last executing test programs: 2.829300116s ago: executing program 0 (id=397): r0 = io_uring_setup(0x7939, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x1, 0x132}) setresuid(0xffffffffffffffff, 0xffffffffffffffff, 0xee01) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) prlimit64(0x0, 0xf, &(0x7f0000000100)={0x7fff, 0x10001}, &(0x7f0000000180)) (async) close_range(r0, 0xffffffffffffffff, 0x0) 2.826500418s ago: executing program 0 (id=399): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'gre0\x00', r1, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'erspan0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @multicast2}}}}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r3, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="670000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000006600), 0x0, 0x0) (async, rerun: 64) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000d80)=ANY=[@ANYBLOB="400100001000010000000000fddbdfb15177a21211b90bf1a0db832f000000000000000000000000000000000000001b40000000000300030000000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000033000000ff02000000000000000000000000000100000000000000000000000000000000000000000000000001040000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000008001800630f00004800010073686132353600"/248], 0x140}}, 0x20000000) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000440), 0x181000, 0x0) (async) ioctl$TIOCSSOFTCAR(r4, 0x5453, 0x0) 2.689978456s ago: executing program 0 (id=400): syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, 0x0, 0x0) exit(0x1f919) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x80000000, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x2008004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4e2, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000007000000ff00000004"], 0x48) 1.838530926s ago: executing program 0 (id=409): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x25f, 0x20}, &(0x7f0000000040)=0xc) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={r1, 0xcf80, 0x7, 0x4, 0x800, 0xff}, 0x14) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00', 0x6f}], 0x1c) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r3, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r1, 0x8, 0x86ac}, 0xc) connect$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x18dd, @any, 0x1, 0x2}, 0xe) ioctl$DRM_IOCTL_FREE_BUFS(0xffffffffffffffff, 0x4010641a, &(0x7f0000000240)={0x4, &(0x7f0000000200)=[0x6, 0x1, 0x5, 0x7]}) sendmsg$AUDIT_TTY_GET(r2, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x10, 0x3f8, 0x200, 0x70bd25, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4004000}, 0x48000) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000380)={r1, 0x101}, 0x8) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000400)={0xd0, 0x17, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_FLOWTABLE_HOOK={0xbc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vcan0\x00'}, {0x14, 0x1, 'veth1_to_batadv\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'wlan1\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc4}, 0x8041) r4 = socket$inet6(0xa, 0xa, 0x86) setsockopt$inet6_MCAST_JOIN_GROUP(r2, 0x29, 0x2a, &(0x7f0000000580)={0x9, {{0xa, 0x4e22, 0x3, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}}}, 0x88) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r2, 0xc01064c2, &(0x7f0000000640)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r2, 0xc00864c0, &(0x7f0000000680)={r5}) r6 = accept$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @private}, &(0x7f0000000700)=0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r6, 0x0, 0x48b, &(0x7f0000000740)={0x2, 'veth0_macvtap\x00', 0x1}, 0x18) r7 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000780)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r2, 0xc0189379, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) setsockopt$inet6_MCAST_MSFILTER(r2, 0x29, 0x30, &(0x7f0000000800)={0x22, {{0xa, 0x4e21, 0xfff, @mcast1, 0x7ff}}, 0x1, 0x1, [{{0xa, 0x4e23, 0x60, @private1, 0x398}}]}, 0x110) sendto$inet6(r3, &(0x7f0000000940)="319221656667bf1b5ee5eecc4823058016c9f3c7882f716c7f9ff9d7f4f0423a3d253c0fac3b1b71e239407731101d65a52e8e8384694fb7c8b7f89f96d19f984c5d491d9af67300fe41cbb76f507ed12d26756d45b00ec97d3b10119c3af4a074911bffdad6f1caa8a9d50ab2fd3ec7b17d439f5dd12b27e76d6472ee791c522dec2efd466f78ced8a9724fec6c05e10597c4885b7d25e8d9e6fef4d9a8896f8d4ffd32ff001b0a25bbeadcd9db5db6c498cee810a889bf9c35a3e7940ddea52eb7080020cfcbc5218dde708f5fc841524fd9768c0e8dd07e55f3b673024a2687db459aec5a7e3e991882", 0xeb, 0x4, &(0x7f0000000a40)={0xa, 0x4e21, 0x2, @loopback, 0x1}, 0x1c) ioctl$VIDIOC_SUBDEV_S_SELECTION(r2, 0xc040563e, &(0x7f0000000a80)={0x1, 0x0, 0x101, 0x1, {0x0, 0x1000, 0xa, 0x10}}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000ac0)={0xb, 0x0, 0x8, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r2, 0xc01064b3, &(0x7f0000000b00)={r9}) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000b40)={r1, 0xfffffff9}, &(0x7f0000000b80)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000c40)={r10, 0x4c, &(0x7f0000000bc0)=[@in6={0xa, 0x4e22, 0x8000, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, @in={0x2, 0x4e21, @local}, @in={0x2, 0x4e20, @rand_addr=0x64010102}, @in={0x2, 0x4e24, @multicast1}]}, &(0x7f0000000c80)=0x10) socket$inet_tcp(0x2, 0x1, 0x0) 963.179486ms ago: executing program 0 (id=425): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000100)=@req={0x9a, 0x4001, 0x0, 0x4000}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvfrom(r0, &(0x7f0000000140)=""/80, 0x50, 0x12020, 0x0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x2b6a, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0xe, 0x1, 0x3, "9611e6d6ffc88885163200", 0xa0363159}) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r3, 0x0) r4 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0) r5 = syz_io_uring_setup(0x39, &(0x7f00000000c0)={0x0, 0xe7b7, 0x3501}, &(0x7f0000000240), &(0x7f0000001880)) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x21, &(0x7f0000000440)=r4, 0x1) sendfile(r3, r3, 0x0, 0x40008) r6 = syz_open_dev$video4linux(&(0x7f0000000040), 0x2, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r6, 0xc0845658, &(0x7f00000001c0)={0x0, @reserved}) 883.951117ms ago: executing program 1 (id=427): r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) mmap$xdp(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x3, 0x12, r0, 0x100000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x340, 0x11, 0x148, 0x340, 0x0, 0x428, 0x2a8, 0x2a8, 0x428, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x3f, 0xfffffffd, 0x20000000, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x26, 0x0, [{0x3, 0xff, 0x1, 0xfff}, {0x6, 0x8c, 0x3, 0x8}, {0x9, 0x2, 0xe, 0x3}, {0xfaf, 0x2, 0x1, 0xec}, {0x9, 0x9, 0xe, 0x7f}, {0xf523, 0x7, 0xf, 0x2}, {0x7ed, 0x11, 0x6, 0x58}, {0xbbd5, 0x82, 0x9, 0x81}, {0x9, 0x1, 0x0, 0xff9}, {0x5, 0x5, 0x1, 0x5}, {0x8, 0x3, 0x4, 0x8}, {0x7, 0x8, 0x5}, {0xc, 0xe7, 0xa, 0x66}, {0x5, 0x1, 0x5}, {0x623a, 0x0, 0x8, 0x8}, {0x2, 0x7, 0xa5, 0x7}, {0x7, 0x7, 0x6, 0x8}, {0x81, 0x4, 0x1, 0xa}, {0x5, 0xdc, 0x7}, {0x0, 0xff, 0xe7, 0x3}, {0x7, 0x5, 0x8f, 0xce}, {0x1, 0x1, 0x9, 0x3}, {0xfff8, 0x5, 0x80, 0x1}, {0xc29, 0x7a, 0x9, 0x5}, {0x4, 0x5, 0x9, 0x80}, {0x9f, 0x2, 0xde, 0x8}, {0x0, 0x2, 0x51, 0x4}, {0x6, 0x5, 0x5, 0x20a}, {0x800, 0x40, 0x80, 0x953}, {0x4, 0x2e, 0xb, 0x10}, {0x0, 0x3, 0x6b}, {0x8, 0x4, 0x5, 0x6}, {0x2, 0xc3, 0x7, 0x1a17}, {0x3bc4, 0x8, 0xf, 0x2}, {0x7ff, 0xcb, 0xc, 0x1ff}, {0x7, 0x79, 0x4, 0x1}, {0x6, 0x9, 0x97, 0x10000}, {0x3ff, 0xc, 0xff, 0x2}, {0x3, 0xf, 0x0, 0x3}, {0x2, 0xc0, 0x4}, {0x6, 0x0, 0x6, 0x8001}, {0x6, 0x6, 0xff, 0x8}, {0x92, 0xf7, 0x3, 0x3ff}, {0x2, 0xfd, 0xd, 0xfffffff8}, {0xfde1, 0x6, 0x0, 0x8}, {0x5, 0x1, 0x6, 0x9}, {0xc0, 0x5, 0x3, 0x1000}, {0x0, 0x6, 0x2, 0x1}, {0x0, 0x8, 0x0, 0x6}, {0x1, 0x7, 0x9, 0x3}, {0xc000, 0x0, 0x8, 0x1}, {0x9, 0x7, 0xff, 0x401}, {0xb1aa, 0x3, 0xd4}, {0x3, 0x87, 0xbf}, {0x4a, 0x7, 0xf, 0xfffffffd}, {0xf, 0x4, 0x1}, {0x9, 0x10, 0x2, 0xfffffff7}, {0x3, 0x43, 0x7, 0x8}, {0x9, 0xe0, 0xad}, {0x8, 0x10, 0x40, 0xffff}, {0x6, 0x2, 0x9, 0x4}, {0x6, 0x7, 0xe, 0xfffffffb}, {0x40, 0x7, 0xe2, 0x8}, {0x200, 0x7f, 0x9, 0xedd}], {0xfffffffffffffffb}}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00', {}, {}, 0x33}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ttl={{0x28}, {0x2, 0xa0}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x4, 0x2}, {0x3, 0x3, 0x4}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x520) 780.575094ms ago: executing program 1 (id=428): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2ebff00aaaaaaaaaa0008004500001c00e8ffffff019078ac1414bbac1414221100907800000001f568bee89a8b423e2831fa772d80d0bd9d87d2c99b273c2a53f1d1e6fafcefc0ebfe6cdc1db2a033d227eef103fb6f7b0e564e2abc3e95a13914b93f0b8c09f3842ffec3ad33563336324daf6106dbc26859c481f304baf450e7e161f3cb96376bc5521d42731986173855f5724298f32ebf2f8308da4a42dc8e096b1aa2c22fa16483feeeb1f9edcc910fae6e30662abc446af948569093c8d994a3494bb8653c793136e844c2b53649e7cb88999f9484fd79d3f529f67df5c626571f00"], 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c2ebff00aaaaaaaaaa0008004500001c00e8ffffff019078ac1414bbac1414221100907800000001f568bee89a8b423e2831fa772d80d0bd9d87d2c99b273c2a53f1d1e6fafcefc0ebfe6cdc1db2a033d227eef103fb6f7b0e564e2abc3e95a13914b93f0b8c09f3842ffec3ad33563336324daf6106dbc26859c481f304baf450e7e161f3cb96376bc5521d42731986173855f5724298f32ebf2f8308da4a42dc8e096b1aa2c22fa16483feeeb1f9edcc910fae6e30662abc446af948569093c8d994a3494bb8653c793136e844c2b53649e7cb88999f9484fd79d3f529f67df5c626571f00"], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 677.409383ms ago: executing program 1 (id=430): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f0000000300)={0x0, 0x0, @ioapic={0x1, 0x3, 0x6, 0x0, 0x0, [{0x3, 0xd, 0xff, '\x00', 0x4b}, {0x0, 0x5, 0x64, '\x00', 0x5}, {0xcc, 0x0, 0x1, '\x00', 0x1}, {0x5, 0x4, 0x2, '\x00', 0x7f}, {0x0, 0x25, 0x3, '\x00', 0xa8}, {0x7a, 0x6, 0x4, '\x00', 0x5}, {0x2, 0x3, 0xf7, '\x00', 0x9}, {0xb, 0x80, 0x8, '\x00', 0x40}, {0x5, 0x9, 0x5b, '\x00', 0x6}, {0x5, 0x6, 0xb, '\x00', 0x9}, {0x8, 0x6, 0x8, '\x00', 0x3}, {0x4, 0x9, 0x3, '\x00', 0xc8}, {0xc, 0xf, 0x8, '\x00', 0xf9}, {0x5, 0x4, 0x9, '\x00', 0x3}, {0x10, 0xe, 0xf, '\x00', 0x20}, {0x68, 0x3, 0x7, '\x00', 0xc}, {0x1, 0x8, 0xec, '\x00', 0x6}, {0xf, 0x3, 0x81, '\x00', 0xd4}, {0x7, 0xc6, 0x8, '\x00', 0x3}, {0x7, 0x7, 0x0, '\x00', 0x9}, {0x40, 0xf9, 0xf, '\x00', 0x7}, {0x5a, 0xa, 0x7f, '\x00', 0x2}, {0xc, 0x9, 0x3, '\x00', 0xf}, {0x7, 0x1, 0x81, '\x00', 0x7}]}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cb, 0x0, 0xa1d, 0x68ff, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$TCFLSH(r4, 0x400455c8, 0x2) ioctl$TIOCSETD(r4, 0x5412, &(0x7f0000000140)=0xffffffc0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0xfc) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000340)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0xff) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000340)=@nat={'nat\x00', 0x670, 0x5, 0x3f0, 0x0, 0x0, 0xfeffffff, 0x0, 0x280, 0x358, 0x358, 0xffffffff, 0x358, 0x358, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x1, @dev, @dev, @gre_key, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @broadcast, @remote, @icmp_id}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e20}}}}, {{@ip={@remote, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast1, @ipv6=@mcast2, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000380)=0xff) ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000001c0)=0xfe) ioctl$KVM_RUN(r2, 0xae80, 0x0) 490.05248ms ago: executing program 3 (id=435): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000005c0), 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6) recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0xc251}], 0x1, 0x10002, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) (async) sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "be83bfadb0520d0677e22b474c00e6639ecec96e55c50f2e9e09640465521a697243661f30763ee31ddc4d59c4fafb79a1565e19e4a1e14e4352002190ede0fb8a7f84547d7cf9"}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}}], {0x14}}, 0xc8}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0xfffe}}, @NFT_MSG_NEWCHAIN={0x78, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x4b, 0xc, "be83bfadb0520d0677e22b474c00e6639ecec96e55c50f2e9e09640465521a697243661f30763ee31ddc4d59c4fafb79a1565e19e4a1e14e4352002190ede0fb8a7f84547d7cf9"}]}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x5, 0x0, 0x0, {0x1}}], {0x14}}, 0xc8}}, 0x0) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000240)={0x3}) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/resume', 0x149a82, 0x29) write$cgroup_int(r3, &(0x7f0000000040)=0x1c9, 0x3f) 485.940039ms ago: executing program 2 (id=436): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x80006b, 0x9, 0x1f99, 0x7}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r2, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x4b564d01, 0x0, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r4, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)) r6 = dup(r5) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000000)={0x1, r6}) ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f00000003c0)={0x1}) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) r9 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r9, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r9, 0xc01064b5, &(0x7f0000000180)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r9, 0xc02064b6, &(0x7f00000001c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r9, 0xc06864a2, &(0x7f0000000500)={0x0, 0x0, r11, r12, 0x1, 0x5, 0x4, 0x5, {0x3, 0x3, 0x5, 0xa, 0xa, 0x1, 0x1, 0x3d43, 0xb, 0x6, 0x7, 0x8, 0xf046, 0x68, "6f4f1664ac3c57b30bd15586b744545dc528a97436419c2cd5ae7297dceeb0be"}}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) ioctl$BTRFS_IOC_SCRUB(r0, 0xc400941b, &(0x7f0000000680)={0x0, 0x7, 0xd, 0x1}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x814) sendmsg$nl_route_sched(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=@newtfilter={0x48, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r13, {0x5, 0x7}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x14, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x3}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3000000022008d2a00000000000000", @ANYRES32=0x0, @ANYBLOB="a2"], 0x30}}, 0x0) 484.901481ms ago: executing program 1 (id=437): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, 0x0, 0x1) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) (async) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_CLONE_BUFFERS(r1, 0x1e, 0x0, 0x1) (async) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff000}, {0x6, 0x0, 0x0, 0xffffffff}]}, 0x10) (async) 388.470284ms ago: executing program 1 (id=438): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000040)={0x6, &(0x7f00000006c0)=[{0x4, 0xa3, 0x2, 0x3}, {0x2, 0x8, 0x8, 0x7fffffff}, {0xaee, 0x2, 0xac, 0x1000}, {0x40, 0xaf, 0x5, 0x2}, {0x6, 0x80, 0x0, 0x2}, {0x0, 0x3, 0x5, 0x9}]}, 0x10) write$binfmt_misc(r0, &(0x7f0000000100), 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0504"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000180)={'sit0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x7800, 