last executing test programs: 41.482003124s ago: executing program 1 (id=643): r0 = socket$netlink(0x10, 0x3, 0xf) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000040)={0x2c, r2, 0xbb34a96d50fa80b5, 0x70bd26, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSS_HT_OPMODE={0x6, 0x6d, 0x8}, @NL80211_ATTR_BSS_SHORT_SLOT_TIME={0x5, 0x1e, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x40004) r4 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000cc0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd2a, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0xffff, 0x3}, {}, {0x7, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x44000) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0xfffffffffffffe85, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0xffffffff, 0x10001, 0x44da, 0x2}}}}]}, 0x48}}, 0x0) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x47, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040cd0607010001010203010902350001010080fa0904000005ff00000007058102400001070501024000010705830240000107050302"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/ttyUSB0\x00', 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x80, {0x0, 0x0, 0x0, r10, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40800) 40.091872604s ago: executing program 1 (id=650): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d0005800900010070707470"], 0xbc}}, 0x0) 40.041280742s ago: executing program 1 (id=652): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x121002, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) socket$inet6(0x10, 0x3, 0x0) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="5000000099060102000000000000000002f800840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000500060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) (async, rerun: 32) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) (rerun: 32) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) mbind(&(0x7f00005b4000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x6) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000c00)='./sys\x00', &(0x7f0000000d00)='sysfs\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x1413, &(0x7f0000000540)={0x0, 0x8550, 0xc00, 0x1, 0xf}, &(0x7f0000000100)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000280)=@IORING_OP_OPENAT2={0x1c, 0x40, 0x0, 0xffffffffffffffff, &(0x7f0000000700)={0x4900, 0x80, 0xe}, &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18, 0x0, 0x12345}) (async) r6 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x80, 0x2, 0x27e}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r7, r8, r9, &(0x7f0000000980)=@IORING_OP_CLOSE={0x13, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x400000}}) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, 0x0) r11 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async, rerun: 64) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) (async, rerun: 64) io_submit(0x0, 0x4, &(0x7f0000000f80)=[&(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x931, r6, &(0x7f00000005c0)="e72b78b6a9200237d75c3e9f3539d9553e036c84458159aaf73363724597762c1b9fa5b6b963a649b603198e6904249a8531cd96a95e6dcb942e929db6e32898103a3a06453e37a80f17a18ac745e832207446acaca854fa85b2465cd6ece684958c80230cb253aca04f936f0508773ec7b216022280cf2215cdc2c4be7ef80182288460bfd23a3b2c17a3bd3f3ec7694925a8dbae6ca8faf339f436cd1f88ac0b03", 0xa2, 0x8, 0x0, 0x1}, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x6, 0x58df, 0xffffffffffffffff, &(0x7f0000000840)="e190495f598b33581b8d29850915aeefd640e1914fbfc857d3def436396ec7b40728ce91d462745cbfca3972ed4c6860cb06d08c4195e8042fba5f784061421573fb3890ebeac572bb4ab15c25e817ab22b85b777da92004d8d09fa5d426727d25a383d32d14b6a043d55b1584f438df6e360be38f2a5238225b7b58ca622f6b256f93c74e9489e66bb6bf14f421b4449cf37ad7d98eecfc05a46b6ecc188b86f92b2e6749ba51d04c016f6a15fe11d51133294f214e33a9141d0b1e0c60", 0xbe, 0x9, 0x0, 0x2}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x5, 0x5f, r12, &(0x7f0000000a00)="fc58ee0350cf918f37fc858ee7ed9f1b05d913a207caef14406e64da0cfbe6e8314400c49d0ae4391eef14cfc536af8c53faeb3017a28c4f29ea1fd2a2f9f731a4bd595e269daed271c4b9633690108b44ab045f4f0ea80b9090a49737cf4b8d69ba1ae0072e8da82a6e68e14a8d55bd3360e50a106fb172160735e216eed502e5fd9af674a726397322e3129e12a9611ddd21960bf3bcf99520239d1b023edf9f538d701f7cf05e8e652fc849e79d712c6e325ecd7471281fb6cfce3ceca64a7b20ca593464107eb98932631108944d2f7db531330292e9188f", 0xda, 0x6}, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0xd, 0x22, r10, &(0x7f0000000e40)="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", 0xfb, 0xe, 0x0, 0x1}]) (rerun: 64) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) syz_ublk_add_dev(0xffffffffffffffff, r3, r8, 0x0, &(0x7f0000000400)={0x2e, 0x36, 0x0, r11, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x80000001, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x2, 0xb27, 0x0, 0x0, 0x1000, 0x5, r13, 0x0, 0x120}}}, &(0x7f0000000480)) (async) r14 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys/block/loop0/make-it-fail\x00', 0x2, 0x0) write$P9_RLERRORu(r14, &(0x7f0000000000)=ANY=[@ANYRESDEC=r14], 0x3) r15 = syz_open_procfs(0x0, &(0x7f0000000140)='attr/current\x00') lseek(r15, 0x7, 0x1) syz_kvm_setup_cpu$x86(r15, r2, &(0x7f00005b1000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="f63abaf80c66b8c37c608d66efbafc0cecc4e285deca660f388186bc720fc73926640f0f1e91179766b9b40200000f320f95785666b9a90900000f320f21df", 0x3f}], 0x1, 0x4, &(0x7f0000000100), 0x0) 40.039868008s ago: executing program 1 (id=654): r0 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xe, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x9}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000040)={0x1c, 0x2b, 0x9, 0x70bd2d, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x1, 0x0, 0x0, @fd=r2}]}, 0x1c}}, 0x40070) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000000)={0x0, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000040)={0x2}) dup(r2) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r5, @ANYBLOB="0d0be7403237db9e132929a70587786d75"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24000010) 39.962285616s ago: executing program 1 (id=655): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=@ipv6_getroute={0x24, 0x1a, 0x1, 0x70bd29, 0x25dfdbff, {0xa, 0x80, 0x14, 0x8, 0xfe, 0x2, 0x3, 0x2, 0x100}, [@RTA_MARK={0x8, 0x10, 0xfffffffd}]}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00004f5000/0x3000)=nil, 0x3000, 0xf) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000740)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4c8, 0x1e8, 0x0, 0x1e8, 0x2a8, 0x0, 0x430, 0x430, 0x430, 0x430, 0x430, 0x6, &(0x7f0000000240), {[{{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @local, 0x3, 0x3, [0x16, 0x34, 0x31, 0x2e, 0x21, 0x1e, 0x27, 0x28, 0x26, 0x28, 0x1d, 0x3, 0x6, 0x31, 0x35, 0x1d], 0x0, 0x3, 0x2d}}}, {{@ip={@remote, @loopback, 0xff000000, 0xff000000, 'sit0\x00', 'xfrm0\x00', {0xff}, {}, 0x67, 0x0, 0x8}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@inet=@udplite={{0x30}, {[0x4e20, 0x4e20], [0x4e21, 0x4e23], 0x1}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x0, 0x9}}}, {{@ip={@broadcast, @rand_addr=0x64010100, 0x0, 0xffffffff, 'veth1_to_team\x00', 'dummy0\x00', {}, {}, 0x2e, 0x2}, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}]}, @ECN={0x28, 'ECN\x00', 0x0, {0x20, 0x84}}}, {{@uncond, 0x0, 0x98, 0xc8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xf}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0xff, 0x7e0d877c, @local, 0x4e24}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x528) ioctl$DRM_IOCTL_ADD_MAP(r2, 0xc0286415, &(0x7f0000000040)={&(0x7f0000273000/0x1000)=nil, 0x0, 0x7, 0xa}) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/49, 0x210000, 0x800, 0x0, 0x2}, 0x1c) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) 39.742325065s ago: executing program 1 (id=658): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'mpc624\x00', [0x140, 0xfffffffc, 0x1000c, 0xdddc, 0x0, 0xbd, 0x7fff, 0x2, 0x7, 0xc72c, 0x2000004, 0xf, 0xc000, 0x8, 0x4ce, 0x8e99, 0x80000001, 0xed, 0x5, 0x8, 0x4, 0x0, 0x800000a, 0x9, 0xffd, 0x9, 0xb1, 0x9, 0x281, 0x8001, 0xe43f]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000e998a44ac8cd1fe53dddb434220000e3ff94bad52bfa7b64d83b000000000000004e30f58d2193"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 39.673234348s ago: executing program 32 (id=658): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi2\x00', 0x1, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000003c0)={'mpc624\x00', [0x140, 0xfffffffc, 0x1000c, 0xdddc, 0x0, 0xbd, 0x7fff, 0x2, 0x7, 0xc72c, 0x2000004, 0xf, 0xc000, 0x8, 0x4ce, 0x8e99, 0x80000001, 0xed, 0x5, 0x8, 0x4, 0x0, 0x800000a, 0x9, 0xffd, 0x9, 0xb1, 0x9, 0x281, 0x8001, 0xe43f]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000e998a44ac8cd1fe53dddb434220000e3ff94bad52bfa7b64d83b000000000000004e30f58d2193"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) 18.585208323s ago: executing program 0 (id=867): r0 = socket$rxrpc(0x21, 0x2, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000200)='./pipefs/gssd/clntXX/gssd\x00', 0x2, 0x0) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x1234, @loopback}}, 0x24) listen(r0, 0x5) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "12"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) listen(r0, 0xffff7fff) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[{0x18, 0x110, 0x1, "1234"}, {0x10, 0x110, 0xe}], 0x28}, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000)=0x4036, 0x4) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0xfffffffd) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001000), 0x581, 0x40000000, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3, 0x1c, 0x0, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0xfffc, 0x8}}}}}, 0x0) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000040)=r3, 0x4) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket(0x10, 0x803, 0x0) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) socket$pptp(0x18, 0x1, 0x2) io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) add_key$fscrypt_v1(&(0x7f0000000f40), &(0x7f0000000f80)={'fscrypt:', @auto=[0x39, 0x65, 0x39, 0x32, 0x63, 0x36, 0x37, 0x63, 0x64, 0x31, 0x37, 0x61, 0x33, 0x30, 0x66, 0x30]}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$session_to_parent(0x12) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f00000002c0)={0x0, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x4, 0x0, 0x9, 0x8, 0x0, 0x4, 0x2, 0x20}, 0xe) 18.455251836s ago: executing program 0 (id=868): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async, rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0x2d, 0x2, 0x0) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x40000) ioctl$SG_IO(r2, 0x2285, &(0x7f00000033c0)={0x53, 0xfffffffffffffffc, 0x6, 0x6b, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000080)="1a7cef9c330e", 0x0, 0x0, 0x30520cf7f25f0c64, 0x0, 0x0}) close(0x3) socket$kcm(0x2, 0x1, 0x84) (async) setns(0xc9, 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) r3 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 64) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) (async) socket$phonet(0x23, 0x2, 0x1) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) pselect6(0x40, &(0x7f0000000100)={0x6, 0x0, 0x1ff, 0x3, 0x9, 0x52a9396e, 0x3, 0x1}, 0x0, 0x0, &(0x7f00000009c0)={0x0, 0x3938700}, 0x0) getsockopt$IPT_SO_GET_INFO(r3, 0x0, 0x40, &(0x7f0000000180)={'mangle\x00', 0x0, [0x5, 0x6, 0x2894, 0x6737267d, 0x1]}, &(0x7f0000000200)=0x54) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r1, @ANYRESDEC], 0x5c}, 0x1, 0x0, 0x0, 0x4010}, 0x44000) 18.45436244s ago: executing program 0 (id=869): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = syz_open_dev$vbi(&(0x7f0000000340), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000200)={0x0, @bt={0x8a5, 0x92, 0x1, 0x2, 0xd59f80, 0x19ef, 0x5, 0x19ef, 0x3, 0x4, 0x27ff, 0x2800, 0x2, 0xbb6, 0x0, 0x13, {0x8, 0xfffffffb}, 0xd0, 0x9}}) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x4}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x63, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2}}}}}, 0x0) mount$bind(&(0x7f00000003c0)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101b, 0x0) umount2(&(0x7f0000000040)='./file0/file0\x00', 0x4) r2 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000240)=0x1) r3 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000000)=0xffb) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000080)={{0x200001, 0x5, 0x3, 0x0, 'syz0\x00'}, 0x5, 0x400, 0x1, 0x0, 0x0, 0x10001, 'syz0\x00', 0x0}) readv(r3, &(0x7f0000000740)=[{&(0x7f0000000280)=""/22, 0x16}, {&(0x7f0000000300)=""/51, 0x33}, {&(0x7f0000000400)=""/232, 0xe8}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000600)=""/41, 0x29}, {&(0x7f0000000640)=""/7, 0x7}, {&(0x7f0000000680)=""/160, 0xa0}], 0x7) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 18.363978978s ago: executing program 0 (id=870): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1f7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001700)='./dev/kmsg\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000000)={0x8, 0x6, 0x1, 0x3, 0x6, 0x2, 0x5, 0xdd}, 0x0, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x118, 0x1f, 0x1, 0x0, 0x25dfdbfc, "", [@nested={0x107, 0xf2, 0x0, 0x1, [@typed={0xc, 0x3fff, 0x0, 0x0, @u64=0xfac0a}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@empty}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43f9621dc08c029d1608a46cf26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f17", @typed={0x4, 0xe9}]}]}, 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x20008080) socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x0, 0x4}) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) dup3(r3, r2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) (async) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) (async) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a, 0xfffffffffffffffd}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x18, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x73622a85, 0x20000000, 0x0, 0x0, 0x1, 0x17}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000027000004d533000000fc0100000000000000000000000000010000000000000000c20e000000000000000000000000000000000000000000000600000000000000fcffffffffffffff030000000000000000000000000000000000000000000000ff030000000000000200000000000000fefffffffffffbff000000000000000096070000000000000400000000000015be0000000000000000000000b1a00100"], 0xf8}, 0x1, 0x0, 0x0, 0x40040}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e000000100"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) ioperm(0x0, 0x2, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x2, 0x0) (async) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/damon_reclaim/parameters/addr_unit\x00', 0x2, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) write(r5, &(0x7f0000000900)="3303", 0x2) 18.275239018s ago: executing program 0 (id=871): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}, @NHA_ID={0x8, 0x6, 0xf2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r6, 0xc034564b, &(0x7f00000000c0)={0x0, 0x3631564e, 0x140, 0x1e0, 0x3, @stepwise={{0x8, 0x10}, {0x74, 0x10000}, {0x6, 0x9}}}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="340000001300050000000000fcffffff07000017", @ANYRES32=r7, @ANYBLOB="000000000000000014001a80100004800c000980"], 0x34}, 0x1, 0x0, 0x0, 0x10040004}, 0x80) (async) ioctl$VIDIOC_TRY_FMT(r6, 0xc0d05640, &(0x7f0000000400)={0xc, @pix={0xfff, 0xff83, 0x56555959, 0x8, 0x48a44eec, 0x1, 0x9, 0x9, 0x0, 0x4, 0x2, 0x5}}) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x8000) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r8, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES64=r5, @ANYRES16=r2, @ANYBLOB="cf04280300"/18, @ANYRES32=r9, @ANYBLOB="0a00064b3d9799b864380600"], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x44) 18.018213198s ago: executing program 0 (id=873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f00000013c0)={{&(0x7f0000455000/0x2000)=nil, 0x2000}, 0x1, 0x2}) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) stat(&(0x7f00000003c0)='\x00', &(0x7f0000001340)) (async) r6 = syz_clone3(&(0x7f0000001b80)={0x210800, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x38}, &(0x7f0000000640)=""/191, 0xbf, &(0x7f0000000740)=""/19, &(0x7f00000007c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000001c00)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004600)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c00b1800800f100e0000002280078800c00000081dc0000000000000e0009005b2c24c35b292b2d290000000800430006000000cd973ee675d8dace6d971ce07741c6dfc63405c9ff9528e55fa1183974d8c476d3c5a23be0c107ed0df98353aa367f90559491063e66e7d6b360e0ca33d793642dc01789e97a78c0141cee70c215e72980d6a44eb77af97ca17114dbcef7ba7771d5edcaf88b4e5573ef340abe1216f09378d261843b90c26a34890c2acd16db6cab9c1f60fd7c34a42f850d2e1c0fdb5d2d242086fecdb0a8d8899ddaafc4ad15e8025fe82854134c800800a100", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="08001b0009000000080030000d00000004009e8018861500820f7f0363f6f4e3cc486d090eff8c7397b8e1aeb10fdc72f3addaa96c62d298aefaf6d0d520e9a6dc3a3d8c82dd6890a5fe859b73c0f1c2c587393fbf530b810c8e1c4bdb323fa8e47939a02e0016c63431ae574927ea08ccdf75fd3e27b7a6d3e50f7bbff0eed258b8528967719b5ab02c8dce5806b02b1121e73e826a3517827b8efdfdfbf396482d7622ccb62fb393b836aed7628b70434953a72d5001c7bcf910233084952bb334bde1f293c2abeccb4f8d9f9f8ffa57ff4192a11ad79579634092930493f51b7e9ce043bc833df5fd6650d9d5e51bfe012e8d0634af2ecd6f75cbe473b777f9e5b937d7ffec1184623c5cf9336d1d4c2670b127e758600e62f71e0a6625a3e0d577c1fb357fd734fa7e89ea41da9b962e667866d598fc378df67b802c4f76e352b18ff2a52e50a976a57df8a543b08cae68652da79ef5d0dd720d8a22a46e337a8094c1d1f09ee6a981493429a7f23547036ed943278f1570f8c6bbf8bd58cdc17e732d75b71120a30e9eaf2ee34d2590d9364fdff30600c52a8800ad04e8e4f8f6f5057bd0f69c8f704b64cb11fe37cc7b00f8cb0b9a2de5385e03b7490b43274e06860fad1311957d204ffbef4084b9488446cdb399a4291c16d8e3dafe82b5b779f0253826625fd7520bb18cac4f50d990fa0f26ba9dff861161509c8dfd9153b1981379376a03d501d5c1d17845a6cd8ee76cfa24e83fa157b063c8022b55bb60bba6844ff505d79bb4844dff103a0a05272a4f1e115fb3cd70389032f29b97c078d0f5f2890012810a6671819159f0cc0f6280af885a7edbd90cbd58a93cb9fe1750e3add571df1c95ff05f10a017e7847706c72ad66ade440290c743aa350126e66b6be48f71faad6986bb005a76aead6000d650b1773e3be99d5c087621d5c14b870980586619d48f26fc96f1e37b64910fddd85b8db4b7ea374f677716ca9000f913fccdb3d8285edbf16ebb8248d2d3eb581f821103d113dcd47f8d643aff5e22863c632f7751c890feb206af33ae4263cbaa1f05cd44dfe47d4dac673a54629c2ba72d3ad5e73edc0dfd65139800299da36307b2605866bed85ac0288bf22a918e7ef37cd40f7405d20016de85c7b933cfdb236976b9f4879697ead1a4ec1ab68441b77af8da355548e3420299ef427ffc362ffcbf6f4c2dd6b674b90c7cbfc740411c4b7780f472a097e1aede0e56fb0f110cc8fea82bba2e5c682c37aaec647a06d2cf097251ac4a2a3a11bb6e80762ee4c3e73a0d6250e4e03b7375c8f0450b7dbb1946c88014a626ff0c84a03b2ae40757793ebbfec60a244f0b2f98739afe487060210742595aa3d7be046ed289ea7b0c5a2f97a42468cd7692c5202e44fd62406bfc06cf48af3d8d10d928ee8e82929f0bbf7222171f3e3175ff8b6b51cd94a123cc1a05ffc7fa055c66b7151c4efa0aa32b015bcf904062558bf90b0adeccbae9b760175ab723ef486ce8dd543bc100c4ea524d13edfd5b9e6d881b3b99e5c8988a21d2bf4c9ba573d155de8650543a28911de3fe2512087d2c1b26e5f69c63700a0b8c63a221234d97734c6205c44b21c68dbd749555f397ba98669bfa6f7e767446ed0bab320d187eba4fde5580020fa60d0b54db63d3b619387def9ecee5fc07d0648a7a0a8f38347bf10b3d8115a8c6e794659f39f28eedf9ae76083b2549329ebc5de6aa4c269f969f3ab5d4b34ea42398099cf4e8e8d4eaca3e7e79ecf6f7891e5f34b34425402520f4a5bed98ea7e5a42b51256f62d224bfe80eeaf8b8e04ea91eae0111bcda809b392a191265dba64155574f10dfec77a039190cbde2cb79ed4d2e4bd2bb285fe4531a60edbecacb4cfbda44882a37bb0b53909ee08816a2e33bd5e49c8f3cbffbe6e5a8fb95ed6a06500cf8f2dfd843f1fa3d7d9f001fcff9f1eb9a35908d45b8ca490e4ec3c870ca64be6259af4fb214cad0f9411f313a839f84ac34796f63cc26771dc8f53078ce73a38603b1f48960c4201d0b0ae9db6244481d766d956bb86a15bebb955b540e4b40eeb39bb4e433315c59dc9d29bb5a44fd80e8c08d34f4bd97150423e16e48daaa4ec673c17c0b19418893ccc105dfd233d71694576560f913326116f469da034f6036c9fe407a2c7250c8205737fa4a524021e4131d4f93ef66542774ef04a342ed0c41555e1b9981aa79436d2e0f9bf93efd254ecef19aa41566dd8a7fae461aa4ee97db46a4d1b56adce9c59a13fc296765615326399df63faa900a38c9f27a076a9c1a9801b97b86dcc7afe359de5a12455996fd6030f44820ba116b9f8a325defb19988408796f3e80633efcb7188adaab6981d16408bd1ce2b617e5e719ce03a92017a9f561c4fb6531703281b0f4909e507d31fb1286a359c18cdc99766508a9278bc41bef6793ec5a0e7b7a07c743c5b0ef1563905978b931ad73fffaaf128a358f3d0ef2d059b886ade79f40cb767353e115a6099539839c9dc6aab46178d2fdcc544ffc8093e68f768f4441ddea86b35ff4ba7bd98098f17fb9d998444cf1fedc18357cf14bf96c6213cfb5d8f139be7e498d16e44f92d66f537ac90d217d20008fd7004811c6e66a8dee3096eca2eccfc4b5a809ee974cf69b5751188ca4786031e4878eee88adea35768039bc4351cb5d13bd29dfca86df148b11d6ae231c13726794da22afc33feb8cdd6050908117ddb6af874b2b2d170dba5c610c7e261a370b6df7c69e4de54aa2466397f7741fd61750f17e5a3bd2d5325040228e238f9dd4d3ec77a456c12bfb5319be107e831868abd454d07466b4c7612c6237c1d23bc273246a6bcddae76b49bdf7a8807152a580cf5facbf129422d8a10696bce9ee58a7da45e82153c10b2b8bc75128b952f5abe739e89bcf5b44532c16a5d5f693098019a25234a72309b2a6d155c54e28f1a6cd338a1050efbe74a1402e517e2fdda69f201ba2346d76b73a7766f37710210a265a800d840bc2e533028c86f3728bdab58bf30bcc9a407b5437cdd54d5970dbedd165d69e356aa551fdd1983384f62d65bd159d66d8d31e01a8030f0c2d1da9ea48fb56be244d362b4ace45ec65f90c5c56e784cf56d050d2b821b18ab4166e67a1c641d9857243bc0c58a1f53b6dd0bdbdf9597170bbd37495bbfdf993ac1855f718bb0fb9cf203115d8a8038b92d8ea55b70e701ecd513cd7cbb89236448090062182b2c2003a4d6717c02a67b36a7c34911df293451769405613ede401de4b330774fded37703435efddedd4425c3fd494f6174a620c97f1c794ea5a2362f8d2d300a7a61db9c43107e4035c1ac2ff85b937f8ef2f89ea15931067253972e023bdb868df21d72f0d753348c60ca19d0de9f79cc84c9fcfbab5eb7aaeee645b4d7d72c5a63285c84536aaee82d56126e73dc7ea6eea42978bbb50e1c19ada7cf79485f0e0a1e1407fc9039fe32d66bab02e65e4ac55e323cd369d0aa10e02fbf3a2dd1f26a7e9dd763082e26f3ca55cf04fb0775005abff005e24ff08f896af8843d86dfd82918297b2cf706127873b05bb58a79c972f71c296ef86b93a19231582ce1b2b7b2f5ebafee6f09da43c462e5406cd540863d145dc379642b7a5e8d67063f324e38539f763e5b0c2b8ed55f08ac8a0f940512f45b372f6558017b10f48fbabdeab8f6eceb299d0acce48cd63a0aee713f0dab06cb17936a8dde921ac44cbcc1ac8d18f80d27cfebfcc13b8c844107a730bac9f81362e863d72f4db86a8b952e11c79b57490ac7e842f0707ad822496ce58d9561d0a84d2e029a394b0f78eb7a8e28c83c5dd3980bf673afa989ac8f26798dc59a7734014c0ee54c03bbeb270a69289e5af542a10967cc38eefff6e7860a1fb20ab4c7edb524a2a76c1c6eee5e1f557a8d19892a9f5365e54c525aab0401c843a85a7bffc8d0a12cf365c797df4d3c2793f0883557fc6976f0a995125eb7c4de7806b889a060b0cdd0c702d8b3f98c5702ae7d17303137462e22fe2d4aef8571bf5f55d785dda0ee46eab9a826f1a716707eeb7fe882d6a6c691db91a7930e7673a8745d0152d5e4eeee65270e74d3e41c82cdce0ea125a1eb2c9365f11313111e594c061ff9e1747bf3d42fdb2e43fe28f5f2303c89ab1c96f7dc003b4edb46a7d097a07a2e627dadaad2acab3871d0a5d020de1eca229284de8ef7ee631cca217d5445eba32485eb75103a7133ec7e9cedabb0720628c61aa325b7bbd4661449b9bced9fffbd7100b61c415abe56a4057553b00b1b37111b489b15cd0248ce263227a5344d0b356e84a158b52225c03048946a22af3c5c3fd9c4026d2d7f690b0dd12246382c18b12e8b977ccd459c417024df8d7ab68fc2dbce77d91eb98c5ce4ee6d96c9ac3fca6ba9ce056407befcec466bea0e416139fc65236199f8b34fef7747139a25180ee3739e595a88ea1652078e37451738ca3f5b4a7784b1e831dffc31e978ffb308f16bc5b42976a2875cb45821aecf307d288dd3b3d0313849602557984e04bc0126b299fae445b821d16da27d5eab48a7a88943dba8d388abcd739b5bfd6c4d56d19b40946b8c04d7494d4042bcdea10a2c7cb77b3c0de491ffd60f87a153d130a63843c9836fbd6d4471a53080602849330f8936d843c874bdb271c2a544722084340593e5da752bf9da239bb7eca4bf0b13c7c232e7b0377459e06917eb40081af0ce7b85cbda6e4daeda9a02610b08a81601a19c8f5051095dd9f4301222ac31ba2c973e893695e60f7dc10caee8822516bddfcdb7a00968dc0f3c9b2b34c6f19434709dc18ca3c814cf437d0115b1a405d2561e38f0e0deebb7eee802f80fcd181f43f3ebb486aef72c6310cf2dd6072ea6a539ab35f1ed344a35d28d162b36c0a4d56af6b1a724d01dda7ee4cb4decb85a2cf95ab960a63e6ef543439a371ccf97c8bf8cf00b798b723c819f5769fa478c53b78caa6e234f5d3a24315aa4de4c57d5bf2a26ea8430029932cdead90ca67392a4ca178e04e4ebc392fe0dd32bdfaab1b8a8f9a8a58bd14bf547c950af8c1278b0bffbe2704fc5c6b03dd829df45850bbeb174add324dbf681de05e33dc2bc92d1aa05842b3b3eda477371c124e960b0083094c5b4c968e53b412d7b3747873ed00cbf68bd8b43bacc320d6d338ddbd0058de7f8adc30ebe78e75b1e8b040161f006dc8a84fa5af76f95b2444d3b829fabba7a7105be6922a577c5c3de44f12dfd703899751c9de60f4099898fc5241aace8a81248492e487733b712806a324ece1e36911e7be3b7ff86f3bec18b11a4a5e3710b682465b41c8c1dc98257471c8aa7ced007ab74fb3c349848d5bffbb5da6a1407228b710c0964be8322b2003816e773870fdbc8509dfedf018ba69167e86cfbe8fba7624a6eeba5a66c7fab53953154c71c30e7cea8329e9afbe0208e04c597453fc08272a56147f4a686b0b109a3437473e2bc8d4a631eac2b718c3ff29f074a05c06bbf3a7fcca4c0ae104903c0b54288268c1e29bd71b1af4cdb6d095528b942e116fba770f118710b400ec7c5c55c528e3c26a9b8ff661f597f973dca751a396f846d687a9e6a5a4eed1f2f0c1b83ceefb29934d813f77e0adc2fb734161ea8f2dd9a94f7d2bea03da4e1c25cf200fe5785c963bc0ab8b6c4dad0004ac1fea5edbf60b9154897c493d12fdd96c45fe720135db7049bead191ab4b083f3e7dc7340e85ba5a1aaf778c653551106bf13b6cb143892f8fe543c7877b2ec89ea8671db64735694cbbc9d5c39ac291cda2276aacb59df912c53cce428e7d795e0fa04003d000004000280"], 