last executing test programs: 3.789680374s ago: executing program 0 (id=849): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x200041, 0x0) ioctl$SNDCTL_SEQ_GETOUTCOUNT(r0, 0x80045104, &(0x7f0000000080)) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000140)=@bpf_lsm={0x10, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="7910480000000000690030000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) 3.789306813s ago: executing program 0 (id=850): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)={0x10, 0x1401, 0x605, 0x137, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0x4004044}, 0x40000) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009c00aecb0000000095"], &(0x7f0000000300)='GPL\x00', 0xa}, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_clone(0x1e18ae000, 0x0, 0xfffffffffffffdbf, 0x0, 0x0, 0x0) (async, rerun: 64) r3 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x10) (rerun: 64) fcntl$setsig(r3, 0xa, 0x13) (async, rerun: 64) ioctl$F2FS_IOC_SEC_TRIM_FILE(r1, 0x4018f514, &(0x7f0000000240)={0x7, 0xffff, 0x1}) (async, rerun: 64) fcntl$setlease(r3, 0x400, 0x0) (async, rerun: 64) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000280)) (async, rerun: 64) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r5 = getpid() fcntl$setownex(r4, 0xf, &(0x7f0000000100)={0x2, r5}) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f00000001c0)=0x0) fcntl$setown(r3, 0x8, r6) (async) timer_settime(0x0, 0x0, &(0x7f0000000180)={{}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x4) (async) fcntl$setlease(r3, 0x400, 0x2) (async) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a70000000060a0b04000000000000000002000000440004802c0001800b0001006e756d67656e00001c000280080002400000000208000340000000000800014000000015140001800b00010072656a6563740000040002800900010073797a30000000000900020073797a32"], 0x98}}, 0x0) (async, rerun: 64) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628) 3.362961254s ago: executing program 0 (id=856): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa00090509"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x40) syz_usb_disconnect(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@newtfilter={0x50, 0x2c, 0xf3f, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0x8, 0xfff3}, {}, {0xf, 0x300}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_PORT_SRC_MIN={0x6, 0x57, 0x4e23}, @TCA_FLOWER_KEY_IPV6_DST={0x14, 0x10, @private0={0xfc, 0x0, '\x00', 0x1}}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_STATS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x240008c0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r6, &(0x7f0000000440)={@void, @void, @eth={@random="d06d0b76b77d", @multicast, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x3d, 0x14, 0x68, 0x0, 0xaa, 0x6, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x14}}, {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x28, 0x1, 0x9, 0x0, 0x76}}}}}}}, 0x3e) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201902761870020f0030400400001020301090c1b0001019220d10904000902bb0d41c709050102ff03000080"], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) 3.008048971s ago: executing program 3 (id=864): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x8, 0x4, 0x4, 0x4}, 0x50) (async) r1 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000300), &(0x7f0000000340)=r2}, 0x20) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000040)={0x1, 0x3, 0x0, 0x1000, &(0x7f0000fe6000/0x1000)=nil}) (async) r6 = getpid() (async) r7 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r7, 0xc01064bd, &(0x7f00000002c0)={0x0, 0x5a}) (async) kcmp(r6, r6, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async) prlimit64(0x0, 0x7, &(0x7f0000000000)={0x3, 0x3}, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe6000/0x18000)=nil, &(0x7f00000003c0)=[@text16={0x10, &(0x7f0000000280)="da1a0f38f15c00ba2000ed642e0f01c5360f01df0fc701dfdfad000f00d0baf80c0f98dbe1efbafc0c66edd9ee0f01c3", 0x30}], 0x40, 0x14, 0x0, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps\x00') read$FUSE(r8, &(0x7f0000000080)={0x2020}, 0x2020) (async) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000180)='tmpfs\x00', 0x22008d0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$FUSE_DEV_IOC_BACKING_CLOSE(r9, 0x4004e502, &(0x7f00000020c0)=0x3) read$FUSE(r9, &(0x7f0000002780)={0x2020}, 0x5ecfb203) (async) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.860879214s ago: executing program 3 (id=865): mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) chown(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mknod$loop(&(0x7f00000190c0)='./file0\x00', 0xfff, 0x1) (async) execve(&(0x7f0000019100)='./file0\x00', 0x0, 0x0) (async) chown(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) (async) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') (async) 2.860457927s ago: executing program 3 (id=866): r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x18840) ioctl$BLKTRACESTART(r0, 0x1274, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000040)=0x9) r1 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast}, [@null, @bcast, @bcast, @bcast, @bcast, @remote, @bcast, @bcast]}, &(0x7f0000000100)=0x48) setsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000140), 0x4) r2 = socket$can_raw(0x1d, 0x3, 0x1) close(r2) sendmsg$nl_generic(r1, &(0x7f00000015c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001580)={&(0x7f00000001c0)={0x13a8, 0x5, 0x4, 0x70bd2d, 0x25dfdbfc, {0x14}, [@nested={0x10b4, 0x13, 0x0, 0x1, [@generic="884e5a979926ea9bb9d58c096d888b1954069d8dfa9dd11a33a61939aa6b567ffeec9c3b7d0ae1baf1ed85dabdcdcc94471607a189083f6a4b1a06303bda87ca", @nested={0x4, 0x2c}, @nested={0x4, 0x5d}, @typed={0x14, 0x3e, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x6d}, @generic="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", @typed={0x8, 0x63, 0x0, 0x0, @u32=0x57}, @typed={0x6, 0x10b, 0x0, 0x0, @str='%\x00'}, @generic="27d53d126e56142d46b22b7bbfd92942879c7e7b921a6a2f8a5afc3cabd95d3a4d1d05b490fccfd078f6306c623570c48c6c852aa07844d05b7b354f07d9aa31"]}, @nested={0x10, 0x48, 0x0, 0x1, [@typed={0x8, 0x53, 0x0, 0x0, @u32=0x90}, @nested={0x4, 0xe1}]}, @typed={0x4d, 0xf1, 0x0, 0x0, @binary="610972ee2bb2e61d7fc2f84a0b340ae45d03c4f2b3c332c99e8f06199775a4c314b766ef83a7b9ee9f657bfabf71745d5983c03a26a5bde2bfbe1092201f995ca55d3f2b122565f9b0"}, @nested={0x8, 0x19, 0x0, 0x1, [@nested={0x4, 0xc3}]}, @generic="dec35546adcaf7f6f05e55dba034b345d5e2053586ea9dff0342d585df122322e33274df4a4962ec29b1f5a878b0fe23a2d630bdcfe344a525561f26de8cb74e60f4", @nested={0x231, 0x2f, 0x0, 0x1, [@generic="b49c5099fec6110451715b0911dc1649adbaf50a9612fea3eb2a5eebd392f083d7aff01bef96ba54f498651960a3714ff14cfe8eec1c27cac3f985d58072752c9c131c58687aa8a252586ab80eda56e26b1d07b996c26413b90fe354b45f09525b8cbdb9175da48d025a5fe8408fb014db39908dc9586b", @typed={0x8, 0x1d, 0x0, 0x0, @ipv4=@remote}, @nested={0x4, 0xad}, @nested={0x4, 0x20}, @generic="aab5bf8079f69d14625b78058ee9bbcb07cf755d30322971bb5dedc1fd611c806c0c81df20e6b5d5cbdb069d1af1623b4dabdc833cbf86346991881a2ff3c4ef1da4da0873e295c5c7272636121635b38b5bc1f85987be75f51c9fe6a44fb107a242521c60c9e5fb8c3b2f774881ee875f172baf93c53ab11d5da63d23aa61a7d1332b14a201dc348c9f62", @generic="799d887cc4fe842e2d5deccf813a4a90951f7c9b9279e87c0a7f3692f94d5482122b4cd366e931220df9767772ca4e9b247010c7a7f7898ce3363aa9e4148a19a3bb38b383d1482ee0eb04879260b06c3aeec0cc4db138264871fd17378f28a6340af646edd402f028b86177d40001feaf4e", @typed={0x14, 0x4e, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x23}}, @generic="5f6d9082e9eced7fbdbb92a827cec1308b52d392851118836fefb33bcec04c30d08a4d7afb7475227574519a65fb7e96c68ab02177d550041a2fca40022346e1e2eb57117a8aeef4df44332286ce283bf058013248c0f0c930498531e0b50f92c5833220d69d5c8ebc135c009299fac19cbb5ca97ff83040b9f4550e4717e0267def8b8b84d11af24e86a066d5b5ebfd403074a790"]}]}, 0x13a8}, 0x1, 0x0, 0x0, 0x800}, 0x41) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000001640)={'vcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001700)={'ip6gre0\x00', &(0x7f0000001680)={'syztnl0\x00', 0x0, 0x2f, 0x7, 0xa8, 0x7fffffff, 0x21, @local, @mcast1, 0x8, 0x7, 0xffff0000, 0x1}}) sendmsg$nl_route(r3, &(0x7f0000001800)={&(0x7f0000001600), 0xc, &(0x7f00000017c0)={&(0x7f0000001740)=@newneigh={0x44, 0x1c, 0x20, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r4, 0x20, 0x0, 0x14}, [@NDA_IFINDEX={0x8, 0x8, r5}, @NDA_PORT={0x6, 0x6, 0x4e21}, @NDA_VNI={0x8, 0x7, 0x1}, @NDA_MASTER={0x8, 0x9, 0x2}, @NDA_NH_ID={0x8, 0xd, 0x800}]}, 0x44}, 0x1, 0x0, 0x0, 0xd050}, 0x10) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$EBT_SO_GET_ENTRIES(r6, 0x0, 0x81, &(0x7f0000001980)={'nat\x00', 0x0, 0x3, 0xe5, [0x80000000, 0x8001, 0xfffffffffffffff7, 0xffffffffffffffff, 0x80000001, 0x8000], 0x1, &(0x7f0000001840)=[{}], &(0x7f0000001880)=""/229}, &(0x7f0000001a00)=0x78) ioctl$SG_SET_KEEP_ORPHAN(r0, 0x2287, &(0x7f0000001a40)=0x8) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001a80), 0x2, 0x0) ioctl$SIOCGETVIFCNT(r2, 0x89e0, &(0x7f0000001ac0)={0x1}) mremap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil) ioctl$BLKOPENZONE(0xffffffffffffffff, 0x40101286, &(0x7f0000001b00)={0x3, 0x3}) ioctl$VT_SETMODE(0xffffffffffffffff, 0x5602, &(0x7f0000001b40)={0x8, 0x9, 0xb0a, 0xfff, 0x6}) ioctl$SG_BLKTRACETEARDOWN(r0, 0x1276, 0x0) fsetxattr$security_selinux(r1, &(0x7f0000001b80), &(0x7f0000001bc0)='system_u:object_r:kvm_device_t:s0\x00', 0x22, 0x1) r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001c00), 0x802, 0x0) write$UHID_CREATE2(r7, &(0x7f0000001c40)={0xb, {'syz1\x00', 'syz0\x00', 'syz1\x00', 0x1000, 0x101, 0xbb9c, 0x9, 0x2, 0x742f, "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"}}, 0x1118) r8 = syz_open_dev$audion(&(0x7f0000002d80), 0x2, 0x440000) io_uring_enter(r8, 0x7833, 0x8528, 0x20, &(0x7f0000002dc0)={[0x2]}, 0x8) sendmsg$qrtr(r8, &(0x7f0000004080)={0x0, 0x0, &(0x7f0000003000)=[{&(0x7f0000002e00)="3644321e4b8a91022bb65c39a1f721d6bac375b3b80b77531beb087a048d1f868d248c8923304acc2507a6cb0aac9201e754af47a84a6169c4330318da415826e130c46df3e82c22fad449fa7f6b53bfb0c1323a5439a34e61a34fc10bb2af8ec3b222f2413c", 0x66}, {&(0x7f0000002e80)="9185c6b880a14af8dc234589f75905602a7dbd932d84c22c144c4faa6de2b65ff2f4c19e00aa5bc592bec4b68faec2c4cfb65c79ce3ad98cb6fda3140e81dd17f87c3d7b9ce3f19853598040aa5502fe06826ce2ff", 0x55}, {&(0x7f0000002f00)="5d601e62a080aca7a37e2cb5f63997672d1ac3c7c9ad9b2c972202f27b7820305cb831a4fdee584ac031729497e6ece20de194985000a3bc0a477562a014f927deff26a593446d9b7adb49012b1f1d4fdb2853770a4be47d83720b36ce7f2eceec08506d173a06f453567cfd8063fad6c0a95f3c517c3fa5bdbdd0ef3ebc138cbac5727fa2bb5570b3c66bd0b6e5a8c3c0abc585000762af4ba1aed23d6e9f201bafb5a2da", 0xa5}, {&(0x7f0000002fc0)="b871a6b758b3c8e024fc5595fb7c", 0xe}], 0x4, &(0x7f0000003040)=[{0x1010, 0x0, 0x5, "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"}], 0x1010, 0x4000004}, 0x38) r9 = accept4$phonet_pipe(r8, &(0x7f00000040c0), &(0x7f0000004100)=0x10, 0x80800) getsockopt$bt_hci(r9, 0x0, 0x2, &(0x7f0000004140)=""/121, &(0x7f00000041c0)=0x79) ioctl$IOC_PR_PREEMPT(r8, 0x401870cb, &(0x7f0000004200)={0x7, 0x401, 0x8, 0x1}) 2.632847681s ago: executing program 3 (id=867): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000f00005da1000000060a0b040000000a40000000030900010073797a30000000000900020073797a3200000000140000001100010000000000000000000700000a00"/92], 0x5c}, 0x1, 0x0, 0x0, 0x40002}, 0x10) (async) r1 = socket(0x10, 0x3, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000b40)={0xfffffffe, 0x0}, 0x8) (async) bpf$TOKEN_CREATE(0x24, &(0x7f0000000b80)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0xc, 0x0, 0x0, &(0x7f0000000a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xdc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2}, 0x94) (async) r4 = syz_io_uring_setup(0x8dd, &(0x7f0000000440)={0x0, 0x1b7, 0x80, 0x8, 0x178}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2b, 0x0, 0x0, 0x204}]}, 0x10) (async) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}) (async) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000004c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x4, [@fwd={0x5}, @volatile={0x7, 0x0, 0x0, 0x9, 0x3}, @struct={0x2, 0x3, 0x0, 0x4, 0x0, 0x3d, [{0xc, 0x2, 0x6}, {0xa, 0x1, 0x9}, {0xd, 0x2, 0x40}]}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0xc, 0x200}]}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x1}, @decl_tag={0x7, 0x0, 0x0, 0x11, 0x1, 0x4}, @union={0x9, 0x5, 0x0, 0x5, 0x1, 0x10001, [{0xf, 0x5, 0xfffffffc}, {0x7, 0x5, 0xfffffffa}, {0x4, 0x5, 0x5}, {0x4, 0x4, 0xa731}, {0x7, 0x3, 0x9}]}]}, {0x0, [0x0, 0x0]}}, &(0x7f00000005c0)=""/153, 0xe8, 0x99, 0x0, 0x8f06}, 0x28) (async) r8 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000700), 0x503b82, 0x0) (async) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/resume', 0x169a82, 0x109) sendfile(r9, r9, 0x0, 0xb) (async) r10 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip_vs\x00') preadv(r10, &(0x7f0000001a80)=[{&(0x7f00000005c0)=""/156, 0x9c}], 0x1, 0x4, 0x5) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x13, 0x5, 0x3, 0x0, 0x21008, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) (async) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000600100004012200a4e2000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001940), 0x2000cc0, r13}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r13}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000800), &(0x7f0000000840)=r3}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xac00000}, [@jmp={0x5, 0x1, 0x0, 0x8, 0x2, 0x40, 0x10}]}, &(0x7f00000002c0)='syzkaller\x00', 0x1, 0xb, &(0x7f0000000300)=""/11, 0x40f00, 0x9, '\x00', 0x0, 0x25, r7, 0x8, &(0x7f0000000680)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x5, 0xe, 0xffffffff, 0x74a}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000008c0)=[r8, r8, r10, r11, r12, r13, r14], &(0x7f0000000900)=[{0x4, 0x5, 0xd, 0xc}, {0x0, 0x3, 0xe, 0x3}, {0x0, 0x2, 0x4, 0x8}, {0x3, 0x2, 0xf, 0x8}, {0x3, 0x5, 0xf, 0x4}], 0x10, 0x7}, 0x94) (async) io_uring_enter(r4, 0x5b20, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000003140)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="08001a00", @ANYRES32=0x0, @ANYBLOB="06003800d8510000040049800400e0801a165c80f928efeadc95a00c88d81d8d36eb021f05e357ce0cc80496d946a14b733a0b75dc0e0fe7ec451e3304efabb148cf7740d92633549fc799efeffbb500bf6a3db52cb6551af05b9d13a338392b5a8a8a21422903ac79280ba0651419590f6126813018282ea112a8c697e421a55ef2aac7340a5736e3d51504d8c7f023ee72b55ab9a1a1195cf9edf01e30447d1e000ce0ec914a9a6ae232498e74bcd19c01b7086e3fec56b754ab12185fda15b9525dec81f973a9c4bc9e3346f077651b64733a62e0536a41b5d896c07d71bb8b256ff30493694ca27c654b9cdfd0721dcef4726d97a2974dc7d8e373b0a60174bb0800ee00", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b055bfae918f58d7afbadef493d7e358a95c4e330bcf2a04bc03c39d71670dab91ae5b106d1c2843ce4304ea577f9d8a1a0f848d602b9800600d00023000000f9768407cc2561184d2c4fc38602f7f8b7e4d6b3bb83f9abe034d3786433df04f18ac95f6d7d3fd067778f4450b81274918a59ba3a86b640f0b2f491691fbbf30d5968d8cac55f7faa350f658846cbf96a27bd30c15510f812038d31664a2401cbc2c9e12721a435f68c7490e6f85b04973390512b4a52fe2b005b277d1a2cb4f6609b499d2b554549f538e79bb251b0fb6cba3c2bd4ee5c2a261e87f8df3edb54c1acb4056770de689c1d57b90400e280e2bc598ed974dc397766010698def2d7772b1038bb9c17e0763cb138433f1e202f1611d0039a04209f742c012cea110be51c9b094f857d693685c3b632090db81a1ed81922c1bca49c033497098432b5cac25c7d29faaac98f1299fb1dd174a79b15697edc8badb40500dbca74b1ebf60400c1808723e75eb0d3bf1d6a19c1bcd4235f17e1b00f7a41329670f7d087b53a6ec1ea26f9b87f7bbde89b7abffc784f40bf50bafb1754a0ec5cf72e9089b5d61b9740aa1c56f016dd00d7da62d26242bfc367d029cd67bcb19fef0163b26f5a6fea1270de2665889035884d5137da65ac46509dfb7cd208e92dcf60f2faf30a5e53c8a2e83b6ee7ab4bfc225320e76ea3c10f3d8d440cebb9868fcf5dc7f513157d7b8a9322b23b544ca2131d65720f9a9279715eadf1fc70e535f868a25b760d349e142202b7ad4b65b80befeef4f8c1386507a2321365931e6facedda8269229e4815e587b5fcc9ea37e3a0a58273b4376cd8eebac1bcfc597dfab36b14aa33851094d9441bae8a044afc9b7afb784bfbd08a9db6a0f26ba9dac482446a7277903c08f0c639639658e8d4e28a3147ec1ef16f645271a41e746bdcad23b9238399ff08de694cc9746e60f02c6660e7f9bc90e77b70983b5d90a2c21537512c878c1cdbc1248969b461e35ca569d572593cd7918d45c0f6de5e4a4adef3ddad9ac2fd4795d1cb54f10427f07f7eee39c1fdecd2a177fd764774524be8c9ca3e08004c00", @ANYRES32, @ANYRES32, @ANYBLOB="08001b"], 0x18c0}}, 0x0) (async) sendmsg$IPSET_CMD_GET_BYNAME(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0xe, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004004}, 0x40000) 2.552788643s ago: executing program 3 (id=868): pipe(&(0x7f0000000680)) (async) pipe(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000ac0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r5, &(0x7f00000025c0)=[{&(0x7f00000000c0)=""/89, 0x59}], 0x1, 0xb7, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) lseek(r7, 0x7, 0x4) (async) lseek(r7, 0x7, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r9) sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010027bd7000000000000c0000001400038004000400080002000000000004000500e4da02da4e71a0b876657468305f746f5f626f6e64000000"], 0x40}, 0x1, 0x0, 0x0, 0x4c045}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x20, r8, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_AUTONEG={0x5, 0x2, 0x8}, @ETHTOOL_A_LINKMODES_HEADER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x10, 0x1, @thr={0x0, 0x0}}, 0x0) ptrace(0x10, r6) ptrace$setregs(0x1a, r6, 0xc, &(0x7f0000000000)) fanotify_init(0x200, 0x0) (async) r11 = fanotify_init(0x200, 0x0) fanotify_mark(r11, 0x1, 0x1002, r0, 0x0) mremap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x3000, 0x0, &(0x7f0000ff8000/0x3000)=nil) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) write(r3, &(0x7f0000000200)="de0c001100c1f143428e71bec06f4029daa5ad2a3c4c696b0452c11419f791fa0911457e415ba640a7e68bbc5d47e8295399bd5244604da5a2cf27b109e9303f061d15d1e7f00f63940d3b6e9ba3da730f3de3bdf454b9b8e9ddc022fbb433066662e52924cb81491c793253273179bb44fa37f2d72c183932a5236eb5560b8938744949bc2310b7861d", 0x8a) close_range(r0, r3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r14 = gettid() newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x100) (async) newfstatat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) newfstatat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) syz_open_dev$rtc(&(0x7f0000000540), 0x0, 0x2800) (async) r17 = syz_open_dev$rtc(&(0x7f0000000540), 0x0, 0x2800) sendmmsg$unix(r13, &(0x7f0000000600)=[{{&(0x7f0000000100)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000180)=[{&(0x7f00000002c0)="b0ae9dee9c75131461096db2476f2412d34ec2b20daa91e24fc4d46c8baa1200dabcf641c68bf2033c1802101cf6a56e9b236e2a2275c6fb9a5b144b8c774bd30057690dae18ab7740970a51aa20be7d2b1b9f25f15447068d3b4145c76294b6092b701bcfbda54bba491fd89ac048c0d692807ddf2dbd46d8f243113c319baf1cf61e4ae2c4f1dfa53b34536aa2b64403edf4853189a1831ef3151dad3590db151d85bd1ae01034953cb5409a88c8a45be8c6bb1c4084dc964d3a2c8213e7da7bb7595a25a00ca84b922836ecaf6e2cdc79512bbc", 0xd5}], 0x1, 0x0, 0x0, 0x24064810}}, {{0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r11, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32=r16, @ANYBLOB="07000000380000000000000001ffff0001000008", @ANYRES32=r2, @ANYRES32, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r17, @ANYRES32=r12, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r11, @ANYRES32=r0], 0x70}}], 0x2, 0x80) tee(r0, r1, 0x5e, 0x0) 2.481735016s ago: executing program 3 (id=869): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0x1a, {"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", 0x1000}}, 0x1006) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f0000000340)={&(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280), 0x3, 0x2, 0x7}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @dstopts_2292={{0x90, 0x29, 0x4, {0x4, 0xe, '\x00', [@calipso={0x7, 0x10, {0x1, 0x2, 0x9, 0x9f, [0x8]}}, @generic={0xfe}, @generic={0x80}, @calipso={0x7, 0x30, {0x1, 0xa, 0x7a, 0x8001, [0x5, 0xd, 0x4, 0x400, 0xb]}}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}, @generic={0x93, 0xf, "e80ee304ecb784ec4655260cecea14"}]}}}, @rthdr={{0x38, 0x29, 0x39, {0x1e, 0x4, 0x1, 0x0, 0x0, [@mcast1, @mcast2]}}}], 0xe0}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r4 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0) r5 = syz_open_dev$I2C(&(0x7f0000000240), 0x2, 0x1) ioctl$I2C_RDWR(r5, 0x707, &(0x7f00000004c0)={&(0x7f0000000480)=[{0x1, 0x9010, 0x1, &(0x7f0000000440)="92"}], 0x1}) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.04021688s ago: executing program 2 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="060034111400000000001d0c830efb0ab40528570866182b5f3ed4a8b927eddcfc16ee654bbfe145a102a139cb42e9e4fa3822993deb084fe6ba71b6c983caace977c96282c64e7fd9d0094433ba17ef7dbb5d513b5a05212cef000f2ae8772f2564ddb55bef1662a1498232a3e070007213a5bc77d53122b358ac611b56ff1f732d5488709c1f2ce811b15a7754045d0b7ff569e5e3df4bc94ec076ca793614508218af3a9285de5691be5cfd14187cbc8bef67"], 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1d, 0xf, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x31}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @lsm=0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, &(0x7f00000001c0)="bd6d047aac4e1c157dcbaeb89d68c83377b7b9f8813c2c283be5c55491b7a99479ddca4af95a9bb7123c850fdc8edcc94bf9e54fba3a4851559c944cb6f62654a0b7dc5cec17ef61bc2d836adbd51a0226f6a8a1e1c6c81f113edd720cd88299044e21a54eb081c7b8443bba336e886d2a79c6cffb06281d291eff8157af7ac0cbc671399de616992d8cc0b44cbb67b9566559b618592ba5ad56ed55c8802a4a3195679da5f72972471b0bc9f4067fb6ba6f2c05cafd30d4e0b27f950401b82daf21a061fb0460ff1c", &(0x7f00000002c0)=""/139}, 