181][ T9770] ksys_write+0x12a/0x250 [ 137.072190][ T9770] ? __pfx_ksys_write+0x10/0x10 [ 137.072202][ T9770] do_syscall_64+0x123/0x790 [ 137.072215][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.072227][ T9770] RIP: 0033:0x7fb5c659e159 [ 137.072236][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.072247][ T9770] RSP: 002b:00007fb5c7406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.072259][ T9770] RAX: ffffffffffffffda RBX: 00007fb5c6825fa0 RCX: 00007fb5c659e159 [ 137.072266][ T9770] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 137.072273][ T9770] RBP: 00007fb5c6635024 R08: 0000000000000000 R09: 0000000000000000 [ 137.072279][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.072286][ T9770] R13: 00007fb5c6826038 R14: 00007fb5c6825fa0 R15: 00007ffd439584c8 [ 137.072296][ T9770] [ 137.072300][ T9770] [ 137.072302][ T9770] The buggy address belongs to a vmalloc virtual mapping [ 137.072311][ T9770] Memory state around the buggy address: [ 137.072316][ T9770] ffffc9000524cf00: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 137.072324][ T9770] ffffc9000524cf80: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 137.072330][ T9770] >ffffc9000524d000: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 137.072336][ T9770] ^ [ 137.072340][ T9770] ffffc9000524d080: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 137.072347][ T9770] ffffc9000524d100: f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 f8 [ 137.072353][ T9770] ================================================================== [ 137.072465][ T9770] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 137.225305][ T9770] CPU: 2 UID: 0 PID: 9770 Comm: syz.1.984 Tainted: G L syzkaller #0 PREEMPT(full) [ 137.228843][ T9770] Tainted: [L]=SOFTLOCKUP [ 137.230761][ T9770] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 137.234509][ T9770] Call Trace: [ 137.235769][ T9770] [ 137.236884][ T9770] dump_stack_lvl+0x100/0x190 [ 137.238668][ T9770] vpanic+0x553/0x970 [ 137.240080][ T9770] ? __pfx_vpanic+0x10/0x10 [ 137.241693][ T9770] ? mark_held_locks+0x40/0x70 [ 137.243430][ T9770] ? sys_fillrect+0x174a/0x1910 [ 137.245250][ T9770] panic+0xd1/0xe0 [ 137.246892][ T9770] ? __pfx_panic+0x10/0x10 [ 137.248663][ T9770] ? sys_fillrect+0x174a/0x1910 [ 137.250380][ T9770] ? preempt_schedule_common+0x3c/0xb0 [ 137.252177][ T9770] check_panic_on_warn.cold+0x19/0x34 [ 137.254159][ T9770] end_report.part.0+0x3a/0x90 [ 137.255897][ T9770] kasan_report.cold+0xe/0x18 [ 137.257779][ T9770] ? sys_fillrect+0x174a/0x1910 [ 137.260398][ T9770] sys_fillrect+0x174a/0x1910 [ 137.262064][ T9770] drm_fbdev_shmem_defio_fillrect+0x22/0x140 [ 137.264001][ T9770] bit_clear+0x17d/0x220 [ 137.265396][ T9770] ? __pfx_bit_clear+0x10/0x10 [ 137.267137][ T9770] ? fb_get_color_depth+0x120/0x250 [ 137.268842][ T9770] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 137.271014][ T9770] __fbcon_clear+0x633/0x760 [ 137.272705][ T9770] ? __pfx_bit_clear+0x10/0x10 [ 137.274489][ T9770] fbcon_scroll+0x48b/0x650 [ 137.276120][ T9770] con_scroll+0x464/0x690 [ 137.277630][ T9770] csi_ECMA.constprop.0+0x1238/0x3b60 [ 137.279448][ T9770] ? find_held_lock+0x2b/0x80 [ 137.281143][ T9770] ? __pfx_csi_ECMA.constprop.0+0x10/0x10 [ 137.282948][ T9770] do_con_write+0x35dc/0x4980 [ 137.284528][ T9770] ? __pfx_do_con_write+0x10/0x10 [ 137.286126][ T9770] ? add_softcursor+0x190/0x290 [ 137.287695][ T9770] ? con_write+0x96/0xb0 [ 137.289317][ T9770] con_write+0x23/0xb0 [ 137.291103][ T9770] n_tty_write+0x431/0x1160 [ 137.292937][ T9770] ? __pfx_n_tty_write+0x10/0x10 [ 137.294728][ T9770] ? __kasan_kmalloc+0xaa/0xb0 [ 137.296781][ T9770] ? __pfx_woken_wake_function+0x10/0x10 [ 137.298974][ T9770] ? rcu_is_watching+0x13/0xc0 [ 137.300804][ T9770] ? file_tty_write.isra.0+0x694/0x890 [ 137.302632][ T9770] ? kfree+0x1e5/0x6d0 [ 137.303983][ T9770] ? __pfx_n_tty_write+0x10/0x10 [ 137.305668][ T9770] file_tty_write.isra.0+0x4d2/0x890 [ 137.307502][ T9770] vfs_write+0x6af/0x1050 [ 137.309156][ T9770] ? __pfx_tty_write+0x10/0x10 [ 137.311035][ T9770] ? __pfx_vfs_write+0x10/0x10 [ 137.312836][ T9770] ? find_held_lock+0x2b/0x80 [ 137.314832][ T9770] ksys_write+0x12a/0x250 [ 137.316720][ T9770] ? __pfx_ksys_write+0x10/0x10 [ 137.318538][ T9770] do_syscall_64+0x123/0x790 [ 137.320361][ T9770] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.322339][ T9770] RIP: 0033:0x7fb5c659e159 [ 137.323758][ T9770] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 137.329722][ T9770] RSP: 002b:00007fb5c7406028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 137.332668][ T9770] RAX: ffffffffffffffda RBX: 00007fb5c6825fa0 RCX: 00007fb5c659e159 [ 137.335860][ T9770] RDX: 0000000000001006 RSI: 0000200000001040 RDI: 0000000000000004 [ 137.338577][ T9770] RBP: 00007fb5c6635024 R08: 0000000000000000 R09: 0000000000000000 [ 137.341310][ T9770] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.343787][ T9770] R13: 00007fb5c6826038 R14: 00007fb5c6825fa0 R15: 00007ffd439584c8 [ 137.346304][ T9770] [ 137.348002][ T9770] Kernel Offset: disabled [ 137.349414][ T9770] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:39:31 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffff88806a43bf00 RCX=0000000000000000 RDX=1ffff1100607f4cd RSI=ffff8880303fa580 RDI=ffff88806a43bf00 RBP=ffff8880303fa669 RSP=ffffc90000007c18 R8 =ffff88806a43cac0 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000000 R12=ffff88806a43bf00 R13=ffff88806a43bfd4 R14=ffff8880303fa580 R15=ffff88806a43bf00 