last executing test programs: 2.010133224s ago: executing program 0 (id=1836): bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r3 = dup2(r2, r2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) sendmsg$NL80211_CMD_DISCONNECT(r3, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)={0x30, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x1b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x21}]}, 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r1, &(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000640)=0x80, 0x800) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.960050162s ago: executing program 0 (id=1837): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x3, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000240)={r2, 0x7ff, 0x2, r2}) ioctl$KVM_SET_IRQCHIP(r1, 0xae64, 0x0) ioctl$KVM_SET_PIT2(r1, 0xae71, &(0x7f00000002c0)={[{0x10000, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x100000000000000}, {0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0xfe}]}) r3 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) r4 = dup2(r3, r3) write$tun(r4, 0x0, 0x46) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, 0x0, 0x4008095) setsockopt$inet6_udp_int(r5, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r7}, 0x10) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) r8 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f0000000400)=ANY=[@ANYBLOB="0a000000bbbbbb2000001011ff000000000000000073250000000000000000ff0200000000000000000000000000014f194e2100109078c2050001000000008c6682472e15fc30ac5a3e3a4b163e1b94d19acd229d1d0a318a26b47951ecedc620f14ba2758cf8c6471670e4cc899885"], 0x4a) 1.759938282s ago: executing program 0 (id=1838): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r3 = dup2(r2, r2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000640)=0x80, 0x800) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff08021100"], 0x6f4}}, 0x0) 1.759725982s ago: executing program 0 (id=1839): r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000000, 0x80010, r0, 0x80000000) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000005000000014d564b00000000af"]) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x49, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0x8) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000001500)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f00000003c0)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f00000008c0), 0x4) 1.050116402s ago: executing program 3 (id=1860): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1a, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRES32], &(0x7f00000002c0)='GPL\x00', 0x5, 0xba, &(0x7f00000003c0)=""/186, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080)={0x0, 0xfffffffe, 0x0, 0x8}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) 1.04892427s ago: executing program 3 (id=1861): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000000)={0x8, 0x1, 0x0, "d2ea61bf62041dae026e9e8203614554307c83d774dfc0fb62602f9a84c3bbe4", 0x32315559}) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000400)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x77480}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)={0x100, 0x0, 0x1, 0x5, 0x0, 0x0, {0x0, 0x0, 0x2}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'snmp\x00'}}, @CTA_NAT_DST={0x8c, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_PROTO={0x1c, 0x3, 0x0, 0x1, [@CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x4e22}, @CTA_PROTONAT_PORT_MIN={0x6, 0x1, 0x5257}, @CTA_PROTONAT_PORT_MAX={0x6, 0x2, 0x4e20}]}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @loopback}, @CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MINIP={0x14, 0x4, @remote}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @rand_addr=0x64010102}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast1}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @remote}]}, @CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x66c}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x3}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_NAT_DST={0x4}, @CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x9}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}]}, 0x100}}, 0x40000) (async) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) (async) ioctl$KVM_CHECK_EXTENSION_VM(0xffffffffffffffff, 0xae03, 0xffffffff00000000) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@metacopy_on}]}) (async) r4 = open(&(0x7f0000000140)='./file0\x00', 0x800, 0x70) mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x400, 0x0) chdir(&(0x7f0000000140)='./bus\x00') link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') (async) newfstatat(0xffffffffffffff9c, &(0x7f0000000900)='./file1\x00', &(0x7f0000000940), 0x100) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r5, &(0x7f00000009c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) (async) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r3, 0x5761, &(0x7f0000000040)={0x1, 0x0, [{}]}) (async) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x2c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2=0xe0000001}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x6c}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x44, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x4}]}, 0x44}}, 0x0) 990.132959ms ago: executing program 3 (id=1863): r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, &(0x7f0000000180)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chroot(&(0x7f0000000000)='./bus\x00') openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) 940.013926ms ago: executing program 3 (id=1864): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x250, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x81, 0x7, 0x2}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x250) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB="090000000000000004000000000000000000000002000000040080000e0000000800f40000000000000000000000010000000000060000000000000000000000020000008bc040150500000000000000000000000000000001000000050000000a000000ff7f000008000000fdffffffffffff7f000000000000000000000000010000000300000001000000040000007f0000000000000081000000000000000000000000000000000000c0ff07000003000000ffffffff0600000001000000ff0f000000000000000000000000000006000000000000800a0000000000000000000000000000000800008000000080070000000400000007"]) 849.670231ms ago: executing program 3 (id=1865): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002300)={0x1c, 0x34, 0x107, 0xffffffff, 0xfffffffe, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x149}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) (async) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000000)=0x1) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000040)='configfs\x00', 0x204001, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000d40)={0x0, 0x0, {}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r0) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x800, 0x70bd2b, 0x3, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x80) (async) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)={0x110, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0x7}, @WGDEVICE_A_PEERS={0xe0, 0x8, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x1000}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x39}}}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x30}}}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00', 0x3}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x3c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @loopback}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}]}, 0x110}, 0x1, 0x0, 0x0, 0x4010}, 0x4008020) 849.36097ms ago: executing program 3 (id=1866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="0500000000000000000000000000000300", @ANYRES32, @ANYBLOB="080005"], 0x24}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300042e010203010902120001000000000904"], 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), r3) sendmsg$DEVLINK_CMD_RATE_SET(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)=ANY=[@ANYBLOB="00010054de2ba9790e53c1d914168d8800bf5bb3bd921bf4b6f410ebcf458b9154b5f43b08697d14b252907394a1", @ANYRES16=r4, @ANYBLOB="010000000000000000002a00000008005800020000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030002000000"], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) ioctl$EVIOCRMFF(r1, 0x550c, 0x0) syz_usb_control_io(r2, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000100)="58000000140019234083feff040d8c560a060f0200ff0000000000000020ffff00000000000064009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000200ffffffff", 0x58}], 0x1) sendmsg$nl_generic(r5, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x150, 0x2f, 0x20, 0x70bd29, 0x25dfdbff, {0x13}, [@nested={0x10, 0x42, 0x0, 0x1, [@typed={0x8, 0x9, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xea}]}, @generic="2479ba17759f8e04649f42fa9f2e0da608ea736f8a27ff968015c150545e435217a0affbaea5c42a3bb56b97898360af901526f80c47838d7d0a1d1af5b2465291d6e5609475058f92116453e8d7b3d895a76d139748dcef7eb9842e2c2dc7c1e7e499e584c4be0d1887e4bff57d9fffc762ca78b1bc4798a5b1430198d68a729539181c815fb35252b886c4ebd276e63a691cbd518bb4f047f328e45eb5157ea1f125394e78503324efa5bf6ae890d40335549ddef9e02991302d2de9be523b38d2ea900259f15ec9a5d4e8b08bc12c7c125cc8c89d9192def99cb7744c57a7d6a76b5e8911c3633b8b8f187878c2e27b62b05347", @typed={0x16, 0x75, 0x0, 0x0, @str='/dev/input/event#\x00'}, @generic="8409cb1f583151707947254e09d8d999e0f8c0af2792cde416c1a70331"]}, 0x150}, 0x1, 0x0, 0x0, 0x8004}, 0x24000880) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6000000002060103000000000000000000000004050001000700000013000300686173683a6e65742c696661636500000900020073797a30000000400500040000000000050005000a00000014000780050015000600000008001240"], 0x60}}, 0x0) 789.875309ms ago: executing program 0 (id=1867): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r3 = dup2(r2, r2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000640)=0x80, 0x800) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, 0x0}, 0x0) 789.223417ms ago: executing program 0 (id=1869): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000200)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, 0x8) setsockopt$bt_BT_VOICE(r1, 0x112, 0x13, 0x0, 0x0) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000001c0)={0x18, 0xa, 0x1, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x33363248}) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r5 = syz_usb_connect(0x2, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000544fb2f00090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r5, &(0x7f0000000180)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010a5740000000000000000000000000a48000000170a01080000000000000000020000000900020073797a30000000000900010073797a30"], 0x70}}, 0x24040880) r7 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r7, 0x80284504, &(0x7f0000000040)=""/185) eventfd2(0xffffffff, 0x800) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x6, 'dvmrp1\x00'}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000040)={0x73, @dev={0xac, 0x14, 0x14, 0xfd}, 0x0, 0x2, 'lblcr\x00', 0x10}, 0x2c) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000004800010000000000000000000a008000", @ANYRES32=0x0, @ANYBLOB="000000000800020000000000140001000000000000000000000000000d"], 0x38}}, 0x0) fcntl$setpipe(r4, 0x407, 0x100000) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000900)={'bridge0\x00', @broadcast}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000001ac0)=@ethtool_cmd={0x1c, 0x0, 0x0, 0xfffe, 0x9, 0x0, 0xff, 0xb, 0x0, 0x0, 0x8, 0x0, 0x9, 0x2, 0x0, 0xffffffff, [0x2]}}) 568.61891ms ago: executing program 1 (id=1874): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) mremap(&(0x7f000071a000/0x3000)=nil, 0x3000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000100)=0x4) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x45, 0x0, &(0x7f0000cab000)) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x8cc, 0x24, 0xf0b, 0xfffffffe, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x8a0, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1fd1}, @TCA_TBF_PARMS={0x28, 0x1, {{0x2, 0x0, 0x0, 0xe, 0x9, 0xa}, {0x2, 0x0, 0x3, 0x8, 0x81, 0x803}, 0x5, 0x10, 0x799}}, @TCA_TBF_BURST={0x8, 0x6, 0xfb4}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0xfffc, 0x9, 0x8, 0x5}, {0xd, 0x0, 0x9, 0x1, 0xfb, 0x4}, 0x0, 0x6, 0x1bbf}}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x2, 0x0, 0xd, 0x200, 0x4}, {0x0, 0x2, 0xec, 0xa47, 0x2, 0x1ff}, 0x7, 0x2ea, 0x9fb}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xe5cfedf5df0bfa0b}, @TCA_TBF_RTAB={0x404, 0x2, [0xf5ac, 0x3542, 0x7, 0x4, 0x9, 0x8, 0x6, 0x40, 0x4, 0x2, 0x0, 0x3, 0xa02e, 0x5d8, 0x9, 0x8, 0x9, 0x8, 0x5, 0x9, 0xfffffffc, 0x9, 0xa84, 0x5, 0x1, 0x5, 0x5, 0x4, 0x4, 0xbb8, 0x9f, 0x9, 0x7fffffff, 0x5, 0x0, 0x9, 0x7, 0xffff, 0x4, 0x1, 0xc, 0x13e24434, 0x7, 0xe, 0x1, 0x7, 0x76, 0xf, 0x8, 0x78c, 0xe64, 0x100, 0x7, 0x5, 0xfffffff3, 0x6a0f, 0xc, 0x9549, 0xa, 0x6, 0x8, 0xf155, 0x1, 0x6, 0x5, 0x8, 0x5, 0xee, 0x10000, 0xffffffff, 0x6, 0xe, 0x0, 0x1, 0x7, 0x9, 0x6, 0x0, 0x1, 0x8, 0x7, 0x27e, 0x0, 0xffffffff, 0x8, 0x6, 0x8, 0x8, 0x80000001, 0x2, 0x3, 0x7, 0x9, 0x26, 0x63e4, 0x4, 0xf, 0x6, 0x4, 0x862, 0x81, 0x0, 0x3, 0x0, 0x6, 0x9, 0x1, 0x0, 0x8000, 0x94, 0xfffffffc, 0x0, 0x8, 0xfe610dd, 0x64, 0x6a, 0x2, 0x7fff, 0x9, 0x2, 0x4, 0xea81, 0x80000000, 0x2, 0x1, 0x100, 0x9, 0x100, 0x2, 0x7, 0x8, 0x3, 0x8b, 0x1, 0x4, 0x7, 0x8b3, 0x9, 0x1, 0x7f, 0x6, 0x9, 0x66d6, 0x4, 0x1, 0x7ff, 0xd, 0x3, 0x0, 0x7, 0x2, 0x101, 0x5, 0xa3, 0x1, 0x8, 0x3, 0x4, 0x6, 0x2, 0x0, 0x1, 0x2, 0xa, 0x2, 0x2, 0x8, 0xffffffff, 0x9, 0x9, 0x2, 0x8, 0x4, 0x1, 0x4, 0x0, 0x45, 0x1, 0x0, 0x5, 0xcd, 0x6, 0x6, 0x4, 0x2, 0xd, 0x8, 0x8, 0x3, 0x2, 0x283, 0x335, 0x6, 0x2, 0xfd1b, 0x8000, 0x0, 0xffffffff, 0xfffff000, 0x7, 0x401, 0x4, 0x7, 0x8, 0xea1, 0x8, 0x3, 0x8, 0x4, 0x7, 0x5, 0x4389, 0x7fff, 0x4, 0x7e, 0x1, 0x40, 0x6, 0x6, 0x1, 0x5, 0x6, 0xfffffe00, 0x6, 0x1, 0x7, 0x7, 0xfff, 0x2, 0x401, 0x3, 0xbc7, 0x36cd50ab, 0x0, 0xffffffff, 0x800, 0x2, 0x200, 0x3ff, 0xc3, 0xffffffff, 0x2, 0x3, 0xfde3b2ad, 0x1, 0x6, 0x4, 0xee1, 0x7f, 0x1, 0x0, 0x6, 0xfb, 0x6, 0x5]}, @TCA_TBF_RTAB={0x404, 0x2, [0xe, 0x0, 0xae85, 0x1, 0x10000, 0xee, 0x3, 0x6d, 0x100, 0x3, 0x7, 0x9, 0x7, 0x4, 0x1, 0xb, 0x7, 0x6, 0x1, 0x1, 0x87, 0x9, 0x0, 0x6, 0x3, 0x4, 0x8, 0xf, 0x8, 0x0, 0x0, 0x3, 0xfffffff7, 0x0, 0xb6, 0x7, 0x1, 0x4, 0xc5, 0x9, 0x1, 0x2, 0x7ff, 0x61cf92c0, 0x5, 0xcfe, 0x1, 0x0, 0x56, 0xac0f, 0x1, 0x3, 0x3, 0x1, 0x3, 0xc9, 0x1, 0x321, 0x1, 0x7f, 0x4, 0x40, 0x9, 0x80000000, 0x9, 0x5, 0x8, 0xb, 0xd47, 0x3, 0x8, 0x3, 0xc, 0x1000, 0xffffffff, 0x9, 0x1, 0x9, 0x9, 0x8, 0x2, 0x7fffffff, 0x4, 0x3, 0x3, 0x5, 0x10, 0x1, 0x9, 0xffff, 0xf, 0x4, 0x4, 0x7, 0x3, 0x1caf8060, 0x7, 0x5, 0xc3da, 0x40, 0x6, 0x7, 0xffff8000, 0x3, 0x4, 0x5, 0xbd, 0x2, 0x4, 0x3b89, 0x3, 0x9, 0xffffff7f, 0xfffffffb, 0x7, 0x86, 0x10, 0x7, 0x2, 0x3, 0x4, 0x5, 0x5, 0x1000, 0xa, 0x1ff, 0x7f, 0x0, 0x4, 0xfffffffd, 0x7fff, 0x72, 0xa, 0xfffffc00, 0x100, 0x1, 0x0, 0xf, 0x3e5a, 0x9, 0x800, 0x2, 0xfff, 0x5, 0x5, 0x0, 0x2, 0x9, 0xe81, 0x8, 0x3, 0xb395, 0x401, 0xff, 0x6, 0xb, 0x8, 0x6, 0x1, 0x81, 0x1ff, 0x2, 0x1, 0x1, 0x1, 0x1, 0x5c, 0x6, 0x7, 0x240000, 0x88, 0x6, 0x7, 0xffffffc0, 0x4, 0x5, 0x4, 0x7ff, 0xffff, 0x0, 0xffffffff, 0x0, 0x6, 0x2, 0x221b, 0x0, 0xedb, 0xf, 0x3, 0x9, 0x2, 0x71, 0x2, 0x8, 0x4, 0x3ff, 0x2, 0x4, 0xa, 0x2e87, 0x1, 0x4, 0xa5e, 0x4, 0x7, 0x7, 0x7, 0x2cacb859, 0x1051, 0xbc, 0x5, 0x8, 0x4, 0x100, 0x2, 0x9, 0x401, 0x80, 0x0, 0x6, 0x82, 0x1, 0x50, 0x9, 0xffff, 0xfffffffb, 0x4, 0x7, 0x1, 0x81, 0xffff, 0x81, 0x0, 0x2, 0x0, 0x4, 0x4, 0x6, 0x4, 0x8000, 0x81, 0xfffffffd, 0x10000, 0x0, 0x4, 0x7, 0x1, 0x40, 0x9, 0x3, 0x3, 0x5, 0x800, 0xb30, 0x1, 0xfffffe90]}]}}]}, 0x8cc}, 0x1, 0x0, 0x0, 0x40010}, 0x4000000) 409.964751ms ago: executing program 1 (id=1878): r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) r1 = openat$ndctl0(0xffffffffffffff9c, &(0x7f0000000000), 0x169101, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000180)=@ethtool_ringparam={0x13, 0x0, 0x0, 0xfffffffc, 0x0, 0xfffffffd}}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000040)={0x3, 0x3, 0x2}) 409.524579ms ago: executing program 1 (id=1880): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x801}, 0x4000) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(0xffffffffffffffff, &(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000640)=0x80, 0x800) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 409.416429ms ago: executing program 2 (id=1881): setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x1f0, 0x250, 0x1000000, 0xffffffff, 0x0, 0xffffffff, 0x308, 0xffffffff, 0xffffffff, 0x308, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @private=0xa010100, 0x0, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0x70, 0xa0, 0x0, {0x0, 0x1c8}}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xa, 0x81, 0x7, 0x2}}}, {{@ip={@remote, @rand_addr=0x64010101, 0xff, 0xffffff, 'veth0_vlan\x00', 'vcan0\x00', {}, {0xff}}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x400, 0x7ff, 0x200, 'netbios-ns\x00', {0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x250) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f00000004c0)=ANY=[@ANYBLOB="090000000000000004000000000000000000000002000000040080000e0000000800f40000000000000000000004010000000000060000000000000000000000020000008bc040150500000000000000000000000000000001000000050000000a000000ff7f000008000000fdffffffffffff7f000000000000000000000000010000000300000001000000040000007f0000000000000081000000000000000000000000000000000000c0ff07000003000000ffffffff0600000001000000ff0f000000000000000000000000000006000000000000800a0000000000000000000000000000000800008000000080070000000400000007"]) 350.223653ms ago: executing program 1 (id=1882): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xff, 0x11, 0x7, 0xffffffff, 0x20, "01000000000e65300000001e00000200"}) r1 = syz_open_dev$dri(&(0x7f0000000080), 0xfffffffffffffffc, 0x40) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406441, &(0x7f00000000c0)={0x0, 0x2, 0x10005, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000240)=0x6) ioprio_set$uid(0x3, 0x0, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 350.038503ms ago: executing program 1 (id=1883): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x18, 0x140e, 0x3fca440fc5d735f5, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x4) mount$nfs(&(0x7f0000000080)='@\a', &(0x7f00000000c0)='./file1\x00', &(0x7f0000000500), 0x20040c1, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r4, 0x1, 0x2d, &(0x7f0000000080), 0x4) mount$nfs(&(0x7f0000000000)='@\a', &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x1000000, 0x0) 277.761316ms ago: executing program 1 (id=1884): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)={@multicast, @empty, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @multicast1}, {{0x0, 0x6558, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d8621b", 0x0, "2c17a9"}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x54, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x400300}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @private2}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e24}]}}}]}, 0x54}, 0x1, 0xba01, 0x0, 0x44844}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1a, 0x0, 0x0) r2 = open(&(0x7f0000000100)='.