0x20) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0xf}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0x73190a87}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x200008c0}, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000180)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x2, 0x7, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xffffffff}) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e24, @empty}, 0x10) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x40900}, 0x0) splice(r5, 0x0, r7, 0x0, 0x10d00, 0x9) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1000000000000073, 0x1) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r9, 0xc01864c6, &(0x7f0000000580)={0x0, 0x0, 0x80800}) r10 = socket$nl_generic(0x10, 0x3, 0x10) mount(&(0x7f0000000080)=@sg0, &(0x7f00000000c0)='./cgroup\x00', &(0x7f0000000000)='ubifs\x00', 0x200000, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000500)={'pimreg\x00', &(0x7f0000000000)=@ethtool_regs={0x4, 0x0, 0xbc, "42019c7d3fdd65b5fc0d3726eb4aebb69bbc528b6bd83b4dda1d324f13364469b10655a646395567c02021ec1a4f1bacc371228d55c794385d64f377d4fad0bacee9132e78d24fbd5227aa7e1491e93bcdd3f262cba129c8a93a8254e407196eac24f4b2b53588c6c4238410b2067832f2b21444911a23c804f217616bd9314ed953c5fb9ef973b90ce68a9bfa21e42edf9365c9696231177b66edd825f69f3a3b8c97ac49b6993e5dc9071522d5453c9bb5f538292d3c281cc5c34d"}}) 862.986599ms ago: executing program 2 (id=888): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x1, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) 742.704092ms ago: executing program 2 (id=890): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0xa8}, [@ldst={0x5, 0x3, 0x0, 0x0, 0xa}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) syz_emit_ethernet(0x6a, &(0x7f0000000040)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0x48, 0x0, @wg=@cookie={0x3, 0x3, "90c7205b89c6ba79f201fb2a7ccdec3f092308bf4d1ae199", "11da928cceb7f2257669a73e935ab02244656cfe8638fefb94440b907850c38e"}}}}}}, 0x0) 742.272843ms ago: executing program 2 (id=891): r0 = fsopen(&(0x7f00000001c0)='f2fs\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) (async) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000280)={&(0x7f00000004c0)='\x00', 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000480)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000340)={0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000400)=[0x0, 0x0], &(0x7f0000000280), 0x2, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000280), &(0x7f0000000300)=[r4], &(0x7f0000000340)}) r5 = fsmount(r0, 0x0, 0x0) fchdir(r5) (async) fchdir(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000c, 0x28011, r6, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r7 = syz_open_dev$vim2m(&(0x7f0000000680), 0x8, 0x2) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0) (async) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2, 0x11, r7, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) (async) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r8 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r8, 0xc01064c8, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000300)=[0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r8, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[{}], r9, 0x0, '\x00', 0x0, 0x1}) (async) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r8, 0xc04064aa, &(0x7f0000000100)={0x0, &(0x7f00000000c0)=[{}], r9, 0x0, '\x00', 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x4, 0x9, 0x6, 0x0, r9}) (async) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r1, 0xc05064a7, &(0x7f0000000380)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[{}, {}, {}, {}], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], 0x4, 0x9, 0x6, 0x0, r9}) ftruncate(r6, 0x80796c) (async) ftruncate(r6, 0x80796c) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x200000, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') (async) r10 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') preadv(r10, &(0x7f00000001c0)=[{&(0x7f0000001140)=""/4096, 0x1000}], 0x1, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) 652.021636ms ago: executing program 1 (id=892): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000011c0)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000000301010400070000000000000200f5c304000180731dff2b5145eb5c854dc7d9e25c1db1d0a5cde7"], 0x18}}, 0x0) r2 = gettid() socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9d2319e14f088a8476f527a2779e724199fa4fe4e8fe0c9a13d5958", 0x0, 0x80fe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r5) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)=ANY=[@ANYBLOB="14030000000001000000000000000000053ab85a253600000a38000000090a010100000000000000000a000004080006400000000008000540000000020900020073797a300000000008000a40fffffffc140000001100010000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010058c6000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r7 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x404, "070000000000260bf2dadd3702bc00"}) (async) ioctl$SW_SYNC_IOC_CREATE_FENCE(r7, 0xc0285700, &(0x7f0000000080)={0x404, "070000000000260bf2dadd3702bc00"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) (async) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x8, r8}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x8, r8}) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40046201, &(0x7f0000000140)='/dev/dma_heap/system\x00') syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async) r11 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) getsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, &(0x7f0000002c00)=0x9, &(0x7f0000002c40)=0x4) (async) getsockopt$bt_BT_FLUSHABLE(r11, 0x112, 0x8, &(0x7f0000002c00)=0x9, &(0x7f0000002c40)=0x4) ioctl$DMA_BUF_SET_NAME_A(r10, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00') ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000040)=0x1) (async) ioctl$DMA_BUF_IOCTL_SYNC(r10, 0x40086200, &(0x7f0000000040)=0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) (async) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 651.620594ms ago: executing program 2 (id=893): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0x4, 0x80000) r3 = eventfd2(0xfffffffb, 0x80800) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000140)={r2, 0x6, 0x2, r3}) r4 = syz_open_dev$vim2m(&(0x7f0000000540), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000e40)={0x9909cb}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r6) sendmsg$ETHTOOL_MSG_TSINFO_GET(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) 502.826798ms ago: executing program 1 (id=894): prctl$PR_SET_THP_DISABLE(0x41, 0x1) (async, rerun: 32) prctl$PR_SET_THP_DISABLE(0x29, 0x1) (rerun: 32) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYBLOB="0000000000220000240012800e00010469703665727370616e00000010000280040012000600030007000000f1e287a8fe912ab3081ce0307b17de3e09389bc1dd24b244160934b3b78b26868deafb0433aec0a48de2b34caa489b84734122c9f7ddc738"], 0x44}}, 0x0) (async) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) pipe2$9p(&(0x7f00000003c0), 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) (async) r4 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r4, 0x4236}], 0x1, 0x0, 0x0, 0x0) (async) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) (async) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @empty, 0xa098}, {0xa, 0x4ea5, 0x9, @mcast1, 0x8}, r5, 0x8001}}, 0x48) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 32) prctl$PR_SET_THP_DISABLE(0x29, 0x0) (rerun: 32) 502.60665ms ago: executing program 2 (id=895): syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100"], 0x16) (async) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100"], 0x16) pidfd_send_signal(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_usb_connect(0x3, 0x0, 0x0, 0x0) (async) syz_usb_connect(0x3, 0x0, 0x0, 0x0) r0 = epoll_create1(0x0) r1 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r1, &(0x7f0000000100)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001180)={0x80000000}) r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @bcast, @remote, @netrom, @netrom, @remote, @remote, @null]}, &(0x7f0000000080)=0x48) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x1, @null, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @bcast, 0x892, 0x0, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000180)={0x1, @null, @netrom={'nr', 0x0}, 0x1, 'syz1\x00', @bcast, 0x892, 0x0, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="0405"], 0x7) 320.327924ms ago: executing program 1 (id=896): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c00078018000180"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x0, 0x135) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB='t\x00\x00\x00\v'], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = fsopen(&(0x7f0000000400)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000040)='source', &(0x7f0000001bc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@remote, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4e23, 0x0, 0x4e23, 0x1, 0xa, 0xa0, 0x0, 0x3a, 0x0, r4}, {0x0, 0x80, 0xf8, 0xb, 0x1, 0x2, 0x7f, 0x7f}, {0x9, 0x2, 0x10000, 0x8}, 0xffffff18, 0x6e6bb6, 0x2, 0x1, 0x2, 0x3}, {{@in=@broadcast, 0x3ff, 0x6c}, 0x2, @in=@empty, 0x34ff, 0x3, 0x1, 0x9, 0x3, 0x8, 0x5}}, 0xe8) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x1, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) write$binfmt_misc(r3, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f00000002c0)={r3, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x31]}}) 316.746144ms ago: executing program 1 (id=897): r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0xe83f, 0x18}, 0xc) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000040)="6593d381d654b3e6912d56c1ab432161944f25ad0ef9a26f0e1bf5856a625e40378a726dc38f55ed9070763eac6bbbf15dac80797e51b6e736dff2372bd7d3145fb687e8fc7d09f5f620a5be899eee730808c459d59e455501cd33e7eebd665ac9533199b91c534f4fa6a12faf7e45be04262ead151ada46e950c0a3b1ee368f7bcebe1b27871e3947dc22b0b024bfbfae7f7055d19c8f574ad8ab526b1e648a66fa36efedb23a37206be5db36b7fd0b09fddc3c554aad65e737812cc272848695c71a08be81c2734e9df1fae033"}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000140)={r0, &(0x7f0000000040)="6593d381d654b3e6912d56c1ab432161944f25ad0ef9a26f0e1bf5856a625e40378a726dc38f55ed9070763eac6bbbf15dac80797e51b6e736dff2372bd7d3145fb687e8fc7d09f5f620a5be899eee730808c459d59e455501cd33e7eebd665ac9533199b91c534f4fa6a12faf7e45be04262ead151ada46e950c0a3b1ee368f7bcebe1b27871e3947dc22b0b024bfbfae7f7055d19c8f574ad8ab526b1e648a66fa36efedb23a37206be5db36b7fd0b09fddc3c554aad65e737812cc272848695c71a08be81c2734e9df1fae033"}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x402081) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000001c0)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_BALANCE_V2(r0, 0xc4009420, &(0x7f0000000480)={0x8, 0x5, {0x6, @struct={0x8, 0x7fff}, 0x0, 0xff, 0xb8, 0x4, 0x7, 0x34d5, 0x480, @usage, 0x3, 0x9, [0xe, 0x6, 0x7, 0xb, 0x8, 0x10000]}, {0x6, @struct={0x10000, 0x6}, 0x0, 0x1, 0xfffffffffffffffb, 0x3, 0x100000000, 0xb, 0x40, @struct={0x8, 0x3}, 0x4, 0x0, [0xfff, 0x7e8, 0x6, 0x3, 0x100000001, 0x8000000000000001]}, {0xfffffffffffffff9, @struct={0xe, 0xc}, 0x0, 0x10000, 0x6, 0x9, 0xb25, 0x80, 0x1, @struct={0x2, 0x3}, 0x15, 0x401, [0xfc89, 0x1000, 0x2, 0x7, 0x6, 0x6247]}, {0x501, 0x7708, 0xa}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000880)={{r1}, r2, 0x4, @inherit={0x58, &(0x7f0000000400)={0x0, 0x2, 0xff, 0x8, {0x1, 0x7d3, 0x9, 0xe, 0x2}, [0xffffffffffffff01, 0xef8]}}, @devid=r3}) syz_open_dev$hiddev(&(0x7f0000001880), 0xe, 0x34001) (async) r4 = syz_open_dev$hiddev(&(0x7f0000001880), 0xe, 0x34001) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f00000018c0)) (async) ioctl$HIDIOCGPHYS(r4, 0x80404812, &(0x7f00000018c0)) writev(r0, &(0x7f0000001ac0)=[{&(0x7f0000001900)="29b9e8060241d29a4d811d889b22b3393ebafe49e433bf9b3d62963a4cfb716ea995a7be8d0170d35537f6d32bdd45e14b81044effd43cd1e23a9762854e734574f634bad28abf66a4f5b1c2a8e8d61aafe3ac2857bef58e05acf214af80d812210f5a2423a09073981c058dbced4d1a345a04bf49c4124a6c18470461784959925b65c8f652c6", 0x87}, {&(0x7f00000019c0)}, {&(0x7f0000001a00)="fcd2b09c6cd8b7026332956dd1bbc1d8c319354020a637d42ff2e2215e67d29e2d059f7d2550d5cf3b7fd0977213db08f5aa20248995633abd6622f8cd05180362591c8c44ed33727f547a4f6e560f69f127aa7630a38ed14ef17939e220e424082c3dc1cf640fe70b1d6015253d81978fc5a1a28dd1823e54a476cff750e97907f98ca89c456557ccd52a3e2c7a37fca884c913122dbd9531", 0x99}], 0x3) pipe2$9p(&(0x7f0000001b00), 0x0) (async) pipe2$9p(&(0x7f0000001b00)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RXATTRCREATE(r5, &(0x7f0000001b40)={0x7, 0x21, 0x1}, 0x7) (async) write$P9_RXATTRCREATE(r5, &(0x7f0000001b40)={0x7, 0x21, 0x1}, 0x7) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000001b80)={[0x2, 0x4, 0x3000, 0x40000], 0x9, 0x8, 0x1}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000001c00)={0xf, r0, 'id0\x00'}) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001ec0)={0x6, 0x8, &(0x7f0000001c80)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9000000, 0x0, 0x0, 0x0, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000001cc0)='syzkaller\x00', 0x1, 0x94, &(0x7f0000001d00)=""/148, 0x41100, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001dc0)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000001e00)={0x5, 0xb, 0x80, 0x101}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000001e40)=[r0, r0, r0, r0, r0, r0], &(0x7f0000001e80)=[{0x4, 0x3, 0x6}], 0x10, 0x8}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002240)={0x6, 0x27, &(0x7f0000001fc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffd}, [@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x2, 0x1, 0x0, r0}, @alu={0x4, 0x0, 0x0, 0xc, 0xb, 0xffffffffffffffc0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xb129}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ldst={0x0, 0x1, 0x4, 0x7, 0xb, 0x0, 0xfffffffffffffffc}, @cb_func={0x18, 0x2, 0x4, 0x0, 0x1}]}, &(0x7f0000002100)='syzkaller\x00', 0x1, 0x25, &(0x7f0000002140)=""/37, 0x41100, 0x10, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000002180)=[r0, 0xffffffffffffffff, r0, r0], &(0x7f00000021c0)=[{0x5, 0x3, 0x3, 0x8}, {0x1, 0x2, 0xb, 0x6}, {0x5, 0x5, 0x9, 0x7}, {0x2, 0x2, 0x7, 0x3}, {0x2, 0x5, 0xd}, {0x1, 0x4, 0x0, 0x9}, {0x4a, 0x1, 0xe}, {0x0, 0x2, 0xe, 0x7}]}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f80)={@map=r0, r6, 0x20, 0x2, r7, @void, @value=r8}, 0x20) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001f80)={@map=r0, r6, 0x20, 0x2, r7, @void, @value=r8}, 0x20) setsockopt$inet_group_source_req(r6, 0x0, 0x2f, &(0x7f0000002300)={0x3bdac355, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xc}}}, {{0x2, 0x4e20, @empty}}}, 0x108) socket$igmp(0x2, 0x3, 0x2) (async) r9 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_PIM(r9, 0x0, 0xcf, &(0x7f0000002440)=0x1, 0x4) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000024c0), r6) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000025c0)={'sit0\x00', &(0x7f0000002500)={'syztnl2\x00', 0x0, 0x20, 0x7, 0x200, 0x3, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x68, 0x0, 0x4, 0x0, 0x0, @loopback, @empty, {[@noop, @rr={0x7, 0x23, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @rr={0x7, 0x7, 0x27, [@loopback]}, @lsrr={0x83, 0x13, 0x7c, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast]}, @end, @rr={0x7, 0x17, 0x6a, [@empty, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x10000}, {@empty, 0x1000}, {@local, 0x8}, {@loopback, 0x4}, {@private=0xa010102, 0x9e}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f00000025c0)={'sit0\x00', &(0x7f0000002500)={'syztnl2\x00', 0x0, 0x20, 0x7, 0x200, 0x3, {{0x26, 0x4, 0x0, 0x4, 0x98, 0x68, 0x0, 0x4, 0x0, 0x0, @loopback, @empty, {[@noop, @rr={0x7, 0x23, 0xad, [@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1, @empty, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback]}, @rr={0x7, 0x7, 0x27, [@loopback]}, @lsrr={0x83, 0x13, 0x7c, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x36}, @broadcast]}, @end, @rr={0x7, 0x17, 0x6a, [@empty, @loopback, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x3f}, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp_addr={0x44, 0x2c, 0x6d, 0x1, 0xb, [{@dev={0xac, 0x14, 0x14, 0x31}, 0x10000}, {@empty, 0x1000}, {@local, 0x8}, {@loopback, 0x4}, {@private=0xa010102, 0x9e}]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000002600)={'veth0_to_bridge\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000002680)={'syztnl2\x00', &(0x7f0000002640)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x9, 0x1, {{0x6, 0x4, 0x3, 0x3a, 0x18, 0x66, 0x0, 0xd, 0x29, 0x0, @broadcast, @private=0xa010101, {[@ra={0x94, 0x4}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r6, 0x89f8, &(0x7f0000002680)={'syztnl2\x00', &(0x7f0000002640)={'ip_vti0\x00', 0x0, 0x40, 0x10, 0x9, 0x1, {{0x6, 0x4, 0x3, 0x3a, 0x18, 0x66, 0x0, 0xd, 0x29, 0x0, @broadcast, @private=0xa010101, {[@ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000026c0)={'batadv_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_EEE_GET(r6, &(0x7f0000002840)={&(0x7f0000002480), 0xc, &(0x7f0000002800)={&(0x7f0000002700)={0xf0, r10, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x20000001}, 0xc0000) pipe(&(0x7f0000002880)) ioctl$KVM_RUN(r6, 0xae80, 0x0) r15 = signalfd4(r6, &(0x7f00000028c0)={[0xffffffff]}, 0x8, 0x180800) sendmsg$TIPC_NL_KEY_SET(r15, &(0x7f0000002c00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002bc0)={&(0x7f0000002980)={0x224, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x94, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @multicast1}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xbee7}]}, @TIPC_NLA_PUBL={0x54, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xb}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x587}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xe}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}]}, @TIPC_NLA_SOCK={0x100, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xe3f}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x497}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x11}]}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xa6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x27}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xc}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xcf73}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x138e}, @TIPC_NLA_CON_FLAG={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x224}, 0x1, 0x0, 0x0, 0x20000401}, 0x8000) 252.764707ms ago: executing program 1 (id=898): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x1, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x14}, 0x4000000) 192.317016ms ago: executing program 0 (id=899): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000180)={'bond_slave_1\x00', @ifru_names='team_slave_1\x00'}) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x1000004, 0x13, r0, 0x100000000) 143.004585ms ago: executing program 0 (id=900): ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x0, 0x200}) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@code={0x1, 0x81, {"0f22e5c744240060420000c744240233d8cecbc7442406000000000f011c24668f38896810c4027958b20000000064449966baf80cb83284af80ef66bafc0c66ed66baf80cb8cc07ff8aef66bafc0cb8d4000000ef48b8f8000000000000000f23c00f2135030009000f23f8450f2244"}}], 0x81}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000000)={0x0, 0xf00}) (async) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000100)) (async, rerun: 32) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) (rerun: 32) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async, rerun: 32) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (rerun: 32) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdfad2c000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async) close(0x3) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0xe45, 0x9, 0xfffffffffffffffd, 0x10000000, 0x10000, 0xffffffffffffffff, 0xf4, 0x7ff, 0x1, 0x0, 0x400, 0x7d, 0x88, 0x0, 0x8, 0x8d], 0x41000, 0x240046}) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) (async) r6 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x5) memfd_create(&(0x7f0000000040)='security.selinux\x00\xab', 0x10) (async, rerun: 32) io_setup(0x8f0, &(0x7f0000002400)=0x0) (async, rerun: 32) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) fcntl$setpipe(r8, 0x407, 0x100000) io_submit(r7, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) 142.516038ms ago: executing program 1 (id=901): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r0, 0x0) (async) landlock_restrict_self(r0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "8b1500", 0x0, 0x0, 0xff, @private0, @remote}}}}, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x36}, @void, {@ipv6={0x86dd, @generic={0x4, 0x6, "8b1500", 0x0, 0x0, 0xff, @private0, @remote}}}}, 0x0) r1 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') (async) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000240)=@ethtool_cmd={0x28, 0x8, 0xff, 0x8, 0x6, 0x9, 0x1, 0xc, 0xae, 0x7, 0xf562, 0x800000, 0x1, 0x9, 0x12, 0x3, [0x200006, 