0x40, 0x4, 0x101, {{0x1f, 0x4, 0x3, 0x7, 0x7c, 0x65, 0x0, 0x3, 0x4, 0x0, @local, @local, {[@rr={0x7, 0x1f, 0xfb, [@remote, @broadcast, @broadcast, @empty, @empty, @private=0xa010100, @multicast1]}, @timestamp={0x44, 0x1c, 0x5d, 0x0, 0x3, [0xfffffffa, 0x0, 0x8, 0x5, 0xe, 0x6]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0xa9, 0x3, 0x5, [{@private=0xa010102, 0x6}, {@loopback, 0x1}]}, @cipso={0x86, 0x14, 0x1, [{0x2, 0xb, "a22e4e912c0ea7108d"}, {0x5, 0x3, '\n'}]}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @initdev, @initdev}, &(0x7f0000000280)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000620120004000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x50, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_INC_SCI={0x5, 0x9, 0x1}, @IFLA_MACSEC_SCI={0xc, 0x1, 0xd}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000004c0)={&(0x7f0000000700)={0x1cc, r2, 0x2, 0x70bd27, 0x25dfdbfc, {}, [{{0x8, 0x1, r3}, {0x170, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x53}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff9}}}]}}, {{0x8, 0x1, r7}, {0x38, 0x2, 0x0, 0x1, [{0x34, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4}}}]}}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x40001}, 0x44001) 387.662441ms ago: executing program 3 (id=439): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r2, &(0x7f0000000000)=[{&(0x7f00000004c0)='4', 0x1}], 0x1) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace$poke(0x5, r3, &(0x7f0000000080), 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="01000000000000005b00000000000000b9800000c00f32"], 0x422}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x9, 0x0, 0x180, 0x200000004, 0x10, 0xf1, 0x2000, 0x7fffffffffffe, 0x800000a2a, 0x0, 0x5, 0x2, 0x80000001, 0x3, 0xbdb], 0xeeee8000, 0x3c4210}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000140)={0xbe, 0x0, 0x1}) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x4376ea830d46549b, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x1000]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 320.498591ms ago: executing program 1 (id=440): syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x0, 0xc9, 0x7}}}, 0x7) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000040), 0x1a) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0x5, 0xa, 0x0, &(0x7f0000000000)="6121eed4cd50bb2b01e8", 0x0, 0x2a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x50) r0 = socket(0x10, 0x803, 0x2) getsockname$packet(r0, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fsync(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001500)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a1c000000000a050000000000000000000100000608000240000000012c000000000a01040000000000000000070000050c00044000000000000000040c000440000000000000000550000000060a010400000000000000000100000708000b40000f000028000480140001800b000100657874686472000004000280100001800a00010071756f74610000000900010073797a3000000000140000001100070000000000000000000700000a"], 0xc0}}, 0x4000005) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_dev$usbfs(&(0x7f0000000380), 0xc, 0x8401) fcntl$dupfd(r3, 0x406, r3) openat$binfmt_register(0xffffff9c, &(0x7f00000005c0), 0x1, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount(&(0x7f0000000000)=@nullb, 0x0, &(0x7f0000000100)='xfs\x00', 0x400080, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)) socket(0x23, 0x2, 0xfff) write$P9_RGETLOCK(r4, &(0x7f0000000040)=ANY=[], 0xffffff6a) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, 0x0, 0x58000000, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x181900, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000140)=0xe) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r5, 0x40047454, 0x0) 250.263626ms ago: executing program 2 (id=441): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0x0, 0x0, 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0x3, '\x00', 0x0, r1, 0x2, 0x0, 0x5, 0x0, @void, @value, @void, @value}, 0x50) 249.827266ms ago: executing program 3 (id=442): r0 = mq_open(&(0x7f00000000c0)='${$\x00', 0x840, 0x0, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) r1 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0xec25, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0], 0x0, 0x90, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000140), &(0x7f0000000240), 0x8, 0x77, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) socket$kcm(0x10, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), r5) sendmsg$NL802154_CMD_SET_TX_POWER(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x20040000) r7 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000005c0), 0x119180, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x7, '\x00', r4, r7, 0x5, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000600)='./cgroup.cpu/syz1\x00', 0x1ff) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd=r0, 0x6, &(0x7f0000000380)=[{&(0x7f0000000280)=""/194, 0xc2}], 0x1}) r8 = socket(0x23, 0x2, 0x0) ioctl$sock_qrtr_TIOCINQ(r8, 0x89ee, &(0x7f0000000040)) io_uring_enter(r1, 0x847ba, 0x0, 0xe, 0x0, 0x0) 200.2084ms ago: executing program 2 (id=443): r0 = userfaultfd(0x1) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r1, &(0x7f0000004540)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$key(r1, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x649c1, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000070000040"]) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6002080a00080000fe880000000000000000000000000001fe80000000000000000000000069a2aa290000ad00000000"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="7eeeef4333fea3ba811d0ce61cf780b539b8a6f61ae7e73b9fc5b75fc5d1e6a84fc0117d83dbe7", @ANYBLOB="6cd3911f975e4edf549d920dbe252aa2e90e02ec47678ef888659f6701672844ad7ded3e96e854ef6cf7fdac1fb8d836d8dc5317de514ac116cf5771363e3e4c94aebd00c07bd27b912222431ebeb81684edc345d6bccf48", @ANYRES8=r3, @ANYRES32=r2], &(0x7f00000002c0)='syzkaller\x00', 0x12c8, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2}) r8 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r8, 0xaf01, 0x0) r9 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x141000) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r9, 0xc0984124, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) ioctl$VHOST_VSOCK_SET_RUNNING(r8, 0x4004af61, &(0x7f00000002c0)=0x1) socket$igmp6(0xa, 0x3, 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r10, 0x89b0, &(0x7f0000000180)={'bridge_slave_1\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x1, 0x0, 0x2, 0x40040}}) r11 = socket(0x400000000010, 0x3, 0x0) r12 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r13, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) 199.704121ms ago: executing program 3 (id=444): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={0xffffffffffffffff, 0x0, 0x1000, 0x55, &(0x7f0000000000)="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", &(0x7f0000001000)=""/85, 0x2eea, 0x0, 0xe5, 0xee, &(0x7f0000001080)="4269b27c793c427e96a761597ea70698f0ae572604502b8cda67e710eca5bf46b12feacd2ef67c3a779f6348f8f94940989ff3b82c29d891c040c16129215c9be4cd25f617658c15c756a0539b04f874eb3b7a4ef6c1b0c4863a128fe2e768a40e19a65e4a0b2184914d72124d3a21bba0c0c04040698cf6ffdd2bbf1dc356dce1fde70eb28af2959c208020b9840a630f78ee3041462480acd1a105a138a8e8f86626af0e4998d5a0e19b71432e84b72aef57b9f0cfe5d2b7a6983e32d8ad7d1fcb3ae5f45675d9c07868d690cda343317983c5fca59499a181b729a8e628e29eb5d955fc", &(0x7f0000001180)="51380b45c6526f19e6073ebf2421247bf7bee096cd7b0de00c6abd915d4aeb9588ac5a8b1cfd55e40f8b3b6f229ba30d9737849b18513bb3bbd6ccad1017018198052691bc47d3cdfdf1ddc2a35413e7854803929315c94c55097314b963b166e67ec7ce423b316fd22e6a54e72ca4bf7a2a4917ff2091cf477862837af706de64d4edd293aa0f0c992574ece4086b3b10eb9a3af39c22e3fcfe2a2b12d230b428712a5f05c0bec213b3c725be18789a37cfcd15290ed48ab403010911f157085680c5caade7162a3badf702fb4e7cd98bfac352b5c8ad18736487db4231178694de2045b3df473618c92ac95738", 0x2, 0x0, 0xfffffffc}, 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = io_uring_setup(0x321e, &(0x7f0000001300)={0x0, 0x8b6, 0x200, 0x3, 0x3a4}) io_uring_setup(0x4123, &(0x7f0000001380)={0x0, 0x7449, 0x4, 0x1, 0x20d, 0x0, r0}) pipe(&(0x7f0000001400)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000001440)='./binderfs2/custom1\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000001480)=0xffffffffffffffff, 0x4) gettid() r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000014c0)={@in={{0x2, 0x4e20, @empty}}, 0x0, 0x0, 0x6, 0x0, "a3e26043e2da743493333cddba82efb65654eb63f1f5ead35481615ca39039a9df8b4b2e3ff0d72268192183c0c62f52f7cac2b6dd436810a8b2168c2444e10c410e1dd20e27fd0c118cd6844ed933a4"}, 0xd8) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f00000015c0)={r1, 0x5c7c, 0xc386, 0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000001600)) io_setup(0x756, &(0x7f0000001680)) socket$inet6(0xa, 0x40a73892684cee4f, 0x6) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000016c0)=0x0) fcntl$setown(r3, 0x8, r5) r6 = openat$cgroup_ro(r1, &(0x7f0000001700)='blkio.bfq.io_serviced_recursive\x00', 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000001740)}], 0x1, &(0x7f00000017c0)=""/13, 0xd}, 0xfff}], 0x1, 0x100, &(0x7f0000001840)) ioctl$VIDIOC_S_SELECTION(r1, 0xc040565f, &(0x7f0000001880)={0x7, 0x305, 0x3, {0x8, 0x5, 0x0, 0x4}}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) r8 = open$dir(&(0x7f0000001900)='./file0\x00', 0x103400, 0x4) open_tree(r8, &(0x7f0000001940)='./file0\x00', 0x800) io_setup(0xe, &(0x7f0000001980)) munmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000) recvmmsg(r7, &(0x7f0000005380)=[{{&(0x7f00000019c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001c40)=[{&(0x7f0000001a40)=""/143, 0x8f}, {&(0x7f0000001b00)=""/211, 0xd3}, {&(0x7f0000001c00)=""/52, 0x34}], 0x3, &(0x7f0000001c80)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000002c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000002d00)=""/4096, 0x1000}, {&(0x7f0000003d00)=""/161, 0xa1}, {&(0x7f0000003dc0)=""/215, 0xd7}], 0x3, &(0x7f0000003f00)=""/235, 0xeb}, 0xa534}, {{&(0x7f0000004000)=@l2tp, 0x80, &(0x7f0000004280)=[{&(0x7f0000004080)=""/1, 0x1}, {&(0x7f00000040c0)=""/106, 0x6a}, {&(0x7f0000004140)=""/103, 0x67}, {&(0x7f00000041c0)=""/128, 0x80}, {&(0x7f0000004240)=""/34, 0x22}], 0x5, &(0x7f0000004300)=""/173, 0xad}, 0xffffffff}, {{&(0x7f00000043c0)=@ethernet={0x0, @remote}, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004440)=""/16, 0x10}, {&(0x7f0000004480)=""/119, 0x77}, {&(0x7f0000004500)=""/243, 0xf3}, {&(0x7f0000004600)=""/176, 0xb0}], 0x4, &(0x7f0000004700)}, 0x6}, {{&(0x7f0000004740)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000004940)=[{&(0x7f00000047c0)=""/119, 0x77}, {&(0x7f0000004840)=""/237, 0xed}], 0x2}, 0xfffffffc}, {{&(0x7f0000004980)=@nfc_llcp, 0x80, &(0x7f0000004cc0)=[{&(0x7f0000004a00)=""/216, 0xd8}, {&(0x7f0000004b00)=""/255, 0xff}, {&(0x7f0000004c00)=""/179, 0xb3}], 0x3, &(0x7f0000004d00)=""/131, 0x83}, 0x1000}, {{&(0x7f0000004dc0)=@xdp, 0x80, &(0x7f0000005200)=[{&(0x7f0000004e40)=""/35, 0x23}, {&(0x7f0000004e80)=""/137, 0x89}, {&(0x7f0000004f40)=""/211, 0xd3}, {&(0x7f0000005040)=""/4, 0x4}, {&(0x7f0000005080)=""/5, 0x5}, {&(0x7f00000050c0)=""/148, 0x94}, {&(0x7f0000005180)=""/80, 0x50}], 0x7}, 0x6}, {{&(0x7f0000005280)=@vsock, 0x80, &(0x7f0000005300), 0x0, &(0x7f0000005340)=""/61, 0x3d}, 0x4}], 0x8, 0x40002000, &(0x7f0000005580)={0x0, 0x989680}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f00000055c0)={{&(0x7f0000fff000/0x1000)=nil, 0x1000}, 0x4}) socket$inet6(0xa, 0xb, 0xb5) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_kvm_setup_syzos_vm$x86(r7, &(0x7f0000c00000/0x400000)=nil) syz_emit_ethernet(0x22, &(0x7f0000005600)={@local, @local, @val={@void, {0x8100, 0x7, 0x0, 0x4}}, {@can={0xc, {{0x1, 0x1, 0x0, 0x1}, 0x3, 0x0, 0x0, 0x0, "7f3abba1903be539"}}}}, &(0x7f0000005640)={0x1, 0x2, [0x9cd, 0x6b7, 0x8c5, 0xad6]}) 66.926656ms ago: executing program 0 (id=445): r0 = fsopen(&(0x7f00000011c0)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) r1 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000400"/20, @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000000400000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000280)={'wg2\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r5, 0x0, 0x8000000000000}, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000300)='fib_table_lookup\x00', r4}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'wg2\x00', @multicast}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ed8000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/73, 0x49, 0x1, &(0x7f00000004c0)=""/17, 0x11}, &(0x7f0000000540)=0x40) r7 = io_uring_setup(0x79bf, &(0x7f0000000180)) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r8 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x144) close_range(r7, 0xffffffffffffffff, 0x0) r9 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r10 = syz_kvm_setup_syzos_vm$x86(r9, &(0x7f0000bff000/0x400000)=nil) r11 = syz_kvm_add_vcpu$x86(r10, &(0x7f0000000080)={0x0, 0x0}) openat$hpet(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_SET_MSRS(r11, 0x4008ae89, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000000a0100"]) 66.55526ms ago: executing program 2 (id=446): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x7, 0xa5bfce6, 0x0, 0x3, 0x1d, 0x1, "646b4c7fed409e3eedca8000f59e164dc63367e7e08474071e9f67cc6481368e22ccf521b6bbe3a6a0157ada941ad42d2b62cb6d7dc5352a94b52ae0bde3bb2c", "0db14295dccd224f8b5ef2619871507eddc5fcc80afaa01d4c3b062568a39748aa03fab4400f982510e9de5b54ae1d7051b12a0cb84eb89391fef5ca6b49111e", "d05ec8eb94ee9afa9810416be0e28111a4a710927747eda9cb44bcdc7563144f", [0x7, 0x7fffffffffffffff]}) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1}) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000300)={0x0, 0x400, 0x1, [0x197, 0x6, 0x92, 0x9, 0xffffffffffffffff], [0x100000000000, 0x8001, 0xd, 0xb293, 0x2, 0x5361, 0x8, 0xc40, 0x7, 0x8, 0xfffffffffffffeff, 0x10000, 0xfffffffffffffff8, 0x2e, 0x8, 0xe, 0x0, 0x80000000, 0x0, 0x8000, 0x10001, 0x6, 0x8, 0x8, 0x6, 0x4, 0x8, 0x100000001, 0x0, 0x3ff000000000000, 0x5, 0xc83a, 0x2, 0x6, 0x9, 0x3, 0x2, 0x0, 0x10000, 0x8eb, 0x8, 0x9, 0x2, 0x51, 0x0, 0x4, 0x8, 0x2, 0x100, 0x800, 0x1, 0x0, 0x3, 0x4, 0xfffffffffffff5e5, 0x6, 0x1ff, 0x2, 0x1, 0xccf, 0xd, 0x10000, 0x8, 0x7, 0x800, 0x3, 0x9, 0xffffffff, 0x0, 0xff, 0x7, 0x5, 0x137, 0x5, 0x0, 0x0, 0x8, 0xfffffffffffffaba, 0x72bb, 0x4, 0x3, 0x1000, 0x100, 0x7fffffff, 0xd3a8, 0x8000000000000000, 0x3ff, 0x7fff, 0x6, 0xff, 0x75a, 0x3, 0x7f, 0xfffffffffffffffc, 0x7, 0x3f, 0xf, 0x7ff, 0x1, 0xdf79, 0x7c, 0x164d, 0x5, 0x1, 0xff, 0xc, 0x7, 0x7, 0x2, 0x5, 0x8000, 0x7, 0x5, 0x836, 0x7fffffffffffffff, 0x0, 0x0, 0x5, 0x1, 0x7]}) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000740)={r2, 0xc, 0x1, [0x5, 0x4fd0, 0x1, 0x6], [0x8, 0xfffffffffffffe01, 0x3, 0x9, 0x40, 0x4, 0x5, 0x5346b5de, 0x80000000, 0xffffffffffffffff, 0xf50, 0x3, 0x1, 0x1ff, 0x9, 0x1, 0x100000001, 0x9e, 0xffffffff7fffffff, 0x1, 0x1, 0xfa9, 0x7ce8, 0xd43f, 0x4, 0x8000000000000, 0x7fff, 0x2, 0x3b, 0x7fffffffffffffff, 0xfffffffffffffff9, 0x200, 0x2, 0x100000001, 0x6, 0x8, 0x2, 0x4, 0x6, 0x0, 0x2, 0x7, 0x9, 0x8, 0x10000, 0x1, 