RIP=ffffffff81dd2050 RFL=00000802 [-O-----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5b64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb5c6470050 CR3=000000002424f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7865646e692f6b72 6f772f3839312f2e ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfecaf1a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcfecaf1a6 00007ffcfecaf1ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4bc235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4bc235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4bc2357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fc4bc235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000006 RBX=ffff88806a528500 RCX=ffffffff8214395f RDX=0000000000000101 RSI=ffffffff8e3eab0c RDI=ffffffff8c620c80 RBP=0000000000000287 RSP=ffffc90000687cf8 R8 =0000000000000001 R9 =0000000000000001 R10=0000000000000001 R11=0000000000000001 R12=0000000000000100 R13=0000000000000008 R14=8000000000000100 R15=0000000000000001 RIP=ffffffff810014b0 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5c64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbdd9d71020 CR3=0000000035dad000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c6f83001 Opmask01=0000000000000001 Opmask02=0000000000020000 Opmask03=0000000000000000 Opmask04=00000000fffdffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff87eb641b 00007fff87eb641b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff87eb6920 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff87eb6920 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000303178000030 0000000000306278 302f000039353165 3935366335626600 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000303172000030 0000000000306272 3025000033353165 3335366335626600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c656220737365 7264646120796767 756220656854205d 3037373954205b5d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3834203130203938 2034362038642037 6620666620666620 6666203865203163 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2037632038342033 6320313020333720 6666206666203066 203130206433203e ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38343c2035302066 3020383020343220 6334206238206334 2038632039382064 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3420326320393820 6434206163203938 2038342036642039 3820383420376620 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f723d747865746e 6f637320343d6f6e 6920227366706d74 766564223d766564 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000005 RBX=00000000000003f9 RCX=0000000000000000 RDX=00000000000003f9 RSI=ffffffff85afc695 RDI=ffffffff9bc60ca0 RBP=ffffffff9bc60c60 RSP=ffffc9000400ede8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000037373954 R12=0000000000000000 R13=0000000000000005 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff85afc6bf RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb5c74066c0 ffffffff 00c00000 GS =0000 ffff8880d5d64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000002000 CR3=000000002f58c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7db0f5d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3002f9b6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe3002f9b6 00007ffe3002f9bc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7db0235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7db0235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7db02357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7db0235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c7e701f6842f1230 14382662a67d1f33 86090e2fd75cf105 16d570e70deca509 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7db03f25f8 00007f7db03f25c8 00007f7db03f2600 00007f7db03f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000003 RBX=ffff88806a733de8 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff8c620c00 RDI=ffffffff8e6b6938 RBP=0000000000000003 RSP=ffffc9000654fcd0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000001 R13=dffffc0000000000 R14=0000000000000001 R15=0000000000000ff4 RIP=ffffffff81efa16a RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe9ee58a780 ffffffff 00c00000 GS =0000 ffff8880d5e64000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd299f5098 CR3=000000003d0e7000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008220200 Opmask01=0000000001101011 Opmask02=00000000f7dfffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7269762f73656369 7665642f7379732f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 30316270616c2f74 656e2f6c61757472 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d4cc4e481c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055d4cc4cb7e8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe9ee75eb20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 364c08feff0b894c 00000000000080fe ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 ffffffffffffff88 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030316270616c2f 74656e2f6c617574 7269762f73656369 7665642f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000070006003c 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80410004803e0004 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000e002400000000 0008000500000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000070014 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000b 0000000000000000 0000000000000000 0000000000000007 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000