0x1464}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01864c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000280)=[r8, 0x0], &(0x7f00000002c0)=[0x7f, 0x8, 0x0, 0x400, 0xf28], 0x2}) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) (async) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) (async) connect$inet6(r9, &(0x7f0000000800)={0xa, 0x5000, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xde9}], 0x5) 17.918161106s ago: executing program 33 (id=873): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) (async) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) (async, rerun: 32) ioctl$UFFDIO_REGISTER(r3, 0xc020aa07, &(0x7f00000013c0)={{&(0x7f0000455000/0x2000)=nil, 0x2000}, 0x1, 0x2}) (async, rerun: 32) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000100001060100000000000000000000000000000000000000000000001000030073797a6b616c6c65723000001800128008000100767266000c00028008000100e8030000"], 0x48}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) stat(&(0x7f00000003c0)='\x00', &(0x7f0000001340)) (async) r6 = syz_clone3(&(0x7f0000001b80)={0x210800, &(0x7f0000000540), &(0x7f0000000580), &(0x7f00000005c0), {0x38}, &(0x7f0000000640)=""/191, 0xbf, &(0x7f0000000740)=""/19, &(0x7f00000007c0)=[0xffffffffffffffff, 0x0, 0x0], 0x3}, 0x58) ioctl$UBLK_U_CMD_END_USER_RECOVERY(0xffffffffffffffff, 0xc0207511, &(0x7f0000001c00)={0x0, 0xffff, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004600)=ANY=[@ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="0c00b1800800f100e0000002280078800c00000081dc0000000000000e0009005b2c24c35b292b2d290000000800430006000000cd973ee675d8dace6d971ce07741c6dfc63405c9ff9528e55fa1183974d8c476d3c5a23be0c107ed0df98353aa367f90559491063e66e7d6b360e0ca33d793642dc01789e97a78c0141cee70c215e72980d6a44eb77af97ca17114dbcef7ba7771d5edcaf88b4e5573ef340abe1216f09378d261843b90c26a34890c2acd16db6cab9c1f60fd7c34a42f850d2e1c0fdb5d2d242086fecdb0a8d8899ddaafc4ad15e8025fe82854134c800800a100", @ANYRES16=r0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="0700da00213a00000c00b6800800040007000000d50035800500f5000000000039a649b97122df922a44a69a528874032104f861645995559bd144ac5a5ce39281e36db8a697e339d25c68d1ec931abc2a519bd10c312bf654469b789b9b248de3e2e422ea646460599041b628328c8512673575ea79da37cd719ee2a36c7c1f406fc9de60318c3913be2fa52eebf582fdef4fa46c4859bc6181aa3f49e09f16e5fca41c43a77798b8b5d38717431570ec700b213b0e78b3dbbcf21135bd7aeb50bfee0488d5450c127644bad7f0c71640412b6150659e6c955feab5c13f2981a7233116520400b6000000007a024e9ef4c5f64955bf70eb67d5e4d9994e5b3d4b0666288f5dbd6c9c0f98790e98446650bf286ccd16f71a657ffbf05a90283c8197d697f200a20fbc02318e481f8e8d52a5626905b53ffaad3bb8ecb16c0eca2180b580042938455e9ead5cddd869446b4f818f2412d3c78684d3403c895cffebe039f3eae1fe1a2f74912239b47d6f05fcc454bf6070eab59b41c832ad6009d858ec98e5b882a737046d9ec0d1564a3908abf8a37051714193f762a408d709245366a69758ecf0474323f6d3e87b53fb37eb2213feb556e072d06f46d3ebe76b2e5f6090d64bc45e4cfd4ac9e85f387d12cf6203f7fe4b3693aabf1b97d51c45da69f38691e28f3c00868014008500fe8800000000000000000000000001010400ea800400bc8008001a00", @ANYRES32=r7, @ANYBLOB="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"], 0x1464}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r4, 0xc01864c2, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(0xffffffffffffffff, 0xc01864cd, &(0x7f0000000380)={&(0x7f0000000280)=[r8, 0x0], &(0x7f00000002c0)=[0x7f, 0x8, 0x0, 0x400, 0xf28], 0x2}) (async) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'syzkaller0\x00'}) (async) setsockopt$SO_BINDTODEVICE(r9, 0x1, 0x19, &(0x7f0000000780)='veth0\x00', 0x6) (async) connect$inet6(r9, &(0x7f0000000800)={0xa, 0x5000, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) writev(r1, &(0x7f0000001540)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000440)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f0000000540)="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", 0xde9}], 0x5) 13.793342512s ago: executing program 3 (id=920): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c000180060006000806"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) r1 = syz_open_dev$dri(&(0x7f0000000140), 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x6, 0x1]}) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="2800000041000901feffffff00000000027c0000040042800c000180060006000806"], 0x28}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) (async) syz_open_dev$dri(&(0x7f0000000140), 0xffffffffffffffff, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xb}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000051}, 0x0) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f0000000000)) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x7f, 0x20203143, 0x0, [0x2], [0x800], [0x0, 0x0, 0x0, 0x10001], [0x0, 0x0, 0x6, 0x1]}) (async) 3.263221114s ago: executing program 3 (id=922): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0xe82) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f00000000c0)={0x29, &(0x7f0000000240)=[{0x9, '\x00', @data=0x800, 0x5}]}) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) write(r1, &(0x7f0000000340), 0x11000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) r4 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) write(r1, &(0x7f0000000600)='dir', 0x3) r5 = socket(0x1, 0xa, 0x7f) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r7, 0x6a, 0x5, 0x0, &(0x7f0000000040)) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r8, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, &(0x7f0000000100)={0xf, 0x5, 0x0, 0x0, 0x4, 0x9, 0xa9e0, 0x7, r9}, &(0x7f0000000140)=0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000140)={r9, 0xf9, "ea459a6b0fccf94a0481d7951aad58371a7fd99196ab6bd368a38d538728e08e09bf94fdf402dd004ce7b65228aa47b88a06487117ac4bc6fe496fa15d2716302d411d7fa429b61693888b92c06848ec288ab065d0987e67e853283fc87e6c74ef8e1198e234805cc1ced30f26147edfb1fb2c725cfb783047b1157e90a83a2dcb0ee299a014b00b5b6fa5832de9ba1173ec21edc05d79ffc7c2dca357d1eeb4e2c975d0f2973b1c1913b521ed25c055be6b90f4028bd0c6ea2e49a7d1033b502f22723d3224dc79b563c5e839af7147c5a5798eb65e0bf7364155e56246c8fcdc03bb9a27cd0637f3002c93bd869878708b70bb44073c3ef1"}, &(0x7f0000000280)=0x101) add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f0000000040)="1d", 0x1, 0xfffffffffffffffe) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000000100)={r9, 0x0, 0x8, [0x8, 0x2800, 0x9, 0x2, 0x3, 0x51d, 0x6, 0x56]}, &(0x7f00000002c0)=0x18) mkdirat(0xffffffffffffff9c, &(0x7f00000020c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/vm/nr_overcommit_hugepages\x00', 0x1, 0x0) r11 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_mcast\x00') read$FUSE(r11, &(0x7f0000000080)={0x2020}, 0x2020) write(r10, 0x0, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000380)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@gettfilter={0x2c, 0x2e, 0x200, 0x70bd28, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xc, 0xffff}, {0x9, 0x3}, {0x10, 0x8}}, [{0x8, 0xb, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@newqdisc={0x38, 0x28, 0x4ee4e6a52ff5667f, 0x5001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0x0, 0xfff1}, {0x50730894915e2933, 0x4}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x200, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40098}, 0x4000892) 3.2629868s ago: executing program 3 (id=923): r0 = socket$inet_smc(0x2b, 0x1, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x15d) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x200, 0xa0402) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000400)={0x23, 0x3, 0x2, 0x1, 0x0, 0x3, 0x0}) write(r1, &(0x7f0000000080)="1aaeac1c60", 0x5) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) 3.26175873s ago: executing program 3 (id=925): openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1', 0x1) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='1\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./file0\n', 0x8) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='1\n', 0x2) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='loop\n', 0x5) close(r4) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r5 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r5, &(0x7f0000000800)='transport=loop,nqn=testsubsys\n', 0x1e) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000008c0)='./sys\x00', &(0x7f0000000900)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./sys/block/nvme0n1/wwid\x00', 0x0, 0x0) read(r6, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) 3.25186246s ago: executing program 3 (id=932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) socket(0x1d, 0x80805, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffffeffffffffff]}, 0x0, 0x8) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001380)=ANY=[@ANYBLOB="0f000000040000000800000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r1, &(0x7f0000000540)="03000201e70180000000000000f1f4e9830e5f00000000000000000000000000000000000000b4bcb0676f8377d3ed812fc4dbf2363ce3f94fd21b36e31c25499df9d763e369418282a7ab8abd7d1948f79d40e9b34a8da61ce3e60e241988e861da2c8a4dea75dde9b186d482ba2e6426f70fdd2be34a16f94008a733025c7d0ec49afad8f3336e1efb2a58fabf9da6ccb2dfb12ce1e168b483e30b1c55e2514798d00e0fe92457de133a23eae95e64a1f16b8a0d81899876ce3878661747b8e5da35ba29dde421e84d3a7977117345be07a45891b5", &(0x7f0000000480)=""/190}, 0x20) r2 = gettid() timer_create(0x4, &(0x7f0000000800)={0x0, 0x12, 0x0, @tid=r2}, &(0x7f0000000380)) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4401d9f55b7622c2a9baa0149d05a479cc4e4391bddd094a0d5a55389718a6e7625d955346439bb0efe4ea7222b367a611757a6cf3a9213566ad5d46cbb8a105e0c8251c3d69af800a01dfc445268b4b75e389b37ad80b912bb2a8d5710e4332ed639cc9cff654e7", @ANYRES16=r4, @ANYBLOB="010027bd7000fcdbdf25030000001400090000000000000000000000000000000001050002000a00000014000700fc00"/62], 0x44}, 0x1, 0x0, 0x0, 0x4008850}, 0x4040014) setns(0xc9, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x14440, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x10f) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r7 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r7, &(0x7f0000000100), 0x12) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) listen(r7, 0x1) write$tun(r5, &(0x7f0000000000)=ANY=[@ANYRESHEX=r5], 0x88) r8 = accept(r7, 0x0, 0x0) sendmsg$TIPC_NL_LINK_GET(r8, 0x0, 0x81) poll(0x0, 0x0, 0xe2) futex(&(0x7f0000000280)=0x1, 0x18b, 0x1, &(0x7f0000000100), 0x0, 0x2) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) 2.321113707s ago: executing program 3 (id=940): r0 = syz_usb_connect(0x0, 0x106d, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0xe8, 0x3c, 0x27, 0x8, 0x489, 0xe057, 0x5bd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x105b, 0x3, 0x9, 0xb, 0x20, 0xf, "", [{{0x9, 0x4, 0x84, 0x1, 0xa, 0x9, 0xd8, 0xf2, 0x4, [@uac_control={{0xa, 0x24, 0x1, 0x2, 0x1b}, [@output_terminal={0x9, 0x24, 0x3, 0x1, 0x403, 0x2, 0x4, 0x2}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x9, 0x8, "90"}]}], [{{0x9, 0x5, 0x9, 0x10, 0x20, 0x6e, 0x8, 0xbb, [@generic={0x46, 0x0, "8ac5c3dcb101bf9b084ee7195b8593824be3496fcaef60514ef039568c360c8b3b204b2f2fd89c17cdb897142eb14d0776aca3575002b97a9c64d38b504a4c798729e5f9"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x8, 0x4}]}}, {{0x9, 0x5, 0x8e, 0x10, 0x3ff, 0x2e, 0x3, 0x0, [@generic={0xe8, 0xf, "f5d5e35069dcd14e0148911b0c3001170b1bc972fecfe898dcd15144542fe90655e71b9e56c81819182415b95dd7d372c56218668e979b254e46da96d8fd0d7b47c1a1cfa46ade7a3ebc38cc4b85ad648e9e3cdb38cf9a505e30affea6cd23d69f7ce7cd72b5fe661e0f4cc37895a033e61cbd26b0143401b45f8514f4cbeb22b98fe900faf57638b0d3fcd175e8980cccabff34e25102f213142bacd094e8b33f24fd19ce9e5857a16403d6207cf1c8040a114e5a0eac21968efef82999389323416809c36a08aa098da57439f224214f9ad32e089ea9add5ef01e5b1664b04c4d5d4fa919a"}]}}, {{0x9, 0x5, 0xf8f62b7d23fc5c0f, 0x8, 0x3ff, 0x68, 0x9, 0x8, [@generic={0x79, 0x9, "3679d6fd3b1db2b9f580526c7b8649121c345ec7fbfb4c328ce3df8ded8df3f6068621f87b516f68eba9d96189d946f5c7debfb2612f6c8b271985f6ef84ed6aaf9cf296c36d29a8c828a24c676906764093f4c5f0532a12f2487dfa7d1e83f3ef782109877081e85bda15ab738220017e394f867ac6fb"}]}}, {{0x9, 0x5, 0x3, 0x10, 0x10, 0x2, 0x50, 0xfe, [@generic={0x9, 0xf, "d13ed257b8adb5"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x200, 0x7f, 0x9, 0x5, [@generic={0x4d, 0x21, "6f4c8d758431e9c12f3afdcfd6230e36db7df0b8053368714cc8fad616f3252722ebcaf19db3e5f3c9297110e7e9f008085082b6e7616e99946e5bd2b83af9da1c81f657031582f25e2720"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x40, 0xe, 0xff, 0x8, [@generic={0x23, 0x1, "fc9985df96af17920b64ce7f8cd31db039d2fef8b918057dd6f0ab221f7dac790b"}]}}, {{0x9, 0x5, 0x8, 0x2, 0x0, 0x2, 0x88, 0xfb, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xfc, 0x1ff}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x6, 0x8000}]}}, {{0x9, 0x5, 0x80, 0x0, 0x10, 0x81, 0x4, 0x0, [@generic={0xe6, 0x0, "500b5112ed7acf5226b097ba535d3331c9633c6ff531445c3ccd64c2c526572dbb3718d3099b822343182d7fe2cb1a5e1542e0b1ae163af13ef5c143229202b7bb14461b3a14f1fb3e6317fda34c766066c32da6eff6f9a3029d8789a06191baf72c504c416620dcba0fabb8a195a3f6043a8491e53a426048d8a3d6dbfcfba920aa05b0bcec480832ee9e52350028ccd84a86cc06bfeb533ad30685c92e33ee03b9f4a26418a0d018f592724cd53d1e9aabfb4224f7180c48a80abc5dbee6e63838c7a8d96280a9d80145ba816317e64654dbcad960db293eb4e58cbb36a782338d43fc"}]}}, {{0x9, 0x5, 0x8, 0x10, 0x200, 0x0, 0xd8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x80, 0x101}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x78, 0x9}]}}, {{0x9, 0x5, 0x3, 0xc, 0x40, 0x7f, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xd}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x8}]}}]}}, {{0x9, 0x4, 0xab, 0xf5, 0xd, 0xb2, 0xb9, 0x2f, 0x3, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, '#et'}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0xf0, 0x3ff, 0x43ca, 0x3}, {0x6, 0x24, 0x1a, 0x1000, 0x3e282454ca433290}, [@mdlm_detail={0x17, 0x24, 0x13, 0x1, "b8c670bbc95e89deb1264c2bd90b276da3a7dd"}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x35, 0x7, 0x2}, @mdlm={0x15, 0x24, 0x12, 0x1}, @country_functional={0x8, 0x24, 0x7, 0x0, 0x5, [0x400]}, @acm={0x4, 0x24, 0x2, 0x8}]}, @hid_hid={0x9, 0x21, 0xed, 0x7, 0x1, {0x22, 0xffe}}], [{{0x9, 0x5, 0x5, 0x0, 0x10, 0x2, 0x8, 0x0, [@generic={0x38, 0xe, "0b0ef7659e04fa2e985e93b25a07da52b37eca64949eb0437e0cd2214f3b9dae8a6849e2e5274bb583a8520f70709c9483400d1fb9cb"}]}}, {{0x9, 0x5, 0xb, 0x10, 0x8, 0x9, 0xfc, 0xad, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x1}]}}, {{0x9, 0x5, 0xc, 0x4, 0x10, 0xb, 0x3, 0x9, [@generic={0x9b, 0x30, "8ded954f7ee4ba63f7456abf1a99a9529d781b7147495db789df89e8ca37f801c07272acf2118c38b8e5e1294a23f51510e29f4d47af2f7244c3bd257afc53f37877281a4300b85f6a977d0c7ac23ede4dc69e7ebb42f25cce7107752c46c361d6c8814c741cd19a8e0ad4024524c55b60daa2495f3237543206b903288bdc0394dcf16bea21a453ea87eace0516e6e84bd647e06cfb381686"}]}}, {{0x9, 0x5, 0x2, 0x1b9c57b227714984, 0x0, 0x9, 0x9, 0xed, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x10}]}}, {{0x9, 0x5, 0xa, 0x4, 0x3ff, 0xfd, 0x6, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x8}]}}, {{0x9, 0x5, 0xe, 0x3, 0x200, 0xff, 0x5, 0xf, [@generic={0xb0, 0x5, "c9bf1b3349f7814af7098df4523c0a6d83db7bbc9b80e69e0195b7ed9d5de6df7ac6371b1a4b0c5c94c0dc4d59710b39963f30267b462a98c0b2e299fd54933c5d9999d2fb69d309717429c8205cbea00f69b758ee0b22631f1a452198486af282a4ed48783291d431e0a1bb594dd7b02ff73ec1da4945e3d8a9dc5657e97ed27d8626ef339ee97584b607c8cebe092a6f0a22b2f2b8bad43837d12785d5fdc98738197b1da0e192d4b56cf8a96d"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x40, 0x49, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4, 0x1}]}}, {{0x9, 0x5, 0xb, 0x1, 0x220, 0x7, 0xc, 0x0, [@generic={0xd2, 0xe, "b6f0e36f1a7d18b83b11f785e0ae7741099e0ee64d991d7590f9379e441c8dfd15acbbd837a174cfb8a93d50a4865105e8464ce932f63bad4c69c2eb862f217a4d8d6c69b993883bf567f2ace2d2c93654801aa8f9ce09628063f443165ff56a431e0deac583e5a370cdc540dade0f21f974551d6d997bd1e6d1c5f6fe4e09779fa2d5ee4d84d448804808bcd1c031aefbad3106a8d89db11cc02a5e009bc792bcb32d62bf41faef92228c6f14350ee10a01c2ae485775b9e7061806ce46e90aace42030ff311bcd2cb9f28a396b2bb3"}, @generic={0x99, 0x23, "7b1b036a01241c845ed5e83aeecde858d01b089889b83ebfbcef11c9e54b9b78ced7f41f909f671612c695d59fe193b48d6c3f759faf0d5ba947afe57f17c410c1ddf63001a43985a06286a387559decbfdad0860364f47f2ad2072d43a069bcdb727410e4d7ac91810926b7d28459de431629dd1fcf26a3c44597fa5e0ccf93a978436d697d53afd55615d296972cf042fb292c5f31ab"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x20, 0x1, 0x3, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x11, 0xcb}]}}, {{0x9, 0x5, 0x1, 0xc, 0x400, 0x7, 0x5, 0x3, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x56, 0x1}]}}, {{0x9, 0x5, 0x6, 0x2, 0x0, 0x0, 0xc, 0x9, [@generic={0x67, 0x1, "1de51fc5fd16338a5532983a4589df549a5e0c8f082d3832af3a77a6c58d40ca499db12ba6e3583edc2267f766becbcf63bfe510d8420687b2669ce62c58061c89f4e5b1a778270624bcd1b0b02b79c03a59a892ed2b22379c3356b55f7488f1809ecda8f5"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x8, 0x9, 0x8, 0x8, [@generic={0xd2, 0xc, "ae82b0168baceeac9a1b58b07db75b0d7f07a3592ef1193b78d02ff28eea74056aed7ad19240aad7fbda3c9492def620d32cc3c14531a3a16b99e27c789ce3117774d8585204bcffa06501f5a9401077c81a001837807227c5515c8b8cff7984755620e7accd16716d005896d46dda1f93b89be3a6a90ea112246154b8adb181b0439549962d88cc68154e69d06ced9909efe67b07af318ecca546988f87bbd78a04883e0e3d342320b05509cfea996ddc3feb5f61bacd62485c701dae11690f7c6061f4f1a52a81cb34124af397684f"}, @generic={0xca, 0x4, "3669a8822005e4babca277df66bf8c69a98a968df290856224428e34c93b8687e89ad100c7566660bed487c3b809a0cb97ba009cd33d6b5993b6aff3b6f468c91e0f2b3d882948dc16a6be75de87cf5c51a2ad4ec2b58d394b02e8d8dd62d353503e48a612e68ecc76e9ff59587121e69c94c541ad239fa9e9555d0f7646f59a07ad5c674bce79ca32ef52b6832590806c30b1248545dcfa958d54d7568e60fe011fc16d569fc1ec3a5a2fc224c7b1b340773c08cd8606186f4412b4622500288e82e07f584ec0b2"}]}}, {{0x9, 0x5, 0x80, 0x10, 0x20, 0xd9, 0x3, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x7fff}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x4, 0xff}]}}]}}, {{0x9, 0x4, 0x29, 0x2, 0xf, 0x38, 0x29, 0x65, 0x10, [@cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "4a3579ee"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x0, 0x7, 0x81}, {0x6, 0x24, 0x1a, 0x401}, [@mdlm={0x15, 0x24, 0x12, 0x14c}]}], [{{0x9, 0x5, 0x7, 0x0, 0x40, 0x1, 0x7, 0x8, [@generic={0x34, 0x6, "f34e626587d142dcafb34c6b0d652e0b6036030d2edce54d2c9a6be8bc65f38fb65f5ed91fa6dbf9d2d54980a89c6109519c"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x10, 0x19, 0x8, 0x6e, [@generic={0xb7, 0x22, "b81f25a08e8f7789c068c689cc7cccc56c8e70670f4fe5703c15f9d092280dd84e2170d02d177a98ff0f1363d99dfbb4a0ca881feac7ef3203eef4c0c3d8504cc216f853c9af899fdc441ca9856e8af4d5c61c61020c9941cdef2237cc9b388ed77b8145fa8a82bd400c704607540b57af9e12b03cfe22d2d74f897a3fe9b9eaeac0eb850056a1e8f1adb407d468e939b11af08a47fa92afcfefebdbf8f53691a8da236ea514cdd7c2fddeb86471337c9bd52a5613"}]}}, {{0x9, 0x5, 0xd, 0xc, 0x10, 0xc, 0x1, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xb, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x3}]}}, {{0x9, 0x5, 0xc, 0x0, 0x0, 0x91, 0x27, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x5}]}}, {{0x9, 0x5, 0x4, 0x1, 0x3ff, 0x2, 0x2, 0xfb, [@generic={0xd, 0x10, "b80a066404d58db372c23f"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0x8, 0x1, 0x8, [@generic={0x74, 0xa, "81f57d4716d5744ca5d0c7f86b91423c16c28e7ec74677b58bf940c5fa7bb7fed6778f7defce2558e7936a41db2bc447645966042d04b5b75a378b34a3b9ccbac5aa7b0c6f2e7a761dbbba173b7531b24556bfd98e310381222eaba71722be0249cb7a99e2cc9376f29030636089be1595fd"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x20, 0xb0, 0xc, 0x3, [@generic={0x1f, 0x8, "69333405cec39fdced4c056078ba0183650060f79ebccf1863cc0bf9af"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x8, 0x0, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x8001}]}}, {{0x9, 0x5, 0x1, 0x4, 0x3ff, 0x3, 0x11, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x9, 0x3}, @generic={0xab, 0x7, "45e4a779c1243b0eb41db2849a0e0666f871141fe36951ab4e4b71cc9c70b016a23fb5f1b67d0a63842c340ba37f9465cc5ab37bcdbfa4acc4f07c061a2e8f70f37ebb4a7cb4de7a9703fdb6f87f5d2273063a388ac068f2603e412386c879cb0d090f770c53274359ca7d680061d1f8140adae86f0e8a6a2db4379562aa61b039a7afdd512a92c77fec26d4961aeba754e6ffb15f639ff7219896a9c787f81904b782a61c936a7caa"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x4, 0x7, 0xc5, [@generic={0xfe, 0x11, "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"}]}}, {{0x9, 0x5, 0xe, 0x2, 0x20, 0x0, 0x11, 0x0, [@generic={0xfd, 0xd, "4b4ba277574c666aab4d1b1c5c1268f735c2b3cb7ba0bd5b5403b78fa3a1319e9d784c20b991aa740be3361de8c83183cd29abd4cbb5af56f83c8f642a8af1e79d87426224b9647fa389bb38f49778cfd7337f0ef23b5ee4f66b7fcb2ff7a8d39ce335edf5be05b8438b1da14f8f90f123172e0370e685b477e7b9fb0df8303129c3a7e13b9bda0b4db748d6eab75c6581ab7b92776e9d87a486ea7769ade7f4e7effc3426d4ae1fe7b2ab83273ec10334f420c3cce0e1de0adbcbe758cd77c9017c72aa1f31517412345f661060acdfb099fbfe51d3310e4d7cf044a367e6321b974e2a794e0f7a0366d24b790aa3a718640d8d71e786cc9cb208"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x5, 0x81, 0xc0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xff, 0x53c}]}}, {{0x9, 0x5, 0xb, 0x10, 0x40, 0x3, 0xe9, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x872}]}}, {{0x9, 0x5, 0x3, 0x0, 0x3ff, 0x5, 0x0, 0xe7, [@generic={0x74, 0x11, "4d60d20b501dd6779f865b82c3094561f0e6324b8a521c7c423357e26f5814f2e3ef2d2b59d349e1a2e4cb6101c46db8b0bb236eec4925bf34d0ecdcb3efa24cc5688021c2c7938ea14b8da26397e37e52badc7deab3d0afb249193c5a26466fc729cbd21debe08efc031a494e9a2de15656"}]}}, {{0x9, 0x5, 0x2, 0xc, 0x10, 0x9, 0xe, 0x5, [@generic={0x80, 0x10, "b2672c099ddf6376a0dcd966a45e3d6b5ca4a58856622d69038182d02a4dbd9eb760758861c01e423c98ee4f31863b702201021cc0b9be231f8a9821b36675e7f3466442cc2bfab282ebf62be21fedd25ea7f613a81785c5fb8f681235adde2f9c73ef5937097c27cd6294e88f4f1b8a7de01bd285cd97c2eae7ee943649"}, @generic={0x72, 0x30, "e6bc121a63ef8cc2bb22ad394c0fa8c698504a2d30bb158b4d9e585be1072a77775c0a7d037e323ee87fae2432ae18431832469d718f14b07c7d845e264fabba0000611244dda2d549d5476494597d16a18a05c1b84815d63d46ce6071f14d8091b4671755118e5dedc46dd4efc541b8"}]}}]}}]}}]}}, &(0x7f0000001280)={0xa, &(0x7f0000001080)={0xa, 0x6, 0x310, 0x8, 0xf, 0x5d, 0x50, 0x9}, 0x39, &(0x7f00000010c0)={0x5, 0xf, 0x39, 0x2, [@generic={0x2a, 0x10, 0x2, "f9c9c4e77ab24854e44eb2112931d1eceafa6c10d635b53edec6aed5bfbc64f2bef1d17521af2f"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xc, 0x4, 0x6, 0xa}]}, 0x2, [{0x78, &(0x7f0000001100)=@string={0x78, 0x3, "9c6d979d1f25083f690a9915ba3140fccddb9fd521e976786e0ebc082bdbcecc9310f4cfccfaa94d9e9f9bf650e3d280fbe2c707d77ba292de12e26fb92637c19103742e1aae76fb62e1028cc92e70f8d1f9ac32178530251e6d6e6756b9a2d7f6de0e8635677e668c46924cd30b882bac614d3bd235"}}, {0xd0, &(0x7f0000001180)=@string={0xd0, 0x3, "e7ca29612dff5230fb6ac79048fc3fc6762f01126297a2a8a51ed6257e9e9a8dfac10e1b5446441f77458fa5ab431b9f9d825539ac8adee74a514b7bea916e30263628a44b3e98da7c2c13834f27b85bee8fea8fd6302a555611b65e8b176c47ca2f588fe7b2b05ca831eba910f0781d7dfd70e48fc7006405592f8ab3b2d6ccb9298f3b62d433ba8da4e0aede9b5598e4a14e5777ac946fcc3e9333cd1fc52e06297dcd66eedafc7813c47b217ff496dc1e9d136b1de71d8ed4eb9f8077e5618982e4e4191c0e6a5774b6e3fc9e"}}]}) syz_usb_control_io$uac2(r0, &(0x7f00000013c0)={0x14, &(0x7f00000012c0)={0x0, 0x21, 0x8f, {0x8f, 0xc, "2b30bc8544fc466f5208141fb0a79d7a77ec6ad5ece0bf768d33b8e37fc17ebe8d30be632038a72ae5ac6121e09a6603aafa0f07040249277760ff210e5e9dcacb37e74a2738d5e8770690c773ff304ef5111620a9b133088d4b3554e7643304dcc48c2e2b315b2f06af82fe351a3cde3341f361ceb068e5b62ce513bffb5398c1d3102bdcada9fe0fdd2eaaf6"}}, &(0x7f0000001380)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2c09}}}, &(0x7f0000001600)={0x44, &(0x7f0000001400)={0x40, 0x3, 0x27, "683bef2cedcb57412f188927bd41235f1ce1ee54215b9ef8a207562802c3e907a90dd31f4361a6"}, &(0x7f0000001440)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001480)={0x0, 0x8, 0x1, 0xf8}, &(0x7f00000014c0)={0x20, 0x81, 0x2, "f4d4"}, &(0x7f0000001500)={0x20, 0x82, 0x2, 'p|'}, &(0x7f0000001540)={0x20, 0x83, 0x3, "3f4afd"}, &(0x7f0000001580)={0x20, 0x84, 0x2, "1184"}, &(0x7f00000015c0)={0x20, 0x85, 0x3, "a3ecb5"}}) unshare(0x24040400) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001680)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000001700)={'sit0\x00', &(0x7f00000016c0)={@multicast2, 