0x5]}}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac399c64b77f8444b18345a2c8b178eeeba0cde7319a5a458fe7f5770e019efd9d52069edccedb3a758c4e657f3a792dc1921b511040000000000000003c851a80000000000", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62458c1412fdcd15e888cb0f55f861f14ecefda6b064c0bb2b66a9a522e63873dde02130510255eec7dfa1af708cdab59fbe855e7a97dcc02ab278de976666551c171eca786a359a2c3b0cbad35144ec5b069c53f90e43339845cc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121", 0x8d}, {&(0x7f0000002fc0)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b93e48ba25bb3c164ac48f1b7a7c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d5ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f8ffffffffffffffcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a18e8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f389a2db81496d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b372d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5ad21ce71dff3c73ccdd37246aaf12cb1868b1fc54e673b55dc4a829c78cd5da981e5c5c4cb727f0ebccb6e088f4780cad2e820a2a27a7eb692b08db1adcea2e848d6670a396b021cab39c8cee919c83b137ca941ec41402467ca0761a296a1f6f9f5eb00b2e02d36d118a9dacf6ab04feb82a8dbcf964bcbe1cd0bbf4ea41246644799977583045887ef5fdecaa1316464a1f634860c1b5a11b4d75be679c1227b86157e482410fc1b9ed9475df4122990c5d4ab386795d2083280ee3406c7d725296a8eb1947aaf6a05edffd70a6e190b95007105497eae5b978283c48d2269904d85c48d92219224e7c327b2a3ef3a803493ada570b3a9d9aa82502b6b56c4dde7f1f45f4d9f1ba432080da7e6fb8efe9f6b39019f7ce7e95bc7e72b6a05d22c81c09813a4bd1dd33556777", 0xde4}, {&(0x7f00000006c0)="97b13f5cf9f584c87e0e637d2ff483a311bb412cb3b03c3d9e97e435f2fceb58ff0402ed7b96244b43386c221300662028d7a012c8ae242e58359217b1c6161ea741445cf16b0c48eb18a6c72174dfb7cd1bd0f409dad5a432bed4ef58707add3ef2daafb470da2b56dd30d70769e229dc91037321d618e1eff4a176ea46d5cd4d5da97f80356e46d9e8166bf2d97210b631654ece218a2a204a1786ab5a60a881a7a294cd2f92438350e6e3ec4439ebe06133ff65b1e32b809ba0482783b563ec8e5778285da5211e5821135433053a7900"/220, 0xdc}, {&(0x7f00000007c0)="75c37714a0bada8343bceb64ccb6d95a2a37b020e0bf1f6a1de4584223a2f285aaca30a9554cd5cdc1659cb9fec462cc5c2220a7cd891ec3bad99fe3c06e15a109ec0fdb6aeeee5ef8e4bfc28e17984a3860b907d549492d47a447782b7357ea72f4b2c26512a6a33c0247b730a6182ea5a99aee25fcee07f9cb0a8059b8e853467329e4aea36cfd0e00735d37beb0f895c5688259a8935194eefd3a96d55707133a08f03e14da563160a545396b93341f41c161c93687e28a", 0xb9}, {&(0x7f0000000b00)="1b080b7a30aec939ce8e26e0cbbe37fc064ceef965fd5e3b6739c966492dbdf71c04423d8a403e56dfd224e4e55918a5e31e683fec5cc9460882a0d1628d02d51a8da997073f856e2cd00586c6e8c89c71cf8be6121b0b3a85d597a1afb0cc311f30cc26183c8e594ce5ff62661c9e32cbc9dd9a72985e9857f3bddb52382b6c27ca85d5774cf17b92e2d2097f12a8687e70f90d46381a47706a9124a2cf61b84f26aae22fd4da84ae35b93f7be9fdfdfbf33c59f5c657e9f7e81b81b786082f88af4de07808ff3c954bae", 0xcb}], 0x8, &(0x7f0000001480)}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x2, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x40) ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000000c0)={0x7ff, 0x20}) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_ZERO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x14, r6, 0xa17, 0x70bd29, 0x25dfdbfe}, 0x14}}, 0xc114) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x0, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @private=0xa010102}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @multicast2}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000a80)=@newtaction={0x60, 0x30, 0x109, 0x70bd26, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x3, 0x7, 0x1, 0x10, 0x8}}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$IPSET_CMD_DEL(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="e00000000a06010100000000000000000300000908000940800000010900020073797a310000000005000100070000000800094000000005880008800c000780080009"], 0x13a}, 0x1, 0x0, 0x0, 0x2000c880}, 0x48084) setsockopt$sock_attach_bpf(r7, 0x1, 0x32, &(0x7f0000000380), 0x4) 0s ago: executing program 0 (id=902): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000180), 0x2) r3 = memfd_create(&(0x7f0000019200)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80X\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe5\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\x1f\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\n\x16\x06\xf1\xde\xfb\x80\xdd\x9f\f\xf6\xa7\x02\xe7l\x1d\xd8\xd51\xb8\xecHJN\xe6\x9f/\xea\xb4\x80\xb2\x8b\x8c\x81!D\xe1W\xbc\x9a\xbb\xf1#\xbf\xfcWb\xe7\xba\xce\xbb\xb0]\x13\xa4\xb6\x03\xa3\x01\x8f\xc2}\xa4B`\x1cR)HB\x05*\xc2\xf4\xe7h\xa9\xa2\x1a\x80[\'\xe9>\a>\xec-G]\xd6\xac\xf1\x99\x85?\xdec\xc7S\xeb\x12-\xa3\xdfa\xc4\x80f\x05\x83\x85Y\x00H\xf0%\xb1>\x7f2\x13ko\x1f\xd1=(t\xe4\xca\\\xd8\xcf[\x95\x1e\x93\x90\v:NTT\xd8\xe9\xed/\xd2\tW\xb4\xc8\xc3\xcaR\xfa\x94^\xd2\xe6\xcc\x92:\xd6X\x84\xd7\xa0\xb4\x9c/\x19\xcdFi\xf8*\x04+e\x0e\xba,\xa8\xb8\x14.K\xf1\n\xc6\x00'/479, 0x3) fcntl$addseals(r3, 0x409, 0x7) (async) ioctl$UDMABUF_CREATE(r2, 0x40187542, &(0x7f0000000140)={r3, 0x0, 0x0, 0x4000}) (async, rerun: 64) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (rerun: 64) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000e80)) (async) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000080)={0x1, 0x0, [{0x6a4, 0xec000000, 0x9}]}) kernel console output (not intermixed with test programs): t(1769289971.350:323): avc: denied { bind } for pid=6552 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 75.496538][ T40] audit: type=1400 audit(1769289971.350:324): avc: denied { name_bind } for pid=6552 comm="syz.0.143" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 75.512132][ T40] audit: type=1400 audit(1769289971.350:325): avc: denied { node_bind } for pid=6552 comm="syz.0.143" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 75.520656][ T40] audit: type=1400 audit(1769289971.350:326): avc: denied { append } for pid=6552 comm="syz.0.143" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.589904][ T40] audit: type=1400 audit(1769289971.450:327): avc: denied { setattr } for pid=6564 comm="syz.1.146" name="PACKET" dev="sockfs" ino=11767 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.653877][ T40] audit: type=1400 audit(1769289971.520:328): avc: denied { map } for pid=6573 comm="syz.1.147" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.672034][ T40] audit: type=1400 audit(1769289971.520:329): avc: denied { call } for pid=6573 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 75.677947][ T40] audit: type=1400 audit(1769289971.520:330): avc: denied { create } for pid=6573 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.691878][ T40] audit: type=1400 audit(1769289971.520:331): avc: denied { setopt } for pid=6573 comm="syz.1.147" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 75.866032][ T6588] syz.3.148 uses obsolete (PF_INET,SOCK_PACKET) [ 75.914149][ T6591] lo: entered allmulticast mode [ 75.919878][ T6595] binder: Binderfs stats mode cannot be changed during a remount [ 75.924080][ T6591] tunl0: entered allmulticast mode [ 75.927026][ T6591] gre0: entered allmulticast mode [ 75.928895][ T6596] binder: Binderfs stats mode cannot be changed during a remount [ 75.931885][ T6591] gretap0: entered allmulticast mode [ 75.936190][ T6591] erspan0: entered allmulticast mode [ 75.941133][ T6591] ip_vti0: entered allmulticast mode [ 75.944827][ T6591] ip6_vti0: entered allmulticast mode [ 75.947454][ T6591] sit0: entered allmulticast mode [ 75.949934][ T6591] ip6tnl0: entered allmulticast mode [ 75.955938][ T6591] ip6gre0: entered allmulticast mode [ 75.958644][ T6591] syz_tun: entered allmulticast mode [ 75.960837][ T6591] ip6gretap0: entered allmulticast mode [ 75.971949][ T6591] bridge0: entered allmulticast mode [ 75.975155][ T6591] vcan0: entered allmulticast mode [ 75.977922][ T6591] bond0: entered allmulticast mode [ 75.980259][ T6591] bond_slave_0: entered allmulticast mode [ 75.987100][ T6591] bond_slave_1: entered allmulticast mode [ 75.990870][ T6591] team0: entered allmulticast mode [ 75.993695][ T6591] team_slave_0: entered allmulticast mode [ 75.996345][ T6591] team_slave_1: entered allmulticast mode [ 76.000158][ T6591] dummy0: entered allmulticast mode [ 76.005830][ T6591] nlmon0: entered allmulticast mode [ 76.009031][ T6591] caif0: entered allmulticast mode [ 76.010763][ T6591] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 76.266266][ T6628] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1 sclass=netlink_route_socket pid=6628 comm=syz.2.162 [ 76.274880][ T6620] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(11) [ 76.277090][ T6620] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 76.280796][ T6620] vhci_hcd vhci_hcd.0: Device attached [ 76.283904][ T6630] vhci_hcd: connection closed [ 76.285540][ T62] vhci_hcd vhci_hcd.3: stop threads [ 76.289017][ T62] vhci_hcd vhci_hcd.3: release socket [ 76.290670][ T62] vhci_hcd vhci_hcd.3: disconnect device [ 76.342622][ T29] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 76.507074][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.508906][ T29] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 76.509655][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 76.514688][ T29] usb 5-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 76.520856][ T29] usb 5-1: config 220 interface 0 has no altsetting 0 [ 76.526272][ T29] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 76.530412][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.534594][ T29] usb 5-1: Product: syz [ 76.536556][ T29] usb 5-1: Manufacturer: syz [ 76.538712][ T29] usb 5-1: SerialNumber: syz [ 76.792693][ T6608] xt_hashlimit: size too large, truncated to 1048576 [ 76.887106][ T6661] openvswitch: netlink: IP tunnel TTL not specified. [ 76.976696][ T6674] warning: `syz.3.166' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.019988][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.044617][ T6674] bridge_slave_0 (unregistering): left allmulticast mode [ 77.047187][ T6674] bridge_slave_0 (unregistering): left promiscuous mode [ 77.049832][ T6674] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.148869][ T6689] futex_wake_op: syz.3.168 tries to shift op by -1; fix this program [ 77.225295][ T6692] netlink: 'syz.1.169': attribute type 21 has an invalid length. [ 77.228223][ T6692] IPv6: NLM_F_CREATE should be specified when creating new route [ 77.304164][ T6698] tmpfs: Bad value for 'mpol' [ 77.324028][ T29] uvcvideo 5-1:220.0: Found UVC 0.00 device syz (8086:0b07) [ 77.327303][ T29] uvcvideo 5-1:220.0: No valid video chain found. [ 77.332533][ T29] usb 5-1: USB disconnect, device number 6 [ 77.536955][ T6704] overlay: Unknown parameter 'permit_directio' [ 78.047185][ T6719] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 78.318355][ T6733] openvswitch: netlink: Flow actions attr not present in new flow. [ 78.319055][ T6734] openvswitch: netlink: Flow actions attr not present in new flow. [ 78.417125][ T6739] __nla_validate_parse: 6 callbacks suppressed [ 78.417142][ T6739] netlink: 12 bytes leftover after parsing attributes in process `syz.3.184'. [ 78.651178][ T6748] netlink: 20 bytes leftover after parsing attributes in process `syz.2.187'. [ 78.843530][ T6757] netlink: 'syz.3.191': attribute type 3 has an invalid length. [ 78.846063][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 78.915272][ T6763] netlink: 'syz.3.193': attribute type 3 has an invalid length. [ 79.229714][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz.3.201'. [ 79.239057][ T6789] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6789 comm=syz.2.202 [ 79.391363][ T6799] faux_driver vgem: [drm] Unknown color mode 2054; guessing buffer size. [ 79.591728][ T29] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 79.765164][ T29] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 79.769645][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 79.775372][ T29] usb 8-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53 [ 79.780523][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.786855][ T29] usb 8-1: config 0 descriptor?? [ 80.005647][ T6792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.011845][ T6792] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.027776][ T29] usb 8-1: USB disconnect, device number 3 [ 80.313880][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 80.313896][ T40] audit: type=1400 audit(1769289976.180:379): avc: denied { execute } for pid=6810 comm="syz.1.208" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.511942][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.514820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.517681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.520547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.523597][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.526573][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.529369][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.533579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.536562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.539359][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 80.801077][ T40] audit: type=1400 audit(1769289976.660:380): avc: denied { ioctl } for pid=6820 comm="syz.3.211" path="socket:[12064]" dev="sockfs" ino=12064 ioctlcmd=0xf50f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.809921][ T6827] geneve2: entered allmulticast mode [ 80.817031][ T40] audit: type=1400 audit(1769289976.680:381): avc: denied { bind } for pid=6825 comm="syz.0.212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 80.864339][ T6829] netlink: 24 bytes leftover after parsing attributes in process `syz.0.213'. [ 81.056247][ T6838] netlink: 16 bytes leftover after parsing attributes in process `syz.0.216'. [ 81.344844][ T6844] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 81.413344][ T40] audit: type=1400 audit(1769289977.220:382): avc: denied { listen } for pid=6841 comm="syz.0.217" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.423822][ T40] audit: type=1400 audit(1769289977.220:383): avc: denied { accept } for pid=6841 comm="syz.0.217" lport=39160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.451248][ T40] audit: type=1400 audit(1769289977.310:384): avc: denied { map } for pid=6841 comm="syz.0.217" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 81.461234][ T40] audit: type=1400 audit(1769289977.320:385): avc: denied { execute } for pid=6841 comm="syz.0.217" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 81.821687][ T59] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 82.041695][ T59] usb 8-1: Using ep0 maxpacket: 16 [ 82.046595][ T59] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.054173][ T59] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 82.056995][ T59] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.062968][ T59] usb 8-1: config 0 descriptor?? [ 82.391616][ T29] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 82.431669][ T6027] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 82.487927][ T59] hid_parser_main: 4 callbacks suppressed [ 82.487942][ T59] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 82.493284][ T59] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 82.495535][ T59] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 82.497848][ T59] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 82.500043][ T59] mcp2221 0003:04D8:00DD.0004: unknown main item tag 0x0 [ 82.502949][ T59] mcp2221 0003:04D8:00DD.0004: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 82.507404][ T6861] trusted_key: encrypted_key: insufficient parameters specified [ 82.543255][ T29] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 82.545866][ T29] usb 5-1: config 0 has no interface number 0 [ 82.549876][ T29] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 82.553267][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.555728][ T29] usb 5-1: Product: syz [ 82.557040][ T29] usb 5-1: Manufacturer: syz [ 82.560009][ T29] usb 5-1: SerialNumber: syz [ 82.568843][ T29] usb 5-1: config 0 descriptor?? [ 82.591740][ T6027] usb 6-1: Using ep0 maxpacket: 16 [ 82.596103][ T6027] usb 6-1: config 7 has an invalid interface number: 148 but max is 0 [ 82.598830][ T6027] usb 6-1: config 7 has no interface number 0 [ 82.600771][ T6027] usb 6-1: config 7 interface 148 has no altsetting 0 [ 82.606731][ T6027] usb 6-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61 [ 82.609630][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.612421][ T6027] usb 6-1: Product: syz [ 82.613776][ T6027] usb 6-1: Manufacturer: syz [ 82.615260][ T6027] usb 6-1: SerialNumber: syz [ 82.673759][ T60] usb 8-1: USB disconnect, device number 4 [ 82.779733][ T29] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 82.786384][ T29] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 82.790607][ T29] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 82.793410][ T29] usb 5-1: media controller created [ 82.800752][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 82.823597][ T6859] binder: 6858:6859 ioctl 4018620d 0 returned -22 [ 82.827227][ T40] audit: type=1400 audit(1769289978.690:386): avc: denied { write } for pid=6858 comm="syz.1.222" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 82.828035][ T6859] binder: 6858:6859 ioctl c0306201 0 returned -14 [ 82.840981][ T6859] binder: 6858:6859 ioctl c0306201 0 returned -14 [ 82.846466][ T6027] usb 6-1: probing VID:PID(0424:012C) [ 82.849860][ T6027] usb 6-1: vub300 testing UNKNOWN EndPoint(0) 01 [ 82.852063][ T6027] usb 6-1: vub300 ignoring EndPoint(0) 01 [ 82.853882][ T6027] usb 6-1: Could not find two sets of bulk-in/out endpoint pairs [ 82.856342][ T6027] vub300 6-1:7.148: probe with driver vub300 failed with error -22 [ 82.859991][ T6027] usb 6-1: USB disconnect, device number 2 [ 82.971818][ T6035] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 82.982654][ T29] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 83.009836][ T29] usb 5-1: USB disconnect, device number 7 [ 83.131698][ T6035] usb 7-1: Using ep0 maxpacket: 8 [ 83.134768][ T6035] usb 7-1: config index 0 descriptor too short (expected 28277, got 36) [ 83.137475][ T6035] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 83.140617][ T6035] usb 7-1: config 0 has no interfaces? [ 83.142705][ T6035] usb 7-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00 [ 83.145662][ T6035] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.149933][ T6035] usb 7-1: config 0 descriptor?? [ 83.389232][ T29] usb 7-1: USB disconnect, device number 2 [ 83.437239][ T6876] netlink: 12 bytes leftover after parsing attributes in process `syz.3.230'. [ 83.517262][ T6881] netlink: 120 bytes leftover after parsing attributes in process `syz.0.232'. [ 83.831693][ T6035] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 83.991702][ T6035] usb 5-1: Using ep0 maxpacket: 8 [ 83.999300][ T6035] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 84.000470][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.2.236'. [ 84.006772][ T6035] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 84.010277][ T6035] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 84.014887][ T6035] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 84.020126][ T6035] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.026341][ T6035] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 84.030404][ T6035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.239407][ T6035] usb 5-1: GET_CAPABILITIES returned 0 [ 84.242023][ T6035] usbtmc 5-1:16.0: can't read capabilities [ 84.425121][ T6909] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 84.472918][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.476233][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.479074][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.482148][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.484884][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.487110][ T40] audit: type=1400 audit(1769289980.350:387): avc: denied { create } for pid=6903 comm="syz.2.