0xfffffffffffffffc, 0x3, 0x4, 0x52ac21e8, 0x8001, 0x7fffffffffffffff, 0x7f, 0x8, 0xa80e, 0x7fffffff, 0xf43, 0x1, 0x1000, 0x3, 0xd, 0x7ff, 0x47a6, 0xdc83, 0x211, 0xface, 0x7fffffffffffffff, 0xbbe, 0x0, 0xa33d, 0x5, 0xa, 0xd7, 0x8, 0x1, 0x8000, 0x4, 0x9, 0x0, 0xe, 0x8000000000000000, 0x4, 0x100000000000, 0x0, 0xfffffffffffffff8, 0x3, 0x0, 0x7, 0xa, 0x6, 0x8, 0x9, 0x8000000000000000, 0x9, 0x2, 0x5, 0x7, 0x9, 0x6, 0x5, 0x51, 0x7, 0x3, 0x0, 0x5, 0x2, 0x9, 0x100, 0x6, 0xffffffffffffffff, 0x9, 0x5, 0x9d, 0x91d, 0xfffffffffffff000, 0x5, 0x7, 0x1, 0x2, 0x3, 0xfffffffffffff433]}) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}, 0x1, 0x0, 0x0, 0x2}, 0x0) 64.986878ms ago: executing program 3 (id=447): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1000004, 0x42031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x70, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x1f}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="400000000906010200000000000a0000000000000900020073797a31000000000500010007000000180007800c00018008000140ffffffff080009"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 647.006µs ago: executing program 2 (id=448): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000940)=@delchain={0x24, 0x2a, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x3}}}, 0x24}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = io_uring_setup(0xdac, &(0x7f0000000180)={0x0, 0x0, 0x40, 0x2, 0x23}) close_range(r3, 0xffffffffffffffff, 0x0) (async) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) dup(r4) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$rxrpc(0x21, 0x2, 0xa) (async) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x3b}}}}]}]}, 0x68}}, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x12001) gettid() (async) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x36200, 0x0) ioctl$HIDIOCGRDESCSIZE(r6, 0x80044801, &(0x7f0000000040)) 284.537µs ago: executing program 2 (id=449): llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/4096, 0x1000) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001040), 0x202, 0x0) close_range(r0, r1, 0x2) 0s ago: executing program 3 (id=450): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000000007016cde24b5fe68a66d00020000080900010073797a31000000000c000540000000020c00064000000000000000fe"], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x40) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x6, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4040aea0, &(0x7f0000000300)=@x86={0xfd, 0x10, 0xb, 0x0, 0x7, 0x81, 0x50, 0xff, 0x6, 0xe, 0x4, 0x10, 0x0, 0x7, 0x4, 0x3, 0x4, 0x4e, 0x0, '\x00', 0xf7, 0x4}) r5 = socket(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000003640)=[{{&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e23}, 0x6e, 0x0}}, {{&(0x7f0000000f40)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x60, 0x1}}, {{&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1400000000000000010000000100e150718ef770dfa87ca50a740006db3fcf9889af774f27d034eb1236c2814629806e1819c12469b522b02016e2467262dee3c49ca16bbe03ac3ac58d657f65e835dea019dae2198c948f871e8308e9c35dd43e3673de114f63714723f5393f81430848609a08035db4bd6155025c57eda0705bd9b7fed8197f34840725009b726e377df3f2b589", @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x24004000}}], 0x3, 0x0) r6 = fsmount(r1, 0x0, 0x88) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xb, &(0x7f00000002c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write$cgroup_int(r8, 0x0, 0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat(r6, &(0x7f0000000340)='.\x00', 0x0, 0x131) openat$cgroup_ro(r6, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:55520' (ED25519) to the list of known hosts. [ 61.199530][ T40] audit: type=1400 audit(1748305212.923:66): avc: denied { name_bind } for pid=5927 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 61.236202][ T40] audit: type=1400 audit(1748305212.953:67): avc: denied { write } for pid=5928 comm="sh" path="pipe:[2026]" dev="pipefs" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 61.258649][ T40] audit: type=1400 audit(1748305212.983:68): avc: denied { execute } for pid=5928 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.268877][ T40] audit: type=1400 audit(1748305212.983:69): avc: denied { execute_no_trans } for pid=5928 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 63.728256][ T40] audit: type=1400 audit(1748305215.453:70): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 63.733140][ T5928] cgroup: Unknown subsys name 'net' [ 63.737725][ T40] audit: type=1400 audit(1748305215.453:71): avc: denied { mount } for pid=5928 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.750668][ T40] audit: type=1400 audit(1748305215.473:72): avc: denied { unmount } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 63.901933][ T5928] cgroup: Unknown subsys name 'cpuset' [ 63.907856][ T5928] cgroup: Unknown subsys name 'rlimit' [ 64.051841][ T40] audit: type=1400 audit(1748305215.773:73): avc: denied { setattr } for pid=5928 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.061719][ T40] audit: type=1400 audit(1748305215.773:74): avc: denied { create } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.070731][ T40] audit: type=1400 audit(1748305215.773:75): avc: denied { write } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.079643][ T40] audit: type=1400 audit(1748305215.773:76): avc: denied { read } for pid=5928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 64.088178][ T40] audit: type=1400 audit(1748305215.793:77): avc: denied { mounton } for pid=5928 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 64.101643][ T40] audit: type=1400 audit(1748305215.793:78): avc: denied { mount } for pid=5928 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 64.112167][ T40] audit: type=1400 audit(1748305215.793:79): avc: denied { read } for pid=5648 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 64.141243][ T5931] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.255767][ T5928] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.888564][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 69.888578][ T40] audit: type=1400 audit(1748305221.613:84): avc: denied { execmem } for pid=5935 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 70.202312][ T40] audit: type=1400 audit(1748305221.923:85): avc: denied { create } for pid=5939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.210737][ T40] audit: type=1400 audit(1748305221.923:86): avc: denied { read write } for pid=5940 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.228280][ T40] audit: type=1400 audit(1748305221.923:87): avc: denied { read write } for pid=5939 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.238604][ T40] audit: type=1400 audit(1748305221.923:88): avc: denied { open } for pid=5940 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 70.248627][ T40] audit: type=1400 audit(1748305221.943:89): avc: denied { ioctl } for pid=5939 comm="syz-executor" path="socket:[6197]" dev="sockfs" ino=6197 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.255695][ T5948] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.260190][ T40] audit: type=1400 audit(1748305221.943:90): avc: denied { ioctl } for pid=5940 comm="syz-executor" path="socket:[3022]" dev="sockfs" ino=3022 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.263028][ T5948] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.275925][ T5948] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.279326][ T5948] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.282985][ T5948] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.285884][ T5948] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.290468][ T5952] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.296829][ T40] audit: type=1400 audit(1748305222.013:91): avc: denied { read } for pid=5940 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.297728][ T5952] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.304300][ T40] audit: type=1400 audit(1748305222.013:92): avc: denied { open } for pid=5940 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 70.304872][ T5954] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.306436][ T5954] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.307941][ T5952] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.314793][ T40] audit: type=1400 audit(1748305222.013:93): avc: denied { mounton } for pid=5940 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 70.315140][ T5957] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.316176][ T5957] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.317156][ T5957] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.317793][ T5957] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 70.318119][ T5954] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 70.319687][ T5954] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 70.320382][ T5952] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.320890][ T5952] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.360374][ T5954] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 70.736649][ T5940] chnl_net:caif_netlink_parms(): no params data found [ 70.863126][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 70.870700][ T5941] chnl_net:caif_netlink_parms(): no params data found [ 70.887299][ T5942] chnl_net:caif_netlink_parms(): no params data found [ 71.171920][ T5940] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.175405][ T5940] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.178793][ T5940] bridge_slave_0: entered allmulticast mode [ 71.182380][ T5940] bridge_slave_0: entered promiscuous mode [ 71.254690][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.257959][ T5940] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.260860][ T5940] bridge_slave_1: entered allmulticast mode [ 71.264665][ T5940] bridge_slave_1: entered promiscuous mode [ 71.347773][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.350809][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.353886][ T5939] bridge_slave_0: entered allmulticast mode [ 71.358645][ T5939] bridge_slave_0: entered promiscuous mode [ 71.430331][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.433629][ T5942] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.437095][ T5942] bridge_slave_0: entered allmulticast mode [ 71.441005][ T5942] bridge_slave_0: entered promiscuous mode [ 71.444877][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.447917][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.451002][ T5939] bridge_slave_1: entered allmulticast mode [ 71.454849][ T5939] bridge_slave_1: entered promiscuous mode [ 71.461092][ T5940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.465155][ T5941] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.471768][ T5941] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.474818][ T5941] bridge_slave_0: entered allmulticast mode [ 71.480325][ T5941] bridge_slave_0: entered promiscuous mode [ 71.485001][ T5941] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.488099][ T5941] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.491073][ T5941] bridge_slave_1: entered allmulticast mode [ 71.494982][ T5941] bridge_slave_1: entered promiscuous mode [ 71.498648][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.501616][ T5942] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.504617][ T5942] bridge_slave_1: entered allmulticast mode [ 71.508521][ T5942] bridge_slave_1: entered promiscuous mode [ 71.537529][ T5940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.721850][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.728612][ T5940] team0: Port device team_slave_0 added [ 71.733983][ T5941] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.741092][ T5942] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.748782][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.753995][ T5940] team0: Port device team_slave_1 added [ 71.758383][ T5941] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.765877][ T5942] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.974096][ T5941] team0: Port device team_slave_0 added [ 71.980524][ T5941] team0: Port device team_slave_1 added [ 71.986016][ T5942] team0: Port device team_slave_0 added [ 71.992538][ T5939] team0: Port device team_slave_0 added [ 71.996763][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.999789][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.010901][ T5940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.050409][ T5942] team0: Port device team_slave_1 added [ 72.054204][ T5939] team0: Port device team_slave_1 added [ 72.057111][ T5940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.060095][ T5940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.071186][ T5940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.077428][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.079745][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.088009][ T5941] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.185588][ T5941] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.188923][ T5941] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.199698][ T5941] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.204745][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.207897][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.218516][ T5942] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.224455][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.228325][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.238785][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.244928][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.248013][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.258741][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.275125][ T5942] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.278475][ T5942] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.289889][ T5942] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.347247][ T5286] Bluetooth: hci0: command tx timeout [ 72.347282][ T5946] Bluetooth: hci1: command tx timeout [ 72.347315][ T5954] Bluetooth: hci3: command tx timeout [ 72.386495][ T5940] hsr_slave_0: entered promiscuous mode [ 72.389801][ T5940] hsr_slave_1: entered promiscuous mode [ 72.427251][ T5954] Bluetooth: hci2: command tx timeout [ 72.482870][ T5941] hsr_slave_0: entered promiscuous mode [ 72.486089][ T5941] hsr_slave_1: entered promiscuous mode [ 72.490050][ T5941] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.493402][ T5941] Cannot create hsr debugfs directory [ 72.555242][ T5939] hsr_slave_0: entered promiscuous mode [ 72.558465][ T5939] hsr_slave_1: entered promiscuous mode [ 72.560587][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.562939][ T5939] Cannot create hsr debugfs directory [ 72.571062][ T5942] hsr_slave_0: entered promiscuous mode [ 72.574264][ T5942] hsr_slave_1: entered promiscuous mode [ 72.577455][ T5942] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.580689][ T5942] Cannot create hsr debugfs directory [ 73.095606][ T5940] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.105520][ T5940] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.112572][ T5940] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.128366][ T5940] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.170458][ T5941] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.177144][ T5941] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.187500][ T5941] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.194410][ T5941] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.276730][ T5942] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.283097][ T5942] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.289738][ T5942] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.296615][ T5942] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.375898][ T5939] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.383212][ T5939] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.391259][ T5939] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.399507][ T5940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.407111][ T5939] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.448408][ T5940] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.468788][ T99] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.471988][ T99] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.487242][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.490286][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.499003][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.558550][ T5941] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.580695][ T5942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.588953][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.592262][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.612533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.615443][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.636081][ T5942] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.657408][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.668891][ T93] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.671813][ T93] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.692952][ T93] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.695919][ T93] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.713771][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.739681][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.742725][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.749326][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.752455][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.827906][ T5940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.845457][ T5939] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.904121][ T5940] veth0_vlan: entered promiscuous mode [ 73.919979][ T5940] veth1_vlan: entered promiscuous mode [ 73.942839][ T5941] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.982935][ T5940] veth0_macvtap: entered promiscuous mode [ 73.995985][ T5940] veth1_macvtap: entered promiscuous mode [ 74.010286][ T5942] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.029354][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.048340][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.058652][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.072696][ T5941] veth0_vlan: entered promiscuous mode [ 74.081299][ T5940] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.085187][ T5940] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.091961][ T5940] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.095587][ T5940] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.122463][ T5941] veth1_vlan: entered promiscuous mode [ 74.149263][ T5942] veth0_vlan: entered promiscuous mode [ 74.195959][ T5939] veth0_vlan: entered promiscuous mode [ 74.199172][ T5942] veth1_vlan: entered promiscuous mode [ 74.203660][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.207829][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.219235][ T5941] veth0_macvtap: entered promiscuous mode [ 74.228481][ T5939] veth1_vlan: entered promiscuous mode [ 74.239644][ T5941] veth1_macvtap: entered promiscuous mode [ 74.254454][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.258084][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.273639][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.277413][ T5942] veth0_macvtap: entered promiscuous mode [ 74.287606][ T5942] veth1_macvtap: entered promiscuous mode [ 74.294435][ T5941] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.314516][ T5940] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.316174][ T5941] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.323868][ T5941] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.327443][ T5941] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.330628][ T5941] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.337030][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.341124][ T5939] veth0_macvtap: entered promiscuous mode [ 74.352260][ T5942] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.360932][ T5939] veth1_macvtap: entered promiscuous mode [ 74.366955][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.370383][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.373894][ T5942] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.378925][ T5942] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.405189][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.424684][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.427142][ T5954] Bluetooth: hci0: command tx timeout [ 74.427222][ T5286] Bluetooth: hci3: command tx timeout [ 74.427986][ T5286] Bluetooth: hci1: command tx timeout [ 74.433159][ T5939] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.441107][ T5939] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.445673][ T5939] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.453602][ T5939] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.496230][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.501325][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.506503][ T5286] Bluetooth: hci2: command tx timeout [ 74.539386][ T1142] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.543669][ T1142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.561724][ T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.565326][ T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.591983][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.595219][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.616216][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.621355][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.640922][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.644144][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.859077][ T6033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.862118][ T6033] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.865310][ T6033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.870022][ T6033] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6'. [ 74.910894][ T40] kauditd_printk_skb: 45 callbacks suppressed [ 74.910907][ T40] audit: type=1400 audit(1748305226.633:139): avc: denied { create } for pid=6034 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 74.920936][ T40] audit: type=1400 audit(1748305226.633:140): avc: denied { bind } for pid=6034 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 74.929443][ T40] audit: type=1400 audit(1748305226.653:141): avc: denied { append } for pid=6034 comm="syz.3.9" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 74.985009][ T40] audit: type=1400 audit(1748305226.703:142): avc: denied { map_create } for pid=6039 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 74.996217][ T40] audit: type=1400 audit(1748305226.703:143): avc: denied { map_read map_write } for pid=6039 comm="syz.3.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 75.003547][ T40] audit: type=1400 audit(1748305226.713:144): avc: denied { read } for pid=6039 comm="syz.3.10" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.013877][ T40] audit: type=1400 audit(1748305226.713:145): avc: denied { open } for pid=6039 comm="syz.3.10" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.027238][ T40] audit: type=1400 audit(1748305226.713:146): avc: denied { ioctl } for pid=6039 comm="syz.3.10" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.037083][ T40] audit: type=1400 audit(1748305226.713:147): avc: denied { map } for pid=6039 comm="syz.3.10" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.045210][ T40] audit: type=1400 audit(1748305226.713:148): avc: denied { execute } for pid=6039 comm="syz.3.10" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 75.099354][ T6042] SELinux: ebitmap: start bit 0 comes after start bit 384 [ 75.108308][ T6042] SELinux: failed to load policy [ 75.440100][ T6054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15'. [ 75.443735][ T6054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 75.693160][ T6069] Zero length message leads to an empty skb [ 75.813864][ T6082] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.844240][ T6084] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 75.961911][ T6086] netlink: 'syz.2.24': attribute type 2 has an invalid length. [ 75.965026][ T6086] netlink: 784 bytes leftover after parsing attributes in process `syz.2.24'. [ 76.133415][ T6116] af_packet: tpacket_rcv: packet too big, clamped from 3 to 4294967272. macoff=96 [ 76.504707][ T5286] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 76.509142][ T6147] hpfs: Bad magic ... probably not HPFS [ 76.512255][ T5286] CPU: 0 UID: 0 PID: 5286 Comm: kworker/u33:1 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 76.512278][ T5286] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.512289][ T5286] Workqueue: hci0 hci_rx_work [ 76.512327][ T5286] Call Trace: [ 76.512333][ T5286] [ 76.512340][ T5286] dump_stack_lvl+0x16c/0x1f0 [ 76.512367][ T5286] sysfs_warn_dup+0x7f/0xa0 [ 76.512384][ T5286] sysfs_create_dir_ns+0x24b/0x2b0 [ 76.512401][ T5286] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 76.512418][ T5286] ? find_held_lock+0x2b/0x80 [ 76.512442][ T5286] ? do_raw_spin_unlock+0x172/0x230 [ 76.512462][ T5286] kobject_add_internal+0x2c4/0x9b0 [ 76.512498][ T5286] kobject_add+0x16e/0x240 [ 76.512515][ T5286] ? __pfx_kobject_add+0x10/0x10 [ 76.512533][ T5286] ? do_raw_spin_unlock+0x172/0x230 [ 76.512551][ T5286] ? kobject_put+0xab/0x5a0 [ 76.512580][ T5286] device_add+0x288/0x1a70 [ 76.512610][ T5286] ? __pfx_dev_set_name+0x10/0x10 [ 76.512636][ T5286] ? __pfx_device_add+0x10/0x10 [ 76.512656][ T5286] ? mgmt_send_event_skb+0x2fb/0x460 [ 76.512687][ T5286] hci_conn_add_sysfs+0x17e/0x230 [ 76.512706][ T5286] le_conn_complete_evt+0x1075/0x1d70 [ 76.512737][ T5286] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 76.512762][ T5286] ? hci_event_packet+0x43c/0x1190 [ 76.512790][ T5286] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 76.512816][ T5286] ? skb_pull_data+0x166/0x210 [ 76.512837][ T5286] hci_le_meta_evt+0x2f6/0x5e0 [ 76.512852][ T5286] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 76.512880][ T5286] hci_event_packet+0x66c/0x1190 [ 76.512904][ T5286] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 76.512921][ T5286] ? __pfx_hci_event_packet+0x10/0x10 [ 76.512955][ T5286] ? kcov_remote_start+0x3c9/0x6d0 [ 76.512972][ T5286] ? lockdep_hardirqs_on+0x7c/0x110 [ 76.512999][ T5286] hci_rx_work+0x2c5/0x16b0 [ 76.513016][ T5286] ? rcu_is_watching+0x12/0xc0 [ 76.513039][ T5286] process_one_work+0x9cf/0x1b70 [ 76.513067][ T5286] ? __pfx_process_one_work+0x10/0x10 [ 76.513091][ T5286] ? assign_work+0x1a0/0x250 [ 76.513111][ T5286] worker_thread+0x6c8/0xf10 [ 76.513138][ T5286] ? __pfx_worker_thread+0x10/0x10 [ 76.513155][ T5286] kthread+0x3c2/0x780 [ 76.513171][ T5286] ? __pfx_kthread+0x10/0x10 [ 76.513185][ T5286] ? __pfx_kthread+0x10/0x10 [ 76.513199][ T5286] ? __pfx_kthread+0x10/0x10 [ 76.513214][ T5286] ? __pfx_kthread+0x10/0x10 [ 76.513228][ T5286] ? rcu_is_watching+0x12/0xc0 [ 76.513247][ T5286] ? __pfx_kthread+0x10/0x10 [ 76.513264][ T5286] ret_from_fork+0x45/0x80 [ 76.513281][ T5286] ? __pfx_kthread+0x10/0x10 [ 76.513297][ T5286] ret_from_fork_asm+0x1a/0x30 [ 76.513333][ T5286] [ 76.513356][ T5286] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 76.517187][ T5954] Bluetooth: hci3: command tx timeout [ 76.518624][ T5286] Bluetooth: hci0: failed to register connection device [ 76.520387][ T5946] Bluetooth: hci1: command tx timeout [ 76.596532][ T5954] Bluetooth: hci2: command tx timeout [ 76.598725][ T5286] Bluetooth: hci0: command tx timeout [ 76.753478][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 76.757262][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 77.042377][ T6149] No source specified [ 77.045181][ T6150] No source specified [ 77.158365][ T6154] sp0: Synchronizing with TNC [ 77.255165][ T6153] [U] è [ 77.294085][ T6163] Bluetooth: MGMT ver 1.23 [ 77.338908][ T6163] netlink: 'syz.0.46': attribute type 10 has an invalid length. [ 77.341820][ T6163] hsr_slave_0: left promiscuous mode [ 77.342892][ T6163] hsr_slave_1: left promiscuous mode [ 77.484687][ T6175] syz.1.50 uses obsolete (PF_INET,SOCK_PACKET) [ 77.836453][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 77.857096][ T6194] futex_wake_op: syz.2.56 tries to shift op by -1; fix this program [ 77.918001][ T6202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6202 comm=syz.0.59 [ 78.006456][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 78.017419][ T10] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 78.020831][ T10] usb 8-1: config 0 has no interface number 0 [ 78.023584][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 78.028827][ T10] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 78.033906][ T10] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 78.039637][ T10] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 78.044888][ T10] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 78.049587][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.057605][ T10] usb 8-1: config 0 descriptor?? [ 78.076949][ T10] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 78.269380][ T6184] capability: warning: `syz.3.53' uses deprecated v2 capabilities in a way that may be insecure [ 78.410746][ T24] usb 8-1: USB disconnect, device number 2 [ 78.418755][ T24] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 78.464594][ T6237] tipc: Can't bind to reserved service type 1 [ 78.586476][ T5286] Bluetooth: hci3: command tx timeout [ 78.596546][ T5286] Bluetooth: hci1: command tx timeout [ 78.669406][ T5954] Bluetooth: hci2: command tx timeout [ 78.671752][ T5286] Bluetooth: hci0: command tx timeout [ 78.858645][ T6258] warning: `syz.0.