0x1, 0x0, 0x10, 0x0, [{@private}]}}) getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000001740), &(0x7f0000001780)=0x2) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000017c0)={'ah\x00'}, &(0x7f0000001800)=0x1e) getsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000001840)=0x401, &(0x7f0000001880)=0x2) write$P9_ROPEN(r1, &(0x7f00000018c0)={0x18, 0x71, 0x1, {{0x4, 0x2, 0x3}, 0x378}}, 0x18) r2 = syz_ublk_setup_io_uring(0x3ade, &(0x7f0000001900)={0x0, 0xa920, 0x80, 0x0, 0xb0}, &(0x7f0000001980)=0x0, &(0x7f00000019c0), &(0x7f0000001a00)) r4 = syz_ublk_setup_io_uring(0x49e3, &(0x7f0000001a40)={0x0, 0x6317, 0x1000, 0x2, 0x1cd, 0x0, r1}, &(0x7f0000001ac0), &(0x7f0000001b00), &(0x7f0000001b40)=0x0) r6 = socket$igmp6(0xa, 0x3, 0x2) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, r5, &(0x7f0000001c00)=@IORING_OP_CONNECT={0x10, 0x41, 0x0, r6, 0x80, &(0x7f0000001b80)=@sco={0x1f, @none}, 0x0, 0x0, 0x1, {0x0, r7}}) socket$kcm(0x29, 0x5, 0x0) unshare(0x2000080) sendto$inet(r1, &(0x7f0000001c80)="09ef120a8bb4927721b63357889d7f8831f8afd9167fea9c99c22dadf18572e3e99f23a22c5ad147460dd440454bb66cd1ba67b2b1236bd11319aa558968848930ae3c688a0ce38b2021b699b7161c7547a63275393238f60f12f04c01037755ccf9c6fcca3b0e1eb963a723a94958c44f9fcc8caec88d01b00d0daa9867cd56adae76ac7adfdf89d8b2df315f5065da4dec7b14bfd8baae57eca1cc12fbb950157ac98ef50aa58b89a654eafa9fed4609ca4aa1a353e0aba7c07a57f96cc7da41e1f75cdede76cacd435986ac438976e2a5fa123296837846b442d8fd1af42021a145bdbaed13ab9b3c01f0c4cf494a66ee7328ab9b25f3a2", 0xf9, 0x40080d4, &(0x7f0000001d80)={0x2, 0x4e24, @local}, 0x10) r8 = syz_usb_connect$uac2(0x4, 0xd2, &(0x7f0000001dc0)={{0x12, 0x1, 0x50, 0x0, 0x0, 0x0, 0x20, 0x17cc, 0x4712, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xc0, 0x3, 0x1, 0x0, 0xe0, 0x2, {0x8, 0xb, 0x2, 0x1, 0x1, 0x4, 0x20, 0x7}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x4, 0xff, 0x4c, 0x10}, [@feature_unit={0x11, 0x24, 0x6, 0x8, 0x4, [0xb, 0xb, 0x8, 0x7, 0x9, 0x1]}, @source_unit={0x8, 0x24, 0xa, 0x8, 0x1, 0x4, 0x6, 0x5}, @effect_unit={0x13, 0x24, 0x7, 0x2, 0x0, 0x2, [0x3, 0x2, 0x3, 0x0, 0x2, 0x1]}, @extension_unit={0xb, 0x24, 0x9, 0x1, 0xfef9, 0x2, "60616105"}, @output_terminal={0xc, 0x24, 0x3, 0x2, 0x301, 0x2, 0x3, 0x51, 0x8, 0x8}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x1, 0xb6, 0x7, "91"}]}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x80, 0x5, 0x4, {0x8, 0x25, 0x1, 0x104, 0x14, 0xff, 0xffff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x7, 0x3, 0x8, 0x4, "549aa5"}]}, {{0x9, 0x5, 0x82, 0x9, 0x3bf, 0x8, 0x1, 0x4, {0x8, 0x25, 0x1, 0x0, 0x41376f0c92bcde89, 0xb, 0x2}}}}}}}}]}}, &(0x7f0000001fc0)={0xa, &(0x7f0000001ec0)={0xa, 0x6, 0x310, 0x2, 0x38, 0x6, 0x40, 0x3}, 0x19, &(0x7f0000001f00)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x9, "83024a89682ae360e4fc7153d60c0bf1"}]}, 0x2, [{0x4, &(0x7f0000001f40)=@lang_id={0x4, 0x3, 0x1023}}, {0x1d, &(0x7f0000001f80)=@string={0x1d, 0x3, "71af002f7ff30c5a715578e8c5ff4a6825b6ab9d90b6dcb54fb1cb"}}]}) syz_usb_disconnect(r8) unshare(0x80) syz_usb_control_io$uac1(r0, &(0x7f0000002140)={0x14, &(0x7f0000002000)={0x20, 0x5, 0xd0, {0xd0, 0x0, "c963704d4a885441d7cd8a481c5a1e6e5178f50aa482f7101141b5ccf354bcd1a5114c36090d86db737920b8b30b8c0338811ebdec72776c9215f6195e0ef803c80e8fd82f13d7d401a4a136e4d881a6f75cb3bffd52350a63603e70d2eda4acb6756676d014482575080e386fd6253bc87f16682ed7beb606fc8c294a7f2934a56a124f9ccac1f5fe0451f251986726845868c3d3be035e0464efa28419d35bb4f592320aef6e6573aa64432fba35185cbbb96cad3c92bacb2d7ab5000bc7e05e47400040600c199f1073121c9d"}}, &(0x7f0000002100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x447}}}, &(0x7f0000002400)={0x44, &(0x7f0000002180)={0x40, 0xd, 0x89, "bdc798f3300e5058336f6c761d8c11525bfc22d167c0237f7b1457b12eb68fff2428a05dbd68194d1d1fc476a8eff8ba1b7cb782798d4f3dce9709b1d441ab342288a66656bf7dc35e15c0c081c20f5394e10d268ae5bd295a0bfb0cd3df2d7711629a19e2f28cad049fd5eecfb3337a376ec6fa614fe831da1303d998e49f7c1d71b063b3a04034c4"}, &(0x7f0000002240)={0x0, 0xa, 0x1, 0xc}, &(0x7f0000002280)={0x0, 0x8, 0x1, 0xd}, &(0x7f00000022c0)={0x20, 0x81, 0x3, "48a262"}, &(0x7f0000002300)={0x20, 0x82, 0x1, "16"}, &(0x7f0000002340)={0x20, 0x83, 0x2, "84b7"}, &(0x7f0000002380)={0x20, 0x84, 0x1, "8b"}, &(0x7f00000023c0)={0x20, 0x85, 0x3, "03bf67"}}) r9 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000002500)={'syztnl2\x00', &(0x7f0000002480)={'syztnl0\x00', 0x0, 0x7800, 0x20, 0x4, 0x2be, {{0xf, 0x4, 0x3, 0x3, 0x3c, 0x65, 0x0, 0x6, 0x4, 0x0, @private=0xa010101, @broadcast, {[@generic={0x86, 0xf, "5de6f8240fda9e080acb0291d4"}, @end, @lsrr={0x83, 0x17, 0x79, [@dev={0xac, 0x14, 0x14, 0x18}, @dev={0xac, 0x14, 0x14, 0x21}, @multicast1, @multicast2, @private=0xa010101]}]}}}}}) ioctl$sock_inet6_SIOCADDRT(r9, 0x890b, &(0x7f0000002540)={@loopback, @mcast2, @private0, 0x6, 0x9, 0x7fff, 0x0, 0x8001, 0x6000028, r10}) readv(r4, &(0x7f0000002600)=[{&(0x7f00000025c0)=""/4, 0x4}], 0x1) syz_usb_connect$uac3(0x0, 0xfd, &(0x7f0000002640)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0xdf, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xeb, 0x3, 0x1, 0x3, 0x40, 0x9, {0x8, 0xb, 0x0, 0x1, 0x1, 0x25, 0x30, 0x6c}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x5, 0x24, 0xffff}, [@power_domain={0xd, 0x24, 0x10, 0x4, 0x17, 0x1, 0x81, "b0c06b5c"}, @feature_unit={0xd, 0x24, 0x7, 0x1, 0x3, [0x8, 0xd]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_continuous={0xb, 0x24, 0x2, 0x1, 0x1, 0x9, 0x2, 0x4, "de628e"}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0x6, 0x1, 0x0, 0x3, "f0f11d", '$1P'}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0xb}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x3}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x3f7, 0x8, 0x6, 0x9}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0x8, 0x5, 0x3, {0xa, 0x25, 0x25, 0x2, 0x0, 0xfff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x5, 0x4, 0x4, 0x1, "fe7766c6"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x1, 0x7b}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x2, 0xb, 0x81, 0x5c}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0xbd, 0x1, 0x0, 0xfc, "338485f0"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x1}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x80, 0x5, 0xf3, {0xa, 0x25, 0x25, 0xf37, 0xfb, 0x3d4}}}}}}}}]}}, &(0x7f0000002ac0)={0xa, &(0x7f0000002740)={0xa, 0x6, 0x201, 0x6, 0x6, 0x2, 0x8, 0xe}, 0x10e, &(0x7f0000002780)={0x5, 0xf, 0x10e, 0x4, [@generic={0xde, 0x10, 0x4, "ccfac1d07c3129d12dc61b2388a69cb3fa01e1d5e2c42e38ac8e8dec0131067443737d6f57836af25693148fe014e1dadc227545e9fe44054e0e61d6adf095a198094c6a4ca3108cc37df010f10f309e4faf8c352a7b46bc22e9c1cb1d319f58a837349c753125a90fedbf386e450632855de82dc7c7c5f8466d7c1dab1097f3cc0873fc71cbea7750e7ee08b3b17bbbe6082a542645cb84e1e1d7d6b18e2e30e9fe3ae7a00e69532e1470de7420bd7a241c188b13c52db6cd058606a23c2e49e05e9842f383b98febb77d4d977f43649e9fe55c10d02f31603054"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "43766cf046b06d127bd1b680ecff1e7b"}, @ssp_cap={0x14, 0x10, 0xa, 0x6, 0x2, 0x7, 0xf000, 0x0, [0x30, 0xc00f]}, @ptm_cap={0x3}]}, 0x5, [{0x4, &(0x7f00000028c0)=@lang_id={0x4, 0x3, 0x447}}, {0x4, &(0x7f0000002900)=@lang_id={0x4, 0x3, 0x1c06}}, {0xd2, &(0x7f0000002940)=@string={0xd2, 0x3, "7eb7bfcb88249316627aed8f8182f0504a5bc525196c36bf0b4a82bf4535208292dc630cb58feb3b3183bb6c4769c24ad2c8498c2822145a226f71be4746c28ad3eac9ee797f03b387206575826a8470ad0f948de160d6dba1b30389db22d9d98bb1f112e7453b2e355d20e56a171b37f49848e366f40bf12eec32539212ab8e1529ebe2271c3cd00f11ee69d9ddee9fe11c1f6df97786b9d4fe0fbd9e83273d29d7c07918ccfa95b371850f1871f3112f4e1f43b408eb80e189a8024996f3c2347182302186e0a6e808b412dbf8e79e"}}, {0x4, &(0x7f0000002a40)=@lang_id={0x4, 0x3, 0x40a}}, {0x4, &(0x7f0000002a80)=@lang_id={0x4, 0x3, 0x809}}]}) io_uring_enter(r2, 0x7334, 0xd9e7, 0x80, &(0x7f0000002b40)={[0x79]}, 0x8) syz_usb_ep_read(r0, 0x8, 0x72, &(0x7f0000002b80)=""/114) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000002c40), r1) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x1011000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c80)={0x74, r11, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @dev={0xac, 0x14, 0x14, 0x34}}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x6}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0xfffffffffffffe00}, @L2TP_ATTR_MTU={0x6, 0x1c, 0x6}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xbb}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0xc}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x401}, @L2TP_ATTR_L2SPEC_TYPE={0x5}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000000}, 0x10000000) 2.141660565s ago: executing program 4 (id=943): r0 = socket$netlink(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) io_setup(0x7, &(0x7f0000000140)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) unshare(0x40200) r1 = openat$rtc(0xffffff9c, &(0x7f0000001ec0), 0x0, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000280)={0x7, 0xb, 0x2, 0x15, 0x10000c, 0x8, 0x5, 0xac}) r2 = semget(0x1, 0x4, 0x39c) semop(r2, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r2, &(0x7f0000000000)=[{0x3, 0xbbdd, 0x1000}, {0x2, 0x100, 0x800}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x7fff]) unshare(0x40400) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb, 0x2ffffffff}, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x90, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x68, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x30, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x10, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9, 0x1, "261fbabd4e"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CMP_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x104}}, 0x0) 1.738908503s ago: executing program 5 (id=946): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x14, 0x15, 0x1, 0x70bd29, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x204501, 0x20) lseek(r1, 0x8000, 0x1) 1.737030425s ago: executing program 5 (id=947): r0 = syz_ublk_setup_io_uring(0x3b9f, &(0x7f0000000980)={0x0, 0x7373, 0x200, 0x2, 0x314}, &(0x7f0000000a00), &(0x7f0000000a40), &(0x7f0000000a80)) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = io_uring_setup(0x800066a5, &(0x7f0000000100)={0x0, 0xbfb7, 0x800, 0x2, 0x9f}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x30, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r5, 0xc040aed5, &(0x7f00000000c0)={0xa000, 0x200000}) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) r6 = eventfd2(0x0, 0x0) io_uring_register$IORING_REGISTER_EVENTFD(r2, 0x4, &(0x7f0000000000)=r6, 0x1) io_uring_register$IORING_REGISTER_BUFFERS2(r2, 0xf, &(0x7f0000001580)={0x3, 0x0, 0x0, &(0x7f00000014c0)=[{0x0}, {0x0}, {&(0x7f0000000280)=""/4094, 0xffe}], &(0x7f0000001540)}, 0x20) read$eventfd(r6, &(0x7f0000000040), 0x8) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r2, 0x10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001a80)=[{0x0}, {0x0}, {0x0}], 0x0, 0x3}, 0x20) fcntl$setflags(r0, 0x2, 0x0) r7 = socket$netlink(0x10, 0x3, 0xb) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140), 0x440, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="250b0000000000e9000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20008084) ioctl$sock_SIOCBRDELBR(r7, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x74, &(0x7f0000000040)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa88a80c0081001e000800451c005e0863000000119078ffffffffac1e01014e034e21004a90780242b188f7c12b981fbd4a028a42045562bd6f34f58e555cf03a86456fe6f4cadfaaa81e23090fd1a6351f954eb5fcd0f394a56d35810df82da70ba96c99e1deda6f"], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_REG(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00@\x00\x00', @ANYRES16=r9, @ANYBLOB="010025bd7000fbdbdf251f0000000800010051000000"], 0x1c}, 0x1, 0x0, 0x0, 0x8084}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) 1.140728417s ago: executing program 4 (id=948): openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x169c81, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc5}) fsopen(&(0x7f0000000ac0)='sysfs\x00', 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'bond0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00c6a1199d5cb23859b0e4833e32ccee48959b350df86182d49fed54a843d8ffa357dee90833a62cc719601be5c9bfbcf2d50bf54f2b96", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x884}, 0x2014) dup(r1) socket$inet_udp(0x2, 0x2, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000001140), 0x802, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000340), 0x60a20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x203, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$kcm(0x2, 0x3, 0x2) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x35}}, {0x2, 0x2, @loopback}, {0x2, 0x4e23, @multicast1}, 0x40, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x1, 0x5, 0x4}) 991.819794ms ago: executing program 4 (id=949): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x48) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r3, &(0x7f00000001c0)) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newtfilter={0x2c, 0x2c, 0x4, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xffe0, 0x7}, {0x6, 0xffff}, {0xffff, 0xfff3}}, [@TCA_CHAIN={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4c840) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x41100, 0x40}, 0x94) sendto(r1, &(0x7f0000000000)="68000000300005050100000000000000000000005400018050000180090001006761746500000000400002801800020000000000000000000000000000000000000000001800058014000180080001000000000008000300640000000c000700e803000000000000", 0x68, 0x0, 0x0, 0x0) 911.568781ms ago: executing program 4 (id=950): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x1, 0xffffffff, 0x4, 0x3, 0xfffffffffffffffa}) ioctl$int_in(r0, 0x40000000af01, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r3}) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xe2002, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r5, 0x4068aea3, &(0x7f0000000000)={0xc0, 0x0, 0x10000}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r7 = mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r6, 0x0) syz_memcpy_off$KVM_EXIT_MMIO(r7, 0x40000, &(0x7f0000000100)="020000000000000000000000000000000200", 0x0, 0x30) ioctl$KVM_RESET_DIRTY_RINGS(r5, 0xaec7) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x804) r8 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000001c0)={0xaa, 0x101550ba5972ae87}) r9 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r9, &(0x7f0000001580)={0x2020}, 0x2020) write(r9, &(0x7f0000000200)="51dcf5feb76c15739d8470c7b233ffc7b8dd010400001b32afc8f16ad3ff4a929c16064570f696e5c835e73452c88d3bebd5f86fde4a5fd01d6ea79bfcfde2990cd55d21b34c9cd705da7544b7ad436d4a6a0cceb7cdf608236002b7b5a90037f71f9e0bcfb11ad8ae8baec9e64a9ff32f45812a3f06cba34682a6cb0a8ae144241e1ca7e7a1cd03000000606b366643e321db9ed55b38d505ef58d5312d636b47bc04527ee696a6b672e2b4dbedf1c298d3d57f3c775413529a1582b91e6e0706f05514abe8ce6828e35ffcf5adabb83d674422b3cc88a10293fdd478f311939b378d31ef43344c86b3308787c9e6070700", 0xf2) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x9, 0x4, 0x1}, 0x8) 910.906163ms ago: executing program 2 (id=951): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbff, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r5}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4c004) r6 = socket$nl_route(0x10, 0x3, 0x0) setresuid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r8 = socket(0x1d, 0x2, 0x6) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000040)=[{&(0x7f00000001c0)="580000001400192340834b80044d8c561f067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd000000100001000b0c10000000224e00000000", 0x58}], 0x1) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, 0x0, 0x8000000000000003, {}, 0xfd}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18104, 0x20001}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xac, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0xfff, 0x19}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x24, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_PLCPFAIL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7f11387a3da03b5e6cdf846272f87cea9fb62bcf8fd7ae58"}], @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0xac}, 0x1, 0x0, 0x0, 0x400c8d0}, 0x8010) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0xa1ff, &(0x7f0000000400)={&(0x7f0000000280)={0x34, r1, 0x1, 0x0, 0x25dfdbff, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x0) 750.131433ms ago: executing program 5 (id=952): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) pwrite64(r0, &(0x7f0000000100)="0000010042", 0x5, 0x1be) pwrite64(r0, &(0x7f0000000100)="55aa", 0x2, 0x1fe) pwrite64(r0, &(0x7f0000000100)='PRIVHEAD', 0x8, 0xc00) pwrite64(r0, &(0x7f0000000100)="0002000b", 0x4, 0xc0c) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\a', 0x7, 0xd23) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00\b', 0x7, 0xd2b) pwrite64(r0, &(0x7f0000000100), 0x0, 0x1e8000) pwrite64(r0, 0x0, 0x0, 0x1e800c) pwrite64(r0, 0x0, 0x0, 0x1e8123) pwrite64(r0, &(0x7f0000000100)='\x00\x00\x00\x00\x00\x00', 0x6, 0x1e812b) r1 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}) 621.637909ms ago: executing program 4 (id=953): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x6, 0x8, 0x8}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000480850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r4, 0x5b15, 0x0) (async, rerun: 64) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000010429bd70000000000000000000", @ANYRES64=r4, @ANYBLOB="2b030000000000002000128008000100677470001400028008000100", @ANYRES32=r3, @ANYBLOB="080002"], 0x40}}, 0x3b72b2911e135290) (async, rerun: 64) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async, rerun: 32) r7 = mmap$IORING_OFF_CQ_RING(0x0, 0x7, 0x2000000, 0x810, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(0x0, r7) r8 = getpid() process_vm_readv(r8, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) (async) setsockopt$inet_udp_encap(r3, 0x11, 0x64, &(0x7f0000000040)=0x3, 0x4) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x4, &(0x7f0000000040)) close_range(r3, 0xffffffffffffffff, 0x0) 560.488081ms ago: executing program 5 (id=954): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ff00ada3236559e7e26add0d00"/28], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) (async) connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) (async) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x0, 0x32}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x39}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) (async) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@length={{0x28}, {0x0, 0xffff}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0x9}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x280580, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r4, 0x80049367, &(0x7f0000000080)) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000900)="2e552f5d9fd8b0d9627c4980f0d1ea2bf8f617a682acd2841acd878bd68344d4f50f83b0c51fa9135a01c95d4a128ec8b12d01010000a44c4505ba9a36f2cf4cc5e8308126d0a2c3b9d24e57c5011376b6263e2a1258eec1eb72bedea3eb5ccf73eb081b4c6d5faa998d7b795c057dd757d14200a8a6dbb3e59df96b77d16753ac4b32b94ffe6b5ee304d0428eb18056657c8c5c71c632be66cb26fe5c9abec7591ef3cb9b2a1133e9fa9bf0de6c378bed7b51cb8a07c343aabfda193349b91a5dc81a658cb61fbbfa51ef95abe03381ee2cb8d41da19ea8b96ec68ce17cf57da60f1d04acaf34a643db8d2d5ad2991f306b42744347a0c9e1fe2136b2b3da49032d3a57df1e236222cf6d6fe396aff8e5fe7fff5baa88789b783c12045e2c904a5d118369fdddc3e6e2f24bdbb26df92ac9bf4751c897a87c0223888e36ad14ba6e4d879ff464cac6f13a3a543e067d922e99c50f2fc6391e9c1c82b7195005eafdbb3374200c134cbd0f11739e8c19dd07140686242fea48caf3a1a93b86f35d77f258a2c9ce24cf321068551a584262d7a74a344e428c77c8af755e72904b0ca8a0bb359fb0", 0xffffff5d, 0x12, 0x0, 0x0) (async) recvfrom$inet(r3, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x1500) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000020000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000004800)={0x2020}, 0x2020) (async) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000200)={r5}, 0xc) 560.25708ms ago: executing program 2 (id=955): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000600), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x9c9, 0x4, 0x0, 'queue1\x00', 0x200000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x0, 0x5, 0x0, 'queue0\x00', 0x200}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CAP_X86_NOTIFY_VMEXIT(r2, 0x4068aea3, &(0x7f0000000080)={0xdb, 0x0, 0x100000000}) 498.533677ms ago: executing program 5 (id=956): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_vlan\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x24002805}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000500)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x400, 0xf, 0x80, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x4, [0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1]}}) (async, rerun: 64) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) (rerun: 64) r3 = getpgrp(0x0) r4 = syz_open_procfs(r3, &(0x7f0000000100)='children\x00') (async, rerun: 32) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0xfc}, @ETHTOOL_A_LINKMODES_DUPLEX={0x5, 0x6, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 497.504577ms ago: executing program 4 (id=957): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x40241, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000000240)) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r5 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="081a0800050006f9000014000400450a0018000600000b89907864010102ffffffff3297e3badff7f3e2edf81ea50f8f7dd0dba95c7571ddb432e38294b9d9d8ba218147c4fe02e070b47f98af3d6fcc32f9d239dfc5ba3c9d906b11d04a0195663e02346a5e55e6c5496c390f2d3a319dcdc888f5fb983beee39fe725ae6df1db1bf5eb266f13388d0d53b60a624456e4343b93ce97cf95e96c5a95966f059f81eb48701fb92cd618a65fc2855db5250bc8bc187f40bf0f2936d026ee78afd31ba62a963aa06432132a2b460c1d92b5e4c5"], 0x26) r6 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r6, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r7, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r7, 0xc0045002, &(0x7f0000000040)=0xdfe5) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000500)={0xa00, 0x18, 0xfa00, {0x100000000000000, 0x0}}, 0xfc36) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r9 = syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2) r10 = dup(r9) read(r10, &(0x7f0000000040), 0x0) ioctl$SOUND_MIXER_INFO(r10, 0x805c4d65, &(0x7f00000003c0)) ioctl$VIDIOC_S_CTRL(r10, 0xc008561c, &(0x7f0000000000)={0xf0f046}) read$FUSE(r10, &(0x7f0000008180)={0x2020}, 0xfffffdfc) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r8, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) 357.568749ms ago: executing program 5 (id=958): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)='[', 0x1}], 0x1, 0x0, 0x0, 0x30008040}, 0x40080d1) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000000000008500000087000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee688b5c6", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) accept(r1, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) r4 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x100) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$HIDIOCGUSAGE(r6, 0xc0145b0e, &(0x7f0000000040)={0x100004, 0x0, 0xff, 0x9, 0x3, 0xfffffffe}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000100)={0x2c, r8, 0x1, 0x70bd2d, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000019}, 0x0) 357.393079ms ago: executing program 2 (id=959): openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x800c2, 0x0) 280.08327ms ago: executing program 2 (id=960): bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x7, 0x4, 0x700, 0x700, 0x2c}, 0x48) (async) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fff6ffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000080)={0x34, 0x0, 0x1, 0x70bd25, 0xfffffffc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc2}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x70}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x25e2906596869c9d}, 0x0) (async) r4 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r4, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) (async, rerun: 32) read$eventfd(r0, &(0x7f0000000100), 0xfffffd79) (rerun: 32) 169.734137ms ago: executing program 2 (id=961): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000080)={r2, 0x0, 0x0}, 0x20) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x0, 0x6, 0x1, 0x3, 0xd, 0xe8, 0x5, 0x0, 0x6d, 0x3, 0x9, 0x6, 0x8, 0x1, 0x51}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x11}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r7, r6}, 0xc) r8 