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 84.487764][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.498769][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.501534][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.504274][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.506528][ T6912] tipc: Started in network mode [ 84.508245][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.509018][ T6912] tipc: Node identity 84e, cluster identity 4711 [ 84.511770][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.511789][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.511806][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.511822][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.511838][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.511854][ C0] usbtmc 5-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 84.512346][ T6035] usb 5-1: USB disconnect, device number 8 [ 84.514671][ T6912] tipc: Node number set to 2126 [ 84.973186][ T40] audit: type=1326 audit(1769289980.840:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6910 comm="syz.1.243" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f52d719acb9 code=0x7ffc0000 [ 85.432618][ T40] kauditd_printk_skb: 8 callbacks suppressed [ 85.432631][ T40] audit: type=1400 audit(1769289981.300:397): avc: denied { execute } for pid=6929 comm="syz.1.248" path="/dev/audio1" dev="devtmpfs" ino=1323 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 85.530777][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.249'. [ 85.623821][ T6938] loop2: detected capacity change from 0 to 7 [ 85.628320][ T6938] loop2: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 [ 85.631424][ T6938] loop2: p1 start 3909398222 is beyond EOD, truncated [ 85.634500][ T6938] loop2: p2 start 3343657203 is beyond EOD, truncated [ 85.636673][ T6938] loop2: p3 start 1602108098 is beyond EOD, truncated [ 85.638850][ T6938] loop2: p4 start 884671223 is beyond EOD, truncated [ 85.641047][ T6938] loop2: p5 start 2750369483 is beyond EOD, truncated [ 85.643319][ T6938] loop2: p6 start 3125209029 is beyond EOD, truncated [ 85.645485][ T6938] loop2: p7 start 3407020032 is beyond EOD, truncated [ 85.675081][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880343aa800: rx timeout, send abort [ 85.679935][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880343aa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 85.697170][ T40] audit: type=1400 audit(1769289981.560:398): avc: denied { read } for pid=5327 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 85.718043][ T40] audit: type=1400 audit(1769289981.560:399): avc: denied { search } for pid=5327 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.745483][ T40] audit: type=1400 audit(1769289981.560:400): avc: denied { search } for pid=5327 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.752934][ T40] audit: type=1400 audit(1769289981.560:401): avc: denied { add_name } for pid=5327 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.759401][ T40] audit: type=1400 audit(1769289981.560:402): avc: denied { create } for pid=5327 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.766086][ T40] audit: type=1400 audit(1769289981.560:403): avc: denied { append open } for pid=5327 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 85.776014][ T40] audit: type=1400 audit(1769289981.560:404): avc: denied { getattr } for pid=5327 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.131777][ T6027] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 86.133043][ T40] audit: type=1400 audit(1769289982.000:405): avc: denied { listen } for pid=6954 comm="syz.0.259" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.157049][ T40] audit: type=1400 audit(1769289982.020:406): avc: denied { read } for pid=6954 comm="syz.0.259" path="socket:[15572]" dev="sockfs" ino=15572 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.201924][ T60] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 86.282165][ T6027] usb 6-1: Using ep0 maxpacket: 32 [ 86.287348][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.292789][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.296848][ T6027] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 86.300548][ T6027] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.312058][ T6027] usb 6-1: config 0 descriptor?? [ 86.362165][ T6960] netlink: 24 bytes leftover after parsing attributes in process `syz.2.260'. [ 86.383339][ T60] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 86.389951][ T60] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 86.401652][ T60] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 86.404762][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.469942][ T6953] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 86.476715][ T60] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 86.699892][ T6038] usb 8-1: USB disconnect, device number 5 [ 86.734080][ T6027] savu 0003:1E7D:2D5A.0005: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 86.749272][ T10] cfg80211: failed to load regulatory.db [ 86.973508][ T6027] usb 6-1: USB disconnect, device number 3 [ 87.021696][ T6035] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 87.201935][ T6035] usb 5-1: Using ep0 maxpacket: 16 [ 87.211040][ T6035] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.215146][ T6035] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 87.220661][ T6035] usb 5-1: New USB device found, idVendor=046d, idProduct=c623, bcdDevice= 0.00 [ 87.225015][ T6035] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.229490][ T6035] usb 5-1: config 0 descriptor?? [ 87.437870][ T6966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.441960][ T6966] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.584900][ T6966] mmap: syz.0.262 (6966) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.595406][ T6035] usbhid 5-1:0.0: can't add hid device: -71 [ 87.604383][ T6035] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 87.611844][ T6035] usb 5-1: USB disconnect, device number 9 [ 88.199694][ T6995] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.203777][ T6995] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.361915][ T6027] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 88.494058][ T7004] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 88.532915][ T6027] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 88.538715][ T6027] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 88.542059][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.544657][ T6027] usb 6-1: Product: syz [ 88.546068][ T6027] usb 6-1: Manufacturer: syz [ 88.547615][ T6027] usb 6-1: SerialNumber: syz [ 88.553146][ T6027] usb 6-1: config 0 descriptor?? [ 88.559120][ T6027] hub 6-1:0.0: bad descriptor, ignoring hub [ 88.561325][ T6027] hub 6-1:0.0: probe with driver hub failed with error -5 [ 88.567262][ T6027] input: syz syz as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input7 [ 89.474031][ T7033] netlink: 164 bytes leftover after parsing attributes in process `syz.2.285'. [ 89.597463][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.600006][ T7036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.603342][ T7036] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.605778][ T7036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.631668][ T6027] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 89.741710][ T5979] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 89.791770][ T6027] usb 5-1: Using ep0 maxpacket: 32 [ 89.797858][ T6027] usb 5-1: New USB device found, idVendor=19d2, idProduct=02ac, bcdDevice=84.50 [ 89.801383][ T6027] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.804419][ T6027] usb 5-1: Product: syz [ 89.805908][ T6027] usb 5-1: Manufacturer: syz [ 89.807458][ T6027] usb 5-1: SerialNumber: syz [ 89.810421][ T6027] usb 5-1: config 0 descriptor?? [ 89.855389][ T7039] usb usb1: check_ctrlrecip: process 7039 (syz.2.287) requesting ep 01 but needs 81 [ 89.858401][ T7039] usb usb1: usbfs: process 7039 (syz.2.287) did not claim interface 0 before use [ 89.893255][ T5979] usb 8-1: config 8 has an invalid interface number: 177 but max is 0 [ 89.896654][ T5979] usb 8-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 89.900785][ T5979] usb 8-1: config 8 has no interface number 0 [ 89.903683][ T5979] usb 8-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 89.907907][ T5979] usb 8-1: config 8 interface 177 has no altsetting 0 [ 89.910663][ T5979] usb 8-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 89.914711][ T5979] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.924203][ T5979] ir_toy 8-1:8.177: required endpoints not found [ 90.138870][ T7029] netlink: 4 bytes leftover after parsing attributes in process `syz.3.283'. [ 90.261652][ T60] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 90.411618][ T60] usb 7-1: Using ep0 maxpacket: 16 [ 90.414774][ T60] usb 7-1: config 0 has an invalid interface number: 119 but max is 0 [ 90.417582][ T60] usb 7-1: config 0 has no interface number 0 [ 90.420316][ T60] usb 7-1: config 0 interface 119 altsetting 65 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 90.424987][ T60] usb 7-1: config 0 interface 119 has no altsetting 0 [ 90.429651][ T60] usb 7-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=26.35 [ 90.432885][ T60] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.435492][ T60] usb 7-1: Product: syz [ 90.437000][ T60] usb 7-1: Manufacturer: syz [ 90.438554][ T60] usb 7-1: SerialNumber: syz [ 90.442805][ T60] usb 7-1: config 0 descriptor?? [ 91.165093][ T6038] usb 6-1: USB disconnect, device number 4 [ 91.461687][ T6038] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 91.613223][ T6038] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.616673][ T6038] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 91.621642][ T6038] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 91.624660][ T6038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.627296][ T6038] usb 6-1: Product: syz [ 91.628844][ T6038] usb 6-1: Manufacturer: syz [ 91.630468][ T6038] usb 6-1: SerialNumber: syz [ 91.633531][ T6038] usb 6-1: config 0 descriptor?? [ 92.279293][ T6027] usb 5-1: bad CDC descriptors [ 92.292899][ T6027] usb 5-1: USB disconnect, device number 10 [ 92.342619][ T5979] usb 6-1: USB disconnect, device number 5 [ 92.390501][ T29] usb 8-1: USB disconnect, device number 6 [ 92.429678][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 92.429694][ T40] audit: type=1400 audit(1769289988.290:423): avc: denied { bind } for pid=7050 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 92.646420][ T7056] netlink: 'syz.1.291': attribute type 5 has an invalid length. [ 92.811713][ T29] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 92.931652][ T6027] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 92.951488][ T60] usb 7-1: USB disconnect, device number 3 [ 92.983149][ T29] usb 8-1: config 0 has no interfaces? [ 92.987010][ T29] usb 8-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 92.989930][ T29] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.993083][ T29] usb 8-1: Product: syz [ 92.994787][ T29] usb 8-1: Manufacturer: syz [ 92.996283][ T29] usb 8-1: SerialNumber: syz [ 93.003451][ T29] usb 8-1: config 0 descriptor?? [ 93.080465][ T40] audit: type=1400 audit(1769289988.940:424): avc: denied { setopt } for pid=7060 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 93.095083][ T6027] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 93.098236][ T6027] usb 6-1: config 0 interface 0 has no altsetting 0 [ 93.103289][ T6027] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.107220][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 93.110648][ T6027] usb 6-1: Product: syz [ 93.113779][ T6027] usb 6-1: Manufacturer: syz [ 93.115792][ T6027] usb 6-1: SerialNumber: syz [ 93.119974][ T6027] usb 6-1: config 0 descriptor?? [ 93.146242][ T6027] usb 6-1: selecting invalid altsetting 0 [ 93.218699][ T40] audit: type=1400 audit(1769289989.080:425): avc: denied { setopt } for pid=7050 comm="syz.3.292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.288197][ T7051] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.364143][ T29] usb 8-1: USB disconnect, device number 7 [ 93.511610][ T10] usb 6-1: USB disconnect, device number 6 [ 93.958060][ T7082] loop5: detected capacity change from 0 to 7 [ 93.972017][ T7082] loop5: p1 < > p4 [ 93.973893][ T7082] loop5: partition table partially beyond EOD, truncated [ 94.045402][ T6535] udevd[6535]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 94.052473][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 94.156132][ T40] audit: type=1400 audit(1769289990.020:426): avc: denied { listen } for pid=7096 comm="syz.2.306" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.217834][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 94.226596][ T7100] netlink: 8 bytes leftover after parsing attributes in process `syz.2.307'. [ 94.604748][ T7128] trusted_key: encrypted_key: insufficient parameters specified [ 94.751667][ T10] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 94.822022][ T5979] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 94.923272][ T10] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 94.932188][ T10] usb 6-1: config 0 has no interface number 0 [ 94.936096][ T10] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 94.940180][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.946253][ T10] usb 6-1: Product: syz [ 94.948882][ T10] usb 6-1: Manufacturer: syz [ 94.951059][ T10] usb 6-1: SerialNumber: syz [ 94.960279][ T10] usb 6-1: config 0 descriptor?? [ 94.973267][ T5979] usb 5-1: config 0 has no interfaces? [ 94.977771][ T5979] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 94.981210][ T5979] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.985273][ T5979] usb 5-1: Product: syz [ 94.987605][ T5979] usb 5-1: Manufacturer: syz [ 94.989348][ T5979] usb 5-1: SerialNumber: syz [ 94.994762][ T5979] usb 5-1: config 0 descriptor?? [ 95.171148][ T10] usb 6-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 95.179415][ T10] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 95.188731][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 95.193944][ T10] usb 6-1: media controller created [ 95.205960][ T5979] usb 5-1: USB disconnect, device number 11 [ 95.211174][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 95.372370][ T10] i2c i2c-2: ec100: i2c rd failed=-71 reg=33 [ 95.415095][ T10] usb 6-1: USB disconnect, device number 7 [ 96.083909][ T7185] nvme_fabrics: missing parameter 'transport=%s' [ 96.087353][ T7185] nvme_fabrics: missing parameter 'nqn=%s' [ 96.181688][ T6038] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 96.356463][ T6038] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30 [ 96.363585][ T6038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 96.369948][ T6038] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129 [ 96.380178][ T6038] usb 6-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 96.384262][ T6038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.391214][ T6038] usb 6-1: config 0 descriptor?? [ 96.393758][ T7183] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 96.618284][ T6038] usbhid 6-1:0.0: can't add hid device: -71 [ 96.620938][ T6038] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 96.631037][ T6038] usb 6-1: USB disconnect, device number 8 [ 96.725375][ T7197] openvswitch: netlink: Missing key (keys=40, expected=100) [ 96.856382][ T7201] netlink: 212344 bytes leftover after parsing attributes in process `syz.0.326'. [ 97.174696][ T7207] netlink: 'syz.0.328': attribute type 12 has an invalid length. [ 97.391427][ T7226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.333'. [ 97.396243][ T7226] netlink: 51 bytes leftover after parsing attributes in process `syz.2.333'. [ 97.420508][ T7227] binder: BINDER_SET_CONTEXT_MGR already set [ 97.427097][ T7227] binder: 7222:7227 ioctl 4018620d 200000004a80 returned -16 [ 97.921317][ T40] audit: type=1400 audit(1769289993.780:427): avc: denied { create } for pid=7231 comm="syz.3.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 98.153080][ T7238] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 98.175356][ T7238] netlink: 'syz.3.337': attribute type 10 has an invalid length. [ 98.197673][ T7238] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.206802][ T7238] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.671725][ T6038] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 98.841704][ T6038] usb 7-1: Using ep0 maxpacket: 8 [ 98.857006][ T6038] usb 7-1: config 1 interface 0 altsetting 16 bulk endpoint 0x1 has invalid maxpacket 64 [ 98.860251][ T6038] usb 7-1: config 1 interface 0 has no altsetting 0 [ 98.884169][ T6038] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 98.889875][ T6038] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.904958][ T6038] usb 7-1: Product: syz [ 98.906522][ T6038] usb 7-1: Manufacturer: syz [ 98.908152][ T6038] usb 7-1: SerialNumber: syz [ 98.926276][ T7248] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 99.045400][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 99.059197][ T7257] netlink: 16 bytes leftover after parsing attributes in process `syz.3.343'. [ 99.114947][ T7261] syzkaller0: entered promiscuous mode [ 99.115179][ T7261] syzkaller0: entered allmulticast mode [ 99.238585][ T7270] program syz.3.346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 99.398090][ T7279] xt_TCPMSS: Only works on TCP SYN packets [ 100.361231][ T7298] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 100.363426][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.367703][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 100.375645][ T7298] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(5) [ 100.377767][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 100.380951][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 100.385129][ T7298] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(7) [ 100.387223][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 100.389717][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 100.393061][ T7298] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 100.395135][ T7298] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 100.397637][ T7298] vhci_hcd vhci_hcd.0: Device attached [ 100.399867][ T7306] vhci_hcd: connection closed [ 100.399966][ T7304] vhci_hcd: connection closed [ 100.400582][ T7302] vhci_hcd: connection closed [ 100.404372][ T7299] vhci_hcd: connection closed [ 100.406820][ T1257] vhci_hcd vhci_hcd.0: stop threads [ 100.411517][ T1257] vhci_hcd vhci_hcd.0: release socket [ 100.414004][ T1257] vhci_hcd vhci_hcd.0: disconnect device [ 100.416549][ T1257] vhci_hcd vhci_hcd.0: stop threads [ 100.418762][ T1257] vhci_hcd vhci_hcd.0: release socket [ 100.421026][ T1257] vhci_hcd vhci_hcd.0: disconnect device [ 100.424517][ T1257] vhci_hcd vhci_hcd.0: stop threads [ 100.426769][ T1257] vhci_hcd vhci_hcd.0: release socket [ 100.429038][ T1257] vhci_hcd vhci_hcd.0: disconnect device [ 100.432661][ T1257] vhci_hcd vhci_hcd.0: stop threads [ 100.434914][ T1257] vhci_hcd vhci_hcd.0: release socket [ 100.437127][ T1257] vhci_hcd vhci_hcd.0: disconnect device [ 101.138725][ T7319] netlink: 28 bytes leftover after parsing attributes in process `syz.0.355'. [ 101.342679][ T6038] usb 7-1: USB disconnect, device number 4 [ 101.523860][ T40] audit: type=1400 audit(1769289997.390:428): avc: denied { name_bind } for pid=7336 comm="syz.3.363" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 101.926102][ T40] audit: type=1326 audit(1769289997.790:429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.0.367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150b79acb9 code=0x7ffc0000 [ 101.933499][ T40] audit: type=1326 audit(1769289997.790:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.0.367" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f150b79acb9 code=0x7ffc0000 [ 101.940400][ T40] audit: type=1326 audit(1769289997.790:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.0.367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150b79acb9 code=0x7ffc0000 [ 101.948317][ T40] audit: type=1326 audit(1769289997.790:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.0.367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150b79acb9 code=0x7ffc0000 [ 101.959877][ T40] audit: type=1326 audit(1769289997.790:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.0.367" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f150b79acb9 code=0x7ffc0000 [ 101.969817][ T40] audit: type=1326 audit(1769289997.790:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.0.367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150b79acb9 code=0x7ffc0000 [ 101.978114][ T40] audit: type=1326 audit(1769289997.790:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.0.367" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f150b79acb9 code=0x7ffc0000 [ 101.985923][ T29] usb 8-1: new full-speed USB device number 8 using dummy_hcd [ 101.996374][ T40] audit: type=1326 audit(1769289997.790:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7345 comm="syz.0.367" exe="/syz-executor" sig=0 arch=c000003e syscall=288 compat=0 ip=0x7f150b79acb9 code=0x7ffc0000 [ 102.173835][ T29] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 102.177204][ T29] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 102.182855][ T29] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 102.185759][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.409435][ T29] usb 8-1: usb_control_msg returned -32 [ 102.411688][ T29] usbtmc 8-1:16.0: can't read capabilities [ 102.701658][ T10] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 102.863203][ T10] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 102.865814][ T10] usb 7-1: config 0 has no interface number 0 [ 102.869552][ T10] usb 7-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 102.872614][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.875337][ T10] usb 7-1: Product: syz [ 102.876779][ T10] usb 7-1: Manufacturer: syz [ 102.878329][ T10] usb 7-1: SerialNumber: syz [ 102.881735][ T10] usb 7-1: config 0 descriptor?? [ 103.091680][ T10] usb 7-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 103.096047][ T7376] netlink: 'syz.0.377': attribute type 4 has an invalid length. [ 103.101979][ T10] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 103.105172][ T7376] netlink: 'syz.0.377': attribute type 4 has an invalid length. [ 103.105663][ T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 103.111148][ T10] usb 7-1: media controller created [ 103.117624][ T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 103.292669][ T10] i2c i2c-2: ec100: i2c rd failed=-32 reg=33 [ 103.325573][ T10] usb 7-1: USB disconnect, device number 5 [ 103.691684][ T10] usb 5-1: new full-speed USB device number 12 using dummy_hcd [ 103.843115][ T10] usb 5-1: config 8 has an invalid interface number: 177 but max is 0 [ 103.845874][ T10] usb 5-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 103.849216][ T10] usb 5-1: config 