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 78.972431][ T6263] overlayfs: missing 'lowerdir' [ 79.027734][ T6271] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 79.137614][ T1328] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.153201][ T6278] netlink: 212408 bytes leftover after parsing attributes in process `syz.2.70'. [ 79.159305][ T6277] ntfs3(sr0): Primary boot signature is not NTFS. [ 79.162650][ T6277] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 79.299703][ T1328] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 79.303150][ T1328] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 79.305981][ T1328] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.312683][ T6258] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.319002][ T1328] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 79.471520][ T6312] random: crng reseeded on system resumption [ 79.552833][ T65] usb 5-1: USB disconnect, device number 2 [ 79.851862][ T6335] netlink: 4 bytes leftover after parsing attributes in process `syz.2.90'. [ 79.894587][ T6342] netlink: 52 bytes leftover after parsing attributes in process `syz.3.88'. [ 79.986853][ T40] kauditd_printk_skb: 139 callbacks suppressed [ 79.986871][ T40] audit: type=1400 audit(1748305487.722:288): avc: denied { write } for pid=6344 comm="syz.3.93" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.001013][ T40] audit: type=1400 audit(1748305487.722:289): avc: denied { open } for pid=6344 comm="syz.3.93" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 80.054295][ T40] audit: type=1400 audit(1748305487.782:290): avc: denied { write } for pid=6350 comm="syz.3.95" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 80.101607][ T40] audit: type=1400 audit(1748305487.832:291): avc: denied { mounton } for pid=6354 comm="syz.0.96" path="/17/file1" dev="tmpfs" ino=106 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.104014][ T6355] syz.0.96: attempt to access beyond end of device [ 80.104014][ T6355] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 80.115409][ T6355] syz.0.96: attempt to access beyond end of device [ 80.115409][ T6355] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 80.119700][ T6355] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 80.122943][ T6355] syz.0.96: attempt to access beyond end of device [ 80.122943][ T6355] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 80.127797][ T6355] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 80.132227][ T6355] syz.0.96: attempt to access beyond end of device [ 80.132227][ T6355] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 80.137912][ T6355] syz.0.96: attempt to access beyond end of device [ 80.137912][ T6355] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 80.141813][ T6355] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 80.146220][ T6355] syz.0.96: attempt to access beyond end of device [ 80.146220][ T6355] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 80.151631][ T6355] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 80.155129][ T6355] syz.0.96: attempt to access beyond end of device [ 80.155129][ T6355] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 80.160898][ T6355] syz.0.96: attempt to access beyond end of device [ 80.160898][ T6355] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 80.164902][ T6355] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 80.168336][ T6355] syz.0.96: attempt to access beyond end of device [ 80.168336][ T6355] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 80.172442][ T6355] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 80.178015][ T6355] syz.0.96: attempt to access beyond end of device [ 80.178015][ T6355] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 80.182115][ T6355] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 80.187279][ T6355] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 80.191553][ T6355] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 80.217977][ T6353] ======================================================= [ 80.217977][ T6353] WARNING: The mand mount option has been deprecated and [ 80.217977][ T6353] and is ignored by this kernel. Remove the mand [ 80.217977][ T6353] option from the mount to silence this warning. [ 80.217977][ T6353] ======================================================= [ 80.229912][ T6353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 80.232850][ T6353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 80.243595][ T6353] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 80.245983][ T6353] UDF-fs: Scanning with blocksize 512 failed [ 80.253227][ T6353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 80.256682][ T6353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 80.260240][ T6353] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 80.263052][ T6353] UDF-fs: Scanning with blocksize 1024 failed [ 80.265470][ T6362] hfs: can't find a HFS filesystem on dev sr0 [ 80.268920][ T6353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 80.273496][ T6353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 80.280771][ T6353] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 80.283978][ T6353] UDF-fs: Scanning with blocksize 2048 failed [ 80.288569][ T6353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 80.292692][ T6353] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512 [ 80.299921][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.94'. [ 80.302106][ T6353] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found [ 80.306241][ T6353] UDF-fs: Scanning with blocksize 4096 failed [ 80.306703][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.2.94'. [ 80.309982][ T6353] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1) [ 80.315026][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.94'. [ 80.321464][ T6359] netlink: 36 bytes leftover after parsing attributes in process `syz.2.94'. [ 80.358811][ T40] audit: type=1400 audit(1748305488.082:292): avc: denied { ioctl } for pid=6352 comm="syz.2.94" path="socket:[11431]" dev="sockfs" ino=11431 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.495877][ T6378] xt_hashlimit: overflow, rate too high: 0 [ 80.606629][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.707921][ T40] audit: type=1400 audit(1748305488.442:293): avc: denied { write } for pid=6393 comm="syz.2.109" name="cgroup.subtree_control" dev="cgroup2" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.718864][ T40] audit: type=1400 audit(1748305488.442:294): avc: denied { open } for pid=6393 comm="syz.2.109" path="" dev="cgroup2" ino=235 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 80.766634][ T10] usb 5-1: Using ep0 maxpacket: 8 [ 80.773515][ T10] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 80.780295][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 80.785191][ T10] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 80.792519][ T10] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 80.797101][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 80.802519][ T40] audit: type=1400 audit(1748305488.522:295): avc: denied { read write } for pid=6399 comm="syz.3.112" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.805089][ T10] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 80.813875][ T40] audit: type=1400 audit(1748305488.532:296): avc: denied { open } for pid=6399 comm="syz.3.112" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 80.836469][ T5954] Bluetooth: hci2: command 0x0406 tx timeout [ 80.851757][ T10] usb 5-1: config 168 has an invalid descriptor of length 0, skipping remainder of the config [ 80.857661][ T10] usb 5-1: too many endpoints for config 168 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 80.862100][ T10] usb 5-1: config 168 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 80.869445][ T6408] nft_compat: unsupported protocol 0 [ 80.873696][ T6410] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.114'. [ 80.875608][ T10] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 80.880419][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.883635][ T10] usb 5-1: Product: syz [ 80.885319][ T10] usb 5-1: Manufacturer: syz [ 80.887356][ T10] usb 5-1: SerialNumber: syz [ 80.921872][ T40] audit: type=1400 audit(1748305488.652:297): avc: denied { connect } for pid=6412 comm="syz.1.116" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.937329][ T837] hid-generic 0005:10CF:0009.0002: unknown main item tag 0x0 [ 80.955766][ T837] hid-generic 0005:10CF:0009.0002: hidraw1: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 81.096560][ T5985] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 81.098816][ T6369] fuse: Invalid uid '0x00000000ffffffff' [ 81.144488][ T10] adutux 5-1:168.0: interrupt endpoints not found [ 81.147438][ T10] usb 5-1: USB disconnect, device number 3 [ 81.150495][ T5947] udevd[5947]: setting mode of /dev/bus/usb/005/003 to 020664 failed: No such file or directory [ 81.150597][ T5947] udevd[5947]: setting owner of /dev/bus/usb/005/003 to uid=0, gid=0 failed: No such file or directory [ 81.259446][ T5985] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 81.259499][ T5985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 81.259522][ T5985] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 81.259543][ T5985] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.259576][ T5985] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.259594][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.262689][ T5985] usb 8-1: config 0 descriptor?? [ 81.263536][ T6405] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 81.505859][ T6440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.122'. [ 81.683553][ T5985] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 81.693737][ T5985] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 81.714003][ T5985] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 81.746549][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 81.909140][ T10] usb 7-1: config 0 has no interfaces? [ 81.911965][ T10] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 81.911990][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.912006][ T10] usb 7-1: Product: syz [ 81.912018][ T10] usb 7-1: Manufacturer: syz [ 81.912030][ T10] usb 7-1: SerialNumber: syz [ 81.914633][ T10] usb 7-1: config 0 descriptor?? [ 82.143114][ T837] usb 7-1: USB disconnect, device number 2 [ 82.205038][ T6468] mmap: syz.2.129 (6468) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 82.536511][ T837] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 82.714616][ T6484] netlink: 8 bytes leftover after parsing attributes in process `syz.0.134'. [ 82.723816][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 82.723846][ T837] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 82.723863][ T837] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 82.723965][ T837] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 82.723985][ T837] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.733981][ T837] usb 7-1: config 0 descriptor?? [ 82.939263][ T837] usbhid 7-1:0.0: can't add hid device: -71 [ 82.939354][ T837] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 82.953390][ T837] usb 7-1: USB disconnect, device number 3 [ 83.046958][ T6498] sctp: [Deprecated]: syz.2.137 (pid 6498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 83.046958][ T6498] Use struct sctp_sack_info instead [ 83.058042][ T6498] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 808 [ 83.191389][ T6505] openvswitch: netlink: Message has 3 unknown bytes. [ 83.194096][ T6505] openvswitch: netlink: Actions may not be safe on all matching packets [ 83.465273][ T6524] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 83.702283][ T6005] usb 8-1: USB disconnect, device number 3 [ 83.921653][ T6552] netlink: zone id is out of range [ 83.923857][ T6552] netlink: zone id is out of range [ 83.926572][ T6552] netlink: zone id is out of range [ 83.928760][ T6552] netlink: zone id is out of range [ 83.930575][ T6552] netlink: zone id is out of range [ 83.932295][ T6552] netlink: zone id is out of range [ 83.934039][ T6552] netlink: zone id is out of range [ 85.108233][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 85.108248][ T40] audit: type=1400 audit(1748305492.842:354): avc: denied { create } for pid=6586 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 85.143148][ T40] audit: type=1400 audit(1748305492.872:355): avc: denied { getopt } for pid=6586 comm="syz.3.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 85.210157][ T6597] netlink: 'syz.2.163': attribute type 29 has an invalid length. [ 85.231342][ T6597] netlink: 'syz.2.163': attribute type 29 has an invalid length. [ 85.231747][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.1.164'. [ 85.240597][ T6597] netlink: 500 bytes leftover after parsing attributes in process `syz.2.163'. [ 85.246095][ T6597] unsupported nla_type 58 [ 85.257427][ T6602] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5292 sclass=netlink_route_socket pid=6602 comm=syz.2.163 [ 85.287727][ T6599] bond1: entered promiscuous mode [ 85.290886][ T6599] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.301394][ T6599] bond1: left promiscuous mode [ 85.328717][ T40] audit: type=1400 audit(1748305493.062:356): avc: denied { read } for pid=6606 comm="syz.2.166" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.342604][ T40] audit: type=1400 audit(1748305493.072:357): avc: denied { open } for pid=6606 comm="syz.2.166" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.361538][ T40] audit: type=1400 audit(1748305493.092:358): avc: denied { ioctl } for pid=6606 comm="syz.2.166" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 85.383764][ T6607] tmpfs: Bad value for 'mpol' [ 85.518898][ T6612] No source specified [ 85.546973][ T5985] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 85.716453][ T5985] usb 8-1: Using ep0 maxpacket: 16 [ 85.720677][ T5985] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.721987][ T40] audit: type=1400 audit(1748305493.452:359): avc: denied { execute } for pid=6622 comm="syz.1.172" path="anon_inode:[kvm-gmem]" dev="anon_inodefs" ino=11721 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 85.726073][ T5985] usb 8-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 85.726097][ T5985] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.730667][ T5985] usb 8-1: config 0 descriptor?? [ 85.738226][ T40] audit: type=1800 audit(1748305493.452:360): pid=6623 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.172" name="[kvm-gmem]" dev="anon_inodefs" ino=11721 res=0 errno=0 [ 85.752284][ T5985] input: bcm5974 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input7 [ 85.768609][ T40] audit: type=1400 audit(1748305493.492:361): avc: denied { read } for pid=5331 comm="acpid" name="mouse2" dev="devtmpfs" ino=2870 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.778997][ T40] audit: type=1400 audit(1748305493.492:362): avc: denied { open } for pid=5331 comm="acpid" path="/dev/input/mouse2" dev="devtmpfs" ino=2870 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 85.862764][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.173'. [ 85.866515][ T6626] netlink: 'syz.1.173': attribute type 19 has an invalid length. [ 85.871242][ T6626] netlink: 12 bytes leftover after parsing attributes in process `syz.1.173'. [ 85.959001][ T5331] bcm5974 8-1:0.0: could not read from device [ 85.973574][ T5331] bcm5974 8-1:0.0: could not read from device [ 85.978442][ T5985] usb 8-1: USB disconnect, device number 4 [ 85.979247][ T5331] bcm5974 8-1:0.0: could not read from device [ 86.330104][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 86.333613][ T6644] netlink: 24 bytes leftover after parsing attributes in process `syz.1.177'. [ 86.339845][ T6644] process 'syz.1.177' launched './file2' with NULL argv: empty string added [ 86.344517][ T40] audit: type=1400 audit(1748305494.072:363): avc: denied { execute_no_trans } for pid=6643 comm="syz.1.177" path="/50/file2" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.525515][ T6655] exFAT-fs (nullb0): mounting with "discard" option, but the device does not support discard [ 86.532163][ T6655] exFAT-fs (nullb0): invalid boot record signature [ 86.534849][ T6655] exFAT-fs (nullb0): failed to read boot sector [ 86.540549][ T6655] exFAT-fs (nullb0): failed to recognize exfat type [ 86.716465][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.846707][ T58] usb 6-1: device descriptor read/64, error -71 [ 86.992884][ T34] cfg80211: failed to load regulatory.db [ 87.036631][ T6649] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 87.096501][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 87.176569][ T6649] usb 7-1: device descriptor read/64, error -71 [ 87.226446][ T58] usb 6-1: device descriptor read/64, error -71 [ 87.232684][ T6688] netlink: 12 bytes leftover after parsing attributes in process `syz.0.188'. [ 87.238002][ T6688] netlink: 64 bytes leftover after parsing attributes in process `syz.0.188'. [ 87.336677][ T58] usb usb6-port1: attempt power cycle [ 87.416540][ T6649] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 87.546591][ T6649] usb 7-1: device descriptor read/64, error -71 [ 87.553864][ T6706] netlink: 'syz.0.192': attribute type 3 has an invalid length. [ 87.554236][ T6707] netlink: 'syz.0.192': attribute type 3 has an invalid length. [ 87.557212][ T6706] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 87.560609][ T6707] netlink: 8 bytes leftover after parsing attributes in process `syz.0.192'. [ 87.666841][ T6649] usb usb7-port1: attempt power cycle [ 87.696594][ T58] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 87.717288][ T58] usb 6-1: device descriptor read/8, error -71 [ 87.967618][ T58] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 87.988447][ T58] usb 6-1: device descriptor read/8, error -71 [ 88.026597][ T6649] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 88.059130][ T6649] usb 7-1: device descriptor read/8, error -71 [ 88.096768][ T58] usb usb6-port1: unable to enumerate USB device [ 88.306532][ T6649] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 88.328099][ T6649] usb 7-1: device descriptor read/8, error -71 [ 88.436684][ T6649] usb usb7-port1: unable to enumerate USB device [ 88.827760][ T5954] Bluetooth: hci4: command 0x1003 tx timeout [ 88.831178][ T5286] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 88.863475][ T6728] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.056698][ T5985] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 89.196453][ T5985] usb 7-1: device descriptor read/64, error -71 [ 89.446508][ T5985] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 89.507605][ T6746] 9pnet_virtio: no channels available for device syz [ 89.576463][ T5985] usb 7-1: device descriptor read/64, error -71 [ 89.686861][ T5985] usb usb7-port1: attempt power cycle [ 89.937003][ T6758] netlink: 'syz.2.207': attribute type 11 has an invalid length. [ 90.166193][ T40] kauditd_printk_skb: 24 callbacks suppressed [ 90.166208][ T40] audit: type=1400 audit(1748305497.892:388): avc: denied { execute_no_trans } for pid=6766 comm="syz.3.209" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=11837 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 90.546523][ T6649] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 90.571856][ T6784] netlink: 'syz.1.214': attribute type 1 has an invalid length. [ 90.578706][ T40] audit: type=1326 audit(1748305498.312:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f78e969 code=0x7ffc0000 [ 90.589199][ T40] audit: type=1326 audit(1748305498.312:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=139 compat=0 ip=0x7f966f78e969 code=0x7ffc0000 [ 90.599402][ T40] audit: type=1326 audit(1748305498.312:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f78e969 code=0x7ffc0000 [ 90.608955][ T40] audit: type=1326 audit(1748305498.312:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7f966f78e969 code=0x7ffc0000 [ 90.618587][ T40] audit: type=1326 audit(1748305498.312:393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f966f78e969 code=0x7ffc0000 [ 90.630925][ T40] audit: type=1326 audit(1748305498.312:394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6783 comm="syz.1.214" exe="/syz-executor" sig=0 arch=c000003e syscall=47 compat=0 ip=0x7f966f78e969 code=0x7ffc0000 [ 90.698186][ T6649] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 90.702344][ T6649] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.706113][ T6649] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.710934][ T6649] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.714705][ T6649] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.718489][ T6649] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.723038][ T6649] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.727488][ T6649] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.731044][ T6649] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.735396][ T6649] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.740338][ T6649] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.744135][ T6649] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.749207][ T6649] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.757412][ T6649] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.761553][ T6649] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.766230][ T6649] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.770832][ T6649] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.774682][ T6649] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.777587][ T40] audit: type=1400 audit(1748305498.512:395): avc: denied { ioctl } for pid=6785 comm="syz.2.215" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 90.779448][ T6649] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.794888][ T6649] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.800057][ T6649] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.804862][ T6649] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.809499][ T6649] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 90.813832][ T6649] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 90.818774][ T6649] usb 8-1: config 0 interface 0 has no altsetting 0 [ 90.823763][ T6649] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 90.828027][ T6649] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 90.831828][ T6649] usb 8-1: Product: syz [ 90.833760][ T6649] usb 8-1: Manufacturer: syz [ 90.835826][ T6649] usb 8-1: SerialNumber: syz [ 90.842122][ T6649] usb 8-1: config 0 descriptor?? [ 90.853042][ T6649] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 90.944936][ T6797] __nla_validate_parse: 5 callbacks suppressed [ 90.944953][ T6797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'. [ 90.952178][ T6797] netlink: 16 bytes leftover after parsing attributes in process `syz.0.218'. [ 90.975281][ T6797] IPv6: sit1: Disabled Multicast RS [ 90.980197][ T6797] sit1: entered allmulticast mode [ 91.030391][ T40] audit: type=1400 audit(1748305498.762:396): avc: denied { accept } for pid=6800 comm="syz.2.220" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 91.041717][ T6801] serio: Serial port ptm1 [ 91.050523][ T40] audit: type=1400 audit(1748305498.782:397): avc: denied { mounton } for pid=6772 comm="syz.3.212" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 91.071898][ T5985] usb 8-1: USB disconnect, device number 5 [ 91.079087][ T5985] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 91.353467][ T6817] xt_bpf: check failed: parse error [ 91.507391][ T6821] netlink: 'syz.2.225': attribute type 21 has an invalid length. [ 91.510609][ T6821] netlink: 'syz.2.225': attribute type 6 has an invalid length. [ 91.513666][ T6821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.225'. [ 91.519797][ T6821] netlink: 'syz.2.225': attribute type 21 has an invalid length. [ 91.522984][ T6821] netlink: 'syz.2.225': attribute type 6 has an invalid length. [ 91.526088][ T6821] netlink: 132 bytes leftover after parsing attributes in process `syz.2.225'. [ 91.669532][ T6829] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 91.672670][ T6829] netlink: 'syz.3.228': attribute type 8 has an invalid length. [ 91.675587][ T6829] netlink: 132 bytes leftover after parsing attributes in process `syz.3.228'. [ 91.687522][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 91.802435][ T6839] mkiss: ax0: crc mode is auto. [ 91.836936][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 91.842746][ T10] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 91.848386][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.856638][ T10] usb 5-1: config 0 descriptor?? [ 91.881765][ T10] as10x_usb: device has been detected [ 91.884979][ T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 91.921924][ T6850] binfmt_misc: register: failed to install interpreter file ./file0 [ 91.944149][ T10] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 92.008048][ T10] as10x_usb: error during firmware upload part1 [ 92.011187][ T10] Registered device nBox DVB-T Dongle [ 92.084579][ T6005] usb 5-1: USB disconnect, device number 4 [ 92.121036][ T6005] Unregistered device nBox DVB-T Dongle [ 92.147804][ T6005] as10x_usb: device has been disconnected [ 92.436054][ T6874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.537430][ T6889] netlink: 8 bytes leftover after parsing attributes in process `syz.1.246'. [ 92.559981][ T6885] tls_set_device_offload: netdev not found [ 92.588213][ T6896] netlink: 'syz.2.247': attribute type 1 has an invalid length. [ 92.591703][ T6896] netlink: 4 bytes leftover after parsing attributes in process `syz.2.247'. [ 92.710384][ T6907] bio_check_eod: 14 callbacks suppressed [ 92.710401][ T6907] syz.3.251: attempt to access beyond end of device [ 92.710401][ T6907] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 92.720396][ T6907] syz.3.251: attempt to access beyond end of device [ 92.720396][ T6907] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 92.725616][ T6907] Mount JFS Failure: -5 [ 92.727911][ T6907] jfs_mount failed w/return code = -5 [ 92.799147][ T6915] xt_hashlimit: size too large, truncated to 1048576 [ 92.865580][ T6927] Cannot find del_set index 1 as target [ 92.879944][ T6925] [U]  [ 92.917152][ T6929] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 92.932311][ T6933] netlink: 12 bytes leftover after parsing attributes in process `syz.3.258'. [ 92.939206][ T6933] net_ratelimit: 398 callbacks suppressed [ 92.939219][ T6933] openvswitch: netlink: Flow actions attr not present in new flow. [ 92.953501][ T6929] netlink: 830 bytes leftover after parsing attributes in process `syz.1.257'. [ 93.012923][ T6938] overlayfs: maximum fs stacking depth exceeded [ 93.049198][ T6938] overlayfs: maximum fs stacking depth exceeded [ 93.133271][ T6951] netlink: 'syz.0.263': attribute type 30 has an invalid length. [ 93.153668][ T6951] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.158553][ T6951] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.162693][ T6951] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.166894][ T6951] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 93.184146][ T6951] ip6gretap1: entered promiscuous mode [ 93.188043][ T6951] ip6gretap1: entered allmulticast mode [ 93.303628][ T6966] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 93.310950][ T6966] SELinux: policydb string length 0 does not match expected length 8 [ 93.313667][ T6966] SELinux: failed to load policy [ 93.369488][ T6968] loop2: detected capacity change from 0 to 7 [ 93.380333][ T6968] Dev loop2: unable to read RDB block 7 [ 93.382970][ T6968] loop2: unable to read partition table [ 93.385607][ T6968] loop2: partition table beyond EOD, truncated [ 93.390082][ T6968] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 93.475977][ T6981] netlink: 'syz.0.272': attribute type 7 has an invalid length. [ 93.475986][ T6982] tmpfs: Invalid gid '0x00000000ffffffff' [ 93.491919][ T6981] bridge0: entered promiscuous mode [ 93.496576][ T6981] ip6gretap0: entered promiscuous mode [ 93.500237][ T6981] gretap0: entered promiscuous mode [ 93.502381][ T6981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.506210][ T6981] Cannot create hsr debugfs directory [ 93.841650][ T6991] Driver unsupported XDP return value 0 on prog (id 50) dev N/A, expect packet loss! [ 94.080822][ T7011] trusted_key: encrypted_key: insufficient parameters specified [ 94.216632][ T7017] overlayfs: upper fs does not support tmpfile. [ 94.837239][ T7050] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 95.148014][ T837] libceph: connect (1)[c::]:6789 error -101 [ 95.151083][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 95.157857][ T837] libceph: connect (1)[c::]:6789 error -101 [ 95.160613][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 95.204002][ T10] libceph: connect (1)[c::]:6789 error -101 [ 95.208714][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 95.307980][ T7087] /dev/nullb0: Can't open blockdev [ 95.316228][ T7103] syz.1.306 (7103): /proc/7102/oom_adj is deprecated, please use /proc/7102/oom_score_adj instead. [ 95.371170][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 95.371186][ T40] audit: type=1400 audit(1748305503.102:445): avc: denied { create } for pid=7105 comm="syz.1.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 95.421612][ T837] libceph: connect (1)[c::]:6789 error -101 [ 95.424305][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 95.466825][ T10] libceph: connect (1)[c::]:6789 error -101 [ 95.470487][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 95.526710][ T40] audit: type=1400 audit(1748305503.252:446): avc: denied { bind } for pid=7125 comm="syz.2.312" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 95.536211][ T40] audit: type=1400 audit(1748305503.262:447): avc: denied { watch } for pid=7125 comm="syz.2.312" path="/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 95.557976][ T40] audit: type=1400 audit(1748305503.262:448): avc: denied { watch_sb watch_reads } for pid=7125 comm="syz.2.312" path="/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=430 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.577927][ T7101] hid-generic 0003:0627:0001.0001: pid 7101 passed too short report [ 95.601180][ T40] audit: type=1400 audit(1748305503.332:449): avc: denied { getopt } for pid=7100 comm="syz.0.305" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.657217][ T7140] openvswitch: netlink: IPv4 tunnel dst address is zero [ 95.658833][ T40] audit: type=1400 audit(1748305503.382:450): avc: denied { write } for pid=7137 comm="syz.2.