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x8, 0x1) ioctl$KVM_GET_VCPU_EVENTS(r8, 0x4048aecb, &(0x7f0000000300)) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="780000001000830404000000fedbdf2500007400", @ANYRES32], 0x78}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9}, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x4, 0x0, &(0x7f0000000400)=[@exit_looper], 0x0, 0x0, 0x0}) 0s ago: executing program 2 (id=962): ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x40000075, 0x0, 0x1001}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_GET_MSRS_cpu(r2, 0xc008ae88, &(0x7f0000000340)={0x10000000000000e6, 0x0, [{0x40000091, 0x0, 0x3}]}) ioctl$KVM_SET_DEVICE_ATTR_vcpu(r2, 0x4018aee1, &(0x7f0000000040)=@attr_pmu_irq={0x0, 0x1, 0x1, &(0x7f0000000000)=0x10001}) 0s ago: executing program 2 (id=963): socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_SET_FRONTEND(r0, 0x40246f4c, &(0x7f0000000080)={0x30a32c0, 0x1, @qam={0x2, 0x0, 0xa}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) setns(0xc9, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x48, r7, 0x5, 0xfffffffc, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e, 0x94, {0x881, 0x0, 0x0, 0x0, {0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, 0x400, 0xfa13, 0x8}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200000c1}, 0x0) ioctl$I2C_SMBUS(r5, 0x720, &(0x7f0000000180)={0x0, 0x0, 0x8, &(0x7f0000000140)={0x1, "96e67ad2d329458afe83c910c40800000000000000000000000000f000"}}) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r4, &(0x7f0000000480)=ANY=[@ANYBLOB="0a000010ffffffffffff3865333ff81e88a854008100340086dd6917007e00303cff000000000000000000000000000000acfa00ff020000000000000000000000000001290081c8600000002b040402064804"], 0x72) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2, 0x4}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x4c, 0x2c, 0xd27, 0x70bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r11, {0x4, 0xa}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x20, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) close(0x4) kernel console output (not intermixed with test programs): T5868] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 6 [ 402.534678][ T5868] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 402.820785][ T7591] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57616 sclass=netlink_route_socket pid=7591 comm=syz.3.475 [ 402.829999][ T1159] IPVS: starting estimator thread 0... [ 402.904054][ T7601] loop0: detected capacity change from 0 to 3904 [ 402.926527][ T7592] IPVS: using max 45 ests per chain, 108000 per kthread [ 402.948459][ T7601] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 402.952261][ T7601] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 402.955245][ T7601] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 402.958288][ T7601] loop0: [ 403.349292][ T5138] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 403.352186][ T5138] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 403.354420][ T5138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 403.356853][ T5138] loop0: [ 403.456147][ T5876] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 403.576116][ T5793] Bluetooth: hci1: command tx timeout [ 403.606658][ T5876] usb 7-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 403.610682][ T5876] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 403.613315][ T5876] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 403.616921][ T5876] usb 7-1: config 0 has no interfaces? [ 403.618647][ T5876] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 403.623435][ T5876] usb 7-1: config 0 descriptor?? [ 403.626274][ T1039] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 403.777141][ T1039] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 403.782128][ T1039] usb 8-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 403.786601][ T1039] usb 8-1: config 0 interface 0 has no altsetting 0 [ 403.791428][ T1039] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 403.794715][ T1039] usb 8-1: Product: syz [ 403.796589][ T1039] usb 8-1: Manufacturer: syz [ 403.798659][ T1039] usb 8-1: SerialNumber: syz [ 403.808289][ T1039] usb 8-1: config 0 descriptor?? [ 403.817921][ T1039] usb 8-1: selecting invalid altsetting 0 [ 403.837813][ T5876] usb 7-1: USB disconnect, device number 7 [ 403.995701][ T42] kauditd_printk_skb: 28 callbacks suppressed [ 403.995732][ T42] audit: type=1400 audit(1787334598.866:700): avc: denied { write } for pid=7640 comm="syz.0.492" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 404.075186][ T1039] usb 8-1: USB disconnect, device number 9 [ 404.075569][ C0] usb 8-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 404.081439][ C0] dummy_hcd dummy_hcd.3: timer fired with no URBs pending? [ 404.266202][ T5876] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 404.398351][ T7646] __nla_validate_parse: 14 callbacks suppressed [ 404.398376][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.2.494'. [ 404.428767][ T7651] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 404.432251][ T42] audit: type=1400 audit(1787334599.306:701): avc: denied { relabelfrom } for pid=7648 comm="syz.2.495" name="" dev="pipefs" ino=19217 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 404.433185][ T7651] VFS: Can't find a romfs filesystem on dev nullb0. [ 404.433185][ T7651] [ 404.448744][ T5876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 404.453719][ T5876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 404.457725][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 404.461939][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.465616][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 404.474129][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 404.477802][ T5876] usb 5-1: Product: syz [ 404.479530][ T5876] usb 5-1: Manufacturer: syz [ 404.480334][ T42] audit: type=1400 audit(1787334599.356:702): avc: denied { read } for pid=7652 comm="syz.2.496" path="socket:[20025]" dev="sockfs" ino=20025 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 404.485472][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 404.491318][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 404.497829][ T5876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 404.499766][ T5876] cdc_wdm 5-1:1.0: Unknown control protocol [ 404.629074][ T42] audit: type=1400 audit(1787334599.506:703): avc: denied { read append } for pid=7655 comm="syz.3.497" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 404.638277][ T42] audit: type=1400 audit(1787334599.506:704): avc: denied { ioctl open } for pid=7655 comm="syz.3.497" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 404.655523][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'. [ 404.658642][ T7663] netlink: 28 bytes leftover after parsing attributes in process `syz.3.499'. [ 404.661725][ T7663] netlink: 'syz.3.499': attribute type 4 has an invalid length. [ 404.664686][ T7662] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 404.666111][ T7663] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 404.689650][ T42] audit: type=1400 audit(1787334599.566:705): avc: denied { getopt } for pid=7642 comm="syz.0.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 404.700411][ T5876] usb 5-1: USB disconnect, device number 10 [ 404.831526][ T7673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7673 comm=syz.2.501 [ 404.839199][ T7673] Cannot find add_set index 0 as target [ 404.936217][ T5793] Bluetooth: hci3: command tx timeout [ 404.974268][ T42] audit: type=1400 audit(1787334599.846:706): avc: denied { create } for pid=7679 comm="syz.3.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 405.007837][ T7682] sg_read: process 412 (syz.3.505) changed security contexts after opening file descriptor, this is not allowed. [ 405.026114][ T5876] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 405.051215][ T7685] capability: warning: `syz.3.506' uses 32-bit capabilities (legacy support in use) [ 405.080994][ T7689] fuseblk: Bad value for 'fd' [ 405.083944][ T7689] netlink: 'syz.3.507': attribute type 62 has an invalid length. [ 405.129420][ T5889] usb 6-1: USB disconnect, device number 6 [ 405.153434][ T5889] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 405.163242][ T5889] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 405.166561][ T7696] netlink: 16 bytes leftover after parsing attributes in process `syz.2.509'. [ 405.167062][ T5889] keyspan 6-1:1.0: device disconnected [ 405.171919][ T7696] netlink: 28 bytes leftover after parsing attributes in process `syz.2.509'. [ 405.198015][ T5876] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 405.207666][ T5876] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 405.210529][ T5876] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 405.213686][ T5876] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 405.226059][ T5876] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.231210][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 405.233860][ T5876] usb 5-1: Product: syz [ 405.235273][ T5876] usb 5-1: Manufacturer: syz [ 405.241210][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 405.242907][ T5876] cdc_wdm 5-1:1.0: skipping garbage [ 405.245481][ T5876] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 405.248369][ T5876] cdc_wdm 5-1:1.0: Unknown control protocol [ 405.333148][ T7713] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 405.335448][ T7713] @0: renamed from bond_slave_1 (while UP) [ 405.366935][ T7715] netlink: 'syz.3.515': attribute type 1 has an invalid length. [ 405.373314][ T42] audit: type=1400 audit(1787334600.246:707): avc: denied { getopt } for pid=7712 comm="syz.1.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 405.382113][ T7715] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.388343][ T7711] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 405.398887][ T7715] bond2: (slave gretap1): Enslaving as a backup interface with an up link [ 405.403902][ T42] audit: type=1400 audit(1787334600.276:708): avc: denied { map } for pid=7714 comm="syz.3.515" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 405.417230][ C2] Illegal XDP return value 16128 on prog (id 43) dev lo, expect packet loss! [ 405.481597][ T42] audit: type=1400 audit(1787334600.356:709): avc: denied { write } for pid=7719 comm="syz.3.517" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 405.487368][ T5833] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 405.508547][ T7723] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 405.513284][ T7723] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 405.604585][ T7732] xt_hashlimit: size too large, truncated to 1048576 [ 405.606318][ T5833] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 405.607617][ T7732] xt_hashlimit: Unknown mode mask 78309E88, kernel too old? [ 405.650088][ T5754] usb 5-1: USB disconnect, device number 11 [ 405.656293][ T5793] Bluetooth: hci1: command tx timeout [ 405.722451][ T7746] binder: BINDER_SET_CONTEXT_MGR already set [ 405.726095][ T7746] binder: 7743:7746 ioctl 4018620d 200000002540 returned -16 [ 405.775572][ T7745] bond1: entered promiscuous mode [ 405.778728][ T7745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.801779][ T7745] 8021q: adding VLAN 0 to HW filter on device bond1 [ 405.804163][ T7745] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 405.810343][ T7745] bond1: (slave ipip0): Error -95 calling set_mac_address [ 405.904884][ T7755] netlink: 14 bytes leftover after parsing attributes in process `syz.1.527'. [ 405.907846][ T7753] NILFS (nbd3): device size too small [ 405.916399][ T7755] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.922666][ T7755] bond0 (unregistering): (slave c@0): Releasing backup interface [ 405.927035][ T7755] bond0 (unregistering): Released all slaves [ 405.998620][ T7759] netlink: 24 bytes leftover after parsing attributes in process `syz.0.530'. [ 406.585857][ T7815] netlink: 84 bytes leftover after parsing attributes in process `syz.0.544'. [ 406.694418][ T7831] loop4: detected capacity change from 0 to 2640 [ 406.699624][ T7831] buffer_io_error: 11 callbacks suppressed [ 406.699642][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.704431][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.707661][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.710492][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.713013][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.715626][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.719525][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.722128][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.725245][ T7831] ldm_validate_partition_table(): Disk read failed. [ 406.727825][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.730468][ T7831] Buffer I/O error on dev loop4, logical block 0, async page read [ 406.733239][ T7831] Dev loop4: unable to read RDB block 0 [ 406.735140][ T7831] loop4: unable to read partition table [ 406.739435][ T7831] loop_reread_partitions: partition scan of loop4 (3 ) failed (rc=-5) [ 406.811902][ T7837] Invalid logical block size (4) [ 406.936112][ T7829] syz.3.546 uses obsolete (PF_INET,SOCK_PACKET) [ 406.938817][ T7829] dlm: plock device version mismatch: kernel (1.2.0), user (1.1792.4194304) [ 407.146516][ T5892] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 407.165070][ T7852] program syz.2.554 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 407.282034][ T7856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 407.285573][ T7856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 407.288318][ T5892] usb 5-1: device descriptor read/64, error -71 [ 407.526167][ T5892] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 407.617300][ T7870] loop0: detected capacity change from 0 to 3904 [ 407.666780][ T5892] usb 5-1: device descriptor read/64, error -71 [ 407.727392][ T7870] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 407.730904][ T7870] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 407.733384][ T7870] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 407.735612][ T7870] loop0: [ 407.736105][ T5793] Bluetooth: hci1: command tx timeout [ 407.781994][ T5892] usb usb5-port1: attempt power cycle [ 407.820403][ T7875] netlink: 1319 bytes leftover after parsing attributes in process `syz.3.562'. [ 407.853103][ T5793] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 407.857537][ T5793] CPU: 3 UID: 0 PID: 5793 Comm: kworker/u34:5 Not tainted syzkaller #0 PREEMPT(full) [ 407.857554][ T5793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 407.857573][ T5793] Workqueue: hci1 hci_rx_work [ 407.857622][ T5793] Call Trace: [ 407.857628][ T5793] [ 407.857632][ T5793] dump_stack_lvl+0x100/0x190 [ 407.857652][ T5793] sysfs_warn_dup.cold+0x1c/0x28 [ 407.857671][ T5793] sysfs_create_dir_ns+0x24b/0x2b0 [ 407.857693][ T5793] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 407.857710][ T5793] ? find_held_lock+0x2b/0x80 [ 407.857724][ T5793] ? kobject_add_internal+0x25f/0x930 [ 407.857744][ T5793] ? kobject_add_internal+0x25f/0x930 [ 407.857759][ T5793] ? do_raw_spin_unlock+0x145/0x1e0 [ 407.857772][ T5793] kobject_add_internal+0x2c8/0x930 [ 407.857788][ T5793] kobject_add+0x16a/0x1e0 [ 407.857803][ T5793] ? __pfx_kobject_add+0x10/0x10 [ 407.857816][ T5793] ? class_to_subsys+0x10f/0x150 [ 407.857848][ T5793] ? kobject_put+0xb9/0x640 [ 407.857861][ T5793] ? _raw_spin_unlock+0x28/0x50 [ 407.857883][ T5793] device_add+0x294/0x1970 [ 407.857897][ T5793] ? __pfx_dev_set_name+0x10/0x10 [ 407.857914][ T5793] ? __pfx_device_add+0x10/0x10 [ 407.857928][ T5793] ? mgmt_send_event_skb+0x2fb/0x460 [ 407.857952][ T5793] hci_conn_add_sysfs+0x1a3/0x260 [ 407.857966][ T5793] le_conn_complete_evt+0x121b/0x2120 [ 407.857989][ T5793] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 407.858006][ T5793] ? hci_event_packet+0x186/0xcd0 [ 407.858025][ T5793] hci_le_conn_complete_evt+0x23c/0x3a0 [ 407.858043][ T5793] ? skb_pull_data+0x15f/0x1e0 [ 407.858065][ T5793] hci_le_meta_evt+0x34a/0x5f0 [ 407.858076][ T5793] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 407.858095][ T5793] hci_event_packet+0x51c/0xcd0 [ 407.858112][ T5793] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 407.858123][ T5793] ? __pfx_hci_event_packet+0x10/0x10 [ 407.858141][ T5793] ? kcov_remote_start+0x387/0x670 [ 407.858158][ T5793] ? lockdep_hardirqs_on+0x7d/0x110 [ 407.858174][ T5793] hci_rx_work+0x451/0xfc0 [ 407.858193][ T5793] process_one_work+0xac7/0x1b10 [ 407.858217][ T5793] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 407.858236][ T5793] ? __pfx_process_one_work+0x10/0x10 [ 407.858256][ T5793] ? __pfx_hci_rx_work+0x10/0x10 [ 407.858275][ T5793] worker_thread+0x5ef/0xe50 [ 407.858296][ T5793] ? kthread+0x13a/0x450 [ 407.858308][ T5793] ? __pfx_worker_thread+0x10/0x10 [ 407.858322][ T5793] kthread+0x373/0x450 [ 407.858335][ T5793] ? __pfx_kthread+0x10/0x10 [ 407.858349][ T5793] ret_from_fork+0x730/0xd60 [ 407.858367][ T5793] ? __pfx_ret_from_fork+0x10/0x10 [ 407.858384][ T5793] ? __switch_to+0x800/0x10f0 [ 407.858397][ T5793] ? __pfx_kthread+0x10/0x10 [ 407.858411][ T5793] ret_from_fork_asm+0x1a/0x30 [ 407.858428][ T5793] [ 407.858444][ T5793] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 407.952319][ T5793] Bluetooth: hci1: failed to register connection device [ 408.088596][ T5138] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 408.091382][ T5138] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 408.093718][ T5138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 408.096203][ T5138] loop0: [ 408.126336][ T5892] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 408.145161][ T7913] openvswitch: netlink: IP tunnel dst address not specified [ 408.148473][ T5892] usb 5-1: device descriptor read/8, error -71 [ 408.278043][ T7936] xt_CONNSECMARK: invalid mode: 0 [ 408.396314][ T5892] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 408.402950][ T7948] netlink: 'syz.2.580': attribute type 1 has an invalid length. [ 408.416555][ T5892] usb 5-1: device descriptor read/8, error -71 [ 408.426983][ T7948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 408.449755][ T5138] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 408.452712][ T5138] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 408.455047][ T5138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 408.456006][ T5898] wiimote 0005:057E:0306.0002: hidraw1: BLUETOOTH HID v0.03 Gamepad [syz0] on syz0 [ 408.457662][ T5138] loop0: [ 408.461983][ T5898] wiimote 0005:057E:0306.0002: New device registered [ 408.473504][ T7947] wiimote 0005:057E:0306.0002: Device removed [ 408.482196][ T7953] nbd: illegal input index 67111936 [ 408.537229][ T5892] usb usb5-port1: unable to enumerate USB device [ 408.542104][ T7954] fido_id[7954]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 408.866554][ T5440] veth1_vlan: left promiscuous mode [ 409.025608][ T5440] veth1_vlan: entered promiscuous mode [ 409.124603][ T42] kauditd_printk_skb: 95 callbacks suppressed [ 409.124626][ T42] audit: type=1400 audit(1787334603.996:805): avc: denied { write } for pid=7978 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.189481][ T42] audit: type=1400 audit(1787334604.066:806): avc: denied { write } for pid=7981 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.293516][ T42] audit: type=1400 audit(1787334604.166:807): avc: denied { write } for pid=7985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.339597][ T42] audit: type=1400 audit(1787334604.216:808): avc: denied { write } for pid=7988 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.496068][ T5898] wiimote 0005:057E:0306.0002: detected device: Nintendo Wii Remote (Gen 1) [ 409.501156][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.506531][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.510516][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.515091][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.519785][ T5898] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input10 [ 409.526307][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.531010][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.533530][ T5898] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input11 [ 409.536358][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.536534][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.541944][ T5898] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0002/input/input9 [ 409.544368][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.557925][ T8000] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8000 comm=syz.3.585 [ 409.597507][ T42] audit: type=1400 audit(1787334604.476:809): avc: denied { append } for pid=8003 comm="syz.3.586" name="control" dev="devtmpfs" ino=1289 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 409.600057][ T8004] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800 [ 409.773113][ T8018] team0: Cannot enslave team device to itself [ 409.777299][ T8018] __nla_validate_parse: 4 callbacks suppressed [ 409.777310][ T8018] netlink: 4 bytes leftover after parsing attributes in process `syz.3.589'. [ 409.784974][ T8018] bridge0: port 3(macvlan1) entered blocking state [ 409.789113][ T8018] bridge0: port 3(macvlan1) entered disabled state [ 409.791356][ T8018] macvlan1: entered allmulticast mode [ 409.794455][ T8018] macvlan1: left allmulticast mode [ 409.984275][ T8028] tracefs: Unknown parameter 'I4' [ 409.988491][ T42] audit: type=1400 audit(1787334604.866:810): avc: denied { setopt } for pid=8027 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 409.997995][ T42] audit: type=1400 audit(1787334604.876:811): avc: denied { read } for pid=8029 comm="syz.3.594" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.005008][ T42] audit: type=1400 audit(1787334604.876:812): avc: denied { open } for pid=8029 comm="syz.3.594" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.052820][ T42] audit: type=1400 audit(1787334604.926:813): avc: denied { ioctl } for pid=8036 comm="syz.0.596" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.078974][ T42] audit: type=1400 audit(1787334604.956:814): avc: denied { append } for pid=8036 comm="syz.0.596" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 410.124556][ T8037] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3454903815 (6909807630 ns) > initial count (5889073678 ns). Using initial count to start timer. [ 410.144808][ T8037] kvm: kvm [8036]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 410.148579][ T8037] kvm: kvm [8036]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 410.184713][ T8046] loop2: detected capacity change from 0 to 7 [ 410.190726][ T8046] Dev loop2: unable to read RDB block 7 [ 410.192664][ T8046] loop2: unable to read partition table [ 410.194939][ T8046] loop2: partition table beyond EOD, truncated [ 410.198314][ T8046] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 410.207694][ C2] blk_print_req_error: 11 callbacks suppressed [ 410.207706][ C2] operation not supported error, dev loop2, sector 0 op 0x9:(WRITE_ZEROES) flags 0x10800800 phys_seg 0 prio class 2 [ 410.307848][ T8048] syzkaller0: entered promiscuous mode [ 410.309637][ T8048] syzkaller0: entered allmulticast mode [ 410.494117][ T8057] loop0: detected capacity change from 0 to 3904 [ 410.548705][ T8057] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 410.551798][ T8057] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 410.554537][ T8057] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 410.557712][ T8057] loop0: [ 410.634586][ T8065] netdevsim netdevsim3 : renamed from netdevsim0 (while UP) [ 410.751352][ T6709] Bluetooth: hci5: Frame reassembly failed (-84) [ 410.758573][ T6709] Bluetooth: hci5: Frame reassembly failed (-84) [ 410.760045][ T8074] tmpfs: Bad value for 'mpol' [ 410.822837][ T8079] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 410.925233][ T8090] loop0: detected capacity change from 0 to 3904 [ 410.977964][ T8090] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 410.982161][ T8090] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 410.984518][ T8090] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 410.986808][ T8090] loop0: [ 411.016233][ T5793] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 411.020404][ T8092] syzkaller1: entered promiscuous mode [ 411.022633][ T8092] syzkaller1: entered allmulticast mode [ 411.036789][ T8092] openvswitch: netlink: Message has 4 unknown bytes. [ 411.040191][ T8092] openvswitch: netlink: Actions may not be safe on all matching packets [ 411.399425][ T8116] loop0: detected capacity change from 0 to 3904 [ 411.428446][ T8116] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 411.433851][ T8116] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 411.436519][ T8116] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 