8 has no interface number 0 [ 103.851245][ T10] usb 5-1: config 8 interface 177 altsetting 9 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 103.855639][ T10] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x88 has invalid wMaxPacketSize 0 [ 103.858838][ T10] usb 5-1: config 8 interface 177 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 103.864222][ T10] usb 5-1: config 8 interface 177 has no altsetting 0 [ 103.866572][ T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 103.869837][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.873411][ T7388] ucma_write: process 261 (syz.1.381) changed security contexts after opening file descriptor, this is not allowed. [ 104.079586][ T10] usb 5-1: string descriptor 0 read error: -71 [ 104.083921][ T10] ir_toy 5-1:8.177: required endpoints not found [ 104.088723][ T10] usb 5-1: USB disconnect, device number 12 [ 104.088897][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 104.089188][ T40] audit: type=1400 audit(1769289999.950:440): avc: denied { getopt } for pid=7390 comm="syz.1.382" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.734865][ T40] audit: type=1400 audit(1769290000.600:441): avc: denied { append } for pid=7397 comm="syz.0.383" name="video1" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 104.778580][ T53] usb 8-1: USB disconnect, device number 8 [ 104.795325][ T6038] IPVS: starting estimator thread 0... [ 104.881699][ T7406] IPVS: using max 42 ests per chain, 100800 per kthread [ 104.921736][ T7410] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.925749][ T7414] loop6: detected capacity change from 0 to 524288000 [ 104.944608][ T7414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.386'. [ 105.586972][ T40] audit: type=1400 audit(1769290001.450:442): avc: denied { append } for pid=7426 comm="syz.0.392" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 105.700991][ T7429] netlink: 8 bytes leftover after parsing attributes in process `syz.0.392'. [ 106.381769][ T29] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 106.577175][ T29] usb 7-1: config 0 has an invalid interface number: 237 but max is 0 [ 106.580785][ T29] usb 7-1: config 0 has no interface number 0 [ 106.583551][ T29] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10 [ 106.587177][ T29] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 106.590586][ T29] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10 [ 106.595232][ T29] usb 7-1: config 0 interface 237 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 106.600203][ T29] usb 7-1: New USB device found, idVendor=045e, idProduct=84bd, bcdDevice=89.be [ 106.604243][ T29] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.607758][ T29] usb 7-1: Product: syz [ 106.610952][ T29] usb 7-1: Manufacturer: syz [ 106.613894][ T29] usb 7-1: SerialNumber: syz [ 106.613964][ T40] audit: type=1400 audit(1769290002.480:443): avc: denied { create } for pid=7446 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 106.621714][ T29] usb 7-1: config 0 descriptor?? [ 106.629247][ T29] xpad 7-1:0.237: probe with driver xpad failed with error -5 [ 106.645946][ T40] audit: type=1400 audit(1769290002.510:444): avc: denied { sys_admin } for pid=7446 comm="syz.3.398" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 106.657086][ T40] audit: type=1400 audit(1769290002.520:445): avc: denied { getopt } for pid=7446 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.311833][ T7458] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 107.344589][ T7458] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.355738][ T7458] vlan2: entered allmulticast mode [ 107.357454][ T7458] bond1: entered allmulticast mode [ 107.369637][ T7458] bond1: (slave gretap1): making interface the new active one [ 107.372168][ T7458] gretap1: entered allmulticast mode [ 107.375687][ T7458] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 107.577803][ T7472] netlink: 4 bytes leftover after parsing attributes in process `syz.3.407'. [ 107.725906][ T40] audit: type=1400 audit(1769290003.590:446): avc: denied { ioctl } for pid=7478 comm="syz.3.409" path="net:[4026532885]" dev="nsfs" ino=4026532885 ioctlcmd=0xb702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 108.748719][ T7489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.752206][ T7489] IPv6: NLM_F_CREATE should be set when creating new route [ 108.757199][ T7489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 108.990077][ T53] usb 7-1: USB disconnect, device number 6 [ 109.079019][ T7495] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.414'. [ 110.136523][ T7527] program syz.2.426 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 110.618815][ T7548] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 111.503647][ T7577] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 111.621670][ T6038] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 111.775885][ T6038] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.779936][ T6038] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 111.783136][ T6038] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.787478][ T6038] usb 7-1: config 0 descriptor?? [ 111.998027][ T6038] usbhid 7-1:0.0: can't add hid device: -71 [ 112.002529][ T6038] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 112.007361][ T6038] usb 7-1: USB disconnect, device number 7 [ 112.431693][ T24] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 112.581809][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 112.588591][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.596023][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 112.600876][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.607410][ T24] usb 7-1: config 0 descriptor?? [ 112.613879][ T24] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 112.628774][ T24] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 112.920102][ T24] usb 7-1: USB disconnect, device number 8 [ 112.929265][ T24] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 113.414819][ T40] audit: type=1400 audit(1769290009.280:447): avc: denied { execute } for pid=7603 comm="syz.3.446" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=18038 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 113.451790][ T40] audit: type=1400 audit(1769290009.280:448): avc: denied { read } for pid=7603 comm="syz.3.446" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 113.484682][ T40] audit: type=1400 audit(1769290009.280:449): avc: denied { open } for pid=7603 comm="syz.3.446" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 114.194514][ T7636] tipc: Enabled bearer , priority 0 [ 114.198044][ T7636] syzkaller0: entered promiscuous mode [ 114.200419][ T7636] syzkaller0: entered allmulticast mode [ 114.222997][ T7636] tipc: Resetting bearer [ 114.229087][ T7635] tipc: Resetting bearer [ 114.242278][ T7635] tipc: Disabling bearer [ 114.321752][ T24] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 114.422793][ T40] audit: type=1400 audit(1769290010.290:450): avc: denied { accept } for pid=7644 comm="syz.3.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 114.494345][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 114.496978][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 114.501354][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.508603][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.512755][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 114.517678][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 114.520921][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 114.525710][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.529837][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.534655][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 114.541698][ T7649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.465'. [ 114.545729][ T24] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 114.548445][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 114.552663][ T24] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 114.556760][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 114.561176][ T24] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 114.569219][ T24] usb 6-1: string descriptor 0 read error: -22 [ 114.571253][ T24] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 114.574991][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.589479][ T24] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 115.521703][ T40] audit: type=1326 audit(1769290011.390:451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 115.528863][ T40] audit: type=1326 audit(1769290011.390:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 115.552908][ T40] audit: type=1326 audit(1769290011.390:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 115.571937][ T40] audit: type=1326 audit(1769290011.390:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.478" exe="/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 115.578975][ T40] audit: type=1326 audit(1769290011.390:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 115.599667][ T40] audit: type=1326 audit(1769290011.390:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7694 comm="syz.3.478" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 116.151745][ T29] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 116.301823][ T29] usb 5-1: Using ep0 maxpacket: 16 [ 116.304885][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 116.314664][ T29] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 116.318244][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.321690][ T29] usb 5-1: Product: syz [ 116.324728][ T29] usb 5-1: Manufacturer: syz [ 116.326598][ T29] usb 5-1: SerialNumber: syz [ 116.332196][ T29] usb 5-1: config 0 descriptor?? [ 116.339274][ T29] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 116.343210][ T29] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 116.802629][ T7725] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 116.946720][ T29] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 116.992049][ T6038] usb 6-1: USB disconnect, device number 9 [ 117.362151][ T29] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 117.369487][ T29] em28xx 5-1:0.0: board has no eeprom [ 117.431761][ T29] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 117.435561][ T29] em28xx 5-1:0.0: dvb set to bulk mode. [ 117.445774][ T29] usb 5-1: USB disconnect, device number 13 [ 117.452816][ T29] em28xx 5-1:0.0: Disconnecting em28xx [ 117.460716][ T5979] em28xx 5-1:0.0: Binding DVB extension [ 117.504569][ T5979] em28xx 5-1:0.0: Registering input extension [ 117.511829][ T29] em28xx 5-1:0.0: Closing input extension [ 117.550485][ T29] em28xx 5-1:0.0: Freeing device [ 117.793313][ T7742] fuse: Bad value for 'fd' [ 118.271702][ T29] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 118.411888][ T5979] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 118.433377][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 118.438265][ T29] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.444928][ T29] usb 5-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 118.448948][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.452616][ T29] usb 5-1: Product: syz [ 118.454432][ T29] usb 5-1: Manufacturer: syz [ 118.456451][ T29] usb 5-1: SerialNumber: syz [ 118.462771][ T29] usb 5-1: config 0 descriptor?? [ 118.468504][ T29] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 118.565469][ T5979] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 118.569287][ T5979] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 118.572903][ T5979] usb 6-1: Product: syz [ 118.574655][ T5979] usb 6-1: Manufacturer: syz [ 118.576617][ T5979] usb 6-1: SerialNumber: syz [ 118.580794][ T5979] usb 6-1: config 0 descriptor?? [ 119.252572][ T40] kauditd_printk_skb: 514 callbacks suppressed [ 119.252616][ T40] audit: type=1800 audit(1769290015.110:971): pid=7750 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.497" name="SYSV00000000" dev="hugetlbfs" ino=3 res=0 errno=0 [ 119.270565][ T5979] usb 6-1: Firmware version (0.0) predates our first public release. [ 119.274726][ T5979] usb 6-1: Please update to version 0.2 or newer [ 119.304415][ T5979] usb 6-1: USB disconnect, device number 10 [ 119.492433][ T7763] netlink: 'syz.3.500': attribute type 2 has an invalid length. [ 119.915595][ T7777] batadv_slave_1: entered promiscuous mode [ 119.944704][ T7777] team0 (unregistering): Port device team_slave_0 removed [ 119.952483][ T7777] team0 (unregistering): Port device team_slave_1 removed [ 120.016761][ T7776] batadv_slave_1: left promiscuous mode [ 120.694785][ T40] audit: type=1400 audit(1769290016.560:972): avc: denied { bind } for pid=7791 comm="syz.1.510" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 120.942950][ T7793] netlink: 'syz.2.508': attribute type 2 has an invalid length. [ 120.974724][ T53] usb 5-1: USB disconnect, device number 14 [ 121.421698][ T53] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 121.581651][ T53] usb 5-1: Using ep0 maxpacket: 16 [ 121.584897][ T53] usb 5-1: config 7 has an invalid interface number: 148 but max is 0 [ 121.586456][ T7811] xt_TCPMSS: Only works on TCP SYN packets [ 121.592089][ T53] usb 5-1: config 7 has no interface number 0 [ 121.595368][ T53] usb 5-1: config 7 interface 148 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64 [ 121.601013][ T53] usb 5-1: config 7 interface 148 has no altsetting 0 [ 121.605523][ T53] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61 [ 121.608544][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.611160][ T53] usb 5-1: Product: syz [ 121.613121][ T53] usb 5-1: Manufacturer: syz [ 121.614688][ T53] usb 5-1: SerialNumber: syz [ 121.826269][ T53] usb 5-1: probing VID:PID(0424:012C) [ 121.828784][ T53] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 01 [ 121.830860][ T53] usb 5-1: vub300 ignoring EndPoint(0) 01 [ 121.842907][ T53] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 05 [ 121.846015][ T53] usb 5-1: vub300 ignoring EndPoint(1) 05 [ 121.851818][ T53] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 121.855331][ T53] vub300 5-1:7.148: probe with driver vub300 failed with error -22 [ 121.872269][ T53] usb 5-1: USB disconnect, device number 15 [ 122.301717][ T7821] geneve2: entered allmulticast mode [ 122.600411][ T7835] tipc: Enabling of bearer rejected, failed to enable media [ 123.451496][ T7849] syzkaller0: entered promiscuous mode [ 123.459964][ T7849] syzkaller0: entered allmulticast mode [ 124.084422][ T40] audit: type=1400 audit(1769290019.950:973): avc: denied { read } for pid=7866 comm="syz.3.533" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 124.184441][ T5979] usb 6-1: new full-speed USB device number 11 using dummy_hcd [ 124.358737][ T5979] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 124.363261][ T5979] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 124.367528][ T5979] usb 6-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 124.375327][ T5979] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.389545][ T5979] usb 6-1: config 0 descriptor?? [ 124.799661][ T5979] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 124.814839][ T5979] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 124.817091][ T5979] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 124.819348][ T5979] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 124.823605][ T5979] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 124.825863][ T5979] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 124.828071][ T5979] aureal 0003:0755:2626.0006: unknown main item tag 0x0 [ 124.849396][ T5979] aureal 0003:0755:2626.0006: hidraw1: USB HID v1.ff Device [HID 0755:2626] on usb-dummy_hcd.1-1/input0 [ 125.012604][ T7865] vlan2: entered promiscuous mode [ 125.014871][ T7865] bridge0: entered promiscuous mode [ 125.043500][ T7865] netlink: 4 bytes leftover after parsing attributes in process `syz.1.532'. [ 125.047318][ T7865] bridge_slave_1: left allmulticast mode [ 125.049787][ T7865] bridge_slave_1: left promiscuous mode [ 125.062551][ T7865] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.132726][ T7865] bridge_slave_0: left allmulticast mode [ 125.134811][ T7865] bridge_slave_0: left promiscuous mode [ 125.140250][ T7865] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.221928][ T29] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 125.381709][ T29] usb 5-1: Using ep0 maxpacket: 8 [ 125.395838][ T29] usb 5-1: config index 0 descriptor too short (expected 30, got 18) [ 125.420692][ T29] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 125.426405][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.434183][ T29] usb 5-1: Product: syz [ 125.438580][ T29] usb 5-1: Manufacturer: syz [ 125.532562][ T29] usb 5-1: SerialNumber: syz [ 125.535485][ T29] usb 5-1: config 0 descriptor?? [ 125.546193][ T29] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 125.549659][ T29] usb 5-1: setting power ON [ 125.557909][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 125.567424][ T29] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 125.578345][ T29] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 125.586802][ T29] usb 5-1: media controller created [ 125.601424][ T29] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.604727][ T5955] block nbd2: Receive control failed (result -32) [ 125.631546][ T7878] block nbd2: shutting down sockets [ 125.645851][ T29] usb 5-1: selecting invalid altsetting 6 [ 125.671660][ T29] usb 5-1: digital interface selection failed (-22) [ 125.691774][ T29] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 125.702593][ T29] usb 5-1: setting power OFF [ 125.710735][ T29] dvb-usb: bulk message failed: -22 (2/0) [ 125.734696][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 125.745500][ T29] (NULL device *): no alternate interface [ 125.787915][ T29] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 125.804156][ T7911] netlink: 68 bytes leftover after parsing attributes in process `syz.0.539'. [ 125.945115][ T6027] usb 5-1: USB disconnect, device number 16 [ 125.947238][ T40] audit: type=1400 audit(1769290021.810:974): avc: denied { watch watch_reads } for pid=7912 comm="syz.2.543" path="/137" dev="tmpfs" ino=724 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 126.581748][ T6035] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 126.613261][ T40] audit: type=1400 audit(1769290022.480:975): avc: denied { setopt } for pid=7919 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 126.741678][ T6035] usb 7-1: Using ep0 maxpacket: 16 [ 126.747835][ T6035] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 126.752173][ T6035] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 126.755794][ T6035] usb 7-1: Product: syz [ 126.757418][ T6035] usb 7-1: Manufacturer: syz [ 126.759516][ T6035] usb 7-1: SerialNumber: syz [ 126.764805][ T6035] usb 7-1: config 0 descriptor?? [ 127.127963][ T6035] usb 6-1: USB disconnect, device number 11 [ 127.147572][ T7928] netlink: 76 bytes leftover after parsing attributes in process `syz.1.548'. [ 127.942185][ T40] audit: type=1400 audit(1769290023.810:976): avc: denied { create } for pid=7943 comm="syz.0.553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 128.587252][ T7950] binder: 7947:7950 ioctl 4018620d 0 returned -22 [ 129.255400][ T6027] usb 7-1: USB disconnect, device number 9 [ 129.349845][ T7967] syzkaller0: entered promiscuous mode [ 129.352362][ T7967] syzkaller0: entered allmulticast mode [ 129.659827][ T7989] SELinux: Context ›Y7»ôj [ 129.659827][ T7989] u/$2SÙŸ»2'´ƒk€s2- vj×džÃ û#ž»œ,ÙN< [ 129.659827][ T7989] :æºE]Yù´\?˜ͼ•=ê¯Ù‹1ÛKI‹À­ßÇäî‚kÎé°{kL^‰—ù0¦óýÒë}å4nšrº }–¢ÏpįÚ¥›ÙN»wŸ‚Þyxiu?+ëþÑý½ÜH~›ö»F¦–ý1ùW¤¹÷jm  is not valid (left unmapped). [ 129.669859][ T7989] SELinux: Context *mþkXI·Æ is not valid (left unmapped). [ 129.673883][ T7989] SELinux: Context 5¶}“¨M3ëpÿX:¦Ü]žQ?