last executing test programs: 1m27.920354905s ago: executing program 2 (id=121): r0 = syz_open_procfs(0x0, &(0x7f0000000380)='map_files\x00') (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='freezer.parent_freezing\x00', 0x275a, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000580)={0x44, r3, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}]}, 0x44}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='mmap_lock_acquire_returned\x00', r6}, 0x10) (async, rerun: 64) write$UHID_CREATE2(r1, &(0x7f0000000500)=ANY=[@ANYBLOB='-'], 0x118) (async, rerun: 64) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c74c50000000000120000f1850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r7}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) (async) mount(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000040)='smb3\x00', 0x0, &(0x7f00000000c0)='rdma') (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000000), 0x2, 0x0) 1m27.870874262s ago: executing program 2 (id=122): r0 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) pread64(r0, &(0x7f00000000c0)=""/47, 0x2f, 0x79) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = fcntl$dupfd(r1, 0x0, r1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x8, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000007c0)=""/109, 0x6d}], 0x1}, 0x4}], 0x1, 0x40000002, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000007c0)=@mangle={'mangle\x00', 0x2, 0x6, 0x580, 0x2a8, 0x2a8, 0x1d8, 0xf8, 0x1d8, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x4b0, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0x0, 0xff000000], 'macvlan1\x00', 'erspan0\x00', {}, {}, 0x87}, 0x0, 0xd0, 0xf8, 0x0, {0x7a00000000000000}, [@common=@ipv6header={{0x28}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {}, {}, 0xffffffff}}}, {{@ipv6={@mcast1, @remote, [0xff], [], '\x00', 'dummy0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x7, 0x32, "a3063b7e52583ede5b0e553befa48d192010a84c1933cac8b40df090c8b8"}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5e0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000180)={0x1, @pix={0x0, 0x0, 0x58595556}}) 1m27.810639896s ago: executing program 2 (id=124): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, &(0x7f0000000340)=[{0x2, 0x0, {0x0, 0xf0, 0x1}, {0x0, 0xf0, 0x3}, 0x2, 0xfd}, {0x2, 0x0, {0x0, 0xff, 0x1}, {0x2, 0xff, 0x2}, 0x1, 0xff}, {0x2, 0x0, {0x2}, {0x1, 0x0, 0x4}, 0xff}, {0x2, 0x2, {0x0, 0x1}, {0x2, 0x0, 0x3}, 0xfd}, {0x3, 0x2, {0x1, 0x1, 0x1}, {0x1, 0x0, 0x1}, 0x0, 0xff}, {0x1, 0x1, {0x0, 0xff, 0x3}, {0x1, 0xff, 0x3}, 0x2, 0x2}, {0x0, 0x0, {0x1, 0xff, 0x4}, {0x2, 0x1, 0x2}, 0xfd, 0x1}, {0x1, 0x3, {0x1, 0xff}, {0x0, 0xff, 0x2}, 0xff, 0x2}], 0x100) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix={0x7, 0x7, 0x48524742, 0x3, 0x10001, 0xbb, 0x4, 0x4, 0x0, 0x4, 0x0, 0x4}}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) process_vm_readv(r3, &(0x7f0000000ac0)=[{&(0x7f00000006c0)=""/107, 0x6b}, {&(0x7f0000000740)=""/44, 0x2c}, {&(0x7f0000000780)=""/80, 0x50}, {&(0x7f0000000800)=""/143, 0x8f}, {&(0x7f00000008c0)=""/43, 0x2b}, {&(0x7f0000000900)=""/89, 0x59}, {&(0x7f0000000dc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/31, 0x1f}, {&(0x7f00000009c0)=""/198, 0xc6}], 0x9, &(0x7f0000001ec0)=[{&(0x7f0000000b80)=""/92, 0x5c}, {&(0x7f0000001dc0)=""/221, 0xdd}, {&(0x7f0000000c00)=""/88, 0x58}, {&(0x7f0000000c80)}], 0x4, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x3, r3, 0x3, &(0x7f0000000c80)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000900000000000500200001000000050028"], 0x7c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)=@deltclass={0x34, 0x29, 0x100, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0xffe0, 0x1}, {0xfffd, 0x2}, {0xd, 0xb}}, [@tclass_kind_options=@c_sfb={0x8}, @tclass_kind_options=@c_cbs={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000) setuid(r4) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) migrate_pages(0x0, 0x8, &(0x7f0000000140)=0x7fff, &(0x7f0000000100)=0x2) r8 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r8, &(0x7f0000001040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="14000000000000001001000002"], 0x30}, 0x0) fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x2, 0x1, 0x80000001, 0xa449, 0xffffffffffffffff}) mremap(&(0x7f00007fd000/0x2000)=nil, 0x2000, 0x2000, 0x7, &(0x7f00008d7000/0x2000)=nil) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) writev(r7, &(0x7f0000001f40)=[{&(0x7f0000001f00)="697d12575bacbb", 0x7}], 0x1) sendmsg$NL802154_CMD_GET_SEC_KEY(r9, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="05ca62e9", @ANYRES16=r10, @ANYBLOB="000425bd7000fbdbdf25160000000c000600030000000300000008000300", @ANYRES32=r11, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x8132c4336f465fe1}, 0x0) madvise(&(0x7f00003c1000/0x1000)=nil, 0xdfc3efff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000010e0000000000000000073019a000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m27.709137884s ago: executing program 2 (id=126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x64, 0x0, 0x0, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8}, @NL80211_ATTR_CQM_RSSI_LEVEL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x10, 0x1, [0x0, 0x0, 0x0]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0x2]}, @NL80211_ATTR_CQM_TXE_INTVL={0x8}]}]}, 0x64}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0xfffffffffffffebe, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000052000005"], 0x114}], 0x1, 0x0, 0x0, 0x4000}, 