last executing test programs: 1m51.534059182s ago: executing program 0 (id=1772): sendmsg$NL80211_CMD_NEW_MPATH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0000000000000000002", 0x11) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x4010744d, 0x20000000) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xffff0004, 0xf0, 0xe200, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) pread64(r2, &(0x7f0000000040)=""/111, 0x6f, 0x6c38) 1m51.533298508s ago: executing program 0 (id=1774): setresuid(0xffffffffffffffff, 0x0, 0xee01) getresuid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=0x0) setfsuid(r0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$unix(0x1, 0x0, 0x0) ioctl(r1, 0x8b01, &(0x7f0000000040)) setresuid(0x0, r0, 0xffffffffffffffff) socket$nl_xfrm(0x10, 0x3, 0x6) 1m51.472860269s ago: executing program 0 (id=1775): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000100)={'syz0\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x40, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x1, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x82, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4], [0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000], [0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xc7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = gettid() timer_create(0x0, &(0x7f0000001640)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) readv(r0, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/221, 0xdd}], 0x1) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400fb015c291d00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x3, 0x147000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000018000000180000000400000002267a4bb7c710248f71e065bb0ada000000000000000000000d0000"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="1300000002"], 0x8) r4 = dup3(r0, r2, 0x80000) ioctl$SCSI_IOCTL_START_UNIT(r4, 0x5) mount(&(0x7f0000000000)=@nullb, &(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)='hostfs\x00', 0xa0000, &(0x7f0000000600)='\x00') sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3000000010000108fdff763f0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000008001a8004002d80"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m50.765058392s ago: executing program 0 (id=1784): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x18) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x20) (async) r5 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) readv(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/24, 0xfd90}], 0x1) (async) r6 = fcntl$dupfd(r5, 0x0, r5) write$sndseq(r6, &(0x7f00000003c0)=[{0x0, 0x0, 0x0, 0x0, @tick=0xb, {0x0, 0xb8}, {0x4, 0x3e}, @control={0x9, 0x0, 0xb}}, {0x0, 0x4, 0x0, 0x4, @tick=0x80000000, {0x6, 0x4}, {0x0, 0x4}, @result={0xd, 0x4}}], 0x38) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r4, 0xedaa7000) (async) r7 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r7, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x6, 0x1, 0x2000000005}}, 0x28) (async) write$tcp_congestion(r7, &(0x7f0000000000)='yeah\x00', 0xfdef) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x15, 0x10, 0x8, 0x800, 0x0, r4, 0x80000000, '\x00', 0x0, r2, 0x10, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r9, &(0x7f0000004440)={&(0x7f0000000ec0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000f00)="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", 0xe50}, {0x0}, {0x0}, {0x0}, {&(0x7f00000020c0)}], 0x5}, 0x0) (async) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x8, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r11, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000300)=@newtaction={0x94, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x80, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x4040000}, 0x40) (async) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r10, 0x0, 0x0}, 0x10) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup=r3, r10, 0x1, 0x0, 0xffffffffffffffff, @void, @value=r2}, 0x20) 1m50.762617731s ago: executing program 0 (id=1786): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040)={0x0, 0xd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x8400, 0x0) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x9c, 0x9c, 0x6, [@struct={0xc, 0x3, 0x0, 0x4, 0x1, 0x4, [{0xa, 0x5, 0x3}, {0x9, 0x1, 0x6}, {0x7, 0x4, 0x7}]}, @enum64={0x8, 0x7, 0x0, 0x13, 0x1, 0xd, [{0x6, 0x74da, 0x8}, {0x7, 0xffff, 0x10000}, {0x5, 0x10000}, {0xb, 0xd, 0x101}, {0x1, 0x81, 0x6}, {0x6, 0x6, 0xfffffffb}, {0x6, 0x5, 0x101}]}, @fwd={0x1}]}, {0x0, [0x5f, 0x5f, 0x61, 0x30]}}, &(0x7f0000000740)=""/167, 0xba, 0xa7, 0x0, 0xfffffff9, 0x0, @void, @value}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x12, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfa}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, @alu={0x7, 0x0, 0x7, 0x9, 0x6, 0xffffffffffffffe0, 0x10}, @call={0x85, 0x0, 0x0, 0xc4}, @generic={0x5, 0xd, 0xf, 0x8df1, 0x9}]}, &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x6, 0xf983, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000840)=[{0x2, 0x2, 0x9, 0x1}, {0x2, 0x4, 0x10, 0xb}, {0x1, 0x4, 0x7, 0x2}, {0x3, 0x4, 0xc}, {0x0, 0x4, 0x10, 0x5}], 0x10, 0x8001, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x6, 0x12, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xfa}, [@exit, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x200}, @alu={0x7, 0x0, 0x7, 0x9, 0x6, 0xffffffffffffffe0, 0x10}, @call={0x85, 0x0, 0x0, 0xc4}, @generic={0x5, 0xd, 0xf, 0x8df1, 0x9}]}, &(0x7f00000004c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x1, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000600)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000800)={0x4, 0x6, 0xf983, 0x6}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f0000000840)=[{0x2, 0x2, 0x9, 0x1}, {0x2, 0x4, 0x10, 0xb}, {0x1, 0x4, 0x7, 0x2}, {0x3, 0x4, 0xc}, {0x0, 0x4, 0x10, 0x5}], 0x10, 0x8001, @void, @value}, 0x94) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r1}, 0x4) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r6, &(0x7f0000000280)="02454207", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0x7, 0x6, @random="080000ff00"}, 0x14) (async) sendto$packet(r6, &(0x7f0000000280)="02454207", 0x4, 0x0, &(0x7f0000000080)={0x11, 0x8100, r7, 0x1, 0x7, 0x6, @random="080000ff00"}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2f00020b, 0x822, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @remote, 0x1}, 0x1c) (async) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0xffffffff, @remote, 0x1}, 0x1c) syz_emit_ethernet(0xf2, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaabb0000000000000004ababa3692181655843d3085b7149a0d40512221ca41ed7ee7fcbbb3e4f50ef172c177ca5324f73e4477aca9b23d568fd81f1d11ee0536a96ab60c88cc1c983e3b4e9c98ee565f839062690e36dfbbe4ac653dce48d344efd91ed9c810aa075c0587a927c83fe1fea4d36cc9c1f4af1016948a5667f09c913d9b20cb85f22a90a19b9655c954aa28a6759dc15685ebe976fb125623a6e90c53a349fe0f065593272072a881c1daf130274b2324308691d08691ea8279b79b52426e03bd371b937d17b54c095441db6bc8e984ed674847129d095dd06dd4713aca3b37750985a6b0ef86caa"], 0x0) syz_emit_ethernet(0x56, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000a19439d6c5b82deaa9fcdd604dd30800200601fe800000000000000000000000000004fe8000000000000000000000002259647369f3c7000eaa00004001", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8002000090780000080a00000001000000070000"], 0x0) 1m50.583153425s ago: executing program 0 (id=1792): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x82) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x6) (async) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x82) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) 1m50.527828829s ago: executing program 32 (id=1792): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x6) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x82) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) creat(&(0x7f00000002c0)='./file0\x00', 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x6) (async) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x82) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) io_uring_setup(0x332, &(0x7f0000000080)={0x0, 0xfffffffe, 0x10}) (async) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) (async) mmap$xdp(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) (async) openat$cgroup_ro(r0, &(0x7f0000000100)='blkio.bfq.io_merged\x00', 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x2c, r5, 0x1, 0x70bd2d, 0x0, {0x22}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x0) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r3, 0x0, 0x30, 0x1, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], 0x0, 0x0, 0x1, 0x1}}, 0x40) (async) creat(&(0x7f00000002c0)='./file0\x00', 0x0) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x18, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000851000000300000018000000000000000000000000000000950000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) (async) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r7, 0x0) (async) 17.821758444s ago: executing program 3 (id=2953): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x6, 0x0, &(0x7f0000000300)="d2ffdd934517", 0x0, 0xd5b4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x48004) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x161642, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x5}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x800) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2eaa00009500000000000000000000000000002200000000"], &(0x7f0000000480)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm_base(ctr(aes-aesni),ghash-generic))\x00'}, 0x58) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0x541b, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x4, 0x8040000000000000}) close_range(r9, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(r6, 0xae9a) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000100)={{0x3, 0x1, 0x7f, 0x3, 0x401}}) pipe(&(0x7f0000000180)) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NOTIFY_RADAR(r11, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000500)={0x1c, r10, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 17.43326064s ago: executing program 3 (id=2962): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r0, 0x0, r1) getsockopt$SO_COOKIE(r2, 0x1, 0x10, &(0x7f0000000040), &(0x7f0000000080)=0x8) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000000800450000240000000004069078ac1eeed84bedbd1a1414bbac1414aa00014e200010907c02fe000000000000"], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 17.270297627s ago: executing program 3 (id=2965): r0 = socket$kcm(0xa, 0x2, 0x3a) socket$igmp(0x2, 0x3, 0x2) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='mm_collapse_huge_page_isolate\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xb) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7d) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) socket$kcm(0xa, 0x2, 0x3a) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$sock_attach_bpf(r0, 0x29, 0x21, &(0x7f0000000100), 0x4) (async) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='mm_collapse_huge_page_isolate\x00', 0xffffffffffffffff, 0x0, 0x2}, 0x18) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0xb) (async) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x7d) (async) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2) (async) 17.035285065s ago: executing program 3 (id=2969): r0 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x8, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000010000000a00000008"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000002000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000111c0)='ext4_sync_fs\x00', r2, 0x0, 0x5}, 0x18) sync() ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000500)={0x2, 0x80, 0x2, {0x2, @raw_data="eca4d397a6846ac809df9312a39301cda14d1be078eab89d726dfa58803d27c128e1d45efc7ae1f7b2a61dd86de86146700d5c2f71d7a3664f61d391360075df3c7b0d27fadfd06ba0225f22df3ef6056109ea84887d71d15bd41bcdc4f41ca867d0aec52da75d82e43a34cb0dc99af00ac5d3b23112d4b4ab52ea925e20a96498845ba805999cdbbb32169dc9ff285cf34e9d119ba136a8d2b727b38a062ecf3213bd7310c3513ad9ce4dbcee3dc1a4a2d896bc765eba9f02e23f8ed6cf907714227e2df4da2da2"}, 0x3}) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x9, 0x2, 0x2, 0x0, 0x7}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="05000000000000007111b031471c941805ac07c08bde7c04000000008510000002000000850000002a009868e298000095000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 16.782218415s ago: executing program 3 (id=2973): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000040000000000008c00000000000000005f"], 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') (async) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/udp\x00') pread64(r0, &(0x7f00000013c0)=""/15, 0xf, 0x404) ioctl$KVM_CAP_MSR_PLATFORM_INFO(r0, 0x4068aea3, &(0x7f0000000140)={0x9f, 0x0, 0x1}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) (async) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) 16.557650459s ago: executing program 3 (id=2977): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd2b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x5, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0x11, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r8, 0x0) (async) shutdown(r8, 0x0) poll(&(0x7f0000000180)=[{r8}], 0x1, 0x2) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007800800", @ANYRES32, @ANYRES32=r0], 0x90}}, 0x0) 5.533224921s ago: executing program 1 (id=3075): r0 = socket(0x1d, 0x7, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000840), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000000)={0x2, 0xffffffffffffffff, 0x1}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000, 0x2}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000001c0)=0x3) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r6, 0x0) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x0, 0x5, 0x5, 0x9, 0x1, 0x2, 0x80, {0x0, @in={{0x2, 0x4e23, @multicast2}}, 0xd2c7, 0x10, 0x8, 0x7fff, 0x1}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={r7, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={r8, @in={{0x2, 0x4e23, @empty}}, 0x0, 0x2, 0x0, 0x0, 0xa17433da3c5d69a5, 0x2, 0x81}, 0x9c) ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde9809c8814618e976832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada133b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631def9f126c25ba4f37caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d3130180613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd60200c1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r0, 0x10f, 0x83, &(0x7f0000000300), &(0x7f0000000340)=0x4) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc34000000000010902"], 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.32558752s ago: executing program 1 (id=3094): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000000)={0x9157, {{0xa, 0x4e20, 0xffff, @private1={0xfc, 0x1, '\x00', 0x1}, 0x800}}}, 0x88) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$VHOST_VDPA_GET_DEVICE_ID(r1, 0x8004af70, &(0x7f0000000100)) syz_usb_connect(0x3, 0x3d0, &(0x7f0000000140)={{0x12, 0x1, 0x200, 0xe0, 0x1, 0x1, 0x20, 0x2522, 0xef4b, 0xc917, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3be, 0x2, 0x4, 0x10, 0x20, 0xc0, [{{0x9, 0x4, 0xdf, 0x8, 0xe, 0xb5, 0xe7, 0xb2, 0xb, [@generic={0x3c, 0xa, "8489f182dfeb206970be429d7a98b130e037300e820f516af2ac41fdb0209eea3028996e8286f05db14811a1fb1b2f6ed8d1ad2472bcb4fc0a38"}, @uac_as], [{{0x9, 0x5, 0xc12bf09b2be98f9f, 0x10, 0x40, 0xf9, 0x80, 0x2}}, {{0x9, 0x5, 0xc, 0x3, 0x18, 0x7, 0x3, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x80, 0x3}]}}, {{0x9, 0x5, 0x9, 0x3, 0x200, 0xc1, 0xb3, 0x7}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x2, 0x2, 0xc}}, {{0x9, 0x5, 0x80, 0x10, 0x3ff, 0x3, 0xc8}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xff, 0x8, 0x7}}, {{0x9, 0x5, 0x8, 0x0, 0x8, 0xc, 0x8, 0x3}}, {{0x9, 0x5, 0x7, 0xa, 0x20, 0x7, 0x3, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0xe}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0xce, 0x3}]}}, {{0x9, 0x5, 0xe, 0x3, 0x20, 0x3b, 0x7f, 0x7}}, {{0x9, 0x5, 0xb, 0x1, 0x8, 0x6, 0xfb, 0xc, [@generic={0x67, 0x21, "d5101f032c785a886a04ef49eae0441fe6d941328cd07fcb5cd88e19c36bc9b8977752d794bda8ae1775a2b904cef2538e6b1c1525b497d7d3210eb2b29e1015d115205f80cd07b67134144d45273ef4f6d6669bc2ef01e1b7350afabd00a824e9c56ee118"}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x4}]}}, {{0x9, 0x5, 0x6, 0x2, 0x10, 0x7, 0x1, 0x8}}, {{0x9, 0x5, 0xd, 0x10, 0x10, 0xa, 0x5, 0xf5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x3f, 0x2}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x7, 0x4, 0x9, [@generic={0x1e, 0x30, "1bef2d04882b6b88dfb0a669e6769057aad73bc030eebb299bb0a9e4"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x1, 0x6, 0xd4, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0xbb, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x21, 0x4}]}}]}}, {{0x9, 0x4, 0xe6, 0x3e, 0x9, 0x5, 0x9a, 0x1, 0x5, [], [{{0x9, 0x5, 0x6, 0x18, 0x8, 0xff, 0x1, 0x14}}, {{0x9, 0x5, 0xe, 0x4, 0x400, 0x8, 0x7, 0x63, [@generic={0x6e, 0xf, "e7448764c7c4cd0d733fb51aeca1cdef542a3400d76fc7da0ccbed8504d14e81bb7145a4b8e36db7b8d83b2a1f70e64ec978e44a698f8eeba683b67c7b362b9a589a833d1984895b013886dcf651006316d41f27a43c1d71abaf9879fd918c70f64d45d8e699fbbffd835fcf"}]}}, {{0x9, 0x5, 0x9, 0x10, 0x10, 0x5c, 0x7, 0x3}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x8b, 0x7, 0xdf, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x4, 0x5}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x2, 0xffff}]}}, {{0x9, 0x5, 0x6, 0x0, 0x40, 0x9d, 0x8f, 0x1}}, {{0x9, 0x5, 0xa, 0x3357d4165a74a559, 0x20, 0x8, 0xf, 0x40}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x98, 0x8, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x1b}, @generic={0xb3, 0x23, "8d34da207571a3c57f30c5ff60e1c02cc24a405b3f3bc6184ce48e88f82181b32196ea68e435b84dd30af8a4eb5687cd48bcb37854b3231e4f7602b153a8e9d7dc63a95afba6e01fce6b1bd1cf7a7fd5ea88c040fdc22aeeaf2375bc9f5bbdbd28de9a247ed4285bf0b1abe06248a2ad83f9aa06fad2b66027bea7cea17e0766857e3cfd4cf59414697dd654d888ea7289bc818b6dd39b518357b535475c84023c84605e814ae1f89399fe2ffeba65f152"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x40, 0x40, 0x67, 0x5, [@generic={0x97, 0x2, "7a66aa0d5dd354edbaf04303b32d3455c4ebdb72be97e00ab9f5b00e1d2156ed68d5b163a868ad3c8b0863899bb0bdedcd0c5f90615a18e31ce1592e02c9759fa5a39ceff8a00b2ccf46309498c117b0806ad02f514540d05dacd2917c39325c1a03b76298e34a6e0c03487ee74dd1ee366137d4005eb28c2ec5ce2d640d71cfc608c30a888d7c7e13f9d37b1431364a0703d5481e"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}]}}, {{0x9, 0x5, 0x4, 0x0, 0x40, 0x2, 0xf5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x2224}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x4, 0xd}]}}]}}]}}]}}, &(0x7f0000000740)={0xa, &(0x7f0000000540)={0xa, 0x6, 0x110, 0x9, 0x2, 0x7, 0x40, 0x8}, 0x8, &(0x7f0000000580)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x3, [{0xfc, &(0x7f00000005c0)=@string={0xfc, 0x3, "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"}}, {0x3, &(0x7f00000006c0)=@string={0x3, 0x3, 'R'}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0x419}}]}) r2 = open(&(0x7f0000000780)='./file0\x00', 0x4c6c00, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000800), r2) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x24, r4, 0x2, 0x70bd2c, 0x25dfdbfe, {{}, {}, {0x8, 0x11, 0x2}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x154}, 0x8) r5 = accept4(r2, &(0x7f0000000900)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000980)=0x80, 0x0) write$vhost_msg_v2(0xffffffffffffffff, &(0x7f0000001ac0)={0x2, 0x0, {&(0x7f00000009c0)=""/4096, 0x1000, &(0x7f00000019c0)=""/200, 0x0, 0x2}}, 0x48) recvmsg$can_bcm(r6, &(0x7f0000003040)={&(0x7f0000001b40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast1}}, 0x80, &(0x7f0000002f40)=[{&(0x7f0000001bc0)=""/4096, 0x1000}, {&(0x7f0000002bc0)=""/166, 0xa6}, {&(0x7f0000002c80)=""/49, 0x31}, {&(0x7f0000002cc0)=""/228, 0xe4}, {&(0x7f0000002dc0)=""/174, 0xae}, {&(0x7f0000002e80)=""/145, 0x91}], 0x6, &(0x7f0000002fc0)=""/104, 0x68}, 0x2101) close_range(r6, r3, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000030c0), r5) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000003200)={&(0x7f0000003080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000031c0)={&(0x7f0000003100)={0x84, r7, 0xc23, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x24}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}], @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x69}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x1ce}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x45}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}]]}, 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x8450) getsockname$packet(r1, &(0x7f0000003280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000032c0)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000003400)={&(0x7f0000003240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000033c0)={&(0x7f0000003300)=@delqdisc={0xa4, 0x25, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0x8, 0xffff}, {0xb, 0x11}, {0xfff2, 0xffe0}}, [@TCA_STAB={0x50, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xfa, 0x8, 0x401, 0x7, 0x0, 0x5, 0x1, 0x2}}, {0x8, 0x2, [0x0, 0xd994]}}, {{0x1c, 0x1, {0xd2, 0xc6, 0x8000, 0x0, 0x2, 0x2, 0x8, 0x3}}, {0xa, 0x2, [0xa, 0x7, 0xb2e]}}]}, @qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xffffffff, 0x6, 0x2}}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xac4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20008801}, 0x4000094) syz_genetlink_get_family_id$fou(&(0x7f0000003440), r3) open$dir(&(0x7f0000003480)='./file0\x00', 0x200000, 0x1) bind$inet6(r5, &(0x7f00000034c0)={0xa, 0x4e23, 0x20, @private1, 0xfffffffc}, 0x1c) sendmsg$NL80211_CMD_START_AP(r3, &(0x7f00000035c0)={&(0x7f0000003500)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000003580)={&(0x7f0000003540)={0x1c, r7, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24040801}, 0x0) ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000003600)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003640)={{{@in6=@empty, @in=@rand_addr=0x64010100, 0x4e24, 0x0, 0x4e22, 0x2, 0x2, 0x20, 0x40, 0x3a, r8, r9}, {0x707, 0xeb, 0x4, 0x3, 0x309, 0x6, 0xdb, 0x200}, {0x340000000, 0x27, 0x0, 0x9ae}, 0xd, 0x6e6bba, 0x0, 0x1, 0x3, 0x2}, {{@in=@dev={0xac, 0x14, 0x14, 0x15}, 0x4d4, 0x2b}, 0x2, @in=@local, 0x0, 0x2, 0x2, 0x3, 0x4, 0x3, 0x8}}, 0xe8) syz_open_dev$vbi(&(0x7f0000003740), 0x1, 0x2) r10 = accept4(r3, &(0x7f0000003780)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000003800)=0x80, 0x0) close_range(r6, r3, 0x0) ioctl$CDROM_DISC_STATUS(r2, 0x5327) sendto$inet6(r6, &(0x7f0000003840)="d3761c79995c21b353a0fc85220d78f3e22c6c9a35459a03dccb14ccc899dfe02b41e5ba8c7b340c2200a6ae1e33d447013e9b566f8bedcb95bd5566a386a863f524ef7388488c14f133857357ca384c2db21b91b62143718deff7b5116fa31bf7e57f73574982f56c1b691132d9d59ef41444214dabc61599f3cbb712c46e1845b5d238376b02677b2aaa8729cc4cd6790bf36d3106315c851b93ad16cf883b01cdc898893266136acb2421cd6f0467cedef56672fb", 0xb6, 0x1, &(0x7f0000003900)={0xa, 0x4e21, 0xd94, @dev={0xfe, 0x80, '\x00', 0xf}, 0x7f}, 0x1c) sendmsg$nl_route(r10, &(0x7f0000003a00)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000039c0)={&(0x7f0000003980)=@getrule={0x14, 0x22, 0x300, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000051}, 0x8800) 1.544229569s ago: executing program 4 (id=3106): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000200)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{}, 0x4, 0x2, 0x6, 0x8}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r0, 0x7b0, &(0x7f0000000100)={@any, 0x200}) 1.514531098s ago: executing program 33 (id=2977): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x4, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtfilter={0x4c, 0x2c, 0xd2b, 0xffffffff, 0x0, {0x0, 0x0, 0x0, r7, {0xb, 0x3}, {}, {0x1, 0x9}}, [@filter_kind_options=@f_u32={{0x8}, {0x20, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x7, 0x6, 0x0, 0x5, 0x401, 0x1000, 0x8a0, 0xd5}}, @TCA_U32_CLASSID={0x8, 0x1, {0x11, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x800) r8 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r8, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r8, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r8, 0x0) (async) shutdown(r8, 0x0) poll(&(0x7f0000000180)=[{r8}], 0x1, 0x2) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="01000000000000007fff010000000c0005006c000000000000000c0002000000000000000000040007800c00080000000000000000000800010000000000440007800800", @ANYRES32, @ANYRES32=r0], 0x90}}, 0x0) 1.386066259s ago: executing program 4 (id=3110): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x1, @mcast2, 0x1}}, {{0xa, 0x0, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffd}}}, 0x108) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x9, 0x3, &(0x7f0000000880)=ANY=[@ANYBLOB="85000000a0000000270000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x34, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710, @local}, 0x10, 0x80000) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r1, 0x28, 0x1, &(0x7f0000000040)=0x7fffffffffffffff, 0x8) 1.171693617s ago: executing program 4 (id=3112): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/locks\x00', 0x0, 0x0) preadv(r2, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x0, 0xfff}) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2, 0x0, 0x4}}, 0x2e) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x4e24, 0x1, @mcast2, 0x9}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) r6 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0) read$midi(r6, 0x0, 0xfffffffffffffeba) close_range(r5, 0xffffffffffffffff, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) connect$pppl2tp(r4, &(0x7f0000000640)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x5, {0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0xffff}}}, 0x3a) 853.505692ms ago: executing program 1 (id=3114): r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x200000000000, 0x0) ioctl$VIDIOC_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f00000000c0)={0x0, @bt={0x2, 0xffffffff, 0x1, 0x3, 0x3ff, 0x1, 0x5, 0xffffff80, 0x7, 0x2, 0x7, 0x5, 0x2, 0xd13, 0x10, 0xa, {0x5, 0x8}, 0x7, 0xd}}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000180), 0x18, 0xc880) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f00000001c0)=0x63) (async, rerun: 32) ioctl$SNDRV_PCM_IOCTL_DRAIN(r1, 0x4144, 0x0) (async, rerun: 32) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0305602, &(0x7f0000000000)={0x1, 0x0, {0x4}}) 791.567319ms ago: executing program 1 (id=3115): r0 = syz_clone(0x9858080, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) ptrace$pokeuser(0x6, r0, 0x4, 0xffff88806a709ffc) (async) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x20040001, &(0x7f00000001c0)={0x11, 0x2, 0x0, 0x1, 0x19, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'veth0_virt_wifi\x00', 0x0}) sendto$packet(r2, &(0x7f0000000180)="0b031200e0ff64000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000140)={0x11, 0x8100, r3}, 0x14) (async) r4 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000200)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bind$alg(r4, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) (async) r5 = socket(0x2a, 0x2, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_VM_DISABLE_NX_HUGE_PAGES(r7, 0x4068aea3, &(0x7f0000000240)={0xc4}) (async) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0xfffffffffffffe1d, 0x24, 0x20, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x3, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x81) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc, 0x2}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x3c}]}}]}, 0x44}}, 0x24004000) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) r8 = accept4(r4, 0x0, 0x0, 0x80800) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a00)=ANY=[], 0x9c}}, 0xc0a5) recvmsg$can_raw(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)=""/31, 0x1f}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000580)=""/80, 0x50}], 0x3}, 0x40010000) (async) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0x1) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000000700)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f00000009c0)=ANY=[@ANYRESOCT=r1, @ANYBLOB="23db0eb051a4f729d141db6a404b877d43ea9f210cdcb2de92edaa81e435c55ee566152e05e20910c00090030695d98602b2255ce138e3560a57e4b97e190be60d9d8037e7717cf54ad52b9c1b4323f3f9ae4898a7ad1f3d6f48aa738ec6e70b160aee0784", @ANYBLOB="000229bd7000fcdbdf25090000000c0001800800030001000000140001800800030002000000080003000100000040000180080003000000000008000300020000000800030003000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="14000200"/20], 0x74}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001400010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900ac8473797a30000000000900030073797a320008000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x31, r9, 0x497af000) socket$nl_netfilter(0x10, 0x3, 0xc) 654.818031ms ago: executing program 2 (id=3116): getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={""/10, ""/2, @broadcast}}}, &(0x7f0000000100)=0xe8) quotactl_fd$Q_QUOTAON(0xffffffffffffffff, 0x2, r1, &(0x7f0000000140)='./file0\x00') r2 = syz_open_pts(0xffffffffffffffff, 0x6c2302) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000180)) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000280)) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000380)) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000480)) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000580)) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x24, 0x2, 0x6, 0x3, 0x0, 0x0, {0x3, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0x4044084}, 0x4) r3 = accept$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f00000007c0)=0x14) r4 = accept(r3, &(0x7f0000000800)=@l2tp={0x2, 0x0, @multicast1}, &(0x7f0000000880)=0x80) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f00000008c0)=0x9, 0x4) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000000900)) r5 = syz_open_dev$video4linux(&(0x7f0000000a00), 0x0, 0x200) ioctl$FS_IOC_GETFSLABEL(r5, 0x81009431, &(0x7f0000000a40)) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000b40)=0x30600, 0x4) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f0, &(0x7f0000000c00)={'erspan0\x00', &(0x7f0000000b80)={'syztnl1\x00', r0, 0x1, 0x20, 0xd458, 0xfffffffc, {{0x14, 0x4, 0x1, 0x9, 0x50, 0x65, 0x0, 0x8, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@cipso={0x86, 0x13, 0x0, [{0x1, 0xd, "1b449fba7a9d3b3894c945"}]}, @noop, @timestamp_prespec={0x44, 0x24, 0xd5, 0x3, 0x3, [{@empty, 0x8}, {@dev={0xac, 0x14, 0x14, 0x19}, 0x5}, {@broadcast, 0x2}, {@multicast1, 0xc}]}, @end]}}}}}) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000c40)) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000d40), 0x4) ioctl$sock_inet_SIOCSIFDSTADDR(r3, 0x8918, &(0x7f0000000d80)={'veth1_to_hsr\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f0000000dc0)) r6 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000e80), 0x2, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2000) mount$fuse(0x0, &(0x7f0000000e00)='./file0\x00', &(0x7f0000000e40), 0x0, &(0x7f0000000f80)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x5}}, {@default_permissions}, {@allow_other}, {@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x37c82c96}}, {@allow_other}], [{@appraise_type}, {@fsmagic={'fsmagic', 0x3d, 0xffffffff}}, {@uid_lt={'uid<', r1}}]}}) syz_clone3(&(0x7f00000012c0)={0x10000000, &(0x7f00000010c0)=0xffffffffffffffff, &(0x7f0000001100), &(0x7f0000001140), {0x3b}, &(0x7f0000001180)=""/87, 0x57, &(0x7f0000001200)=""/106, &(0x7f0000001280)=[0x0, 0x0], 0x2}, 0x58) ioctl$FS_IOC_GETFSLABEL(r8, 0x81009431, &(0x7f0000001340)) getpeername$inet(r4, &(0x7f0000001440)={0x2, 0x0, @remote}, &(0x7f0000001480)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)=@ipv4_getnexthop={0x30, 0x6a, 0x200, 0x70bd2d, 0x25dfdbfc, {}, [@NHA_MASTER={0x8}, @NHA_ID={0x8, 0x1, 0x1}, @NHA_OIF={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x2040800) 654.530254ms ago: executing program 1 (id=3117): mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, 0x0, 0x0, 0x0, 0x0) (async) r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, &(0x7f0000000180)="360f01b2000000000f015c40090f01c5b8010000000f01d9e600b9800000c00f3235000100000f3066440f38809bf5ffffff640f08c4c2792a39410f01cf", 0x3e}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x56, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x24) (async) close(r0) 560.827208ms ago: executing program 2 (id=3118): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, r2, 0x0, r1}) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$sock_buf(r3, 0x1, 0x13, 0x0, &(0x7f0000000300)) pselect6(0x40, &(0x7f0000000180)={0x3a7, 0x8f, 0x100000000, 0x5, 0xffffffff, 0x6, 0x4, 0xf}, &(0x7f00000004c0)={0x1, 0xffffffffffff5f04, 0x1, 0xe09, 0x1, 0x2, 0x7fff, 0xfffffffffffffffd}, &(0x7f0000000500)={0x16f9, 0x81, 0x7, 0x4, 0x7, 0x2d, 0x70000000000, 0xb5}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0xffff]}, 0x8}) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9deb010018000000000000004d0000004d00000002000000000000000300000d0300000002000000050000000c00000004000000070000000079f2f060da4f5800000000010500000028000000030000000100000f0100000002000000060200"/107], 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x20044000) r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4003}, {0x0, 0x3ff}, 0x0, 0x3}) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000100)={@local, @multicast2, 0x0}, &(0x7f0000000140)=0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000000600)='syzkaller\x00', 0x6, 0xc3, &(0x7f0000000340)=""/195, 0x41000, 0x0, '\x00', r6, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_REPLACE_IOAS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0xb, r2, 0x0, r1}) (async) socket$inet(0x2, 0x4000000000000001, 0x0) (async) getsockopt$sock_buf(r3, 0x1, 0x13, 0x0, &(0x7f0000000300)) (async) pselect6(0x40, &(0x7f0000000180)={0x3a7, 0x8f, 0x100000000, 0x5, 0xffffffff, 0x6, 0x4, 0xf}, &(0x7f00000004c0)={0x1, 0xffffffffffff5f04, 0x1, 0xe09, 0x1, 0x2, 0x7fff, 0xfffffffffffffffd}, &(0x7f0000000500)={0x16f9, 0x81, 0x7, 0x4, 0x7, 0x2d, 0x70000000000, 0xb5}, &(0x7f0000000540)={0x77359400}, &(0x7f00000005c0)={&(0x7f0000000580)={[0xffff]}, 0x8}) (async) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9deb010018000000000000004d0000004d00000002000000000000000300000d0300000002000000050000000c00000004000000070000000079f2f060da4f5800000000010500000028000000030000000100000f0100000002000000060200"/107], 0x0, 0x6a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x20044000) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) (async) ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, &(0x7f0000000040)={{0x0, 0x4003}, {0x0, 0x3ff}, 0x0, 0x3}) (async) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000100)={@local, @multicast2}, &(0x7f0000000140)=0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="b7000000000000004e00000000000000870a000000000000950000000000000026e1cd0bef5dc2eec87f979f205a355188cc0dc897cbb266b0cdc6429a84d7f00c11821f92cb581543330650512f0cd0183ef42629a2f5dcf115c230f8d5637385ab7cafcf94abdd29f1a1c82f41ea62464d442c83400ff6fadf22d1d25b9f63f3b5945c6258b59319d9282e0ab499d7914801fcd4a00e00"/163], &(0x7f0000000600)='syzkaller\x00', 0x6, 0xc3, &(0x7f0000000340)=""/195, 0x41000, 0x0, '\x00', r6, @fallback=0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 451.926399ms ago: executing program 2 (id=3119): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x68) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000070000007f00000000000000000200e006091868"]) write$cgroup_int(r0, &(0x7f0000000040)=0x3, 0x12) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000001af7000600deec79fedbdf251c101402ff00c803001600000800010000000200"], 0x24}, 0x1, 0x0, 0x0, 0x8890}, 0x2) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000100)="6074eab4878745e5adcf1dd10c3366ff0764cee32106f581077db5f82d30be45c0fe8aca3223d6f2e5563673263a22c772328e6c59637f69b69ea36b171dcf91e9a7286923e81d9c76aab39dab702a52b6f6f9f8bbd14c47cb450aadf92a6775406328ed607ab60ddb3f2ef6b84cca9fed05564a4095ba570964d4696a69afc574052ee2458ec2409af1d3778707ca", 0x8f}, {&(0x7f0000000300)="4740d3219046411cebe4147ce5979b6a0e6cab24ad684f4cbd9bec8afc79b6e6db8e786599363ca464ea3ba27160d7c98d6053b2a1d4f44ab5c03e9793385ef993ff9694316b26379460c188295adb107e8615828101ea2198214cf4f43cd8e2adbe25514dab6ffdf8d554a768a951c3b0239ae9e364b9120fd3762e103e989b", 0x80}, {&(0x7f0000000380)="c07a42bfa8ebfbdb6d1f1b5049848d611caf69e12c2650fafe4047a7dcb887dd0107b2038a7625b59be0b431509024418bf83943fd1a6ae026823089ab5983028c516882bbb73b0b2143f2b3ce9b680933fb00fd4d05f213875792621e3d6bae4dc97bd70b4184e40aa8bd3107993d461677b3f469c0aab68703cc603c7a2eab5662f0468aae86634803c55895e7b489b4153b1bf59f07335375b0e806a7b2f2c1e51024ff28ef1253e18925679d016d816788909a3210063bdaf19bd7512d8dfa57bc2d53f285904bf2aea4ce454fa2bdf4ca41244639f4cdc245e0600a39e91ef5f1", 0xe3}, {&(0x7f0000000580)="7a3eeb9f63eaa530d97317b96392f2f9e228a9e8edba2db0ce0636ddcd32987a8b2923aee99b1ed6891f7f46704bd8119bda2a6801199f4d31afd0d47ef3341462d55793a9e17377b899652ffacd94289d0bef64fe6ca1643913278a53e8a6d48b2c5db5e2a47460e00b4872ff38a08dc36e72204b5682b1bd6efeb5037db2463323d2cd1890ede96f8e853fafd20e7e67be06d11bf0c073f2a0c6802d5298d4d8c88518ed7389a69d17c9f3", 0xac}], 0x4) ioctl$sock_x25_SIOCADDRT(r2, 0x890b, &(0x7f0000000200)={@null, 0x9, 'batadv0\x00'}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r5, r5, 0x0) ioctl$sock_bt_hci(r4, 0x800448d5, &(0x7f0000000080)) 451.612783ms ago: executing program 1 (id=3120): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000), 0xa010, &(0x7f0000000080)=ANY=[@ANYRES32=0x0]) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000087300fec00000000000000000000000000000ff020000000000000000000000000001"], 0x0) read$FUSE(r0, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x80d804}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000083c0)="125353421ae911490a535387bf81807a9b59c5726009a7c20cf92d7626acb5e810ee928f04b94f79e402462cdd88475d82b9b361c61f8ffb870101d5f5e74c93e6cc4df2ce3647aa3e23c0085c0c1f9a5a33d10407d3f907867ba9ffd89711a50a39045d42ba58631a2e31fd138a4609b8b060adaf480c395aae518ec0812b49def6f9bd14d97a95e841085c4b7608062d8df8a8e4aa4eab705512c6ddb9d1c6231986ed6773ab652ad9f18eecf01d6f853d2beaee3416bb07de92f6ffd1169eaaea82294095cffa42a308ee44e7d0a10d0397985f171dcf2ff79313d241c1b8343615f5dd3c9ebf2c5952fdfb965760f0109dd4716adc7325353c0a62520657bba5af69d59edc0339ab4529ef4fb924e42c1569049c2246a454e2aece2303d5e9c9a7262da4bc19cb6cee4692c0a34c7260df1d392ba689fde453d412a94f7d96c5ad5c9f17bd919c84e187cf965fd0b020374fbbcf3192c8ad8a892a4ed8c1663f4274dea918b1d66ac4706f8194eda40236966c6736ecb5359660eeb6ccf1ab2310b59ac1801d77cc07e3e7c073ba558ca807c4c5e2000e42282a825193e351d875923a359087d61fc61b146e362ceb5232d9fd846e75c71724cf500a4cbbb042b00636388e0a15c766e144b7a1345757b8c8ff31d55419af0719936386db53c6381b3bd28af103c08bd77985d902979e2f0527b5739068fd35d6d3abde4ee070fdee6a97788e6b2734c92a53025218efcdf3087825fe552f954b13a19e8c363b669cd34688b26ad44e26952f025b90946b4bbc56b02c7203cc518d9877265b1d9259ee9ae9f9763517890aaca2099d88a888c1133927a416a8f432c825722304625239cd193be61b354a0baac9731a2bb2a27e866c24aa03e1eb1d256aa4dc37923b4fbbe11beefc6274e835144faa5f85d7d42abc071f79a1fccb34535986a27f773d0c702123ce4a8537a2ebee1722dc7d65333d17027f1e9eb225134065f0b0759356e888a4f815385a9714046b10f0604f4372e9b86656276270017f2a5014cca179c7bd95210b538f9c69b3694b6e1dc68a7efb47168668904b4bfc1c1e8c9779d31a9e6a5a8b21c7f01b638b0c5bec2381527f6dfe1d349a40f1ac3c9b180e88d77268a25d1ed933e443ab90ced4c6b4f116b7a9fee7216756e83691a58a49875b15dd85c501c8e7e4f86836f8f204c4ca0e0e2eb3407adc10035eaf4cf27d279e1673d3ea409844eced099e396e67ee5c13bd8fc8ca046d0e80b23dc152df473b9f3891994a73abc072dd05bb55cb67f544deff42d1741e37b3ab1458bc24ee92bb598c000171922b05047abef23a466e9f38ceae5874d41063522d5997bb267ee41381c7f08e204713b8439c861cddca429dbe3b5803ee2788bf287cc68a21d060eab5bf4a3ee7d52a560cd357d9928479d500be4c8ea52380bb8bdedea9525611551b0d329bd6c677374f4ff78a1ce749e2b68f29dc2b14abcba53b139225b18b6747d3df61ec3b754903f563183f5d2b8b17a976b23db9c09672c8e90f993ee31a7734d561a641597fd5c1abb1fffbeb7ddabb9cd474c532d9d834e65c9b3c597a35637c6acdde621c4d7d3ffaf64c9c6ba36836533ae278234505d542ae760e7e92deee5f336f6a1047a90d0e35f767113c5eead70c22e7cdfa9815446650efbb1417cbdb20c1415033bce17d3727ba607035f43439b89d2809dc102b0760a9855404f8631e9d837e7ddffc164193a28f1762b20db38aebeff0d5d7d6d7bee5319a20af40380276321fad539bb4ded87f6356bb15723a2fb1f98b4b95e602a59da44a438430911197de685b44dc906d14d539abe5c1ea06dc28ffc48ae00470eddacbc78473401917dc969b62d5979b43ce9dfa41d2edbb9f9918c20591071bc1ad23fd064ea76d29e2e1e5b099173a2a30fe9d65acf23d759e625824841a9955d766dc63c49028bee6342009deeebbc678529817abbe8a9fb8668bc7d168b53ec9c14269387d8e08f11acc8933c42eb87d7aff56b61ca6fbb6d1f294694bd5edd73d27d1bb048b1ec6ed9cd90f745e1d6e5491a7ec241ff09d253a081b4e9b8d4ab0cd392027c13c627744ff881b1d394e1f0866729e4fc13fd0bf4351e0cb342861d55ece2567f0ab45a13fcc1c9de5746b95cd78ecad8b8bdbd2412d7037647f65c74e40773fa96febc69203853b744cfcbf189494e33ff1762382c2c1a3eedbc5c8cb2cd4a34978af1ba15423a22e2933ceb6abfbff4194a221bc323581500319dce117fc44c873f1f1558a0bdc1b7ffab1a229ce62f907c18a3806ab6d55376399742b232a8cc495ec740ccdfc50e501420877705bcef9fac646bb6956029957b4855320078d951b7ecb25fdf4cde840737f22f81400d1db2965c816dfa6ec52dba597109c7cbd6283f29055c9afa874119b97eede6452ad4a371568ef9381ebbf5e854f406c6ddd203055b8b93ef68104071b994a074238b9f376979ab0183d7f3cd6dcaf976a4ddef43bb9f207921238e181b5f36289c08a088fbbd8b1fc4047b68fb93de1486c580a69e7d0a89a74990106dea048868017cdf2ad0b8f784560ddb51812611fee8d64166550bb518ed37c5618c4931f5085f3603a553c4fd87407b9212e1feee73ed69a0bb5e5a7bf2e4e1c47ad3d53be86d8572fa98165c37ee2333b664161630567c874c0428fe3485a5e32ff528c8820cd797cbbd71bac85b64891883765955d9bdd56ad24a0949986730ec0a1a558210fd241bea2f0e546c2268f22f6e1b68bc37d03410fa48ab88798d5853ade1586080c2aaba01684d8d52bc0acc59873b72826d12e67e61a026b1d0feef8d3f8a5f1990af782ff38ea3c85a9a13c210ec2edb8a44f172a179436597dd766695de2484010a6ca45b9e4f4e60cd3ba50259a997deed946068ee833dbaea9da078275745804751b5867adba28c81a03c0cb7f9fe910e75aae81acd27c05d95231de31de45e299791d27eca1a1bd096fd9c08f5210fd1fcaa7e4a6ecf367adb9fac0286b46d26f344b6e0d6fc65cf01d281950895e92a4f57d24db1277167a57b885e6c8286c639c0757af742f027b7801a72a75f01baae40aea6231b148d21cda86528fd15fa7b03d7c75b083b7d6349297adab1baf5c3e9ca2886f9089882ab86bef926fea5879723efee3aac26249cfca8a93d6087a90a2598d5046878fa6bf5eb973927cd4c8bf9b9f558c249d841451c4cbef8dd7dfc273b80c3599aa72174b748b04974a3c6906bd2c46f5f995c8ec50729e09c04e3e56557be2c57026679a5db0016c825a32c6ec6d821b1b17b827b3ca2c12436c9d5d6fc95373cf5d3b79bef53683c0ff972dbe82ae2c9c44a010d36d9837e92b8c56086e57951f923063c81f0de8af1c0aef9b35a63048f52653cb9253177b09a9e570144e66a4779d40e7433769221d3bdd02912a8a77994545eafc2d7928b42adad4058cf4959ac9879b8baf4657fabd7ff11b53df67c103185cec9b86454e706ccb91f730f42af3197004dbc430c2021a85bbabf6caea8dbdd3b8062f2ce85cbb995d16aa15eed2f097030f92df963c280fd5e1cebff43b1cfa97c93fa1755c582212644cc643dc3661960cae2fc8c50935de9c57908b29a30ff28e45a7efc6228d5501cb2fd7aa4ff55c9d49aad6d3162c813b8e8a08991fc383812fd368743431097d7114ee105d194cd4239442a58799f573f5b0f16cfe677699869beb162c641700869205a28259137e3e012fe5704aef7a2b4f70b7cbfc450de62fb6aaf22276e4500b50789bc72397c933d371579f99dc696964421cdfd0531ec4d09ee7b07f9604dda97777242fdec6f345db177c75c395636e5b59d9ab88cf10ffde646be582009962822c84a3bf0abb90bd7edc91ede84d1d4444a3ce977fb9ade7de2dfcd2254e83707386fc246acc34400b2fc85f92221796fc65881eba76ea809f59c01db3ea9a7a8eacccf670efdff2d108a6c93b8159da89e17c4568eccb6a4d79c667258148f719367fdde7be1a2dc50538186415ffa235e2cb6418da4c3060667208ca354a67539255ff56f89204148abd2e1bf5283fd42808d9ac0357b65d94cf8e1d68c83de1896b0de4c205f1d458aa0df91b5af1f2f4f71c3f8d3f853aeb2cb5eb51b70a147bfdb28f41617c9760a592ff67c3772c65f335da35d030e121f30dacc6a5de00111654141e5cfe5d6a5eab32487db94ae5bc67c8f27f9be485d40be32794d12478e69338eb1bee7a991116cbf6c0b64dbfd7ba3a1464752d922af8925feb5d2b87da38b99cf48be96f58864abe94c95a70b3764c1ef60f1411bcbcf52dec9e318