\x00', 0x5d5481, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_IOAS_COPY(r2, 0x3b83, &(0x7f0000000440)={0x28, 0x0, r4, 0x0, 0x9, 0x1, 0x2}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x888e}]}, 0x24}, 0x1, 0x0, 0x0, 0x48000}, 0x40000) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000300)={0x2, 0x9, 0x200, 0x7f, 0x4, "3d9a8df5f68c3c28a7104d53753dcc7a4d1b1e"}) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000000000000100000040000180060001000a00000008000500000000000c000700000000000000000008000900000000000700060064680000080008000000000008000b0073"], 0x54}}, 0x0) r10 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r10, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r11, 0x5b16, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)={0x14, r7, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xc8, r7, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x9}}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x14}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4884}, 0x850) 277.282105ms ago: executing program 2 (id=1885): r0 = socket$kcm(0x29, 0x2, 0x0) open_by_handle_at(r0, &(0x7f00000001c0)=@fuse_with_parent={0x18, 0x82, {{0x1, 0x2, 0x2}, {0x2, 0x1, 0x8}}}, 0x4000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x108200, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x66960000) r3 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$inet6(0xa, 0x5, 0x0) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000017c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r6, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x1c}}, 0x4008040) setsockopt$sock_int(r4, 0x1, 0x3e, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}}, 0x1c) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000480)=""/14, 0xe}, {&(0x7f00000004c0)=""/26, 0x1a}, {&(0x7f0000003a40)=""/4097, 0x1001}, {&(0x7f0000001680)=""/4096, 0x1000}], 0x4) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x10202, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) r8 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r9 = dup(r8) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r8, r10, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, &(0x7f0000000040)="b8000001000f23c80f21f8350c0000000f23f826a0850000000f0176007b0d66baf80cb8bfe3258def66bafc0cb0f0ee66ba610066b8020066ef0f09c4c2b1b85e3636660fe75f0066b81c000f00d0", 0x4f}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r10, 0xae80, 0x0) 119.374741ms ago: executing program 2 (id=1886): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$sr(0xffffffffffffff9c, &(0x7f00000002c0), 0x4000, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x3fe, 0x2) r3 = dup2(r2, r2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000280)={0x0, 0x2, 0x0, "adbdee06009e4aeabde9eefaff7a78cda902552f08cef4a662dd836c7451f8e5"}) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) accept4(r1, &(0x7f00000006c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @dev}}, &(0x7f0000000640)=0x80, 0x800) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 83.767964ms ago: executing program 2 (id=1887): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r0, 0x0, 0xf69}, 0x18) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@bridge_delneigh={0x1c, 0x1c, 0x1, 0x2000002, 0x25dfdbfd, {0x7, 0x0, 0x0, 0x0, 0x2, 0x0, 0x6}}, 0x1c}, 0x1, 0x0, 0x0, 0x20040051}, 0x40c0) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 243.537µs ago: executing program 2 (id=1888): r0 = socket(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) recvmsg$inet_nvme(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x12000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r2, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) 0s ago: executing program 2 (id=1889): r0 = getpid() io_setup(0xfd, &(0x7f0000000080)=0x0) io_pgetevents(r1, 0x0, 0x24, 0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380), 0x8}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) r2 = openat$ttyS3(0xffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000180)=0x13) chdir(&(0x7f00000000c0)='./file0\x00') lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000006c0)) creat(&(0x7f0000000200)='./file0\x00', 0xecf86c37d530494c) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r4, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r5 = dup(r4) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, 0x0, 0x32b, 0x28000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x1000}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) read$FUSE(r6, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004180)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0x0, {0x4, 0x0, 0x200000000e, 0xffff, 0x369, 0x7, 0x4, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000440)={0x50, 0xfffffffffffffffe, r8, {0x7, 0x2b, 0x0, 0x8002008, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1}}, 0x50) write$FUSE_BMAP(r5, &(0x7f0000000100)={0x18, 0x0, r8}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="9d7d4c646e6f3d", @ANYRESHEX=r5, @ANYBLOB=',cache=fscache,k']) truncate(&(0x7f0000000240)='./file0\x00', 0x206b12) creat(&(0x7f0000000080)='./file0\x00', 0x0) r9 = syz_pidfd_open(r0, 0x0) setns(r9, 0x24020000) setreuid(0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) syz_clone(0x498144ee5f62e149, 0x0, 0x17, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 0.362337][ T6383] ERROR: Out of memory at tomoyo_realpath_from_path. [ 60.577847][ T6399] netlink: 20 bytes leftover after parsing attributes in process `syz.2.148'. [ 60.587983][ T6399] netlink: 4 bytes leftover after parsing attributes in process `syz.2.148'. [ 60.684808][ T63] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 60.688126][ T63] Bluetooth: hci3: Injecting HCI hardware error event [ 60.692335][ T5948] Bluetooth: hci3: hardware error 0x00 [ 60.737768][ T6404] overlayfs: failed to resolve './file1': -2 [ 60.923674][ T63] Bluetooth: hci1: command tx timeout [ 61.032557][ T6426] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=45 sclass=netlink_audit_socket pid=6426 comm=syz.3.161 [ 61.139139][ T6437] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 61.141640][ T6441] warning: `syz.3.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 61.142145][ T6437] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 61.154509][ T6437] vhci_hcd vhci_hcd.0: Device attached [ 61.161466][ T6437] vhci_hcd vhci_hcd.0: port 0 already used [ 61.184278][ T6437] sysfs: Unknown parameter '/dev/fuse' [ 61.353877][ T6458] syz.1.171 uses obsolete (PF_INET,SOCK_PACKET) [ 61.362100][ T6458] binder: 6457:6458 ioctl c0306201 200000000640 returned -22 [ 61.382955][ T6439] vhci_hcd: connection closed [ 61.389373][ T12] vhci_hcd: stop threads [ 61.392914][ T12] vhci_hcd: release socket [ 61.395695][ T12] vhci_hcd: disconnect device [ 61.433232][ T10] usb 42-1: enqueue for inactive port 0 [ 61.530527][ T6478] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 61.804323][ T63] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 61.810061][ T63] Bluetooth: hci0: Injecting HCI hardware error event [ 61.813621][ T63] Bluetooth: hci0: hardware error 0x00 [ 61.814895][ T6488] 9pnet_fd: Insufficient options for proto=fd [ 61.832517][ T6488] cgroup: Unknown subsys name 'smackfsroot' [ 61.955708][ T10] usb usb42-port1: attempt power cycle [ 62.170184][ T6510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.191'. [ 62.173980][ T6510] BIDI support in bsg has been removed. [ 62.438202][ T6535] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.442773][ T40] kauditd_printk_skb: 111 callbacks suppressed [ 62.442787][ T40] audit: type=1400 audit(1751569344.761:270): avc: denied { connect } for pid=6533 comm="syz.2.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.516394][ T10] usb usb42-port1: unable to enumerate USB device [ 62.581087][ T6550] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.209'. [ 62.771469][ T5948] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 62.821869][ T40] audit: type=1400 audit(1751569345.141:271): avc: denied { ioctl } for pid=6577 comm="syz.2.222" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4508 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 62.831193][ T40] audit: type=1400 audit(1751569345.151:272): avc: denied { write } for pid=6577 comm="syz.2.222" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 62.974515][ T6595] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.228'. [ 63.073051][ T6603] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.233'. [ 63.265639][ T6612] could not open pipe file descriptor [ 63.623209][ T1468] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 63.662652][ T40] audit: type=1400 audit(1751569345.981:273): avc: denied { setopt } for pid=6627 comm="syz.1.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.727668][ T6629] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.735351][ T40] audit: type=1400 audit(1751569346.061:274): avc: denied { append } for pid=6627 comm="syz.1.244" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.744520][ T40] audit: type=1400 audit(1751569346.061:275): avc: denied { write } for pid=6627 comm="syz.1.244" path="socket:[10940]" dev="sockfs" ino=10940 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.778839][ T1468] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 63.782493][ T1468] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.785915][ T1468] usb 8-1: Product: syz [ 63.787587][ T1468] usb 8-1: Manufacturer: syz [ 63.789424][ T1468] usb 8-1: SerialNumber: syz [ 63.797755][ T1468] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 63.813282][ T40] audit: type=1400 audit(1751569346.131:276): avc: denied { firmware_load } for pid=6097 comm="kworker/3:5" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=313 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 63.822094][ T6097] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 63.893264][ T63] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 63.970299][ T40] audit: type=1400 audit(1751569346.291:277): avc: denied { accept } for pid=6632 comm="syz.2.246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 63.971022][ T6633] tmpfs: Unknown parameter 'usrquota_inodd_hardlimit' [ 63.978754][ T63] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 63.982763][ T6633] netlink: 244 bytes leftover after parsing attributes in process `syz.2.246'. [ 63.985552][ T63] Bluetooth: hci2: Injecting HCI hardware error event [ 63.989737][ T40] audit: type=1400 audit(1751569346.311:278): avc: denied { block_suspend } for pid=6632 comm="syz.2.246" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 63.992733][ T63] Bluetooth: hci2: hardware error 0x00 [ 64.230444][ T54] usb 8-1: USB disconnect, device number 3 [ 64.692600][ T6668] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.261'. [ 64.843171][ T6097] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 64.845877][ T6097] ath9k_htc: Failed to initialize the device [ 64.848599][ T54] usb 8-1: ath9k_htc: USB layer deinitialized [ 65.083319][ T5294] Bluetooth: hci1: command tx timeout [ 65.723294][ T5294] Bluetooth: hci4: command 0x1003 tx timeout [ 65.726049][ T5948] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 65.761728][ T6690] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.270'. [ 65.938471][ T6710] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.280'. [ 66.054314][ T63] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 66.080027][ T40] audit: type=1400 audit(1751569348.401:279): avc: denied { sys_module } for pid=6720 comm="syz.3.285" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 66.877492][ T6754] capability: warning: `syz.2.298' uses 32-bit capabilities (legacy support in use) [ 66.941115][ T6759] netlink: 'syz.2.300': attribute type 1 has an invalid length. [ 66.987206][ T6759] 8021q: adding VLAN 0 to HW filter on device bond2 [ 66.990956][ T6759] bond1: (slave bond2): making interface the new active one [ 66.996760][ T6759] bond1: (slave bond2): Enslaving as an active interface with an up link [ 67.004009][ T6759] netlink: 28 bytes leftover after parsing attributes in process `syz.2.300'. [ 67.011771][ T6759] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.282547][ T6794] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.309'. [ 67.362546][ T6807] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 67.365451][ T6807] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 67.375990][ T6807] vhci_hcd vhci_hcd.0: Device attached [ 67.469950][ T6808] vhci_hcd: connection closed [ 67.470791][ T1238] vhci_hcd: stop threads [ 67.477200][ T1238] vhci_hcd: release socket [ 67.479106][ T1238] vhci_hcd: disconnect device [ 67.522478][ T6824] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.321'. [ 68.073565][ T836] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 68.187703][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 68.187722][ T40] audit: type=1400 audit(1751569350.511:283): avc: denied { ioctl } for pid=6862 comm="syz.2.338" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 68.202519][ T40] audit: type=1400 audit(1751569350.511:284): avc: denied { module_load } for pid=6862 comm="syz.2.338" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2049 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 68.233669][ T836] usb 8-1: Using ep0 maxpacket: 16 [ 68.238976][ T836] usb 8-1: config 1 interface 0 altsetting 15 bulk endpoint 0x82 has invalid maxpacket 1023 [ 68.246734][ T836] usb 8-1: config 1 interface 0 has no altsetting 0 [ 68.252121][ T836] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 68.256551][ T836] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 68.260069][ T836] usb 8-1: Product: 殟鳳㺭ｾ䮃⇅ჼ闏궳莽뵔毂䭬뉧潸օឪ斮 [ 68.265118][ T836] usb 8-1: Manufacturer: 愠୻짪둰廠냈猺ⷰ렁熕ꖊ笶ዲ方瀖翽犪乶霈ど渒պ铍ힸΏ䍺啑僲黀Ỷ똙ꑲᒷ肿ퟸ쳳ﵺ蜍남맙໋鬠玚㋺쏸匬㹡抩ﰼ험튑霃浃쑄ᠵ煟ᖌ좀⧢贻概玏িԟ쇡揀윐䇵ⷬ蛙뢱閮 [ 68.275965][ T836] usb 8-1: SerialNumber: 릭钩ᐎ䯈⊔잣빏쟍答䞠⅓ [ 68.284725][ T6850] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 68.315368][ T6871] 9pnet_virtio: no channels available for device syz [ 68.614152][ T6097] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 68.700379][ T836] usblp 8-1:1.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 15 proto 2 vid 0x0525 pid 0xA4A8 [ 68.706277][ T836] usb 8-1: USB disconnect, device number 4 [ 68.711311][ T836] usblp0: removed [ 68.783708][ T6097] usb 7-1: Using ep0 maxpacket: 8 [ 68.789675][ T6097] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 68.792173][ T6097] usb 7-1: config 0 has no interface number 0 [ 68.794151][ T6097] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 68.797468][ T6097] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 68.800993][ T6097] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 68.804445][ T6097] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 68.807460][ T6097] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 68.811430][ T6097] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 68.814287][ T6097] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.818118][ T6097] usb 7-1: config 0 descriptor?? [ 68.821972][ T6097] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 69.021667][ T6871] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 69.027087][ T6097] usb 7-1: USB disconnect, device number 2 [ 69.030628][ T6097] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 69.240304][ T40] audit: type=1400 audit(1751569351.561:285): avc: denied { mount } for pid=6885 comm="syz.3.347" name="/" dev="ramfs" ino=13497 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 69.249903][ T54] IPVS: starting estimator thread 0... [ 69.333207][ T6887] IPVS: using max 43 ests per chain, 103200 per kthread [ 69.401293][ T6901] netlink: 'syz.3.354': attribute type 4 has an invalid length. [ 69.577235][ T40] audit: type=1400 audit(1751569351.901:286): avc: denied { create } for pid=6899 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.585146][ T40] audit: type=1400 audit(1751569351.901:287): avc: denied { write } for pid=6899 comm="syz.3.