last executing test programs: 5.461527703s ago: executing program 1 (id=135): mount(&(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./cgroup\x00', &(0x7f0000000440)='ext3\x00', 0x800041, &(0x7f0000000480)='discard') r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$F2FS_IOC_GET_PIN_FILE(r0, 0x8004f50e, &(0x7f0000000000)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x50000}]}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/net/stat\x00', 0x0, 0x0) r3 = openat(r2, &(0x7f0000000140)='rt_cache\x00', 0x0, 0x0) pread64(r3, &(0x7f0000000180)=""/209, 0xd1, 0x5) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000000280)={0xc, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r3, 0x3b83, &(0x7f0000000300)={0x28, 0x4, r4, 0x0, 0x332c3f, 0x42, 0x0, 0xea524}) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x2) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)=[{0x0}], 0x1, &(0x7f0000000580), 0x0, 0x4000000}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000005c0)={0xa, 0x0, 0x0, @dev}, 0x1c) mount(0x0, &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='nfs4\x00', 0x0, &(0x7f0000000680)='\x01') r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000580)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, &(0x7f0000000700)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r6, &(0x7f0000000740)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r6, &(0x7f0000000780)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x1, 0x4}}, 0x10) bind$tipc(r5, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000280), 0xffffffffffffff58, 0x20008005, &(0x7f00000002c0)={0x2, 0x4e20}, 0x10) r7 = landlock_create_ruleset(&(0x7f0000002600)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r8, &(0x7f0000000380)="3f000000010003", 0x7) landlock_restrict_self(r7, 0x8) 4.436093369s ago: executing program 2 (id=142): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x4b}], 0x1, 0x0, 0x0, 0x0) (async, rerun: 32) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000001c0)="c7442400b9b00000c74424020b000000c7442406000000000f011c24440f3366baf80cb88c96a287ef66bafc0cb0f0ee41d9fa3e67420f01ca67410f01cf6566410f3a1405005000005466b80b010f00d0f30f5e926e000000c4438dceafa06b0000ad", 0x63}], 0x1, 0x43, 0x0, 0x0) (rerun: 32) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) setns(0xc9, 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0xa6) (async, rerun: 32) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0) (async) mount$9p_unix(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x12d7498, 0x0) (async) utime(&(0x7f0000000380)='./file0\x00', 0x0) (async) umount2(&(0x7f00000003c0)='./file0\x00', 0xb) lsetxattr$trusted_overlay_nlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="48310600003f000008000a00", @ANYRES32, @ANYBLOB="1c0012800e00014069703665727370616e"], 0x44}, 0x1, 0x0, 0x0, 0x20004081}, 0x40000) 4.065378229s ago: executing program 2 (id=144): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000002c0)=@filter={'filter\x00', 0xe, 0x4, 0x260, 0xffffffff, 0x0, 0x130, 0x1c8, 0xffffffff, 0xffffffff, 0x98, 0x130, 0x1c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0xf, 0x7, 0x5b4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c0) syz_usb_connect(0x0, 0x3f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./mnt\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='127.0.0.1:1:/\x00', &(0x7f0000000600)='./mnt\x00', &(0x7f0000000640)='ceph\x00', 0x0, &(0x7f0000000680)='mount_timeout=1,osd_idle_ttl=1,osd_request_timeout=1\x00') r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f0000000180)=0x100000001, 0x4) connect$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_int(r3, 0x6, 0xc, &(0x7f0000000280)=0x80000006, 0x4) r4 = openat$macvtap(0xffffffffffffff9c, &(0x7f00000006c0), 0x40482, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000700), r5) r6 = dup(r4) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000740)={0x8100, 0x18, 0xfa00, {0x4, 0x0, 0x111}}, 0x20) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r7, &(0x7f00000007c0)='bind', 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000800), 0x2, 0x0) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000840)={'syzkaller1\x00', 0x5001}) r9 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000000880)={'syzkaller1\x00', @broadcast}) write$tun(r8, &(0x7f00000008c0)={@void, @val={0x1, 0x3, 0x1b, 0x30, 0x14, 0x6}, @ipv6=@gre_packet={0x3, 0x6, "1772ab", 0x44, 0x2f, 0xff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x11}}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88be, 0x1200, 0x3}, {0x1}, {0x0, 0x0, 0x1, 0x1}, {0xa888, 0x88be, 0x4, {{0x8, 0x1, 0x7, 0x0, 0x0, 0x1, 0x7, 0x7}, 0x1, {0x86dd}}}, {0x8, 0x22eb, 0x1, {{0xc, 0x2, 0xfa, 0x3, 0x1, 0x2, 0x1, 0x7}, 0x2, {0x0, 0x8, 0x3, 0x7, 0x1, 0x1, 0x2, 0x1, 0x1}}}}}}}, 0xfdef) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x58, r1, 0xb496be12fe179219, 0x70bd27, 0x25dfdbfb, {}, [{{0x8, 0x1, r11}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0) syz_emit_ethernet(0xde, &(0x7f0000000200)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0xa8, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x2a, 0xc2, 0x0, 0x0, 0x1, {[@mptcp]}}}}}}}}, 0x0) 2.44447921s ago: executing program 1 (id=169): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1d0000000400000008000000000000000100000000000000000000000000000000000000000000000000000000001800", @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 2.396028222s ago: executing program 1 (id=170): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x2d000}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x1c, 0x81}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) (async) r1 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'tunl0\x00', @local}) 2.395723867s ago: executing program 1 (id=171): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) ioctl(r0, 0x400452cc, &(0x7f0000000100)='\x00'/19) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) r1 = inotify_init() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002480)={&(0x7f0000002940)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a20000000000a050400000000e1000000050000000900010073797a3000000000140000001100010000000000000000000500000ad0ca808bc9058c95da3a490df2d1597007270e4a16216735a71554a6f201c318d8b241bd71f3e32fafe09d97c4a33ae69842b0b37287600c4371d1229292b83b6bcfeb698b0498c0b05052d59fcfd0f3d673cf46e06ad571ba56b50cab6d20e1629a4afdb30c183e0348d1d0e27ed0bf214a0ce7fcf3e27038f20a5c495f6d13ddebff"], 0x48}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000002600)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a68000000030a05040000000000000000050000000900010073797a30000000000900030073797a300000000008000a400000000234000480080002405da849ca1400030076657468315f746f5f68737200000000140003006e657464657673696d30000000000000140000001100010006000000000000000500000a"], 0x90}, 0x1, 0x0, 0x0, 0x11}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002580)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f00000025c0)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80), 0x8, &(0x7f0000002ac0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) lsetxattr$system_posix_acl(&(0x7f0000002b00)='./file0\x00', &(0x7f0000002b40)='system.posix_acl_access\x00', 0x0, 0x0, 0x2) sendmsg$NFT_BATCH(r2, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000027c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0xc05, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x18, 0x1, 0x0, 0x1, @fwd={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x94}}, 0x0) inotify_add_watch(r1, &(0x7f0000000140)='.\x00', 0x400017e) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020) r3 = openat(0xffffffffffffff9c, &(0x7f0000002540)='./dev/rfcomm0\x00', 0x802, 0x0) close_range(r3, r0, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x3, 'vlan0\x00', {0x4}, 0x5}) socket(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002440), 0x8000, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000002500)='proc\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000002880)='./proc/sys/kernel/hostname\x00', 0x2, 0x0) write(r6, 0x0, 0x0) pselect6(0x40, &(0x7f00000028c0)={0x6, 0x7, 0xffe0000000000000, 0x300, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000002900)={0x8}, 0x0, 0x0) creat(&(0x7f0000000080)='./dev/rfcomm0\x00', 0x8) 2.065709174s ago: executing program 2 (id=172): syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000068e04d206f0e2c586831010203010902240001000000000904000002ff47d000090509e702008000040905", @ANYRES32], 0x0) syz_usb_connect$uac1(0x4, 0xe4, &(0x7f0000000080)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd2, 0x3, 0x1, 0x81, 0x40, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x8, 0x1e}, [@processing_unit={0x8, 0x24, 0x7, 0x4, 0x5, 0x5f, "e4"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x100, 0x2, 0xf3, 0x3, 0x88, 0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0xc4, 0x101, 0x8}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x8, 0x2, 0x0, 0x1a, "cb7905"}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x2, 0x6, 0x6, "eda2eda187"}, @format_type_i_discrete={0xd, 0x24, 0x2, 0x1, 0x8, 0x4, 0x6, 0x3, "6adde0c943"}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x56, 0xca, 0x3, {0x7, 0x25, 0x1, 0x8, 0x74, 0x2}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x12c7, 0xa, 0x99, 0x8}, @format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x2, 0x2, 0x7, 0x5}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x9f, 0x1ff, 0x0, 0x6c}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x8, 0x3, 0x93, 0xfc}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0xb, 0x7, 0x8, 0x4, 0xff}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x8, 0x4, 0x4, {0x7, 0x25, 0x1, 0x8, 0x7, 0x3}}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x110, 0x9, 0xc6, 0x7f, 0xff}, 0x8, &(0x7f0000000240)={0x5, 0xf, 0x8, 0x1, [@ptm_cap={0x3}]}, 0x7, [{0x4, &(0x7f0000000280)=@string={0x4, 0x3, '\vi'}}, {0xde, &(0x7f00000002c0)=ANY=[@ANYBLOB="de03a8570430a4ab706d491c6ef1965fa46c413915fa09d4eb6773247f722907dcd2ac8a52736ae1490aecd6b47423f1464a2eb8c960ae12ec750ed7af55d60dd150952498e96c77b5bdfc06548955bb5ad16557e178491ca34c0fe64c8c4ddde2e15ca67f44da105b6b679b0100e47c909dacbe2a01c0bb9c5d3082254152a14094ebbc1aa199537d4e1613c71099d2fd0af0ebaa87f946449c0a2df50585d9f0f43745e56e853b80b2213e8c66d1243d9f8c6187880c7d5ab90b0b9d6b63cb2ecd14c26c17e90ecd000e60ce19c788893fed0545a59edaa85612c1142e"]}, {0xd2, &(0x7f00000003c0)=@string={0xd2, 0x3, "58b446664cf98caf1b635ac3b110c4799a662409ff66cd34e778c519723fbfadf5b759b2c3554b5e91dd1dadfb5a40787a7e6dd08a9a18fb19ec7a461c1a1c879444d860440ac64de99217e3f581e2c28a549e855ae50201f2981448128f01f543a66c4d5099f85c5158acc12a8ce3b32739039ea6b58e55354ecb8ca2d3c4af452024e57af0cb5e0559e3e3d5d7a7c528e5f1dae4873094b30e08a1502ee2a70cb392ab55106c4c9f11f13dbe46cafbe9206ff31b7e094b3c7b67d28e2ec14df1cc77436c28ad0a04fe23de63ef484d"}}, {0x5f, &(0x7f00000004c0)=@string={0x5f, 0x3, "a5d8a5b6f2255a8806df6757636f4517d0e00c9ee3ef43b14fccd5f96fa5658ad77d260eef2dea555f414fce812fcba45d07f3277d3f41bd5506def72b5bb254f7eec7d01d745713a5f6e8afd7780615e017171c6bd68aeb999f57f6bf"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x809}}, {0x53, &(0x7f0000000580)=@string={0x53, 0x3, "10e8b9621c838ee7f072a0c716fa9e139a1f37bcbb8b4b1ef2f941edd66b0ed54318cddccf565fa8bd8bf942daf4638fb83e5b33df2e9d04c6c20a7c0c07353bb857ddaf0e14ffabc326e52b300e15fec4"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x41d}}]}) syz_usb_connect$midi(0x5, 0xc1, &(0x7f00000006c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0xe41, 0x4242, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xaf, 0x1, 0x1, 0x7, 0x40, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x4, 0x1, 0x3, 0x0, 0x4, [@midi_in_jack={0x6, 0x24, 0x2, 0x3, 0xf3, 0xc}, @ms_header={0x7, 0x24, 0x1, 0xfffe, 0x7}, @midi_out_jack={0x15, 0x24, 0x3, 0x1, 0x1, 0x7, [{0x3, 0x78}, {0xf6, 0x5}, {0x6, 0x8}, {0x6}, {0xf, 0x5}, {0xe, 0x81}, {0xf, 0x7}], 0xe}, @midi_out_jack={0x9, 0x24, 0x3, 0x3, 0x6, 0x1, [{0x4, 0x9}], 0xa5}, @ms_header={0x7, 0x24, 0x1, 0x2000, 0x7}, @ms_header={0x7, 0x24, 0x1, 0x4, 0x7}, @midi_out_jack={0xb, 0x24, 0x3, 0x2, 0x7, 0x2, [{0x6, 0x9}, {0xd7, 0x4}], 0xa}, @ms_header={0x7, 0x24, 0x1, 0xdcae, 0x7}], [{{0x9, 0x5, 0xd, 0x0, 0x200, 0x10, 0x6, 0xa, {0x5, 0x25, 0x1, 0x1, "b6"}}}, {{0x9, 0x5, 0x8, 0x4, 0x400, 0x1, 0xa, 0x1, {0xe, 0x25, 0x1, 0xa, "142e6a8518c08117b826"}}}, {{0x9, 0x5, 0x0, 0x2, 0x400, 0x2, 0xd, 0x40, {0xb, 0x25, 0x1, 0x7, "182ea9ad41f971"}}}, {{0x9, 0x5, 0x6, 0x1, 0x668, 0x51, 0xb, 0xf4, {0x10, 0x25, 0x1, 0xc, "fa812bf11266bdcd3a60c095"}}}]}}}}}]}}, &(0x7f0000000b00)={0xa, &(0x7f00000007c0)={0xa, 0x6, 0x110, 0x3c, 0x10, 0x0, 0x10, 0x4}, 0x5, &(0x7f0000000800)={0x5, 0xf, 0x5}, 0x6, [{0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x448}}, {0xa1, &(0x7f0000000880)=@string={0xa1, 0x3, "f2a3d19099738844ebd70d008b380683fbe46031c87a5a5df94eb72247c4e232e47a78ad275393f10018ceaef198a04c38ec7948de9d119be1dc95ee33a724c21ac12d7a5a05467f479ce2f3d6449682820befd31a634d2172e9a3f5b5702534c85d9922112391381cdf8c62e9b311a0c12c693e2db4ca9d445a92bc955d222b03b33dd5f8364636fdf2fdc5efde781d77c2c2ddab0e0681a1d551a2fd7f0d"}}, {0xce, &(0x7f0000000940)=@string={0xce, 0x3, "bc057ab44e497fbce6f51c7c9d5212ace2df095f70c7a50d6a3d344fc62d0f7f42d962550c1e7470fbe832f2ca959d8effcf70916c59474febd1539273222d761ad4b9c8e194d16342748f3883c94df3cb63abcf079a7d692e8299c64ab383b6a4c1ea10a7ab0666b29025b7bacc769c47200893b7802709208e78df57b7dc28124eff11a534b5396e04b7e1cec923b5154a20d68f8b5fef30960423e6d945bf5acfbc9ac76e0a77d3a3adfb0f9a71e7a1826c90a657b47a314446dccf18b43171bbd150baa23626ea11ea92"}}, {0x4, &(0x7f0000000a40)=@lang_id={0x4, 