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 95.722911][ T7147] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 95.774002][ T40] audit: type=1400 audit(1748305503.502:451): avc: denied { append } for pid=7152 comm="syz.1.320" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 95.792920][ T7153] binder: 7152:7153 ioctl 40046205 200000000040 returned -22 [ 95.792986][ T7154] binder: 7152:7154 ioctl 40046205 200000000040 returned -22 [ 95.803735][ T7153] binder: 7152:7153 ioctl c0306201 2000000005c0 returned -14 [ 95.805478][ T7154] binder: 7152:7154 ioctl c0306201 2000000005c0 returned -14 [ 95.893734][ T7160] tmpfs: Bad value for 'mpol' [ 95.929775][ T7078] ceph: No mds server is up or the cluster is laggy [ 95.929870][ T7093] ceph: No mds server is up or the cluster is laggy [ 95.937753][ T5286] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 95.953951][ T837] libceph: connect (1)[c::]:6789 error -101 [ 95.967462][ T837] libceph: mon0 (1)[c::]:6789 connect error [ 96.100050][ T40] audit: type=1400 audit(1748305503.832:452): avc: denied { setopt } for pid=7178 comm="syz.2.329" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 96.118599][ T7179] __nla_validate_parse: 12 callbacks suppressed [ 96.118618][ T7179] netlink: 168 bytes leftover after parsing attributes in process `syz.2.329'. [ 96.282720][ T7195] ufs: You didn't specify the type of your ufs filesystem [ 96.282720][ T7195] [ 96.282720][ T7195] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 96.282720][ T7195] [ 96.282720][ T7195] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 96.296681][ T7195] ufs: ufstype=old is supported read-only [ 96.301896][ T7195] ufs: ufs_fill_super(): bad magic number [ 96.304132][ T7198] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 96.313401][ T40] audit: type=1400 audit(1748305504.042:453): avc: denied { read } for pid=7196 comm="syz.1.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 96.316064][ T7197] vlan2: entered allmulticast mode [ 96.324721][ T7197] bond0: entered allmulticast mode [ 96.325734][ T40] audit: type=1400 audit(1748305504.052:454): avc: denied { connect } for pid=7199 comm="syz.2.337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 96.327201][ T7197] bond_slave_0: entered allmulticast mode [ 96.327223][ T7197] bond_slave_1: entered allmulticast mode [ 96.536284][ T7209] SELinux: Context system_u:object_r:crond_var_run_t:s0 is not valid (left unmapped). [ 96.806423][ T1328] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 96.822548][ T7211] cgroup: fork rejected by pids controller in /syz1 [ 97.048598][ T1328] usb 5-1: not running at top speed; connect to a high speed hub [ 97.050007][ T1328] usb 5-1: config 139 has an invalid interface number: 43 but max is 2 [ 97.050034][ T1328] usb 5-1: config 139 has an invalid interface number: 103 but max is 2 [ 97.050050][ T1328] usb 5-1: config 139 has an invalid interface number: 122 but max is 2 [ 97.050067][ T1328] usb 5-1: config 139 has an invalid interface number: 82 but max is 2 [ 97.050083][ T1328] usb 5-1: config 139 has an invalid descriptor of length 0, skipping remainder of the config [ 97.050098][ T1328] usb 5-1: config 139 has 4 interfaces, different from the descriptor's value: 3 [ 97.050114][ T1328] usb 5-1: config 139 has no interface number 0 [ 97.050128][ T1328] usb 5-1: config 139 has no interface number 1 [ 97.050141][ T1328] usb 5-1: config 139 has no interface number 2 [ 97.050155][ T1328] usb 5-1: config 139 has no interface number 3 [ 97.050210][ T1328] usb 5-1: config 139 interface 43 altsetting 122 endpoint 0xC has invalid maxpacket 511, setting to 64 [ 97.050233][ T1328] usb 5-1: config 139 interface 43 altsetting 122 endpoint 0xB has invalid wMaxPacketSize 0 [ 97.050252][ T1328] usb 5-1: config 139 interface 43 altsetting 122 endpoint 0x5 has invalid wMaxPacketSize 0 [ 97.050269][ T1328] usb 5-1: config 139 interface 43 altsetting 122 has a duplicate endpoint with address 0xB, skipping [ 97.050288][ T1328] usb 5-1: config 139 interface 43 altsetting 122 endpoint 0x4 has invalid maxpacket 1024, setting to 64 [ 97.050308][ T1328] usb 5-1: config 139 interface 43 altsetting 122 has a duplicate endpoint with address 0x4, skipping [ 97.050327][ T1328] usb 5-1: config 139 interface 43 altsetting 122 has a duplicate endpoint with address 0xC, skipping [ 97.050345][ T1328] usb 5-1: config 139 interface 43 altsetting 122 endpoint 0x3 has invalid maxpacket 1584, setting to 64 [ 97.050366][ T1328] usb 5-1: config 139 interface 43 altsetting 122 has an invalid descriptor for endpoint zero, skipping [ 97.050384][ T1328] usb 5-1: config 139 interface 43 altsetting 122 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 97.050405][ T1328] usb 5-1: config 139 interface 43 altsetting 122 has a duplicate endpoint with address 0x1, skipping [ 97.050432][ T1328] usb 5-1: config 139 interface 103 altsetting 8 has a duplicate endpoint with address 0x3, skipping [ 97.050450][ T1328] usb 5-1: config 139 interface 103 altsetting 8 endpoint 0x9 has invalid maxpacket 1023, setting to 64 [ 97.050470][ T1328] usb 5-1: config 139 interface 103 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 97.050488][ T1328] usb 5-1: config 139 interface 103 altsetting 8 has a duplicate endpoint with address 0xB, skipping [ 97.050505][ T1328] usb 5-1: config 139 interface 103 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 13 [ 97.050526][ T1328] usb 5-1: too many endpoints for config 139 interface 122 altsetting 168: 166, using maximum allowed: 30 [ 97.050557][ T1328] usb 5-1: config 139 interface 122 altsetting 168 endpoint 0x7 has invalid maxpacket 22874, setting to 64 [ 97.050578][ T1328] usb 5-1: config 139 interface 122 altsetting 168 has a duplicate endpoint with address 0x2, skipping [ 97.050596][ T1328] usb 5-1: config 139 interface 122 altsetting 168 has a duplicate endpoint with address 0xB, skipping [ 97.050614][ T1328] usb 5-1: config 139 interface 122 altsetting 168 has a duplicate endpoint with address 0x9, skipping [ 97.050631][ T1328] usb 5-1: config 139 interface 122 altsetting 168 has a duplicate endpoint with address 0x4, skipping [ 97.050652][ T1328] usb 5-1: config 139 interface 122 altsetting 168 has 9 endpoint descriptors, different from the interface descriptor's value: 166 [ 97.050683][ T1328] usb 5-1: config 139 interface 82 altsetting 128 has an invalid descriptor for endpoint zero, skipping [ 97.050700][ T1328] usb 5-1: config 139 interface 82 altsetting 128 has a duplicate endpoint with address 0x7, skipping [ 97.050718][ T1328] usb 5-1: config 139 interface 82 altsetting 128 has 3 endpoint descriptors, different from the interface descriptor's value: 15 [ 97.050739][ T1328] usb 5-1: config 139 interface 43 has no altsetting 0 [ 97.050754][ T1328] usb 5-1: config 139 interface 103 has no altsetting 0 [ 97.050774][ T1328] usb 5-1: config 139 interface 122 has no altsetting 0 [ 97.050789][ T1328] usb 5-1: config 139 interface 82 has no altsetting 0 [ 97.061815][ T1328] usb 5-1: New USB device found, idVendor=0403, idProduct=d9aa, bcdDevice=7d.f8 [ 97.061842][ T1328] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.061861][ T1328] usb 5-1: Product: syz [ 97.061875][ T1328] usb 5-1: Manufacturer: syz [ 97.061887][ T1328] usb 5-1: SerialNumber: syz [ 97.065602][ T7229] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.066247][ T7229] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 97.224656][ T7259] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 97.321957][ T7259] SELinux: failed to load policy [ 97.595919][ T7268] 9pnet_fd: Insufficient options for proto=fd [ 97.766577][ T6680] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 97.824945][ T7279] netlink: 12 bytes leftover after parsing attributes in process `syz.2.350'. [ 97.828709][ T7281] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 97.828765][ T7281] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 97.836197][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.2.350'. [ 97.936437][ T6680] usb 6-1: Using ep0 maxpacket: 8 [ 97.938319][ T6680] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.938341][ T6680] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.938374][ T6680] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.938394][ T6680] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.938422][ T6680] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 97.938440][ T6680] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.944786][ T6680] hub 6-1:1.0: bad descriptor, ignoring hub [ 97.944811][ T6680] hub 6-1:1.0: probe with driver hub failed with error -5 [ 97.945265][ T6680] cdc_wdm 6-1:1.0: skipping garbage [ 97.945280][ T6680] cdc_wdm 6-1:1.0: skipping garbage [ 97.948083][ T6680] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 97.948100][ T6680] cdc_wdm 6-1:1.0: Unknown control protocol [ 97.972150][ T7286] netlink: 4 bytes leftover after parsing attributes in process `syz.3.351'. [ 97.991104][ T7286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.351'. [ 98.644427][ T7266] cdc_wdm 6-1:1.0: Error autopm - -16 [ 98.644564][ T6818] usb 6-1: USB disconnect, device number 6 [ 98.690228][ T7297] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 98.690922][ T7297] team0: Device ipvlan2 is already an upper device of the team interface [ 98.787990][ T6818] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 98.938979][ T6818] usb 6-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config [ 98.939004][ T6818] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 98.939038][ T6818] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 98.939071][ T6818] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 98.939088][ T6818] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.952459][ T6818] hub 6-1:1.0: bad descriptor, ignoring hub [ 98.952483][ T6818] hub 6-1:1.0: probe with driver hub failed with error -5 [ 98.952866][ T6818] cdc_wdm 6-1:1.0: skipping garbage [ 98.954082][ T6818] cdc_wdm 6-1:1.0: skipping garbage [ 98.954103][ T6818] cdc_wdm 6-1:1.0: probe with driver cdc_wdm failed with error -22 [ 98.995764][ T7299] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 99.074253][ T7222] Set syz1 is full, maxelem 65536 reached [ 99.117707][ T1328] ftdi_sio 5-1:139.43: FTDI USB Serial Device converter detected [ 99.119041][ T1328] ftdi_sio ttyUSB0: unknown device type: 0x7df8 [ 99.127605][ T1328] ftdi_sio 5-1:139.103: FTDI USB Serial Device converter detected [ 99.128516][ T1328] ftdi_sio ttyUSB1: unknown device type: 0x7df8 [ 99.131474][ T1328] ftdi_sio 5-1:139.122: FTDI USB Serial Device converter detected [ 99.132496][ T1328] ftdi_sio ttyUSB2: unknown device type: 0x7df8 [ 99.141480][ T1328] ftdi_sio 5-1:139.82: FTDI USB Serial Device converter detected [ 99.142427][ T1328] ftdi_sio ttyUSB3: unknown device type: 0x7df8 [ 99.144931][ T1328] usb 5-1: USB disconnect, device number 5 [ 99.161721][ T1328] ftdi_sio 5-1:139.43: device disconnected [ 99.191743][ T1328] ftdi_sio 5-1:139.103: device disconnected [ 99.213853][ T1328] ftdi_sio 5-1:139.122: device disconnected [ 99.223663][ T1328] ftdi_sio 5-1:139.82: device disconnected [ 99.347683][ T837] usb 6-1: USB disconnect, device number 7 [ 99.647610][ T7312] netlink: 64 bytes leftover after parsing attributes in process `syz.2.360'. [ 99.658980][ T7312] validate_nla: 3 callbacks suppressed [ 99.658994][ T7312] netlink: 'syz.2.360': attribute type 2 has an invalid length. [ 99.665107][ T7314] MINIX-fs: blocksize too small for device [ 99.883164][ T7324] pim6reg: entered allmulticast mode [ 99.888274][ T7324] pim6reg: left allmulticast mode [ 99.945900][ T7328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 99.980389][ T7324] gre1: entered allmulticast mode [ 100.019877][ T7337] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 100.279728][ T7361] netlink: 24 bytes leftover after parsing attributes in process `syz.0.378'. [ 100.396916][ T837] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 100.546516][ T837] usb 7-1: Using ep0 maxpacket: 8 [ 100.549417][ T837] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 100.551781][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.558720][ T837] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.563323][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.567779][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.573775][ T837] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 100.576935][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.581315][ T837] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.586662][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.590989][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.598452][ T837] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 100.603583][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.608432][ T837] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.613351][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.618838][ T837] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.628240][ T837] usb 7-1: string descriptor 0 read error: -22 [ 100.631586][ T837] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.635460][ T837] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.646655][ T6818] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 100.651265][ T837] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 100.686543][ T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 100.796495][ T6818] usb 5-1: Using ep0 maxpacket: 8 [ 100.799574][ T6818] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.802199][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.806947][ T6818] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.811322][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.814752][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.819390][ T6818] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.821970][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.825392][ T6818] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.829218][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.832731][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.838329][ T6818] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 100.840701][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 100.844980][ T6818] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.849619][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 100.853240][ T6818] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.856793][ T10] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.859899][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 100.863891][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 100.867856][ T10] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 100.873879][ T10] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 100.876841][ T10] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 100.879406][ T10] usb 8-1: Manufacturer: syz [ 100.881034][ T6818] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 100.884732][ T6818] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.890270][ T10] usb 8-1: config 0 descriptor?? [ 100.892569][ T6818] usb 5-1: Product: syz [ 100.894412][ T6818] usb 5-1: Manufacturer: syz [ 100.897652][ T6818] usb 5-1: SerialNumber: syz [ 100.902989][ T1328] usb 7-1: USB disconnect, device number 11 [ 101.136849][ T6818] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 101.141382][ T6818] usb 5-1: USB disconnect, device number 6 [ 101.156542][ T10] rc_core: IR keymap rc-hauppauge not found [ 101.158715][ T10] Registered IR keymap rc-empty [ 101.160477][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.176531][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.198341][ T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0 [ 101.205109][ T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/rc/rc0/input8 [ 101.212372][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.212674][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 101.212687][ T40] audit: type=1400 audit(101.066:508): avc: denied { ioctl } for pid=5331 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2922 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.226560][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.229962][ T40] audit: type=1400 audit(101.076:509): avc: denied { read } for pid=7377 comm="syz.3.