411.438720][ T8116] loop0: [ 411.852558][ T8144] loop0: detected capacity change from 0 to 3904 [ 411.906839][ T8144] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 411.910771][ T8144] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 411.913879][ T8144] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 411.917237][ T8144] loop0: [ 412.023247][ T8164] jffs2: notice: (8164) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 412.039382][ T8164] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 412.041919][ T8164] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 412.047024][ T8164] vhci_hcd vhci_hcd.0: Device attached [ 412.059209][ T8164] netlink: 20 bytes leftover after parsing attributes in process `syz.1.634'. [ 412.062857][ T8167] vhci_hcd: connection closed [ 412.064772][ T5833] vhci_hcd vhci_hcd.1: stop threads [ 412.068156][ T5833] vhci_hcd vhci_hcd.1: release socket [ 412.069857][ T5833] vhci_hcd vhci_hcd.1: disconnect device [ 412.214142][ T8179] binder: BINDER_SET_CONTEXT_MGR already set [ 412.216247][ T8179] binder: 8177:8179 ioctl 4018620d 200000000100 returned -16 [ 412.218922][ T8179] binder: BINDER_SET_CONTEXT_MGR already set [ 412.220857][ T8179] binder: 8177:8179 ioctl 4018620d 200000000100 returned -16 [ 412.506120][ T1346] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 412.609964][ T8185] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 412.651933][ T8187] loop0: detected capacity change from 0 to 3904 [ 412.667129][ T1346] usb 5-1: Using ep0 maxpacket: 32 [ 412.669369][ T1346] usb 5-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 412.673212][ T1346] usb 5-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 412.676773][ T1346] usb 5-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 412.680994][ T1346] usb 5-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 412.684492][ T1346] usb 5-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 412.687576][ T8187] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 412.690655][ T1346] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.692360][ T8187] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 412.694913][ T1346] usb 5-1: Product: syz [ 412.698213][ T8187] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 412.699213][ T1346] usb 5-1: Manufacturer: syz [ 412.701928][ T8187] loop0: [ 412.703401][ T1346] usb 5-1: SerialNumber: syz [ 412.713184][ C3] imon 5-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 412.716438][ T1346] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/input/input12 [ 412.742066][ T8189] xt_TCPMSS: Only works on TCP SYN packets [ 412.776186][ T5793] Bluetooth: hci5: command 0x1003 tx timeout [ 412.776202][ T5785] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 412.832574][ T8191] openvswitch: netlink: IP tunnel dst address not specified [ 412.842927][ T8193] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 412.912467][ T8195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.643'. [ 412.926129][ T1346] imon 5-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 412.929307][ T1346] (id 0x00) [ 412.986040][ T1346] rc_core: IR keymap rc-imon-pad not found [ 412.987961][ T1346] Registered IR keymap rc-empty [ 412.989598][ T1346] imon 5-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 412.992847][ T1346] imon 5-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 413.149135][ T1346] rc rc0: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0 [ 413.153741][ T1346] input: iMON Remote (15c2:ffdc) as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:155.0/rc/rc0/input13 [ 413.156103][ T1039] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 413.160014][ T1346] imon 5-1:155.0: iMON device (15c2:ffdc, intf0) on usb<5:16> initialized [ 413.317974][ T1039] usb 6-1: New USB device found, idVendor=06cd, idProduct=0107, bcdDevice= 1.00 [ 413.318562][ T1346] usb 5-1: USB disconnect, device number 16 [ 413.324000][ T1039] usb 6-1: config 1 has an invalid descriptor of length 218, skipping remainder of the config [ 413.328314][ T1039] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 413.332136][ T1039] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 413.337690][ T1039] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 413.341740][ T1039] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 256 [ 413.345759][ T1039] usb 6-1: config 1 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 413.353432][ T1039] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.356911][ T1039] usb 6-1: Product: syz [ 413.358487][ T1039] usb 6-1: Manufacturer: syz [ 413.360074][ T1039] usb 6-1: SerialNumber: syz [ 413.365698][ T8195] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 413.368389][ T8195] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 413.370755][ T8195] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 413.373054][ T8195] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 413.376531][ T1039] keyspan 6-1:1.0: Keyspan 1 port adapter converter detected [ 413.379252][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 84 [ 413.382427][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 82 [ 413.384811][ T1039] keyspan 6-1:1.0: found no endpoint descriptor for endpoint 2 [ 413.388233][ T1039] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 413.690437][ T1039] usb 6-1: USB disconnect, device number 7 [ 413.701076][ T1039] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 413.709424][ T1039] keyspan 6-1:1.0: device disconnected [ 413.808101][ T8208] SELinux: Context system_u:object_r:dlm_control_device_t:s0 is not valid (left unmapped). [ 413.836143][ T1346] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 413.924506][ T8213] syzkaller0: entered promiscuous mode [ 413.927292][ T8213] syzkaller0: entered allmulticast mode [ 413.934104][ T8213] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 413.938963][ T8213] xt_nfacct: accounting object `syz0' does not exist [ 414.006075][ T1346] usb 5-1: Using ep0 maxpacket: 8 [ 414.010018][ T1346] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 414.014919][ T1346] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 414.018641][ T1346] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 414.022552][ T1346] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 414.026110][ T1346] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 414.030208][ T1346] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 414.035490][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 414.056323][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 414.198342][ T5138] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 414.201312][ T5138] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 414.203709][ T5138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 414.206192][ T5138] loop0: [ 414.238928][ T8221] netlink: 32 bytes leftover after parsing attributes in process `syz.1.650'. [ 414.246124][ T1346] usb 5-1: usb_control_msg returned -32 [ 414.247946][ T1346] usbtmc 5-1:16.0: can't read capabilities [ 414.251534][ T42] kauditd_printk_skb: 19 callbacks suppressed [ 414.251557][ T42] audit: type=1400 audit(1787334609.126:834): avc: denied { map } for pid=8222 comm="syz.3.651" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 414.261929][ T42] audit: type=1400 audit(1787334609.126:835): avc: denied { execute } for pid=8222 comm="syz.3.651" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 414.599506][ T5138] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 414.602851][ T5138] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 414.605232][ T5138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 414.607513][ T5138] loop0: [ 414.787591][ T5785] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 414.793801][ T5785] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 414.799933][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 414.804944][ T5785] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 414.810404][ T5785] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 414.878407][ T42] audit: type=1400 audit(1787334865.749:836): avc: denied { bind } for pid=8256 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 414.884774][ T42] audit: type=1400 audit(1787334865.749:837): avc: denied { listen } for pid=8256 comm="syz.3.660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 414.952087][ T42] audit: type=1400 audit(1787334865.819:838): avc: denied { setattr } for pid=8182 comm="syz.0.637" name="loop6" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 414.960313][ T42] audit: type=1400 audit(1787334865.839:839): avc: denied { bind } for pid=8182 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 414.961176][ T8262] comedi comedi0: Cannot bond this driver to itself! [ 414.967519][ T42] audit: type=1400 audit(1787334865.839:840): avc: denied { setopt } for pid=8182 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 414.977352][ T42] audit: type=1400 audit(1787334865.839:841): avc: denied { setopt } for pid=8182 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 414.985215][ T42] audit: type=1400 audit(1787334865.839:842): avc: denied { accept } for pid=8182 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 414.993275][ T42] audit: type=1400 audit(1787334865.839:843): avc: denied { write } for pid=8182 comm="syz.0.637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 415.202305][ T8280] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 415.207384][ T8280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 415.220004][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.222847][ T8280] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 415.223168][ T8252] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.228507][ T8252] bridge_slave_0: entered allmulticast mode [ 415.232674][ T8252] bridge_slave_0: entered promiscuous mode [ 415.236458][ T8280] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 415.237878][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.239931][ T8280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 415.241425][ T8252] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.246156][ T8252] bridge_slave_1: entered allmulticast mode [ 415.252143][ T8252] bridge_slave_1: entered promiscuous mode [ 415.254558][ T8280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 415.258994][ T8280] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 415.263002][ T8280] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 415.266350][ T8280] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 415.271777][ T8280] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 415.274861][ T8252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.280456][ T8252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.300613][ T8252] team0: Port device team_slave_0 added [ 415.306849][ T8252] team0: Port device team_slave_1 added [ 415.326396][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.328625][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.337180][ T8252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.341809][ T8252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.344101][ T8252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.352342][ T8252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.375430][ T8252] hsr_slave_0: entered promiscuous mode [ 415.377807][ T8252] hsr_slave_1: entered promiscuous mode [ 415.380288][ T8252] debugfs: 'hsr0' already exists in 'hsr' [ 415.382115][ T8252] Cannot create hsr debugfs directory [ 415.486489][ T8252] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 415.490519][ T8252] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 415.493562][ T8252] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 415.501826][ T8252] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 415.504790][ T8252] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 415.509548][ T8252] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 415.512910][ T8252] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 415.516980][ T8252] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 415.538355][ T8252] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.541411][ T8252] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.544695][ T8252] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.547668][ T8252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.600243][ T8252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 415.610926][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.613494][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.622174][ T8252] 8021q: adding VLAN 0 to HW filter on device team0 [ 415.629844][ T6708] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.632133][ T6708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.639516][ T6708] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.642642][ T6708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.913502][ T8252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.939111][ T5138] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 415.942127][ T5138] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 415.944445][ T5138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 415.946823][ T5138] loop0: [ 415.990628][ T5876] usb 5-1: USB disconnect, device number 17 [ 416.099477][ T8252] veth0_vlan: entered promiscuous mode [ 416.105510][ T8252] veth1_vlan: entered promiscuous mode [ 416.132682][ T8252] veth0_macvtap: entered promiscuous mode [ 416.137021][ T8252] veth1_macvtap: entered promiscuous mode [ 416.144966][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.151820][ T8252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.176863][ T5861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.183689][ T5861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.206156][ T5861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.209344][ T5861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.236198][ T6708] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.238711][ T6708] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.261262][ T6709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 416.263955][ T6709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.523785][ T8338] netlink: 5 bytes leftover after parsing attributes in process `syz.4.674'. [ 416.565297][ T8340] loop0: detected capacity change from 0 to 3904 [ 416.609467][ T8340] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 416.612550][ T8340] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 416.614918][ T8340] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 416.619514][ T8340] loop0: [ 416.987056][ T6707] nvmet: connect request for invalid subsystem testsubsys! [ 416.991311][ T8359] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 417.156681][ T6705] nvmet: connect request for invalid subsystem testsubsys! [ 417.160339][ T8362] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "testsubsys" [ 417.256404][ T5087] Bluetooth: hci1: command 0x0406 tx timeout [ 417.256429][ T5785] Bluetooth: hci3: command 0x0c1a tx timeout [ 417.338602][ T5785] Bluetooth: hci2: command 0x041b tx timeout [ 417.366124][ T5876] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 417.367635][ T8384] libceph: resolve '.RHe'ˠ/1C~1WexEAeSb{~R' (ret=-3): failed [ 417.526638][ T5876] usb 8-1: Using ep0 maxpacket: 8 [ 417.531727][ T5876] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 417.543670][ T5876] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 417.548118][ T5876] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 417.553856][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.566197][ T5876] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.570399][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.573941][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.577751][ T5876] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 417.581893][ T5876] usb 8-1: config 168 interface 0 has no altsetting 0 [ 417.584854][ T5876] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 417.587520][ T5876] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 417.596522][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.602278][ T5876] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.609645][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.613239][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.617892][ T5876] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 417.622191][ T5876] usb 8-1: config 168 interface 0 has no altsetting 0 [ 417.625241][ T5876] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 417.627910][ T5876] usb 8-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 417.631452][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 417.637642][ T5876] usb 8-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 417.643579][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 417.647772][ T5876] usb 8-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 417.651387][ T5876] usb 8-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 417.655546][ T5876] usb 8-1: config 168 interface 0 has no altsetting 0 [ 417.661948][ T5876] usb 8-1: string descriptor 0 read error: -22 [ 417.663993][ T5876] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.677385][ T5876] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 417.778295][ T1346] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 417.830140][ T8394] netlink: 11396 bytes leftover after parsing attributes in process `syz.4.693'. [ 417.855780][ T1039] logitech-hidpp-device 0005:046D:B012.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 417.893237][ T8398] netlink: 40 bytes leftover after parsing attributes in process `syz.2.694'. [ 417.894460][ T8396] fido_id[8396]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 417.927469][ T1346] usb 5-1: Using ep0 maxpacket: 8 [ 417.936672][ T1346] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 417.944711][ T5892] usb 8-1: USB disconnect, device number 10 [ 417.945424][ T1346] usb 5-1: config 0 has no interfaces? [ 417.953204][ T1346] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.971024][ T1346] usb 5-1: config 0 descriptor?? [ 418.009342][ T8408] loop0: detected capacity change from 0 to 3904 [ 418.050029][ T8408] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 418.053092][ T8408] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 418.055616][ T8408] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 418.058938][ T8408] loop0: [ 418.337787][ T1039] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 418.506882][ T1039] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 418.512854][ T1039] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 418.518183][ T1039] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 418.527831][ T1039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.530379][ T1039] usb 7-1: Product: syz [ 418.531622][ T1039] usb 7-1: Manufacturer: syz [ 418.537054][ T1039] usb 7-1: SerialNumber: syz [ 418.572896][ T5754] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 418.770957][ T8445] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 418.774820][ T8445] Cannot find add_set index 0 as target [ 418.787015][ T1039] usb 7-1: USB disconnect, device number 8 [ 419.186423][ T5892] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 419.337098][ T5892] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.337350][ T5785] Bluetooth: hci3: command 0x0c1a tx timeout [ 419.341025][ T5892] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4 [ 419.346260][ T5892] usb 8-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023 [ 419.347863][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 419.349819][ T5892] usb 8-1: config 0 interface 0 has no altsetting 0 [ 419.356270][ T5892] usb 8-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.359055][ T5892] usb 8-1: Product: syz [ 419.360466][ T5892] usb 8-1: Manufacturer: syz [ 419.362032][ T5892] usb 8-1: SerialNumber: syz [ 419.368858][ T5892] usb 8-1: config 0 descriptor?? [ 419.381333][ T5892] usb 8-1: selecting invalid altsetting 0 [ 419.412423][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 419.412460][ T42] audit: type=1400 audit(1787334870.279:856): avc: denied { write } for pid=8449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.416495][ T5785] Bluetooth: hci2: command 0x041b tx timeout [ 419.470858][ T42] audit: type=1400 audit(1787334870.339:857): avc: denied { write } for pid=8452 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.666769][ T5754] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 419.679265][ T5754] ath9k_htc: Failed to initialize the device [ 419.686787][ T1039] usb 7-1: ath9k_htc: USB layer deinitialized [ 420.006187][ T1039] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 420.060975][ T42] audit: type=1400 audit(1787334870.929:858): avc: denied { write } for pid=8456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.099357][ T42] audit: type=1400 audit(1787334870.969:859): avc: denied { write } for pid=8459 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.156102][ T1039] usb 7-1: Using ep0 maxpacket: 32 [ 420.158396][ T1039] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 1.08 [ 420.162308][ T1039] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 420.165578][ T1039] usb 7-1: config 1 interface 0 altsetting 0 has 5 endpoint descriptors, different from the interface descriptor's value: 6 [ 420.175870][ T1039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 420.178622][ T1039] usb 7-1: Product: syz [ 420.179926][ T1039] usb 7-1: Manufacturer: syz [ 420.181436][ T1039] usb 7-1: SerialNumber: syz [ 420.192828][ T1039] ldusb 7-1:1.0: LD USB Device #0 now attached to major 180 minor 0 [ 420.400069][ T5892] usb 7-1: USB disconnect, device number 9 [ 420.402059][ C0] ldusb 7-1:1.0: usb_submit_urb failed (-19) [ 420.415629][ T5892] ldusb 7-1:1.0: LD USB Device #0 now disconnected [ 420.455564][ T1478] usb 5-1: USB disconnect, device number 18 [ 420.739057][ T42] audit: type=1400 audit(1787334871.609:860): avc: denied { write } for pid=8469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.793697][ T42] audit: type=1400 audit(1787334871.659:861): avc: denied { write } for pid=8472 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.862346][ T8481] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 420.876281][ T42] audit: type=1400 audit(1787334871.749:862): avc: denied { write } for pid=8479 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.908390][ T42] audit: type=1400 audit(1787334871.769:863): avc: denied { load_policy } for pid=8480 comm="syz.4.711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 420.915770][ T8482] SELinux: policydb magic number 0x7270001d does not match expected magic number 0xf97cff8c [ 420.919867][ T42] audit: type=1400 audit(1787334871.779:864): avc: denied { map } for pid=8480 comm="syz.4.711" path="socket:[25414]" dev="sockfs" ino=25414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 420.927679][ T42] audit: type=1400 audit(1787334871.789:865): avc: denied { write } for pid=8487 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 420.932773][ T8482] SELinux: failed to load policy [ 421.397228][ T8502] program syz.2.713 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 421.407282][ T8501] xt_CT: No such helper "pptp" [ 421.418371][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 421.421032][ T5087] Bluetooth: hci3: command 0x0c1a tx timeout [ 421.434231][ T8500] netlink: 20 bytes leftover after parsing attributes in process `syz.0.715'. [ 421.445573][ T8501] xt_CT: No such helper "pptp" [ 421.446443][ T8500] openvswitch: netlink: Missing key (keys=c0, expected=880) [ 421.468011][ T8501] xt_CT: No such helper "pptp" [ 421.491615][ T8501] xt_CT: No such helper "pptp" [ 421.496344][ T5785] Bluetooth: hci2: command 0x041b tx timeout [ 421.515087][ T8501] xt_CT: No such helper "pptp" [ 421.547137][ T8501] xt_CT: No such helper "pptp" [ 421.568529][ T8501] xt_CT: No such helper "pptp" [ 421.602121][ T8501] xt_CT: No such helper "pptp" [ 421.624994][ T8515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.716'. [ 421.633599][ T8501] xt_CT: No such helper "pptp" [ 421.655743][ T8501] xt_CT: No such helper "pptp" [ 421.663121][ T8515] selinux_netlink_send: 58 callbacks suppressed [ 421.663135][ T8515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8515 comm=syz.2.716 [ 421.946134][ T5876] usb 7-1: new low-speed USB device number 10 using dummy_hcd [ 421.959701][ T1478] usb 8-1: USB disconnect, device number 11 [ 422.021017][ T8534] loop0: detected capacity change from 0 to 3904 [ 422.077908][ T8534] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 422.082034][ T8534] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 422.085174][ T8534] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 