0x3, 0x1c0a}}, {0x4, &(0x7f0000000a80)=@lang_id={0x4, 0x3, 0x816}}, {0x4, &(0x7f0000000ac0)=@lang_id={0x4, 0x3, 0x2c09}}]}) syz_open_dev$evdev(&(0x7f0000000040), 0x40, 0x82800) openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000bc0)='./proc\x00', &(0x7f0000000c00)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c40)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000d00)='27', 0x2) syz_usb_connect$uac1(0x0, 0x72, &(0x7f0000000d40)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0xa, 0x70, 0x5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2d78, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x9, 0x8, 0x40, {0x7, 0x25, 0x1, 0x8, 0x5, 0xfffa}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0xc, 0x4, 0x4d, {0x7, 0x25, 0x1, 0xc, 0x0, 0x5}}}}}}}}]}}, 0x0) 1.503340424s ago: executing program 0 (id=184): r0 = fanotify_init(0xf00, 0x0) fanotify_mark(r0, 0x11, 0x1020, 0xffffffffffffffff, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x40400, 0x8) fcntl$notify(r1, 0x402, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) 1.447846131s ago: executing program 1 (id=176): munlockall() mkdirat(0xffffffffffffff9c, &(0x7f0000003340)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x20, &(0x7f00000001c0)={0x0, 0x80000000, 0x40, 0x0, 0x3}, 0xfffffffffffffffc, 0x0, &(0x7f00000002c0)=0x0) mount(&(0x7f0000000240)=@nullb, &(0x7f0000001480)='./cgroup\x00', &(0x7f0000001500)='omfs\x00', 0x200000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x442, 0x1ff) io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000000340)={0x1, 0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/4096, 0x1000}], 0x0}, 0x20) syz_io_uring_submit(0x0, 0x0, r1, 0x0) io_uring_enter(r0, 0x42000001, 0x200001, 0x1, 0x0, 0x0) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2210088, 0x0) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, &(0x7f0000001400)={&(0x7f00000013c0)={&(0x7f0000000280)="342cd7e2f39c2825", 0x8, 0x0, 0x6, 0xddf}, 0x1}, 0x1) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001780), 0x1123102, 0x0) r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000017c0)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000001840)=0x0, &(0x7f0000001880)=0x0, &(0x7f00000018c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000001900)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001980)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f00000019c0)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000001a00)={0x0, 0x1, 0x2, 0x1, 0x255}, &(0x7f0000001e80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x14a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90e, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0xfffffffe, 0x1e9}}], 0x1, &(0x7f0000001d00)={0x2e, 0x2, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000001d80)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000001dc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r12, &(0x7f0000001e00)=ANY=[], 0xffffff6a) splice(r11, 0x0, r3, 0x0, 0x40010003, 0x0) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000001e40)=0x1b) syz_emit_vhci(&(0x7f0000001440)=ANY=[@ANYBLOB="040e040c0f08"], 0x7) chdir(&(0x7f0000000100)='./file0\x00') getsockname$packet(r2, &(0x7f0000001600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000001680)=0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001540)={0x5, 0x0, 0x0, &(0x7f0000001640)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', r13}, 0x94) removexattr(&(0x7f00000014c0)='./file1\x00', 0x0) r14 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_cpus\x00', 0x275a, 0x0) read$FUSE(r14, &(0x7f0000003380)={0x2020}, 0x2048) 1.446397603s ago: executing program 0 (id=177): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4021}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@ipv6_getrule={0x1c, 0x22, 0x10, 0x70bd2b, 0x25dfdbfe, {0xa, 0x14, 0x20, 0x7, 0x7, 0x0, 0x0, 0x2, 0x1}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10048000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000200)=0x4000000000000200, 0xe50fb6c50bc849c9) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = syz_open_procfs(0x0, &(0x7f0000000100)='net/raw\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001600)='ns/cgroup\x00') r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000001680)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000001780)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000080) sendmsg$NFT_BATCH(r5, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000001840)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x14}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x81}]}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x4}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xcc}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500f000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a3000000000080007006e6174003c000000060a010400000000000000000100000008000b40000000000900010073797a300000000014000480100001800a000100726564697200000014000000110001"], 0xcc}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001ac0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x32, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}, @timestamp={0xd, 0x0, 0x0, 0x0, 0xfffe}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001b00)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote}, @timestamp}}}}, 0x0) pread64(r4, &(0x7f0000000540)=""/4072, 0xfe8, 0x80073) sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x70, 0x24, 0xe0b, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r7, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1, 0x6, 0xfffffff9, 0x3, 0xffffffff, 0x20102}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0x7fffffff, 0x155}}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0x4, 0x81, 0x10001, 0x5}}]}]}}}]}, 0x70}}, 0x4000080) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r9 = io_uring_setup(0x1, &(0x7f0000000180)={0x0, 0xf753, 0x3800, 0x1}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r9, 0x20, &(0x7f0000001540)={0x0, 0x0, 0x1, 0x2, &(0x7f00000015c0)={&(0x7f0000001600), 0x1000}, &(0x7f0000001640)={&(0x7f0000001680), 0x1000, 0x1}}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r9, 0x24, &(0x7f00000016c0)={0x0, 0x1}, 0x0) close_range(r8, 0xffffffffffffffff, 0x0) bind$packet(r0, &(0x7f0000000500)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @remote}, 0x14) 1.440186853s ago: executing program 3 (id=178): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1d00000004000000080000000000000001000000000000000000000000000000000000000000000000000000f0ffff00", @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 1.357901989s ago: executing program 3 (id=179): setns(0xc9, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x2) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003000500000000", 0x39}], 0x1) 1.357574842s ago: executing program 0 (id=180): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000005c0)='./myconfig\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./myconfig/usb_gadget/g1/max_speed\x00', 0x1, 0x0) write(r1, &(0x7f0000000680)='super-speed', 0xb) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CHECK_EXTENSION_VM(r2, 0xae03, 0x42) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls}, 0x94) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x2, 0x0, 0x3, 0xb, 0x0, 0x70bd2b, 0x0, [@sadb_key={0x1, 0x9}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @rand_addr=0x64010100}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x6, 0xb}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}}]}, 0x58}, 0x1, 0x7}, 0x0) 1.195547059s ago: executing program 3 (id=181): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x400, @loopback}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000140)={0x3, {{0x2, 0x4e22, @multicast1}}, {{0x2, 0x7f, @private=0xa010100}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000380)={0x5, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f00000007c0)={0x0, 0x72f, 0x100, 0x8, 0x3b5}, &(0x7f0000000840)=0x0, &(0x7f0000000880)=0x0, &(0x7f00000008c0)=0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000900)=0x5) r5 = syz_open_dev$sndmidi(&(0x7f0000000940), 0x2, 0x141102) writev(r5, &(0x7f0000000980)=[{&(0x7f00000009c0)="94", 0xf000}, {0x0}], 0x2) sendmsg(0xffffffffffffffff, 0x0, 0x0) bind(0xffffffffffffffff, &(0x7f0000000a00)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, {0xa, 0x4e22, 0x10000000, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xd}}}, 0x80) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r6, 0x0, 0x0) r7 = openat(0xffffffffffffff9c, 0x0, 0x3b9b4aedd61a3686, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000a80), 0x0, 0x0) mkdirat(r7, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x98) mount(0x0, &(0x7f0000000b00)='./config\x00', &(0x7f0000000b40)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000b80)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(r7, &(0x7f0000000bc0)='./config/usb_gadget/g1/functions/uac1.usb0\x00', 0x0) syz_ublk_add_dev(0xffffffffffffffff, r2, r3, r4, &(0x7f0000000c00)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000c80)=@new_dev={0x3, 0x30f, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x252}}}, &(0x7f0000000cc0)=0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000d00)={0x34, 0x0, 0x0, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r9 = openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_ublk_setup_queues(r9, r8, &(0x7f0000000d80)={0x0, 0x5490, 0x8000, 0x1, 0x2e3, 0x0, r7}, 0x0, 0x1, &(0x7f0000000e00)={0x2e, 0x10, 0x0, r9, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x2, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xc1100, 0x0, 0x19, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000340)={0x1f, 0x80, @any, 0x0, 0x1}, 0x10) 1.195394703s ago: executing program 0 (id=183): bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1a, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d1000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000005b900000095"], &(0x7f00000006c0)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x4d, '\x00', 0x0, @tracing=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) 1.193685906s ago: executing program 0 (id=185): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000580)={@in6={{0xa, 0x4e21, 0x26, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x2a, 0x0, "b25dd300350731437df94f0a338977934d6951cdd6c61e31687172d956b141e3f4e87e6ab615ea379a12c5a6f5c6e7b3ab38f5f3570909f89f3e47ec97b12cc30a1c48cd0300fd5dfad4624800"}, 0xd8) r2 = socket(0x10, 0x803, 0x0) (async) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000240)={&(0x7f00000002c0)={0xa, 0x4e24, 0x7, @remote, 0x6}, 0x1c, 0x0}, 0x4081) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) (async, rerun: 32) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (rerun: 32) write(r4, &(0x7f0000000140)="a9", 0x1) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r5, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r5], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) syz_emit_vhci(&(0x7f0000000180)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x1a}, @l2cap_cid_le_signaling={{0x16}, @l2cap_ecred_conn_req={{0x17, 0x0, 0x12}, {0xff, 0x7, 0x8, 0x9800, [0x1000, 0x9, 0x4, 0x7, 0x8619]}}}}, 0x1f) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350064756d6d79300000000000000000000008000a00", @ANYRES32=r5], 0x3c}}, 0x8000) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) (async) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x54, 0x10, 0x403, 0x300, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffc}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x54}}, 0x8000) 863.888797ms ago: executing program 2 (id=186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x1c1341, 0x0) (async) r1 = openat$comedi(0xffffff9c, &(0x7f0000000000)='/dev/comedi1\x00', 0x2180, 0x0) r2 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0) lseek(r2, 0x8000000000000000, 0x4) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000440)={'8255\x00', [0x3f00, 0x2, 0xd09a, 0xffffffff, 0x6, 0xfdfffffd, 0x2, 0x4, 0x1002, 0x6fffc001, 0x5, 0x1, 0x404, 0xb, 0x804, 0x4, 0x200004, 0x0, 0x100830, 0x0, 0x10000, 0x9, 0x90, 0x8009, 0x20000006, 0x8005, 0x6, 0x2000151, 0x9a, 0x1, 0x6]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = add_key$user(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000140)="d3a2", 0x2, 0xffffffffffffffff) keyctl$invalidate(0x15, r3) (async) keyctl$dh_compute(0x17, &(0x7f0000000340)={0x0, r3}, 0x0, 0x0, 0x0) r4 = socket(0x10, 0x803, 0x0) r5 = open(&(0x7f00000002c0)='./file1\x00', 0x103200, 0x5d) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000040)={0x10}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) syz_io_uring_setup(0xf03, &(0x7f0000000500)={0x0, 0x4d88, 0x80000, 0x3, 0x34a}, &(0x7f0000000580), &(0x7f00000005c0)=0x0, &(0x7f0000000600)) munmap$IORING_OFF_CQ_RING(r7, 0x48000) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=@newtfilter={0xfffffffffffffc54, 0x2c, 0x100, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_CT_ZONE={0x6, 0x5d, 0x9}, @TCA_FLOWER_KEY_MPLS_OPTS={0x18, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x14, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_TC={0x0, 0x4, 0x7}, @TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x4}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) 605.672903ms ago: executing program 3 (id=187): r0 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @rand_addr=0x64010100}, 0x10) listen(r0, 0x3) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000000040)='\x00\x00', 0x2, 0xe61e2840a154b0c0, &(0x7f0000000600)={0x2, 