715cf76b4346972bbaca08574eeb3d67b47523cbf604cbd6300d7be6574724b8ebd40762aefe6ef0924bd320f0f06cbd13daf0acf1bd5c6221ce22e53e7ef3a38f25d44ae17743f354740c8be706662ea5c94a1cb54eb2726ef0af55ed15fa16a35b60974c861eb3c30261fa9926b4cd317b1b4d488277f295a763cd1c6a9e74f9241c6166056b1bc27bb3ff4ebd7ce98fc2d85f8b596aea0de16a6ed782191783a17ca1cda57cad694e8bd9d33a34577ab9cefff348863746ae53d38ebff125e64fb68f7d8efe5d400ff5b53df5fcd6a85cdc3ef950d11f17d62221b6e5c7d7056a0ee0e86bc15c76e9361f7a1073dfcdbf9fc8a3bdc3b69065c63f3360ced8a4f7a6992fa0e8c8ad4522063884578dc10e4e0759398d5583dac3ae8f61b37793a520dcc7cde284f51e924dbaab81519253dfa2312ce14ecdc490bb680838dc7f6a77b3e0f26058f82ae0445e9e455c257acd42e2fb6ceff53fb2b6239fe132ee1cd8480be25f4cdf02a8b4e395a411db09da3d5df16dab2a356a868a0aba2cbb1fe70cf014d2db742be8b3c74fb8cb2b3aa1b1346c0bc24c5f1f08a5b3e6a2498532518fdca216bcff90bcf2d4c4a9a52e71a22d338ec9965b25185da142cb185905ef5f108e00d816301982adef40a7aa388a87d12db1289ec51135ef4dbcb1c140e256b2d6eb6837dc9e6939ac271a530d6be3f67dd08d41a5a06d5a2195351ef17588999469a1439a5e1ac81f1a9f1176de92ddf946095b77ab534acbd5f7049cffb640e32e76f09a2fa9e43da0f3475677242aa705347e4480f39d640f051dfd9efaffc3d6c732608a07fdaf3413d43c6714e2438c14c77dbf1e41b6c6a92ce600898a1727aa0d96f1a15107a5b801d8ce5cc7b89f4a4ae9000c084e9fe5e26c893bbcf20fe6fd665b76f6c7ddf7abbce8ba4c87049997012732cae347e10f859338785f604658db061f1be29c6b9391e790424f01076c458dc2eceb77f515b5be383be741cc0845be3f027e843623a64e71c70323b83be35c742112d864b41b9e8fe2fcf02cec9e03dea2c8dd8f8a20dc4bb1acd4dcc2a6a41072513fc89704db116093d71f191b88da91b19c4ef41ef4ce0ec0db080517191e0bfdf55a4590f45d813b39560f10a59150216422c3338650975ffb049912511561cb430b02283ed2f5772dfe7a9dbea1776d21be94e6915cbeb6544c8d6193fac6c6443bca7d5c180daae0c136dda63365cf77d4f7243f4a16dfab027dac166354d8ab4ad8eea09c3f4cbdbddc98a3ab9d69e0e3b584ada61cfbbfc487b8ce53bfc337487f6fadeb2a958f2f79eb5fb5781718c2ae42788ea56854aff90f0ea6004ec0b943db9dc9ff8f2e03a021291376fec671df5303bfa5e70187268edfc8f93f39942d2096534492875fa0efba9c3cec4e1306754ffa9bb5394f4bf533c7c5551252b1eba0a8edc869d46d7f9988e51bf65e3a39220e902a3a324421693a1d6cc9f554e36e155c1f98f1381e99b6fd4c95af92d028c58b4263c81b204694ef0ce32573b59a492772c832d1277b8ac188e5a6186e1c3550c5f46fa41b0b18d30c9240b00a6f3ae1185797d6eb8c6c19e16555a299003a0143b44c48e230f10f3bb68c71f6da802d35469b9cad460aa105cbe2a15012db3344813bf26d9c310f9c6efed1548f9d79f3b2e22511b0cc02f3e71b74d674902ea6ba569d28f9917c4ec035a8bedbf2a5cd125236faa05fada606d292023865829ed978fcb02d316206e4b8ee588ec0b1a5ce0eed8205d680c726e55115dad2ea592c1e50c812758f84cd4d9899adb849fbfb821a52144faa51b0a5f4998bf2f7eecfc629fb4286745d111c13f8616df5d1f64287f2507bb8a1a2ed9b935535287fc7d4e49492bad9c5a149bb21500bc27b7f50662efef95dbc8c7d564ff14be60c4f8ad98547edebf1517caae37f8cd937e50d8b2ce5acca7f5b965fb4c87dfbcc105cbefff9885a0f4bbaf6a6f691754a99c35cfe739122736e89cff85761e01839dfadedc2b7c5e410ce1ad02308425142fbd9b10f13ae315af3e572b13e53ce304053c91c8792572fa198d0ee823b0f77f134436c5f60e413b759e7f8e2c240cf800e5d5e052848f0efb1329e67a2404cb611906bba9b42fa9a4d8c0e9bcc617a55b7bbe5c5a9c81f96450ef105787978a609b08d9a9c98577b9001285320aeabf49118f8249e6b0af48192637b7215f27fe7531ec9854adee06f27a80744f7592cc157cb59aae245d01e21f6a9c7afcf78c49f20cfa717d8b7cefb1bebc10bbabb4599f6b44e700f3e5906e8ef144fe0bd0a730e2d09d25f8ba5dce21fb7036a293ef46703098464a089cdda149d94cd587b58b6e6d4efbede8b1f6c71e3d912b4e3a383529e05a8d23f5a418ee4a84b0b0719788430ab8a292c371583de46c0e706e4c9e21040721afe54bd9256ab56173bd0252678f7acd23aa91affc5ff4bb0d365446b9b277085ae3478161808dc6c3d44580f0af43b923fd40dd1bc338c4f13bdd16b56fa41dbfecd29788f8f53af777877f8b980d3847cc99f1fac22c015cef351f9d95cddf02a6bf3ce1032f0d2ff4178a5caa53d9d06b9f7f61a4b9eff30148470d079f3bd48ede859bd130646aed72e5c20d1d796e5e8f4d0f2f3be2030e714b054645561517cb365e7cc8dd51d59e991160f15f3d7d4f9d0dde4161aa85d09828a2afe6384173ad7e1ad45e22b9f701fa4bc71f033def2f2946579b1fd0e1380ac76396a0feb2b3efd532978e3e29ce10f2a82ff2230a6278b343314904f0754758218350cabc3eebbb3544c13fc8194516bd6d1dfc6c2a96e7708150725688f35c4b29379314a803a6fb298bf56f676eef9a1308e05a6583e51d88a49f00c1de31bb2567262dc5032ff2f55f022c17faca1fe275ea00b7d36cfcfb76894000a4fe9227c656b4bda1f2413f4692b52b2edfd1437e8235ec60eefc2ff304d46a0fecb84fedfa521aa3666f1a09f9bcf2fb3cb0441495789a4cb2778bdf294acc81430781ca5d6fe7d5a7b99c7d0ce71a148abdfe57279cfd40483b12efe158e880c20f397964b506bf6c063fd6db7168ecd590b5d8b3c1e8fdf3aca1739f6e92af1ea8c80122a88ca9263de3e412dddba98753e08652bd6ec3ab81e7f12daa6eb511e58dbf60b1fba777bf13d979e7c1136c51dce11febb7ae215ec83307aff9b28b60c509fa9eb604e2bdf736dbe0c3d6ee4a34db2e5a32e594d24a64c32a9947c87cbe08acf848af0796cdfa3c2843cc97d34ee9d87e6ba96f3e6263aca04d1c02eccfc7c0c3262289cd6fb979dba7901ecbb6d15705b11c96ad4f769bd96edda5e82c26c503966ceeb4bf043885c41952a6db4c2ed76ddddb2a6155e61071629f597030e72c019242ec6f0367a8d5658f7c4e4e634e69a901a9168bb22b85b0e26ac0a517637e0070566a06066bb592d49ce0a418e317ab785bf9411f237e6f8c116544b7395db92e58178fe684309fcd9816279170b8bbe50841f1565de222efde69f751881bea8c88d2bd8fc7bccea671230b0efebed9e8d86a99a9111063c253891d54cd6ad2837f81812a09aa4479aa6403f829c7fc5c7edcc71713eb8b3a85ea328de14a07182b60888d923b8bf0f86fe2120f71fcf339dfd2ebb16f9cee1b2419a5166927deb4ffa12cc5e564d96f09cb34eb5a0d930a1ee21001ce04db480249e500085718c03944e602485d78b8f00c812a877c8a76595f04fa64f6d5780d017af3da9dcfd1896382fe0a3c8182ce5a319f006e8f3e63f843684cd3f7b642a40221f05beb41f0a940de59648125e842da03c46cfda0496fdb717aa14a2489daf632877d1a9365f2fd121fbb20d025fabd51850f30b93741d9b30673a64f6274967845607581854dd970726cdfed3690944fc964269e78b31578487edee0ea87c115be2bdf28af460a11fee5f4782b3ddf3dcb5e7e24f320efbdb9c9ed42ab87ac84d3ed3a3f63eea4f3bd73df1b0b3ceffba4f588ff1c8d33fb474d717db7d0930eb7e8bb061359baacc5dceecafc44045dc58b85a7e80751267770c59f780469eaef3dcb8b41f9c2d3d8bd4e102330a417e59d296224fc6e7f4a10da37c19d04c9da8f125870958748c7fcca2361e67fe69d4adb32343603d01a0c2950498f1e57c28a3bfff8dcd3ebf96b9fad889aaab33d86093ab78b83afbcff4cae4cad467170b220bca482f59f8acd472671b8b1640f63a77be94b026f74bf1591010d27bee4c8fc9fbd9fe9af1896eff59dc6c30022470a8c0d38795e2054d6a0934df4125039ba90a57e1fca0b1d1abe84026bd8c03787d869ce6989818af65abce3763cf6f9b696b4daa5205c8662036a3df86440b9f67b30b94c8715ac5148125cc50be5307e5bbdac55efcaeebe9589c6ce52e8a0c1259fbc6bca10882f78e851116f2f480b07291311fc6bf11a29a3702d31e74bbba752590dae5f12423942b112ee1ffec98aebb28eaa0b3a094919d4ad75c6cdc9f22a5b47f7e4b517ee3c07fde90d7cffdbd461fbe934f47b331c7d7a786555955ae108dda2efd5b4a1f66d9ab30b5547427e9e8dcb0c35b83dbacdd8cdedfa297a1ca97c59965f455527ecab8c01df3431df6b4a0cacf641e4eb32ac272c74075f98000836830f4d329a9fe7b35c0d88fa364e16d2c3a27abfe26d51b87e4dd9040080ef9a6b5641a4987b35f256dbcaeccb67e18845a25a1c547a35fc4c27b3eed78d8eac9303d5c57801b53ec4b63b7cc80929bef3f59a88d8a6ab8e6f0bcff60fd2259d6ea8cea91c4bdb8d7dc7c9706caace69b005005bb5c88eddcdae6dff2819d0cac55833c6b14ff5011f218b1e96f74ccb213e2d4d7631acb7e4a8fee6171eaed6f77cb7c119ade2645e81d4dc4be5080cd3d28014334164c2759223e7e226877359fa94f437866869b630e0d653a4dcb5603ee5d8d29b85805034b86b3fed1ed8dce76c79dbbf97b35c00529a0fa3f143556083a73ba7d249d7dc116967e33b6519d5468a730a8a6eb26873ff3b6beb01a222bdd5cd4453253a65484086b9fdd3d21050c66c29dfc16b9f0a7e86f5207a67b37cb35c4adf4455fe56b438cdd755475b335b297b3819c448c7708dc13da64383f9728b3b01d885ce4248b441684a13ca952dd5ccb9fbc82a9c75752f9c30ba886652ab88249cc404a0323fd5344ff4a65fbd3f2b0485d6834521d9ce392d50275c9e03a9b335ba159cbcd7e37f6177738640aa3c3c92e86303bb936d0e78c4b5124187e8ffca041fa77498b7af1994034b686645b1940b80994dfaf322f2647424376564b84fb571d8333061523bc7a2772789e589a47e19bea31dce972912e530864e88345d8025f27df6569ad6f96d4fc0ae3891dfc5d6b8e5ca63cc705a95086308ed83f0c347c25408180edbd656c3b44367f75e7b81a8c6df14850a088a4d0a9345f6cdbb941a2627034eb6daad08a49f08d7e1238a2f361f82da834b893f1f8ed6a3658ecca85f7195f8c0b690b6931273ee5de50ec97996cb142bec8d89789b26853849a12e9df565c90886fc2dffcee07b7a778ef06b9a205e7af24ec3b437742751ad8a711caf677acc3026ecd49fb9e778ecf59265c601a1735612fb5fe756caac9eb759138db80a7c20925e2f8c63757c92cd90131f6620601e955f0030f5227e42787fc266cbbee74a983bd5875a66d771418f6f2b7c2d7379f5f0ee59359c6e4c7d00d6c2cba48fa6caa64a3330ed92df55013e62fe636ea97982820213fb0672e9be9b0b51d7266aee893fe971573920a41e16f8e4cd6e19bc2f964fc8e8489333ede8b4fdec61f1740429c92bf853cd0e2e29ca1947a4165e54444b7251afbe35f397195be8f4599213b329194555ce01cbe3cb5d979be2736583d8659929c32d4e4f32949ee63b3c53f6a17ae8f0d75320b59215e030bc03af8a4aae25d178ce4328397176a6d526aaed2f708eec9a74faffdeec0ebd502998780fa0916c472f3e47a72e4bb43deb3fd12ba05292d63a2ccf422ae9c40587e50ab7b0ff39803300d0e953b614077e529e2b357bf901879a59909ff80f0fa7373f7e3a9020ed0dfd6752aadda5e700369a2a96c884d150389344d1446944b80b2e3332fbf2b286c99af51218f872f4e1e8c7b3a706860c36b88e2e443c9b8e26efa4a1c00daaf8d74e784a1f951191e3b87bd96c676252d70ab64c26fe4722fa52b1fe887979c08b248065ef4011651f037ddd521685761abefbe5cc428962f51ca0ac09089d9155d3fcd9386ef2a628a8ebcfc414ab6cf42d63b89fa6718947e73c9848a384f17947b9e1ccbbdec5a74e92218f495ba80462ab13f4c22f144539c3d2d61cb842d46c95d7adc44e06bdabecfefe777b10a8d512bc5a3742c764dbf8b1d89b3405d722350b3370c03387b3eb322b76c8719f9bf047cea863ca3289125386288373a44ac10a6b2835fc7bd6f966b37c167f73c369f41d34b7e25f1df1f542663c2b63c64c4e4e65fca3e79891a8ae8dc0439ae8001672378dd1f412dde932ea7f06ce9c844d158ed4d664ad490a79314e3a6802cba5be998b017f3dee1747b9e4622999d65bdbcdc8ed6c2e839e9167ce7bfeee23e3d398ba93e8211678e3c4004311260fd20b363113a1df8ef8e529adbba84eb7ca48522a213c7771d31857489854a92b4f19901b75b2101234ec15b2b31b43600086e3193209f3c1e4d04d7e4f3f1dbe93074e5443c76f520928a41d84269fc92c728f38b38995118527c2a5ca60db69b1a3967495be0556e0a1b0ee54ba6a38153cef7370bdd1611103a4450b99d80c67eda3cf0eb862faa040219d7d728337cfc8bb52ce758b778ad3faab55c61bf1b4a85b1ff7b48abe438819a169fba5f1351353ede1ae9f4991e22fc1c013833cb62b79b5df6f204758e233711a605e3b7c5c25360c15e2e8da2b663f4ba2baada84aa599c29ca9d3b69c19091df66d6b1ac52085d31c9f607e9144ee9815f3003cdb468d9c7cafd5be7f6ad136fca054540ea6c5570246814f069022840a2099d7605ae30ed9b751de3b7aaa1fa30bf5514e61b316c7640f9aad65d63dd89ca850419749383586d013fb56c3990d3a028ad691b04a5f681b5b11c53673572379029a6435615c7465d59ad32f9af7c3930958141fbb7dfa9d9e8426a2689c744b04d01ab51abe4ff3f15a5f4c496e44eb01291cb814477c35d0bdf86471ea075ae49416c210", 0x2000, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x18, 0x0, 0x0, {0x1b8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_usb_connect(0x1, 0x2d, &(0x7f0000000180)=ANY=[], 0x0) syz_usb_control_io(r2, 0x0, 0x0) mount(&(0x7f0000000180)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hfs\x00', 0x80, &(0x7f0000000280)='&.$[^#*>]&\x00') r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) open(&(0x7f0000000040)='./file0\x00', 0x80000, 0x40) ioctl$KIOCSOUND(r3, 0x4b2f, 0x4) 341.421217ms ago: executing program 2 (id=3121): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = syz_open_dev$sg(&(0x7f0000000080), 0xf9ba, 0x14b082) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x1, &(0x7f0000000140)={0x0, 0x21, 0x4}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f00000000c0)=0xc) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000001740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_uid={'access', 0x3d, r4}}], [], 0x6b}}) 337.65407ms ago: executing program 4 (id=3122): ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="08001106c80900010e000800010003"], 0x14) fsopen(&(0x7f0000001a40)='hostfs\x00', 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) 150.090123ms ago: executing program 4 (id=3123): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010000305000000000007000000000000", @ANYRES32=0x0, @ANYBLOB="000300000b000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0xc0b0) 149.784199ms ago: executing program 2 (id=3124): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new0default user:s'], 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000140)=0x1, 0x4) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mount$9p_virtio(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', &(0x7f0000000180), 0x10000, &(0x7f00000001c0)={'trans=virtio,', {[{@ignoreqv}]}}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r1, 0x3, 0x3) 257.174µs ago: executing program 2 (id=3125): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = dup(r0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0xfffffe64, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x101, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x0, 0x17, 0x1, 0x0, 0x2}]}]}, 0x58}}, 0x0) 0s ago: executing program 4 (id=3126): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) syz_open_dev$loop(&(0x7f0000000100), 0x2000000, 0xe2001) (async) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x41e43, 0x8) (async) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00", [0x0, 0xfffffffffffffff8]}}) (async) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) (async) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r1) (async) kernel console output (not intermixed with test programs): device strings: Mfr=0, Product=106, SerialNumber=59 [ 166.344168][ T3549] usb 6-1: Product: syz [ 166.345515][ T3549] usb 6-1: SerialNumber: syz [ 166.356355][ T3549] hub 6-1:250.228: bad descriptor, ignoring hub [ 166.358336][ T3549] hub 6-1:250.228: probe with driver hub failed with error -5 [ 166.448911][T13768] validate_nla: 122 callbacks suppressed [ 166.448926][T13768] netlink: 'syz.3.2314': attribute type 7 has an invalid length. [ 166.453938][T13768] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2314'. [ 166.557328][ T3549] usblp 6-1:250.228: usblp0: USB Bidirectional printer dev 12 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 166.680582][T13778] fuse: Unknown parameter 'f †!d' [ 166.684490][T13778] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2317'. [ 166.800129][T13788] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2318'. [ 166.920205][T13800] overlayfs: workdir and upperdir must be separate subtrees [ 167.445505][T13751] usb 6-1: reset high-speed USB device number 12 using dummy_hcd [ 167.472329][ T5934] Bluetooth: hci3: command 0x0c1a tx timeout [ 167.475695][ T1021] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 167.477739][ T1021] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 167.552352][ T5934] Bluetooth: hci4: command 0x0c1a tx timeout [ 167.612603][T13751] usb 6-1: device firmware changed [ 167.616405][ T1326] usb 6-1: USB disconnect, device number 12 [ 167.620883][ T1326] usblp0: removed [ 167.762041][ T1326] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 167.878856][T13815] random: crng reseeded on system resumption [ 167.923399][ T1326] usb 6-1: Using ep0 maxpacket: 8 [ 167.928770][ T1326] usb 6-1: config 0 has no interfaces? [ 167.931123][ T1326] usb 6-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00 [ 167.935069][ T1326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.940735][ T1326] usb 6-1: config 0 descriptor?? [ 167.944135][T13819] ata1.00: invalid multi_count 1 ignored [ 168.018814][T13815] Unrecognized hibernate image header format! [ 168.021227][T13815] PM: hibernation: Image mismatch: architecture specific data [ 168.070148][T13822] ALSA: mixer_oss: invalid OSS volume '' [ 168.144948][ T1326] usb 6-1: USB disconnect, device number 13 [ 168.322089][T12535] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 168.472103][T12535] usb 8-1: Using ep0 maxpacket: 8 [ 168.475061][T12535] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 168.478257][T12535] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 168.481248][T12535] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 168.484622][T12535] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 168.488603][T12535] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 168.491536][T12535] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.602192][T13835] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2331'. [ 168.713750][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 168.713761][ T40] audit: type=1400 audit(424.656:1619): avc: denied { setattr } for pid=13826 comm="syz.3.2328" name="/" dev="9p" ino=35913871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 168.722770][T12535] usb 8-1: GET_CAPABILITIES returned 0 [ 168.724604][T12535] usbtmc 8-1:16.0: can't read capabilities [ 168.749301][T13844] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2334'. [ 168.761539][ T40] audit: type=1400 audit(424.696:1620): avc: denied { write } for pid=13843 comm="syz.2.2334" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 168.901451][T13851] MPI: mpi too large (16392 bits) [ 168.903306][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2335'. [ 168.937949][ C2] usbtmc 8-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 168.944651][ T3549] usb 8-1: USB disconnect, device number 16 [ 169.543074][ T40] audit: type=1400 audit(425.486:1621): avc: denied { connect } for pid=13864 comm="syz.3.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 169.630027][T13867] kvm: MONITOR instruction emulated as NOP! [ 169.632069][ T5934] Bluetooth: hci4: command 0x0c1a tx timeout [ 169.634899][ T1021] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 169.637519][ T1021] Bluetooth: hci4: Error when powering off device on rfkill (-110) [ 169.800802][T13878] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 169.824848][T11974] Bluetooth: hci5: Frame reassembly failed (-84) [ 169.839654][T13882] SELinux: ebitmap: empty map [ 169.841552][T13882] SELinux: failed to load policy [ 169.904993][ T40] audit: type=1400 audit(425.846:1622): avc: denied { ioctl } for pid=13886 comm="syz.4.2348" path="socket:[45980]" dev="sockfs" ino=45980 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 169.942370][T13887] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2348'. [ 169.951789][ T40] audit: type=1400 audit(425.886:1623): avc: denied { write } for pid=13894 comm="syz.3.2350" lport=41355 faddr=fc00::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 170.115847][T13900] hub 2-0:1.0: USB hub found [ 170.117750][T13900] hub 2-0:1.0: 2 ports detected [ 170.348760][ T40] audit: type=1800 audit(426.286:1624): pid=13918 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.2357" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 170.398525][T13918] vivid-007: ================= START STATUS ================= [ 170.401646][T13918] vivid-007: Generate PTS: true [ 170.404403][T13918] vivid-007: Generate SCR: true [ 170.406504][T13918] tpg source WxH: 640x360 (Y'CbCr) [ 170.408775][T13918] tpg field: 1 [ 170.410204][T13918] tpg crop: (0,0)/640x360 [ 170.412056][T13918] tpg compose: (0,0)/640x360 [ 170.414010][T13918] tpg colorspace: 8 [ 170.415608][T13918] tpg transfer function: 0/0 [ 170.417602][T13918] tpg Y'CbCr encoding: 0/0 [ 170.419721][T13918] tpg quantization: 0/0 [ 170.421454][T13918] tpg RGB range: 0/2 [ 170.423221][T13918] vivid-007: ================== END STATUS ================== [ 170.792270][ T40] audit: type=1400 audit(426.726:1625): avc: denied { read } for pid=13939 comm="syz.4.2362" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 170.803333][ T40] audit: type=1400 audit(426.726:1626): avc: denied { open } for pid=13939 comm="syz.4.2362" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 170.836300][ T40] audit: type=1400 audit(426.776:1627): avc: denied { ioctl } for pid=13939 comm="syz.4.2362" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 170.938763][ T40] audit: type=1400 audit(426.876:1628): avc: denied { read } for pid=13950 comm="syz.4.2364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 171.753621][T13963] netlink: 'syz.3.2368': attribute type 39 has an invalid length. [ 171.757831][T13963] veth0_macvtap: left promiscuous mode [ 171.809506][T13966] __nla_validate_parse: 5 callbacks suppressed [ 171.809517][T13966] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2369'. [ 171.816457][T13966] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2369'. [ 171.882018][ T5934] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 171.882051][ T5931] Bluetooth: hci5: command 0x1003 tx timeout [ 171.995832][T13981] tty tty26: ldisc open failed (-12), clearing slot 25 [ 172.051285][T13989] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2378'. [ 172.075882][T13992] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2380'. [ 172.145653][T13999] FAT-fs (nullb0): bogus number of reserved sectors [ 172.147660][T13999] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 172.160835][T14001] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2383'. [ 172.204307][T14001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2383'. [ 172.615237][T14010] netlink: 'syz.4.2385': attribute type 21 has an invalid length. [ 172.618185][T14010] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2385'. [ 172.621124][T14010] netlink: 'syz.4.2385': attribute type 5 has an invalid length. [ 172.625330][T14010] netlink: 'syz.4.2385': attribute type 6 has an invalid length. [ 172.627792][T14010] netlink: 3 bytes leftover after parsing attributes in process `syz.4.2385'. [ 172.998432][T14046] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1792 sclass=netlink_route_socket pid=14046 comm=syz.3.2392 [ 173.444837][T14090] veth3: entered promiscuous mode [ 173.475620][T14082] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2404'. [ 173.482891][T14082] input: syz1 as /devices/virtual/input/input16 [ 173.505291][T14092] sch_tbf: burst 19872 is lower than device lo mtu (39799) ! [ 173.588332][T14097] netlink: 'syz.3.2408': attribute type 21 has an invalid length. [ 173.590836][T14097] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2408'. [ 173.602197][T14097] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 173.604540][T14097] netlink: 'syz.3.2408': attribute type 1 has an invalid length. [ 173.606984][T14097] netlink: 'syz.3.2408': attribute type 2 has an invalid length. [ 173.647155][T14106] 9pnet: Could not find request transport: xen [ 173.746351][T14110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=14110 comm=syz.3.2412 [ 173.826890][ T40] kauditd_printk_skb: 11 callbacks suppressed [ 173.826903][ T40] audit: type=1400 audit(429.766:1640): avc: denied { execute } for pid=14123 comm="syz.1.2416" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=48692 