0x0) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9464a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x0, 0x0, 0x0, 0x100, 0xfffffffc, {0x0, 0x0, 0x0, 0xffff, 0x369, 0x0, 0x4, 0x4, 0x0, 0x6000, 0x3, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4}, 0x50) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0x90000915, 0x0) r6 = accept4$ax25(0xffffffffffffffff, 0x0, &(0x7f0000000240), 0x800) getsockname$ax25(r6, &(0x7f0000000480)={{0x3, @rose}, [@remote, @bcast, @bcast, @null, @default, @remote, @rose]}, &(0x7f0000000280)=0x48) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000740)={0x1c, r8, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x1c}}, 0x0) r9 = open(&(0x7f0000000000)='./bus\x00', 0x44542, 0x2) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a00000800028004001700"], 0x76}}, 0xc000) lseek(r9, 0x0, 0x2) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x64, r1, 0x1, 0x70bd2b, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_ID={0x8, 0x8c, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_FD={0x8}}]}, 0x64}}, 0x0) 1m27.603089254s ago: executing program 2 (id=128): r0 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@link_local, @random="2ac7fd5d244d", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "3f00e7", 0x18, 0x2c, 0x0, @local, @mcast2, {[], {0x0, 0xfffd, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x7}}}}}}}, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000040)=[{0x40, 0x5d, 0x2, 0x190b87f9}, {0x6, 0x0, 0x6, 0x1}]}, 0x10) r3 = creat(&(0x7f0000000440)='./file0\x00', 0x0) open_by_handle_at(r3, &(0x7f0000000bc0)=ANY=[@ANYBLOB="18000000f80002"], 0x10002) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000140)="24000000010006", 0x7) preadv(r0, &(0x7f0000002800)=[{&(0x7f00000023c0)=""/203, 0xcb}, {&(0x7f00000024c0)=""/162, 0xa2}], 0x2, 0x7, 0x7fff) 1m27.602663944s ago: executing program 2 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@remote, @empty, 0x0}, &(0x7f00000000c0)=0xc) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x80, {0x0}, {0xee01}, 0x6f85, 0x4a}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getlink={0x90, 0x12, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x8040, 0x3020b}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe2e0}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d6dc1e0ce70d910433d78e3f1dff8e69"}, @IFLA_PORT_PROFILE={0x15, 0x2, '_^\xed\xbcE\xada\x9c9\xceYE\xa2\xdc\x10!\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "65e03eded3e317be0a4ad3b4f054218a"}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x90}}, 0x40800) 1m27.537077996s ago: executing program 32 (id=130): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000040)={@remote, @empty, 0x0}, &(0x7f00000000c0)=0xc) (async) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000100)={0x3, 0x80, {0x0}, {0xee01}, 0x6f85, 0x4a}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@getlink={0x90, 0x12, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, 0x8040, 0x3020b}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xe2e0}, @IFLA_NET_NS_PID={0x8, 0x13, r3}, @IFLA_PORT_SELF={0x54, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0xb}, @IFLA_PORT_VF={0x8, 0x1, 0x9}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "d6dc1e0ce70d910433d78e3f1dff8e69"}, @IFLA_PORT_PROFILE={0x15, 0x2, '_^\xed\xbcE\xada\x9c9\xceYE\xa2\xdc\x10!\x00'}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "65e03eded3e317be0a4ad3b4f054218a"}]}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x90}}, 0x40800) 3.61976097s ago: executing program 0 (id=966): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x3c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_EXPECT_TIMEOUT={0x8}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xfff}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x8, 0xb, 'sip\x00'}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x20008080) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='X'], 0x6) connect$phonet_pipe(r2, &(0x7f0000000040)={0x23, 0x1, 0x5b, 0xfd}, 0x10) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000000f9, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000140)={0x1, @vbi={0x3c0, 0x1, 0x2, 0x41495043, [0xfffffffd, 0x40], [0x7ff, 0xfeedcafe], 0x13a}}) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) r6 = dup(r1) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x4, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r7, 0xae9a) ioctl$KVM_RUN(r7, 0xae80, 0x0) 3.329364404s ago: executing program 0 (id=969): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000080)={0x2, 0x40, 0x4}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) read$char_usb(r1, &(0x7f0000000000)=""/73, 0x49) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x0, 0x0) r3 = syz_usb_connect(0x4, 0xfffffcc4, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c80)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0xffffffffffffff9f, 0xa, 0x1}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x5, 0x1fe, 0x0, 0xf, 0x2}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4006040}, 0x0) 3.239387008s ago: executing program 1 (id=971): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xaece, 0x0) preadv(r4, &(0x7f00000005c0)=[{&(0x7f0000000400)=""/237, 0xed}], 0x1, 0x7, 0x400) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x2c, 0x28, 0x200, 0x4004, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4008094) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x4, &(0x7f00000000c0)=""/162, &(0x7f0000000180)=0xa2) r9 