0x4e22, @remote}, 0x10) 535.722984ms ago: executing program 3 (id=188): r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) get_robust_list(r0, &(0x7f0000000000)=0x0, &(0x7f0000000080)) (async) get_robust_list(r0, &(0x7f0000000000)=0x0, &(0x7f0000000080)) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f3, &(0x7f0000000100)={'ip_vti0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x7, 0x80, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x9, 0x29, 0x0, @empty, @broadcast}}}}) unshare(0x60000600) (async) unshare(0x60000600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000180)={@dev={0xfe, 0x80, '\x00', 0x2a}, 0x800, 0x0, 0xff, 0x1, 0x20d}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@local, 0x0, 0x0, 0x1, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000200)={@private2={0xfc, 0x2, '\x00', 0xfd}, 0x800, 0x1, 0xff, 0x9, 0xfff, 0x102}, 0x20) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$CDROMVOLCTRL(r3, 0x31e, &(0x7f00000000c0)={0x23, 0xa, 0x9}) 31.74026ms ago: executing program 1 (id=189): chdir(0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000080), 0x80000001, 0x162842) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000000c0)={r0, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e00000010e200", [0x0, 0x400]}}) r2 = dup(r1) write$UHID_INPUT(r2, &(0x7f0000000200)={0x8, {"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", 0x1000}}, 0xfffffe38) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ftruncate(r3, 0xfffffffffffffffb) r4 = openat(0xffffffffffffff9c, &(0x7f0000001540)='./file0\x00', 0x101c42, 0x0) ioctl$KVM_SET_NESTED_STATE_res(r4, 0x4080aebf, 0x0) ftruncate(r4, 0xb) creat(&(0x7f0000001580)='./file0\x00', 0x14) 31.074586ms ago: executing program 2 (id=190): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb0100180000000000000020000000200000000400000001000000000000010400000020000000010000000000000108"], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1d000000040000000800000000000000010000000000000000000000000000000000000000000000000000000000000c", @ANYRES32=r0, @ANYBLOB="0100000002"], 0x40) 30.830056ms ago: executing program 3 (id=191): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r0, &(0x7f00000001c0)='27', 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a01080007000000000000020000000900010073797a300000000064000000090a010400000000000000000200000008000a40000000010900020073797a31000000000900010073797a300000000008000540000000080800034000000084200009801c0002800c00018008000140000000040c0001800800014000000004540000000e0a01010000000000000000020000000900020073797a31000000000900010073797a30000000002800038024000080100001800c0001000000000000000000"], 0x100}}, 0x0) 13.565143ms ago: executing program 0 (id=197): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x0, 0xffffffff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x440080d6) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="2000000076000100000000000000000003000000000000000800010002"], 0x20}}, 0x0) r3 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$DM_DEV_CREATE(r3, 0xc138fd03, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '0\x00'}}}) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0100000004000000040000000200000000000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000e5ff00"/28], 0x50) r4 = epoll_create1(0x80000) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000a00)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000a40)={0xe000001a}) read$watch_queue(r5, &(0x7f0000000a80)=""/142, 0x8e) epoll_wait(r4, &(0x7f0000000b40)=[{}], 0x1, 0x3) r6 = socket$packet(0x11, 0x2, 0x300) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) r7 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r7, &(0x7f0000000600)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r7, &(0x7f0000000640)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000700)='blkio.bfq.io_merged\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r11, 0x0) ftruncate(r11, 0xc17a) sendmsg$nl_route_sched(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r10, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0xc, 0x30c9}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000880)={&(0x7f00000008c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r10, {0x0, 0xf}, {0xffe0, 0xa}, {0xfff3, 0xe}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0x1889}, @TCA_TBF_RATE64={0xc, 0x4, 0xb78fea3163f663ab}, @TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0xfffa, 0x9, 0x9, 0x4}, {0x71, 0x2, 0x5, 0x8, 0x7, 0x101}, 0x0, 0x7, 0x1aa2}}, @TCA_TBF_PRATE64={0xc, 0x5, 0xf0cda79ea301acfa}]}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc5}, 0xc010) sendmsg$inet(r7, &(0x7f0000000940)={0x0, 0x14, &(0x7f0000000980)=[{&(0x7f00000009c0)=' ', 0xffffff1f}], 0x1}, 0x0) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000580), 0x8) socket$packet(0x11, 0x2, 0x300) 0s ago: executing program 2 (id=192): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000000), r0) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x307, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$netlink(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x130}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmmsg(r2, &(0x7f0000000500), 0x0, 0x10) kernel console output (not intermixed with test programs): [ 37.980786][ T43] audit: type=1400 audit(1794719009.648:135): avc: denied { write } for pid=5760 comm="sh" path="pipe:[2800]" dev="pipefs" ino=2800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.981068][ T43] audit: type=1400 audit(1794719009.648:136): avc: denied { rlimitinh } for pid=5760 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 37.981254][ T43] audit: type=1400 audit(1794719009.648:137): avc: denied { siginh } for pid=5760 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:35917' (ED25519) to the list of known hosts. [ 39.604884][ T43] audit: type=1400 audit(1794719011.268:138): avc: denied { name_bind } for pid=5767 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 39.646426][ T43] audit: type=1400 audit(1794719011.308:139): avc: denied { execute } for pid=5768 comm="sh" name="syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 39.647454][ T43] audit: type=1400 audit(1794719011.318:140): avc: denied { execute_no_trans } for pid=5768 comm="sh" path="/syz-executor" dev="sda1" ino=2020 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 41.600077][ T43] audit: type=1400 audit(1794719013.268:141): avc: denied { mounton } for pid=5768 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 41.601523][ T43] audit: type=1400 audit(1794719013.268:142): avc: denied { mount } for pid=5768 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 41.603061][ T5768] cgroup: Unknown subsys name 'net' [ 41.729476][ T5768] cgroup: Unknown subsys name 'cpuset' [ 41.733302][ T5768] cgroup: Unknown subsys name 'rlimit' [ 41.923257][ T5773] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 42.570698][ T5768] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.749607][ T43] kauditd_printk_skb: 11 callbacks suppressed [ 45.749620][ T43] audit: type=1400 audit(1794719017.418:154): avc: denied { execmem } for pid=5775 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 45.954361][ T43] audit: type=1400 audit(1794719017.618:155): avc: denied { create } for pid=5779 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.954895][ T43] audit: type=1400 audit(1794719017.618:156): avc: denied { read write } for pid=5779 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.955509][ T43] audit: type=1400 audit(1794719017.618:157): avc: denied { open } for pid=5779 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 45.970582][ T43] audit: type=1400 audit(1794719017.628:158): avc: denied { ioctl } for pid=5779 comm="syz-executor" path="socket:[5880]" dev="sockfs" ino=5880 ioctlcmd=0x400448c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 45.978833][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.991106][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.992305][ T5792] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.993197][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.993829][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.994551][ T5792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.995415][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.996129][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.997008][ T5792] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.997313][ T5792] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.997447][ T5792] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.997539][ T5792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.997811][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.998807][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.998874][ T5792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.999336][ T5792] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 46.001666][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 46.002865][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.004019][ T43] audit: type=1400 audit(1794719017.668:159): avc: denied { read } for pid=5779 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.004843][ T43] audit: type=1400 audit(1794719017.668:160): avc: denied { open } for pid=5779 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 46.005856][ T43] audit: type=1400 audit(1794719017.668:161): avc: denied { mounton } for pid=5779 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.009133][ T43] audit: type=1400 audit(1794719017.678:162): avc: denied { module_request } for pid=5779 comm="syz-executor" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 46.009820][ T5142] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.013932][ T43] audit: type=1400 audit(1794719017.678:163): avc: denied { mounton } for pid=5783 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 46.021291][ T5142] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.190473][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.191113][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.191871][ T5783] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.193017][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.194896][ T5779] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.209158][ T5787] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 46.292708][ T5785] infiniband rxe0: set active [ 46.292720][ T5785] infiniband rxe0: added rxe_eth0 [ 46.300199][ T5785] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 46.300219][ T5785] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 46.300239][ T5785] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 46.304857][ T1355] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.314220][ T5785] RDS/IB: rxe0: added [ 46.314328][ T5785] smc: adding ib device rxe0 with port count 1 [ 46.314405][ T5785] smc: ib device rxe0 port 1 has no pnetid [ 46.329253][ T1355] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.330182][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.421332][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.521204][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.521284][ T5783] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.521344][ T5783] bridge_slave_0: entered allmulticast mode [ 46.522099][ T5783] bridge_slave_0: entered promiscuous mode [ 46.524627][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.524668][ T5783] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.524718][ T5783] bridge_slave_1: entered allmulticast mode [ 46.525521][ T5783] bridge_slave_1: entered promiscuous mode [ 46.552193][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.552238][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.552287][ T5787] bridge_slave_0: entered allmulticast mode [ 46.552998][ T5787] bridge_slave_0: entered promiscuous mode [ 46.554448][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.554487][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.554567][ T5787] bridge_slave_1: entered allmulticast mode [ 46.555328][ T5787] bridge_slave_1: entered promiscuous mode [ 46.579511][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.581346][ T5783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.588225][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.594964][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.601801][ T5783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.613100][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.613179][ T5779] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.613232][ T5779] bridge_slave_0: entered allmulticast mode [ 46.614167][ T5779] bridge_slave_0: entered promiscuous mode [ 46.626588][ T5787] team0: Port device team_slave_0 added [ 46.627566][ T5783] team0: Port device team_slave_0 added [ 46.629209][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.629273][ T5779] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.629328][ T5779] bridge_slave_1: entered allmulticast mode [ 46.630064][ T5779] bridge_slave_1: entered promiscuous mode [ 46.643909][ T5783] team0: Port device team_slave_1 added [ 46.652207][ T5787] team0: Port device team_slave_1 added [ 46.675120][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.675129][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.675140][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.677797][ T5779] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.680274][ T5779] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.680746][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.680755][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.680773][ T5783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.682237][ T5783] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.682244][ T5783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.682259][ T5783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.683828][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.683837][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.683854][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.724527][ T5779] team0: Port device team_slave_0 added [ 46.733735][ T5779] team0: Port device team_slave_1 added [ 46.766997][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.767007][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.767018][ T5779] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.767274][ T5785] rxe_eth0 speed is unknown, defaulting to 1000 [ 46.768074][ T5779] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.768080][ T5779] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.768091][ T5779] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.775549][ T5783] hsr_slave_0: entered promiscuous mode [ 46.776281][ T5783] hsr_slave_1: entered promiscuous mode [ 46.779884][ T5787] hsr_slave_0: entered promiscuous mode [ 46.780325][ T5787] hsr_slave_1: entered promiscuous mode [ 46.780604][ T5787] debugfs: 'hsr0' already exists in 'hsr' [ 46.780614][ T5787] Cannot create hsr debugfs directory [ 46.854354][ T5779] hsr_slave_0: entered promiscuous mode [ 46.854761][ T5779] hsr_slave_1: entered promiscuous mode [ 46.855080][ T5779] debugfs: 'hsr0' already exists in 'hsr' [ 46.855088][ T5779] Cannot create hsr debugfs directory [ 47.060627][ T5783] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.064142][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.074032][ T5783] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.075783][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.081838][ T5783] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.083621][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.084063][ T5783] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.085593][ T5783] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.124982][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.132332][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.133355][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.137777][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.145105][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.149776][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.165595][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.169016][ T5787] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.182879][ T5783] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.182930][ T5783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.183150][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.183194][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.230078][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.230125][ T5787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.230295][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.230339][ T5787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.249897][ T5779] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.251524][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.251713][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.251753][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.251893][ T5785] bridge_slave_0: entered allmulticast mode [ 47.252606][ T5785] bridge_slave_0: entered promiscuous mode [ 47.253397][ T5779] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.257573][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.261932][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.262027][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.262102][ T5785] bridge_slave_1: entered allmulticast mode [ 47.263210][ T5785] bridge_slave_1: entered promiscuous mode [ 47.270325][ T5779] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.274161][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.284270][ T5779] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.287041][ T5779] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.293991][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.295520][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.314710][ T5785] team0: Port device team_slave_0 added [ 47.321447][ T5785] team0: Port device team_slave_1 added [ 47.335536][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.335545][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.335557][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.337533][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.337541][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.337552][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.339518][ T5779] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.339586][ T5779] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.339787][ T5779] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.339861][ T5779] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.374991][ T5785] hsr_slave_0: entered promiscuous mode [ 47.375490][ T5785] hsr_slave_1: entered promiscuous mode [ 47.375778][ T5785] debugfs: 'hsr0' already exists in 'hsr' [ 47.375787][ T5785] Cannot create hsr debugfs directory [ 47.379608][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.381573][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.383933][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.386280][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.399030][ T1170] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.400341][ T1170] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.428508][ T5783] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.478405][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.526936][ T5783] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.546745][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.546836][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.569709][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.569829][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.573414][ T5787] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.584382][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.584427][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.601341][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.601397][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.603204][ T5785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.606629][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.608151][ T5785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.611391][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.612125][ T5785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.619646][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.620969][ T5785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.626694][ T5785] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.643254][ T5779] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.684939][ T5779] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.691727][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.691847][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.717986][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.718072][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.821292][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.837502][ T5785] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.846016][ T234] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.846184][ T234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.865375][ T234] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.865465][ T234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.977649][ T5783] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.013203][ T5783] veth0_vlan: entered promiscuous mode [ 48.014687][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.016664][ T5142] Bluetooth: hci0: command tx timeout [ 48.016796][ T5784] Bluetooth: hci2: command tx timeout [ 48.020068][ T5779] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.028497][ T5783] veth1_vlan: entered promiscuous mode [ 48.069950][ T5783] veth0_macvtap: entered promiscuous mode [ 48.072454][ T5787] veth0_vlan: entered promiscuous mode [ 48.077813][ T5783] veth1_macvtap: entered promiscuous mode [ 48.082233][ T5779] veth0_vlan: entered promiscuous mode [ 48.087988][ T5787] veth1_vlan: entered promiscuous mode [ 48.092197][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.094873][ T5779] veth1_vlan: entered promiscuous mode [ 48.101192][ T5783] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.107005][ T5784] Bluetooth: hci3: command tx timeout [ 48.107150][ T5142] Bluetooth: hci1: command tx timeout [ 48.130540][ T5787] veth0_macvtap: entered promiscuous mode [ 48.138265][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.139242][ T5787] veth1_macvtap: entered promiscuous mode [ 48.153819][ T5779] veth0_macvtap: entered promiscuous mode [ 48.163256][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.168237][ T5779] veth1_macvtap: entered promiscuous mode [ 48.172150][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.182120][ T5827] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.182305][ T5827] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.198623][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.205200][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.205212][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.212637][ T5779] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.231220][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.231232][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.254941][ T5785] veth0_vlan: entered promiscuous mode [ 48.268178][ T234] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.268190][ T234] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.269233][ T5785] veth1_vlan: entered promiscuous mode [ 48.309744][ T1170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.309758][ T1170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.351856][ T5785] veth0_macvtap: entered promiscuous mode [ 48.352282][ T1170] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.352297][ T1170] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.358489][ T5783] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.361951][ T5785] veth1_macvtap: entered promiscuous mode [ 48.380098][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.380109][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.385993][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.395085][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.419008][ T14] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419043][ T14] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419067][ T14] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419089][ T14] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419111][ T14] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419133][ T14] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419155][ T14] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419178][ T14] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419200][ T14] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419222][ T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419244][ T14] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419266][ T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.419288][ T14] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.427347][ T5827] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.487664][ T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.487709][ T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.522796][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.522815][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.535038][ T5943] trusted_key: encrypted_key: keylen parameter is missing [ 48.747925][ T42] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 48.836151][ T35] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 48.908640][ T42] usb 6-1: New USB device found: idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 48.910193][ T42] usb 6-1: config index 0 descriptor too short (expected 39, got 27) [ 48.910216][ T42] usb 6-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 48.910226][ T42] usb 6-1: config 0 interface 0 has no altsetting 0 [ 48.911679][ T42] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 48.911690][ T42] usb 6-1: Product: syz [ 48.911696][ T42] usb 6-1: Manufacturer: syz [ 48.911703][ T42] usb 6-1: SerialNumber: syz [ 48.913656][ T42] usb 6-1: config 0 descriptor?? [ 48.915668][ T42] hub 6-1:0.0: bad descriptor, ignoring hub [ 48.915680][ T42] hub 6-1:0.0: probe with driver hub failed with error -5 [ 48.918207][ T42] usb 6-1: selecting invalid altsetting 0 [ 48.996109][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 48.997135][ T35] usb 5-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 48.998113][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 48.998135][ T35] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.998152][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 48.998168][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 49.000420][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.000453][ T35] usb 5-1: Product: syz [ 49.000464][ T35] usb 5-1: Manufacturer: syz [ 49.000474][ T35] usb 5-1: SerialNumber: syz [ 49.009981][ T35] usb 5-1: config 0 descriptor?? [ 49.011218][ T5950] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 49.018185][ T35] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input5 [ 