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 69.605274][ T6910] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.357'. [ 69.649987][ T6912] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6912 comm=syz.0.358 [ 69.657174][ T40] audit: type=1326 audit(1751569351.981:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6911 comm="syz.0.358" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdbaaf8e929 code=0x0 [ 69.978640][ T40] audit: type=1400 audit(1751569352.301:289): avc: denied { read } for pid=6933 comm="syz.2.366" name="iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.985849][ T40] audit: type=1400 audit(1751569352.301:290): avc: denied { open } for pid=6933 comm="syz.2.366" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.992948][ T40] audit: type=1400 audit(1751569352.301:291): avc: denied { ioctl } for pid=6933 comm="syz.2.366" path="/dev/iommu" dev="devtmpfs" ino=632 ioctlcmd=0x662b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.000936][ T40] audit: type=1400 audit(1751569352.301:292): avc: denied { write } for pid=6933 comm="syz.2.366" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 70.178351][ T6940] netlink: 'syz.1.369': attribute type 1 has an invalid length. [ 70.181030][ T6940] netlink: 224 bytes leftover after parsing attributes in process `syz.1.369'. [ 70.233448][ T836] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 70.386914][ T6954] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 70.393810][ T836] usb 7-1: Using ep0 maxpacket: 8 [ 70.398217][ T836] usb 7-1: config 1 interface 0 has no altsetting 0 [ 70.404076][ T836] usb 7-1: New USB device found, idVendor=06cb, idProduct=2968, bcdDevice= 0.40 [ 70.407581][ T836] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 70.410909][ T836] usb 7-1: Product: syz [ 70.412427][ T836] usb 7-1: Manufacturer: syz [ 70.415875][ T836] usb 7-1: SerialNumber: syz [ 70.451790][ T6959] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.373'. [ 70.808876][ T6989] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.385'. [ 70.835676][ T6934] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.838710][ T6934] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.851134][ T836] usbhid 7-1:1.0: can't add hid device: -71 [ 70.852223][ T6991] netlink: 666 bytes leftover after parsing attributes in process `syz.3.386'. [ 70.853427][ T836] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 70.863914][ T836] usb 7-1: USB disconnect, device number 3 [ 71.088857][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.110496][ T7011] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.394'. [ 71.501676][ T7057] process 'syz.3.412' launched './file0' with NULL argv: empty string added [ 71.675369][ T7090] FAULT_INJECTION: forcing a failure. [ 71.675369][ T7090] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 71.679807][ T7090] CPU: 3 UID: 0 PID: 7090 Comm: syz.2.424 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 71.679822][ T7090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.679829][ T7090] Call Trace: [ 71.679833][ T7090] [ 71.679837][ T7090] dump_stack_lvl+0x16c/0x1f0 [ 71.679873][ T7090] should_fail_ex+0x512/0x640 [ 71.679894][ T7090] _copy_from_user+0x2e/0xd0 [ 71.679912][ T7090] copy_msghdr_from_user+0x98/0x160 [ 71.679928][ T7090] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 71.679949][ T7090] ___sys_sendmsg+0xfe/0x1d0 [ 71.679963][ T7090] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.679977][ T7090] ? __lock_acquire+0x622/0x1c90 [ 71.680007][ T7090] __sys_sendmsg+0x16d/0x220 [ 71.680022][ T7090] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.680041][ T7090] ? fput+0x70/0xf0 [ 71.680059][ T7090] do_syscall_64+0xcd/0x4c0 [ 71.680075][ T7090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.680086][ T7090] RIP: 0033:0x7f2e1ad8e929 [ 71.680095][ T7090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.680105][ T7090] RSP: 002b:00007f2e18bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.680115][ T7090] RAX: ffffffffffffffda RBX: 00007f2e1afb5fa0 RCX: 00007f2e1ad8e929 [ 71.680122][ T7090] RDX: 00000000000400c4 RSI: 0000200000000080 RDI: 0000000000000003 [ 71.680128][ T7090] RBP: 00007f2e18bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 71.680133][ T7090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.680139][ T7090] R13: 0000000000000000 R14: 00007f2e1afb5fa0 R15: 00007ffd6d316a18 [ 71.680151][ T7090] [ 71.930344][ T7114] FAULT_INJECTION: forcing a failure. [ 71.930344][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 71.934495][ T7114] CPU: 3 UID: 0 PID: 7114 Comm: syz.0.434 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 71.934511][ T7114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 71.934517][ T7114] Call Trace: [ 71.934521][ T7114] [ 71.934526][ T7114] dump_stack_lvl+0x16c/0x1f0 [ 71.934561][ T7114] should_fail_ex+0x512/0x640 [ 71.934579][ T7114] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 71.934596][ T7114] should_failslab+0xc2/0x120 [ 71.934646][ T7114] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 71.934666][ T7114] ? __alloc_skb+0x2b2/0x380 [ 71.934712][ T7114] __alloc_skb+0x2b2/0x380 [ 71.934729][ T7114] ? __pfx___alloc_skb+0x10/0x10 [ 71.934745][ T7114] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 71.934758][ T7114] netlink_alloc_large_skb+0x69/0x130 [ 71.934770][ T7114] netlink_sendmsg+0x6a1/0xdd0 [ 71.934783][ T7114] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.934798][ T7114] ____sys_sendmsg+0xa98/0xc70 [ 71.934810][ T7114] ? copy_msghdr_from_user+0x10a/0x160 [ 71.934825][ T7114] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.934849][ T7114] ___sys_sendmsg+0x134/0x1d0 [ 71.934865][ T7114] ? __pfx____sys_sendmsg+0x10/0x10 [ 71.934878][ T7114] ? __lock_acquire+0x622/0x1c90 [ 71.934917][ T7114] __sys_sendmsg+0x16d/0x220 [ 71.934932][ T7114] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.934955][ T7114] do_syscall_64+0xcd/0x4c0 [ 71.934972][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.934983][ T7114] RIP: 0033:0x7fdbaaf8e929 [ 71.934993][ T7114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.935003][ T7114] RSP: 002b:00007fdbabe65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.935013][ T7114] RAX: ffffffffffffffda RBX: 00007fdbab1b5fa0 RCX: 00007fdbaaf8e929 [ 71.935019][ T7114] RDX: 00000000000400c4 RSI: 0000200000000080 RDI: 0000000000000003 [ 71.935026][ T7114] RBP: 00007fdbabe65090 R08: 0000000000000000 R09: 0000000000000000 [ 71.935032][ T7114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.935037][ T7114] R13: 0000000000000000 R14: 00007fdbab1b5fa0 R15: 00007fff4370c008 [ 71.935050][ T7114] [ 72.066326][ T7125] overlayfs: missing 'lowerdir' [ 72.257029][ T7148] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 72.263054][ T7148] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 72.268185][ T7148] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 72.477307][ T7178] FAULT_INJECTION: forcing a failure. [ 72.477307][ T7178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 72.481875][ T7178] CPU: 3 UID: 0 PID: 7178 Comm: syz.3.462 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 72.481890][ T7178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.481897][ T7178] Call Trace: [ 72.481900][ T7178] [ 72.481905][ T7178] dump_stack_lvl+0x16c/0x1f0 [ 72.481923][ T7178] should_fail_ex+0x512/0x640 [ 72.481939][ T7178] _copy_from_iter+0x29f/0x16f0 [ 72.481955][ T7178] ? __alloc_skb+0x200/0x380 [ 72.481969][ T7178] ? __pfx__copy_from_iter+0x10/0x10 [ 72.481983][ T7178] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 72.481998][ T7178] netlink_sendmsg+0x829/0xdd0 [ 72.482010][ T7178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.482024][ T7178] ____sys_sendmsg+0xa98/0xc70 [ 72.482035][ T7178] ? copy_msghdr_from_user+0x10a/0x160 [ 72.482049][ T7178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.482065][ T7178] ___sys_sendmsg+0x134/0x1d0 [ 72.482082][ T7178] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.482095][ T7178] ? __lock_acquire+0x622/0x1c90 [ 72.482126][ T7178] __sys_sendmsg+0x16d/0x220 [ 72.482140][ T7178] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.482161][ T7178] do_syscall_64+0xcd/0x4c0 [ 72.482177][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.482188][ T7178] RIP: 0033:0x7f5c5d18e929 [ 72.482196][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.482206][ T7178] RSP: 002b:00007f5c5df92038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.482215][ T7178] RAX: ffffffffffffffda RBX: 00007f5c5d3b5fa0 RCX: 00007f5c5d18e929 [ 72.482221][ T7178] RDX: 00000000000400c4 RSI: 0000200000000080 RDI: 0000000000000003 [ 72.482227][ T7178] RBP: 00007f5c5df92090 R08: 0000000000000000 R09: 0000000000000000 [ 72.482233][ T7178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.482238][ T7178] R13: 0000000000000000 R14: 00007f5c5d3b5fa0 R15: 00007fffad8257f8 [ 72.482250][ T7178] [ 72.553739][ T7191] netlink: 20 bytes leftover after parsing attributes in process `syz.0.468'. [ 72.731959][ T7214] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.762182][ T7220] all: renamed from lo (while UP) [ 72.798184][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 72.800994][ T7225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.482'. [ 72.943201][ T6861] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 73.084042][ T6861] usb 6-1: device descriptor read/64, error -71 [ 73.323845][ T6861] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 73.411382][ T7262] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.497'. [ 73.453338][ T6861] usb 6-1: device descriptor read/64, error -71 [ 73.530932][ T7276] sp0: Synchronizing with TNC [ 73.549706][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 73.549718][ T40] audit: type=1400 audit(1751569355.871:315): avc: denied { bind } for pid=7274 comm="syz.2.503" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 73.558419][ T40] audit: type=1400 audit(1751569355.871:316): avc: denied { name_bind } for pid=7274 comm="syz.2.503" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 73.565386][ T6861] usb usb6-port1: attempt power cycle [ 73.567503][ T40] audit: type=1400 audit(1751569355.871:317): avc: denied { node_bind } for pid=7274 comm="syz.2.503" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 73.614213][ T40] audit: type=1400 audit(1751569355.941:318): avc: denied { read } for pid=7280 comm="syz.3.506" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.621329][ T40] audit: type=1400 audit(1751569355.941:319): avc: denied { open } for pid=7280 comm="syz.3.506" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 73.683907][ T7287] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.509'. [ 73.865674][ T7301] Cannot find set identified by id 0 to match [ 73.913355][ T6861] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 73.934156][ T6861] usb 6-1: device descriptor read/8, error -71 [ 73.963437][ T63] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 73.967466][ T63] Bluetooth: hci1: Injecting HCI hardware error event [ 73.970894][ T63] Bluetooth: hci1: hardware error 0x00 [ 74.042798][ T7310] overlayfs: failed to resolve './file1': -2 [ 74.049339][ T7310] ipt_REJECT: TCP_RESET invalid for non-tcp [ 74.131611][ T7317] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.521'. [ 74.173273][ T6861] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 74.195137][ T6861] usb 6-1: device descriptor read/8, error -71 [ 74.303651][ T6861] usb usb6-port1: unable to enumerate USB device [ 74.336957][ T7327] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 74.350178][ T40] audit: type=1400 audit(1751569356.671:320): avc: denied { read write } for pid=7326 comm="syz.2.526" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.359692][ T40] audit: type=1400 audit(1751569356.671:321): avc: denied { open } for pid=7326 comm="syz.2.526" path="/dev/rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.373036][ T40] audit: type=1400 audit(1751569356.671:322): avc: denied { ioctl } for pid=7326 comm="syz.2.526" path="/dev/rtc0" dev="devtmpfs" ino=944 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 74.578571][ T5948] Bluetooth: hci1: unexpected Set CIG Parameters response data [ 74.581786][ T5948] Bluetooth: hci1: unexpected event for opcode 0x2062 [ 74.678972][ T7345] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.535'. [ 74.913246][ T40] audit: type=1400 audit(1751569357.231:323): avc: denied { append } for pid=7357 comm="syz.2.541" name="qat_adf_ctl" dev="devtmpfs" ino=1295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 75.026834][ T7366] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.544'. [ 75.411593][ T7385] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.553'. [ 75.641848][ T7393] Bluetooth: MGMT ver 1.23 [ 75.647737][ T40] audit: type=1400 audit(1751569357.971:324): avc: denied { accept } for pid=7392 comm="syz.2.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 75.734829][ T7397] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 75.760295][ T7399] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.560'. [ 76.044011][ T63] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 76.106177][ T7436] hfs: can't find a HFS filesystem on dev sr0 [ 76.367531][ T7474] Cannot find map_set index 0 as target [ 76.376094][ T7474] netlink: 'syz.3.594': attribute type 11 has an invalid length. [ 76.549540][ T7482] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 76.602431][ T7484] netlink: 'syz.3.599': attribute type 1 has an invalid length. [ 77.317944][ T7552] overlay: ./file1 is not a directory [ 77.401841][ T7558] netlink: zone id is out of range [ 77.404520][ T7558] netlink: zone id is out of range [ 77.406710][ T7558] netlink: zone id is out of range [ 77.408852][ T7558] netlink: zone id is out of range [ 77.411027][ T7558] netlink: zone id is out of range [ 77.413453][ T7558] netlink: zone id is out of range [ 77.415626][ T7558] netlink: zone id is out of range [ 77.418071][ T7558] netlink: zone id is out of range [ 77.420370][ T7558] netlink: zone id is out of range [ 77.422728][ T7558] netlink: zone id is out of range [ 77.563170][ T1468] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 77.723177][ T1468] usb 7-1: Using ep0 maxpacket: 8 [ 77.737681][ T1468] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 77.740179][ T1468] usb 7-1: config 0 has no interface number 0 [ 77.749186][ T1468] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 77.755565][ T1468] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 77.763190][ T1468] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 77.767680][ T1468] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 77.771253][ T1468] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 77.777206][ T1468] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 77.780867][ T1468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.789069][ T1468] usb 7-1: config 0 descriptor?? [ 77.807304][ T1468] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 77.994302][ T7547] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 78.023702][ T7583] __nla_validate_parse: 6 callbacks suppressed [ 78.023714][ T7583] netlink: 8 bytes leftover after parsing attributes in process `syz.1.639'. [ 78.025853][ T1468] usb 7-1: USB disconnect, device number 4 [ 78.040411][ T1468] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 78.211463][ T7599] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.215497][ T7599] overlayfs: failed to set xattr on upper [ 78.217316][ T7599] overlayfs: ...falling back to redirect_dir=nofollow. [ 78.219573][ T7599] overlayfs: ...falling back to index=off. [ 78.221682][ T7599] overlayfs: ...falling back to uuid=null. [ 78.254965][ T7604] lo speed is unknown, defaulting to 1000 [ 78.260021][ T7604] lo speed is unknown, defaulting to 1000 [ 78.266083][ T7604] lo speed is unknown, defaulting to 1000 [ 78.325988][ T7607] capability: warning: `syz.1.649' uses deprecated v2 capabilities in a way that may be insecure [ 78.362838][ T7604] infiniband syz0: set active [ 78.365336][ T54] lo speed is unknown, defaulting to 1000 [ 78.365718][ T7604] infiniband syz0: added lo [ 78.391835][ T7604] RDS/IB: syz0: added [ 78.393701][ T7604] smc: adding ib device syz0 with port count 1 [ 78.395795][ T7604] smc: ib device syz0 port 1 has pnetid [ 78.398715][ T6468] lo speed is unknown, defaulting to 1000 [ 78.402069][ T7604] lo speed is unknown, defaulting to 1000 [ 78.432794][ T7611] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 78.484743][ T7604] lo speed is unknown, defaulting to 1000 [ 78.570321][ T7604] lo speed is unknown, defaulting to 1000 [ 78.676451][ T7604] lo speed is unknown, defaulting to 1000 [ 78.900011][ T7620] trusted_key: syz.2.654 sent an empty control message without MSG_MORE. [ 78.993647][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 78.993658][ T40] audit: type=1400 audit(1751569361.321:341): avc: denied { read } for pid=7624 comm="syz.1.656" lport=48819 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.120338][ T40] audit: type=1400 audit(1751569361.441:342): avc: denied { unmount } for pid=5932 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 79.164115][ T7635] overlay: ./file1 is not a directory [ 79.192929][ T40] audit: type=1400 audit(1751569361.511:343): avc: denied { setopt } for pid=7636 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 79.207593][ T7637] 8021q: adding VLAN 0 to HW filter on device bond1 [ 79.213923][ T7637] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=7637 comm=syz.3.661 [ 79.423285][ T54] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.573494][ T54] usb 6-1: Using ep0 maxpacket: 8 [ 79.577375][ T54] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 79.580474][ T54] usb 6-1: config 0 has no interface number 0 [ 79.582624][ T54] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 79.588603][ T54] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 79.592221][ T54] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 79.596671][ T54] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 79.600310][ T54] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 79.604749][ T54] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 79.607904][ T54] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.612762][ T54] usb 6-1: config 0 descriptor?? [ 79.617477][ T54] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 79.722478][ T40] audit: type=1400 audit(1751569362.041:344): avc: denied { connect } for pid=7659 comm="syz.2.