422.088370][ T8534] loop0: [ 422.096140][ T5876] usb 7-1: Invalid ep0 maxpacket: 64 [ 422.227443][ T5876] usb 7-1: new low-speed USB device number 11 using dummy_hcd [ 422.339315][ T8559] syz_tun: entered allmulticast mode [ 422.378572][ T5876] usb 7-1: Invalid ep0 maxpacket: 64 [ 422.381397][ T5876] usb usb7-port1: attempt power cycle [ 422.675584][ T8558] syz_tun: left allmulticast mode [ 422.716089][ T5876] usb 7-1: new low-speed USB device number 12 using dummy_hcd [ 422.747268][ T5876] usb 7-1: Invalid ep0 maxpacket: 64 [ 422.876091][ T5876] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 422.896813][ T5876] usb 7-1: Invalid ep0 maxpacket: 64 [ 422.901483][ T5876] usb usb7-port1: unable to enumerate USB device [ 423.270765][ T8573] loop0: detected capacity change from 0 to 3904 [ 423.309124][ T8573] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 423.313602][ T8573] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 423.316901][ T8573] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 423.319742][ T8573] loop0: [ 423.470674][ T8582] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 423.496254][ T5785] Bluetooth: hci1: command 0x0406 tx timeout [ 423.586163][ T5785] Bluetooth: hci2: command 0x041b tx timeout [ 423.694774][ T8599] md/raid10:md0: not clean -- starting background reconstruction [ 423.698064][ T8599] md/raid10:md0: active with 1 out of 2 devices [ 423.701527][ T8599] md0: detected capacity change from 0 to 2048 [ 423.735177][ T8603] md: resync of RAID array md0 [ 423.743748][ T8606] loop0: detected capacity change from 0 to 3904 [ 423.751876][ T8603] md: md0: resync done. [ 423.779850][ T8607] md: recover of RAID array md0 [ 423.792289][ T8607] md: md0: recover done. [ 423.808570][ T8606] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 423.824478][ T8606] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 423.826861][ T8606] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 423.828927][ T8606] loop0: [ 423.893744][ T8612] 9pnet_fd: p9_fd_create_unix (8612): problem connecting socket: ./file0: -111 [ 423.930717][ T8610] tmpfs: Bad value for 'mpol' [ 423.962834][ T8616] 9p: p9: multiple sources not supported [ 424.007164][ T8620] ip_tables: iptables: counters copy to user failed while replacing table [ 424.151680][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.743'. [ 424.341008][ T8631] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 424.356097][ T1039] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 424.449890][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 424.449920][ T42] audit: type=1400 audit(1787334875.319:873): avc: denied { write } for pid=8633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.508571][ T42] audit: type=1400 audit(1787334875.379:874): avc: denied { write } for pid=8638 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.519642][ T1039] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 424.523464][ T1039] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 424.529532][ T1039] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25866, setting to 1024 [ 424.534100][ T1039] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 48, changing to 9 [ 424.537717][ T1039] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 25866, setting to 1024 [ 424.543839][ T1039] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.546492][ T1039] usb 9-1: Product: syz [ 424.547726][ T1039] usb 9-1: Manufacturer: syz [ 424.549171][ T1039] usb 9-1: SerialNumber: syz [ 424.553165][ T8627] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 424.559544][ T1039] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 424.564544][ T1039] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 424.564918][ T5440] veth0_vlan: left promiscuous mode [ 424.573600][ T1039] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 424.573775][ T1346] veth0_vlan: entered promiscuous mode [ 424.620037][ T8642] netlink: 'syz.3.747': attribute type 10 has an invalid length. [ 424.637155][ T8642] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 424.641108][ T8642] bond0: (slave netdevsim1): Enslaving as an active interface with an up link [ 424.645718][ T8642] netlink: 14 bytes leftover after parsing attributes in process `syz.3.747'. [ 424.661669][ T42] audit: type=1400 audit(1787334875.529:875): avc: denied { write } for pid=8643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.670983][ T1478] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 424.689252][ T8648] (syz.3.748,8648,0):ocfs2_get_sector:1713 ERROR: status = -5 [ 424.692679][ T8648] (syz.3.748,8648,0):ocfs2_sb_probe:753 ERROR: status = -5 [ 424.694953][ T8648] (syz.3.748,8648,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 424.698956][ T8648] (syz.3.748,8648,0):ocfs2_fill_super:1177 ERROR: status = -5 [ 424.716383][ T42] audit: type=1400 audit(1787334875.589:876): avc: denied { write } for pid=8649 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 424.816706][ T1478] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 424.821301][ T1478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 425.016541][ T5754] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 425.031288][ T1478] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 425.167678][ T5754] usb 8-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 425.171682][ T5754] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 425.175417][ T5754] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59146, setting to 1024 [ 425.179847][ T5754] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 425.183302][ T5754] usb 8-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59146, setting to 1024 [ 425.188474][ T5754] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.190902][ T5754] usb 8-1: Product: syz [ 425.192183][ T5754] usb 8-1: Manufacturer: syz [ 425.193707][ T5754] usb 8-1: SerialNumber: syz [ 425.201725][ T8655] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 425.204937][ T5754] ti_usb_3410_5052 8-1:2.0: TI USB 5052 2 port adapter converter detected [ 425.211951][ T5754] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB2 [ 425.216812][ T5754] usb 8-1: TI USB 5052 2 port adapter converter now attached to ttyUSB3 [ 425.341916][ T5861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.345151][ T5861] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.411849][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.418451][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.421755][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.426086][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.429430][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.432805][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.436456][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.439687][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.443016][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.446201][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.449356][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.452676][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.455905][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.460247][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.463499][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.467153][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.468701][ T5861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.470385][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.473621][ T5861] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.478106][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.483845][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.487107][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.490445][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.493677][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.497341][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.500455][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.503577][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.506803][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.510005][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.513117][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.516330][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.519541][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.522698][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.525950][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.529526][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.532754][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.536050][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.539271][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.542542][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.545671][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.550130][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.553322][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.557014][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.560222][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.563107][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.565598][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.568026][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.570466][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.572921][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.576168][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.578724][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.581160][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.583609][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.585534][ T5861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.586028][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.591163][ T5861] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.592497][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.592674][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.592850][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.593029][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.593204][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.593379][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.611531][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.614024][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.616502][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.618934][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.621347][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.623812][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.626261][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.628807][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.631358][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.633839][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.636455][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.638876][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.641442][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.643897][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.646371][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.648787][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.651206][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.653641][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.656213][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.656492][ T5785] Bluetooth: hci2: command 0x041b tx timeout [ 425.658630][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.658807][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.658983][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.659158][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.659333][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.659511][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.659686][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.659861][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.681448][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.681693][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.681914][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.690289][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.693167][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.695802][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.698560][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.701593][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.704012][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.706522][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.708865][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.711228][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.713613][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.716163][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.719511][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.721842][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.724299][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.726668][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.729030][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.732135][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.733331][ T5861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.734531][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.737701][ T5861] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.740101][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.745128][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.747441][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.749838][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.752249][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.754583][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.756854][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.759295][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.761622][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.763938][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.766422][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.768772][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.771257][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.773550][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.775909][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.778205][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.780530][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.783082][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.785412][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.787815][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.790294][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.793068][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.795537][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.798678][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.801397][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.803829][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.806240][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.808561][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.810975][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.813407][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.815836][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.818274][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.820695][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.823522][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.825892][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.828464][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.830866][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.833367][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.835744][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.838207][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.840540][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.842968][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.845423][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.847853][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.850231][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.852627][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.854999][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.857510][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.859851][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.862134][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.864421][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.866758][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.869067][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.871426][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.873782][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.876243][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.878578][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.880942][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.883240][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.883362][ T5861] vlan2: left allmulticast mode [ 425.885737][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.885920][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.887887][ T5861] geneve0: left allmulticast mode [ 425.890054][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.892494][ T5861] vlan2: left promiscuous mode [ 425.893802][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.896575][ T5861] geneve0: left promiscuous mode [ 425.898854][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.901708][ T5861] bridge0: port 3(vlan2) entered disabled state [ 425.903676][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.903859][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.904042][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.912899][ C2] usb 9-1: ti_interrupt_callback - nonzero urb status, -71 [ 425.913500][ T5892] usb 9-1: USB disconnect, device number 2 [ 425.915109][ C2] usb 9-1: ti_interrupt_callback - resubmit interrupt urb failed, -19 [ 425.915368][ T8655] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot clear input buffers, -71 [ 425.928282][ T5861] bridge_slave_1: left allmulticast mode [ 425.930126][ T5861] bridge_slave_1: left promiscuous mode [ 425.937184][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.939277][ T5892] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 425.949841][ T5861] bridge_slave_0: left allmulticast mode [ 425.949932][ T5892] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 425.952041][ T5861] bridge_slave_0: left promiscuous mode [ 425.957283][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.962527][ T5892] ti_usb_3410_5052 9-1:2.0: device disconnected [ 426.118756][ T5861] bond1 (unregistering): Released all slaves [ 426.219011][ T42] audit: type=1400 audit(1787334877.089:877): avc: denied { write } for pid=8673 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.306045][ T42] audit: type=1400 audit(1787334877.169:878): avc: denied { write } for pid=8676 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.358806][ T5440] 8021q: adding VLAN 0 to HW filter on device eth2 [ 426.441315][ T42] audit: type=1400 audit(1787334877.309:879): avc: denied { write } for pid=8680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.444875][ T8668] Process accounting resumed [ 426.486209][ T42] audit: type=1400 audit(1787334877.349:880): avc: denied { write } for pid=8683 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 426.540927][ T5861] hsr_slave_0: left promiscuous mode [ 426.543874][ T5861] hsr_slave_1: left promiscuous mode [ 426.548511][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 426.551061][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 426.554018][ T5861] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 426.556438][ T5861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 426.563966][ T5861] veth1_macvtap: left promiscuous mode [ 426.565895][ T5861] veth0_macvtap: left promiscuous mode [ 426.568762][ T5861] veth1_vlan: left promiscuous mode [ 426.570485][ T5861] veth0_vlan: left promiscuous mode [ 426.775328][ T5861] team0 (unregistering): Port device team_slave_1 removed [ 426.790317][ T5861] team0 (unregistering): Port device team_slave_0 removed [ 426.894727][ T5440] 8021q: adding VLAN 0 to HW filter on device eth3 [ 426.988439][ T42] audit: type=1400 audit(1787334877.859:881): avc: denied { write } for pid=8705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.045905][ T42] audit: type=1400 audit(1787334877.909:882): avc: denied { write } for pid=8708 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.081761][ T5440] 8021q: adding VLAN 0 to HW filter on device eth4 [ 427.176457][ T1346] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 427.230122][ T5440] 8021q: adding VLAN 0 to HW filter on device eth5 [ 427.337779][ T1346] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 427.344077][ T1346] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 427.357154][ T1346] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 427.363172][ T1346] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 427.371772][ T1346] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 427.375140][ T1346] usb 9-1: Product: syz [ 427.376995][ T1346] usb 9-1: Manufacturer: syz [ 427.378985][ T1346] usb 9-1: SerialNumber: syz [ 427.590958][ T8704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 427.595008][ T8704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 427.600913][ T1346] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 427.746155][ T5785] Bluetooth: hci2: command 0x041b tx timeout [ 427.801959][ T5754] usb 9-1: USB disconnect, device number 3 [ 427.808236][ T5754] usblp0: removed [ 427.867258][ T8704] netlink: 8 bytes leftover after parsing attributes in process `syz.4.756'. [ 427.942225][ T5868] usb 8-1: USB disconnect, device number 12 [ 427.959756][ T5868] ti_usb_3410_5052_2 ttyUSB2: TI USB 5052 2 port adapter converter now disconnected from ttyUSB2 [ 427.995790][ T5868] ti_usb_3410_5052_2 ttyUSB3: TI USB 5052 2 port adapter converter now disconnected from ttyUSB3 [ 428.004197][ T5868] ti_usb_3410_5052 8-1:2.0: device disconnected [ 428.577292][ T8748] gretap2: entered promiscuous mode [ 428.581238][ T8751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.766'. [ 428.718766][ T8762] loop0: detected capacity change from 0 to 3904 [ 428.776824][ T8762] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 428.779848][ T8762] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 428.782167][ T8762] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 428.784396][ T8762] loop0: [ 428.842852][ T8764] sctp: [Deprecated]: syz.4.772 (pid 8764) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.842852][ T8764] Use struct sctp_sack_info instead [ 428.851631][ T8765] sctp: [Deprecated]: syz.4.772 (pid 8765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 428.851631][ T8765] Use struct sctp_sack_info instead [ 428.869840][ T8765] bridge_slave_1: default FDB implementation only supports local addresses [ 429.012983][ T8779] bridge_slave_0: left allmulticast mode [ 429.015297][ T8779] bridge_slave_0: left promiscuous mode [ 429.020852][ T8779] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.032058][ T8779] bridge_slave_1: left allmulticast mode [ 429.034410][ T8779] bridge_slave_1: left promiscuous mode [ 429.040507][ T8779] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.048476][ T8779] bond0: (slave bond_slave_0): Releasing backup interface [ 429.055454][ T8779] bond0: (slave bond_slave_1): Releasing backup interface [ 429.067975][ T8779] team0: Port device team_slave_0 removed [ 429.075284][ T8779] team0: Port device team_slave_1 removed [ 429.079611][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 429.082729][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 429.089028][ T8779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 429.092021][ T8779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 429.112388][ T8779] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 429.369042][ T5138] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 429.372043][ T5138] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 429.374621][ T5138] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 429.377088][ T5138] loop0: [ 429.491587][ T42] kauditd_printk_skb: 9 callbacks suppressed [ 429.491600][ T42] audit: type=1400 audit(1787334880.359:892): avc: denied { connect } for pid=8803 comm="syz.4.783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 429.715933][ T8820] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 430.262998][ T8840] syzkaller0: entered promiscuous mode [ 430.264843][ T8840] syzkaller0: entered allmulticast mode [ 430.270810][ T8840] tipc: Started in network mode [ 430.272429][ T8840] tipc: Node identity 