49.039036][ C1] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 49.216802][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.217120][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.221845][ T5950] FAULT_INJECTION: forcing a failure. [ 49.221845][ T5950] name failslab, interval 1, probability 0, space 0, times 1 [ 49.221868][ T5950] CPU: 0 UID: 0 PID: 5950 Comm: syz.0.6 Not tainted syzkaller #0 PREEMPT(full) [ 49.221886][ T5950] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 49.221896][ T5950] Call Trace: [ 49.221902][ T5950] [ 49.221909][ T5950] dump_stack_lvl+0x100/0x190 [ 49.221960][ T5950] should_fail_ex.cold+0x5/0xa [ 49.222001][ T5950] should_failslab+0xc2/0x120 [ 49.222034][ T5950] kmem_cache_alloc_noprof+0x92/0x6a0 [ 49.222065][ T5950] ? __kernfs_new_node+0xd2/0xa10 [ 49.222089][ T5950] __kernfs_new_node+0xd2/0xa10 [ 49.222115][ T5950] ? __pfx_stack_trace_save+0x10/0x10 [ 49.222150][ T5950] ? stack_depot_save_flags+0x27/0xa10 [ 49.222181][ T5950] ? __pfx___kernfs_new_node+0x10/0x10 [ 49.222201][ T5950] ? lock_acquire+0x1d1/0x380 [ 49.222228][ T5950] ? kernfs_root+0x23/0x2a0 [ 49.222254][ T5950] ? find_held_lock+0x2b/0x80 [ 49.222271][ T5950] ? kernfs_root+0xee/0x2a0 [ 49.222291][ T5950] ? kernfs_root+0xee/0x2a0 [ 49.222317][ T5950] kernfs_new_node+0x194/0x200 [ 49.222334][ T5950] ? __pfx_kernfs_new_node+0x10/0x10 [ 49.222357][ T5950] __kernfs_create_file+0x53/0x350 [ 49.222382][ T5950] sysfs_add_file_mode_ns+0x207/0x3c0 [ 49.222413][ T5950] sysfs_create_file_ns+0x145/0x1e0 [ 49.222436][ T5950] ? __pfx_sysfs_create_file_ns+0x10/0x10 [ 49.222457][ T5950] ? module_add_driver+0x1e2/0x420 [ 49.222492][ T5950] ? sysfs_do_create_link_sd+0xbb/0x140 [ 49.222524][ T5950] driver_create_file+0x4a/0x70 [ 49.222550][ T5950] bus_add_driver+0x39d/0x620 [ 49.222573][ T5950] driver_register+0x1e2/0x360 [ 49.222591][ T5950] ? rcu_is_watching+0x13/0xc0 [ 49.222610][ T5950] usb_gadget_register_driver_owner+0x132/0x210 [ 49.222646][ T5950] raw_ioctl+0x1a85/0x2b80 [ 49.222672][ T5950] ? __pfx_raw_ioctl+0x10/0x10 [ 49.222689][ T5950] ? selinux_file_ioctl+0x1e0/0x290 [ 49.222720][ T5950] ? selinux_file_ioctl+0x1e7/0x290 [ 49.222740][ T5950] ? __pfx_raw_ioctl+0x10/0x10 [ 49.222757][ T5950] __x64_sys_ioctl+0x18e/0x210 [ 49.222777][ T5950] do_syscall_64+0x123/0x7b0 [ 49.222812][ T5950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.222831][ T5950] RIP: 0033:0x7f2ebb5a916b [ 49.222846][ T5950] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 49.222862][ T5950] RSP: 002b:00007f2ebc513f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.222889][ T5950] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f2ebb5a916b [ 49.222900][ T5950] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 49.222910][ T5950] RBP: 00007f2ebc514fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 49.222919][ T5950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.222929][ T5950] R13: 0000200000000d40 R14: 0000000000000000 R15: 0000000000001938 [ 49.222950][ T5950] [ 49.222957][ T5950] bus_add_driver: uevent attr (raw-gadget.2) failed [ 49.223749][ T5950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.224224][ T5950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.226599][ T856] usb 6-1: USB disconnect, device number 2 [ 49.238505][ T35] usb 5-1: USB disconnect, device number 2 [ 49.238590][ C1] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 49.948054][ T5998] ======================================================= [ 49.948054][ T5998] WARNING: The mand mount option has been deprecated and [ 49.948054][ T5998] and is ignored by this kernel. Remove the mand [ 49.948054][ T5998] option from the mount to silence this warning. [ 49.948054][ T5998] ======================================================= [ 49.964521][ T25] bridge0: entered promiscuous mode [ 50.106167][ T5142] Bluetooth: hci2: command tx timeout [ 50.106306][ T5142] Bluetooth: hci0: command tx timeout [ 50.176453][ T5784] Bluetooth: hci3: command tx timeout [ 50.176874][ T5784] Bluetooth: hci1: command tx timeout [ 50.466140][ T35] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 50.636190][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 50.636953][ T35] usb 7-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 50.638101][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 50.638125][ T35] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 50.638144][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 50.638163][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 50.640360][ T35] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.640378][ T35] usb 7-1: Product: syz [ 50.640389][ T35] usb 7-1: Manufacturer: syz [ 50.640400][ T35] usb 7-1: SerialNumber: syz [ 50.642940][ T35] usb 7-1: config 0 descriptor?? [ 50.643814][ T6022] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 50.649949][ T35] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 50.666006][ C3] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 50.710452][ C3] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 50.786661][ T43] kauditd_printk_skb: 79 callbacks suppressed [ 50.786674][ T43] audit: type=1400 audit(1794719022.458:243): avc: denied { create } for pid=6029 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.787001][ T43] audit: type=1400 audit(1794719022.458:244): avc: denied { setopt } for pid=6029 comm="syz.0.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.788796][ T43] audit: type=1400 audit(1794719022.458:245): avc: denied { write } for pid=6029 comm="syz.0.27" path="socket:[11125]" dev="sockfs" ino=11125 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 50.789724][ T6030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.27'. [ 50.847070][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.847272][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.849010][ T6022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.849706][ T6022] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.850401][ C3] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 50.852870][ T42] usb 7-1: USB disconnect, device number 2 [ 50.852940][ C3] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 51.053242][ T43] audit: type=1400 audit(1794719022.718:246): avc: denied { name_bind } for pid=6041 comm="syz.3.31" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 51.099242][ T43] audit: type=1400 audit(1794719022.768:247): avc: denied { read } for pid=6041 comm="syz.3.31" name="btrfs-control" dev="devtmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 51.101832][ T43] audit: type=1400 audit(1794719022.768:248): avc: denied { open } for pid=6041 comm="syz.3.31" path="/dev/btrfs-control" dev="devtmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 51.101859][ T43] audit: type=1400 audit(1794719022.768:249): avc: denied { create } for pid=6041 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.101877][ T43] audit: type=1400 audit(1794719022.768:250): avc: denied { ioctl } for pid=6041 comm="syz.3.31" path="socket:[11129]" dev="sockfs" ino=11129 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.101896][ T43] audit: type=1400 audit(1794719022.768:251): avc: denied { setopt } for pid=6041 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.101914][ T43] audit: type=1400 audit(1794719022.768:252): avc: denied { write } for pid=6041 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.153898][ T6055] netlink: 28 bytes leftover after parsing attributes in process `syz.1.33'. [ 51.223973][ T6060] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 51.383415][ T6062] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 51.445705][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.37'. [ 51.456198][ T5856] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 51.476213][ T5827] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.476248][ T5827] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.476273][ T5827] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.476297][ T5827] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.542497][ T6075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'. [ 51.542606][ T6075] netlink: 48 bytes leftover after parsing attributes in process `syz.2.39'. [ 51.549490][ T6074] ipt_ECN: cannot use operation on non-tcp rule [ 51.606951][ T5856] usb 6-1: New USB device found: idVendor=047f, idProduct=ffff, bcdDevice=0.00 [ 51.608091][ T5856] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 51.608112][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 51.608127][ T5856] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 51.608139][ T5856] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 51.608164][ T5856] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.610138][ T5856] usb 6-1: config 0 descriptor?? [ 51.777287][ T6088] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 51.830641][ T6091] netlink: 44 bytes leftover after parsing attributes in process `syz.2.44'. [ 51.834046][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.834426][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.965972][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.47'. [ 51.965993][ T6099] netlink: 28 bytes leftover after parsing attributes in process `syz.3.47'. [ 52.001000][ T6105] mmap: syz.2.49 (6105) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.006208][ T856] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 52.020092][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020116][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020127][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020138][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020148][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020159][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020170][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020180][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020191][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.020202][ T5856] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 52.032403][ T5856] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 52.044474][ T6108] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 52.166201][ T856] usb 5-1: Using ep0 maxpacket: 32 [ 52.166748][ T856] usb 5-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 52.167534][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 52.167549][ T856] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 52.167560][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 52.167571][ T856] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 52.169058][ T856] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.169069][ T856] usb 5-1: Product: syz [ 52.169076][ T856] usb 5-1: Manufacturer: syz [ 52.169082][ T856] usb 5-1: SerialNumber: syz [ 52.170389][ T856] usb 5-1: config 0 descriptor?? [ 52.170975][ T6087] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 52.173000][ T856] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 52.176290][ T5784] Bluetooth: hci0: command tx timeout [ 52.176309][ T5784] Bluetooth: hci2: command tx timeout [ 52.237190][ T6060] bond1 (unregistering): Released all slaves [ 52.256881][ T5142] Bluetooth: hci3: command tx timeout [ 52.350937][ T856] usb 6-1: USB disconnect, device number 3 [ 52.375774][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.376125][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.377727][ T6087] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 52.377930][ T6087] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 52.387673][ T42] usb 5-1: USB disconnect, device number 3 [ 52.387851][ C2] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 52.919229][ T6126] syz_tun: entered allmulticast mode [ 52.922795][ T6124] fuse: Bad value for 'fd' [ 52.923067][ T6126] pimreg: entered allmulticast mode [ 52.927330][ T6126] netlink: 24 bytes leftover after parsing attributes in process `syz.0.56'. [ 52.927765][ T6126] netlink: 4 bytes leftover after parsing attributes in process `syz.0.56'. [ 52.928834][ T6125] syz_tun: left allmulticast mode [ 52.960649][ T6131] fuse: Unknown parameter '‘…NW'fd' [ 53.014594][ T6135] MINIX-fs: blocksize too small for device [ 53.018027][ T38] IPVS: starting estimator thread 0... [ 53.127037][ T6139] IPVS: using max 29 ests per chain, 69600 per kthread [ 53.386153][ T10] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 53.537243][ T10] usb 8-1: Using ep0 maxpacket: 32 [ 53.537793][ T10] usb 8-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 53.538732][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 53.538755][ T10] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 53.538775][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 53.538793][ T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 53.540398][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.540410][ T10] usb 8-1: Product: syz [ 53.540428][ T10] usb 8-1: Manufacturer: syz [ 53.540434][ T10] usb 8-1: SerialNumber: syz [ 53.541800][ T10] usb 8-1: config 0 descriptor?? [ 53.542269][ T6156] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 53.545940][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input8 [ 53.745749][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.745938][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.748807][ T6156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.749166][ T6156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.760812][ T856] usb 8-1: USB disconnect, device number 2 [ 53.760940][ C1] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 54.256551][ T5142] Bluetooth: hci2: command tx timeout [ 54.256574][ T5142] Bluetooth: hci0: command tx timeout [ 54.336156][ T5784] Bluetooth: hci3: command tx timeout [ 55.086202][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 55.237580][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 55.238715][ T35] usb 8-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 55.241313][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 55.241340][ T35] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 55.241358][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 55.241377][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 55.244686][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.244705][ T35] usb 8-1: Product: syz [ 55.244717][ T35] usb 8-1: Manufacturer: syz [ 55.244728][ T35] usb 8-1: SerialNumber: syz [ 55.251233][ T35] usb 8-1: config 0 descriptor?? [ 55.252397][ T6177] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 55.264496][ T35] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input9 [ 55.464154][ T6177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.464630][ T6177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.466862][ T6177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.467190][ T6177] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.474220][ T10] usb 8-1: USB disconnect, device number 3 [ 55.474350][ C0] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 55.889119][ T6124] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.933376][ T6179] __nla_validate_parse: 1 callbacks suppressed [ 55.933388][ T6179] netlink: 40 bytes leftover after parsing attributes in process `syz.0.76'. [ 55.951975][ T43] kauditd_printk_skb: 63 callbacks suppressed [ 55.951985][ T43] audit: type=1400 audit(1794719027.618:316): avc: denied { ioctl } for pid=6181 comm="syz.2.75" path="socket:[7879]" dev="sockfs" ino=7879 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 55.974164][ T6185] bond1: entered promiscuous mode [ 55.974371][ T6185] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.005826][ T43] audit: type=1400 audit(1794719027.668:317): avc: denied { map_create } for pid=6190 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.006271][ T43] audit: type=1400 audit(1794719027.678:318): avc: denied { map_read map_write } for pid=6190 comm="syz.3.78" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.038393][ T6189] iommufd_mock iommufd_mock0: Adding to iommu group 10 [ 56.063328][ T43] audit: type=1400 audit(1794719027.728:319): avc: denied { prog_load } for pid=6194 comm="syz.2.80" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.094625][ T43] audit: type=1400 audit(1794719027.758:320): avc: denied { prog_run } for pid=6196 comm="syz.0.81" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 56.095859][ T6197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 56.122517][ T43] audit: type=1400 audit(1794719027.788:321): avc: denied { getopt } for pid=6201 comm="syz.0.83" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.123788][ T43] audit: type=1400 audit(1794719027.788:322): avc: denied { open } for pid=6201 comm="syz.0.83" path="/15/proc/mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 56.123960][ T43] audit: type=1400 audit(1794719027.788:323): avc: denied { read write } for pid=6201 comm="syz.0.83" name="mtrr" dev="proc" ino=4026531995 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 56.124401][ T43] audit: type=1400 audit(1794719027.788:324): avc: denied { ioctl } for pid=6201 comm="syz.0.83" path="/15/proc/mtrr" dev="proc" ino=4026531995 ioctlcmd=0x400c4d05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 56.124445][ T6202] mtrr: base(0xa000) is not aligned on a size(0xb000) boundary [ 56.177888][ T6204] lo: Caught tx_queue_len zero misconfig [ 56.188628][ T6200] syzkaller0: Caught tx_queue_len zero misconfig [ 56.192742][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 56.243798][ T43] audit: type=1400 audit(1794719027.908:325): avc: denied { ioctl } for pid=6206 comm="syz.2.84" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=11516 ioctlcmd=0xc018aa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 56.384624][ T6223] evm: overlay not supported [ 56.816130][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 56.851705][ T6214] overlayfs: failed lookup in lower (newroot/30, name='bus', err=-40): overlapping layers [ 56.852363][ T6214] overlayfs: failed lookup in lower (newroot/30, name='bus', err=-40): overlapping layers [ 56.853354][ T6222] overlayfs: failed lookup in lower (newroot/30, name='file1', err=-40): overlapping layers [ 56.855536][ T6216] overlayfs: failed lookup in lower (newroot/30, name='bus', err=-40): overlapping layers [ 56.966117][ T35] usb 5-1: Using ep0 maxpacket: 32 [ 56.966629][ T35] usb 5-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 56.967516][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 56.967531][ T35] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 56.967542][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 56.967552][ T35] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 56.969251][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.969261][ T35] usb 5-1: Product: syz [ 56.969268][ T35] usb 5-1: Manufacturer: syz [ 56.969274][ T35] usb 5-1: SerialNumber: syz [ 56.971501][ T35] usb 5-1: config 0 descriptor?? [ 56.974106][ T6228] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 56.976528][ T35] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input10 [ 57.178883][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.182341][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.187398][ T6228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.188119][ T6228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.193972][ T35] usb 5-1: USB disconnect, device number 4 [ 57.194122][ C0] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 57.404297][ T6247] netlink: 4 bytes leftover after parsing attributes in process `syz.2.94'. [ 57.665448][ T6257] process 'syz.2.96' launched './file0' with NULL argv: empty string added [ 57.722670][ T6264] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 57.723368][ T6264] netlink: 'syz.0.98': attribute type 1 has an invalid length. [ 57.723377][ T6264] netlink: 16 bytes leftover after parsing attributes in process `syz.0.98'. [ 57.740493][ T6264] netlink: 'syz.0.98': attribute type 5 has an invalid length. [ 57.834786][ T6276] FAULT_INJECTION: forcing a failure. [ 57.834786][ T6276] name failslab, interval 1, probability 0, space 0, times 0 [ 57.834812][ T6276] CPU: 2 UID: 0 PID: 6276 Comm: syz.2.103 Not tainted syzkaller #0 PREEMPT(full) [ 57.834834][ T6276] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.834844][ T6276] Call Trace: [ 57.834851][ T6276] [ 57.834859][ T6276] dump_stack_lvl+0x100/0x190 [ 57.834914][ T6276] should_fail_ex.cold+0x5/0xa [ 57.834953][ T6276] should_failslab+0xc2/0x120 [ 57.834986][ T6276] kmem_cache_alloc_noprof+0x92/0x6a0 [ 57.835016][ T6276] ? __pfx_map_id_range_down+0x10/0x10 [ 57.835055][ T6276] ? security_inode_alloc+0x3b/0x2c0 [ 57.835100][ T6276] security_inode_alloc+0x3b/0x2c0 [ 57.835130][ T6276] inode_init_always_gfp+0xc75/0xfb0 [ 57.835159][ T6276] alloc_inode+0x8e/0x250 [ 57.835178][ T6276] new_inode+0x22/0x1c0 [ 57.835195][ T6276] ? dput.part.0+0x4a/0x240 [ 57.835214][ T6276] simple_fill_super+0x2e6/0x6a0 [ 57.835244][ T6276] ? __pfx_nfsd_fill_super+0x10/0x10 [ 57.835282][ T6276] nfsd_fill_super+0x98/0x560 [ 57.835308][ T6276] ? __pfx_nfsd_fill_super+0x10/0x10 [ 57.835334][ T6276] get_tree_keyed+0x114/0x1d0 [ 57.835358][ T6276] vfs_get_tree+0x92/0x320 [ 57.835388][ T6276] path_mount+0x7d0/0x2850 [ 57.835443][ T6276] ? __pfx_path_mount+0x10/0x10 [ 57.835472][ T6276] ? lockdep_hardirqs_on+0x7d/0x110 [ 57.835513][ T6276] ? putname+0xb1/0x110 [ 57.835552][ T6276] ? kmem_cache_free+0x127/0x6c0 [ 57.835588][ T6276] ? __x64_sys_mount+0x293/0x310 [ 57.835615][ T6276] __x64_sys_mount+0x293/0x310 [ 57.835644][ T6276] ? __pfx___x64_sys_mount+0x10/0x10 [ 57.835683][ T6276] do_syscall_64+0x123/0x7b0 [ 57.835713][ T6276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.835733][ T6276] RIP: 0033:0x7f9c61fa94d9 [ 57.835749][ T6276] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.835766][ T6276] RSP: 002b:00007f9c601f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 57.835784][ T6276] RAX: ffffffffffffffda RBX: 00007f9c62225fa0 RCX: 00007f9c61fa94d9 [ 57.835795][ T6276] RDX: 0000200000000400 RSI: 00002000000003c0 RDI: 0000000000000000 [ 57.835806][ T6276] RBP: 00007f9c6203804e R08: 0000000000000000 R09: 0000000000000000 [ 57.835816][ T6276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.835827][ T6276] R13: 00007f9c62226038 R14: 00007f9c62225fa0 R15: 00007ffe6c4b9968 [ 57.835853][ T6276] [ 57.844038][ T6276] ufs: You didn't specify the type of your ufs filesystem [ 57.844038][ T6276] [ 57.844038][ T6276] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 57.844038][ T6276] [ 57.844038][ T6276] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 57.844064][ T6276] ufs: ufstype=old is supported read-only [ 57.844627][ T6276] ufs: ufs_fill_super(): bad magic number [ 57.865481][ T6274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.102'. [ 57.865548][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.875922][ T6274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.900970][ T6280] jffs2: notice: (6280) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 58.102689][ T35] rxe_eth0 speed is unknown, defaulting to 1000 [ 58.196121][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 58.346092][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 58.346698][ T10] usb 5-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 58.347523][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 58.347539][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.347549][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.347560][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.349606][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.349618][ T10] usb 5-1: Product: syz [ 58.349625][ T10] usb 5-1: Manufacturer: syz [ 58.349631][ T10] usb 5-1: SerialNumber: syz [ 58.354744][ T10] usb 5-1: config 0 descriptor?? [ 58.355496][ T6285] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 58.357634][ T10] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input11 [ 58.373517][ C3] xpad 5-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 58.439586][ T6312] netlink: 'syz.3.113': attribute type 21 has an invalid length. [ 58.564644][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.564950][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.569283][ T6285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 58.569587][ T6285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 58.578171][ T6024] usb 5-1: USB disconnect, device number 5 [ 58.578236][ C3] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 58.632786][ T6320] x_tables: duplicate underflow at hook 1 [ 58.663568][ T6321] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 58.869237][ T6327] netlink: 'syz.3.116': attribute type 3 has an invalid length. [ 59.138377][ T6345] SELinux: Context system_u:object_r:var_lib_t:s0 is not valid (left unmapped). [ 59.198479][ T6353] netlink: 8 bytes leftover after parsing attributes in process `syz.3.126'. [ 59.198977][ T6353] netlink: 14 bytes leftover after parsing attributes in process `syz.3.126'. [ 59.204249][ T6353] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 59.217367][ T6353] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 59.218548][ T6353] bond0 (unregistering): Released all slaves [ 59.223723][ T6355] netlink: 8 bytes leftover after parsing attributes in process `syz.0.125'. [ 59.223743][ T6355] netlink: 60 bytes leftover after parsing attributes in process `syz.0.125'. [ 59.354574][ T6361] fuse-io-uring is disabled by module parameter [ 59.529591][ T6310] Zero length message leads to an empty skb [ 59.597295][ T6374] warning: `syz.3.133' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 59.636229][ T2327] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 59.648477][ T6379] EXT4-fs (loop1): unable to read superblock [ 59.786095][ T2327] usb 5-1: Using ep0 maxpacket: 32 [ 59.786654][ T2327] usb 5-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 59.788412][ T2327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 59.788428][ T2327] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 59.788439][ T2327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 59.788450][ T2327] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 59.790053][ T2327] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.790064][ T2327] usb 5-1: Product: syz [ 59.790071][ T2327] usb 5-1: Manufacturer: syz [ 59.790077][ T2327] usb 5-1: SerialNumber: syz [ 59.793045][ T2327] usb 5-1: config 0 descriptor?? [ 59.795063][ T6363] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 59.808413][ T2327] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input12 [ 60.006680][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.007355][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.011819][ T6363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.012102][ T6363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.015561][ T1693] usb 5-1: USB disconnect, device number 6 [ 60.015561][ C3] xpad 5-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 60.383273][ T6382] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 60.492823][ T6388] device-mapper: table: 248:1: verity: device too large to use check_at_most_once (-E2BIG) [ 60.492839][ T6388] device-mapper: ioctl: error adding target to table [ 60.580380][ T6392] X.509: Couldn't decode AuthKeyIdentifier [ 60.957747][ T43] kauditd_printk_skb: 