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 79.724889][ T7660] sch_tbf: burst 4395 is lower than device lo mtu (65550) ! [ 79.817309][ T7632] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 79.821628][ T1468] usb 6-1: USB disconnect, device number 6 [ 79.828927][ T1468] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 79.843401][ T40] audit: type=1400 audit(1751569362.171:345): avc: denied { ioctl } for pid=7667 comm="syz.2.674" path="socket:[18937]" dev="sockfs" ino=18937 ioctlcmd=0x7210 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.851286][ T40] audit: type=1400 audit(1751569362.171:346): avc: denied { read } for pid=7667 comm="syz.2.674" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 79.907770][ T7676] i2c i2c-1: Invalid block write size 34 [ 79.910653][ T7678] i2c i2c-1: Invalid block write size 34 [ 80.067158][ T1468] hid-generic 0000:0004:0009.0002: unknown main item tag 0x0 [ 80.068103][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 80.069953][ T1468] hid-generic 0000:0004:0009.0002: unknown main item tag 0x0 [ 80.075931][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz.3.681'. [ 80.080090][ T1468] hid-generic 0000:0004:0009.0002: hidraw1: HID v0.04 Device [syz0] on syz1 [ 80.119954][ T7689] fido_id[7689]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 80.173886][ T6468] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 80.323596][ T6468] usb 7-1: Using ep0 maxpacket: 8 [ 80.326424][ T6468] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 80.329043][ T6468] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 80.332176][ T6468] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 80.336201][ T6468] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 80.340137][ T6468] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 80.344060][ T6468] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 80.347200][ T6468] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.496953][ T40] audit: type=1400 audit(1751569362.821:347): avc: denied { create } for pid=7692 comm="syz.1.683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 80.541327][ T40] audit: type=1400 audit(1751569362.861:348): avc: denied { getopt } for pid=7697 comm="syz.1.684" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 80.556494][ T6468] usb 7-1: usb_control_msg returned -32 [ 80.558367][ T6468] usbtmc 7-1:16.0: can't read capabilities [ 80.789189][ T7712] netlink: 16 bytes leftover after parsing attributes in process `syz.3.689'. [ 80.914609][ T40] audit: type=1400 audit(1751569363.231:349): avc: denied { write } for pid=7679 comm="syz.2.678" name="usbtmc0" dev="devtmpfs" ino=2874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 80.920017][ T7682] usbtmc 7-1:16.0: CHECK_CLEAR_STATUS returned 9 [ 80.938858][ T1468] usb 7-1: USB disconnect, device number 5 [ 81.200715][ T7746] netlink: 'syz.3.701': attribute type 21 has an invalid length. [ 81.204522][ T7746] netlink: 128 bytes leftover after parsing attributes in process `syz.3.701'. [ 81.209223][ T7746] netlink: 'syz.3.701': attribute type 4 has an invalid length. [ 81.212483][ T7746] netlink: 'syz.3.701': attribute type 5 has an invalid length. [ 81.216111][ T7746] netlink: 3 bytes leftover after parsing attributes in process `syz.3.701'. [ 81.314152][ T7759] netlink: 4 bytes leftover after parsing attributes in process `syz.3.708'. [ 81.320818][ T7759] ieee802154 phy1 wpan1: encryption failed: -22 [ 81.325125][ T40] audit: type=1400 audit(1751569363.641:350): avc: denied { write } for pid=7758 comm="syz.3.708" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 81.329275][ T3229] cfg80211: failed to load regulatory.db [ 81.355499][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 81.356270][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz.1.709'. [ 81.598219][ T7789] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 81.713358][ T1468] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 81.720869][ T7799] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.724'. [ 81.865432][ T1468] usb 6-1: Using ep0 maxpacket: 32 [ 81.872977][ T1468] usb 6-1: unable to get BOS descriptor or descriptor too short [ 81.880772][ T1468] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 81.895856][ T1468] usb 6-1: can't read configurations, error -71 [ 81.920904][ T7826] tipc: Started in network mode [ 81.923340][ T7826] tipc: Node identity 2, cluster identity 4711 [ 81.926510][ T7826] tipc: Node number set to 2 [ 82.323379][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 82.473207][ T29] usb 5-1: Using ep0 maxpacket: 32 [ 82.524063][ T7838] "syz.1.739" (7838) uses obsolete ecb(arc4) skcipher [ 82.812391][ T7864] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 83.102847][ T7886] : entered promiscuous mode [ 83.221813][ T7896] bridge0: entered promiscuous mode [ 83.225890][ T7896] macsec1: entered promiscuous mode [ 83.229413][ T7896] bridge0: port 3(macsec1) entered blocking state [ 83.232204][ T7896] bridge0: port 3(macsec1) entered disabled state [ 83.235187][ T7896] macsec1: entered allmulticast mode [ 83.237627][ T7896] bridge0: entered allmulticast mode [ 83.242627][ T7896] macsec1: left allmulticast mode [ 83.249233][ T7896] bridge0: left allmulticast mode [ 83.252461][ T7896] bridge0: left promiscuous mode [ 83.477395][ T7913] mmap: syz.1.768 (7913) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 83.905844][ T7931] __nla_validate_parse: 2 callbacks suppressed [ 83.905858][ T7931] netlink: 36 bytes leftover after parsing attributes in process `syz.3.776'. [ 84.084924][ T7939] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.780'. [ 84.302103][ T40] kauditd_printk_skb: 5 callbacks suppressed [ 84.302114][ T40] audit: type=1400 audit(1751569366.621:356): avc: denied { ioctl } for pid=7951 comm="syz.3.785" path="socket:[21530]" dev="sockfs" ino=21530 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.311935][ T40] audit: type=1400 audit(1751569366.621:357): avc: denied { connect } for pid=7951 comm="syz.3.785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 84.438095][ T7964] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.789'. [ 84.601800][ T40] audit: type=1400 audit(1751569366.921:358): avc: denied { create } for pid=7957 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.621302][ T40] audit: type=1400 audit(1751569366.941:359): avc: denied { getopt } for pid=7957 comm="syz.3.788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 84.634266][ T7965] fuse: Bad value for 'fd' [ 84.988183][ T29] usb 5-1: unable to get BOS descriptor or descriptor too short [ 84.993761][ T29] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 84.996383][ T29] usb 5-1: can't read configurations, error -71 [ 99.734530][ T7992] netlink: 20 bytes leftover after parsing attributes in process `syz.0.793'. [ 99.739972][ T40] audit: type=1400 audit(1751569382.061:360): avc: denied { ioctl } for pid=7987 comm="syz.0.793" path="socket:[21569]" dev="sockfs" ino=21569 ioctlcmd=0x943d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 99.757537][ T7989] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 99.760490][ T7989] overlayfs: failed to set xattr on upper [ 99.762657][ T7989] overlayfs: ...falling back to redirect_dir=nofollow. [ 99.764885][ T7989] overlayfs: ...falling back to index=off. [ 99.766814][ T7989] overlayfs: ...falling back to uuid=null. [ 99.771852][ T7989] fuse: Bad value for 'fd' [ 99.793870][ T40] audit: type=1400 audit(1751569382.111:361): avc: denied { connect } for pid=7998 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 99.799946][ T40] audit: type=1400 audit(1751569382.111:362): avc: denied { create } for pid=7998 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 99.803072][ T7999] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.798'. [ 99.809929][ T40] audit: type=1400 audit(1751569382.111:363): avc: denied { ioctl } for pid=7998 comm="syz.2.797" path="socket:[20587]" dev="sockfs" ino=20587 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 99.818343][ T40] audit: type=1400 audit(1751569382.111:364): avc: denied { connect } for pid=7998 comm="syz.2.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 99.847131][ T8005] netlink: 100 bytes leftover after parsing attributes in process `syz.3.800'. [ 99.848001][ T40] audit: type=1400 audit(1751569382.171:365): avc: denied { nlmsg_read } for pid=8004 comm="syz.3.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 99.919691][ T8016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=8016 comm=syz.0.804 [ 99.925571][ T8016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=8016 comm=syz.0.804 [ 99.929533][ T40] audit: type=1400 audit(1751569382.251:366): avc: denied { connect } for pid=8014 comm="syz.1.805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 99.929961][ T8016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=8016 comm=syz.0.804 [ 99.953438][ T8016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=8016 comm=syz.0.804 [ 99.957446][ T8016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=8016 comm=syz.0.804 [ 99.961580][ T8016] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=8016 comm=syz.0.804 [ 99.984330][ T8016] bond0: entered promiscuous mode [ 99.986333][ T8016] bond_slave_0: entered promiscuous mode [ 99.988276][ T8016] bond_slave_1: entered promiscuous mode [ 99.991161][ T8016] batadv0: entered promiscuous mode [ 99.994679][ T8016] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 100.000854][ T8016] bond0: left promiscuous mode [ 100.003316][ T8016] bond_slave_0: left promiscuous mode [ 100.006338][ T8016] bond_slave_1: left promiscuous mode [ 100.011128][ T8016] batadv0: left promiscuous mode [ 100.045068][ T8030] netlink: 8 bytes leftover after parsing attributes in process `syz.2.810'. [ 100.077005][ T8030] netlink: 'syz.2.810': attribute type 1 has an invalid length. [ 100.081292][ T8030] netlink: 12 bytes leftover after parsing attributes in process `syz.2.810'. [ 100.088185][ T8034] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.811'. [ 100.198032][ T40] audit: type=1400 audit(1751569382.521:367): avc: denied { name_connect } for pid=8045 comm="syz.0.816" dest=256 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 100.228024][ T40] audit: type=1400 audit(1751569382.551:368): avc: denied { write } for pid=8049 comm="syz.0.818" name="wireless" dev="proc" ino=4026533311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 100.237323][ T8050] netlink: 12 bytes leftover after parsing attributes in process `syz.0.818'. [ 100.335914][ T8055] netlink: 'syz.2.820': attribute type 11 has an invalid length. [ 100.413794][ T29] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 100.418921][ T40] audit: type=1400 audit(1751569382.741:369): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 100.489069][ T8066] netlink: 'syz.0.824': attribute type 1 has an invalid length. [ 100.491612][ T8066] netlink: 168864 bytes leftover after parsing attributes in process `syz.0.824'. [ 100.565465][ T8074] netlink: 40 bytes leftover after parsing attributes in process `syz.0.828'. [ 100.581878][ T8074] netlink: 32 bytes leftover after parsing attributes in process `syz.0.828'. [ 100.586555][ T8075] netlink: 'syz.2.829': attribute type 72 has an invalid length. [ 100.593508][ T29] usb 6-1: Using ep0 maxpacket: 16 [ 100.596746][ T29] usb 6-1: config 0 has an invalid interface number: 8 but max is 0 [ 100.599912][ T29] usb 6-1: config 0 has no interface number 0 [ 100.602142][ T29] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.606651][ T29] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 100.611282][ T29] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 100.614605][ T29] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 100.617380][ T29] usb 6-1: Product: syz [ 100.618876][ T29] usb 6-1: SerialNumber: syz [ 100.622027][ T29] usb 6-1: config 0 descriptor?? [ 100.626785][ T29] cm109 6-1:0.8: invalid payload size 0, expected 4 [ 100.630077][ T29] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.8/input/input7 [ 100.810628][ T8087] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.828396][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 101.022309][ T8119] tipc: Can't bind to reserved service type 2 [ 101.054748][ T8119] kvm: emulating exchange as write [ 101.190506][ T8129] sp0: Synchronizing with TNC [ 101.206997][ C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 101.207233][ T1468] usb 6-1: USB disconnect, device number 9 [ 101.209185][ C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 101.217875][ T1468] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 101.286244][ T8141] vivid-001: ================= START STATUS ================= [ 101.288792][ T8141] vivid-001: Radio HW Seek Mode: Bounded [ 101.290618][ T8141] vivid-001: Radio Programmable HW Seek: false [ 101.292548][ T8141] vivid-001: RDS Rx I/O Mode: Block I/O [ 101.295376][ T8141] vivid-001: Generate RBDS Instead of RDS: false [ 101.297560][ T8141] vivid-001: RDS Reception: true [ 101.299153][ T8141] vivid-001: RDS Program Type: 0 inactive [ 101.300932][ T8141] vivid-001: RDS PS Name: inactive [ 101.302571][ T8141] vivid-001: RDS Radio Text: inactive [ 101.305928][ T8141] vivid-001: RDS Traffic Announcement: false inactive [ 101.308059][ T8141] vivid-001: RDS Traffic Program: false inactive [ 101.310024][ T8141] vivid-001: RDS Music: false inactive [ 101.311754][ T8141] vivid-001: ================== END STATUS ================== [ 101.358015][ T8146] loop7: detected capacity change from 0 to 16384 [ 101.404352][ T8145] loop7: detected capacity change from 16384 to 16383 [ 101.448730][ T8145] loop7: unable to read partition table [ 101.450722][ T8145] loop_reread_partitions: partition scan of loop7 (\v{wݚ}Iz`.^LCHlZMK8/#h#ÿǖ) failed (rc=-5) [ 101.581685][ T8162] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 101.686559][ T8179] binder: BINDER_SET_CONTEXT_MGR already set [ 101.688985][ T8179] binder: 8178:8179 ioctl 4018620d 2000000000c0 returned -16 [ 101.691668][ T8179] binder: BINDER_SET_CONTEXT_MGR already set [ 101.694102][ T8179] binder: 8178:8179 ioctl 4018620d 2000000000c0 returned -16 [ 101.826012][ T8180] /dev/sr0: Can't open blockdev [ 101.872750][ T8198] xt_CT: No such helper "pptp" [ 101.950284][ T8213] @: renamed from vlan0 (while UP) [ 101.953793][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.960079][ T8212] delete_channel: no stack [ 102.072975][ T8222] netlink: 'syz.1.887': attribute type 1 has an invalid length. [ 102.488592][ T8264] netlink: 'syz.0.906': attribute type 1 has an invalid length. [ 102.895582][ T8222] overlayfs: statfs failed on './file0' [ 103.098082][ T8324] tmpfs: Unknown parameter 'BgD-lceinode32' [ 103.612012][ T8384] syz.3.956: attempt to access beyond end of device [ 103.612012][ T8384] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 103.616664][ T8384] exFAT-fs (nbd3): unable to read boot sector [ 103.619785][ T8384] exFAT-fs (nbd3): failed to read boot sector [ 103.622150][ T8384] exFAT-fs (nbd3): failed to recognize exfat type [ 104.169896][ T8412] tmpfs: Bad value for 'mpol' [ 104.357381][ T8433] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 104.367011][ T8433] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 104.367878][ T8431] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 104.489193][ T8454] program syz.1.989 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.499727][ T8454] "syz.1.989" (8454) uses obsolete ecb(arc4) skcipher [ 104.507321][ T8458] FAULT_INJECTION: forcing a failure. [ 104.507321][ T8458] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.512097][ T8458] CPU: 2 UID: 0 PID: 8458 Comm: syz.3.991 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 104.512120][ T8458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.512130][ T8458] Call Trace: [ 104.512136][ T8458] [ 104.512146][ T8458] dump_stack_lvl+0x16c/0x1f0 [ 104.512191][ T8458] should_fail_ex+0x512/0x640 [ 104.512220][ T8458] _copy_to_user+0x32/0xd0 [ 104.512244][ T8458] simple_read_from_buffer+0xcb/0x170 [ 104.512267][ T8458] proc_fail_nth_read+0x197/0x270 [ 104.512287][ T8458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.512321][ T8458] ? rw_verify_area+0xcf/0x680 [ 104.512340][ T8458] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 104.512359][ T8458] vfs_read+0x1e4/0xc60 [ 104.512382][ T8458] ? __pfx___mutex_lock+0x10/0x10 [ 104.512405][ T8458] ? __pfx_vfs_read+0x10/0x10 [ 104.512430][ T8458] ? __fget_files+0x20e/0x3c0 [ 104.512458][ T8458] ksys_read+0x12a/0x250 [ 104.512476][ T8458] ? __pfx_ksys_read+0x10/0x10 [ 104.512496][ T8458] ? fput+0x70/0xf0 [ 104.512526][ T8458] do_syscall_64+0xcd/0x4c0 [ 104.512551][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.512567][ T8458] RIP: 0033:0x7f5c5d18d33c [ 104.512580][ T8458] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 104.512595][ T8458] RSP: 002b:00007f5c5df92030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 104.512610][ T8458] RAX: ffffffffffffffda RBX: 00007f5c5d3b5fa0 RCX: 00007f5c5d18d33c [ 104.512620][ T8458] RDX: 000000000000000f RSI: 00007f5c5df920a0 RDI: 0000000000000004 [ 104.512629][ T8458] RBP: 00007f5c5df92090 R08: 0000000000000000 R09: 0000000000000000 [ 104.512638][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.512647][ T8458] R13: 0000000000000000 R14: 00007f5c5d3b5fa0 R15: 00007fffad8257f8 [ 104.512668][ T8458] [ 104.804942][ T8492] __nla_validate_parse: 12 callbacks suppressed [ 104.804953][ T8492] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.1005'. [ 104.856383][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 104.856395][ T40] audit: type=1804 audit(1751569387.181:400): pid=8500 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1009" name="/newroot/301/bus/bus" dev="overlay" ino=1572 res=1 errno=0 [ 104.860462][ C0] net_ratelimit: 402 callbacks suppressed [ 104.860472][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 104.871518][ T8496] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 104.874037][ T8496] netlink: 228 bytes leftover after parsing attributes in process `syz.3.1007'. [ 104.877869][ T8500] evm: overlay not supported [ 104.894077][ T8496] netlink: 'syz.3.1007': attribute type 1 has an invalid length. [ 104.951266][ T8509] lo speed is unknown, defaulting to 1000 [ 104.958833][ T40] audit: type=1400 audit(1751569387.281:401): avc: denied { setopt } for pid=8486 comm="syz.0.