8efa1947d225, cluster identity 4711 [ 430.276179][ T8840] tipc: Enabled bearer , priority 0 [ 430.286641][ T8839] tipc: Resetting bearer [ 430.301669][ T8839] tipc: Disabling bearer [ 430.556228][ T1478] usb 5-1: USB disconnect, device number 19 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 430.607583][ T8856] 9pnet_virtio: no channels available for device syz [ 430.706981][ T8859] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.709888][ T8859] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.790676][ T8859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.802856][ T8859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.018775][ T13] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.061913][ T42] audit: type=1400 audit(1787334881.929:893): avc: denied { write } for pid=8881 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.079292][ T8880] bond2: down delay (12) is not a multiple of miimon (100), value rounded to 0 ms [ 431.112313][ T12] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.115822][ T12] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.119421][ T12] netdevsim netdevsim3 : unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.154656][ T42] audit: type=1400 audit(1787334882.019:894): avc: denied { write } for pid=8888 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.268691][ T42] audit: type=1400 audit(1787334882.139:895): avc: denied { write } for pid=8905 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.291272][ T8911] netlink: 108 bytes leftover after parsing attributes in process `syz.0.812'. [ 431.366412][ T42] audit: type=1400 audit(1787334882.234:896): avc: denied { write } for pid=8915 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.483195][ T42] audit: type=1400 audit(1787334882.354:897): avc: denied { write } for pid=8921 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.541750][ T42] audit: type=1400 audit(1787334882.414:898): avc: denied { write } for pid=8933 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.557133][ T8925] kvm: kvm [8920]: vcpu2, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x6 [ 431.562471][ T8936] sctp: [Deprecated]: syz.0.817 (pid 8936) Use of struct sctp_assoc_value in delayed_ack socket option. [ 431.562471][ T8936] Use struct sctp_sack_info instead [ 431.658813][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 431.683493][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.0.820'. [ 431.787649][ T42] audit: type=1400 audit(1787334882.664:899): avc: denied { write } for pid=8946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 431.905261][ T42] audit: type=1400 audit(1787334882.774:900): avc: denied { write } for pid=8955 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.032637][ T42] audit: type=1400 audit(1787334882.904:901): avc: denied { write } for pid=8977 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 432.077674][ T8952] SELinux: failed to load policy [ 432.181174][ T9001] netlink: 'syz.4.829': attribute type 1 has an invalid length. [ 432.244884][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.830'. [ 432.249750][ T9002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.830'. [ 432.257835][ T9002] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Info Ack ret = -22) [ 432.281353][ T9015] vivid-004: ================= START STATUS ================= [ 432.284922][ T9015] vivid-004: RDS Tx I/O Mode: Controls [ 432.287769][ T9015] vivid-004: RDS Program ID: 32904 [ 432.289352][ T9015] vivid-004: RDS Program Type: 3 [ 432.291616][ T9015] vivid-004: RDS PS Name: VIVID-TX [ 432.293176][ T9015] vivid-004: RDS Radio Text: This is a VIVID default Radio Text template text, change at will [ 432.299357][ T9015] vivid-004: RDS Stereo: true [ 432.300908][ T9015] vivid-004: RDS Artificial Head: false [ 432.302592][ T9015] vivid-004: RDS Compressed: false [ 432.304177][ T9015] vivid-004: RDS Dynamic PTY: false [ 432.305770][ T9015] vivid-004: RDS Traffic Announcement: false [ 432.310485][ T9015] vivid-004: RDS Traffic Program: true [ 432.312316][ T9015] vivid-004: RDS Music: true [ 432.313785][ T9015] vivid-004: ================== END STATUS ================== [ 432.408274][ T5892] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 432.424590][ T9023] XFS (mtdblock0): Invalid superblock magic number [ 432.555858][ T5892] usb 7-1: Using ep0 maxpacket: 8 [ 432.558300][ T5892] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 432.563658][ T5892] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 432.568129][ T5892] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 432.573782][ T5892] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 432.580623][ T5892] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 432.584192][ T5892] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 432.588702][ T5892] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 432.594951][ T5892] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.655629][ T9049] comedi comedi0: pc212e: a I/O base address must be specified [ 432.777464][ T9056] netlink: 12 bytes leftover after parsing attributes in process `syz.3.841'. [ 432.781470][ T9056] block nbd0: Unsupported socket: should be TCP or UNIX. [ 432.804588][ T5892] usb 7-1: GET_CAPABILITIES returned 0 [ 432.808613][ T5892] usbtmc 7-1:16.0: can't read capabilities [ 433.156491][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 433.159319][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 433.167297][ T8998] usbtmc 7-1:16.0: Unable to send data, error -71 [ 433.509007][ T9083] netlink: 12 bytes leftover after parsing attributes in process `syz.4.846'. [ 434.326337][ T9083] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 434.418324][ T9095] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 434.552786][ T42] kauditd_printk_skb: 17 callbacks suppressed [ 434.552805][ T42] audit: type=1400 audit(1787334885.425:919): avc: denied { connect } for pid=9110 comm="syz.4.853" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 434.562413][ T42] audit: type=1400 audit(1787334885.435:920): avc: denied { write } for pid=9110 comm="syz.4.853" laddr=172.20.20.10 lport=16064 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 434.580830][ T42] audit: type=1400 audit(1787334885.435:921): avc: denied { read } for pid=9110 comm="syz.4.853" laddr=172.20.20.10 lport=16064 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 434.598507][ T42] audit: type=1400 audit(1787334885.475:922): avc: denied { ioctl } for pid=9116 comm="syz.4.854" path="socket:[27637]" dev="sockfs" ino=27637 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 434.601615][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.852'. [ 434.841695][ T9141] netlink: 28 bytes leftover after parsing attributes in process `syz.4.860'. [ 434.869844][ T42] audit: type=1400 audit(1787334885.745:923): avc: denied { write } for pid=9139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 434.932760][ T42] audit: type=1400 audit(1787334885.805:924): avc: denied { write } for pid=9146 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 435.152236][ T5876] usb 7-1: USB disconnect, device number 14 [ 435.461955][ T42] audit: type=1400 audit(1787334886.336:925): avc: denied { cmd } for pid=9155 comm="syz.4.863" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 435.469380][ T42] audit: type=1400 audit(1787334886.346:926): avc: denied { bind } for pid=9155 comm="syz.4.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 435.514785][ T5876] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 435.562003][ T9163] netlink: 12 bytes leftover after parsing attributes in process `syz.3.864'. [ 435.567612][ T42] audit: type=1400 audit(1787334886.446:927): avc: denied { kexec_image_load } for pid=9162 comm="syz.3.864" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 435.652635][ T42] audit: type=1326 audit(1787334886.526:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9164 comm="syz.3.865" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55e639e0d9 code=0x0 [ 435.665302][ T5876] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 435.671021][ T5876] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.673650][ T5785] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 435.676140][ T5785] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 435.678595][ T5876] usb 7-1: Product: syz [ 435.679921][ T5876] usb 7-1: Manufacturer: syz [ 435.681400][ T5876] usb 7-1: SerialNumber: syz [ 435.701466][ T1346] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 435.715378][ T9171] binder: 9164:9171 ioctl 541c 200000000000 returned -22 [ 435.949582][ T9184] netlink: 'syz.0.870': attribute type 1 has an invalid length. [ 435.952010][ T9184] netlink: 228 bytes leftover after parsing attributes in process `syz.0.870'. [ 435.956800][ T9184] binder: 9183:9184 ioctl c0306201 200000000080 returned -14 [ 435.961171][ T9185] binder_alloc: binder_alloc_mmap_handler: 9183 200000ffd000-200001000000 already mapped failed -16 [ 435.966202][ T9184] binder: 9183:9184 ioctl c0306201 2000000003c0 returned -14 [ 435.969329][ T9185] binder: 9183:9185 ioctl c0306201 2000000003c0 returned -14 [ 435.973024][ T9184] binder_alloc: 9183: binder_alloc_buf, no vma [ 435.977920][ T9184] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'. [ 436.365511][ T9191] overlayfs: failed to resolve './file2': -2 [ 436.452699][ T9197] 9pnet_fd: Insufficient options for proto=fd [ 436.548504][ T5087] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 436.554486][ T5087] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 436.564750][ T5087] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 436.568154][ T5087] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 436.571913][ T5087] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 436.583451][ T9207] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9207 comm=syz.3.876 [ 436.631732][ T5754] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 436.650657][ T5754] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 436.774713][ T1346] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 436.777072][ T1346] ath9k_htc: Failed to initialize the device [ 436.820529][ T1346] usb 7-1: ath9k_htc: USB layer deinitialized [ 436.916910][ T5754] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 437.020466][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.023485][ T9199] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.026575][ T9199] bridge_slave_0: entered allmulticast mode [ 437.030192][ T9199] bridge_slave_0: entered promiscuous mode [ 437.034766][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.037701][ T9199] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.040006][ T9199] bridge_slave_1: entered allmulticast mode [ 437.043176][ T9199] bridge_slave_1: entered promiscuous mode [ 437.058740][ T9199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 437.064300][ T9199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 437.079650][ T9199] team0: Port device team_slave_0 added [ 437.083039][ T9199] team0: Port device team_slave_1 added [ 437.101883][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 437.104575][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.113437][ T9199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 437.118613][ T9199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 437.120966][ T9199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 437.130210][ T9199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 437.152745][ T9199] hsr_slave_0: entered promiscuous mode [ 437.155070][ T9199] hsr_slave_1: entered promiscuous mode [ 437.157564][ T9199] debugfs: 'hsr0' already exists in 'hsr' [ 437.159816][ T9199] Cannot create hsr debugfs directory [ 437.285724][ T9199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 437.291702][ T9199] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 437.294940][ T9199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 437.300095][ T9199] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 437.303273][ T9199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 437.308554][ T9199] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 437.311279][ T9199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 437.315351][ T9199] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 437.338891][ T9199] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.341874][ T9199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.345110][ T9199] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.347982][ T9199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.398492][ T9199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 437.410929][ T6709] bridge0: port 1(bridge_slave_0) entered disabled state [ 437.416077][ T6709] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.424317][ T5754] libceph: mon0 (2)0.0.0.0:6789 socket error on write [ 437.424709][ T9199] 8021q: adding VLAN 0 to HW filter on device team0 [ 437.439587][ T6709] bridge0: port 1(bridge_slave_0) entered blocking state [ 437.441797][ T6709] bridge0: port 1(bridge_slave_0) entered forwarding state [ 437.450173][ T6709] bridge0: port 2(bridge_slave_1) entered blocking state [ 437.452467][ T6709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 437.653699][ T9201] ceph: No mds server is up or the cluster is laggy [ 437.737693][ T9199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.987943][ T9199] veth0_vlan: entered promiscuous mode [ 438.000503][ T9199] veth1_vlan: entered promiscuous mode [ 438.040123][ T9199] veth0_macvtap: entered promiscuous mode [ 438.044390][ T9199] veth1_macvtap: entered promiscuous mode [ 438.056759][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 438.067377][ T9199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 438.154426][ T9290] overlayfs: missing 'lowerdir' [ 438.163342][ T5833] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.183425][ T5833] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.233897][ T6710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.237783][ T5754] usb 7-1: USB disconnect, device number 15 [ 438.242878][ T6710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.253071][ T5833] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.259142][ T5833] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 438.299419][ T6710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.303700][ T6710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.599541][ T9325] netlink: Setting conntrack mark requires 'commit' flag. [ 438.601740][ T9325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 438.661786][ T9324] netlink: 24 bytes leftover after parsing attributes in process `syz.3.894'. [ 438.732062][ T5785] Bluetooth: hci3: command tx timeout [ 438.761828][ T5785] Bluetooth: hci1: unexpected event for opcode 0x202f [ 439.075179][ T9368] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 439.135436][ T9370] block nbd3: shutting down sockets [ 439.232512][ T5754] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 439.302568][ T8446] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 439.382667][ T5754] usb 7-1: Using ep0 maxpacket: 32 [ 439.385895][ T5754] usb 7-1: unable to get BOS descriptor or descriptor too short [ 439.388240][ T5754] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 439.391750][ T5754] usb 7-1: config 14 has an invalid interface number: 57 but max is 1 [ 439.394249][ T5754] usb 7-1: config 14 has an invalid interface number: 228 but max is 1 [ 439.396596][ T5754] usb 7-1: config 14 has no interface number 0 [ 439.399116][ T5754] usb 7-1: config 14 has no interface number 1 [ 439.400979][ T5754] usb 7-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 439.404180][ T5754] usb 7-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 439.407729][ T5754] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 439.411701][ T5754] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 439.416365][ T5754] usb 7-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 439.420486][ T5754] usb 7-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 439.425294][ T5754] usb 7-1: config 14 interface 57 has no altsetting 0 [ 439.427748][ T5754] usb 7-1: config 14 interface 228 has no altsetting 0 [ 439.432746][ T5754] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.436047][ T5754] usb 7-1: Product: syz [ 439.437656][ T5754] usb 7-1: Manufacturer: syz [ 439.439446][ T5754] usb 7-1: SerialNumber: syz [ 439.452477][ T8446] usb 9-1: Using ep0 maxpacket: 32 [ 439.458190][ T8446] usb 9-1: unable to get BOS descriptor or descriptor too short [ 439.462234][ T8446] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 439.473910][ T8446] usb 9-1: string descriptor 0 read error: -22 [ 439.477675][ T8446] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.489555][ T8446] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 439.492201][ T8446] dw2102: su3000_power_ctrl: 1, initialized 0 [ 439.495445][ T8446] dvb-usb: bulk message failed: -22 (2/0) [ 439.516995][ T8446] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 439.522859][ T8446] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 439.527247][ T8446] usb 9-1: media controller created [ 439.529672][ T8446] dvb-usb: bulk message failed: -22 (6/0) [ 439.531517][ T8446] dw2102: i2c transfer failed. [ 439.533101][ T8446] dvb-usb: bulk message failed: -22 (6/0) [ 439.534777][ T8446] dw2102: i2c transfer failed. [ 439.536234][ T8446] dvb-usb: bulk message failed: -22 (6/0) [ 439.539054][ T8446] dw2102: i2c transfer failed. [ 439.540553][ T8446] dvb-usb: bulk message failed: -22 (6/0) [ 439.542218][ T8446] dw2102: i2c transfer failed. [ 439.543781][ T8446] dvb-usb: bulk message failed: -22 (6/0) [ 439.545440][ T8446] dw2102: i2c transfer failed. [ 439.546798][ T8446] dvb-usb: bulk message failed: -22 (6/0) [ 439.548531][ T8446] dw2102: i2c transfer failed. [ 439.550922][ T8446] dvb-usb: MAC address: 02:02:02:02:02:02 [ 439.561256][ T8446] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 439.583126][ T8446] dvb-usb: bulk message failed: -22 (3/0) [ 439.585048][ T8446] dw2102: command 0x0e transfer failed. [ 439.587660][ T8446] dvb-usb: bulk message failed: -22 (3/0) [ 439.589799][ T8446] dw2102: command 0x0e transfer failed. [ 439.730031][ T42] kauditd_printk_skb: 24 callbacks suppressed [ 439.730043][ T42] audit: type=1400 audit(1787334890.608:953): avc: denied { write } for pid=9371 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.782206][ T42] audit: type=1400 audit(1787334890.658:954): avc: denied { write } for pid=9375 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.853497][ T5754] legousbtower 7-1:14.57: interrupt endpoints not found [ 439.895251][ T8446] dvb-usb: bulk message failed: -22 (3/0) [ 439.896954][ T8446] dw2102: command 0x0e transfer failed. [ 439.906569][ T8446] dvb-usb: bulk message failed: -22 (3/0) [ 439.912578][ T8446] dw2102: command 0x0e transfer failed. [ 439.914470][ T8446] dvb-usb: bulk message failed: -22 (1/0) [ 439.919854][ T8446] dw2102: command 0x51 transfer failed. [ 439.928583][ T9367] dvb-usb: bulk message failed: -22 (38/0) [ 439.933930][ T9367] dw2102: i2c transfer failed. [ 439.937682][ T9367] i2c i2c-2: Invalid block size returned: 34 [ 439.959664][ T8446] DVB: Unable to find symbol ds3000_attach() [ 439.961448][ T8446] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 439.975026][ T1438] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.998729][ T9388] netlink: 12 bytes leftover after parsing attributes in process `syz.3.909'. [ 440.012138][ T8446] rc_core: IR keymap rc-su3000 not found [ 440.014242][ T8446] Registered IR keymap rc-empty [ 440.020715][ T8446] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 440.027268][ T8446] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input16 [ 440.037477][ T8446] dvb-usb: schedule remote query interval to 150 msecs. [ 440.039592][ T8446] dw2102: su3000_power_ctrl: 0, initialized 1 [ 440.041545][ T8446] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 440.062453][ T8446] usb 9-1: USB disconnect, device number 4 [ 440.088597][ T9387] bridge0: port 3(veth3) entered blocking state [ 440.090696][ T9387] bridge0: port 3(veth3) entered disabled state [ 440.093646][ T9387] veth3: entered allmulticast mode [ 440.097796][ T9387] veth3: entered promiscuous mode [ 440.137346][ T9394] tmpfs: Unknown parameter 'usrquota5HS/L̉F݇vF [ 440.137346][ T9394] o9~^hta [ 440.137346][ T9394] q' [ 440.146838][ T9395] tmpfs: Unknown parameter 'usrquota5HS/L̉F݇vF [ 440.146838][ T9395] o9~^hta [ 440.146838][ T9395] q' [ 440.164352][ T8446] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 440.256357][ T5754] legousbtower 7-1:14.228: LEGO USB Tower firmware version is 0.0 build 0 [ 440.283042][ T5754] legousbtower 7-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0 [ 440.519886][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.920'. [ 440.523971][ T9424] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 440.569349][ T9432] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 440.579446][ T9429] bond1 (unregistering): Released all slaves [ 440.643082][ T8446] usb 10-1: new full-speed USB device number 2 using dummy_hcd [ 440.709669][ T42] audit: type=1400 audit(1787334891.578:955): avc: denied { mounton } for pid=9439 comm="syz.4.924" path="/87/proc" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 440.721842][ T42] audit: type=1400 audit(1787334891.578:956): avc: denied { read write } for pid=9437 comm="syz.3.923" name="threads" dev="nfsd" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 440.773509][ T42] audit: type=1400 audit(1787334891.648:957): avc: denied { write } for pid=9443 comm="syz.3.925" name="ports" dev="configfs" ino=771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 440.781889][ T5785] Bluetooth: hci3: command tx timeout [ 440.790139][ T42] audit: type=1400 audit(1787334891.648:958): avc: denied { write } for pid=9443 comm="syz.3.925" name="subsystems" dev="configfs" ino=32485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 440.793353][ T8446] usb 10-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 440.803603][ T42] audit: type=1400 audit(1787334891.648:959): avc: denied { write } for pid=9443 comm="syz.3.925" name="subsystems" dev="configfs" ino=32485 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 440.815300][ T8446] usb 10-1: config 1 interface 0 has no altsetting 0 [ 440.819299][ T8446] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.821995][ T8446] usb 10-1: Product: syz [ 440.824350][ T8446] usb 10-1: Manufacturer: syz [ 440.828191][ T8446] usb 10-1: SerialNumber: syz [ 440.843025][ T6705] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:8c3544ec-596c-477c-bf99-78f5b81f605b. [ 440.866693][ T9444] nvme nvme0: creating 4 I/O queues. [ 440.885342][ T9444] nvme nvme0: new ctrl: "testsubsys" [ 441.004571][ T9452] netlink: 'syz.4.926': attribute type 1 has an invalid length. [ 441.007014][ T9452] netlink: 'syz.4.926': attribute type 2 has an invalid length. [ 441.009859][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.4.926'. [ 441.015186][ T9452] IPv6: sit1: Disabled Multicast RS [ 441.017450][ T9452] sit1: entered allmulticast mode [ 441.023033][ C3] usb 7-1: tower_interrupt_in_callback: usb_submit_urb failed (-1) [ 441.028694][ T5889] usb 7-1: USB disconnect, device number 16 [ 441.039679][ T5889] legousbtower 7-1:14.228: LEGO USB Tower #-160 now disconnected [ 441.244984][ T8446] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 37 proto 1 vid 0x04B8 pid 0x0202 [ 441.904913][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.918'. [ 441.909525][ T9463] netlink: 28 bytes leftover after parsing attributes in process `syz.5.918'. [ 442.850748][ T5785] Bluetooth: hci3: command tx timeout [ 443.173355][ T5892] usb 10-1: USB disconnect, device number 2 [ 443.173935][ C2] usblp0: nonzero write bulk status received: -71 [ 443.183893][ T9419] usblp0: removed [ 444.929699][ T5785] Bluetooth: hci3: command tx timeout [ 451.127193][ T9466] can: request_module (can-proto-0) failed. [ 451.132267][ T9469] ovs-system: entered promiscuous mode [ 451.183516][ T42] audit: type=1400 audit(1787334902.062:960): avc: denied { create } for pid=9480 comm="syz.4.