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 173.901259][ T40] audit: type=1400 audit(429.836:1641): avc: denied { setattr } for pid=14136 comm="syz.3.2419" name="file0" dev="9p" ino=35913891 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 173.912010][T12535] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 173.999128][ T40] audit: type=1400 audit(429.936:1642): avc: denied { accept } for pid=14143 comm="syz.3.2421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 173.999913][T14143] delete_channel: no stack [ 174.063355][T12535] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.066996][T12535] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.070221][T12535] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 174.073786][T12535] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.080423][T12535] usb 7-1: config 0 descriptor?? [ 174.469000][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.472525][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.475554][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.478567][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.481471][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.485156][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.486844][T12535] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 174.487972][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.488020][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.490763][T12535] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0 [ 174.491682][T14114] netlink: 'syz.2.2413': attribute type 2 has an invalid length. [ 174.493198][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.493219][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.493237][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.493253][ T3549] hid-generic 0000:0004:0000.000B: unknown main item tag 0x0 [ 174.501377][T12535] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.000C/input/input17 [ 174.511695][ T3549] hid-generic 0000:0004:0000.000B: hidraw0: HID v0.00 Device [syz0] on syz1 [ 174.534931][T12535] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 174.541130][T12535] usb 7-1: USB disconnect, device number 4 [ 174.561334][T14161] fido_id[14161]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 174.577119][T14162] fido_id[14162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb7/7-1/report_descriptor': No such file or directory [ 174.654927][T14164] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 174.784195][T14181] syzkaller1: entered promiscuous mode [ 174.787186][T14181] syzkaller1: entered allmulticast mode [ 174.993616][T14186] misc userio: Begin command sent, but we're already running [ 175.020034][T14191] 0: renamed from hsr0 (while UP) [ 175.024319][T14191] 0: entered allmulticast mode [ 175.026297][T14191] hsr_slave_0: entered allmulticast mode [ 175.028435][T14191] hsr_slave_1: entered allmulticast mode [ 175.030949][T14191] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 175.105090][T14195] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 175.155781][T14201] xt_hashlimit: size too large, truncated to 1048576 [ 175.439938][T14221] program syz.2.2446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.476613][ T40] audit: type=1400 audit(431.416:1643): avc: denied { ioctl } for pid=14224 comm="syz.2.2447" path="/dev/input/mouse0" dev="devtmpfs" ino=946 ioctlcmd=0xb704 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 175.481858][T14229] hpfs: Bad magic ... probably not HPFS [ 175.587522][ T40] audit: type=1400 audit(431.526:1644): avc: denied { accept } for pid=14236 comm="syz.2.2450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 175.589771][T14237] program syz.2.2450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 175.595281][ T40] audit: type=1400 audit(431.526:1645): avc: denied { write } for pid=14236 comm="syz.2.2450" name="binder0" dev="binder" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 175.715295][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.719485][ T40] audit: type=1400 audit(431.656:1646): avc: denied { read } for pid=14257 comm="syz.2.2456" name="/" dev="configfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.720288][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.726734][ T40] audit: type=1400 audit(431.656:1647): avc: denied { open } for pid=14257 comm="syz.2.2456" path="/" dev="configfs" ino=2156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 175.730759][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.739216][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.744389][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.750292][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.753321][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.758397][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.761962][ T40] audit: type=1400 audit(431.696:1648): avc: denied { bind } for pid=14259 comm="syz.4.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.762505][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.767821][ T40] audit: type=1400 audit(431.696:1649): avc: denied { connect } for pid=14259 comm="syz.4.2457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 175.774350][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.811707][T14266] xt_hashlimit: size too large, truncated to 1048576 [ 175.824471][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.832349][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.862302][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.874368][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.878098][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.880783][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.885372][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.889162][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.889567][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.893998][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.894438][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.894897][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.901508][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.904295][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.905705][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.911736][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.916612][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.918157][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.918592][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.919065][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.919473][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.919865][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.920302][T14256] XFS (nbd3): no-recovery mounts must be read-only. [ 175.930107][T14266] Cannot find map_set index 0 as target [ 176.205698][T14286] dns_resolver: Unsupported content type (234) [ 176.208348][T14286] dns_resolver: Unsupported content type (234) [ 176.211419][T14286] dns_resolver: Unsupported content type (234) [ 176.283931][T14302] x_tables: ip_tables: ah match: only valid for protocol 51 [ 176.324132][T14304] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 176.397929][T14313] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 176.438367][T14316] fuse: Bad value for 'group_id' [ 176.440324][T14316] fuse: Bad value for 'group_id' [ 176.505140][T14318] A link change request failed with some changes committed already. Interface bond3 may have been left with an inconsistent configuration, please check. [ 176.682062][T12535] usb 9-1: new low-speed USB device number 4 using dummy_hcd [ 176.833420][T14352] overlayfs: missing 'lowerdir' [ 176.835545][T12535] usb 9-1: config index 0 descriptor too short (expected 1307, got 27) [ 176.838273][T12535] usb 9-1: config 0 has an invalid interface number: 0 but max is -1 [ 176.841036][T12535] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 176.845640][T12535] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 176.849029][T12535] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 176.852254][T12535] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 176.858800][T12535] usb 9-1: string descriptor 0 read error: -22 [ 176.860892][T12535] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 176.864287][T12535] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.871799][T12535] usb 9-1: config 0 descriptor?? [ 176.874454][T14316] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 176.877845][T12535] hub 9-1:0.0: bad descriptor, ignoring hub [ 176.879868][T12535] hub 9-1:0.0: probe with driver hub failed with error -5 [ 176.885604][T12535] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input18 [ 176.985254][T14361] __nla_validate_parse: 14 callbacks suppressed [ 176.985269][T14361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2489'. [ 177.023362][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2490'. [ 177.143862][T14381] netlink: 'syz.1.2496': attribute type 1 has an invalid length. [ 177.152018][ T5934] Bluetooth: hci0: command tx timeout [ 177.177506][T14387] xt_hashlimit: size too large, truncated to 1048576 [ 177.204594][T14391] binder: 14390:14391 ioctl c0306201 0 returned -14 [ 177.265212][ T3549] usb 9-1: USB disconnect, device number 4 [ 177.277104][T14394] binder: 14390:14394 ioctl ae01 0 returned -22 [ 177.312558][T14396] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 177.315420][T14396] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 177.416314][T14402] block nbd2: shutting down sockets [ 178.347721][T14439] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 178.407320][T14445] lo: left promiscuous mode [ 178.422814][T14445] : left promiscuous mode [ 178.430177][T14445] batadv0: left promiscuous mode [ 178.532264][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2521'. [ 178.742332][T14445] wg2: left promiscuous mode [ 178.743895][T14445] wg2: left allmulticast mode [ 178.772017][T12535] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 178.784481][T14445] 0: left allmulticast mode [ 178.786417][T14445] hsr_slave_0: left allmulticast mode [ 178.788510][T14445] hsr_slave_1: left allmulticast mode [ 178.804856][T14445] veth1_vlan: left allmulticast mode [ 178.902049][T12535] usb 8-1: device descriptor read/64, error -71 [ 179.039200][T14445] ipvlan2: left allmulticast mode [ 179.040815][T14445] macvlan0: left allmulticast mode [ 179.045297][T14445] bridge4: left promiscuous mode [ 179.046896][T14445] bridge4: left allmulticast mode [ 179.049358][T14445] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.052147][T14445] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.054907][T14445] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.057628][T14445] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.112152][T14445] geneve2: left promiscuous mode [ 179.113951][T14445] geneve2: left allmulticast mode [ 179.142317][T12535] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 179.159370][T14463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2523'. [ 179.163380][T14463] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2523'. [ 179.169758][T14463] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.172721][T14463] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.175505][T14463] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.178294][T14463] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 179.214054][T14470] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 179.233055][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 179.233067][ T40] audit: type=1326 audit(435.176:1662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14471 comm="syz.4.2526" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9ddd38e969 code=0x0 [ 179.256533][T14474] FAT-fs (nullb0): bogus number of reserved sectors [ 179.258688][T14474] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 179.272600][T12535] usb 8-1: device descriptor read/64, error -71 [ 179.395042][T12535] usb usb8-port1: attempt power cycle [ 179.453022][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 179.602480][ T34] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 179.605574][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.608414][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.612689][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.615467][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.618303][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.622568][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.626136][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.629705][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.634308][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.637882][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.641430][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.645930][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.649883][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.653617][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.657173][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.659997][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.662885][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.666251][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.669213][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.672556][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.675902][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.678791][ T34] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 179.681439][ T34] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 179.684834][ T34] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.688322][ T34] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 179.691369][ T34] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 179.694191][ T34] usb 7-1: Product: syz [ 179.695521][ T34] usb 7-1: Manufacturer: syz [ 179.696982][ T34] usb 7-1: SerialNumber: syz [ 179.700495][ T34] usb 7-1: config 0 descriptor?? [ 179.705916][ T34] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 179.732302][T12535] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 179.752792][T12535] usb 8-1: device descriptor read/8, error -71 [ 179.992034][T12535] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 180.012894][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2531'. [ 180.013247][T12535] usb 8-1: device descriptor read/8, error -71 [ 180.045020][ T40] audit: type=1400 audit(524723.983:1663): avc: denied { ioctl } for pid=14487 comm="syz.1.2532" path="socket:[51352]" dev="sockfs" ino=51352 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.052791][ T40] audit: type=1400 audit(524723.993:1664): avc: denied { connect } for pid=14487 comm="syz.1.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.058629][ T40] audit: type=1400 audit(524723.993:1665): avc: denied { write } for pid=14487 comm="syz.1.2532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.124163][T12535] usb usb8-port1: unable to enumerate USB device [ 180.219299][T14500] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=14500 comm=syz.1.2536 [ 180.301643][T14504] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2538'. [ 180.306452][T14504] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2538'. [ 180.356378][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2541'. [ 180.394481][T14516] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 180.487540][ T40] audit: type=1400 audit(524724.429:1666): avc: denied { map } for pid=14530 comm="syz.1.2546" path="socket:[52277]" dev="sockfs" ino=52277 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.515846][ T40] audit: type=1400 audit(524724.459:1667): avc: denied { getopt } for pid=14530 comm="syz.1.2546" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 180.588229][T14535] autofs: Bad value for 'fd' [ 180.590836][T14535] tmpfs: Unknown parameter 'indo64' [ 180.617561][ T3549] usb 7-1: USB disconnect, device number 5 [ 180.689458][T14539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2549'. [ 180.693455][T14539] IPVS: Error joining to the multicast group [ 180.846661][ T40] audit: type=1400 audit(524724.776:1668): avc: denied { bind } for pid=14547 comm="syz.4.2553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 180.890730][ T40] audit: type=1400 audit(524724.826:1669): avc: denied { map } for pid=14554 comm="syz.1.2556" path="socket:[51028]" dev="sockfs" ino=51028 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 180.917136][T14557] 9pnet: Could not find request transport: fdrfdno=0x0000000000000003 [ 180.974897][T14566] random: crng reseeded on system resumption [ 181.114775][T14577] netlink: 'syz.4.2561': attribute type 4 has an invalid length. [ 181.123475][T14577] : renamed from bond0 (while UP) [ 181.394719][T14596] input: syz1 as /devices/virtual/input/input20 [ 181.626075][T14606] binder: BC_ATTEMPT_ACQUIRE not supported [ 181.628649][T14606] binder: 14605:14606 ioctl c0306201 200000000100 returned -22 [ 181.634610][ T24] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 181.664453][ T40] audit: type=1400 audit(524725.580:1670): avc: denied { execute } for pid=14607 comm="syz-executor" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 181.673775][ T40] audit: type=1400 audit(524725.580:1671): avc: denied { execute_no_trans } for pid=14607 comm="syz-executor" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 181.745295][T14609] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=66 sclass=netlink_audit_socket pid=14609 comm=syz.1.2571 [ 181.785470][ T24] usb 9-1: Using ep0 maxpacket: 32 [ 181.791286][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.798150][ T24] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.802308][ T24] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 181.808306][ T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.813608][ T24] usb 9-1: config 0 descriptor?? [ 181.868122][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.871445][ T5931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.876140][ T5931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.879816][ T5931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.883224][ T5931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.895255][ T5934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 181.898006][ T5934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 181.901250][ T5934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 181.905043][ T5934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 181.909991][ T5934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.970742][ T3549] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 182.030768][ T24] savu 0003:1E7D:2D5A.000D: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0 [ 182.247786][T11975] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.282424][ T3549] usb 9-1: USB disconnect, device number 5 [ 182.361952][T11975] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.495924][T11975] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.564945][T14623] loop2: detected capacity change from 0 to 7 [ 182.571654][ T5929] Dev loop2: unable to read RDB block 7 [ 182.573475][ T5929] loop2: unable to read partition table [ 182.575402][ T5929] loop2: partition table beyond EOD, truncated [ 182.586429][T14623] Dev loop2: unable to read RDB block 7 [ 182.588320][T14623] loop2: unable to read partition table [ 182.590255][T14623] loop2: partition table beyond EOD, truncated [ 182.592292][T14623] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 182.634214][T11975] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.654029][T14626] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 182.703338][T14631] 9pnet_virtio: no channels available for device syz [ 182.749341][T14617] chnl_net:caif_netlink_parms(): no params data found [ 182.915376][T14640] __nla_validate_parse: 2 callbacks suppressed [ 182.915389][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 182.920531][T14617] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.922956][T14617] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.925611][T14617] bridge_slave_0: entered allmulticast mode [ 182.929610][T14617] bridge_slave_0: entered promiscuous mode [ 182.933426][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 182.946698][T14617] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.950437][T14617] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.953476][T14617] bridge_slave_1: entered allmulticast mode [ 182.957502][T14617] bridge_slave_1: entered promiscuous mode [ 182.960937][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 183.004463][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 183.027782][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 183.032204][T14617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 183.036365][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 183.747377][T14657] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2584'. [ 183.793119][T14659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=768 sclass=netlink_route_socket pid=14659 comm=syz.2.2585 [ 183.890288][ T1021] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 183.893649][ T1021] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 183.896813][ T1021] hid-generic 0000:0004:0000.000E: unknown main item tag 0x0 [ 183.913093][ T1021] hid-generic 0000:0004:0000.000E: hidraw0: HID v0.00 Device [syz0] on syz1 [ 183.957779][T14662] fido_id[14662]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 183.982061][ T5934] Bluetooth: hci0: command tx timeout [ 184.132491][T14667] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2587'. [ 184.619181][T11975] bond1 (unregistering): Released all slaves [ 184.625892][T11975] bond2 (unregistering): Released all slaves [ 185.424511][T11975] bond3 (unregistering): Released all slaves [ 185.434833][T11975] bond4 (unregistering): Released all slaves [ 185.445713][T11975] bond5 (unregistering): Released all slaves [ 186.087311][ T5934] Bluetooth: hci0: command tx timeout [ 186.280395][T11975] bond6 (unregistering): Released all slaves [ 186.286548][T11975] bond7 (unregistering): Released all slaves [ 186.292905][T11975] bond8 (unregistering): Released all slaves [ 187.046788][T11975] bond0 (unregistering): (slave veth7): Releasing active interface [ 187.086787][T11975] bond0 (unregistering): (slave veth0_to_bond): Releasing active interface [ 187.147356][T11975] bond0 (unregistering): (slave bond10): Releasing active interface [ 187.195637][T11975] bond0 (unregistering): Released all slaves [ 187.201877][T11975] bond9 (unregistering): Released all slaves [ 188.032620][T11975] bond10 (unregistering): Released all slaves [ 188.044483][T14617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 188.048475][T14640] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2579'. [ 188.086368][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 188.086380][ T40] audit: type=1400 audit(524731.963:1682): avc: denied { read } for pid=14669 comm="syz.1.2589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 188.109179][T14678] netlink: 'syz.4.2588': attribute type 4 has an invalid length. [ 188.115097][T11975] : left promiscuous mode [ 188.150577][T14617] team0: Port device team_slave_0 added [ 188.155247][T14617] team0: Port device team_slave_1 added [ 188.182094][ T5934] Bluetooth: hci0: command tx timeout [ 188.306241][T14687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 188.309039][T14687] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 188.317027][T14617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 188.319255][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.324601][T14688] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2592'. [ 188.336322][T14617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 188.344897][T14617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 188.347882][T14617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 188.358788][T14617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 188.546061][ T3549] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 188.707154][ T3549] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.710394][ T3549] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 188.713264][ T3549] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 188.716822][ T3549] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.721576][ T3549] usb 7-1: config 0 descriptor?? [ 188.725628][ T3549] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 188.728174][ T3549] dvb-usb: bulk message failed: -22 (3/0) [ 188.737197][ T3549] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 188.740373][ T3549] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 188.743105][ T3549] usb 7-1: media controller created [ 188.752994][ T3549] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 188.767262][ T3549] dvb-usb: bulk message failed: -22 (6/0) [ 188.769654][ T3549] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 188.773779][ T3549] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb7/7-1/input/input21 [ 188.781523][ T3549] dvb-usb: schedule remote query interval to 150 msecs. [ 188.783738][ T3549] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 188.926725][ T3549] usb 7-1: USB disconnect, device number 6 [ 189.059830][ T3549] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 189.580184][T14617] hsr_slave_0: entered promiscuous mode [ 189.582608][T14617] hsr_slave_1: entered promiscuous mode [ 189.584668][T14617] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.587564][T14617] Cannot create hsr debugfs directory [ 190.248703][T14715] x_tables: duplicate underflow at hook 1 [ 190.266334][ T5934] Bluetooth: hci0: command tx timeout [ 190.356852][ T40] audit: type=1400 audit(524734.218:1683): avc: denied { transfer } for pid=14719 comm="syz.4.2601" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 190.410117][ T40] audit: type=1400 audit(524734.277:1684): avc: denied { write } for pid=14724 comm="syz.2.2603" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 190.471650][T14617] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 190.476285][T14617] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 190.480381][T14617] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 190.485866][T14617] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 190.488982][T14733] binder: binder_mmap: 14732 200000ffd000-200001000000 bad vm_flags failed -1 [ 190.626783][T11975] veth1_vlan: left promiscuous mode [ 190.628517][T11975] veth0_vlan: left promiscuous mode [ 190.756063][ T40] audit: type=1326 audit(524734.615:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14757 comm="syz.1.2612" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff48858e969 code=0x0 [ 190.898495][T14773] Bluetooth: MGMT ver 1.23 [ 190.901885][T14773] Bluetooth: hci0: expected 2 bytes, got 7 bytes [ 190.951261][T14776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2616'. [ 192.239301][ T1021] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 192.390272][ T1021] usb 7-1: Using ep0 maxpacket: 16 [ 192.393845][ T1021] usb 7-1: config 6 has an invalid interface number: 169 but max is 0 [ 192.396371][ T1021] usb 7-1: config 6 contains an unexpected descriptor of type 0x1, skipping [ 192.398987][ T1021] usb 7-1: config 6 has no interface number 0 [ 192.401014][ T1021] usb 7-1: config 6 interface 169 altsetting 3 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 192.404292][ T1021] usb 7-1: config 6 interface 169 altsetting 3 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 192.407616][ T1021] usb 7-1: config 6 interface 169 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0 [ 192.410670][ T1021] usb 7-1: config 6 interface 169 altsetting 3 bulk endpoint 0x5 has invalid maxpacket 16 [ 192.413725][ T1021] usb 7-1: config 6 interface 169 altsetting 3 endpoint 0xC has invalid maxpacket 512, setting to 64 [ 192.417031][ T1021] usb 7-1: config 6 interface 169 altsetting 3 has an invalid descriptor for endpoint zero, skipping [ 192.420427][ T1021] usb 7-1: config 6 interface 169 altsetting 3 endpoint 0x4 has an invalid bInterval 73, changing to 10 [ 192.423800][ T1021] usb 7-1: config 6 interface 169 has no altsetting 0 [ 192.427641][ T1021] usb 7-1: New USB device found, idVendor=2040, idProduct=c60a, bcdDevice=ce.5e [ 192.430423][ T1021] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.432949][ T1021] usb 7-1: Product: የꉈ忛诼䪆鄟돍︎亄鵤൱䩅玶蔯ꗝ➅띴ⵢꢬￅ逨栓鷖騗䮘蛵✮뉽෶佴繩 [ 192.436949][ T1021] usb 7-1: Manufacturer: 奓衝鈊✜箺촞첗סƔ纊魑肋㱤츈䕈ℹ锹ᘅ㙣旰鋷ꕷ䛱듧穦პ瑚囈꽩ݕআᡨ靌녈鲄蠗焛혥㾡⛄뀦㎮ﰛ징㛁鞹즠쾞形▐ꐗ㇚̹呸뺿朵氁毿楁嚽㰉꽵䁁➛흲垺ᖡ뷖㵚퇉뾘雵꯭ᵰ싩⾱鿢풅눦닽ꖣ㐿煭儺ᆤ㻊䡂뮃擱 [ 192.446366][ T1021] usb 7-1: SerialNumber: 䀒 [ 192.454181][ T1021] usb 7-1: rejected 1 configuration due to insufficient available bus power [ 192.456925][ T1021] usb 7-1: no configuration chosen from 1 choice [ 194.134037][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.015201][ T5935] usb 7-1: USB disconnect, device number 7 [ 204.444623][T14767] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 204.453643][T14767] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 204.469006][T14617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.474011][T14794] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 204.479161][T14617] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.486607][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.488871][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.498362][T11974] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.500621][T11974] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.565261][T14814] vxcan1: entered allmulticast mode [ 204.616760][T14617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.619251][T14814] vxcan1: left allmulticast mode [ 204.621651][ T40] audit: type=1400 audit(524748.392:1686): avc: denied { accept } for pid=14813 comm="syz.2.2626" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 204.646053][T14617] veth0_vlan: entered promiscuous mode [ 204.651539][T14617] veth1_vlan: entered promiscuous mode [ 204.672180][T14617] veth0_macvtap: entered promiscuous mode [ 204.679702][T14617] veth1_macvtap: entered promiscuous mode [ 204.688292][T14617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.691629][T14617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.695488][T14617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.698630][T14617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.702421][T14617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.711530][T14617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.715363][T14617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.717237][T14835] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2631'. [ 204.718470][T14617] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.725363][T14617] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.729175][T14617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.745805][T14617] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.748536][T14617] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.751324][T14617] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.754327][T14617] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.987622][ T40] audit: type=1400 audit(524748.760:1687): avc: denied { getopt } for pid=14856 comm="syz.1.2637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 205.187725][T14861] CIFS mount error: No usable UNC path provided in device string! [ 205.187725][T14861] [ 205.187729][T14860] CIFS mount error: No usable UNC path provided in device string! [ 205.187729][T14860] [ 205.187741][T14860] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 205.191007][T14861] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 205.375315][T11981] Bluetooth: hci5: Frame reassembly failed (-84) [ 205.694764][T14865] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.697429][T14865] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.700015][T14865] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.702688][T14865] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 205.724322][T11981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.726830][T11981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.745038][T11968] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.747603][T11968] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.831268][ T40] audit: type=1400 audit(524749.606:1688): avc: denied { getopt } for pid=14874 comm="syz.3.2570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.837552][ T40] audit: type=1400 audit(524749.606:1689): avc: denied { setattr } for pid=14874 comm="syz.3.2570" name="NETLINK" dev="sockfs" ino=55012 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 205.851332][ T40] audit: type=1400 audit(524749.606:1690): avc: denied { setattr } for pid=14874 comm="syz.3.2570" name="NETLINK" dev="sockfs" ino=55013 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 205.854772][T14882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2644'. [ 205.858942][ T40] audit: type=1400 audit(524749.616:1691): avc: denied { create } for pid=14879 comm="syz.4.2643" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 205.858967][ T40] audit: type=1400 audit(524749.616:1692): avc: denied { sys_admin } for pid=14879 comm="syz.4.2643" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 206.002629][T14885] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2645'. [ 206.095922][ T40] audit: type=1400 audit(524749.864:1693): avc: denied { bind } for pid=14890 comm="syz.4.2646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 206.147612][T14897] CIFS mount error: No usable UNC path provided in device string! [ 206.147612][T14897] [ 206.150912][T14897] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 206.158135][ T40] audit: type=1400 audit(524749.924:1694): avc: denied { read } for pid=14895 comm="syz.4.2649" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 206.169845][ T40] audit: type=1400 audit(524749.924:1695): avc: denied { open } for pid=14895 comm="syz.4.2649" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 206.190078][T14894] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.198066][T14894] kvm: pic: level sensitive irq not supported [ 206.198679][T14894] kvm: pic: non byte read [ 206.204227][T14894] kvm: pic: level sensitive irq not supported [ 206.204558][T14894] kvm: pic: non byte read [ 206.210057][T14894] kvm: pic: level sensitive irq not supported [ 206.210340][T14894] kvm: pic: non byte read [ 206.215877][T14894] kvm: pic: level sensitive irq not supported [ 206.216160][T14894] kvm: pic: non byte read [ 206.221946][T14894] kvm: pic: level sensitive irq not supported [ 206.222267][T14894] kvm: pic: non byte read [ 206.227702][T14894] kvm: pic: level sensitive irq not supported [ 206.227958][T14894] kvm: pic: non byte read [ 206.233352][T14894] kvm: pic: level sensitive irq not supported [ 206.233631][T14894] kvm: pic: non byte read [ 206.240024][T14894] kvm: pic: level sensitive irq not supported [ 206.240433][T14894] kvm: pic: non byte read [ 206.245839][T14894] kvm: pic: level sensitive irq not supported [ 206.246192][T14894] kvm: pic: non byte read [ 206.251750][T14894] kvm: pic: level sensitive irq not supported [ 206.252350][T14894] kvm: pic: non byte read [ 206.253220][T14901] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2648'. [ 206.690647][T14914] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2653'. [ 207.407313][ T5931] Bluetooth: hci5: command 0x1003 tx timeout [ 207.407814][ T5934] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 207.509485][T14930] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2658'. [ 207.514292][T14930] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 207.520980][T14930] SELinux: failed to load policy [ 207.640417][T14928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2657'. [ 207.709458][T14935] ceph: Path missing in source [ 207.731372][T14941] netlink: 'syz.3.2661': attribute type 25 has an invalid length. [ 207.822174][T14943] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2662'. [ 208.110881][ T1326] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 208.156785][T14951] netlink: 'syz.3.2666': attribute type 12 has an invalid length. [ 208.160030][T14951] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61451 sclass=netlink_route_socket pid=14951 comm=syz.3.2666 [ 208.282757][ T1326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.286173][ T1326] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.289205][ T1326] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 208.293616][ T1326] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.298706][ T1326] usb 6-1: config 0 descriptor?? [ 208.367856][T14955] sg_write: data in/out 32732/251 bytes for SCSI command 0x0-- guessing data in; [ 208.367856][T14955] program syz.3.2667 not setting count and/or reply_len properly [ 208.536799][T14962] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2670'. [ 208.540588][T14962] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2670'. [ 208.544875][T14965] cgroup: none used incorrectly [ 208.557496][T14962] overlay: Unknown parameter 'hash' [ 208.620111][T14970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.707902][T14962] SELinux: selinux_ima_measure_state_locked: failed to read policy -12. [ 208.712868][ T1326] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 208.715374][ T1326] cm6533_jd 0003:0D8C:0022.000F: unknown main item tag 0x0 [ 208.719067][ T1326] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:0D8C:0022.000F/input/input22 [ 208.738530][ T1326] cm6533_jd 0003:0D8C:0022.000F: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.1-1/input0 [ 208.848316][T14998] xt_ecn: cannot match TCP bits for non-tcp packets [ 208.863608][T14998] Bluetooth: MGMT ver 1.23 [ 208.866914][T15000] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.869703][T15000] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.873096][T15000] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.877440][T15000] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 208.919090][ T1326] usb 6-1: USB disconnect, device number 14 [ 209.167968][T15025] loop2: detected capacity change from 0 to 7 [ 209.171248][T14796] loop2: [POWERTEC] p1 [ 209.173426][T14796] loop2: p1 start 131088 is beyond EOD, truncated [ 209.177939][T15025] loop2: [POWERTEC] p1 [ 209.180949][T15025] loop2: p1 start 131088 is beyond EOD, truncated [ 209.312854][T15032] omfs: Invalid superblock (0) [ 209.347072][ T1021] usb 8-1: new full-speed USB device number 21 using dummy_hcd [ 209.395889][T15037] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5123 sclass=netlink_route_socket pid=15037 comm=syz.4.2695 [ 209.401676][T15037] netlink: 'syz.4.2695': attribute type 30 has an invalid length. [ 209.468941][T15050] x_tables: ip_tables: esp match: only valid for protocol 50 [ 209.521126][ T1021] usb 8-1: config 0 has no interfaces? [ 209.524138][ T1021] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 209.527040][ T1021] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 209.530635][ T1021] usb 8-1: Product: syz [ 209.531971][ T1021] usb 8-1: Manufacturer: syz [ 209.534770][ T1021] usb 8-1: config 0 descriptor?? [ 209.654504][T15062] tun0: tun_chr_ioctl cmd 1074025675 [ 209.656234][T15062] tun0: persist enabled [ 209.659444][T15058] tun0: tun_chr_ioctl cmd 1074025675 [ 209.661734][T15058] tun0: persist enabled [ 209.664296][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 209.664308][ T40] audit: type=1400 audit(524753.416:1790): avc: denied { create } for pid=15057 comm="syz.1.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.675910][ T40] audit: type=1400 audit(524753.426:1791): avc: denied { setopt } for pid=15057 comm="syz.1.2702" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 209.733754][ T40] audit: type=1400 audit(524753.486:1792): avc: denied { ioctl } for pid=15067 comm="syz.2.2705" path="socket:[57772]" dev="sockfs" ino=57772 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.739485][T15068] netlink: 'syz.2.2705': attribute type 1 has an invalid length. [ 209.742385][ T5974] usb 8-1: USB disconnect, device number 21 [ 209.744470][ T40] audit: type=1400 audit(524753.486:1793): avc: denied { getopt } for pid=15067 comm="syz.2.2705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 209.761537][ T40] audit: type=1400 audit(524753.496:1794): avc: denied { egress } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 209.771583][ T40] audit: type=1400 audit(524753.496:1795): avc: denied { sendto } for pid=15 comm="ksoftirqd/0" saddr=fe80::1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 209.780978][ T40] audit: type=1400 audit(524753.496:1796): avc: denied { setopt } for pid=15069 comm="syz.4.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.788802][ T40] audit: type=1400 audit(524753.496:1797): avc: denied { write } for pid=15069 comm="syz.4.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.796665][ T40] audit: type=1400 audit(524753.516:1798): avc: denied { mount } for pid=15069 comm="syz.4.2706" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 209.807588][ T40] audit: type=1400 audit(524753.516:1799): avc: denied { create } for pid=15069 comm="syz.4.2706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 209.899330][T15083] __nla_validate_parse: 7 callbacks suppressed [ 209.899346][T15083] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2711'. [ 209.900232][T15084] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 209.908538][T15084] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 210.115972][T15108] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2718'. [ 210.161069][ T835] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 210.313388][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.317140][ T835] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.320216][ T835] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 210.323060][T15118] ipvlan2: entered allmulticast mode [ 210.323072][T15118] macvlan0: entered allmulticast mode [ 210.323080][T15118] veth1_vlan: entered allmulticast mode [ 210.328243][ T835] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.333003][ T835] usb 7-1: config 0 descriptor?? [ 210.422411][ T5974] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 210.585260][ T5974] usb 8-1: config 0 has no interfaces? [ 210.588644][ T5974] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 210.591493][ T5974] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 210.594997][ T5974] usb 8-1: Product: syz [ 210.596343][ T5974] usb 8-1: Manufacturer: syz [ 210.599490][ T5974] usb 8-1: config 0 descriptor?? [ 210.746521][ T835] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 210.749827][ T835] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 210.758056][ T835] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0D8C:0022.0010/input/input24 [ 210.788944][ T835] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0 [ 210.883733][T15136] netdevsim netdevsim3: loading /lib/firmware// failed with error -22 [ 210.888017][T15136] netdevsim netdevsim3: Direct firmware load for / failed with error -22 [ 210.899889][T15136] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 210.949013][T12535] usb 7-1: USB disconnect, device number 8 [ 211.480729][T15144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2728'. [ 211.513072][T15148] netlink: 236 bytes leftover after parsing attributes in process `syz.2.2729'. [ 211.769422][T15166] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9) [ 211.771536][T15166] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 211.775854][T15166] vhci_hcd vhci_hcd.0: Device attached [ 211.926669][T15172] bridge_slave_0: left allmulticast mode [ 211.928700][T15172] bridge_slave_0: left promiscuous mode [ 211.930830][T15172] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.934629][T15172] bridge_slave_1: left allmulticast mode [ 211.936434][T15172] bridge_slave_1: left promiscuous mode [ 211.938322][T15172] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.944041][T15172] bond4: (slave veth0_to_bond): Releasing active interface [ 211.946338][T15172] veth0_to_bond: left allmulticast mode [ 212.003224][T15172] : (slave bond_slave_0): Releasing backup interface [ 212.010029][T12535] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 212.050620][ T835] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 212.073009][T15172] : (slave bond_slave_1): Releasing