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.961547][ T8487] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1003'. [ 104.999762][ T8516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65304 sclass=netlink_route_socket pid=8516 comm=syz.3.1015 [ 105.006362][ T8516] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65304 sclass=netlink_route_socket pid=8516 comm=syz.3.1015 [ 105.014263][ T40] audit: type=1400 audit(1751569387.331:402): avc: denied { write } for pid=8514 comm="syz.3.1015" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 105.112711][ T40] audit: type=1400 audit(1751569387.431:403): avc: denied { getopt } for pid=8517 comm="syz.3.1016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.142495][ T8522] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8522 comm=syz.1.1012 [ 105.239848][ T8530] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1019'. [ 105.299646][ T8528] netlink: 'syz.3.1020': attribute type 1 has an invalid length. [ 105.315890][ T8528] bond2: entered promiscuous mode [ 105.318377][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 105.373672][ T8528] 8021q: adding VLAN 0 to HW filter on device bond3 [ 105.377024][ T8528] bond2: (slave bond3): making interface the new active one [ 105.379512][ T8528] bond3: entered promiscuous mode [ 105.382035][ T8528] bond2: (slave bond3): Enslaving as an active interface with an up link [ 105.668554][ T8556] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 105.736421][ T40] audit: type=1400 audit(1751569388.061:404): avc: denied { read } for pid=8567 comm="syz.2.1032" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 105.764408][ T40] audit: type=1400 audit(1751569388.061:405): avc: denied { create } for pid=8567 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 105.770807][ T40] audit: type=1400 audit(1751569388.061:406): avc: denied { write } for pid=8567 comm="syz.2.1032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.087424][ T40] audit: type=1400 audit(1751569388.411:407): avc: denied { map } for pid=8593 comm="syz.2.1045" path="socket:[24021]" dev="sockfs" ino=24021 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 106.211628][ T40] audit: type=1400 audit(1751569388.531:408): avc: denied { ioctl } for pid=8600 comm="syz.2.1048" path="socket:[23342]" dev="sockfs" ino=23342 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.217405][ T8601] input: syz1 as /devices/virtual/input/input8 [ 106.251672][ T8601] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 106.262943][ T8601] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 106.496080][ T8621] ufs: You didn't specify the type of your ufs filesystem [ 106.496080][ T8621] [ 106.496080][ T8621] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 106.496080][ T8621] [ 106.496080][ T8621] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 106.507579][ T8621] ufs: failed to set blocksize [ 106.992224][ T8639] netlink: 'syz.2.1065': attribute type 21 has an invalid length. [ 106.995836][ T8639] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1065'. [ 107.248261][ T40] audit: type=1400 audit(1751569389.571:409): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 107.295581][ T8664] syz.1.1076(8664): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 107.419534][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1081'. [ 107.466039][ T8688] netlink: 'syz.0.1086': attribute type 1 has an invalid length. [ 107.479745][ T8688] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.558212][ T8688] bond2: (slave gretap1): making interface the new active one [ 107.561529][ T8688] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 107.622307][ T8688] bond2 (unregistering): (slave gretap1): Releasing active interface [ 107.626509][ T8688] bond2 (unregistering): Released all slaves [ 107.643392][ T63] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 107.643626][ T5948] Bluetooth: hci4: command 0x1003 tx timeout [ 107.803521][ T3229] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 107.843944][ T8713] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1095'. [ 107.921199][ T8718] Bluetooth: MGMT ver 1.23 [ 107.974379][ T3229] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 107.978368][ T3229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.981575][ T3229] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 107.985385][ T3229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 107.988416][ T3229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 107.991566][ T3229] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.001631][ T3229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 108.004847][ T3229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.007620][ T3229] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.011100][ T3229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 108.014018][ T3229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.016875][ T3229] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.020236][ T3229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 108.023465][ T3229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.026582][ T3229] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.030038][ T3229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 108.033067][ T3229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.036462][ T3229] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.039806][ T3229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 108.042711][ T3229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.046355][ T3229] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.049970][ T3229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 108.053163][ T3229] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 108.056099][ T3229] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 108.059504][ T3229] usb 7-1: config 0 interface 0 has no altsetting 0 [ 108.063186][ T3229] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 108.066223][ T3229] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 108.069522][ T3229] usb 7-1: Product: syz [ 108.071230][ T3229] usb 7-1: Manufacturer: syz [ 108.072955][ T3229] usb 7-1: SerialNumber: syz [ 108.076624][ T3229] usb 7-1: config 0 descriptor?? [ 108.083353][ T3229] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 108.288123][ T8734] xt_CT: You must specify a L4 protocol and not use inversions on it [ 108.440187][ T8743] SELinux: failed to load policy [ 108.457363][ C2] usb 7-1: yurex_control_callback - control failed: -71 [ 108.457515][ T72] usb 7-1: USB disconnect, device number 6 [ 108.461624][ T8738] yurex 7-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 108.465696][ T72] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 108.541302][ T8748] syzkaller1: entered promiscuous mode [ 108.543220][ T8748] syzkaller1: entered allmulticast mode [ 108.833698][ T8766] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1116'. [ 108.885313][ T8768] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1118'. [ 108.968145][ T8781] netlink: 'syz.3.1123': attribute type 10 has an invalid length. [ 108.979134][ T8781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.984693][ T8781] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 108.988746][ T8781] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.991110][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.995068][ T8781] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.997567][ T8781] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.015409][ T8781] bond0: (slave batadv0): Releasing backup interface [ 109.027767][ T8787] netlink: 'syz.0.1126': attribute type 1 has an invalid length. [ 109.030415][ T8787] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 109.176629][ T8796] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1129'. [ 109.252695][ T8802] netlink: 'syz.1.1133': attribute type 9 has an invalid length. [ 109.255815][ T8802] netlink: 'syz.1.1133': attribute type 7 has an invalid length. [ 109.258653][ T8802] netlink: 'syz.1.1133': attribute type 8 has an invalid length. [ 109.284533][ T8802] lo speed is unknown, defaulting to 1000 [ 109.393919][ T8817] bond_slave_1: Device is already in use. [ 109.891837][ T8852] overlay: ./file1 is not a directory [ 110.090765][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 110.090777][ T40] audit: type=1400 audit(1751569392.411:426): avc: denied { watch watch_reads } for pid=8865 comm="syz.1.1154" path="/267" dev="tmpfs" ino=1407 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 110.091215][ T8868] overlayfs: failed to clone upperpath [ 110.133601][ T6097] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 110.283230][ T6097] usb 5-1: Using ep0 maxpacket: 8 [ 110.288155][ T6097] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 110.290887][ T6097] usb 5-1: config 0 has no interface number 0 [ 110.293303][ T6097] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 110.297123][ T6097] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 110.300891][ T6097] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 110.306216][ T6097] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 110.309396][ T6097] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 110.314030][ T6097] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 110.317080][ T6097] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.321839][ T6097] usb 5-1: config 0 descriptor?? [ 110.331366][ T6097] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 110.531342][ T8851] ldusb 5-1:0.55: Couldn't submit interrupt_in_urb -90 [ 110.544461][ T6097] usb 5-1: USB disconnect, device number 4 [ 110.548062][ T8878] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=14 sclass=netlink_tcpdiag_socket pid=8878 comm=syz.3.1158 [ 110.563576][ T6097] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 110.608352][ T8883] 9pnet_virtio: no channels available for device syz [ 110.929371][ T8910] __nla_validate_parse: 1 callbacks suppressed [ 110.929382][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1169'. [ 111.135873][ T40] audit: type=1400 audit(1751569393.461:427): avc: denied { getopt } for pid=8917 comm="syz.1.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 111.263201][ T40] audit: type=1400 audit(1751569393.581:428): avc: denied { mount } for pid=8926 comm="syz.0.1172" name="/" dev="hugetlbfs" ino=25975 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 111.331458][ T8943] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1181'. [ 111.374647][ T40] audit: type=1400 audit(1751569393.701:429): avc: denied { unmount } for pid=5930 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 111.490245][ T40] audit: type=1400 audit(1751569393.811:430): avc: denied { ioctl } for pid=8951 comm="syz.0.1185" path="/dev/usbmon0" dev="devtmpfs" ino=737 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 111.502409][ T40] audit: type=1400 audit(1751569393.811:431): avc: denied { read } for pid=8951 comm="syz.0.1185" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 111.600247][ T40] audit: type=1400 audit(1751569393.921:432): avc: denied { write } for pid=8959 comm="syz.3.1188" name="renderD128" dev="devtmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 111.769810][ T8984] fuse: Unknown parameter 'rOotmode' [ 111.789599][ T40] audit: type=1400 audit(1751569394.111:433): avc: denied { execstack } for pid=8983 comm="syz.3.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 111.901342][ T8999] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.034153][ T9014] futex_wake_op: syz.0.1211 tries to shift op by -1; fix this program [ 112.071653][ T9017] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1212'. [ 112.281965][ T40] audit: type=1326 audit(1751569394.601:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9036 comm="syz.3.1220" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c5d18e929 code=0x0 [ 112.372253][ T9056] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 112.387983][ T9056] 8021q: adding VLAN 0 to HW filter on device bond1 [ 112.399448][ T9056] bond1: (slave gretap1): making interface the new active one [ 112.405898][ T9056] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 112.471781][ T40] audit: type=1400 audit(1751569394.791:435): avc: denied { write } for pid=9064 comm="syz.1.1228" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 112.817275][ T9095] tmpfs: Unknown parameter 'usrquotaNusrquota_inode_hardlimit' [ 112.824292][ T9091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1239'. [ 113.162110][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 113.168830][ T9128] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1253'. [ 113.215924][ T9139] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=9139 comm=syz.1.1256 [ 113.588149][ T9182] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1273'. [ 113.591067][ T9182] bridge_slave_1: left allmulticast mode [ 113.592828][ T9182] bridge_slave_1: left promiscuous mode [ 113.594998][ T9182] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.611634][ T9182] bridge_slave_0: left allmulticast mode [ 113.614420][ T9182] bridge_slave_0: left promiscuous mode [ 113.618890][ T9182] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.785224][ T9196] input: syz1 as /devices/virtual/input/input11 [ 113.967998][ T9210] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.1282'. [ 114.028937][ T9214] syz.3.1283: attempt to access beyond end of device [ 114.028937][ T9214] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 114.039496][ T9214] FAT-fs (loop3): unable to read boot sector [ 114.531480][ T9247] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on [ 114.567944][ T9253] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1289'. [ 114.573540][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1289'. [ 114.835594][ T9293] team0: entered promiscuous mode [ 114.837953][ T9293] team_slave_0: entered promiscuous mode [ 114.840932][ T9293] team_slave_1: entered promiscuous mode [ 114.845560][ T9303] bad cache= option: none [ 114.845560][ T9303] [ 114.846859][ T9293] batadv_slave_1: entered promiscuous mode [ 114.848165][ T9303] CIFS: VFS: bad cache= option: none [ 114.995397][ T9316] 9pnet: Found fid 0 not clunked [ 115.149538][ T9337] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd [ 115.218581][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 115.218602][ T40] audit: type=1400 audit(1751569397.541:446): avc: denied { map } for pid=9345 comm="syz.0.1316" path="/dev/rfkill" dev="devtmpfs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1 [ 115.368118][ T40] audit: type=1400 audit(1751569397.691:447): avc: denied { accept } for pid=9358 comm="syz.3.1322" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 115.449610][ T9371] befs: (nullb0): No write support. Marking filesystem read-only [ 115.452388][ T9371] befs: (nullb0): invalid magic header [ 115.466315][ T40] audit: type=1400 audit(1751569397.791:448): avc: denied { listen } for pid=9370 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.474736][ T40] audit: type=1400 audit(1751569397.801:449): avc: denied { accept } for pid=9370 comm="syz.3.1327" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.710567][ T9406] input: syz1 as /devices/virtual/input/input12 [ 115.734347][ T40] audit: type=1400 audit(1751569398.061:450): avc: denied { ioctl } for pid=9400 comm="syz.3.1337" path="socket:[26538]" dev="sockfs" ino=26538 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 115.873805][ T9434] input: syz1 as /devices/virtual/input/input13 [ 115.888350][ T9436] netlink: 'syz.0.1348': attribute type 10 has an invalid length. [ 115.896266][ T9436] hsr_slave_0: left promiscuous mode [ 115.898575][ T9436] hsr_slave_1: left promiscuous mode [ 115.899509][ T9440] xt_hashlimit: size too large, truncated to 1048576 [ 115.929439][ T40] audit: type=1400 audit(1751569398.251:451): avc: denied { ioctl } for pid=9441 comm="syz.2.1351" path="socket:[26586]" dev="sockfs" ino=26586 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.941294][ T40] audit: type=1400 audit(1751569398.261:452): avc: denied { bind } for pid=9441 comm="syz.2.1351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 115.953515][ T9446] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 116.085457][ T9463] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=33279 sclass=netlink_route_socket pid=9463 comm=syz.3.1358 [ 116.130896][ T40] audit: type=1400 audit(1751569398.451:453): avc: denied { write } for pid=9469 comm="syz.1.1360" lport=39207 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.133841][ T9472] veth0: entered promiscuous mode [ 116.142996][ T40] audit: type=1400 audit(1751569398.451:454): avc: denied { bind } for pid=9469 comm="syz.1.1360" lport=39207 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 116.149979][ T9471] veth0: left promiscuous mode [ 116.153715][ T40] audit: type=1400 audit(1751569398.451:455): avc: denied { node_bind } for pid=9469 comm="syz.1.1360" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 116.200121][ T9476] __nla_validate_parse: 2 callbacks suppressed [ 116.200138][ T9476] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1362'. [ 116.721332][ T9491] loop9: detected capacity change from 0 to 8 [ 116.737233][ T9491] loop9: [CUMANA/ADFS] p1 [ADFS] p1 [ 116.739573][ T9491] loop9: partition table partially beyond EOD, truncated [ 116.746475][ T9491] loop9: p1 size 81768186 extends beyond EOD, truncated [ 117.240649][ T9501] input: syz1 as /devices/virtual/input/input14 [ 117.254970][ T9501] FAULT_INJECTION: forcing a failure. [ 117.254970][ T9501] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 117.259880][ T9501] CPU: 1 UID: 0 PID: 9501 Comm: syz.3.1373 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 117.259906][ T9501] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 117.259916][ T9501] Call Trace: [ 117.259923][ T9501] [ 117.259931][ T9501] dump_stack_lvl+0x16c/0x1f0 [ 117.259966][ T9501] should_fail_ex+0x512/0x640 [ 117.259996][ T9501] _copy_to_user+0x32/0xd0 [ 117.260024][ T9501] simple_read_from_buffer+0xcb/0x170 [ 117.260052][ T9501] proc_fail_nth_read+0x197/0x270 [ 117.260073][ T9501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.260097][ T9501] ? rw_verify_area+0xcf/0x680 [ 117.260116][ T9501] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 117.260137][ T9501] vfs_read+0x1e4/0xc60 [ 117.260162][ T9501] ? __pfx___mutex_lock+0x10/0x10 [ 117.260185][ T9501] ? __pfx_vfs_read+0x10/0x10 [ 117.260203][ T9501] ? __fget_files+0x20e/0x3c0 [ 117.260222][ T9501] ksys_read+0x12a/0x250 [ 117.260235][ T9501] ? __pfx_ksys_read+0x10/0x10 [ 117.260253][ T9501] do_syscall_64+0xcd/0x4c0 [ 117.260270][ T9501] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.260282][ T9501] RIP: 0033:0x7f5c5d18d33c [ 117.260294][ T9501] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 117.260306][ T9501] RSP: 002b:00007f5c5df92030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 117.260317][ T9501] RAX: ffffffffffffffda RBX: 00007f5c5d3b5fa0 RCX: 00007f5c5d18d33c [ 117.260324][ T9501] RDX: 000000000000000f RSI: 00007f5c5df920a0 RDI: 0000000000000004 [ 117.260330][ T9501] RBP: 00007f5c5df92090 R08: 0000000000000000 R09: 0000000000000000 [ 117.260337][ T9501] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.260343][ T9501] R13: 0000000000000000 R14: 00007f5c5d3b5fa0 R15: 00007fffad8257f8 [ 117.260371][ T9501] [ 117.357739][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1375'. [ 117.361614][ T9508] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1375'. [ 117.369269][ T9508] program syz.2.1375 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.376448][ T9503] IPVS: persistence engine module ip_vs_pe_s not found [ 117.452918][ T9523] @: renamed from bond_slave_0 (while UP) [ 117.466111][ T9520] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1381'. [ 117.528970][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1383'. [ 117.552485][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 117.557497][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 117.562416][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 117.564416][ T9521] kvm_intel: kvm [9518]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x1d9) = 0x1 [ 117.567135][ T9533] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1385'. [ 117.571096][ T9521] kvm_intel: kvm [9518]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x1d9) = 0x1 [ 117.890620][ T9550] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1392'. [ 117.962357][ T9556] netlink: 'syz.0.1394': attribute type 1 has an invalid length. [ 117.980778][ T9556] bond3: entered promiscuous mode [ 117.982815][ T9556] 8021q: adding VLAN 0 to HW filter on device bond3 [ 119.300059][ T9626] xt_CT: You must specify a L4 protocol and not use inversions on it [ 119.400317][ T54] lo speed is unknown, defaulting to 1000 [ 119.400366][ T54] syz0: Port: 1 Link DOWN [ 119.401034][ T54] lo speed is unknown, defaulting to 1000 [ 119.402382][ T9645] netlink: 'syz.1.1430': attribute type 4 has an invalid length. [ 119.404939][ T34] lo speed is unknown, defaulting to 1000 [ 119.404956][ T34] syz0: Port: 1 Link ACTIVE [ 119.405010][ T34] lo speed is unknown, defaulting to 1000 [ 119.407815][ T9649] binder: 9647:9649 ioctl c018620c 200000000300 returned -1 [ 119.585164][ T9668] overlay: ./file1 is not a directory [ 119.598275][ T9671] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 119.667459][ T9678] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9678 comm=syz.2.1441 [ 119.796997][ T9684] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 119.833232][ T6097] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 119.862821][ T9683] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 119.983209][ T6097] usb 8-1: Using ep0 maxpacket: 8 [ 119.987114][ T6097] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 119.990642][ T6097] usb 8-1: config 0 has no interface number 0 [ 119.993355][ T6097] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 119.998797][ T6097] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 120.003825][ T6097] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 120.008226][ T6097] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 120.012066][ T6097] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 120.018317][ T6097] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 120.022166][ T6097] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.029535][ T6097] usb 8-1: config 0 descriptor?? [ 120.038496][ T6097] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 120.239139][ T9659] ldusb 8-1:0.55: Couldn't submit interrupt_in_urb -90 [ 120.248139][ T6468] usb 8-1: USB disconnect, device number 5 [ 120.256924][ T6468] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 120.528783][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 120.528795][ T40] audit: type=1400 audit(1751569402.851:479): avc: denied { accept } for pid=9721 comm="syz.2.1457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 120.538604][ T40] audit: type=1400 audit(1751569402.851:480): avc: denied { view } for pid=9721 comm="syz.2.1457" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 120.539321][ T9722] input: syz1 as /devices/virtual/input/input15 [ 120.736390][ T9740] openvswitch: netlink: IPv6 tunnel dst address is zero [ 120.790319][ T9740] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 120.862266][ T40] audit: type=1400 audit(1751569403.181:481): avc: denied { bind } for pid=9754 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 120.873424][ T40] audit: type=1400 audit(1751569403.191:482): avc: denied { accept } for pid=9754 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.881994][ T40] audit: type=1400 audit(1751569403.191:483): avc: denied { read } for pid=9754 comm="syz.3.1468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 120.989781][ T9761] xt_CONNSECMARK: invalid mode: 0 [ 121.143373][ T40] audit: type=1400 audit(1751569403.461:484): avc: denied { create } for pid=9779 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 121.151720][ T40] audit: type=1400 audit(1751569403.461:485): avc: denied { setopt } for pid=9779 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 121.160878][ T40] audit: type=1400 audit(1751569403.461:486): avc: denied { write } for pid=9779 comm="syz.1.1481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 121.188268][ T9788] usb usb8: usbfs: process 9788 (syz.3.1483) did not claim interface 0 before use [ 121.357719][ T9811] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9811 comm=syz.3.1492 [ 121.367302][ T9808] __nla_validate_parse: 14 callbacks suppressed [ 121.367313][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 121.372404][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1491'. [ 121.381454][ T9814] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1493'. [ 121.452740][ T9808] netlink: 'syz.0.1491': attribute type 10 has an invalid length. [ 121.473486][ T54] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 121.493247][ T9820] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1495'. [ 121.502437][ T9827] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1497'. [ 121.509622][ T9827] netlink: 196 bytes leftover after parsing attributes in process `syz.0.1497'. [ 121.512532][ T9827] netlink: 19 bytes leftover after parsing attributes in process `syz.0.1497'. [ 121.546833][ T40] audit: type=1400 audit(1751569403.871:487): avc: denied { read write } for pid=9831 comm="syz.0.1499" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.553962][ T40] audit: type=1400 audit(1751569403.871:488): avc: denied { open } for pid=9831 comm="syz.0.1499" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 121.594325][ T9839] input: syz1 as /devices/virtual/input/input16 [ 121.623339][ T54] usb 7-1: Using ep0 maxpacket: 32 [ 121.628762][ T54] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 121.632273][ T54] usb 7-1: config 0 has no interface number 0 [ 121.637148][ T54] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 121.640182][ T54] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.643736][ T54] usb 7-1: Product: syz [ 121.645181][ T54] usb 7-1: Manufacturer: syz [ 121.646997][ T54] usb 7-1: SerialNumber: syz [ 121.651141][ T54] usb 7-1: config 0 descriptor?? [ 121.656211][ T54] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 121.659164][ T54] usb 7-1: selecting invalid altsetting 1 [ 121.661524][ T54] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 121.668546][ T54] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 121.673543][ T54] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 121.676636][ T54] usb 7-1: media controller created [ 121.691150][ T54] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 121.831116][ T9853] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1506'. [ 122.075565][ T9856] netlink: 'syz.1.1507': attribute type 2 has an invalid length. [ 122.653590][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1514'. [ 122.694024][ T9874] netlink: 14212 bytes leftover after parsing attributes in process `syz.1.1515'. [ 122.765812][ T54] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 122.769183][ T54] zl10353_read_register: readreg error (reg=127, ret==-110) [ 122.784651][ T9880] IPVS: Error joining to the multicast group [ 122.793940][ T9792] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 122.806887][ T54] usb 7-1: USB disconnect, device number 7 [ 123.391940][ T9930] IPv6: NLM_F_REPLACE set, but no existing node found! [ 123.913227][ T34] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 124.064055][ T34] usb 8-1: Using ep0 maxpacket: 32 [ 124.068054][ T34] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 124.074874][ T34] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 124.077835][ T34] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 124.080491][ T34] usb 8-1: Product: syz [ 124.081890][ T34] usb 8-1: Manufacturer: syz [ 124.083527][ T34] usb 8-1: SerialNumber: syz [ 124.086702][ T34] usb 8-1: config 0 descriptor?? [ 124.088996][ T9951] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 124.219766][ T9966] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9966 comm=syz.2.1548 [ 124.349114][ T29] usb 8-1: USB disconnect, device number 6 [ 124.429048][ T9993] overlayfs: missing 'lowerdir' [ 124.561574][ T9951] netlink: 'syz.3.1544': attribute type 6 has an invalid length. [ 124.565763][ T9951] netlink: 'syz.3.1544': attribute type 5 has an invalid length. [ 124.568911][ T9951] netlink: 'syz.3.1544': attribute type 4 has an invalid length. [ 124.603875][T10007] overlayfs: conflicting options: nfs_export=on,index=off [ 124.884483][T10032] SELinux: ebitmap: truncated map [ 124.895853][T10032] SELinux: failed to load policy [ 124.940789][T10037] lo speed is unknown, defaulting to 1000 [ 125.021975][T10051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 125.038437][T10051] loop6: detected capacity change from 0 to 524287487 [ 125.041714][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.044625][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.047392][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.049893][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.052676][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.055749][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.058361][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.061483][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.064471][ T7985] ldm_validate_partition_table(): Disk read failed. [ 125.067201][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.070351][ T7985] Buffer I/O error on dev loop6, logical block 0, async page read [ 125.072969][ T7985] Dev loop6: unable to read RDB block 0 [ 125.075727][ T7985] loop6: unable to read partition table [ 125.079590][T10051] ldm_validate_partition_table(): Disk read failed. [ 125.083527][T10051] Dev loop6: unable to read RDB block 0 [ 125.086626][T10051] loop6: unable to read partition table [ 125.089976][T10051] loop_reread_partitions: partition scan of loop6 (3 xC) failed (rc=-5) [ 125.147961][T10051] input: syz1 as /devices/virtual/input/input17 [ 125.163997][T10057] loop6: detected capacity change from 524287487 to 524288 [ 125.180177][ T5344] udevd[5344]: worker [7985] terminated by signal 33 (Unknown signal 33) [ 125.182940][ T5344] udevd[5344]: worker [7985] failed while handling '/devices/virtual/block/loop6' [ 125.301872][T10070] xt_cluster: node mask cannot exceed total number of nodes [ 125.440353][T10091] overlayfs: failed to resolve './file0': -2 [ 125.518269][T10106] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 125.520361][T10106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.523603][T10106] vhci_hcd vhci_hcd.0: Device attached [ 125.526051][T10107] vhci_hcd: unknown pdu 1 [ 125.530639][ T1145] vhci_hcd: stop threads [ 125.532184][ T1145] vhci_hcd: release socket [ 125.532295][T10106] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 125.535824][T10106] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 125.538482][ T1145] vhci_hcd: disconnect device [ 125.538749][T10106] vhci_hcd vhci_hcd.0: Device attached [ 125.554811][T10112] vhci_hcd: connection closed [ 125.555726][ T1140] vhci_hcd: stop threads [ 125.558902][ T1140] vhci_hcd: release socket [ 125.560914][ T1140] vhci_hcd: disconnect device [ 125.561389][T10120] netlink: 'syz.2.1593': attribute type 10 has an invalid length. [ 125.588547][T10123] lo speed is unknown, defaulting to 1000 [ 125.654146][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 125.654158][ T40] audit: type=1400 audit(1751569407.971:501): avc: denied { audit_control } for pid=10132 comm="syz.2.1601" capability=30 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 125.754099][T10149] mkiss: ax0: crc mode is auto. [ 125.873289][ T54] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 126.033254][ T54] usb 5-1: Using ep0 maxpacket: 32 [ 126.036106][ T54] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 126.038772][ T54] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 126.042064][ T54] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 126.046164][ T54] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 126.050528][ T54] usb 5-1: config 0 interface 0 has no altsetting 0 [ 126.054963][ T54] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 126.057983][ T54] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 126.060756][ T54] usb 5-1: Product: syz [ 126.062143][ T54] usb 5-1: Manufacturer: syz [ 126.063887][ T54] usb 5-1: SerialNumber: syz [ 126.074036][ T54] usb 5-1: config 0 descriptor?? [ 126.078278][ T54] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 126.084665][ T54] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 126.339626][ T54] usb 5-1: USB disconnect, device number 5 [ 126.340732][ C3] ldusb 5-1:0.0: usb_submit_urb failed (-19) [ 126.344470][ T54] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 126.577159][T10179] __nla_validate_parse: 18 callbacks suppressed [ 126.577176][T10179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1617'. [ 126.585740][T10179] macsec0: entered promiscuous mode [ 126.848012][T10205] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.850984][T10205] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.853787][T10205] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.856540][T10205] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.947523][T10213] Cannot find set identified by id 2 to match [ 127.042027][ T40] audit: type=1400 audit(1751569409.361:502): avc: denied { nlmsg_read } for pid=10222 comm="syz.1.1632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 127.042565][T10223] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1632'. [ 127.066691][ T40] audit: type=1400 audit(1751569409.391:503): avc: denied { ioctl } for pid=10224 comm="syz.2.1633" path="socket:[30590]" dev="sockfs" ino=30590 ioctlcmd=0xf50c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 127.069863][T10225] input: syz1 as /devices/virtual/input/input18 [ 127.222351][ T40] audit: type=1400 audit(1751569409.541:504): avc: denied { read } for pid=10237 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 127.366312][T10250] overlayfs: failed to clone upperpath [ 127.573802][ T40] audit: type=1400 audit(1751569409.901:505): avc: denied { lock } for pid=10251 comm="syz.3.1643" path="socket:[32855]" dev="sockfs" ino=32855 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 127.940596][T10264] use of bytesused == 0 is deprecated and will be removed in the future, [ 127.945336][T10264] use the actual size instead. [ 127.974995][T10269] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 128.110553][T10284] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1655'. [ 128.117634][T10285] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1656'. [ 128.162794][T10290] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1658'. [ 128.163133][ T40] audit: type=1400 audit(1751569410.481:506): avc: denied { ioctl } for pid=10286 comm="syz.2.1657" path="/dev/fb1" dev="devtmpfs" ino=640 ioctlcmd=0x4611 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 128.284244][T10300] Cannot find set identified by id 0 to match [ 128.289442][ T40] audit: type=1400 audit(1751569410.611:507): avc: denied { connect } for pid=10294 comm="syz.2.1660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 128.296153][ T40] audit: type=1400 audit(1751569410.611:508): avc: denied { create } for pid=10294 comm="syz.2.1660" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 128.304441][ T40] audit: type=1400 audit(1751569410.611:509): avc: denied { listen } for pid=10294 comm="syz.2.1660" lport=164 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 128.320267][T10303] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1663'. [ 128.327463][T10303] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 128.415680][ T40] audit: type=1400 audit(1751569410.741:510): avc: denied { read } for pid=10310 comm="syz.3.1668" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 128.428694][T10309] netlink: 'syz.2.1666': attribute type 1 has an invalid length. [ 128.458720][T10311] x_tables: duplicate underflow at hook 2 [ 128.495844][T10316] IPVS: Unknown mcast interface: nicvf0 [ 128.602149][T10327] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.1672'. [ 128.680855][T10338] syz.3.1676: attempt to access beyond end of device [ 128.680855][T10338] loop3: rw=0, sector=1, nr_sectors = 1 limit=0 [ 128.686196][T10338] qnx4: unable to read the superblock [ 128.692704][T10339] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 128.701635][T10339] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1677'. [ 128.705689][T10339] Illegal XDP return value 16128 on prog (id 136) dev syz_tun, expect packet loss! [ 128.719963][T10342] geneve2: entered promiscuous mode [ 128.785797][T10350] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 128.811094][T10354] netlink: 1624 bytes leftover after parsing attributes in process `syz.1.1684'. [ 128.883885][T10361] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 128.919291][T10362] bond0: entered promiscuous mode [ 128.921569][T10362] @: entered promiscuous mode [ 128.924072][T10362] bond_slave_1: entered promiscuous mode [ 128.926452][T10362] bond0: entered allmulticast mode [ 128.928102][T10362] @: entered allmulticast mode [ 128.930267][T10362] bond_slave_1: entered allmulticast mode [ 128.937368][T10364] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1688'. [ 128.944849][T10364] /dev/nbd1: Can't lookup blockdev [ 129.005589][ T72] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 129.053945][T10371] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.163302][ T72] usb 5-1: Using ep0 maxpacket: 8 [ 129.169730][ T72] usb 5-1: config 0 has an invalid interface number: 186 but max is 0 [ 129.172380][ T72] usb 5-1: config 0 has no interface number 0 [ 129.174956][ T72] usb 5-1: config 0 interface 186 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 129.178550][ T72] usb 5-1: config 0 interface 186 altsetting 0 has an endpoint descriptor with address 0x9A, changing to 0x8A [ 129.182206][ T72] usb 5-1: config 0 interface 186 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 129.187725][ T72] usb 5-1: config 0 interface 186 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 129.194894][ T72] usb 5-1: New USB device found, idVendor=07c0, idProduct=1505, bcdDevice=b8.c5 [ 129.198600][ T72] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.201886][ T72] usb 5-1: Product: syz [ 129.204316][ T72] usb 5-1: Manufacturer: syz [ 129.206307][ T72] usb 5-1: SerialNumber: syz [ 129.210453][ T72] usb 5-1: config 0 descriptor?? [ 129.367497][T10385] 9pnet_fd: Insufficient options for proto=fd [ 129.417326][ T72] iowarrior 5-1:0.186: IOWarrior product=0x1505, serial=42424242 interface=186 now attached to iowarrior0 [ 129.626910][T10407] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 129.694669][T10413] xt_hashlimit: size too large, truncated to 1048576 [ 129.783144][ T72] usb 5-1: USB disconnect, device number 6 [ 129.807778][T10423] netlink: 'syz.1.1711': attribute type 2 has an invalid length. [ 129.888839][T10432] macsec2: entered promiscuous mode [ 129.890526][T10432] bridge0: entered promiscuous mode [ 129.984687][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 130.135148][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 130.138936][ T29] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 130.142100][ T29] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 130.148337][ T29] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 130.151654][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.155872][ T29] usb 8-1: Product: syz [ 130.157257][ T29] usb 8-1: Manufacturer: syz [ 130.158745][ T29] usb 8-1: SerialNumber: syz [ 130.197989][T10461] overlayfs: failed to clone upperpath [ 130.302906][T10469] x_tables: ip_tables: udp match: only valid for protocol 17 [ 130.370855][ T29] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 130.637051][T10506] lo: entered promiscuous mode [ 130.641567][ T6468] lo speed is unknown, defaulting to 1000 [ 130.643650][ T6468] syz0: Port: 1 Link DOWN [ 130.645279][ T6468] lo speed is unknown, defaulting to 1000 [ 130.712307][T10515] syz.0.1739: attempt to access beyond end of device [ 130.712307][T10515] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 130.717540][T10515] exFAT-fs (loop0): unable to read boot sector [ 130.720052][T10515] exFAT-fs (loop0): failed to read boot sector [ 130.722449][T10515] exFAT-fs (loop0): failed to recognize exfat type [ 130.750190][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 130.750201][ T40] audit: type=1400 audit(1751569413.071:532): avc: denied { read } for pid=10519 comm="syz.0.1742" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.793935][ T40] audit: type=1400 audit(1751569413.121:533): avc: denied { shutdown } for pid=10525 comm="syz.0.1743" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 130.837324][T10529] openvswitch: netlink: Missing key (keys=100040, expected=80) [ 130.924870][ T40] audit: type=1400 audit(1751569413.251:534): avc: denied { ioctl } for pid=10416 comm="syz.3.1709" path="/dev/usb/lp0" dev="devtmpfs" ino=2953 ioctlcmd=0x60b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 130.926634][T10535] usblp0:failed reading printer status (-32) [ 130.938714][ T29] usb 8-1: USB disconnect, device number 7 [ 130.942139][ T29] usblp0: removed [ 131.347911][ T40] audit: type=1400 audit(1751569413.671:535): avc: denied { firmware_load } for pid=10537 comm="syz.1.1747" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 131.537851][ T24] hid-generic 0004:0111:44E4.0003: reserved main item tag 0xd [ 131.542264][ T24] hid-generic 0004:0111:44E4.0003: item fetching failed at offset 2/10 [ 131.545464][ T24] hid-generic 0004:0111:44E4.0003: probe with driver hid-generic failed with error -22 [ 131.746915][T10562] __nla_validate_parse: 12 callbacks suppressed [ 131.746926][T10562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1755'. [ 131.773305][ T6097] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 131.784041][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1757'. [ 131.787291][T10568] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1757'. [ 131.809585][ T40] audit: type=1400 audit(1751569414.131:536): avc: denied { ioctl } for pid=10569 comm="syz.3.1758" path="socket:[34298]" dev="sockfs" ino=34298 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 131.873301][T10539] syz.1.1747 (10539) used greatest stack depth: 18728 bytes left [ 131.923366][ T6097] usb 7-1: Using ep0 maxpacket: 8 [ 131.926648][ T6097] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 131.930590][ T6097] usb 7-1: config 0 has no interface number 0 [ 131.932532][ T6097] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.942168][ T6097] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 131.949529][ T6097] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.953031][ T6097] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 131.953441][T10589] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1763'. [ 131.972014][ T6097] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 131.981682][ T6097] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 131.987563][ T6097] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.994285][ T6097] usb 7-1: config 0 descriptor?? [ 131.999802][ T6097] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 132.062885][ T40] audit: type=1400 audit(1751569414.381:537): avc: denied { map } for pid=10600 comm="syz.3.1766" path="socket:[34317]" dev="sockfs" ino=34317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.079365][ T40] audit: type=1400 audit(1751569414.381:538): avc: denied { read accept } for pid=10600 comm="syz.3.1766" path="socket:[34317]" dev="sockfs" ino=34317 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 132.198358][T10550] ldusb 7-1:0.55: Couldn't submit interrupt_in_urb -90 [ 132.202574][ T6097] usb 7-1: USB disconnect, device number 8 [ 132.206042][ T6097] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 132.525742][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.938413][T10625] sch_tbf: burst 4395 is lower than device lo mtu (11337746) ! [ 132.964450][T10625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1773'. [ 132.967979][T10625] gre0: entered promiscuous mode [ 132.978609][T10625] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=16687 sclass=netlink_route_socket pid=10625 comm=syz.1.1773 [ 133.098687][ T40] audit: type=1400 audit(1751569415.421:539): avc: denied { getopt } for pid=10642 comm="syz.3.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 133.234187][ T40] audit: type=1400 audit(1751569415.561:540): avc: denied { map } for pid=10650 comm="syz.2.1784" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.246766][ T40] audit: type=1400 audit(1751569415.561:541): avc: denied { execute } for pid=10650 comm="syz.2.1784" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 133.262631][T10651] tipc: Enabling of bearer rejected, failed to enable media [ 133.349430][T10670] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1792'. [ 133.503694][T10684] team0: default FDB implementation only supports local addresses [ 133.508870][T10684] binder: BINDER_SET_CONTEXT_MGR already set [ 133.511477][T10684] binder: 10683:10684 ioctl 4018620d 200000000040 returned -16 [ 133.528049][T10677] 9pnet_fd: Insufficient options for proto=fd [ 133.596396][T10689] program syz.0.1799 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 133.703038][T10697] virtio-fs: tag not found [ 133.868003][T10705] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1804'. [ 133.900637][T10707] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1805'. [ 133.904072][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1805'. [ 133.907251][T10707] tipc: MTU too low for tipc bearer [ 133.910168][T10707] netlink: 'syz.2.1805': attribute type 12 has an invalid length. [ 133.912733][T10707] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1805'. [ 134.026845][T10711] syzkaller0: entered promiscuous mode [ 134.026863][T10711] syzkaller0: entered allmulticast mode [ 135.052683][T10713] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 135.141477][T10734] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.144420][T10734] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.147247][T10734] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.150370][T10734] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 135.159036][T10734] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.160575][T10738] netlink: 'syz.2.1814': attribute type 72 has an invalid length. [ 135.161906][T10734] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.167452][T10734] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.170920][T10734] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 135.200278][T10741] Bluetooth: MGMT ver 1.23 [ 135.323944][T10767] netlink: 'syz.1.1824': attribute type 1 has an invalid length. [ 135.341823][T10762] usb usb3: check_ctrlrecip: process 10762 (syz.2.1822) requesting ep 01 but needs 81 [ 135.345366][T10762] usb usb3: usbfs: process 10762 (syz.2.1822) did not claim interface 0 before use [ 135.370562][T10771] overlayfs: conflicting options: userxattr,metacopy=on [ 135.432701][T10778] syz.2.1826: vmalloc error: size 3335753728, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 135.438571][T10778] CPU: 2 UID: 0 PID: 10778 Comm: syz.2.1826 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 135.438588][T10778] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.438595][T10778] Call Trace: [ 135.438599][T10778] [ 135.438604][T10778] dump_stack_lvl+0x16c/0x1f0 [ 135.438640][T10778] warn_alloc+0x248/0x3a0 [ 135.438656][T10778] ? __pfx_warn_alloc+0x10/0x10 [ 135.438669][T10778] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 135.438684][T10778] ? stack_depot_save_flags+0x3e0/0xa40 [ 135.438706][T10778] ? kasan_save_stack+0x42/0x60 [ 135.438718][T10778] ? kasan_save_stack+0x33/0x60 [ 135.438730][T10778] ? kasan_save_track+0x14/0x30 [ 135.438742][T10778] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 135.438752][T10778] ? __vb2_queue_alloc+0x8c6/0x1280 [ 135.438768][T10778] ? vb2_core_create_bufs+0x559/0xab0 [ 135.438785][T10778] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.438796][T10778] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 135.438813][T10778] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.438827][T10778] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 135.438843][T10778] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.438853][T10778] vmalloc_user_noprof+0x9e/0xe0 [ 135.438863][T10778] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 135.438874][T10778] vb2_vmalloc_alloc+0x135/0x3f0 [ 135.438885][T10778] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 135.438895][T10778] __vb2_queue_alloc+0x8c6/0x1280 [ 135.438917][T10778] vb2_core_create_bufs+0x559/0xab0 [ 135.438935][T10778] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 135.438951][T10778] ? __pfx___mutex_trylock_common+0x10/0x10 [ 135.438969][T10778] ? __pfx___might_resched+0x10/0x10 [ 135.438983][T10778] ? rcu_is_watching+0x12/0xc0 [ 135.438998][T10778] vb2_create_bufs+0x5e8/0x840 [ 135.439015][T10778] ? __pfx_vb2_create_bufs+0x10/0x10 [ 135.439030][T10778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.439043][T10778] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 135.439057][T10778] v4l_create_bufs+0x159/0x270 [ 135.439069][T10778] __video_do_ioctl+0xb40/0xfc0 [ 135.439084][T10778] ? __might_fault+0xe3/0x190 [ 135.439096][T10778] ? __pfx___video_do_ioctl+0x10/0x10 [ 135.439114][T10778] video_usercopy+0x4d0/0x1720 [ 135.439128][T10778] ? __pfx___video_do_ioctl+0x10/0x10 [ 135.439140][T10778] ? selinux_kernel_read_file+0xe0/0x130 [ 135.439155][T10778] ? __pfx_video_usercopy+0x10/0x10 [ 135.439177][T10778] v4l2_ioctl+0x1ba/0x250 [ 135.439189][T10778] ? __pfx_v4l2_ioctl+0x10/0x10 [ 135.439202][T10778] __x64_sys_ioctl+0x18b/0x210 [ 135.439215][T10778] do_syscall_64+0xcd/0x4c0 [ 135.439231][T10778] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.439242][T10778] RIP: 0033:0x7f2e1ad8e929 [ 135.439252][T10778] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.439262][T10778] RSP: 002b:00007f2e18bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 135.439272][T10778] RAX: ffffffffffffffda RBX: 00007f2e1afb5fa0 RCX: 00007f2e1ad8e929 [ 135.439279][T10778] RDX: 0000200000000040 RSI: 00000000c100565c RDI: 0000000000000006 [ 135.439285][T10778] RBP: 00007f2e1ae10b39 R08: 0000000000000000 R09: 0000000000000000 [ 135.439297][T10778] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 135.439304][T10778] R13: 0000000000000000 R14: 00007f2e1afb5fa0 R15: 00007ffd6d316a18 [ 135.439318][T10778] [ 135.439323][T10778] Mem-Info: [ 135.543944][T10778] active_anon:14935 inactive_anon:18602 isolated_anon:0 [ 135.543944][T10778] active_file:4865 inactive_file:49476 isolated_file:0 [ 135.543944][T10778] unevictable:1766 dirty:96 writeback:0 [ 135.543944][T10778] slab_reclaimable:11621 slab_unreclaimable:72760 [ 135.543944][T10778] mapped:25784 shmem:26909 pagetables:1356 [ 135.543944][T10778] sec_pagetables:312 bounce:0 [ 135.543944][T10778] kernel_misc_reclaimable:0 [ 135.543944][T10778] free:431397 free_pcp:11494 free_cma:0 [ 135.560754][T10778] Node 0 active_anon:58980kB inactive_anon:74408kB active_file:18976kB inactive_file:197696kB unevictable:3528kB isolated(anon):0kB isolated(file):0kB mapped:103100kB dirty:380kB writeback:0kB shmem:104808kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13424kB pagetables:5100kB sec_pagetables:1248kB all_unreclaimable? no Balloon:0kB [ 135.571292][T10778] Node 1 active_anon:760kB inactive_anon:0kB active_file:484kB inactive_file:208kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36kB dirty:4kB writeback:0kB shmem:2828kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:144kB pagetables:200kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 135.581011][T10778] Node 0 DMA free:12664kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:872kB inactive_anon:0kB active_file:1180kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:552kB local_pcp:180kB free_cma:0kB [ 135.590833][T10778] lowmem_reserve[]: 0 1235 1235 1235 1235 [ 135.592772][T10778] Node 0 DMA32 free:113052kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:58252kB inactive_anon:74408kB active_file:17796kB inactive_file:197696kB unevictable:3536kB writepending:380kB present:2080628kB managed:1264680kB mlocked:0kB bounce:0kB free_pcp:22916kB local_pcp:3872kB free_cma:0kB [ 135.603011][T10778] lowmem_reserve[]: 0 0 0 0 0 [ 135.604734][T10778] Node 1 Normal free:1600072kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:760kB inactive_anon:0kB active_file:484kB inactive_file:208kB unevictable:3536kB writepending:4kB present:2097152kB managed:1781956kB mlocked:0kB bounce:0kB free_pcp:22932kB local_pcp:224kB free_cma:0kB [ 135.614425][T10778] lowmem_reserve[]: 0 0 0 0 0 [ 135.615983][T10778] Node 0 DMA: 30*4kB (UM) 14*8kB (UM) 17*16kB (UM) 18*32kB (UME) 15*64kB (UME) 11*128kB (ME) 6*256kB (ME) 7*512kB (UME) 2*1024kB (ME) 1*2048kB (U) 0*4096kB = 12664kB [ 135.621185][T10778] Node 0 DMA32: 537*4kB (UME) 449*8kB (UME) 391*16kB (UM) 442*32kB (UME) 234*64kB (UME) 82*128kB (UME) 40*256kB (UM) 26*512kB (UM) 17*1024kB (M) 6*2048kB (M) 2*4096kB (UM) = 113052kB [ 135.626999][T10778] Node 1 Normal: 40*4kB (UME) 46*8kB (UME) 22*16kB (UM) 119*32kB (UME) 60*64kB (UME) 34*128kB (UME) 20*256kB (UME) 8*512kB (UME) 5*1024kB (UM) 4*2048kB (UM) 382*4096kB (UM) = 1600080kB [ 135.632658][T10778] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.636083][T10778] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 135.639652][T10778] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 135.642691][T10778] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 135.645638][T10778] 81246 total pagecache pages [ 135.647150][T10778] 0 pages in swap cache [ 135.648490][T10778] Free swap = 124996kB [ 135.649930][T10778] Total swap = 124996kB [ 135.651211][T10778] 1048443 pages RAM [ 135.652435][T10778] 0 pages HighMem/MovableOnly [ 135.654121][T10778] 282944 pages reserved [ 135.655426][T10778] 0 pages cma reserved [ 135.770487][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 135.770499][ T40] audit: type=1326 audit(1751569418.091:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10803 comm="syz.2.1835" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2e1ad8e929 code=0x0 [ 135.780015][ T40] audit: type=1400 audit(1751569418.101:555): avc: denied { create } for pid=10801 comm="syz.0.1834" name="#2e" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.789900][ T40] audit: type=1400 audit(1751569418.101:556): avc: denied { link } for pid=10801 comm="syz.0.1834" name="#2e" dev="tmpfs" ino=1804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 135.797866][ T40] audit: type=1400 audit(1751569418.101:557): avc: denied { rename } for pid=10801 comm="syz.0.1834" name="#2f" dev="tmpfs" ino=1804 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 136.155692][T10818] binder: 10817:10818 ioctl c0306201 2000000003c0 returned -14 [ 136.364254][T10826] ALSA: mixer_oss: invalid OSS volume '' [ 136.512600][T10836] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 136.665650][ T40] audit: type=1400 audit(1751569418.991:558): avc: denied { ioctl } for pid=10854 comm="syz.2.1854" path="socket:[33575]" dev="sockfs" ino=33575 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 136.683505][T10857] netlink: 'syz.1.1855': attribute type 2 has an invalid length. [ 136.712725][T10859] netlink: 'syz.1.1857': attribute type 21 has an invalid length. [ 136.749748][T10863] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831599472947593698 ! [ 136.764929][ T40] audit: type=1400 audit(1751569419.091:559): avc: denied { write } for pid=10864 comm="syz.2.