×ðÖ§á¡p© is not valid (left unmapped). [ 129.680299][ T24] IPVS: starting estimator thread 0... [ 129.685116][ T7989] IPVS: lblc: FWM 3 0x00000003 - no destination available [ 129.771836][ T7990] IPVS: using max 42 ests per chain, 100800 per kthread [ 129.838260][ T40] audit: type=1400 audit(1769290025.700:977): avc: denied { connect } for pid=7986 comm="syz.0.569" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 129.891092][ T40] audit: type=1326 audit(1769290025.750:978): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 129.911703][ T40] audit: type=1326 audit(1769290025.750:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 129.920641][ T40] audit: type=1326 audit(1769290025.750:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 129.935718][ T8004] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 129.950065][ T40] audit: type=1326 audit(1769290025.750:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 129.963795][ T40] audit: type=1326 audit(1769290025.750:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 129.973467][ T40] audit: type=1326 audit(1769290025.750:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8000 comm="syz.3.575" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f719039acb9 code=0x7ffc0000 [ 130.149413][ T8015] netlink: 60 bytes leftover after parsing attributes in process `syz.0.580'. [ 130.448868][ T8025] netlink: 16 bytes leftover after parsing attributes in process `syz.1.584'. [ 130.851728][ T6035] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 131.002954][ T6035] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 131.006658][ T6035] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 131.010708][ T6035] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 131.013940][ T6035] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 131.017275][ T6035] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.035279][ T6035] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 131.074063][ T6535] udevd[6535]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 131.089114][ T6035] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 131.237794][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.241986][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.245540][ T8028] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 131.260169][ T8028] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 131.281437][ T29] usb 6-1: USB disconnect, device number 12 [ 131.521766][ T6035] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 131.686239][ T6035] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 131.690493][ T6035] usb 5-1: config 0 interface 0 has no altsetting 0 [ 131.695019][ T6035] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 131.698911][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 131.702576][ T6035] usb 5-1: Product: syz [ 131.704362][ T6035] usb 5-1: Manufacturer: syz [ 131.706450][ T6035] usb 5-1: SerialNumber: syz [ 131.712013][ T6035] usb 5-1: config 0 descriptor?? [ 131.723931][ T6035] usb 5-1: selecting invalid altsetting 0 [ 132.135520][ T6027] usb 5-1: USB disconnect, device number 17 [ 132.536621][ T8076] syzkaller0: entered promiscuous mode [ 132.538618][ T8076] syzkaller0: entered allmulticast mode [ 132.785300][ T8084] netlink: 'syz.3.606': attribute type 29 has an invalid length. [ 133.050168][ T40] kauditd_printk_skb: 451 callbacks suppressed [ 133.050180][ T40] audit: type=1400 audit(1769290028.910:1435): avc: denied { lock } for pid=8081 comm="syz.2.605" path="/dev/video2" dev="devtmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 133.350324][ T8107] syzkaller0: entered promiscuous mode [ 133.352280][ T8107] syzkaller0: entered allmulticast mode [ 133.608708][ T40] audit: type=1400 audit(1769290029.470:1436): avc: denied { rename } for pid=8114 comm="syz.2.613" name="file0" dev="tmpfs" ino=827 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 133.640031][ T8118] team_slave_0: entered promiscuous mode [ 133.642289][ T8118] team_slave_1: entered promiscuous mode [ 133.644388][ T8118] vlan2: entered promiscuous mode [ 133.646152][ T8118] team0: entered promiscuous mode [ 134.143743][ T8136] tipc: Started in network mode [ 134.145461][ T8136] tipc: Node identity 84e, cluster identity 4711 [ 134.149634][ T8136] tipc: Node number set to 2126 [ 134.866956][ T40] audit: type=1326 audit(1769290030.730:1437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.2.627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d39acb9 code=0x7ffc0000 [ 134.881741][ T40] audit: type=1326 audit(1769290030.730:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.2.627" exe="/syz-executor" sig=0 arch=c000003e syscall=246 compat=0 ip=0x7f677d39acb9 code=0x7ffc0000 [ 134.900137][ T40] audit: type=1326 audit(1769290030.730:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.2.627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d39acb9 code=0x7ffc0000 [ 134.901665][ T6038] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 134.911417][ T40] audit: type=1326 audit(1769290030.730:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.2.627" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f677d39acb9 code=0x7ffc0000 [ 134.922723][ T40] audit: type=1326 audit(1769290030.730:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.2.627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d39acb9 code=0x7ffc0000 [ 134.932810][ T40] audit: type=1326 audit(1769290030.730:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.2.627" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f677d39acb9 code=0x7ffc0000 [ 134.942736][ T40] audit: type=1326 audit(1769290030.730:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.2.627" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f677d39acb9 code=0x7ffc0000 [ 134.952458][ T40] audit: type=1326 audit(1769290030.730:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8152 comm="syz.2.627" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f677d39acb9 code=0x7ffc0000 [ 135.073315][ T6038] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 135.076555][ T6038] usb 6-1: config 0 interface 0 has no altsetting 0 [ 135.082631][ T6038] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 135.085608][ T6038] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 135.090042][ T6038] usb 6-1: Product: syz [ 135.091685][ T6038] usb 6-1: Manufacturer: syz [ 135.093261][ T6038] usb 6-1: SerialNumber: syz [ 135.097579][ T6038] usb 6-1: config 0 descriptor?? [ 135.107738][ T6038] usb 6-1: selecting invalid altsetting 0 [ 135.387478][ T8166] ptrace attach of "/syz-executor exec"[5939] was attempted by "/syz-executor exec"[8166] [ 135.483518][ T6038] usb 6-1: USB disconnect, device number 13 [ 135.841718][ T10] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 135.992782][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 135.995952][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 135.999510][ T10] usb 5-1: config 0 has no interfaces? [ 136.003444][ T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0313, bcdDevice=81.d5 [ 136.006379][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 136.008990][ T10] usb 5-1: Product: syz [ 136.010537][ T10] usb 5-1: Manufacturer: syz [ 136.012262][ T10] usb 5-1: SerialNumber: syz [ 136.015757][ T10] usb 5-1: config 0 descriptor?? [ 136.222376][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 136.228126][ T6027] usb 5-1: USB disconnect, device number 18 [ 136.910715][ T8186] netlink: set zone limit has 4 unknown bytes [ 137.080144][ T8199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8199 comm=syz.3.640 [ 137.304126][ T8222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.646'. [ 137.341424][ T8224] loop9: detected capacity change from 0 to 7 [ 137.346358][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.349601][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.352685][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.355799][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.358732][ C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.361960][ C1] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.365564][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.369288][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.372926][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.376208][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.378884][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.382081][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.384854][ C2] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.388073][ C2] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.390823][ T6535] ldm_validate_partition_table(): Disk read failed. [ 137.398006][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.402128][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.405648][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.409639][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.413403][ C3] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 137.417402][ C3] Buffer I/O error on dev loop9, logical block 0, async page read [ 137.420897][ T6535] Dev loop9: unable to read RDB block 0 [ 137.424529][ T6535] loop9: unable to read partition table [ 137.427137][ T6535] loop9: partition table beyond EOD, truncated [ 137.437616][ T8224] ldm_validate_partition_table(): Disk read failed. [ 137.441182][ T8224] Dev loop9: unable to read RDB block 0 [ 137.444454][ T8224] loop9: unable to read partition table [ 137.449398][ T8224] loop9: partition table beyond EOD, truncated [ 137.453363][ T8224] loop_reread_partitions: partition scan of loop9 (/dev/fuse) failed (rc=-5) [ 137.756595][ T8240] netlink: 'syz.2.651': attribute type 12 has an invalid length. [ 137.759165][ T8240] netlink: 'syz.2.651': attribute type 12 has an invalid length. [ 137.787580][ T8242] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.652'. [ 137.945704][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 137.947606][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.115693][ T8271] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 138.139130][ T8274] fuse: Bad value for 'fd' [ 138.148404][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 138.148415][ T40] audit: type=1400 audit(1769290034.010:1473): avc: denied { setopt } for pid=8273 comm="syz.2.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 138.461692][ T6038] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 138.570328][ T8292] batman_adv: batadv0: Adding interface: dummy0 [ 138.573061][ T8292] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 138.583593][ T8292] batman_adv: batadv0: Interface activated: dummy0 [ 138.596939][ T8292] batadv0: mtu less than device minimum [ 138.599940][ T8292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.605390][ T8292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.610575][ T8292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.611693][ T6038] usb 6-1: Using ep0 maxpacket: 32 [ 138.615979][ T8292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.619292][ T6038] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 1023 [ 138.622460][ T8292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.625850][ T6038] usb 6-1: config 1 interface 0 altsetting 2 bulk endpoint 0x3 has invalid maxpacket 16 [ 138.629452][ T8292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.633191][ T6038] usb 6-1: config 1 interface 0 has no altsetting 0 [ 138.636887][ T8292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.642947][ T8292] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 138.645278][ T6038] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 138.650082][ T6038] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 138.658682][ T40] audit: type=1400 audit(1769290034.520:1474): avc: denied { read } for pid=8296 comm="syz.2.669" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 138.659536][ T6038] usb 6-1: Product: â [ 138.671628][ T6038] usb 6-1: Manufacturer: 뭥厢莄愨é°ã’ˆá¢¦á¦´æ·½å¾›æ¥¬î»ãª¨ï¢²á–ƒåŒÅ¡ï“‹î¤–ë¿›ì˜æ‚ºä¿à²¥ê…Šì°‘ᚷ⢬嗃臺 [ 138.677112][ T6038] usb 6-1: SerialNumber: â°Š [ 138.691762][ T8278] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 138.695051][ T8278] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 138.715178][ T40] audit: type=1400 audit(1769290034.580:1475): avc: denied { getopt } for pid=8301 comm="syz.0.670" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 138.722022][ T8303] netlink: 'syz.0.670': attribute type 10 has an invalid length. [ 138.726670][ T8303] bond0: (slave wlan1): Opening slave failed [ 138.762776][ T40] audit: type=1400 audit(1769290034.630:1476): avc: denied { getopt } for pid=8304 comm="syz.0.671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 138.928261][ T8310] netlink: 4 bytes leftover after parsing attributes in process `syz.0.673'. [ 138.970107][ T8310] hsr_slave_1 (unregistering): left promiscuous mode [ 138.977940][ T6038] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -71 [ 138.983271][ T6038] usb 6-1: USB disconnect, device number 14 [ 139.547622][ T40] audit: type=1400 audit(1769290035.410:1477): avc: denied { map } for pid=8317 comm="syz.2.677" path="/dev/comedi2" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.558405][ T40] audit: type=1400 audit(1769290035.420:1478): avc: denied { execute } for pid=8317 comm="syz.2.677" path="/dev/comedi2" dev="devtmpfs" ino=1304 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.578686][ T8318] netlink: 'syz.2.677': attribute type 21 has an invalid length. [ 139.582189][ T8318] netlink: 156 bytes leftover after parsing attributes in process `syz.2.677'. [ 139.676129][ T8321] program syz.2.678 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 139.730719][ T8326] FAT-fs (nbd0): unable to read boot sector [ 139.736333][ T8324] FAT-fs (nbd0): unable to read boot sector [ 139.921915][ T40] audit: type=1400 audit(1769290035.790:1479): avc: denied { write } for pid=8343 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 140.047907][ T40] audit: type=1400 audit(1769290035.910:1480): avc: denied { connect } for pid=8343 comm="syz.2.685" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 140.050499][ T5955] Bluetooth: hci3: link tx timeout [ 140.057632][ T5955] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.062622][ T5943] Bluetooth: hci3: link tx timeout [ 140.064757][ T5943] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.142209][ T8355] netlink: 27 bytes leftover after parsing attributes in process `syz.1.689'. [ 140.200742][ T40] audit: type=1400 audit(1769290036.060:1481): avc: denied { connect } for pid=8346 comm="syz.0.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 140.276157][ T40] audit: type=1400 audit(1769290036.140:1482): avc: denied { create } for pid=8360 comm="syz.1.691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 140.569376][ T8384] netem: change failed [ 140.652803][ T8393] SELinux: policydb version 1124790143 does not match my version range 15-35 [ 140.656801][ T8393] SELinux: failed to load policy [ 140.701755][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz.3.701'. [ 140.701945][ T8395] Invalid ELF header type: 0 != 1 [ 140.747511][ T5943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 140.750661][ T5943] CPU: 0 UID: 0 PID: 5943 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 140.750681][ T5943] Tainted: [L]=SOFTLOCKUP [ 140.750686][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 140.750693][ T5943] Workqueue: hci0 hci_rx_work [ 140.750727][ T5943] Call Trace: [ 140.750732][ T5943] [ 140.750737][ T5943] dump_stack_lvl+0x100/0x190 [ 140.750756][ T5943] sysfs_warn_dup.cold+0x1c/0x28 [ 140.750771][ T5943] sysfs_create_dir_ns+0x24b/0x2b0 [ 140.750791][ T5943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 140.750806][ T5943] ? find_held_lock+0x2b/0x80 [ 140.750820][ T5943] ? kobject_add_internal+0x25f/0x930 [ 140.750835][ T5943] ? kobject_add_internal+0x25f/0x930 [ 140.750849][ T5943] ? do_raw_spin_unlock+0x145/0x1e0 [ 140.750863][ T5943] kobject_add_internal+0x2c8/0x930 [ 140.750879][ T5943] kobject_add+0x16a/0x1e0 [ 140.750892][ T5943] ? __pfx_kobject_add+0x10/0x10 [ 140.750905][ T5943] ? class_to_subsys+0x10f/0x150 [ 140.750929][ T5943] ? kobject_put+0xb9/0x640 [ 140.750941][ T5943] ? _raw_spin_unlock+0x28/0x50 [ 140.750963][ T5943] device_add+0x294/0x1950 [ 140.750976][ T5943] ? __pfx_dev_set_name+0x10/0x10 [ 140.750993][ T5943] ? __pfx_device_add+0x10/0x10 [ 140.751007][ T5943] ? mgmt_send_event_skb+0x2fb/0x460 [ 140.751024][ T5943] hci_conn_add_sysfs+0x1a3/0x260 [ 140.751040][ T5943] le_conn_complete_evt+0x11cb/0x1f40 [ 140.751056][ T5943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 140.751072][ T5943] hci_le_conn_complete_evt+0x23c/0x3a0 [ 140.751085][ T5943] ? skb_pull_data+0x15f/0x1e0 [ 140.751097][ T5943] hci_le_meta_evt+0x34a/0x5f0 [ 140.751111][ T5943] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 140.751130][ T5943] hci_event_packet+0x682/0x11c0 [ 140.751142][ T5943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 140.751156][ T5943] ? __pfx_hci_event_packet+0x10/0x10 [ 140.751169][ T5943] ? kcov_remote_start+0x374/0x660 [ 140.751185][ T5943] ? lockdep_hardirqs_on+0x78/0x100 [ 140.751201][ T5943] hci_rx_work+0x451/0xfc0 [ 140.751217][ T5943] process_one_work+0x9c2/0x1840 [ 140.751237][ T5943] ? __pfx_process_one_work+0x10/0x10 [ 140.751253][ T5943] ? assign_work+0x19c/0x250 [ 140.751266][ T5943] worker_thread+0x5da/0xe40 [ 140.751284][ T5943] ? kthread+0x17d/0x730 [ 140.751294][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 140.751306][ T5943] kthread+0x3b3/0x730 [ 140.751318][ T5943] ? __pfx_kthread+0x10/0x10 [ 140.751328][ T5943] ? ret_from_fork+0x79/0xaf0 [ 140.751340][ T5943] ? ret_from_fork+0x79/0xaf0 [ 140.751352][ T5943] ? rcu_is_watching+0x12/0xc0 [ 140.751366][ T5943] ? __pfx_kthread+0x10/0x10 [ 140.751378][ T5943] ret_from_fork+0x754/0xaf0 [ 140.751391][ T5943] ? __pfx_ret_from_fork+0x10/0x10 [ 140.751404][ T5943] ? rcu_is_watching+0x12/0xc0 [ 140.751418][ T5943] ? __switch_to+0x7b9/0x10c0 [ 140.751432][ T5943] ? __pfx_kthread+0x10/0x10 [ 140.751444][ T5943] ret_from_fork_asm+0x1a/0x30 [ 140.751461][ T5943] [ 140.751476][ T5943] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 140.847901][ T5943] Bluetooth: hci0: failed to register connection device [ 140.860649][ T8402] netlink: 104 bytes leftover after parsing attributes in process `syz.3.702'. [ 140.929957][ T8344] syz.2.685 (8344) used greatest stack depth: 20040 bytes left [ 141.069073][ T8424] netlink: 104 bytes leftover after parsing attributes in process `syz.2.709'. [ 141.175243][ T8422] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 141.339154][ T8438] bond1: (slave bond_slave_1): Device is not our slave [ 141.341192][ T8438] bond1: option active_slave: invalid value (bond_slave_1) [ 141.345812][ T8438] bond1 (unregistering): Released all slaves [ 141.402433][ T8440] xt_CT: No such helper "pptp" [ 141.511699][ T53] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 141.661662][ T53] usb 7-1: Using ep0 maxpacket: 8 [ 141.665736][ T53] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.669016][ T53] usb 7-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 141.674914][ T53] usb 7-1: config 0 interface 0 has no altsetting 0 [ 141.679091][ T53] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 141.683320][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=8 [ 141.686484][ T53] usb 7-1: SerialNumber: syz [ 141.690507][ T53] usb 7-1: config 0 descriptor?? [ 141.697743][ T53] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 141.834579][ T8453] cgroup: subsys name conflicts with all [ 141.899950][ T8456] pimreg: entered allmulticast mode [ 141.908854][ T8450] pimreg: left allmulticast mode [ 141.989240][ T8458] could not allocate digest TFM handle cryptd(blake2b-160) [ 142.101853][ T5943] Bluetooth: hci3: command 0x0406 tx timeout [ 142.187399][ T8485] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=2 sclass=netlink_xfrm_socket pid=8485 comm=syz.1.726 [ 142.234241][ T8488] netlink: 'syz.1.727': attribute type 1 has an invalid length. [ 142.577978][ T8504] QAT: Invalid ioctl -2144835806 [ 142.604625][ T8505] smc: net device bond0 applied user defined pnetid SYZ2 [ 142.609670][ T8505] netlink: 14 bytes leftover after parsing attributes in process `syz.2.712'. [ 142.646605][ T8505] smc: removing net device bond0 with user defined pnetid SYZ2 [ 142.652459][ T8505] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.656883][ T8505] bond_slave_0: left allmulticast mode [ 142.661485][ T8512] 9pnet_virtio: no channels available for device syz [ 142.665011][ T8505] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.670553][ T8505] bond_slave_1: left allmulticast mode [ 142.676553][ T8505] bond0 (unregistering): Released all slaves [ 142.829353][ T8521] netlink: 'syz.0.738': attribute type 61 has an invalid length. [ 142.892772][ T8522] syz.0.738: attempt to access beyond end of device [ 142.892772][ T8522] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 142.897153][ T8522] gfs2: error -5 reading superblock [ 143.935073][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 143.935091][ T40] audit: type=1400 audit(1769290039.800:1499): avc: denied { mounton } for pid=8554 comm="syz.0.746" path="/209/file0" dev="tmpfs" ino=1112 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 144.289887][ T10] usb 7-1: USB disconnect, device number 10 [ 144.408371][ T8567] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=24 sclass=netlink_tcpdiag_socket pid=8567 comm=syz.2.749 [ 144.445324][ T8569] netlink: 12 bytes leftover after parsing attributes in process `syz.2.750'. [ 144.449146][ T8569] netlink: 3 bytes leftover after parsing attributes in process `syz.2.750'. [ 144.487255][ T40] audit: type=1400 audit(1769290040.350:1500): avc: denied { bind } for pid=8570 comm="syz.2.751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 144.509827][ T8571] tipc: Failed to remove unknown binding: 66,1,1/2126:1755112204/1755112206 [ 144.513460][ T8571] tipc: Failed to remove unknown binding: 66,1,1/2126:1755112204/1755112206 [ 144.797826][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.801073][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.804341][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.807485][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.810702][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.814089][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.817241][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.820322][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.824804][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.827747][ T8580] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 144.864009][ T40] audit: type=1400 audit(1769290040.730:1501): avc: denied { read write } for pid=8581 comm="syz.0.754" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.871834][ T40] audit: type=1400 audit(1769290040.730:1502): avc: denied { open } for pid=8581 comm="syz.0.754" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 144.882520][ T10] hid (null): unknown global tag 0xd [ 144.885483][ T10] hid (null): global environment stack underflow [ 144.891692][ T10] hid (null): unknown global tag 0xe [ 144.893546][ T10] hid (null): unknown global tag 0xd [ 144.901725][ T10] hid (null): unknown global tag 0xe [ 144.911448][ T10] hid-generic 0007:0009:0002.0007: unknown main item tag 0x5 [ 144.915841][ T10] hid-generic 0007:0009:0002.0007: unknown main item tag 0x7 [ 144.918201][ T10] hid-generic 0007:0009:0002.0007: unknown global tag 0xd [ 144.920414][ T10] hid-generic 0007:0009:0002.0007: item 0 0 1 13 parsing failed [ 144.923405][ T10] hid-generic 0007:0009:0002.0007: probe with driver hid-generic failed with error -22 [ 144.973490][ T8585] netlink: 80 bytes leftover after parsing attributes in process `syz.0.756'. [ 145.022872][ T8587] macvlan0: entered allmulticast mode [ 145.025332][ T8587] veth1_vlan: entered allmulticast mode [ 145.031055][ T40] audit: type=1400 audit(1769290040.890:1503): avc: denied { getattr } for pid=8588 comm="syz.1.755" path="socket:[23826]" dev="sockfs" ino=23826 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 145.032738][ T8587] pim6reg: entered allmulticast mode [ 145.060956][ T8589] Invalid ELF header type: 0 != 1 [ 145.129409][ T8596] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 145.129434][ T8597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.760'. [ 145.270267][ T40] audit: type=1326 audit(1769290041.130:1504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8606 comm="syz.0.762" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f150b79acb9 code=0x0 [ 145.964537][ T40] audit: type=1400 audit(1769290041.830:1505): avc: denied { getopt } for pid=8609 comm="syz.1.