backup interface [ 212.121316][ T10] usb 8-1: USB disconnect, device number 22 [ 212.123969][T15172] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.127299][T15172] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.134353][T15172] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.136735][T15172] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.144108][T15172] bond3: (slave wireguard0): Releasing backup interface [ 212.202760][ T835] usb 7-1: not running at top speed; connect to a high speed hub [ 212.207250][ T835] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 212.213085][ T835] usb 7-1: config 1 interface 0 has no altsetting 0 [ 212.217887][ T835] usb 7-1: New USB device found, idVendor=056a, idProduct=0335, bcdDevice= 0.40 [ 212.222932][ T835] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.226414][ T835] usb 7-1: Product: ࠧ [ 212.228310][ T835] usb 7-1: Manufacturer: ᐌ [ 212.230125][ T835] usb 7-1: SerialNumber: 믧긼行闳醁谐㳦匟꘏ି䡘彭⍃岖ꯐ잰攩迪ݭ⛕픑䂺腥叇룾癩᳠칐ެ鏻औ鐤碰ᩨ〉졫៱网괌逷爉찣瓾螓刳攨䒘軪Ꙃ撳ꘞ归䥿褱견䎴ꑞҹ驛臕ᘼ㞂췇蔱狁銙튢㵤漩쾫ྎ텴䗪育镬㪽裤顗㌮࠴褽郈⋪룪턂婣䥄雜▧ꒁ獵ﰵ䴊⮫료䵽䯫⑱䙟빁⡆ [ 212.466372][T15167] vhci_hcd: connection reset by peer [ 212.468504][ T835] usbhid 7-1:1.0: can't add hid device: -71 [ 212.469776][T11963] vhci_hcd: stop threads [ 212.471344][ T835] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 212.474580][T11963] vhci_hcd: release socket [ 212.477208][ T835] usb 7-1: USB disconnect, device number 9 [ 212.479658][T11963] vhci_hcd: disconnect device [ 212.657124][ T5931] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.662685][ T5931] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.666752][ T5931] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.670077][T15197] nullb0: AHDI p1 [ 212.671435][ T5931] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.676556][ T5931] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.795900][T15201] pimreg3: entered allmulticast mode [ 212.799140][T15201] xt_SECMARK: invalid mode: 0 [ 212.890606][T15196] chnl_net:caif_netlink_parms(): no params data found [ 212.985278][T15196] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.987583][T15196] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.989899][T15196] bridge_slave_0: entered allmulticast mode [ 212.992398][T15196] bridge_slave_0: entered promiscuous mode [ 212.996108][T15196] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.998385][T15196] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.000714][T15196] bridge_slave_1: entered allmulticast mode [ 213.003894][T15196] bridge_slave_1: entered promiscuous mode [ 213.038760][T15196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.045507][T15196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.082477][T15196] team0: Port device team_slave_0 added [ 213.087197][T15196] team0: Port device team_slave_1 added [ 213.120315][T15196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.122519][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.130575][T15196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.134761][T15196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.136987][T15196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.144883][T15196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.193615][T15196] hsr_slave_0: entered promiscuous mode [ 213.196023][T15196] hsr_slave_1: entered promiscuous mode [ 213.198241][T15196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.201645][T15196] Cannot create hsr debugfs directory [ 213.301897][T15196] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.381267][T15196] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.449337][T15196] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.521307][T15196] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 213.744297][T15196] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.748273][T15196] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.752204][T15196] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.756032][T15196] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.799527][T15196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.808180][T15196] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.814132][T11974] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.816987][T11974] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.824835][T11968] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.827639][T11968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.950883][T15196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 213.974712][T15196] veth0_vlan: entered promiscuous mode [ 213.980099][T15196] veth1_vlan: entered promiscuous mode [ 213.999814][T15196] veth0_macvtap: entered promiscuous mode [ 214.004031][T15196] veth1_macvtap: entered promiscuous mode [ 214.005797][T15252] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2756'. [ 214.011733][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.015650][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.017677][T15252] syz.3.2756: attempt to access beyond end of device [ 214.017677][T15252] nbd3: rw=0, sector=16, nr_sectors = 1 limit=0 [ 214.019524][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.019541][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.021011][T15196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.023804][T15252] qnx6: unable to read the first superblock [ 214.033203][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.035504][T15252] syz.3.2756: attempt to access beyond end of device [ 214.035504][T15252] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 214.035666][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.038985][T15252] qnx6: unable to read the first superblock [ 214.044778][T15196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.047694][T15252] qnx6: unable to read the first superblock [ 214.050185][T15196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.052509][T15196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.066984][T15196] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.070205][T15196] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.073060][T15196] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.076112][T15196] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.095989][T15254] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2757'. [ 214.112018][T15254] macsec0: entered promiscuous mode [ 214.117655][T11974] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.121338][T11974] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.148986][T11963] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.152206][T11963] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.441378][T15262] delete_channel: no stack [ 214.556383][T15277] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2765'. [ 214.667852][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 214.676583][T15279] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2764'. [ 214.689011][T15283] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2766'. [ 214.715330][ T40] kauditd_printk_skb: 557 callbacks suppressed [ 214.715342][ T40] audit: type=1400 audit(524758.442:2357): avc: denied { allowed } for pid=15281 comm="syz.2.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 214.724049][ T5934] Bluetooth: hci5: command tx timeout [ 214.733017][ T40] audit: type=1400 audit(524758.462:2358): avc: denied { sqpoll } for pid=15281 comm="syz.2.2767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 214.738946][ T40] audit: type=1400 audit(524758.462:2359): avc: denied { create } for pid=15281 comm="syz.2.2767" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 214.747707][ T40] audit: type=1400 audit(524758.462:2360): avc: denied { name_bind } for pid=15280 comm="syz.3.2766" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 214.756957][ T40] audit: type=1400 audit(524758.462:2361): avc: denied { node_bind } for pid=15280 comm="syz.3.2766" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 214.768063][ T40] audit: type=1400 audit(524758.472:2362): avc: denied { create } for pid=15280 comm="syz.3.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.779331][ T40] audit: type=1400 audit(524758.472:2363): avc: denied { write } for pid=15280 comm="syz.3.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.788153][ T40] audit: type=1400 audit(524758.472:2364): avc: denied { nlmsg_write } for pid=15280 comm="syz.3.2766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 214.795216][ T40] audit: type=1400 audit(524758.472:2365): avc: denied { module_request } for pid=15280 comm="syz.3.2766" kmod="crypto-authenc(digest_null,ecb(cipher_null))" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 214.810480][ T40] audit: type=1400 audit(524758.502:2366): avc: denied { name_bind } for pid=15281 comm="syz.2.2767" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 215.095319][T15294] netlink: 100 bytes leftover after parsing attributes in process `syz.4.2769'. [ 215.138600][T15294] 8021q: VLANs not supported on vcan0 [ 215.177211][T15296] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 215.180886][T15296] overlayfs: failed to set xattr on upper [ 215.182972][T15296] overlayfs: ...falling back to redirect_dir=nofollow. [ 215.185353][T15296] overlayfs: ...falling back to index=off. [ 215.187454][T15296] overlayfs: ...falling back to uuid=null. [ 215.476761][T15304] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=15304 comm=syz.4.2772 [ 215.939703][T15325] overlayfs: missing 'lowerdir' [ 216.150078][T15339] netlink: 220 bytes leftover after parsing attributes in process `syz.4.2785'. [ 216.256085][T15344] program syz.3.2786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 216.443776][T15358] ubi31: attaching mtd0 [ 216.445358][T15358] ubi31 error: ubi_attach_mtd_dev: bad VID header (16) or data offsets (80) [ 216.815412][ T5934] Bluetooth: hci5: command tx timeout [ 216.838488][T15377] netlink: 'syz.3.2797': attribute type 1 has an invalid length. [ 216.895486][T15389] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2799'. [ 216.950855][T15377] bond1: entered promiscuous mode [ 216.953594][T15377] 8021q: adding VLAN 0 to HW filter on device bond1 [ 217.123656][T12535] vhci_hcd: vhci_device speed not set [ 217.578593][T15399] program syz.1.2801 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 217.972663][T15415] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 218.070766][T15423] random: crng reseeded on system resumption [ 218.482672][T15446] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 218.746518][ T65] usb 9-1: new low-speed USB device number 6 using dummy_hcd [ 218.793441][T15458] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 218.857896][T15455] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2817'. [ 218.860632][T15455] bridge_slave_0: left allmulticast mode [ 218.862453][T15455] bridge_slave_0: left promiscuous mode [ 218.864418][T15455] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.868603][T15455] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 218.902043][ T5934] Bluetooth: hci5: command tx timeout [ 218.935026][ T65] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 218.938593][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.943248][ T65] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.948059][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.952652][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.962465][ T65] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 218.964823][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.968144][ T65] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.971814][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.975368][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 218.981952][ T65] usb 9-1: config 168 descriptor has 1 excess byte, ignoring [ 218.985219][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 218.988643][ T65] usb 9-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 218.992462][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 218.995932][ T65] usb 9-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 219.010333][ T65] usb 9-1: string descriptor 0 read error: -22 [ 219.012607][ T65] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 219.015568][ T65] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.045709][ T65] adutux 9-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 219.228753][ T5934] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 219.232176][ T5934] Bluetooth: hci0: Injecting HCI hardware error event [ 219.237242][ T5934] Bluetooth: hci0: hardware error 0x00 [ 219.253283][ T3549] usb 9-1: USB disconnect, device number 6 [ 219.709982][T15466] loop2: detected capacity change from 0 to 7 [ 219.716324][T15466] Dev loop2: unable to read RDB block 7 [ 219.718161][T15466] loop2: unable to read partition table [ 219.719997][T15466] loop2: partition table beyond EOD, truncated [ 219.722070][T15466] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 219.769171][ T40] kauditd_printk_skb: 1573 callbacks suppressed [ 219.769182][ T40] audit: type=1400 audit(524763.460:3940): avc: denied { recv } for pid=15447 comm="syz.4.2815" saddr=10.0.2.2 src=46928 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 219.779440][ T40] audit: type=1400 audit(524763.470:3941): avc: denied { recv } for pid=15447 comm="syz.4.2815" saddr=10.0.2.2 src=46928 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 219.792488][ T40] audit: type=1400 audit(524763.470:3942): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37958 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 219.800929][ T40] audit: type=1400 audit(524763.470:3943): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=37958 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 219.812113][ T40] audit: type=1400 audit(524763.470:3944): avc: denied { read } for pid=15467 comm="syz.2.2821" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.826142][ T40] audit: type=1400 audit(524763.470:3945): avc: denied { read open } for pid=15467 comm="syz.2.2821" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.833394][ T40] audit: type=1400 audit(524763.470:3946): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37958 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 219.840948][ T40] audit: type=1400 audit(524763.470:3947): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=37958 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 219.848911][ T40] audit: type=1400 audit(524763.470:3948): avc: denied { ioctl } for pid=15467 comm="syz.2.2821" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 219.859675][ T40] audit: type=1400 audit(524763.490:3949): avc: denied { recv } for pid=5916 comm="syz-executor" saddr=127.0.0.1 src=37958 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 219.981811][T15472] binder: 15470:15472 ioctl c0306201 200000000180 returned -22 [ 219.987489][T15473] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2822'. [ 219.992058][T15473] 0: renamed from hsr0 (while UP) [ 219.997713][T15472] netlink: 9 bytes leftover after parsing attributes in process `syz.4.2822'. [ 220.004249][T15473] 0: entered allmulticast mode [ 220.007066][T15473] hsr_slave_0: entered allmulticast mode [ 220.009527][T15473] hsr_slave_1: entered allmulticast mode [ 220.012242][T15473] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check. [ 220.018971][T15472] 1: renamed from 70 (while UP) [ 220.028198][T15472] A link change request failed with some changes committed already. Interface 71 may have been left with an inconsistent configuration, please check. [ 220.060198][T15477] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 220.266651][T15494] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2826'. [ 220.327268][T15496] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=15496 comm=syz.2.2830 [ 220.522559][T15509] fuse: Unknown parameter '' [ 220.588883][T15510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2834'. [ 220.619439][T15510] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2834'. [ 220.699960][T15515] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 220.990063][ T5931] Bluetooth: hci5: command tx timeout [ 221.186116][T15532] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2841'. [ 221.188341][T15537] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 221.552741][ T5934] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 221.555427][T15555] IPVS: Unknown mcast interface: map [ 221.838944][T15567] netlink: 100 bytes leftover after parsing attributes in process `syz.3.2849'. [ 221.995430][T15574] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2850'. [ 222.163972][T15584] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2854'. [ 222.767294][T15623] xt_hashlimit: size too large, truncated to 1048576 [ 222.773326][T15625] xt_hashlimit: size too large, truncated to 1048576 [ 222.848326][T15630] netlink: 80 bytes leftover after parsing attributes in process `syz.3.2868'. [ 222.973994][T15634] netlink: 'syz.3.2869': attribute type 11 has an invalid length. [ 223.077804][T15636] mkiss: ax0: crc mode is auto. [ 223.244660][T15650] netlink: 'syz.2.2875': attribute type 10 has an invalid length. [ 223.262453][T15650] batman_adv: batadv0: Adding interface: team0 [ 223.264696][T15650] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 223.333245][T15657] netlink: 'syz.2.2875': attribute type 10 has an invalid length. [ 223.335727][T15657] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2875'. [ 223.338578][T15657] team0: entered promiscuous mode [ 223.361938][T15657] team_slave_0: entered promiscuous mode [ 223.363894][T15657] team_slave_1: entered promiscuous mode [ 223.366726][T15657] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.369043][T15657] batman_adv: batadv0: Interface activated: team0 [ 223.381751][T15657] batman_adv: batadv0: Interface deactivated: team0 [ 223.386755][T15657] batman_adv: batadv0: Removing interface: team0 [ 223.390058][T15657] bridge0: port 2(team0) entered blocking state [ 223.392254][T15657] bridge0: port 2(team0) entered disabled state [ 223.394370][T15657] team0: entered allmulticast mode [ 223.396060][T15657] team_slave_0: entered allmulticast mode [ 223.398177][T15657] team_slave_1: entered allmulticast mode [ 223.411854][T15657] bridge0: port 2(team0) entered blocking state [ 223.413903][T15657] bridge0: port 2(team0) entered forwarding state [ 223.479356][T15666] syzkaller1: entered promiscuous mode [ 223.490203][T15666] syzkaller1: entered allmulticast mode [ 223.693118][T15669] program syz.3.2880 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 224.352843][T15682] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2885'. [ 224.356225][T15682] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 224.434811][ T1021] usb 7-1: new full-speed USB device number 10 using dummy_hcd [ 224.568747][T15691] fuse: Bad value for 'fd' [ 224.611728][ T1021] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 1024, setting to 64 [ 224.633192][ T1021] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 224.638170][ T1021] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 224.641622][ T1021] usb 7-1: Product: syz [ 224.643501][ T1021] usb 7-1: Manufacturer: syz [ 224.645645][ T1021] usb 7-1: SerialNumber: syz [ 224.656040][ T1021] usb 7-1: config 0 descriptor?? [ 224.676363][T15676] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 224.812085][ T40] kauditd_printk_skb: 1632 callbacks suppressed [ 224.812096][ T40] audit: type=1400 audit(524768.499:5582): avc: denied { create } for pid=15699 comm="syz.1.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.828505][ T40] audit: type=1400 audit(524768.499:5583): avc: denied { recv } for pid=28 comm="ksoftirqd/1" saddr=127.0.0.1 src=37958 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 224.836360][ T40] audit: type=1400 audit(524768.519:5584): avc: denied { write } for pid=15699 comm="syz.1.