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 451.201791][ T42] audit: type=1400 audit(1787334902.062:961): avc: denied { ioctl } for pid=9480 comm="syz.4.933" path="socket:[32590]" dev="sockfs" ino=32590 ioctlcmd=0x89f1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 451.220234][ T42] audit: type=1400 audit(1787334902.082:962): avc: denied { ioctl } for pid=9471 comm="syz.5.929" path="socket:[32577]" dev="sockfs" ino=32577 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 451.361697][ T42] audit: type=1400 audit(1787334902.242:963): avc: denied { write } for pid=9497 comm="syz.4.936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 451.474331][ T9501] netlink: Unknown nat attribute (0) [ 451.484251][ T9501] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 451.557917][ T5889] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 451.665920][ T9498] kvm_intel: kvm [9497]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x1d9) = 0xc2d9 [ 451.677451][ T9498] kvm: kvm [9497]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x187) = 0x351b [ 451.681027][ T9498] kvm: kvm [9497]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x186) = 0x40c4 [ 451.698589][ T9498] kvm: kvm [9497]: vcpu1, guest rIP: 0x9114 Unhandled WRMSR(0x11e) = 0x5dba [ 451.718425][ T5889] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 451.728977][ T5889] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 451.734340][ T5889] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 451.741763][ T9507] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9507 comm=syz.5.937 [ 451.742845][ T5889] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.749579][ T5889] usb 7-1: Product: syz [ 451.751117][ T5889] usb 7-1: Manufacturer: syz [ 451.752668][ T5889] usb 7-1: SerialNumber: syz [ 451.762088][ T5889] cdc_mbim 7-1:1.0: skipping garbage [ 451.961634][ T9515] tmpfs: Unknown parameter 'grquota_inode_hardlimit' [ 451.962255][ T42] audit: type=1400 audit(1787334902.842:964): avc: denied { nlmsg_read } for pid=9513 comm="syz.4.939" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 451.978968][ T9492] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 452.026471][ T9520] netlink: 'syz.4.941': attribute type 2 has an invalid length. [ 452.227861][ T5788] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 452.377856][ T5788] usb 8-1: Using ep0 maxpacket: 8 [ 452.383966][ T5788] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=5b.d0 [ 452.400108][ T5788] usb 8-1: config index 0 descriptor too short (asked for 9, got 0) [ 452.403593][ T5788] usb 8-1: can't read configurations, error -22 [ 452.537996][ T5788] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 452.543205][ T42] audit: type=1400 audit(1787334903.422:965): avc: denied { setopt } for pid=9537 comm="syz.5.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 452.592619][ T9492] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 452.595441][ T5889] cdc_mbim 7-1:1.0: setting tx_max = 16384 [ 452.602469][ T5889] cdc_mbim 7-1:1.0: cdc-wdm0: USB WDM device [ 452.614367][ T5889] wwan wwan0: port wwan0mbim0 attached [ 452.636551][ T5889] cdc_mbim 7-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.2-1, CDC MBIM, 8a:a6:00:4e:a7:d5 [ 452.697829][ T5788] usb 8-1: Using ep0 maxpacket: 8 [ 452.704266][ T5788] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=5b.d0 [ 452.710686][ T5788] usb 8-1: config index 0 descriptor too short (asked for 9, got 0) [ 452.715613][ T5788] usb 8-1: can't read configurations, error -22 [ 452.725513][ T5788] usb usb8-port1: attempt power cycle [ 452.779017][ T42] audit: type=1400 audit(1787334903.662:966): avc: denied { write } for pid=9546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.801845][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 452.805051][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 452.808533][ T42] audit: type=1400 audit(1787334903.682:967): avc: denied { read write } for pid=9491 comm="syz.2.935" name="cdc-wdm0" dev="devtmpfs" ino=3227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 452.818302][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 452.818325][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 452.821692][ C3] cdc_mbim 7-1:1.0: nonzero urb status received: -71 [ 452.821713][ C3] cdc_mbim 7-1:1.0: wdm_int_callback - 0 bytes [ 452.834434][ T5889] usb 7-1: USB disconnect, device number 17 [ 452.842679][ T9492] netlink: 48 bytes leftover after parsing attributes in process `syz.2.935'. [ 452.845960][ T5889] cdc_mbim 7-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.2-1, CDC MBIM [ 452.853566][ T42] audit: type=1400 audit(1787334903.682:968): avc: denied { open } for pid=9491 comm="syz.2.935" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3227 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 452.865848][ T42] audit: type=1400 audit(1787334903.732:969): avc: denied { write } for pid=9549 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 452.959538][ T5889] wwan wwan0: port wwan0mbim0 disconnected [ 453.067890][ T5788] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 453.088254][ T5788] usb 8-1: Using ep0 maxpacket: 8 [ 453.093326][ T5788] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=5b.d0 [ 453.109184][ T5788] usb 8-1: config index 0 descriptor too short (asked for 9, got 0) [ 453.111895][ T5788] usb 8-1: can't read configurations, error -22 [ 453.237865][ T5788] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 453.260912][ T5788] usb 8-1: Using ep0 maxpacket: 8 [ 453.266994][ T5788] usb 8-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice=5b.d0 [ 453.280608][ T5788] usb 8-1: config index 0 descriptor too short (asked for 9, got 0) [ 453.283228][ T5788] usb 8-1: can't read configurations, error -22 [ 453.298072][ T5788] usb usb8-port1: unable to enumerate USB device [ 453.476717][ T9565] bridge_slave_0: left allmulticast mode [ 453.479637][ T9565] bridge_slave_0: left promiscuous mode [ 453.481708][ T9565] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.506170][ T9565] bridge_slave_1: left allmulticast mode [ 453.511952][ T9565] bridge_slave_1: left promiscuous mode [ 453.515147][ T9565] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.554655][ T9565] bond0: (slave bond_slave_0): Releasing backup interface [ 453.566577][ T9565] bond0: (slave bond_slave_1): Releasing backup interface [ 453.575008][ T9569] loop0: detected capacity change from 0 to 3904 [ 453.598983][ T9565] team0: Port device team_slave_0 removed [ 453.603314][ T9565] team0: Port device team_slave_1 removed [ 453.606463][ T9565] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.610863][ T9565] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.616307][ T9565] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 453.619864][ T9565] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 453.625503][ T9565] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 453.646279][ T9569] ldm_parse_privhead(): Database is normally 2048 bytes, it claims to be 0 bytes. [ 453.654525][ T9569] ldm_parse_privhead(): PRIVHEAD contains an invalid GUID. [ 453.664597][ T9569] ldm_validate_privheads(): Cannot find PRIVHEAD 1. [ 453.677417][ T9569] loop0: [ 453.700061][ T9565] team0: Port device vlan0 added [ 453.705883][ T9565] tipc: Started in network mode [ 453.707421][ T9565] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711 [ 453.710310][ T9565] tipc: Enabled bearer , priority 0 [ 453.754342][ T9574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.953'. [ 453.915913][ T9588] syzkaller1: entered promiscuous mode [ 453.917774][ T9588] syzkaller1: entered allmulticast mode [ 454.034210][ T9593] netlink: 'syz.4.957': attribute type 1 has an invalid length. [ 454.041388][ T9598] netlink: 68 bytes leftover after parsing attributes in process `syz.2.960'. [ 454.063227][ T9593] bond1: (slave geneve2): making interface the new active one [ 454.066361][ T9593] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 454.078933][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 454.082862][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 454.086197][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 454.091847][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 454.247800][ T5754] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 454.324830][ T9605] kvm: kvm [9604]: vcpu2, guest rIP: 0xfff0 Unhandled RDMSR(0x40000075) [ 454.407934][ T5754] usb 10-1: Using ep0 maxpacket: 8 [ 454.411272][ T5754] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 454.417630][ T5754] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 454.423193][ T5754] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 454.425792][ T9607] ================================================================== [ 454.426879][ T5754] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 454.429506][ T9607] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 454.429583][ T9607] Read of size 8 at addr ffff88802e599418 by task syz.2.963/9607 [ 454.429596][ T9607] [ 454.429608][ T9607] CPU: 3 UID: 0 PID: 9607 Comm: syz.2.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.429633][ T9607] Tainted: [L]=SOFTLOCKUP [ 454.429638][ T9607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.429656][ T9607] Call Trace: [ 454.429663][ T9607] [ 454.429672][ T9607] dump_stack_lvl+0x100/0x190 [ 454.429695][ T9607] print_report+0x13d/0x4b0 [ 454.429720][ T9607] ? __virt_addr_valid+0x239/0x430 [ 454.429745][ T9607] ? dvb_device_open+0x33f/0x3b0 [ 454.429763][ T9607] kasan_report+0xdf/0x1c0 [ 454.429792][ T9607] ? dvb_device_open+0x33f/0x3b0 [ 454.429815][ T9607] ? __pfx_dvb_device_open+0x10/0x10 [ 454.429836][ T9607] dvb_device_open+0x33f/0x3b0 [ 454.429855][ T9607] ? __pfx_dvb_device_open+0x10/0x10 [ 454.429873][ T9607] chrdev_open+0x234/0x6a0 [ 454.429893][ T9607] ? __pfx_chrdev_open+0x10/0x10 [ 454.429912][ T9607] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 454.429929][ T9607] do_dentry_open+0x6ab/0x14d0 [ 454.429946][ T9607] ? __pfx_chrdev_open+0x10/0x10 [ 454.429968][ T9607] vfs_open+0x82/0x3f0 [ 454.429980][ T9607] path_openat+0x19fa/0x2440 [ 454.430002][ T9607] ? __pfx_path_openat+0x10/0x10 [ 454.430023][ T9607] do_file_open+0x20e/0x430 [ 454.430043][ T9607] ? __pfx_do_file_open+0x10/0x10 [ 454.430067][ T9607] ? _raw_spin_unlock+0x28/0x50 [ 454.430111][ T9607] ? alloc_fd+0x471/0x7a0 [ 454.430137][ T9607] do_sys_openat2+0x10f/0x1e0 [ 454.430150][ T9607] ? __pfx_do_sys_openat2+0x10/0x10 [ 454.430162][ T9607] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 454.430185][ T9607] __x64_sys_openat+0x12d/0x210 [ 454.430198][ T9607] ? __pfx___x64_sys_openat+0x10/0x10 [ 454.430215][ T9607] do_syscall_64+0x123/0x790 [ 454.430230][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.430245][ T9607] RIP: 0033:0x7f20fd55e90e [ 454.430256][ T9607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.430270][ T9607] RSP: 002b:00007f20fe45cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 454.430287][ T9607] RAX: ffffffffffffffda RBX: 00007f20fe45d6c0 RCX: 00007f20fd55e90e [ 454.430298][ T9607] RDX: 0000000000040002 RSI: 00007f20fe45cc00 RDI: ffffffffffffff9c [ 454.430308][ T9607] RBP: 00007f20fe45cc00 R08: 0000000000000000 R09: 0000000000000000 [ 454.430317][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 454.430326][ T9607] R13: 00007f20fd826038 R14: 00007f20fd825fa0 R15: 00007fff51cf8ea8 [ 454.430338][ T9607] [ 454.430343][ T9607] [ 454.432631][ T5754] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 454.434865][ T9607] Allocated by task 1: [ 454.434892][ T9607] kasan_save_stack+0x30/0x50 [ 454.434911][ T9607] kasan_save_track+0x14/0x30 [ 454.438606][ T5754] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 454.439812][ T9607] __kasan_kmalloc+0xaa/0xb0 [ 454.439835][ T9607] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 454.439849][ T9607] dvb_register_device+0x1d6/0x1e20 [ 454.443558][ T5754] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 454.444965][ T9607] dvb_register_frontend+0x552/0x820 [ 454.444995][ T9607] vidtv_bridge_probe+0x44b/0xa30 [ 454.448469][ T5754] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 454.449041][ T9607] platform_probe+0x106/0x1d0 [ 454.449068][ T9607] really_probe+0x241/0xa60 [ 454.449077][ T9607] __driver_probe_device+0x210/0x460 [ 454.545519][ T9607] driver_probe_device+0x4a/0x140 [ 454.547107][ T9607] __driver_attach+0x21f/0x5b0 [ 454.548611][ T9607] bus_for_each_dev+0x13e/0x1d0 [ 454.550142][ T9607] bus_add_driver+0x305/0x5b0 [ 454.551627][ T9607] driver_register+0x1e2/0x360 [ 454.553160][ T9607] vidtv_bridge_init+0x52/0x80 [ 454.554679][ T9607] do_one_initcall+0x11c/0x6f0 [ 454.556201][ T9607] kernel_init_freeable+0x6ea/0x7b0 [ 454.557835][ T9607] kernel_init+0x21/0x1e0 [ 454.559185][ T9607] ret_from_fork+0x730/0xd60 [ 454.560642][ T9607] ret_from_fork_asm+0x1a/0x30 [ 454.562146][ T9607] [ 454.562913][ T9607] Freed by task 9438: [ 454.564167][ T9607] kasan_save_stack+0x30/0x50 [ 454.565666][ T9607] kasan_save_track+0x14/0x30 [ 454.567144][ T9607] kasan_save_free_info+0x3b/0x70 [ 454.568720][ T9607] __kasan_slab_free+0x5f/0x80 [ 454.570261][ T9607] kfree+0x22b/0x6c0 [ 454.571512][ T9607] dvb_device_put.part.0+0x57/0x90 [ 454.573115][ T9607] dvb_device_open+0x2ba/0x3b0 [ 454.574638][ T9607] chrdev_open+0x234/0x6a0 [ 454.576070][ T9607] do_dentry_open+0x6ab/0x14d0 [ 454.577578][ T9607] vfs_open+0x82/0x3f0 [ 454.578855][ T9607] path_openat+0x19fa/0x2440 [ 454.580290][ T9607] do_file_open+0x20e/0x430 [ 454.581722][ T9607] do_sys_openat2+0x10f/0x1e0 [ 454.583193][ T9607] __x64_sys_openat+0x12d/0x210 [ 454.584715][ T9607] do_syscall_64+0x123/0x790 [ 454.586188][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.588027][ T9607] [ 454.588790][ T9607] The buggy address belongs to the object at ffff88802e599400 [ 454.588790][ T9607] which belongs to the cache kmalloc-256 of size 256 [ 454.593108][ T9607] The buggy address is located 24 bytes inside of [ 454.593108][ T9607] freed 256-byte region [ffff88802e599400, ffff88802e599500) [ 454.597303][ T9607] [ 454.598068][ T9607] The buggy address belongs to the physical page: [ 454.600047][ T9607] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2e598 [ 454.602737][ T9607] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 454.605398][ T9607] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 454.607734][ T9607] page_type: f5(slab) [ 454.608992][ T9607] raw: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 454.611652][ T9607] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 454.614311][ T9607] head: 00fff00000000040 ffff88801c042b40 dead000000000100 dead000000000122 [ 454.616978][ T9607] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 454.619527][ T9607] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 454.622024][ T9607] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 454.624655][ T9607] page dumped because: kasan: bad access detected [ 454.626671][ T9607] page_owner tracks the page as allocated [ 454.628430][ T9607] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 38, tgid 38 (kdevtmpfs), ts 12270739822 [ 454.633900][ T9607] post_alloc_hook+0xfd/0x120 [ 454.635403][ T9607] get_page_from_freelist+0x110d/0x35b0 [ 454.637126][ T9607] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 454.638987][ T9607] new_slab+0xa5/0x640 [ 454.640271][ T9607] refill_objects+0xe3/0x410 [ 454.641742][ T9607] __pcs_replace_empty_main+0x372/0x680 [ 454.643497][ T9607] __kmalloc_noprof+0x66b/0x820 [ 454.645030][ T9607] security_inode_init_security+0x113/0x370 [ 454.646907][ T9607] shmem_mknod+0x2ce/0x480 [ 454.648314][ T9607] vfs_mknod+0x3a5/0x7f0 [ 454.649655][ T9607] devtmpfs_work_loop+0x48d/0xae4 [ 454.651288][ T9607] devtmpfsd+0x3f/0x50 [ 454.652584][ T9607] kthread+0x373/0x450 [ 454.653903][ T9607] ret_from_fork+0x730/0xd60 [ 454.655562][ T9607] ret_from_fork_asm+0x1a/0x30 [ 454.657546][ T9607] page_owner free stack trace missing [ 454.659711][ T9607] [ 454.660718][ T9607] Memory state around the buggy address: [ 454.663068][ T9607] ffff88802e599300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.665923][ T9607] ffff88802e599380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.668418][ T9607] >ffff88802e599400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 454.670917][ T9607] ^ [ 454.672432][ T9607] ffff88802e599480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 454.674949][ T9607] ffff88802e599500: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 454.677516][ T9607] ================================================================== [ 454.682800][ T9607] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 454.685023][ T9607] CPU: 3 UID: 0 PID: 9607 Comm: syz.2.963 Tainted: G L syzkaller #0 PREEMPT(full) [ 454.688349][ T9607] Tainted: [L]=SOFTLOCKUP [ 454.689970][ T9607] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 454.693047][ T9607] Call Trace: [ 454.694105][ T9607] [ 454.695116][ T9607] dump_stack_lvl+0x100/0x190 [ 454.696616][ T9607] vpanic+0x553/0x970 [ 454.697879][ T9607] ? __pfx_vpanic+0x10/0x10 [ 454.699336][ T9607] ? mark_held_locks+0x40/0x70 [ 454.700843][ T9607] ? dvb_device_open+0x33f/0x3b0 [ 454.702588][ T9607] panic+0xd1/0xe0 [ 454.704180][ T9607] ? __pfx_panic+0x10/0x10 [ 454.706087][ T9607] ? dvb_device_open+0x33f/0x3b0 [ 454.708188][ T9607] ? preempt_schedule_common+0x3c/0xb0 [ 454.710597][ T9607] check_panic_on_warn.cold+0x19/0x34 [ 454.712819][ T9607] end_report.part.0+0x3a/0x90 [ 454.714831][ T9607] kasan_report.cold+0xe/0x18 [ 454.716820][ T9607] ? dvb_device_open+0x33f/0x3b0 [ 454.718465][ T9607] ? __pfx_dvb_device_open+0x10/0x10 [ 454.720219][ T9607] dvb_device_open+0x33f/0x3b0 [ 454.721739][ T9607] ? __pfx_dvb_device_open+0x10/0x10 [ 454.723418][ T9607] chrdev_open+0x234/0x6a0 [ 454.724831][ T9607] ? __pfx_chrdev_open+0x10/0x10 [ 454.726402][ T9607] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 454.728381][ T9607] do_dentry_open+0x6ab/0x14d0 [ 454.729992][ T9607] ? __pfx_chrdev_open+0x10/0x10 [ 454.731552][ T9607] vfs_open+0x82/0x3f0 [ 454.732851][ T9607] path_openat+0x19fa/0x2440 [ 454.734332][ T9607] ? __pfx_path_openat+0x10/0x10 [ 454.735907][ T9607] do_file_open+0x20e/0x430 [ 454.737362][ T9607] ? __pfx_do_file_open+0x10/0x10 [ 454.738960][ T9607] ? _raw_spin_unlock+0x28/0x50 [ 454.740602][ T9607] ? alloc_fd+0x471/0x7a0 [ 454.741984][ T9607] do_sys_openat2+0x10f/0x1e0 [ 454.743467][ T9607] ? __pfx_do_sys_openat2+0x10/0x10 [ 454.745092][ T9607] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 454.747101][ T9607] __x64_sys_openat+0x12d/0x210 [ 454.748595][ T9607] ? __pfx___x64_sys_openat+0x10/0x10 [ 454.750293][ T9607] do_syscall_64+0x123/0x790 [ 454.751748][ T9607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.753741][ T9607] RIP: 0033:0x7f20fd55e90e [ 454.755151][ T9607] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 454.761055][ T9607] RSP: 002b:00007f20fe45cb28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 454.763599][ T9607] RAX: ffffffffffffffda RBX: 00007f20fe45d6c0 RCX: 00007f20fd55e90e [ 454.766203][ T9607] RDX: 0000000000040002 RSI: 00007f20fe45cc00 RDI: ffffffffffffff9c [ 454.768639][ T9607] RBP: 00007f20fe45cc00 R08: 0000000000000000 R09: 0000000000000000 [ 454.771082][ T9607] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 454.773539][ T9607] R13: 00007f20fd826038 R14: 00007f20fd825fa0 R15: 00007fff51cf8ea8 [ 454.776002][ T9607] [ 454.777719][ T9607] Kernel Offset: disabled [ 454.779096][ T9607] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:50:49 Registers: info registers vcpu 0 CPU#0 RAX=000001146560b3fc RBX=ffff88806a423d80 RCX=00000000000006e0 RDX=0000000000000114 RSI=ffffffff81fa9af5 RDI=ffff88801eeea580 RBP=00000069c8c63900 RSP=ffffc90000127ae8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff92000024f67 R13=0000000000000001 R14=0000000000000001 R15=ffff88806a423dc0 RIP=ffffffff81fa9b08 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ba2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa31b12eff8 CR3=000000000eb94000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5e351177b91def9b 46100a7409506e3a ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 74557dade5ee3c2e 0b8018b7c79cd05d ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e3bbe1e2928a6ac d40b25314debca29 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9194ca0c5c86d692 dad1bc49753b9010 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000dc40 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 085cc736105000f0 0000011400000114 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a3f88d610638bf4 1095aad200021a00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a85c39e00000114 0000011400000114 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000011400000000 106dc22200000114 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2224dbb8003b3ae9 28c0fdab37927750 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2ec882b7abf4fc13 f3db4ecf8fd0f727 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa31a3f25f8 00007fa31a3f25c8 00007fa31a3f2600 00007fa31a3f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000114657dd09f RBX=ffff88806a523d80 RCX=00000000000006e0 RDX=0000000000000114 RSI=ffffffff81fa9af5 RDI=ffff8880340e8000 RBP=00000069c8d16b63 RSP=ffffc900006a0da8 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=1ffff920000d41bf R13=0000000000000001 R14=0000000000000001 R15=ffff88806a523dc0 RIP=ffffffff81fa9b08 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f210cb45300 ffffffff 00c00000 GS =0000 ffff8880d5ca2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20fe45cff8 CR3=0000000026c66000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000000c DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000feffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000000001000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 0000003000000012 0004000000080024 0000000000280034 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000003ca 0000001400000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff040580030008 0006100020100006 0074da0800000219 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004010000000806 06016c9440a08280 080005e003001000 05d00300100005c0 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0302100005b00301 c010000190032d00 04801a0038000000 00001b0008000204 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 21040000002e0802 b00300080002a803 0000000025dfdbfd fffffffd08010010 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006028080280 0302800401800301 800405a003000800 0590030fffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300000000000008 ffffffce00000000 0300000000000006 0000000cffffff9e ZMM25=3acefef93acefef9 3acefef93acefef9 3acefef93acefef9 3acefef93acefef9 3acefef93acefef9 3acefef93acefef9 3acefef93acefef9 3acefef93acefef9 ZMM26=a52b40b7a52b40b7 a52b40b7a52b40b7 a52b40b7a52b40b7 a52b40b7a52b40b7 a52b40b7a52b40b7 a52b40b7a52b40b7 a52b40b7a52b40b7 a52b40b7a52b40b7 ZMM27=9a1369ef9a1369ef 9a1369ef9a1369ef 9a1369ef9a1369ef 9a1369ef9a1369ef 9a1369ef9a1369ef 9a1369ef9a1369ef 9a1369ef9a1369ef 9a1369ef9a1369ef ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=3505000035050000 3505000035050000 3505000035050000 3505000035050000 3505000035050000 3505000035050000 3505000035050000 3505000035050000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=000000000000005a RCX=0000000000000001 RDX=ffff88803ab02580 RSI=ffffffff81e9195f RDI=ffff88803ab02580 RBP=0000000000000001 RSP=ffffc90000fc7298 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff920001f8e55 R13=0000000000000200 R14=ffff888059f94b00 R15=ffffc90000fc7458 RIP=ffffffff81e91961 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5da2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20fe45cff8 CR3=000000005a1b1000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656772656d5f6f 692e7166622e6f69 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff493a99e6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff493a99e6 00007fff493a99ec ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd1c635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd1c635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd1c6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fcd1c635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000068c60 RBX=0000000000000021 RCX=ffffc900314c1000 RDX=0000000000080000 RSI=ffffffff81e9195f RDI=ffff888059f94b00 RBP=0000000000000001 RSP=ffffc90003c9f670 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000030363954 R12=1ffff92000793ed0 R13=0000000000000000 R14=ffff88803ab02580 R15=ffffc90003c9f738 RIP=ffffffff81e91968 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f20fe45d6c0 ffffffff 00c00000 GS =0000 ffff8880d5ea2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f20fd587700 CR3=000000003de72000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51cf9396 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff51cf9396 00007fff51cf939c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20fd635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20fd635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20fd6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20fd635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f20fd7f25f8 00007f20fd7f25c8 00007f20fd7f2600 00007f20fd7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000005 0000000000000000 0000000000000000 000000000000021a ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000