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 101.248306][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.267387][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.286594][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.306940][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.326486][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.344236][ T7385] netlink: 'syz.3.387': attribute type 11 has an invalid length. [ 101.346474][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.347261][ T7385] netlink: 'syz.3.387': attribute type 11 has an invalid length. [ 101.352229][ T7385] netlink: 224 bytes leftover after parsing attributes in process `syz.3.387'. [ 101.366546][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.386500][ T10] mceusb 8-1:0.0: Error: mce write submit urb error = -90 [ 101.407778][ T10] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 101.411251][ T10] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 101.418553][ T10] usb 8-1: USB disconnect, device number 6 [ 101.692777][ T40] audit: type=1400 audit(101.546:510): avc: denied { append } for pid=7407 comm="syz.0.393" name="v4l-subdev5" dev="devtmpfs" ino=970 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 101.816467][ T40] audit: type=1400 audit(101.666:511): avc: denied { cmd } for pid=7411 comm="syz.3.395" path="socket:[17706]" dev="sockfs" ino=17706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 102.251486][ T34] IPVS: starting estimator thread 0... [ 102.257652][ T7439] xt_nat: multiple ranges no longer supported [ 102.348116][ T7440] IPVS: using max 25 ests per chain, 60000 per kthread [ 102.468476][ T40] audit: type=1400 audit(102.326:512): avc: denied { mount } for pid=7445 comm="syz.3.403" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.475612][ T40] audit: type=1400 audit(102.326:513): avc: denied { remount } for pid=7445 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.573698][ T40] audit: type=1400 audit(102.426:514): avc: denied { setopt } for pid=7445 comm="syz.3.403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.628826][ T40] audit: type=1400 audit(102.486:515): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 102.914640][ T7466] 9pnet_virtio: no channels available for device syz [ 103.069745][ T40] audit: type=1400 audit(102.926:516): avc: denied { mounton } for pid=7475 comm="syz.3.414" path="/115/file0" dev="tmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 103.072659][ T7476] fuse: Bad value for 'fd' [ 103.188540][ T5286] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 103.189045][ T40] audit: type=1400 audit(103.046:517): avc: denied { getopt } for pid=7477 comm="syz.3.416" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 103.759844][ T7508] xt_hashlimit: size too large, truncated to 1048576 [ 103.762997][ T7508] xt_hashlimit: max too large, truncated to 1048576 [ 103.785280][ T7508] xt_bpf: check failed: parse error [ 103.818321][ T7511] syz.2.426: attempt to access beyond end of device [ 103.818321][ T7511] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 103.854890][ T5346] pmem0: [POWERTEC] [ 103.973801][ T7518] Bluetooth: (null): Out-of-order packet arrived (4 != 0) [ 103.976310][ T7520] evm: overlay not supported [ 103.983658][ T1147] Bluetooth: (null): Invalid header checksum [ 104.081293][ T5286] Bluetooth: hci2: ACL packet for unknown connection handle 1 [ 104.248408][ T7538] block device autoloading is deprecated and will be removed. [ 104.280664][ T7544] netlink: 76 bytes leftover after parsing attributes in process `syz.1.438'. [ 104.293043][ T7544] macsec1: entered promiscuous mode [ 104.295281][ T7544] macsec1: entered allmulticast mode [ 104.586453][ T837] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 104.624992][ T7565] wg2: entered promiscuous mode [ 104.631320][ T7565] wg2: entered allmulticast mode [ 104.698500][ T7580] netlink: 'syz.3.450': attribute type 5 has an invalid length. [ 104.701578][ T7580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.450'. [ 104.727383][ T7565] VFS_BUG_ON_INODE(1) encountered for inode ffff888104532d48 [ 104.727585][ T7565] ------------[ cut here ]------------ [ 104.733189][ T7565] kernel BUG at fs/namei.c:3467! [ 104.735349][ T7565] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 104.739379][ T837] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 104.740038][ T7565] CPU: 0 UID: 0 PID: 7565 Comm: syz.0.445 Not tainted 6.15.0-syzkaller #0 PREEMPT(full) [ 104.740064][ T7565] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 104.740075][ T7565] RIP: 0010:may_open+0x1e3/0x400 [ 104.740118][ T7565] Code: 93 3a 09 66 81 fd 00 10 74 29 66 81 fd 00 20 0f 84 0d ff ff ff e8 8d b0 85 ff 48 c7 c6 80 34 9f 8b 4c 89 e7 e8 ee cc 04 00 90 <0f> 0b 66 81 fd 00 c0 75 e2 e8 6f b0 85 ff 44 89 fb 31 ff 83 e3 01 [ 104.740137][ T7565] RSP: 0018:ffffc9000da2fa98 EFLAGS: 00010286 [ 104.740153][ T7565] RAX: 000000000000003a RBX: ffffc9000da2fc30 RCX: ffffc90006e71000 [ 104.740166][ T7565] RDX: 0000000000000000 RSI: ffffffff819b2466 RDI: 0000000000000005 [ 104.740178][ T7565] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 104.740188][ T7565] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888104532d48 [ 104.740199][ T7565] R13: 0000000000008002 R14: ffffffff8e5e56c0 R15: 0000000000000006 [ 104.740210][ T7565] FS: 00007f276cccb6c0(0000) GS:ffff8880d69da000(0000) knlGS:0000000000000000 [ 104.740239][ T7565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.740252][ T7565] CR2: 00007f276ccc9b28 CR3: 000000002c11a000 CR4: 0000000000352ef0 [ 104.740262][ T7565] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.740272][ T7565] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.740283][ T7565] Call Trace: [ 104.740289][ T7565] [ 104.740298][ T7565] path_openat+0x13d1/0x2d40 [ 104.740320][ T7565] ? __pfx_path_openat+0x10/0x10 [ 104.740338][ T7565] do_filp_open+0x20b/0x470 [ 104.740352][ T7565] ? __pfx_do_filp_open+0x10/0x10 [ 104.740374][ T7565] ? alloc_fd+0x471/0x7d0 [ 104.740390][ T7565] do_sys_openat2+0x11b/0x1d0 [ 104.740409][ T7565] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.740440][ T7565] __x64_sys_openat+0x174/0x210 [ 104.740461][ T7565] ? __pfx___x64_sys_openat+0x10/0x10 [ 104.740482][ T7565] ? rcu_is_watching+0x12/0xc0 [ 104.740505][ T7565] do_syscall_64+0xcd/0x260 [ 104.740541][ T7565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.740558][ T7565] RIP: 0033:0x7f276bd8d2d0 [ 104.740573][ T7565] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 104.740589][ T7565] RSP: 002b:00007f276cccaf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 104.740606][ T7565] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f276bd8d2d0 [ 104.740618][ T7565] RDX: 0000000000000002 RSI: 00007f276cccafa0 RDI: 00000000ffffff9c [ 104.740630][ T7565] RBP: 00007f276cccafa0 R08: 0000000000000000 R09: 0000000000000000 [ 104.740640][ T7565] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 104.740651][ T7565] R13: 0000000000000000 R14: 00007f276bfb5fa0 R15: 00007fffa8a21758 [ 104.740666][ T7565] [ 104.740671][ T7565] Modules linked in: [ 104.741024][ T7565] ---[ end trace 0000000000000000 ]--- [ 104.744628][ T837] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 104.749147][ T7565] RIP: 0010:may_open+0x1e3/0x400 [ 104.755348][ T837] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 104.764785][ T7565] Code: 93 3a 09 66 81 fd 00 10 74 29 66 81 fd 00 20 0f 84 0d ff ff ff e8 8d b0 85 ff 48 c7 c6 80 34 9f 8b 4c 89 e7 e8 ee cc 04 00 90 <0f> 0b 66 81 fd 00 c0 75 e2 e8 6f b0 85 ff 44 89 fb 31 ff 83 e3 01 [ 104.768202][ T837] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 104.770829][ T7565] RSP: 0018:ffffc9000da2fa98 EFLAGS: 00010286 [ 104.781866][ T837] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 104.785135][ T7565] [ 104.789469][ T837] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 104.791703][ T7565] RAX: 000000000000003a RBX: ffffc9000da2fc30 RCX: ffffc90006e71000 [ 104.794893][ T837] usb 6-1: Product: syz [ 104.798276][ T7565] RDX: 0000000000000000 RSI: ffffffff819b2466 RDI: 0000000000000005 [ 104.798294][ T7565] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 104.798306][ T7565] R10: 0000000080000000 R11: 0000000000000000 R12: ffff888104532d48 [ 104.798317][ T7565] R13: 0000000000008002 R14: ffffffff8e5e56c0 R15: 0000000000000006 [ 104.798329][ T7565] FS: 00007f276cccb6c0(0000) GS:ffff8880d6cda000(0000) knlGS:0000000000000000 [ 104.798365][ T7565] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.801546][ T837] usb 6-1: Manufacturer: syz [ 104.803020][ T7565] CR2: 0000200000003640 CR3: 000000002c11a000 CR4: 0000000000352ef0 [ 104.803038][ T7565] DR0: 8000000000000001 DR1: 0000000000000004 DR2: 0000000000040c81 [ 104.803050][ T7565] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.803065][ T7565] Kernel panic - not syncing: Fatal exception [ 104.804145][ T7565] Kernel Offset: disabled VM DIAGNOSIS: 00:20:56 Registers: info registers vcpu 0 CPU#0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854fb535 RDI=ffffffff9adfe5a0 RBP=ffffffff9adfe560 RSP=ffffc9000da2f430 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=000000000000003a R14=ffffffff9adfe560 R15=ffffffff854fb4d0 RIP=ffffffff854fb55f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f276cccb6c0 ffffffff 00c00000 GS =0000 ffff8880d69da000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f276ccc9b28 CR3=000000002c11a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000280001 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f276cccaf90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000006800000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 00000f8000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000f8000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f276be11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f276be11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 666c65732f636f72 702f0073252f666c 65732d6461657268 742f636f72702f00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 434940560a464a57 550a0056000a4349 405608414440574d 510a464a57550a00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c35d5b08c4834890 9eeb08438b4cffff ff67e8107b8d48ff ffff50e95d5bffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffc7c74808c483 48cb770ffd8348ff ffff78e8c3014cc5 294c107b8b14738b ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c97502f883482f74 01f883484572c539 4c08438b4c4e7702 f88348038b483576 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0ffd8348c3014cc5 294c08438b4cffff ffa7e8107b8b4800 000000801f0f55eb ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffffff8484b381 RBX=00007f8791ee5720 RCX=0000000000000d8d RDX=ffffffff8484b3e0 RSI=ffffffff8484b381 RDI=0000000000000011 RBP=ffffffff8484b3e0 RSP=00007ffc70389be0 R8 =00007f87913b6038 R9 =00007f87913a2000 R10=00007f87907ff008 R11=0000000000000011 R12=0000000000000011 R13=0000000000000000 R14=ffffffff8484b3e0 R15=0000000000000d8d RIP=00007f879106ea40 RFL=00000246 [---Z-P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000055555ca81500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000002b5bb000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00646c6f68736572 68745f636e79732f 73762f347670692f 74656e2f7379732f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d45dc3e908831e87 8f948c19e2da19a0 de35e8657f650004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70a0ed575c025561 bdb45d03089a6048 0843813f39f52347 71634f11de73363e ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 89b5f2f37d376e72 9b00250784347f19 d8feb7d95b70a0ed 575c025561bdb45d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03089a6048084381 3f39f5234771634f 11de73363ed45dc3 e908831e878f948c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 19e2da19a0de35e8 657f658dc53aac03 be6ba19cc4e3de62 7246e21620b022b5 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6924c119186e8029 4681c23612eb34d0 274f77af8998cf3f db0600740aa57ca8 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000000003fd34 RBX=0000000000000002 RCX=ffffffff8b6d4419 RDX=ffffed100d4c65be RSI=ffffffff8bf4a3e0 RDI=ffffffff8191adf1 RBP=ffffed1003b58910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c65bd R10=ffff88806a632deb R11=0000000000005bdf R12=0000000000000002 R13=ffff88801dac4880 R14=ffffffff90853110 R15=0000000000000000 RIP=ffffffff8b6d2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6bda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000003cc72000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555738bdd10 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555573889bf2 0000555573888e40 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555573893681 0000555573893470 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f7468746501ffff ffffffffffffef08 0003200800061000 20100006006fee16 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000803000200 060300020004030c 0400000300040290 0302040002800308 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 040fffffffffffff 040e100000080008 014ddc0280040010 00021000060156fc ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8004010000060806 0601559603ee1000 1190031380041180 030fffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 80040b80030b8004 0ca0030008000c90 030fffffffffffff 040c800302100011 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0140a4818010000c 8004010000000806 060158f820a08008 000ce0030010000c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 d0030010000cc003 0210000cb0035810 000b900376646174 61625f6f745f3068 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7465760002001480 0100180000002b25 dfdbfd0070bd2c00 014a08068c030100 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002040606880300 00002c0808068003 0680040b80030b80 040ca0030008000c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000004b35c RBX=0000000000000003 RCX=ffffffff8b6d4419 RDX=ffffed100d4e65be RSI=ffffffff8bf4a3e0 RDI=ffffffff8191adf1 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e65bd R10=ffff88806a732deb R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90853110 R15=0000000000000000 RIP=ffffffff8b6d2caf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cda000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000003640 CR3=000000003cc72000 CR4=00352ef0 DR0=8000000000000001 DR1=0000000000000004 DR2=0000000000040c81 DR3=0000000000000006 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc70389f30 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f8791211c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000