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.842525][ T40] audit: type=1400 audit(524768.519:5585): avc: denied { write } for pid=15699 comm="syz.1.2891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 224.884875][ T40] audit: type=1400 audit(524768.569:5586): avc: denied { read write } for pid=15675 comm="syz.2.2882" name="chaoskey0" dev="devtmpfs" ino=3403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.892335][ T40] audit: type=1400 audit(524768.569:5587): avc: denied { read write open } for pid=15675 comm="syz.2.2882" path="/dev/chaoskey0" dev="devtmpfs" ino=3403 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 224.902704][ T40] audit: type=1400 audit(524768.569:5588): avc: denied { read write } for pid=15675 comm="syz.2.2882" name="vbi0" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 224.910058][ T40] audit: type=1400 audit(524768.569:5589): avc: denied { read write open } for pid=15675 comm="syz.2.2882" path="/dev/vbi0" dev="devtmpfs" ino=977 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 224.917616][T15700] netlink: 'syz.1.2891': attribute type 1 has an invalid length. [ 224.920071][T15700] netlink: 'syz.1.2891': attribute type 2 has an invalid length. [ 224.924689][ T40] audit: type=1400 audit(524768.609:5590): avc: denied { read write } for pid=15699 comm="syz.1.2891" name="video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 224.932070][ T40] audit: type=1400 audit(524768.609:5591): avc: denied { read write open } for pid=15699 comm="syz.1.2891" path="/dev/video8" dev="devtmpfs" ino=976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 225.046458][T15702] netlink: 'syz.4.2892': attribute type 21 has an invalid length. [ 225.049381][T15702] netlink: 'syz.4.2892': attribute type 5 has an invalid length. [ 225.052692][T15702] netlink: 'syz.4.2892': attribute type 6 has an invalid length. [ 225.393379][T15710] sctp: [Deprecated]: syz.4.2896 (pid 15710) Use of int in max_burst socket option deprecated. [ 225.393379][T15710] Use struct sctp_assoc_value instead [ 225.401941][ T65] usb 7-1: USB disconnect, device number 10 [ 225.467123][T15712] __nla_validate_parse: 6 callbacks suppressed [ 225.467138][T15712] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2898'. [ 225.473248][T15712] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2898'. [ 225.479799][T15712] netlink: 72 bytes leftover after parsing attributes in process `syz.2.2898'. [ 225.627760][T15725] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 225.736756][T15730] netfs: Couldn't get user pages (rc=-14) [ 225.772898][ T3549] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 225.812543][T15733] GUP no longer grows the stack in syz.2.2904 (15733): 200000004000-200000005000 (200000003000) [ 225.816132][T15733] CPU: 3 UID: 0 PID: 15733 Comm: syz.2.2904 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 225.816149][T15733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 225.816155][T15733] Call Trace: [ 225.816159][T15733] [ 225.816163][T15733] dump_stack_lvl+0x16c/0x1f0 [ 225.816190][T15733] gup_vma_lookup+0x1d2/0x220 [ 225.816205][T15733] __get_user_pages+0x234/0x36f0 [ 225.816223][T15733] ? look_up_lock_class+0x59/0x150 [ 225.816237][T15733] ? __pfx___get_user_pages+0x10/0x10 [ 225.816255][T15733] __gup_longterm_locked+0x20d/0x1850 [ 225.816273][T15733] ? __pfx___gup_longterm_locked+0x10/0x10 [ 225.816293][T15733] pin_user_pages_remote+0xed/0x140 [ 225.816308][T15733] ? __pfx_pin_user_pages_remote+0x10/0x10 [ 225.816321][T15733] ? mm_access+0x22d/0x2e0 [ 225.816338][T15733] process_vm_rw_core.constprop.0+0x41b/0x9a0 [ 225.816356][T15733] ? __pfx_process_vm_rw_core.constprop.0+0x10/0x10 [ 225.816368][T15733] ? import_ubuf+0x1b6/0x220 [ 225.816400][T15733] ? iovec_from_user+0xbb/0x140 [ 225.816418][T15733] process_vm_rw+0x2ff/0x360 [ 225.816431][T15733] ? __pfx_process_vm_rw+0x10/0x10 [ 225.816442][T15733] ? __pfx_futex_wake+0x10/0x10 [ 225.816484][T15733] ? __pfx_userfaultfd_unmap_complete+0x10/0x10 [ 225.816517][T15733] ? xfd_validate_state+0x5d/0x180 [ 225.816533][T15733] __x64_sys_process_vm_writev+0xe2/0x1c0 [ 225.816546][T15733] ? do_syscall_64+0x91/0x260 [ 225.816560][T15733] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.816573][T15733] do_syscall_64+0xcd/0x260 [ 225.816587][T15733] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.816597][T15733] RIP: 0033:0x7f0084b8e969 [ 225.816606][T15733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.816616][T15733] RSP: 002b:00007f0085a8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000137 [ 225.816626][T15733] RAX: ffffffffffffffda RBX: 00007f0084db5fa0 RCX: 00007f0084b8e969 [ 225.816632][T15733] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000296 [ 225.816638][T15733] RBP: 00007f0084c10ab1 R08: 0000000000000001 R09: 0000000000000000 [ 225.816644][T15733] R10: 0000200000000880 R11: 0000000000000246 R12: 0000000000000000 [ 225.816649][T15733] R13: 0000000000000000 R14: 00007f0084db5fa0 R15: 00007fffa903f2a8 [ 225.816662][T15733] [ 225.950084][ T3549] usb 9-1: Using ep0 maxpacket: 8 [ 225.964108][ T3549] usb 9-1: config index 0 descriptor too short (expected 5924, got 36) [ 225.967543][ T3549] usb 9-1: config 250 has an invalid interface number: 228 but max is -1 [ 225.978267][ T3549] usb 9-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 225.982802][ T3549] usb 9-1: config 250 has no interface number 0 [ 225.985378][ T3549] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 225.989676][ T3549] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 225.994341][ T3549] usb 9-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 225.998336][ T3549] usb 9-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 226.001640][ T3549] usb 9-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 226.005811][ T3549] usb 9-1: config 250 interface 228 has no altsetting 0 [ 226.021744][ T3549] usb 9-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 226.024659][ T3549] usb 9-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 226.027190][ T3549] usb 9-1: Product: syz [ 226.028533][ T3549] usb 9-1: SerialNumber: syz [ 226.038374][ T3549] hub 9-1:250.228: bad descriptor, ignoring hub [ 226.040471][ T3549] hub 9-1:250.228: probe with driver hub failed with error -5 [ 226.193585][T15752] netlink: 'syz.3.2907': attribute type 1 has an invalid length. [ 226.196342][T15752] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2907'. [ 226.249180][ T3549] usblp 9-1:250.228: usblp0: USB Bidirectional printer dev 7 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 226.521470][T15764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'. [ 226.525264][T15763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2910'. [ 226.536655][T15763] blktrace: Concurrent blktraces are not allowed on loop4 [ 226.643595][T15764] relay: one or more items not logged [item size (56) > sub-buffer size (13)] [ 226.895569][T15777] ALSA: seq fatal error: cannot create timer (-19) [ 227.146765][T15720] usb 9-1: reset high-speed USB device number 7 using dummy_hcd [ 227.415592][ T5974] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 227.558480][T15720] usb 9-1: failed to restore interface 228 altsetting 255 (error=-71) [ 227.562567][ T3549] usb 9-1: USB disconnect, device number 7 [ 227.570631][ T3549] usblp0: removed [ 227.580098][ T5974] usb 7-1: config 0 has no interfaces? [ 227.581929][ T5974] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.584844][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.590149][ T5974] usb 7-1: config 0 descriptor?? [ 227.826419][ T9] usb 7-1: USB disconnect, device number 11 [ 227.961658][T15819] netlink: 248 bytes leftover after parsing attributes in process `syz.1.2927'. [ 228.097213][T15825] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2928'. [ 228.232177][T15828] cgroup: No subsys list or none specified [ 228.346299][T15832] netlink: 64 bytes leftover after parsing attributes in process `syz.1.2930'. [ 228.365108][T15832] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2930'. [ 228.588708][T15843] program syz.1.2933 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 228.763673][T15851] nvme_fabrics: missing parameter 'transport=%s' [ 228.765912][T15851] nvme_fabrics: missing parameter 'nqn=%s' [ 229.070487][T15875] SELinux: Context system_u:object_r:ssh_agent_exec_t:s0 is not valid (left unmapped). [ 229.374068][T15899] ref_ctr_offset mismatch. inode: 0x4d3 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x4 [ 229.815406][T15925] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 229.867446][ T40] kauditd_printk_skb: 1259 callbacks suppressed [ 229.867457][ T40] audit: type=1400 audit(524773.530:6851): avc: denied { recv } for pid=15902 comm="syz.4.2952" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37958 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.876560][ T40] audit: type=1400 audit(524773.530:6852): avc: denied { recv } for pid=15902 comm="syz.4.2952" saddr=127.0.0.1 src=37958 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.884168][ T40] audit: type=1400 audit(524773.540:6853): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37958 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.894884][ T40] audit: type=1400 audit(524773.540:6854): avc: denied { recv } for pid=14796 comm="udevd" saddr=10.0.2.2 src=46928 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.903964][ T40] audit: type=1400 audit(524773.540:6855): avc: denied { recv } for pid=14796 comm="udevd" saddr=10.0.2.2 src=46928 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.912272][ T40] audit: type=1400 audit(524773.540:6856): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37958 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.924329][ T40] audit: type=1400 audit(524773.540:6857): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=37958 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 229.954670][ T40] audit: type=1400 audit(524773.560:6858): avc: denied { read write } for pid=15927 comm="syz.1.2959" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.963500][ T40] audit: type=1400 audit(524773.560:6859): avc: denied { read write open } for pid=15927 comm="syz.1.2959" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 229.970919][ T40] audit: type=1400 audit(524773.560:6860): avc: denied { ioctl } for pid=15927 comm="syz.1.2959" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 230.810266][T15989] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 230.942208][T15999] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 230.947653][T15999] team_slave_0: mtu less than device minimum [ 230.951306][T15999] __nla_validate_parse: 1 callbacks suppressed [ 230.951314][T15999] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2979'. [ 231.523125][T16021] bridge: RTM_NEWNEIGH with invalid ether address [ 231.527771][T16021] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 231.534654][T16022] exFAT-fs (nullb0): invalid boot record signature [ 231.539032][T16022] exFAT-fs (nullb0): failed to read boot sector [ 231.541547][T16022] exFAT-fs (nullb0): failed to recognize exfat type [ 231.647527][T16024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56274 sclass=netlink_route_socket pid=16024 comm=syz.2.2986 [ 231.655784][T16024] ip6gre1: entered allmulticast mode [ 231.821144][T16026] 9pnet: Could not find request transport: xen [ 232.109990][T16045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 232.188084][T16052] syz.2.2994: attempt to access beyond end of device [ 232.188084][T16052] loop2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 232.192333][T16052] MINIX-fs: unable to read superblock [ 232.412063][T16061] netlink: 80 bytes leftover after parsing attributes in process `syz.1.2997'. [ 232.633863][T16072] use of bytesused == 0 is deprecated and will be removed in the future, [ 232.643592][T16072] use the actual size instead. [ 233.400601][T16100] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.409388][T16103] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 233.505264][T16112] random: crng reseeded on system resumption [ 233.763879][T16112] Restarting kernel threads ... done. [ 234.365142][T16155] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3017'. [ 234.441681][T16157] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3019'. [ 234.681260][T16166] ./file0: Can't lookup blockdev [ 234.891780][ T40] kauditd_printk_skb: 2918 callbacks suppressed [ 234.891792][ T40] audit: type=1400 audit(524778.533:9779): avc: denied { connect } for pid=16169 comm="syz.4.3022" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.899689][ T40] audit: type=1400 audit(524778.533:9780): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.907152][ T40] audit: type=1400 audit(524778.533:9781): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=37958 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 234.914800][ T40] audit: type=1400 audit(524778.533:9783): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.921917][ T40] audit: type=1400 audit(524778.533:9782): avc: denied { write } for pid=16169 comm="syz.4.3022" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 234.932131][ T40] audit: type=1400 audit(524778.533:9784): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.939219][ T40] audit: type=1400 audit(524778.543:9785): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=127.0.0.1 src=37958 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 234.952055][ T40] audit: type=1400 audit(524778.543:9786): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.961165][ T40] audit: type=1400 audit(524778.543:9787): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 234.971839][ T40] audit: type=1400 audit(524778.543:9788): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 235.346054][T16178] support for the xor transformation has been removed. [ 236.507556][T16112] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 236.653753][T16192] vlan0: entered promiscuous mode [ 236.655349][T16192] bridge0: entered promiscuous mode [ 236.657164][T16192] vlan0: entered allmulticast mode [ 236.659972][T16192] bridge0: entered allmulticast mode [ 236.967372][T16203] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 236.972596][T16204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3034'. [ 237.135688][T16212] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3036'. [ 238.457317][T16226] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3040'. [ 238.668152][T16234] loop6: detected capacity change from 0 to 524287999 [ 238.857897][T16241] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3045'. [ 239.150536][T16248] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.3047'. [ 239.153586][T16248] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3047'. [ 239.566861][ T1326] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 239.728483][ T1326] usb 6-1: Using ep0 maxpacket: 32 [ 239.780023][ T1326] usb 6-1: config 1 interface 0 altsetting 213 bulk endpoint 0x1 has invalid maxpacket 32 [ 239.784206][ T1326] usb 6-1: config 1 interface 0 altsetting 213 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 239.794078][ T1326] usb 6-1: config 1 interface 0 has no altsetting 0 [ 239.810329][ T1326] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 239.814105][ T1326] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 239.817179][ T1326] usb 6-1: Product: ఌ [ 239.819328][ T1326] usb 6-1: Manufacturer: 㐉 [ 239.820834][ T1326] usb 6-1: SerialNumber: syz [ 239.838574][T16255] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 239.927941][ T40] kauditd_printk_skb: 3196 callbacks suppressed [ 239.927959][ T40] audit: type=1400 audit(524783.557:12985): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.937686][ T40] audit: type=1400 audit(524783.557:12986): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.947650][ T40] audit: type=1400 audit(524783.557:12987): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.957302][ T40] audit: type=1400 audit(524783.567:12988): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.970539][ T40] audit: type=1400 audit(524783.567:12989): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 239.980647][ T40] audit: type=1400 audit(524783.567:12990): avc: denied { recv } for pid=5916 comm="syz-executor" saddr=127.0.0.1 src=37958 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 239.998349][ T40] audit: type=1400 audit(524783.567:12991): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 240.005712][ T40] audit: type=1400 audit(524783.567:12992): avc: denied { recv } for pid=5915 comm="sshd-session" saddr=10.0.2.2 src=46928 daddr=10.0.2.15 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 240.038430][ T40] audit: type=1400 audit(524783.577:12993): avc: denied { read write } for pid=12265 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.046169][ T40] audit: type=1400 audit(524783.577:12994): avc: denied { read write open } for pid=12265 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 240.063327][T16265] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.068778][ T1326] usb 6-1: USB disconnect, device number 15 [ 240.390680][T11981] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.422088][T13664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.530648][T13664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.803807][T16284] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3058'. [ 240.822467][T16286] policy can only be matched on NF_INET_PRE_ROUTING [ 240.822479][T16286] unable to load match [ 240.993381][T13664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.393430][T16305] netlink: 14548 bytes leftover after parsing attributes in process `syz.4.3066'. [ 241.541404][T16312] netlink: 244 bytes leftover after parsing attributes in process `syz.1.3068'. [ 241.641440][T16317] xt_l2tp: wrong L2TP version: 0 [ 241.696608][T16320] macvtap0: entered allmulticast mode [ 241.703409][T16320] veth0_macvtap: entered allmulticast mode [ 241.706162][T16320] netlink: 'syz.2.3070': attribute type 3 has an invalid length. [ 241.708806][T16320] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 241.836289][T16330] fuse: Bad value for 'fd' [ 241.958911][T16335] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 242.016608][T16332] can: request_module (can-proto-0) failed. [ 242.159993][T16340] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3078'. [ 242.163556][T16340] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3078'. [ 242.166975][T16340] netlink: 376 bytes leftover after parsing attributes in process `syz.2.3078'. [ 242.357554][T12535] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 242.445593][ T1021] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 242.454929][T16345] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3080'. [ 242.535818][T12535] usb 6-1: Using ep0 maxpacket: 32 [ 242.550448][T12535] usb 6-1: config 0 has no interfaces? [ 242.552175][T12535] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 242.554930][T12535] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.561150][T12535] usb 6-1: config 0 descriptor?? [ 242.611192][ T1021] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 242.614219][ T1021] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 242.617002][ T1021] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 242.620262][ T1021] usb 9-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 242.622996][ T1021] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.631678][T16343] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 242.637211][ T1021] hub 9-1:1.0: bad descriptor, ignoring hub [ 242.639078][ T1021] hub 9-1:1.0: probe with driver hub failed with error -5 [ 242.641419][ T1021] cdc_wdm 9-1:1.0: skipping garbage [ 242.642988][ T1021] cdc_wdm 9-1:1.0: skipping garbage [ 242.656525][ T1021] cdc_wdm 9-1:1.0: cdc-wdm0: USB WDM device [ 242.658331][ T1021] cdc_wdm 9-1:1.0: Unknown control protocol [ 242.965931][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 242.968097][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 242.970587][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 242.972847][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 242.976398][ C0] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 242.979179][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 242.981722][ C0] cdc_wdm 9-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 243.213280][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 243.215365][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 243.218203][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 243.220262][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 243.222353][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 243.224347][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 243.226345][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 243.228468][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 243.230552][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 243.233038][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 243.236318][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 243.239052][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 243.243071][ C2] cdc_wdm 9-1:1.0: nonzero urb status received: -71 [ 243.245822][ C2] cdc_wdm 9-1:1.0: wdm_int_callback - 0 bytes [ 243.898633][T16375] vivid-000: disconnect [ 243.918267][T16375] binder: 16374:16375 ioctl c0306201 2000000003c0 returned -14 [ 243.923898][T16375] binder_alloc: 16374: binder_alloc_buf, no vma [ 243.925954][T16375] binder: 16374:16375 ioctl c0306201 2000000001c0 returned -14 [ 243.928798][T16374] vivid-000: reconnect [ 244.040768][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.074142][T16377] autofs4:pid:16377:validate_dev_ioctl: path string terminator missing for cmd(0xc018937d) [ 244.294223][T16379] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3089'. [ 244.949301][ T1326] usb 6-1: USB disconnect, device number 16 [ 244.955703][ T40] kauditd_printk_skb: 3009 callbacks suppressed [ 244.955714][ T40] audit: type=1400 audit(524788.572:16004): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=::1 src=2 daddr=::1 dest=2 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 244.972026][ T40] audit: type=1400 audit(524788.572:16005): avc: denied { recv } for pid=23 comm="ksoftirqd/2" saddr=::1 src=2 daddr=::1 dest=2 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 244.982289][ T40] audit: type=1400 audit(524788.572:16006): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.989334][ T40] audit: type=1400 audit(524788.572:16007): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 244.996343][ T40] audit: type=1400 audit(524788.572:16008): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.003334][ T40] audit: type=1400 audit(524788.582:16009): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.010232][ T40] audit: type=1400 audit(524788.582:16010): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.017230][ T40] audit: type=1400 audit(524788.582:16011): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.024323][ T40] audit: type=1400 audit(524788.582:16012): avc: denied { setattr } for pid=14617 comm="syz-executor" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 245.031221][ T40] audit: type=1400 audit(524788.592:16013): avc: denied { map_create } for pid=16388 comm="syz.2.3092" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 245.051732][T16389] 9pnet_fd: Insufficient options for proto=fd [ 245.426835][ T3549] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 245.454699][ T1021] usb 9-1: USB disconnect, device number 8 [ 245.488190][T16402] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3098'. [ 245.594642][ T3549] usb 6-1: Using ep0 maxpacket: 32 [ 245.601186][ T3549] usb 6-1: config 4 has an invalid interface number: 223 but max is 1 [ 245.603641][ T3549] usb 6-1: config 4 has an invalid interface number: 230 but max is 1 [ 245.613810][ T3549] usb 6-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 245.616544][ T3549] usb 6-1: config 4 has no interface number 0 [ 245.618498][ T3549] usb 6-1: config 4 has no interface number 1 [ 245.620379][ T3549] usb 6-1: config 4 interface 223 altsetting 8 has an endpoint descriptor with address 0x9F, changing to 0x8F [ 245.623816][ T3549] usb 6-1: config 4 interface 223 altsetting 8 endpoint 0x9 has an invalid bInterval 193, changing to 11 [ 245.635786][ T3549] usb 6-1: config 4 interface 223 altsetting 8 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 245.639064][ T3549] usb 6-1: config 4 