14080 callbacks suppressed [ 60.957760][ T43] audit: type=1326 audit(1794719032.618:14406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.957856][ T43] audit: type=1326 audit(1794719032.628:14407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.957964][ T43] audit: type=1326 audit(1794719032.628:14408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.958047][ T43] audit: type=1326 audit(1794719032.628:14409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.958128][ T43] audit: type=1326 audit(1794719032.628:14410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.958222][ T43] audit: type=1326 audit(1794719032.628:14411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.958335][ T43] audit: type=1326 audit(1794719032.628:14412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.958418][ T43] audit: type=1326 audit(1794719032.628:14413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.958498][ T43] audit: type=1326 audit(1794719032.628:14414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 60.958584][ T43] audit: type=1326 audit(1794719032.628:14415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6377 comm="syz.1.135" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3667da94d9 code=0x50000 [ 61.249138][ T6423] __nla_validate_parse: 4 callbacks suppressed [ 61.249150][ T6423] netlink: 20 bytes leftover after parsing attributes in process `syz.3.146'. [ 61.290010][ T6429] ip_tables: iptables: counters copy to user failed while replacing table [ 61.347698][ T6436] CacheFiles: No cache directory specified [ 61.355162][ T6436] syzkaller1: entered promiscuous mode [ 61.355173][ T6436] syzkaller1: entered allmulticast mode [ 61.391335][ T6442] 9p: Bad value for 'wfdno' [ 61.421803][ T6453] Could not find key with description: [syz] [ 61.421816][ T6453] process_request_key_err: No key [ 61.421823][ T6453] Could not find valid key in user session keyring for sig specified in mount option: [syz] [ 61.421830][ T6453] One or more global auth toks could not properly register; rc = [-2] [ 61.421864][ T6453] Error validating options; rc = [-2] [ 61.516145][ T2327] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 61.565982][ T6460] smb3: Bad value for 'source' [ 61.573490][ T6460] netlink: 28 bytes leftover after parsing attributes in process `syz.0.155'. [ 61.666151][ T2327] usb 8-1: Using ep0 maxpacket: 32 [ 61.666620][ T2327] usb 8-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 61.667511][ T2327] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 61.667526][ T2327] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 61.667537][ T2327] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.667548][ T2327] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 61.669239][ T2327] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.669250][ T2327] usb 8-1: Product: syz [ 61.669257][ T2327] usb 8-1: Manufacturer: syz [ 61.669263][ T2327] usb 8-1: SerialNumber: syz [ 61.673149][ T2327] usb 8-1: config 0 descriptor?? [ 61.673760][ T6428] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 61.679593][ T2327] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input14 [ 61.741681][ T6464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.156'. [ 61.882594][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.882937][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.886391][ T6428] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 61.889774][ T6428] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 61.902593][ T856] usb 8-1: USB disconnect, device number 4 [ 61.902658][ C1] xpad 8-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 62.053847][ T6469] Bluetooth: MGMT ver 1.23 [ 62.352216][ T6429] ceph: No mds server is up or the cluster is laggy [ 62.368797][ T6479] loop9: detected capacity change from 0 to 2640 [ 62.386454][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386486][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386509][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386531][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386552][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386588][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386619][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386641][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386653][ T6479] ldm_validate_partition_table(): Disk read failed. [ 62.386672][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386694][ T6479] Buffer I/O error on dev loop9, logical block 0, async page read [ 62.386726][ T6479] Dev loop9: unable to read RDB block 0 [ 62.386852][ T6479] loop9: unable to read partition table [ 62.386993][ T6479] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 62.463288][ T5191] ldm_validate_partition_table(): Disk read failed. [ 62.463323][ T5191] Dev loop9: unable to read RDB block 0 [ 62.463389][ T5191] loop9: unable to read partition table [ 62.509260][ T6485] fuse: Unknown parameter 'f¯˜_wÿ0x0000000000000004' [ 62.509393][ T6485] fuse: Unknown parameter 'f¯˜_wÿ0x0000000000000004' [ 62.615528][ T6491] netlink: 'syz.0.167': attribute type 21 has an invalid length. [ 62.615543][ T6491] IPv6: NLM_F_CREATE should be specified when creating new route [ 62.665465][ T6493] rxe_eth0 speed is unknown, defaulting to 1000 [ 62.762079][ T5784] Bluetooth: min 0 < 6 [ 63.276117][ T856] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.456258][ T856] usb 7-1: Using ep0 maxpacket: 32 [ 63.457877][ T856] usb 7-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 63.458698][ T856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 63.458712][ T856] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 63.458724][ T856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 63.458734][ T856] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 63.460448][ T856] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.460459][ T856] usb 7-1: Product: syz [ 63.460465][ T856] usb 7-1: Manufacturer: syz [ 63.460472][ T856] usb 7-1: SerialNumber: syz [ 63.461802][ T856] usb 7-1: config 0 descriptor?? [ 63.462281][ T6508] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 63.464429][ T856] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input15 [ 63.646838][ T6518] loop9: detected capacity change from 0 to 2640 [ 63.648017][ T6518] ldm_validate_partition_table(): Disk read failed. [ 63.648055][ T6518] Dev loop9: unable to read RDB block 0 [ 63.648172][ T6518] loop9: unable to read partition table [ 63.648292][ T6518] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 63.673618][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.673822][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.681827][ T6508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.682019][ T6508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.686729][ T6520] omfs: Invalid superblock (0) [ 63.691824][ C1] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 63.699597][ T10] usb 7-1: USB disconnect, device number 3 [ 63.699666][ C1] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 63.726626][ T6524] netlink: 12 bytes leftover after parsing attributes in process `syz.0.177'. [ 63.867126][ T6529] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 63.869021][ T6529] e1000e 0000:00:02.0 eth1: entered promiscuous mode [ 63.870654][ T6529] netlink: 'syz.3.179': attribute type 1 has an invalid length. [ 63.870665][ T6529] netlink: 1 bytes leftover after parsing attributes in process `syz.3.179'. [ 63.985094][ T6553] ieee802154 phy0 wpan0: encryption failed: -22 [ 63.985204][ T6555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.185'. [ 64.024122][ T6555] 8021q: adding VLAN 0 to HW filter on device bond1 [ 64.030591][ T6553] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 64.237243][ T6571] comedi comedi1: 8255: I/O base address not correctly aligned [ 64.630561][ T6591] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.716481][ T6588] rxe_eth0 speed is unknown, defaulting to 1000 [ 64.818009][ T5784] Bluetooth: hci2: command tx timeout [ 65.116495][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.191'. [ 65.116509][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.3.191'. [ 65.116517][ T6599] FAULT_INJECTION: forcing a failure. [ 65.116517][ T6599] name failslab, interval 1, probability 0, space 0, times 0 [ 65.116529][ T6599] CPU: 1 UID: 0 PID: 6599 Comm: syz.3.191 Not tainted syzkaller #0 PREEMPT(full) [ 65.116541][ T6599] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 65.116547][ T6599] Call Trace: [ 65.116587][ T6599] [ 65.116592][ T6599] dump_stack_lvl+0x100/0x190 [ 65.116682][ T6599] should_fail_ex.cold+0x5/0xa [ 65.116715][ T6599] should_failslab+0xc2/0x120 [ 65.116754][ T6599] __kmalloc_noprof+0xfc/0x840 [ 65.116766][ T6599] ? nft_set_elem_init+0xd6/0x630 [ 65.116849][ T6599] nft_set_elem_init+0xd6/0x630 [ 65.116871][ T6599] nft_del_setelem+0x56c/0x1140 [ 65.116884][ T6599] ? vprintk_emit+0x1c9/0x6b0 [ 65.116921][ T6599] ? __pfx_vprintk_emit+0x10/0x10 [ 65.116932][ T6599] ? ___ratelimit+0x642/0xad0 [ 65.117000][ T6599] ? __pfx_nft_del_setelem+0x10/0x10 [ 65.117015][ T6599] ? _printk+0xcf/0x110 [ 65.117043][ T6599] ? nla_strcmp+0xff/0x130 [ 65.117092][ T6599] ? nla_strcmp+0xff/0x130 [ 65.117107][ T6599] nf_tables_delsetelem+0x6ea/0xf50 [ 65.117122][ T6599] ? __pfx_nf_tables_delsetelem+0x10/0x10 [ 65.117133][ T6599] ? __pfx___nla_validate_parse+0x10/0x10 [ 65.117152][ T6599] ? lock_acquire+0x1d1/0x380 [ 65.117167][ T6599] ? net_generic+0x25/0x2a0 [ 65.117183][ T6599] ? __nla_parse+0x40/0x60 [ 65.117198][ T6599] nfnetlink_rcv_batch+0x1410/0x2880 [ 65.117219][ T6599] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 65.117234][ T6599] ? lock_acquire+0x1d1/0x380 [ 65.117248][ T6599] ? avc_has_perm_noaudit+0x56/0x470 [ 65.117274][ T6599] ? avc_has_perm_noaudit+0x145/0x470 [ 65.117302][ T6599] ? __nla_parse+0x40/0x60 [ 65.117316][ T6599] nfnetlink_rcv+0x3bd/0x440 [ 65.117328][ T6599] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 65.117343][ T6599] netlink_unicast+0x668/0x950 [ 65.117360][ T6599] ? __pfx_netlink_unicast+0x10/0x10 [ 65.117380][ T6599] netlink_sendmsg+0x9ac/0x10c0 [ 65.117399][ T6599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.117418][ T6599] ? selinux_socket_sendmsg+0x198/0x2f0 [ 65.117436][ T6599] ? ____sys_sendmsg+0xa13/0xb90 [ 65.117447][ T6599] ____sys_sendmsg+0xa13/0xb90 [ 65.117456][ T6599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.117472][ T6599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.117489][ T6599] ___sys_sendmsg+0x208/0x270 [ 65.117501][ T6599] ? __pfx____sys_sendmsg+0x10/0x10 [ 65.117512][ T6599] ? futex_wait+0x11e/0x370 [ 65.117532][ T6599] ? find_held_lock+0x2b/0x80 [ 65.117552][ T6599] __sys_sendmsg+0x160/0x210 [ 65.117566][ T6599] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.117588][ T6599] do_syscall_64+0x123/0x7b0 [ 65.117604][ T6599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.117614][ T6599] RIP: 0033:0x7fb78b1a94d9 [ 65.117624][ T6599] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.117633][ T6599] RSP: 002b:00007fb78c0b1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.117651][ T6599] RAX: ffffffffffffffda RBX: 00007fb78b425fa0 RCX: 00007fb78b1a94d9 [ 65.117658][ T6599] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 65.117663][ T6599] RBP: 00007fb78b23804e R08: 0000000000000000 R09: 0000000000000000 [ 65.117669][ T6599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.117675][ T6599] R13: 00007fb78b426038 R14: 00007fb78b425fa0 R15: 00007fff04b98348 [ 65.117690][ T6599] [ 65.194003][ T1693] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 65.251587][ T6601] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 65.252412][ T6601] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 65.252988][ T6618] loop9: detected capacity change from 0 to 2640 [ 65.253764][ T6618] ldm_validate_partition_table(): Disk read failed. [ 65.253800][ T6618] Dev loop9: unable to read RDB block 0 [ 65.253868][ T6618] loop9: unable to read partition table [ 65.253957][ T6618] loop_reread_partitions: partition scan of loop9 (3Ÿ ¾‚³˜) failed (rc=-5) [ 65.371245][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 65.371259][ T6622] netlink: 16 bytes leftover after parsing attributes in process `syz.2.196'. [ 65.457471][ T856] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 65.556237][ T1693] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 65.646179][ T2327] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.729120][ T1693] usb 6-1: New USB device found: idVendor=7d25, idProduct=a415, bcdDevice=0.40 [ 65.730286][ T1693] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 65.730306][ T1693] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 65.730319][ T1693] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 65.730350][ T1693] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 65.730371][ T1693] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 65.731714][ T1693] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 65.731730][ T1693] usb 6-1: Product: syz [ 65.731743][ T1693] usb 6-1: Manufacturer: syz [ 65.737258][ T1693] cdc_wdm 6-1:1.0: skipping garbage [ 65.737271][ T1693] cdc_wdm 6-1:1.0: skipping garbage [ 65.743073][ T1693] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 65.743087][ T1693] cdc_wdm 6-1:1.0: Unknown control protocol [ 65.796457][ T2327] usb 7-1: Using ep0 maxpacket: 32 [ 65.797151][ T2327] usb 7-1: New USB device found: idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 65.798137][ T2327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 65.798161][ T2327] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.798180][ T2327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 65.798198][ T2327] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.800132][ T2327] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.800151][ T2327] usb 7-1: Product: syz [ 65.800162][ T2327] usb 7-1: Manufacturer: syz [ 65.800174][ T2327] usb 7-1: SerialNumber: syz [ 65.802414][ T2327] usb 7-1: config 0 descriptor?? [ 65.803213][ T6626] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 65.813662][ T2327] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input16 [ 65.967386][ T1693] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 66.009444][ T6626] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.009788][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.012781][ T6626] FAULT_INJECTION: forcing a failure. [ 66.012781][ T6626] name failslab, interval 1, probability 0, space 0, times 0 [ 66.012803][ T6626] CPU: 1 UID: 0 PID: 6626 Comm: syz.2.199 Not tainted syzkaller #0 PREEMPT(full) [ 66.012824][ T6626] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 66.012861][ T6626] Call Trace: [ 66.012868][ T6626] [ 66.012875][ T6626] dump_stack_lvl+0x100/0x190 [ 66.012911][ T6626] should_fail_ex.cold+0x5/0xa [ 66.012940][ T6626] should_failslab+0xc2/0x120 [ 66.012970][ T6626] kmem_cache_alloc_noprof+0x92/0x6a0 [ 66.013000][ T6626] ? __asan_memcpy+0x3c/0x60 [ 66.013027][ T6626] ? __kernfs_new_node+0xd2/0xa10 [ 66.013076][ T6626] __kernfs_new_node+0xd2/0xa10 [ 66.013099][ T6626] ? __pfx___kernfs_new_node+0x10/0x10 [ 66.013121][ T6626] ? lock_acquire+0x1d1/0x380 [ 66.013164][ T6626] ? kernfs_root+0x23/0x2a0 [ 66.013191][ T6626] ? find_held_lock+0x2b/0x80 [ 66.013211][ T6626] ? kernfs_root+0xee/0x2a0 [ 66.013239][ T6626] ? kernfs_root+0xee/0x2a0 [ 66.013272][ T6626] kernfs_new_node+0x194/0x200 [ 66.013293][ T6626] ? __pfx_kernfs_new_node+0x10/0x10 [ 66.013311][ T6626] ? kernfs_create_link+0xe4/0x280 [ 66.013332][ T6626] ? kernfs_create_link+0xe4/0x280 [ 66.013361][ T6626] kernfs_create_link+0x100/0x280 [ 66.013387][ T6626] sysfs_do_create_link_sd+0x90/0x140 [ 66.013416][ T6626] sysfs_create_link+0x61/0xc0 [ 66.013442][ T6626] module_add_driver+0x1c0/0x420 [ 66.013510][ T6626] bus_add_driver+0x374/0x620 [ 66.013538][ T6626] driver_register+0x1e2/0x360 [ 66.013565][ T6626] ? rcu_is_watching+0x13/0xc0 [ 66.013588][ T6626] usb_gadget_register_driver_owner+0x132/0x210 [ 66.013643][ T6626] raw_ioctl+0x1a85/0x2b80 [ 66.013670][ T6626] ? __pfx_raw_ioctl+0x10/0x10 [ 66.013690][ T6626] ? selinux_file_ioctl+0x1e0/0x290 [ 66.013711][ T6626] ? selinux_file_ioctl+0x1e7/0x290 [ 66.013732][ T6626] ? __pfx_raw_ioctl+0x10/0x10 [ 66.013752][ T6626] __x64_sys_ioctl+0x18e/0x210 [ 66.013775][ T6626] do_syscall_64+0x123/0x7b0 [ 66.013803][ T6626] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.013823][ T6626] RIP: 0033:0x7f9c61fa916b [ 66.013838][ T6626] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 66.013856][ T6626] RSP: 002b:00007f9c601f3f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 66.013875][ T6626] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f9c61fa916b [ 66.013886][ T6626] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 66.013897][ T6626] RBP: 00007f9c601f4fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 66.013909][ T6626] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.013920][ T6626] R13: 0000200000000d40 R14: 0000000000000000 R15: 0000000000001938 [ 66.013952][ T6626] [ 66.014067][ T6626] bus_add_driver: failed to create module links for raw-gadget.3 [ 66.014129][ T6626] UDC core: USB Raw Gadget: driver registration failed: -12 [ 66.014143][ T6626] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 66.015928][ C2] xpad 7-1:0.0: xpad_irq_in - usb_submit_urb failed with result -1 [ 66.022256][ T1693] usb 7-1: USB disconnect, device number 4 [ 66.022377][ C2] xpad 7-1:0.0: xpad_irq_out - usb_submit_urb failed with result -19 [ 66.194530][ C2] cdc_wdm 6-1:1.0: Unexpected error -71 [ 66.194956][ T10] usb 6-1: USB disconnect, device number 4 [ 66.195640][ C2] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 66.195680][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 66.195687][ C2] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 66.396441][ T43] kauditd_printk_skb: 24326 callbacks suppressed [ 66.396457][ T43] audit: type=1400 audit(1794719038.068:38742): avc: denied { read write } for pid=6619 comm="syz.1.195" name="sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.398156][ T43] audit: type=1400 audit(1794719038.068:38743): avc: denied { open } for pid=6619 comm="syz.1.195" path="/dev/sg0" dev="devtmpfs" ino=720 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 66.413568][ T43] audit: type=1400 audit(1794719038.078:38744): avc: denied { cmd } for pid=6619 comm="iou-wrk-6620" path="/dev/ublk-control" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1 [ 66.421033][ T43] audit: type=1400 audit(1794719038.088:38745): avc: denied { map } for pid=6619 comm="syz.1.195" path="/dev/ublkc0" dev="devtmpfs" ino=3007 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.697518][ T856] libceph: mon0 (1)127.0.0.1:6789 socket error on write [ 68.162286][ T6606] ceph: No mds server is up or the cluster is laggy [ 71.220962][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.221011][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.230322][ T50] cfg80211: failed to load regulatory.db [ 132.657420][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.657472][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 170.576241][ T5792] Bluetooth: hci0: command 0x0406 tx timeout [ 170.576417][ T67] Bluetooth: hci2: command 0x0406 tx timeout [ 170.577466][ T5781] Bluetooth: hci1: command 0x0406 tx timeout [ 180.817444][ T5784] Bluetooth: hci3: command 0x0406 tx timeout [ 194.097602][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.097650][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.537459][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.537510][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.977197][ T1447] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.977227][ T1447] ieee802154 phy1 wpan1: encryption failed: -22 [ 361.659187][ T43] audit: type=1400 audit(1794719333.328:38746): avc: denied { write } for pid=6680 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 361.714653][ T43] audit: type=1400 audit(1794719333.378:38747): avc: denied { write } for pid=6683 comm="rm" name="hook-state" dev="tmpfs" ino=1858 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 VM DIAGNOSIS: 05:09:01 Registers: info registers vcpu 0 CPU#0 RAX=00000000001face1 RBX=ffffffff8fc91540 RCX=ffffffff8bf0a375 RDX=0000000000000001 RSI=ffffffff8e62a3ec RDI=ffffffff8c835580 RBP=fffffbfff1f922a8 RSP=ffffffff8fc07cf0 R8 =0000000000000001 R9 =ffffed100d406825 R10=ffff88806a03412b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffffffff1f80fa2 R15=dffffc0000000000 RIP=ffffffff8bf0880f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d446c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff34b2b068 CR3=000000000fd98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000015422003 Opmask01=0000000000000001 Opmask02=00000000efffbfff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c22d66b4f39d9377 0bd4358c82c6174f ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 04c9048e0641f63a 8beb6dc0c4d20dbf ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58695986a064e361 ace28d9f8c59b1fe ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ebd21fedfa01c7e2 010bed790de922a9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 80e2968762e75f20 3c12b1676f1ecad2 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e8c8ed0bb71c26fa 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1ec7f680f41eefad 455b26e909edc8ee ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9d03ef5800000000 36daaf84a8935da8 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9bfe6e7ce94af43f e95037696aedae7e ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e27f76469d2a9b3a 93ecc9c64fd9edc3 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6168730073257325 7325204650420050 5241006e65706f5f 667062203a732500 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444d560056005600 5600054650420050 5241004b40554a5f 435547051f560000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f013de386af93d2a 0002001400000048 00000003000b0005 0000008000080008 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000008000080008 0000116800001168 ffffffffffffffff 00060014aa000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000080fe00010014 00000020fd80780a f013de386af93d2a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0002001400000048 00000003000b0005 0000008000080008 0000116800001168 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 00060014aaaaaafe ffaaaaa800000000 000080fe00010014 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000111d3f RBX=ffff888020abcb00 RCX=ffffffff8bf0a375 RDX=0000000000000001 RSI=ffffffff8e62a3ec RDI=ffffffff8c835580 RBP=ffffed1004157960 RSP=ffffc90000187e00 R8 =0000000000000001 R9 =ffffed100d426825 R10=ffff88806a13412b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000030fc4 R15=dffffc0000000000 RIP=ffffffff8bf0880f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d456c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd3432b4e9c CR3=000000000fd98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=000000000007ffff Opmask02=000000000007ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 71e09f514c4e9a7b bddc6759c9d90c3b ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 61cad0186b1dd833 86bb0fa2e15ea9f0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 fd6569407b81a1d8 af732f52a5ca54db ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8d76c646b9b6170 a5e11567cfa648cd ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000ffffffff 00000000000000b4 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000034 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 42e17eaabe49fdcc 2b4861f4645bda26 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 e40881b35e215307 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4ae28846c46aeba4 f9448cd4d57abf08 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac4f4bb800000000 c286e769b83017be ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 042af61399a9a103 a39e162ac86a3c3c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2e868a95481d4fad bbf2b4ee73f72555 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7834302578302074 6e65766520646574 63657078656e7520 3a7325006b636f73 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5d1115005d150551 4b40534005414051 4640555d404b5005 1f5600004e464a56 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0016000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563fd218bb10 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000563fd2187530 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbfbfbfbfbfbfbf bfbff52532232d20 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 262821df2e2e33df 3228df3232202b22 df312e232d2435bf 2324353124322431 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000001ddc4f RBX=ffff888020aba580 RCX=ffffffff8bf0a375 RDX=0000000000000001 RSI=ffffffff8e62a3ec RDI=ffffffff8c835580 RBP=ffffed10041574b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d446825 R10=ffff88806a23412b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bf0880f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d466c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffc33e8a438 CR3=000000000fd98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000010444000 Opmask01=0000000000000001 Opmask02=00000000fffffbff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02b632a469 00007f02b632a469 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffeed7cfe0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f02b643ab20 00007f02b643b050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000002e2e ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000137c0b RBX=ffff888020ab8000 RCX=ffffffff8bf0a375 RDX=0000000000000001 RSI=ffffffff8e62a3ec RDI=ffffffff8c835580 RBP=ffffed1004157000 RSP=ffffc900001a7e00 R8 =0000000000000001 R9 =ffffed100d466825 R10=ffff88806a33412b R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000034fc4 R15=dffffc0000000000 RIP=ffffffff8bf0880f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d476c000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9e2906b286 CR3=000000000fd98000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ae70b10 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50213fce80 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50213fce80 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055557ae74ba8 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8808000210000410 0006017798000400 048080808085a284 080018800401c710 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080007000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000200000004 2808018003000400 000800000401c708 00080248d8006c6f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0180041893c7f48a 0800010000020806 06010fe0c5000138 0000017e00000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 010410000010000f ffffffffffff0400 10000c8080801000 00040c0145d40001 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78b60010001fffff feb4100019800406 0108e00180801000 0100000008061480 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 a210003080808410 000b9b8080080000 040c0146b0001000 49be080001000002 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0806060111840180 041893c7f48a0800 0100000208060601 0fe0c50001380000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000