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 136.777431][T10865] __nla_validate_parse: 9 callbacks suppressed [ 136.777440][T10865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1859'. [ 136.782576][T10865] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.839178][T10877] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 136.950488][T10882] usb usb1: usbfs: interface 0 claimed by hub while 'syz.3.1865' sets config #1 [ 136.956128][ T40] audit: type=1400 audit(1751569419.281:560): avc: denied { mount } for pid=10880 comm="syz.3.1865" name="/" dev="configfs" ino=2230 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 136.997300][T10887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.001041][T10887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.030326][ T40] audit: type=1400 audit(1751569419.351:561): avc: denied { create } for pid=10892 comm="syz.2.1868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 137.093257][ T6097] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 137.303479][ T54] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 137.341727][T10915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2563 sclass=netlink_route_socket pid=10915 comm=syz.2.1877 [ 137.346245][T10915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2572 sclass=netlink_route_socket pid=10915 comm=syz.2.1877 [ 137.350250][T10915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2582 sclass=netlink_route_socket pid=10915 comm=syz.2.1877 [ 137.354704][T10915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=10915 comm=syz.2.1877 [ 137.358893][T10915] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2584 sclass=netlink_route_socket pid=10915 comm=syz.2.1877 [ 137.404176][T10920] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 137.413685][T10920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1879'. [ 137.416748][ T1148] bond0: (slave bond_slave_0): interface is now down [ 137.419069][ T1148] bond0: (slave bond_slave_1): interface is now down [ 137.424257][ T1148] bond0: now running without any active interface! [ 137.453281][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 137.486182][ T54] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.489861][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 137.494883][ T54] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 137.498531][T10930] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1883'. [ 137.498878][ T54] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 137.514169][ T54] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 137.517843][ T54] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 137.520696][ T54] usb 5-1: Manufacturer: syz [ 137.529312][ T54] usb 5-1: config 0 descriptor?? [ 137.532654][T10932] ip6gretap1: entered promiscuous mode [ 137.534967][T10932] ip6gretap1: entered allmulticast mode [ 137.561468][T10932] IPVS: persistence engine module ip_vs_pe_s not found [ 137.603295][ T34] usb 8-1: Using ep0 maxpacket: 8 [ 137.608922][ T34] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 137.612705][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.616174][ T34] usb 8-1: Product: syz [ 137.617830][ T34] usb 8-1: Manufacturer: syz [ 137.619537][ T34] usb 8-1: SerialNumber: syz [ 137.624534][ T34] usb 8-1: config 0 descriptor?? [ 137.773590][ T54] rc_core: IR keymap rc-hauppauge not found [ 137.776038][ T54] Registered IR keymap rc-empty [ 137.777786][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.793182][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.814333][ T54] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0 [ 137.818918][ T54] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 137.825372][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.828879][ T34] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 137.832862][T10885] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=47 sclass=netlink_tcpdiag_socket pid=10885 comm=syz.3.1866 [ 137.843548][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.844722][ T34] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 137.849872][ T34] usb 8-1: USB disconnect, device number 8 [ 137.852555][ T40] audit: type=1400 audit(1751569420.171:562): avc: denied { mounton } for pid=10949 comm="syz.2.1889" path="/502/file0/file0" dev="afs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 137.857336][ T1148] ------------[ cut here ]------------ [ 137.861159][ T1148] RTNL: assertion failed at ./include/net/netdev_lock.h (72) [ 137.864656][ T1148] WARNING: CPU: 0 PID: 1148 at ./include/net/netdev_lock.h:72 __linkwatch_sync_dev+0x1ed/0x230 [ 137.865477][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.867982][ T1148] Modules linked in: [ 137.868022][ T1148] CPU: 0 UID: 0 PID: 1148 Comm: kworker/u32:8 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 137.877355][ T1148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.880768][ T1148] Workqueue: bond0 bond_mii_monitor [ 137.882493][ T1148] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 137.883237][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.884461][ T1148] Code: 05 ff ff ff e8 f4 cc 58 f8 c6 05 49 30 2d 07 01 90 ba 48 00 00 00 48 c7 c6 00 a1 e3 8c 48 c7 c7 a0 a0 e3 8c e8 14 8d 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 4a a8 90 e8 8e a8 bf f8 e9 [ 137.893636][ T1148] RSP: 0018:ffffc9000639f9f0 EFLAGS: 00010286 [ 137.895632][ T1148] RAX: 0000000000000000 RBX: ffff8880284d4000 RCX: ffffffff817ae278 [ 137.898316][ T1148] RDX: ffff8880299f0000 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 137.900783][ T1148] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 137.903388][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.905729][ T1148] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000c73f48 [ 137.908289][ T1148] R13: ffff8880284d4cc5 R14: ffffffff8c5917e0 R15: ffffffff899c9290 [ 137.910548][ T40] audit: type=1400 audit(1751569420.231:563): avc: denied { mounton } for pid=10949 comm="syz.2.1889" path="/502/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 137.910620][T10951] 9pnet_fd: Insufficient options for proto=fd [ 137.910729][ T1148] FS: 0000000000000000(0000) GS:ffff8880d6752000(0000) knlGS:0000000000000000 [ 137.910754][ T1148] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 137.923336][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.924597][ T1148] CR2: 0000200000006000 CR3: 000000003bc63000 CR4: 0000000000352ef0 [ 137.924608][ T1148] Call Trace: [ 137.924613][ T1148] [ 137.924619][ T1148] ethtool_op_get_link+0x1d/0x70 [ 137.926650][T10951] lo speed is unknown, defaulting to 1000 [ 137.935650][ T1148] bond_check_dev_link+0x3fc/0x710 [ 137.936577][T10898] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1869'. [ 137.937308][ T1148] ? stack_trace_save+0x8e/0xc0 [ 137.937327][ T1148] ? __pfx_bond_check_dev_link+0x10/0x10 [ 137.937345][ T1148] bond_mii_monitor+0x3c0/0x2dc0 [ 137.943447][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.944333][ T1148] ? __pfx_bond_mii_monitor+0x10/0x10 [ 137.944354][ T1148] ? rcu_is_watching+0x12/0xc0 [ 137.951754][ T1148] process_one_work+0x9cf/0x1b70 [ 137.953477][ T1148] ? __pfx_process_one_work+0x10/0x10 [ 137.955209][ T1148] ? assign_work+0x1a0/0x250 [ 137.956698][ T1148] worker_thread+0x6c8/0xf10 [ 137.958172][ T1148] ? __pfx_worker_thread+0x10/0x10 [ 137.959789][ T1148] kthread+0x3c2/0x780 [ 137.961080][ T1148] ? __pfx_kthread+0x10/0x10 [ 137.962556][ T1148] ? rcu_is_watching+0x12/0xc0 [ 137.963211][ T54] mceusb 5-1:0.0: Error: mce write submit urb error = -90 [ 137.964408][ T1148] ? __pfx_kthread+0x10/0x10 [ 137.967854][ T1148] ret_from_fork+0x5d4/0x6f0 [ 137.969327][ T1148] ? __pfx_kthread+0x10/0x10 [ 137.970790][ T1148] ret_from_fork_asm+0x1a/0x30 [ 137.972326][ T1148] [ 137.973431][ T1148] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 137.975730][ T1148] CPU: 0 UID: 0 PID: 1148 Comm: kworker/u32:8 Not tainted 6.16.0-rc4-syzkaller-00108-g17bbde2e1716 #0 PREEMPT(full) [ 137.979492][ T1148] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.982783][ T1148] Workqueue: bond0 bond_mii_monitor [ 137.984438][ T1148] Call Trace: [ 137.985499][ T1148] [ 137.986507][ T1148] dump_stack_lvl+0x3d/0x1f0 [ 137.987972][ T1148] panic+0x71c/0x800 [ 137.989216][ T1148] ? __pfx_panic+0x10/0x10 [ 137.990581][ T1148] ? show_trace_log_lvl+0x29b/0x3e0 [ 137.992235][ T1148] ? check_panic_on_warn+0x1f/0xb0 [ 137.993848][ T1148] ? __linkwatch_sync_dev+0x1ed/0x230 [ 137.995530][ T1148] check_panic_on_warn+0xab/0xb0 [ 137.997139][ T1148] __warn+0xf6/0x3c0 [ 137.998398][ T1148] ? preempt_schedule_notrace+0x62/0xe0 [ 138.000126][ T1148] ? __linkwatch_sync_dev+0x1ed/0x230 [ 138.001846][ T1148] report_bug+0x3c3/0x580 [ 138.003230][ T1148] ? __linkwatch_sync_dev+0x1ed/0x230 [ 138.004909][ T1148] handle_bug+0x184/0x210 [ 138.006307][ T1148] exc_invalid_op+0x17/0x50 [ 138.007739][ T1148] asm_exc_invalid_op+0x1a/0x20 [ 138.009274][ T1148] RIP: 0010:__linkwatch_sync_dev+0x1ed/0x230 [ 138.011164][ T1148] Code: 05 ff ff ff e8 f4 cc 58 f8 c6 05 49 30 2d 07 01 90 ba 48 00 00 00 48 c7 c6 00 a1 e3 8c 48 c7 c7 a0 a0 e3 8c e8 14 8d 17 f8 90 <0f> 0b 90 90 e9 d6 fe ff ff 48 c7 c7 44 4a a8 90 e8 8e a8 bf f8 e9 [ 138.017101][ T1148] RSP: 0018:ffffc9000639f9f0 EFLAGS: 00010286 [ 138.019007][ T1148] RAX: 0000000000000000 RBX: ffff8880284d4000 RCX: ffffffff817ae278 [ 138.021470][ T1148] RDX: ffff8880299f0000 RSI: ffffffff817ae285 RDI: 0000000000000001 [ 138.023930][ T1148] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 138.026438][ T1148] R10: 0000000000000001 R11: 0000000000000001 R12: 1ffff92000c73f48 [ 138.029007][ T1148] R13: ffff8880284d4cc5 R14: ffffffff8c5917e0 R15: ffffffff899c9290 [ 138.031682][ T1148] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 138.033741][ T1148] ? __warn_printk+0x198/0x350 [ 138.035450][ T1148] ? __warn_printk+0x1a5/0x350 [ 138.037159][ T1148] ethtool_op_get_link+0x1d/0x70 [ 138.038785][ T1148] bond_check_dev_link+0x3fc/0x710 [ 138.040386][ T1148] ? stack_trace_save+0x8e/0xc0 [ 138.041930][ T1148] ? __pfx_bond_check_dev_link+0x10/0x10 [ 138.043715][ T1148] bond_mii_monitor+0x3c0/0x2dc0 [ 138.045301][ T1148] ? __pfx_bond_mii_monitor+0x10/0x10 [ 138.047065][ T1148] ? rcu_is_watching+0x12/0xc0 [ 138.048590][ T1148] process_one_work+0x9cf/0x1b70 [ 138.050127][ T1148] ? __pfx_process_one_work+0x10/0x10 [ 138.051826][ T1148] ? assign_work+0x1a0/0x250 [ 138.053267][ T1148] worker_thread+0x6c8/0xf10 [ 138.054709][ T1148] ? __pfx_worker_thread+0x10/0x10 [ 138.056315][ T1148] kthread+0x3c2/0x780 [ 138.057616][ T1148] ? __pfx_kthread+0x10/0x10 [ 138.059097][ T1148] ? rcu_is_watching+0x12/0xc0 [ 138.060626][ T1148] ? __pfx_kthread+0x10/0x10 [ 138.062107][ T1148] ret_from_fork+0x5d4/0x6f0 [ 138.063745][ T1148] ? __pfx_kthread+0x10/0x10 [ 138.065319][ T1148] ret_from_fork_asm+0x1a/0x30 [ 138.066944][ T1148] [ 138.068662][ T1148] Kernel Offset: disabled [ 138.070192][ T1148] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:03:40 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=0000000000000072 RCX=ffffffff819b82a2 RDX=ffff8880299f0000 RSI=ffffffff819b8290 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc9000639f678 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000c73ed1 R13=0000000000000200 R14=ffff888021fa8000 R15=ffffc9000639f740 RIP=ffffffff819b8292 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6752000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000006000 CR3=000000003bc63000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1ae11b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1ae11b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1ae11b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1ae11b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1ae11bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1ae11c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1af84488 00007f2e1af84480 00007f2e1af84478 00007f2e1af84450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1baed100 00007f2e1af84440 00007f2e1af84458 00007f2e1af844a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f2e1af84498 00007f2e1af84490 00007f2e1af84488 00007f2e1af84480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000001248b7 RBX=0000000000000001 RCX=ffffffff8b80ec69 RDX=0000000000000000 RSI=ffffffff8de1a696 RDI=ffffffff8c157da0 RBP=ffffed1003c53488 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =ffffed100d4a6645 R10=ffff88806a53322b R11=0000000000000001 R12=0000000000000001 R13=ffff88801e29a440 R14=ffffffff90a81850 R15=0000000000000000 RIP=ffffffff8b80d7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6852000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd7e03ced4 CR3=0000000031e2f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000769 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f636f72702f01ff ffffffffffffffdd 0800030e00004f59 ffffffff00000001 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 840002a7ac030e04 840002a7a8030008 0002a7a003000000 000000000000306e ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 617073726501ffff ffffffffffffdf08 02a7800302a78004 02a9a00300000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 6c6e757401ffffff ffffffffffdf0802 a980031210001180 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 04040171e2000400 000800000401c710 00080049b0007473 696c5f72656d6974 ZMM24=29e0f52329e0f523 29e0f52329e0f523 29e0f52329e0f523 29e0f52329e0f523 29e0f52329e0f523 29e0f52329e0f523 29e0f52329e0f523 29e0f52329e0f523 ZMM25=95563b7795563b77 95563b7795563b77 95563b7795563b77 95563b7795563b77 95563b7795563b77 95563b7795563b77 95563b7795563b77 95563b7795563b77 ZMM26=5e18f0075e18f007 5e18f0075e18f007 5e18f0075e18f007 5e18f0075e18f007 5e18f0075e18f007 5e18f0075e18f007 5e18f0075e18f007 5e18f0075e18f007 ZMM27=6ebb5c776ebb5c77 6ebb5c776ebb5c77 6ebb5c776ebb5c77 6ebb5c776ebb5c77 6ebb5c776ebb5c77 6ebb5c776ebb5c77 6ebb5c776ebb5c77 6ebb5c776ebb5c77 ZMM28=000001400000013f 0000013e0000013d 0000013c0000013b 0000013a00000139 0000013800000137 0000013600000135 0000013400000133 0000013200000131 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=f0080000f0080000 f0080000f0080000 f0080000f0080000 f0080000f0080000 f0080000f0080000 f0080000f0080000 f0080000f0080000 f0080000f0080000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000000009d RCX=ffffffff849a824c RDX=000000000000009d RSI=0000000000000100 RDI=0000000000000003 RBP=dffffc0000000000 RSP=ffffc90004cb7a70 R8 =0000000000000001 R9 =0000000000000000 R10=000000000000009d R11=0000000000000001 R12=ffffc90004cb7ba0 R13=ffff88810a127330 R14=000000000000009c R15=0000000000000000 RIP=ffffffff81bc1a23 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fce4337a880 ffffffff 00c00000 GS =0000 ffff8880d6952000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffd7e045e98 CR3=0000000024e7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004010001 Opmask01=0000000000000000 Opmask02=0000000001000037 Opmask03=0000000001041000 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7e052ce0 00007ffd7e052ce0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd7e052ce0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055fe02f90e40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce42df1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fce42df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff ffffff00ffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f7379732f002f73 75622f7379732f00 2f6d657473797362 75732f7379732f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a565c560a000a56 50470a565c560a00 0a484051565c5647 50560a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361647c2a737369 63637c2a65686361 63627c2a6476787c 2a64767c2a64737c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000021 726f6d656d007974 00736576616c7300 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 322e392d3533712d 63707276703a2939 3030322c39484349 2b35335128435064 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7261646e6174536e 703a554d45516e76 733a302e3072623a 343130322f31302f ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343064623a312b32 316f70627e322d33 2e36312e312d6e61 696265642d332e36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000f9745 RBX=0000000000000003 RCX=ffffffff8b80ec69 RDX=0000000000000000 RSI=ffffffff8de1a696 RDI=ffffffff8c157da0 RBP=ffffed1003c56000 RSP=ffffc90000197df8 R8 =0000000000000001 R9 =ffffed100d4e6645 R10=ffff88806a73322b R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b0000 R14=ffffffff90a81850 R15=0000000000000000 RIP=ffffffff8b80d7cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a52000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3671a9 CR3=00000000260a6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000800001 Opmask01=0000000000000001 Opmask02=00000000000c0066 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcf224bbb 00007fffcf224bbb ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcf2250c0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffcf2250c0 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 333120205b3e363c 0031372d20726f72 7265206874697720 64656c6961662000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3331202051343636 0031372720726572 7265206274637720 6465666361662000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2074612064656c69 6166206e6f697472 65737361203a4c4e 5452205d38343131 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020726964 3d7373616c637420 745f73666e3a725f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7463656a626f3a75 5f6d65747379733d 747865746e6f6374 20745f6d64617379 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 733a725f6d646173 79733a746f6f723d 747865746e6f6373 20343d6f6e692022 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 736661223d766564 202230656c69662f 30656c69662f3230 352f223d68746170 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e6f637320303332 323d6f6e69202273 666769666e6f6322 3d76656420222f22 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000