interface 223 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 245.642276][ T3549] usb 6-1: config 4 interface 223 altsetting 8 endpoint 0x2 has invalid maxpacket 1023, setting to 64 [ 245.646111][ T3549] usb 6-1: config 4 interface 223 altsetting 8 bulk endpoint 0x7 has invalid maxpacket 32 [ 245.649064][ T3549] usb 6-1: config 4 interface 223 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 245.652164][ T3549] usb 6-1: config 4 interface 223 altsetting 8 bulk endpoint 0x6 has invalid maxpacket 16 [ 245.655138][ T3549] usb 6-1: config 4 interface 223 altsetting 8 has a duplicate endpoint with address 0xD, skipping [ 245.658451][ T3549] usb 6-1: config 4 interface 223 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 245.661659][ T3549] usb 6-1: config 4 interface 230 altsetting 62 has a duplicate endpoint with address 0x6, skipping [ 245.665176][ T3549] usb 6-1: config 4 interface 230 altsetting 62 has a duplicate endpoint with address 0xE, skipping [ 245.668441][ T3549] usb 6-1: config 4 interface 230 altsetting 62 has a duplicate endpoint with address 0x9, skipping [ 245.671694][ T3549] usb 6-1: config 4 interface 230 altsetting 62 has a duplicate endpoint with address 0x7, skipping [ 245.674942][ T3549] usb 6-1: config 4 interface 230 altsetting 62 has a duplicate endpoint with address 0x6, skipping [ 245.678191][ T3549] usb 6-1: config 4 interface 230 altsetting 62 has a duplicate endpoint with address 0xC, skipping [ 245.681465][ T3549] usb 6-1: config 4 interface 230 altsetting 62 has a duplicate endpoint with address 0x4, skipping [ 245.684712][ T3549] usb 6-1: config 4 interface 223 has no altsetting 0 [ 245.687760][ T3549] usb 6-1: config 4 interface 230 has no altsetting 0 [ 245.696875][ T3549] usb 6-1: New USB device found, idVendor=2522, idProduct=ef4b, bcdDevice=c9.17 [ 245.699671][ T3549] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.702258][ T3549] usb 6-1: Product: Й [ 245.703528][ T3549] usb 6-1: SerialNumber: syz [ 245.738290][T16393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.742927][T16393] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 245.744845][T16418] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3102'. [ 245.993505][T16429] netlink: 244 bytes leftover after parsing attributes in process `syz.2.3109'. [ 246.048572][ T3549] usb 6-1: USB disconnect, device number 17 [ 246.133847][ T5931] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.136990][T16435] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3111'. [ 246.139384][T16438] netlink: 64 bytes leftover after parsing attributes in process `syz.2.3111'. [ 246.140295][ T5931] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.146644][ T5931] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.152515][ T5931] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.155395][ T5931] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 246.157092][T16434] IPv6: Can't replace route, no match found [ 246.653804][T11977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.658929][T11977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.787226][T16436] chnl_net:caif_netlink_parms(): no params data found [ 246.880289][T11977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 246.884368][T11977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.019951][T16472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63258 sclass=netlink_route_socket pid=16472 comm=syz.2.3119 [ 247.072521][T11977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.075710][T11977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.107276][T16436] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.109835][T16436] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.111687][T16476] program syz.2.3121 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 247.112158][T16436] bridge_slave_0: entered allmulticast mode [ 247.119410][T16436] bridge_slave_0: entered promiscuous mode [ 247.121210][T16476] 9p: Unknown uid 00000000004294967295 [ 247.133340][T16436] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.137468][T16436] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.143406][T16436] bridge_slave_1: entered allmulticast mode [ 247.147411][T16436] bridge_slave_1: entered promiscuous mode [ 247.262495][T11977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 247.266606][T11977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.290197][T16436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.297009][T16436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.300480][T12535] usb 6-1: new low-speed USB device number 18 using dummy_hcd [ 247.310679][T16482] netlink: 'syz.4.3123': attribute type 1 has an invalid length. [ 247.343369][T16482] bond7: entered promiscuous mode [ 247.345262][T16482] 8021q: adding VLAN 0 to HW filter on device bond7 [ 247.351741][T16485] trusted_key: encrypted_key: keylen parameter is missing [ 247.407771][T16482] bond7: (slave veth3): making interface the new active one [ 247.410305][T16482] veth3: entered promiscuous mode [ 247.412550][T16482] bond7: (slave veth3): Enslaving as an active interface with an up link [ 247.425088][T16436] team0: Port device team_slave_0 added [ 247.430361][T12535] usb 6-1: device descriptor read/64, error -71 [ 247.453919][T16436] team0: Port device team_slave_1 added [ 247.487162][T16487] loop2: detected capacity change from 0 to 7 [ 247.497098][T12265] Dev loop2: unable to read RDB block 7 [ 247.498916][T12265] loop2: unable to read partition table [ 247.501408][T12265] loop2: partition table beyond EOD, truncated [ 247.507056][T16436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.508982][T16487] Dev loop2: unable to read RDB block 7 [ 247.509322][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.511474][T16487] loop2: unable to read partition table [ 247.511573][T16487] loop2: partition table beyond EOD, truncated [ 247.520093][T16436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.521529][T16487] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 247.534680][T16436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.540179][T16436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.550918][T16436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.567888][T16487] [ 247.568772][T16487] ====================================================== [ 247.571047][T16487] WARNING: possible circular locking dependency detected [ 247.573291][T16487] 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 Not tainted [ 247.575860][T16487] ------------------------------------------------------ [ 247.576293][T16489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3125'. [ 247.579249][T16487] syz.4.3126/16487 is trying to acquire lock: [ 247.579259][T16487] ffff88801c68e1e0 (&root->kernfs_iattr_rwsem){++++}-{4:4}, at: kernfs_iop_getattr+0x9c/0xf0 [ 247.588006][T16487] [ 247.588006][T16487] but task is already holding lock: [ 247.590266][T16487] ffff88810735b168 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 247.593667][T16487] [ 247.593667][T16487] which lock already depends on the new lock. [ 247.593667][T16487] [ 247.596948][T16487] [ 247.596948][T16487] the existing dependency chain (in reverse order) is: [ 247.599796][T16487] [ 247.599796][T16487] -> #3 (&q->q_usage_counter(io)#19){++++}-{0:0}: [ 247.602388][T16487] blk_alloc_queue+0x619/0x760 [ 247.604027][T16487] blk_mq_alloc_queue+0x179/0x290 [ 247.605833][T16487] __blk_mq_alloc_disk+0x29/0x120 [ 247.607566][T16487] loop_add+0x496/0xb70 [ 247.609022][T16487] loop_init+0x164/0x270 [ 247.610508][T16487] do_one_initcall+0x120/0x6e0 [ 247.612107][T16487] kernel_init_freeable+0x5c2/0x900 [ 247.613918][T16487] kernel_init+0x1c/0x2b0 [ 247.615400][T16487] ret_from_fork+0x45/0x80 [ 247.617240][T16487] ret_from_fork_asm+0x1a/0x30 [ 247.619204][T16487] [ 247.619204][T16487] -> #2 (fs_reclaim){+.+.}-{0:0}: [ 247.621378][T16487] fs_reclaim_acquire+0x102/0x150 [ 247.623088][T16487] kmem_cache_alloc_noprof+0x53/0x3b0 [ 247.625062][T16487] __kernfs_iattrs+0xbc/0x3f0 [ 247.626854][T16487] __kernfs_setattr+0x4d/0x3c0 [ 247.628515][T16487] kernfs_iop_setattr+0xda/0x120 [ 247.630179][T16487] notify_change+0x6a6/0x1230 [ 247.631816][T16487] do_truncate+0x15b/0x220 [ 247.633351][T16487] path_openat+0x2761/0x2d40 [ 247.635025][T16487] do_filp_open+0x20b/0x470 [ 247.636624][T16487] do_sys_openat2+0x11b/0x1d0 [ 247.638346][T16487] __x64_sys_openat+0x174/0x210 [ 247.640033][T16487] do_syscall_64+0xcd/0x260 [ 247.641643][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.643901][T16487] [ 247.643901][T16487] -> #1 (iattr_mutex){+.+.}-{4:4}: [ 247.646748][T16487] __mutex_lock+0x199/0xb90 [ 247.648390][T16487] __kernfs_iattrs+0x2b/0x3f0 [ 247.650032][T16487] __kernfs_setattr+0x4d/0x3c0 [ 247.651642][T16487] kernfs_iop_setattr+0xda/0x120 [ 247.653342][T16487] notify_change+0x6a6/0x1230 [ 247.655167][T16487] do_truncate+0x15b/0x220 [ 247.656683][T16487] path_openat+0x2761/0x2d40 [ 247.658707][T16487] do_filp_open+0x20b/0x470 [ 247.660303][T16487] do_sys_openat2+0x11b/0x1d0 [ 247.661873][T16487] __x64_sys_openat+0x174/0x210 [ 247.663936][T16487] do_syscall_64+0xcd/0x260 [ 247.666069][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.668310][T16487] [ 247.668310][T16487] -> #0 (&root->kernfs_iattr_rwsem){++++}-{4:4}: [ 247.670929][T16487] __lock_acquire+0x1173/0x1ba0 [ 247.672691][T16487] lock_acquire+0x179/0x350 [ 247.674300][T16487] down_read+0x9b/0x480 [ 247.675794][T16487] kernfs_iop_getattr+0x9c/0xf0 [ 247.677556][T16487] vfs_getattr_nosec+0x2a9/0x430 [ 247.679303][T16487] vfs_getattr+0x4a/0x60 [ 247.680832][T16487] loop_query_min_dio_size.isra.0+0x120/0x260 [ 247.683010][T16487] lo_ioctl+0x1e0e/0x28e0 [ 247.684611][T16487] blkdev_ioctl+0x274/0x6d0 [ 247.686210][T16487] __x64_sys_ioctl+0x190/0x200 [ 247.687934][T16487] do_syscall_64+0xcd/0x260 [ 247.689533][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.691547][T16487] [ 247.691547][T16487] other info that might help us debug this: [ 247.691547][T16487] [ 247.694802][T16487] Chain exists of: [ 247.694802][T16487] &root->kernfs_iattr_rwsem --> fs_reclaim --> &q->q_usage_counter(io)#19 [ 247.694802][T16487] [ 247.699321][T16487] Possible unsafe locking scenario: [ 247.699321][T16487] [ 247.701631][T16487] CPU0 CPU1 [ 247.703252][T16487] ---- ---- [ 247.705005][T16487] lock(&q->q_usage_counter(io)#19); [ 247.706676][T16487] lock(fs_reclaim); [ 247.708862][T16487] lock(&q->q_usage_counter(io)#19); [ 247.711390][T16487] rlock(&root->kernfs_iattr_rwsem); [ 247.713159][T16487] [ 247.713159][T16487] *** DEADLOCK *** [ 247.713159][T16487] [ 247.716338][T16487] 3 locks held by syz.4.3126/16487: [ 247.718065][T16487] #0: ffff888025ffe368 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x370/0x28e0 [ 247.720849][T16487] #1: ffff88810735b168 (&q->q_usage_counter(io)#19){++++}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 247.724573][T16487] #2: ffff88810735b1a0 (&q->q_usage_counter(queue)#20){+.+.}-{0:0}, at: blk_mq_freeze_queue_nomemsave+0x15/0x20 [ 247.728216][T16487] [ 247.728216][T16487] stack backtrace: [ 247.730034][T16487] CPU: 1 UID: 0 PID: 16487 Comm: syz.4.3126 Not tainted 6.15.0-rc5-syzkaller-00204-g0e1329d4045c #0 PREEMPT(full) [ 247.730049][T16487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 247.730055][T16487] Call Trace: [ 247.730060][T16487] [ 247.730065][T16487] dump_stack_lvl+0x116/0x1f0 [ 247.730082][T16487] print_circular_bug+0x275/0x350 [ 247.730098][T16487] check_noncircular+0x14c/0x170 [ 247.730114][T16487] __lock_acquire+0x1173/0x1ba0 [ 247.730130][T16487] lock_acquire+0x179/0x350 [ 247.730144][T16487] ? kernfs_iop_getattr+0x9c/0xf0 [ 247.730160][T16487] ? __pfx___might_resched+0x10/0x10 [ 247.730174][T16487] down_read+0x9b/0x480 [ 247.730188][T16487] ? kernfs_iop_getattr+0x9c/0xf0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 247.730202][T16487] ? find_held_lock+0x2b/0x80 [ 247.730212][T16487] ? __pfx_down_read+0x10/0x10 [ 247.730226][T16487] ? kernfs_root+0xee/0x2a0 [ 247.730241][T16487] kernfs_iop_getattr+0x9c/0xf0 [ 247.730256][T16487] vfs_getattr_nosec+0x2a9/0x430 [ 247.730266][T16487] ? __pfx_kernfs_iop_getattr+0x10/0x10 [ 247.730281][T16487] vfs_getattr+0x4a/0x60 [ 247.730290][T16487] loop_query_min_dio_size.isra.0+0x120/0x260 [ 247.730304][T16487] ? __pfx_loop_query_min_dio_size.isra.0+0x10/0x10 [ 247.730316][T16487] ? mark_held_locks+0x49/0x80 [ 247.730332][T16487] ? __pfx_autoremove_wake_function+0x10/0x10 [ 247.730347][T16487] ? blk_freeze_queue_start+0xec/0x140 [ 247.730358][T16487] lo_ioctl+0x1e0e/0x28e0 [ 247.730372][T16487] ? slow_avc_audit+0x18b/0x210 [ 247.730380][T16487] ? __pfx_slow_avc_audit+0x10/0x10 [ 247.730390][T16487] ? __pfx_lo_ioctl+0x10/0x10 [ 247.730401][T16487] ? find_held_lock+0x2b/0x80 [ 247.730412][T16487] ? avc_has_extended_perms+0x33a/0x1090 [ 247.730421][T16487] ? avc_has_extended_perms+0xa4b/0x1090 [ 247.730430][T16487] ? avc_has_extended_perms+0x47c/0x1090 [ 247.730440][T16487] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 247.730449][T16487] ? kasan_quarantine_put+0x10a/0x240 [ 247.730464][T16487] ? lockdep_hardirqs_on+0x7c/0x110 [ 247.730477][T16487] ? find_held_lock+0x2b/0x80 [ 247.730489][T16487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.730506][T16487] ? blkdev_common_ioctl+0x1dd/0x2480 [ 247.730516][T16487] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 247.730531][T16487] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 247.730541][T16487] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 247.730556][T16487] ? ioctl_has_perm.constprop.0.isra.0+0x2f4/0x450 [ 247.730571][T16487] ? ioctl_has_perm.constprop.0.isra.0+0x2fe/0x450 [ 247.730586][T16487] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 247.730603][T16487] ? __pfx_lo_ioctl+0x10/0x10 [ 247.730615][T16487] blkdev_ioctl+0x274/0x6d0 [ 247.730624][T16487] ? __pfx_blkdev_ioctl+0x10/0x10 [ 247.730633][T16487] ? selinux_file_ioctl+0x180/0x270 [ 247.730646][T16487] ? selinux_file_ioctl+0xb4/0x270 [ 247.730660][T16487] ? __pfx_blkdev_ioctl+0x10/0x10 [ 247.730669][T16487] __x64_sys_ioctl+0x190/0x200 [ 247.730682][T16487] do_syscall_64+0xcd/0x260 [ 247.730695][T16487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.730705][T16487] RIP: 0033:0x7f9ddd38e969 [ 247.730713][T16487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 247.730723][T16487] RSP: 002b:00007f9dde22f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 247.730732][T16487] RAX: ffffffffffffffda RBX: 00007f9ddd5b5fa0 RCX: 00007f9ddd38e969 [ 247.730738][T16487] RDX: 0000000000000004 RSI: 0000000000004c06 RDI: 0000000000000003 [ 247.730743][T16487] RBP: 00007f9ddd410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 247.730749][T16487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.730758][T16487] R13: 0000000000000000 R14: 00007f9ddd5b5fa0 R15: 00007ffd82d52ba8 [ 247.730766][T16487] [ 247.740981][T12535] usb 6-1: new low-speed USB device number 19 using dummy_hcd [ 247.900727][T11977] bridge_slave_1: left allmulticast mode [ 247.902527][T11977] bridge_slave_1: left promiscuous mode [ 247.904343][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.940523][T11977] bridge_slave_0: left allmulticast mode [ 247.942401][T11977] bridge_slave_0: left promiscuous mode [ 247.944219][T11977] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.202010][ T5934] Bluetooth: hci0: command tx timeout [ 250.259078][T11977] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.298594][T11977] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.368510][T11977] bond0 (unregistering): Released all slaves [ 251.241293][T11977] bond1 (unregistering): Released all slaves [ 252.128025][T11977] hsr_slave_0: left promiscuous mode [ 252.132718][T11977] hsr_slave_1: left promiscuous mode [ 252.135034][T11977] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.138175][T11977] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.141427][T11977] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.144380][T11977] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.148461][T11977] veth1_macvtap: left promiscuous mode [ 252.150208][T11977] veth0_macvtap: left promiscuous mode [ 252.151951][T11977] veth1_vlan: left promiscuous mode [ 252.153723][T11977] veth0_vlan: left promiscuous mode [ 252.613719][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.823642][ T1417] ieee802154 phy0 wpan0: encryption failed: -22 VM DIAGNOSIS: 06:15:01 Registers: info registers vcpu 0 CPU#0 RAX=00000000001c22f4 RBX=0000000000000000 RCX=ffffffff8b6cc419 RDX=ffffed100d4865be RSI=ffffffff8bf48260 RDI=ffffffff819188f1 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff9084f010 R15=0000000000000000 RIP=ffffffff8b6cacaf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69e1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000040 CR3=000000004d534000 CR4=00352ef0 DR0=0000080000001081 DR1=0000000000000007 DR2=fffffffffffffffd DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0084c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0084c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0084c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0084c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0084c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0084c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0084d83488 00007f0084d83480 00007f0084d83478 00007f0084d83450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f00858ed100 00007f0084d83440 00007f0084d80004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0084d83498 00007f0084d83490 00007f0084d83488 00007f0084d83480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854f4835 RDI=ffffffff9adf74e0 RBP=ffffffff9adf74a0 RSP=ffffc90006f7efa8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000037 R14=ffffffff9adf74a0 R15=ffffffff854f47d0 RIP=ffffffff854f485f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f9dde22f6c0 ffffffff 00c00000 GS =0000 ffff8880d6ae1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=0000000054528000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72623f5f70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7261611a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7261611a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7261611a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7261611aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7261611b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f7261611c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000312e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000080 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000046 RBX=ffffffff9aca0ac8 RCX=ffffffff81c2e5af RDX=0000000000000000 RSI=ffffffff8bf48260 RDI=ffffffff8b6f5c22 RBP=0000000000000202 RSP=ffffc90003b6f6d8 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff9084f017 R11=0000000000000001 R12=0000000000000000 R13=ffffffff9aca0ac8 R14=00000000000001fd R15=0000000000000000 RIP=ffffffff8b6f5c29 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f0f4034b880 ffffffff 00c00000 GS =0000 ffff8880d6be1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0084d7d2d8 CR3=000000003081e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000100001 Opmask01=000000000000007f Opmask02=00000000feff7f7f Opmask03=0000000020400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f68637461772f76 6564752f6e75722f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005578ac2c3c90 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f3fdf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f0f3fdf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 447a6228d6c98d42 7373260e88d5a9d2 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737373a2 7373737373737373 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 772f766564752f6e 75722f00646c6f2e 68637461772f7665 64752f6e75722f00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 520a534041500a4b 50570a0041494a0b 4d465144520a5340 41500a4b50570a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f793d08160f1017 0154787930790412 181611423d756676 56707238707b681b ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6931307069413963 7369353063693130 700032363834323d 4d554e5145530037 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 041e5b13062d5b4c 7346464910463143 552f411338707e72 12100d1003014563 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7f7f7f7f7f7b5f 7f7e7f7d767f7d77 5f7f555f7d7f7f76 777f7f7d7f7b7f7b ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3336312c3136312c 3036312c30462c46 442c30442c46432c 38412c37412c4639 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030363035323d00 33003230303d4d55 4e51454200312f31 000036353432323d ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0030300035323200 0000000030353100 3000323400312f31 0000363500320037 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000001ad7a RBX=000000000000004b RCX=ffffc9003460a000 RDX=0000000000080000 RSI=ffffffff819b0280 RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006a4efd8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000d49dfd R13=0000000000000200 R14=ffff8880268ca440 R15=ffffc90006a4f0a0 RIP=ffffffff819b0282 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f0085a8e6c0 ffffffff 00c00000 GS =0000 ffff8880d6ce1000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0085a8df98 CR3=000000004d534000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000042001000 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000001f00000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f669cc11a5f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f669cc11a57 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f669cc11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f669cc11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f669cc11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f669cc11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f669cc11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f669cc11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 76656e6567006425 2e30322e30322e32 3731006365736361 6d00315f6576616c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 735f72736800305f 6576616c735f7273 6800315f6576616c 735f656764697262 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000