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 146.021635][ T8613] xt_l2tp: wrong L2TP version: 0 [ 146.024801][ T8613] netlink: 276 bytes leftover after parsing attributes in process `syz.1.764'. [ 146.110064][ T40] audit: type=1400 audit(1769290041.970:1506): avc: denied { append } for pid=8619 comm="syz.1.766" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 146.111380][ T8620] netlink: 24 bytes leftover after parsing attributes in process `syz.1.766'. [ 146.154433][ T8620] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8620 comm=syz.1.766 [ 146.206044][ T40] audit: type=1400 audit(1769290042.070:1507): avc: denied { add_name } for pid=8623 comm="syz.1.768" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 146.213602][ T40] audit: type=1400 audit(1769290042.080:1508): avc: denied { create } for pid=8623 comm="syz.1.768" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 146.471726][ T6027] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 146.520625][ T8631] bond0: Error: Cannot enslave bond to itself. [ 146.528509][ T8631] netlink: 'syz.3.771': attribute type 11 has an invalid length. [ 146.531895][ T8631] netlink: 199788 bytes leftover after parsing attributes in process `syz.3.771'. [ 146.592654][ T8633] netlink: 'syz.3.772': attribute type 10 has an invalid length. [ 146.596491][ T8633] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.597210][ T8635] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 146.601401][ T8635] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 146.605056][ T8635] vhci_hcd vhci_hcd.0: Device attached [ 146.608540][ T8636] usbip_core: unknown command [ 146.609233][ T8634] netlink: 'syz.3.772': attribute type 1 has an invalid length. [ 146.610146][ T8636] vhci_hcd: unknown pdu 0 [ 146.612540][ T8633] netlink: 28 bytes leftover after parsing attributes in process `syz.3.772'. [ 146.616675][ T8633] macsec1: entered promiscuous mode [ 146.616726][ T8636] usbip_core: unknown command [ 146.618889][ T8633] macsec1: entered allmulticast mode [ 146.621641][ T46] vhci_hcd vhci_hcd.3: stop threads [ 146.623110][ T6027] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 146.623126][ T6027] usb 6-1: config 0 has no interface number 0 [ 146.623139][ T6027] usb 6-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 146.623156][ T6027] usb 6-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 146.623171][ T6027] usb 6-1: config 0 interface 48 has no altsetting 0 [ 146.624217][ T6027] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 146.625289][ T46] vhci_hcd vhci_hcd.3: release socket [ 146.625311][ T46] vhci_hcd vhci_hcd.3: disconnect device [ 146.646480][ T24] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 146.649157][ T6027] usb 6-1: config 0 has no interface number 0 [ 146.651363][ T6027] usb 6-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 146.655088][ T6027] usb 6-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 146.659240][ T6027] usb 6-1: config 0 interface 48 has no altsetting 0 [ 146.662524][ T6027] usb 6-1: config 0 has an invalid interface number: 48 but max is 0 [ 146.665092][ T6027] usb 6-1: config 0 has no interface number 0 [ 146.667066][ T6027] usb 6-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30 [ 146.672340][ T6027] usb 6-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48 [ 146.677085][ T6027] usb 6-1: config 0 interface 48 has no altsetting 0 [ 146.681050][ T6027] usb 6-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 146.684500][ T6027] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 146.687235][ T6027] usb 6-1: Product: syz [ 146.688587][ T6027] usb 6-1: Manufacturer: syz [ 146.690153][ T6027] usb 6-1: SerialNumber: syz [ 146.693424][ T6027] usb 6-1: config 0 descriptor?? [ 146.752872][ T8642] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=8642 comm=syz.3.774 [ 146.753692][ T8643] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1281 sclass=netlink_route_socket pid=8643 comm=syz.3.774 [ 146.791739][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 146.798144][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 146.801114][ T24] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 146.804940][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.808224][ T8645] genirq: Flags mismatch irq 5. 00200000 (das16m1) vs. 00200000 (pcl812) [ 146.815528][ T24] usb 5-1: config 0 descriptor?? [ 146.898646][ T8624] ======================================================= [ 146.898646][ T8624] WARNING: The mand mount option has been deprecated and [ 146.898646][ T8624] and is ignored by this kernel. Remove the mand [ 146.898646][ T8624] option from the mount to silence this warning. [ 146.898646][ T8624] ======================================================= [ 146.926572][ T8624] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 146.934510][ T6027] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 146.938681][ T6027] dvb-usb: bulk message failed: -22 (2/0) [ 146.944545][ T6027] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 146.949131][ T6027] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 146.951794][ T6027] usb 6-1: media controller created [ 146.962023][ T6027] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 146.971468][ T8652] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0) [ 146.972101][ T6027] cxusb: set interface failed [ 146.975996][ T6027] dvb-usb: bulk message failed: -22 (1/0) [ 146.995743][ T8652] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8652 comm=syz.3.778 [ 146.997662][ T6027] DVB: Unable to find symbol mt352_attach() [ 147.001934][ T6027] dvb-usb: bulk message failed: -22 (5/0) [ 147.003977][ T6027] zl10353_read_register: readreg error (reg=127, ret==-121) [ 147.006602][ T6027] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 147.063525][ T6027] rc_core: IR keymap rc-dvico-mce not found [ 147.065507][ T6027] Registered IR keymap rc-empty [ 147.070523][ T6027] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0 [ 147.075554][ T6027] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.1/usb6/6-1/rc/rc0/input11 [ 147.081053][ T6027] dvb-usb: schedule remote query interval to 100 msecs. [ 147.083418][ T6027] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 147.089665][ T6027] usb 6-1: USB disconnect, device number 15 [ 147.118795][ T6027] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 147.228175][ T24] mcp2221 0003:04D8:00DD.0008: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 147.269520][ T8665] netlink: 'syz.3.782': attribute type 9 has an invalid length. [ 147.315319][ T8667] netlink: 'syz.3.783': attribute type 3 has an invalid length. [ 147.317976][ T8667] netlink: 'syz.3.783': attribute type 3 has an invalid length. [ 147.426489][ T53] usb 5-1: USB disconnect, device number 19 [ 147.620259][ T8676] selinuxfs: Unknown parameter 'barrier' [ 147.704294][ T5955] Bluetooth: hci0: command 0x0406 tx timeout [ 147.893517][ T8706] smc: adding net device bond0 with user defined pnetid SYZ2 [ 147.991377][ T8714] __nla_validate_parse: 2 callbacks suppressed [ 147.991388][ T8714] netlink: 24 bytes leftover after parsing attributes in process `syz.0.797'. [ 147.998325][ T8715] netlink: 24 bytes leftover after parsing attributes in process `syz.0.797'. [ 148.041643][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz.2.799'. [ 148.215818][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 148.218955][ T8735] netlink: 'syz.0.805': attribute type 11 has an invalid length. [ 148.220550][ T8739] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.807'. [ 148.225542][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 148.236873][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 148.239732][ T8735] netlink: 'syz.0.805': attribute type 11 has an invalid length. [ 148.242629][ T46] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.242740][ T8735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'. [ 148.257424][ T46] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.266221][ T46] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.282210][ T8735] netlink: 8 bytes leftover after parsing attributes in process `syz.0.805'. [ 148.285122][ T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 148.330519][ T8739] netlink: 4 bytes leftover after parsing attributes in process `syz.1.807'. [ 148.390902][ T8745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8745 comm=syz.1.807 [ 148.397392][ T8740] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=8740 comm=syz.1.807 [ 148.397427][ T8745] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1550 sclass=netlink_route_socket pid=8745 comm=syz.1.807 [ 149.046060][ T8737] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 149.048201][ T8737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.056129][ T8737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.060532][ T8737] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 149.066084][ T8737] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.068065][ T8737] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.071287][ T8737] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.074272][ T8737] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 149.076823][ T8737] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.081919][ T8737] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 149.084863][ T8737] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 149.087157][ T8737] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 149.235660][ T8761] netlink: 'syz.2.812': attribute type 2 has an invalid length. [ 149.268411][ T8774] vivid-000: disconnect [ 149.271138][ T8774] vivid-000: reconnect [ 149.308920][ T8774] block device autoloading is deprecated and will be removed. [ 149.342209][ T8770] syzkaller0: entered promiscuous mode [ 149.344010][ T8770] syzkaller0: entered allmulticast mode [ 149.362534][ T8777] overlay: filesystem on ./file0 not supported as upperdir [ 150.045810][ T8801] net_ratelimit: 12 callbacks suppressed [ 150.045827][ T8801] 0: reclassify loop, rule prio 0, protocol 800 [ 150.213851][ T8804] syz_tun: entered allmulticast mode [ 150.217354][ T8803] syz_tun: left allmulticast mode [ 150.299486][ T8812] netlink: 'syz.0.827': attribute type 4 has an invalid length. [ 150.305769][ T8812] netlink: 'syz.0.827': attribute type 4 has an invalid length. [ 150.405732][ T8818] kvm: pic: non byte read [ 150.408687][ T8818] kvm: pic: single mode not supported [ 150.408739][ T8818] kvm: pic: level sensitive irq not supported [ 150.411034][ T8818] kvm: pic: non byte read [ 150.428743][ T5955] Bluetooth: hci0: command 0x0406 tx timeout [ 150.431927][ T8818] kvm: pic: non byte read [ 150.434977][ T8818] kvm: pic: non byte read [ 150.437670][ T8818] kvm: pic: single mode not supported [ 150.437971][ T8818] kvm: pic: non byte read [ 150.445251][ T8818] kvm: pic: non byte read [ 150.448671][ T8818] kvm: pic: single mode not supported [ 150.448683][ T8818] kvm: pic: level sensitive irq not supported [ 150.450789][ T8818] kvm: pic: non byte read [ 150.455796][ T8818] kvm: pic: single mode not supported [ 150.456106][ T8818] kvm: pic: non byte read [ 150.460859][ T8818] kvm: pic: non byte read [ 150.555197][ T40] kauditd_printk_skb: 23 callbacks suppressed [ 150.555208][ T40] audit: type=1400 audit(1769290046.420:1532): avc: denied { lock } for pid=8822 comm="syz.0.832" path="socket:[26801]" dev="sockfs" ino=26801 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 150.663570][ T40] audit: type=1400 audit(1769290046.530:1533): avc: denied { write } for pid=8843 comm="syz.2.837" path="socket:[25874]" dev="sockfs" ino=25874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 151.147012][ T5955] Bluetooth: hci3: command 0x0406 tx timeout [ 151.147161][ T5946] Bluetooth: hci1: command 0x0c1a tx timeout [ 151.152067][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 151.287414][ T40] audit: type=1400 audit(1769290047.150:1534): avc: denied { write } for pid=8873 comm="syz.1.843" path="socket:[25987]" dev="sockfs" ino=25987 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 151.341453][ T8881] veth0_to_team: entered promiscuous mode [ 151.344531][ T8881] veth0_to_team: entered allmulticast mode [ 151.445688][ T8887] comedi comedi3: comedi_config --init_data is deprecated [ 151.453802][ T8887] tmpfs: Bad value for 'mpol' [ 151.766847][ T8914] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 151.856864][ T40] audit: type=1400 audit(1769290047.720:1535): avc: denied { map } for pid=8913 comm="syz.2.855" path="socket:[26038]" dev="sockfs" ino=26038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 151.863160][ T8916] bridge_slave_1: left allmulticast mode [ 151.871615][ T8916] bridge_slave_1: left promiscuous mode [ 151.873754][ T8916] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.882958][ T8916] bridge_slave_0: left allmulticast mode [ 151.888196][ T8916] bridge_slave_0: left promiscuous mode [ 151.889429][ T8912] xt_hashlimit: size too large, truncated to 1048576 [ 151.891431][ T8916] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.034616][ T8925] x_tables: ip_tables: .0 target: invalid size 8 (kernel) != (user) 4 [ 152.141677][ T6035] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 152.148175][ T40] audit: type=1400 audit(1769290048.010:1536): avc: denied { mount } for pid=8929 comm="syz.1.859" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 152.249375][ T8940] x_tables: duplicate underflow at hook 2 [ 152.252263][ T8940] netem: incorrect gi model size [ 152.254766][ T8940] netem: change failed [ 152.303708][ T6035] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 152.307321][ T6035] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 152.311656][ T6035] usb 5-1: config 0 interface 0 has no altsetting 0 [ 152.330643][ T6035] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 152.334677][ T6035] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 152.338010][ T6035] usb 5-1: Product: syz [ 152.339707][ T6035] usb 5-1: Manufacturer: syz [ 152.341310][ T6035] usb 5-1: SerialNumber: syz [ 152.366053][ T6035] usb 5-1: config 0 descriptor?? [ 152.372731][ T6035] hub 5-1:0.0: bad descriptor, ignoring hub [ 152.375259][ T6035] hub 5-1:0.0: probe with driver hub failed with error -5 [ 152.380214][ T6035] usb 5-1: selecting invalid altsetting 0 [ 152.460039][ T6027] hid (null): unknown global tag 0xc [ 152.462404][ T6027] hid (null): unknown global tag 0x3b [ 152.466613][ T6027] hid (null): global environment stack underflow [ 152.469244][ T6027] hid (null): invalid report_count 38862 [ 152.471104][ T6027] hid (null): report_id 326334752 is invalid [ 152.474562][ T6027] hid (null): unknown global tag 0xd [ 152.476378][ T6027] hid (null): unknown global tag 0xc [ 152.478694][ T6027] hid (null): invalid report_count 31929 [ 152.481177][ T6027] hid (null): report_id 1764408528 is invalid [ 152.484550][ T6027] hid (null): report_id 5569 is invalid [ 152.487043][ T6027] hid (null): report_id 0 is invalid [ 152.488850][ T6027] hid (null): bogus close delimiter [ 152.490587][ T6027] hid (null): invalid report_size 36209 [ 152.493894][ T6027] hid (null): unknown global tag 0xe7 [ 152.498395][ T6027] hid (null): report_id 58689 is invalid [ 152.500350][ T6027] hid (null): unknown global tag 0xc [ 152.502269][ T5946] Bluetooth: hci0: command 0x0406 tx timeout [ 152.502513][ T6027] hid (null): unknown global tag 0xe [ 152.506679][ T6027] hid (null): report_id 0 is invalid [ 152.508492][ T6027] hid (null): report_id 0 is invalid [ 152.510255][ T6027] hid (null): invalid report_size 43316 [ 152.512124][ T6027] hid (null): invalid report_count 623148877 [ 152.514129][ T6027] hid (null): unknown global tag 0xe [ 152.516650][ T6027] hid (null): global environment stack underflow [ 152.521002][ T6027] hid (null): unknown global tag 0xe [ 152.527647][ T6027] hid (null): bogus close delimiter [ 152.531788][ T6027] hid (null): unknown global tag 0xc [ 152.534680][ T6027] hid (null): unknown global tag 0xd [ 152.541819][ T6027] hid (null): unknown global tag 0xd [ 152.544405][ T6027] hid (null): unknown global tag 0xaf [ 152.548440][ T6027] hid (null): unknown global tag 0xc [ 152.551887][ T6027] hid (null): unknown global tag 0xc [ 152.555876][ T6027] hid (null): unknown global tag 0xc [ 152.560249][ T6027] hid (null): unknown global tag 0xe [ 152.562438][ T6027] hid (null): unknown global tag 0xe [ 152.565456][ T6027] hid (null): usage index exceeded [ 152.567495][ T6027] hid (null): invalid report_count 53565 [ 152.569463][ T6027] hid (null): report_id 308175744 is invalid [ 152.571477][ T6027] hid (null): unknown global tag 0xc [ 152.573639][ T6027] hid (null): unknown global tag 0x8a [ 152.575434][ T6027] hid (null): unknown global tag 0x8b [ 152.577226][ T6027] hid (null): unknown global tag 0xd [ 152.579018][ T6027] hid (null): unknown global tag 0xd [ 152.580817][ T6027] hid (null): unknown global tag 0xe [ 152.585005][ T6027] hid (null): unknown global tag 0xe [ 152.586838][ T6027] hid (null): unknown global tag 0xd [ 152.589170][ T6027] hid (null): unknown global tag 0xd [ 152.590901][ T6027] hid (null): unknown global tag 0xd [ 152.594781][ T6027] hid-generic 0101:BB9C:0009.0009: unknown main item tag 0x1 [ 152.597176][ T6027] hid-generic 0101:BB9C:0009.0009: unknown main item tag 0x0 [ 152.599549][ T6027] hid-generic 0101:BB9C:0009.0009: unknown main item tag 0x0 [ 152.602996][ T6027] hid-generic 0101:BB9C:0009.0009: unknown global tag 0xc [ 152.605374][ T6027] hid-generic 0101:BB9C:0009.0009: item 0 0 1 12 parsing failed [ 152.608150][ T6027] hid-generic 0101:BB9C:0009.0009: probe with driver hid-generic failed with error -22 [ 152.742394][ T40] audit: type=1400 audit(1769290048.610:1537): avc: denied { watch } for pid=8995 comm="syz.3.868" path="pipe:[24400]" dev="pipefs" ino=24400 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 152.944018][ T40] audit: type=1400 audit(1769290048.810:1538): avc: denied { mounton } for pid=9006 comm="syz.2.870" path="/220/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 152.944112][ T9013] overlay: Unknown parameter 'smackfshat' [ 153.032698][ T8919] usb 5-1: reset high-speed USB device number 20 using dummy_hcd [ 153.038952][ T8919] usb 5-1: device reset changed ep0 maxpacket size! [ 153.044385][ T6038] usb 5-1: USB disconnect, device number 20 [ 153.172877][ T9023] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 153.175792][ T9023] __nla_validate_parse: 11 callbacks suppressed [ 153.175802][ T9023] netlink: 40 bytes leftover after parsing attributes in process `syz.1.872'. [ 153.201733][ T6038] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 153.222786][ T5946] Bluetooth: hci3: command 0x0406 tx timeout [ 153.222870][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.222908][ T5955] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.361801][ T6038] usb 5-1: Using ep0 maxpacket: 32 [ 153.366486][ T6038] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.371238][ T6038] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 153.374685][ T6038] usb 5-1: can't read configurations, error -61 [ 153.511662][ T6038] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 153.671696][ T6038] usb 5-1: Using ep0 maxpacket: 32 [ 153.673429][ T6038] usb 5-1: unable to get BOS descriptor or descriptor too short [ 153.677990][ T6038] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 153.680619][ T6038] usb 5-1: can't read configurations, error -61 [ 153.684358][ T6038] usb usb5-port1: attempt power cycle [ 153.736238][ T40] audit: type=1800 audit(1769290049.600:1539): pid=9031 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.1.874" name="/file1" dev="tmpfs" ino=5 res=0 errno=0 [ 153.984840][ T9046] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.878'. [ 154.031683][ T6038] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 154.052355][ T6038] usb 5-1: Using ep0 maxpacket: 32 [ 154.055787][ T6038] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.059778][ T6038] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 154.062329][ T6038] usb 5-1: can't read configurations, error -61 [ 154.191738][ T6038] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 154.212214][ T6038] usb 5-1: Using ep0 maxpacket: 32 [ 154.215464][ T6038] usb 5-1: unable to get BOS descriptor or descriptor too short [ 154.219468][ T6038] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 154.222132][ T6038] usb 5-1: can't read configurations, error -61 [ 154.225860][ T6038] usb usb5-port1: unable to enumerate USB device [ 154.242008][ T9066] geneve2: entered promiscuous mode [ 154.306803][ T9072] loop5: detected capacity change from 0 to 7 [ 154.318657][ T6535] loop5: p1 < > p4 [ 154.320666][ T6535] loop5: partition table partially beyond EOD, truncated [ 154.331944][ T9072] loop5: p1 < > p4 [ 154.333361][ T9072] loop5: partition table partially beyond EOD, truncated [ 154.339843][ T9071] Invalid source name [ 154.341290][ T9071] UBIFS error (pid: 9071): cannot open "/dev/sg0", error -22 [ 154.363362][ T6535] udevd[6535]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 154.364300][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 154.399256][ T40] audit: type=1400 audit(1769290050.260:1540): avc: denied { remount } for pid=9076 comm="syz.1.887" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 154.400238][ T9077] netlink: 212408 bytes leftover after parsing attributes in process `syz.1.887'. [ 154.405035][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 154.406580][ T6535] udevd[6535]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 154.431011][ T40] audit: type=1400 audit(1769290050.290:1541): avc: denied { unmount } for pid=5949 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 154.489721][ T9081] ISOFS: Unable to identify CD-ROM format. [ 154.535240][ T9084] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 154.581830][ T5943] Bluetooth: hci0: command 0x0406 tx timeout [ 154.618976][ T9090] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 154.799490][ T5943] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:0' [ 154.803539][ T5943] CPU: 1 UID: 0 PID: 5943 Comm: kworker/u33:2 Tainted: G L syzkaller #0 PREEMPT(full) [ 154.803559][ T5943] Tainted: [L]=SOFTLOCKUP [ 154.803564][ T5943] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 154.803571][ T5943] Workqueue: hci1 hci_rx_work [ 154.803608][ T5943] Call Trace: [ 154.803613][ T5943] [ 154.803618][ T5943] dump_stack_lvl+0x100/0x190 [ 154.803635][ T5943] sysfs_warn_dup.cold+0x1c/0x28 [ 154.803651][ T5943] sysfs_create_dir_ns+0x24b/0x2b0 [ 154.803670][ T5943] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 154.803686][ T5943] ? find_held_lock+0x2b/0x80 [ 154.803701][ T5943] ? kobject_add_internal+0x25f/0x930 [ 154.803715][ T5943] ? kobject_add_internal+0x25f/0x930 [ 154.803730][ T5943] ? do_raw_spin_unlock+0x145/0x1e0 [ 154.803744][ T5943] kobject_add_internal+0x2c8/0x930 [ 154.803760][ T5943] kobject_add+0x16a/0x1e0 [ 154.803774][ T5943] ? __pfx_kobject_add+0x10/0x10 [ 154.803787][ T5943] ? class_to_subsys+0x10f/0x150 [ 154.803812][ T5943] ? kobject_put+0xb9/0x640 [ 154.803824][ T5943] ? _raw_spin_unlock+0x28/0x50 [ 154.803846][ T5943] device_add+0x294/0x1950 [ 154.803861][ T5943] ? __pfx_dev_set_name+0x10/0x10 [ 154.803878][ T5943] ? __pfx_device_add+0x10/0x10 [ 154.803893][ T5943] ? mgmt_send_event_skb+0x2fb/0x460 [ 154.803910][ T5943] hci_conn_add_sysfs+0x1a3/0x260 [ 154.803926][ T5943] le_conn_complete_evt+0x11cb/0x1f40 [ 154.803943][ T5943] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 154.803960][ T5943] hci_le_conn_complete_evt+0x23c/0x3a0 [ 154.803973][ T5943] ? skb_pull_data+0x15f/0x1e0 [ 154.803986][ T5943] hci_le_meta_evt+0x34a/0x5f0 [ 154.804007][ T5943] ? __pfx_hci_le_conn_complete_evt+0x10/0x10 [ 154.804023][ T5943] hci_event_packet+0x682/0x11c0 [ 154.804036][ T5943] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 154.804052][ T5943] ? __pfx_hci_event_packet+0x10/0x10 [ 154.804067][ T5943] ? kcov_remote_start+0x374/0x660 [ 154.804084][ T5943] ? lockdep_hardirqs_on+0x78/0x100 [ 154.804099][ T5943] hci_rx_work+0x451/0xfc0 [ 154.804115][ T5943] process_one_work+0x9c2/0x1840 [ 154.804134][ T5943] ? __pfx_process_one_work+0x10/0x10 [ 154.804151][ T5943] ? assign_work+0x19c/0x250 [ 154.804164][ T5943] worker_thread+0x5da/0xe40 [ 154.804182][ T5943] ? kthread+0x17d/0x730 [ 154.804193][ T5943] ? __pfx_worker_thread+0x10/0x10 [ 154.804205][ T5943] kthread+0x3b3/0x730 [ 154.804216][ T5943] ? __pfx_kthread+0x10/0x10 [ 154.804227][ T5943] ? ret_from_fork+0x79/0xaf0 [ 154.804239][ T5943] ? ret_from_fork+0x79/0xaf0 [ 154.804251][ T5943] ? rcu_is_watching+0x12/0xc0 [ 154.804266][ T5943] ? __pfx_kthread+0x10/0x10 [ 154.804278][ T5943] ret_from_fork+0x754/0xaf0 [ 154.804291][ T5943] ? __pfx_ret_from_fork+0x10/0x10 [ 154.804305][ T5943] ? rcu_is_watching+0x12/0xc0 [ 154.804319][ T5943] ? __switch_to+0x7b9/0x10c0 [ 154.804334][ T5943] ? __pfx_kthread+0x10/0x10 [ 154.804347][ T5943] ret_from_fork_asm+0x1a/0x30 [ 154.804364][ T5943] [ 154.804377][ T5943] kobject: kobject_add_internal failed for hci1:0 with -EEXIST, don't try to register things with the same name in the same directory. [ 154.907838][ T5943] Bluetooth: hci1: failed to register connection device [ 154.956124][ T9106] loop5: detected capacity change from 0 to 7 [ 154.958945][ T9106] loop5: p1 < > p4 [ 154.960278][ T9106] loop5: partition table partially beyond EOD, truncated [ 154.981540][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 154.983795][ T6535] udevd[6535]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 155.193779][ T9121] netlink: 32 bytes leftover after parsing attributes in process `syz.1.901'. [ 155.301759][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.311719][ T5943] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.315847][ T5946] ================================================================== [ 155.318420][ T5946] BUG: KASAN: slab-use-after-free in le_read_features_complete+0x56/0x380 [ 155.321026][ T5946] Write of size 4 at addr ffff888056d78010 by task kworker/u33:3/5946 [ 155.324817][ T5946] [ 155.325892][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/u33:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.325910][ T5946] Tainted: [L]=SOFTLOCKUP [ 155.325918][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.325926][ T5946] Workqueue: hci1 hci_cmd_sync_work [ 155.325948][ T5946] Call Trace: [ 155.325954][ T5946] [ 155.325960][ T5946] dump_stack_lvl+0x100/0x190 [ 155.325982][ T5946] print_report+0x156/0x4c9 [ 155.326004][ T5946] ? __virt_addr_valid+0x81/0x620 [ 155.326020][ T5946] ? __phys_addr+0xe8/0x180 [ 155.326034][ T5946] ? le_read_features_complete+0x56/0x380 [ 155.326055][ T5946] kasan_report+0xdf/0x1a0 [ 155.326078][ T5946] ? le_read_features_complete+0x56/0x380 [ 155.326099][ T5946] kasan_check_range+0x10f/0x1e0 [ 155.326116][ T5946] le_read_features_complete+0x56/0x380 [ 155.326132][ T5946] hci_cmd_sync_work+0x214/0x470 [ 155.326147][ T5946] ? __pfx_le_read_features_complete+0x10/0x10 [ 155.326166][ T5946] process_one_work+0x9c2/0x1840 [ 155.326181][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 155.326196][ T5946] ? assign_work+0x19c/0x250 [ 155.326207][ T5946] worker_thread+0x5da/0xe40 [ 155.326221][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 155.326234][ T5946] ? kthread+0x17d/0x730 [ 155.326245][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 155.326257][ T5946] kthread+0x3b3/0x730 [ 155.326268][ T5946] ? __pfx_kthread+0x10/0x10 [ 155.326279][ T5946] ? ret_from_fork+0x79/0xaf0 [ 155.326291][ T5946] ? ret_from_fork+0x79/0xaf0 [ 155.326303][ T5946] ? rcu_is_watching+0x12/0xc0 [ 155.326317][ T5946] ? __pfx_kthread+0x10/0x10 [ 155.326328][ T5946] ret_from_fork+0x754/0xaf0 [ 155.326341][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 155.326353][ T5946] ? __switch_to+0x7b9/0x10c0 [ 155.326368][ T5946] ? __pfx_kthread+0x10/0x10 [ 155.326379][ T5946] ret_from_fork_asm+0x1a/0x30 [ 155.326393][ T5946] [ 155.326396][ T5946] [ 155.388237][ T5946] Allocated by task 5943: [ 155.389633][ T5946] kasan_save_stack+0x30/0x50 [ 155.391149][ T5946] kasan_save_track+0x14/0x30 [ 155.392659][ T5946] __kasan_kmalloc+0xaa/0xb0 [ 155.394157][ T5946] __hci_conn_add+0x1f4/0x1ca0 [ 155.395693][ T5946] hci_conn_add_unset+0x76/0x120 [ 155.397273][ T5946] le_conn_complete_evt+0x633/0x1f40 [ 155.398935][ T5946] hci_le_conn_complete_evt+0x23c/0x3a0 [ 155.400709][ T5946] hci_le_meta_evt+0x34a/0x5f0 [ 155.402299][ T5946] hci_event_packet+0x682/0x11c0 [ 155.403881][ T5946] hci_rx_work+0x451/0xfc0 [ 155.405324][ T5946] process_one_work+0x9c2/0x1840 [ 155.406916][ T5946] worker_thread+0x5da/0xe40 [ 155.408405][ T5946] kthread+0x3b3/0x730 [ 155.409697][ T5946] ret_from_fork+0x754/0xaf0 [ 155.411143][ T5946] ret_from_fork_asm+0x1a/0x30 [ 155.412676][ T5946] [ 155.413466][ T5946] Freed by task 5943: [ 155.414743][ T5946] kasan_save_stack+0x30/0x50 [ 155.416249][ T5946] kasan_save_track+0x14/0x30 [ 155.417760][ T5946] kasan_save_free_info+0x3b/0x70 [ 155.419368][ T5946] __kasan_slab_free+0x5f/0x80 [ 155.420928][ T5946] kfree+0x1c7/0x690 [ 155.422215][ T5946] device_release+0xa4/0x240 [ 155.423706][ T5946] kobject_put+0x1f7/0x640 [ 155.425154][ T5946] device_unregister+0x2f/0xe0 [ 155.426686][ T5946] hci_conn_del_sysfs+0xb9/0x1a0 [ 155.428272][ T5946] hci_conn_del+0x506/0x1180 [ 155.429766][ T5946] hci_disconn_complete_evt+0x410/0xa20 [ 155.431564][ T5946] hci_event_packet+0xa86/0x11c0 [ 155.433155][ T5946] hci_rx_work+0x451/0xfc0 [ 155.434574][ T5946] process_one_work+0x9c2/0x1840 [ 155.436118][ T5946] worker_thread+0x5da/0xe40 [ 155.437589][ T5946] kthread+0x3b3/0x730 [ 155.438877][ T5946] ret_from_fork+0x754/0xaf0 [ 155.440293][ T5946] ret_from_fork_asm+0x1a/0x30 [ 155.441880][ T5946] [ 155.442654][ T5946] The buggy address belongs to the object at ffff888056d78000 [ 155.442654][ T5946] which belongs to the cache kmalloc-8k of size 8192 [ 155.446931][ T5946] The buggy address is located 16 bytes inside of [ 155.446931][ T5946] freed 8192-byte region [ffff888056d78000, ffff888056d7a000) [ 155.451104][ T5946] [ 155.451901][ T5946] The buggy address belongs to the physical page: [ 155.453901][ T5946] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888056d7c000 pfn:0x56d78 [ 155.456903][ T5946] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 155.459430][ T5946] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 155.461791][ T5946] page_type: f5(slab) [ 155.462994][ T5946] raw: 00fff00000000040 ffff88801b843180 ffffea0000a92400 0000000000000006 [ 155.465679][ T5946] raw: ffff888056d7c000 0000000000020001 00000000f5000000 0000000000000000 [ 155.468334][ T5946] head: 00fff00000000040 ffff88801b843180 ffffea0000a92400 0000000000000006 [ 155.471006][ T5946] head: ffff888056d7c000 0000000000020001 00000000f5000000 0000000000000000 [ 155.473772][ T5946] head: 00fff00000000003 ffffea00015b5e01 00000000ffffffff 00000000ffffffff [ 155.476486][ T5946] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 155.479217][ T5946] page dumped because: kasan: bad access detected [ 155.481275][ T5946] page_owner tracks the page as allocated [ 155.483069][ T5946] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7889, tgid 7877 (syz.2.537), ts 125042063784, free_ts 124968246183 [ 155.489452][ T5946] post_alloc_hook+0x1e1/0x250 [ 155.490982][ T5946] get_page_from_freelist+0xe3d/0x2e10 [ 155.492884][ T5946] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 155.494794][ T5946] alloc_pages_mpol+0x1fb/0x550 [ 155.496340][ T5946] new_slab+0x2c4/0x440 [ 155.497675][ T5946] ___slab_alloc+0xda3/0x1ca0 [ 155.499219][ T5946] __slab_alloc.isra.0+0x63/0x110 [ 155.500854][ T5946] __kmalloc_node_track_caller_noprof+0x629/0x9d0 [ 155.502991][ T5946] kmalloc_reserve+0xef/0x2c0 [ 155.504500][ T5946] __alloc_skb+0x186/0x410 [ 155.505964][ T5946] pfkey_send_acquire+0x1d4/0x2670 [ 155.507565][ T5946] km_query+0xb4/0x260 [ 155.508843][ T5946] xfrm_state_find+0x3f3e/0x8d00 [ 155.510405][ T5946] xfrm_resolve_and_create_bundle+0x49e/0x3500 [ 155.512350][ T5946] xfrm_lookup_with_ifid+0x29b/0x1ce0 [ 155.514077][ T5946] xfrm_lookup_route+0x3b/0x200 [ 155.515630][ T5946] page last free pid 7887 tgid 7887 stack trace: [ 155.517592][ T5946] __free_frozen_pages+0x822/0x1130 [ 155.519221][ T5946] __put_partials+0x127/0x160 [ 155.520714][ T5946] qlist_free_all+0x47/0xe0 [ 155.522228][ T5946] kasan_quarantine_reduce+0x1a0/0x1f0 [ 155.523982][ T5946] __kasan_slab_alloc+0x69/0x90 [ 155.525564][ T5946] kmem_cache_alloc_noprof+0x2ad/0x780 [ 155.527338][ T5946] getname_flags.part.0+0x4c/0x540 [ 155.528983][ T5946] getname_flags+0x93/0xf0 [ 155.530416][ T5946] vfs_fstatat+0xe1/0xf0 [ 155.531811][ T5946] __do_sys_newfstatat+0x9d/0x120 [ 155.533444][ T5946] do_syscall_64+0xc9/0xf80 [ 155.534924][ T5946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.536809][ T5946] [ 155.537603][ T5946] Memory state around the buggy address: [ 155.539414][ T5946] ffff888056d77f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.541940][ T5946] ffff888056d77f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 155.544481][ T5946] >ffff888056d78000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.546984][ T5946] ^ [ 155.548383][ T5946] ffff888056d78080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.550797][ T5946] ffff888056d78100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 155.553300][ T5946] ================================================================== [ 155.556983][ T5946] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 155.559285][ T5946] CPU: 1 UID: 0 PID: 5946 Comm: kworker/u33:3 Tainted: G L syzkaller #0 PREEMPT(full) [ 155.562904][ T5946] Tainted: [L]=SOFTLOCKUP [ 155.564285][ T5946] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 155.567475][ T5946] Workqueue: hci1 hci_cmd_sync_work [ 155.569149][ T5946] Call Trace: [ 155.570222][ T5946] [ 155.571205][ T5946] dump_stack_lvl+0x100/0x190 [ 155.572717][ T5946] vpanic+0x20d/0x630 [ 155.574005][ T5946] panic+0xd1/0xd1 [ 155.575215][ T5946] ? __pfx_panic+0x10/0x10 [ 155.576642][ T5946] ? le_read_features_complete+0x56/0x380 [ 155.578462][ T5946] ? preempt_schedule_common+0x42/0xc0 [ 155.580186][ T5946] ? check_panic_on_warn+0x1f/0x90 [ 155.581860][ T5946] check_panic_on_warn.cold+0x19/0x34 [ 155.583629][ T5946] end_report.part.0+0x3a/0x90 [ 155.585168][ T5946] kasan_report.cold+0xe/0x18 [ 155.586679][ T5946] ? le_read_features_complete+0x56/0x380 [ 155.588505][ T5946] kasan_check_range+0x10f/0x1e0 [ 155.590098][ T5946] le_read_features_complete+0x56/0x380 [ 155.591864][ T5946] hci_cmd_sync_work+0x214/0x470 [ 155.593465][ T5946] ? __pfx_le_read_features_complete+0x10/0x10 [ 155.595395][ T5946] process_one_work+0x9c2/0x1840 [ 155.596939][ T5946] ? __pfx_process_one_work+0x10/0x10 [ 155.598620][ T5946] ? assign_work+0x19c/0x250 [ 155.600060][ T5946] worker_thread+0x5da/0xe40 [ 155.601504][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 155.603088][ T5946] ? kthread+0x17d/0x730 [ 155.604433][ T5946] ? __pfx_worker_thread+0x10/0x10 [ 155.606057][ T5946] kthread+0x3b3/0x730 [ 155.607363][ T5946] ? __pfx_kthread+0x10/0x10 [ 155.608840][ T5946] ? ret_from_fork+0x79/0xaf0 [ 155.610360][ T5946] ? ret_from_fork+0x79/0xaf0 [ 155.611882][ T5946] ? rcu_is_watching+0x12/0xc0 [ 155.613470][ T5946] ? __pfx_kthread+0x10/0x10 [ 155.614948][ T5946] ret_from_fork+0x754/0xaf0 [ 155.616426][ T5946] ? __pfx_ret_from_fork+0x10/0x10 [ 155.618062][ T5946] ? __switch_to+0x7b9/0x10c0 [ 155.619541][ T5946] ? __pfx_kthread+0x10/0x10 [ 155.621044][ T5946] ret_from_fork_asm+0x1a/0x30 [ 155.622618][ T5946] [ 155.624299][ T5946] Kernel Offset: disabled [ 155.625691][ T5946] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:27:31 Registers: info registers vcpu 0 CPU#0 RAX=00000000002ac9ab RBX=ffffffff8e297ac0 RCX=ffffffff8b76b4b5 RDX=0000000000000000 RSI=ffffffff8dc45440 RDI=ffffffff8bfa35a0 RBP=0000000000000000 RSP=ffffffff8e207e00 R8 =0000000000000001 R9 =ffffed100d48673d R10=ffff88806a4339eb R11=0000000000000000 R12=fffffbfff1c52f58 R13=0000000000000000 R14=ffffffff90b737d0 R15=0000000000000000 RIP=ffffffff8b769e1f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d65dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f150c668ff8 CR3=000000002a27a000 CR4=00352ef0 DR0=ffffffffffffffff DR1=00000000000001f8 DR2=0000000000000083 DR3=ffffffffefffff15 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffff00 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f75706372 65705f6567617375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5f98c856 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5f98c856 00007ffd5f98c85c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b8086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b808728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b80869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b80871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=000000000000006f RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85699fa5 RDI=ffffffff9b206c00 RBP=ffffffff9b206bc0 RSP=ffffc900031e7540 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6436353038387257 R12=0000000000000000 R13=000000000000006f R14=0000000000000010 R15=ffffffff85699f40 RIP=ffffffff85699fcf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f150c689ff8 CR3=0000000033874000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=00000000ffffffff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5f98c856 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd5f98c856 00007ffd5f98c85c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b8086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b808728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b80869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b80871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f150b9e4498 00007f150b9e4468 00007f150b9e44a0 00007f150b9e4480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000031ecff RBX=ffff88801e2d4980 RCX=ffffffff8b76b4b5 RDX=0000000000000000 RSI=ffffffff8dc45440 RDI=ffffffff8bfa35a0 RBP=0000000000000002 RSP=ffffc90000187df0 R8 =0000000000000001 R9 =ffffed100d4c673d R10=ffff88806a6339eb R11=0000000000000000 R12=ffffed1003c5a930 R13=0000000000000002 R14=ffffffff90b737d0 R15=0000000000000000 RIP=ffffffff8b769e1f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f150c669d58 CR3=000000003040f000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000000 Opmask02=0000000080004000 Opmask03=0000000000000000 Opmask04=00000000fbffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffd1e952b 00007ffffd1e952b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffd1e9a30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffd1e9a30 0000003000000018 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 73615f6b726f665f 6d6f72665f746572 20205d3334393554 205b5d3734333400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7361556172656655 6765726655746572 2020573334333554 2051573734333400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6436353038383866 6666662072646461 207461203420657a 697320666f206574 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e79726f74636572 696420656d617320 656874206e692065 6d616e20656d6173 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2065687420687469 772073676e696874 2072657473696765 72206f7420797274 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2074276e6f64202c 5453495845452d20 6874697720303a31 69636820726f6620 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 64656c696166206c 616e7265746e695f 6464615f7463656a 626f6b203a746365 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 313d657669737369 6d72657020656c69 665f6f6669663d73 73616c637420745f ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81faa9ba RDX=ffff888028fb24c0 RSI=ffffffff81faa994 RDI=ffff888028fb24c0 RBP=ffff88806a5430a0 RSP=ffffc90003d57668 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed100d4a8615 R14=0000000000000001 R15=ffff88806a73bf00 RIP=ffffffff81faa99b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555558293500 ffffffff 00c00000 GS =0000 ffff8880d68dc000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f677e1456b8 CR3=00000000290a5000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d7f4d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc834e88a6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc834e88a6 00007ffc834e88ac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d72086dc ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d7208728 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d720869c ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f52d720871a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8007000c80080088 0500000040090008 0000000700010005 00000000317a7973 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a79730002000901 0000804009000809 0000030000000000 0000000101060a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ae4b953cff0878e0 4daf882f0886b781 1be8f7e957c6f559 3cf3fbfdfde97b3f ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 b935ae84dad42fe2 aa264fb861cfa224 916a70471a38460d f9707e68a8127f09 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d2e2927bf14c77d5 85ca276c2b3852db bdf357985e98729a ddc9cb329e1c6662 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffe54c598e3c1826 cc301f31ccb0afa1 97d5853a0b1b12e6 8bcf719cc8e8c686 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000