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_HAS_DEVICE_ATTR_vm(r9, 0x4018aee3, &(0x7f0000000080)=@attr_other={0x0, 0x32ca442b, 0x7d, &(0x7f0000000040)=0x50b}) 3.139237912s ago: executing program 3 (id=972): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, &(0x7f00000001c0)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r3}]}}}, @IFLA_MASTER={0x8, 0x3, r3}]}, 0x40}}, 0x0) 2.929076765s ago: executing program 3 (id=973): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x28, r1, 0x1, 0x70bd27, 0x0, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0xc080) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]}) 2.829435675s ago: executing program 1 (id=975): set_mempolicy(0x5, &(0x7f0000000080)=0x3, 0x961) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x0, 0x8, 0x0, 0x17, 0x3, 0xc8}) 2.708586783s ago: executing program 3 (id=977): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) (async) mkdir(&(0x7f0000000080)='./file0\x00', 0x67) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) pwritev2(r0, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x1ffffff, 0x80000, 0x41) (async) accept$phonet_pipe(r0, &(0x7f00000000c0), &(0x7f0000000100)=0x10) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000004c0)='./bus\x00', &(0x7f0000000440), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@userxattr}]}) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000900000030000380140002007369743000000000000000000000000006000400ffff00000800030000000000080001"], 0x44}}, 0x0) 2.548450665s ago: executing program 3 (id=978): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$kcm(0x2, 0x2, 0x73) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b80)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$kcm(0x2, 0x2, 0x73) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x3}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) 2.339342248s ago: executing program 3 (id=979): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, 0x0) syz_open_dev$dmmidi(0x0, 0x200, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x18, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}]}, 0x18}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x29, 0x0, 0x5000) (async) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000800)={0x30, r6, 0x1, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}]}, 0x30}}, 0x0) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r9, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x38, r2, 0x1, 0x0, 0x0, {{}, {}, {0x1c, 0x17, {0x0, 0x0, @l2={'ib', 0x3a, 'team_slave_0\x00'}}}}}, 0x38}}, 0x0) 2.287854628s ago: executing program 3 (id=980): syz_open_procfs(0x0, &(0x7f0000000340)='net/vlan/vlan1\x00') 1.988042566s ago: executing program 4 (id=982): r0 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x28, 0x0, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40004) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_misc(r1, &(0x7f0000000040), 0xe09) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}}) 1.900104021s ago: executing program 1 (id=983): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r3, &(0x7f0000000a00)=[{{&(0x7f0000000080)={0x2, 0x40, @dev={0xac, 0x14, 0x14, 0x3d}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000480)="a90500000080f70e0001208bb3350100000000c7e600000000000000000000004717f2af6e70dc63d1c4bc40bb", 0x2d}], 0x1}}], 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b8000000"], 0xb8}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff) keyctl$dh_compute(0x17, &(0x7f0000000340)={r6, r4, r5}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}}) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd2f, 0x28c, 0xfffffffc, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xf}}, [@filter_kind_options=@f_bpf={{0x8}, {0x18, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0x44}}, 0x0) 1.750030517s ago: executing program 4 (id=984): r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2000000043000900fffffffffddbdf25010000000c0002"], 0x20}}, 0x44850) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x2000000) 1.664932617s ago: executing program 1 (id=985): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)={0x14, 0x25, 0x301, 0x4, 0x0, {0x1}}, 0x14}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="150000000206050000000000000000000007000005000400fd00000b0900020073797a310000000004000780"], 0x2c}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000519"], 0x528}}, 0xc000) 1.599459865s ago: executing program 4 (id=986): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x2800, 0x0) mmap$fb(&(0x7f000060c000/0x4000)=nil, 0x4000, 0x0, 0x20010, r1, 0x73000) sendmsg$nl_route(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)=@newnexthop={0x3c, 0x68, 0x901, 0x0, 0x0, {}, [@NHA_GROUP_TYPE={0x6}, @NHA_GROUP={0x1c, 0x2, [{0x1, 0x4}, {0x2, 0xd4}, {0x1, 0x2}]}]}, 0x3c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae90, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000010021000080000000000000000000000008"]) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000f40)=ANY=[@ANYRES16], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0x6802, 0x0) r5 = epoll_create1(0x0) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000000)) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r7 = syz_io_uring_setup(0x4072, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(r7, 0x567, 0x0, 0x0, 0x0, 0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r10, 0x0, 0x30, &(0x7f00000005c0)=ANY=[], 0x90) munmap(&(0x7f0000001000/0x4000)=nil, 0x4000) socket$xdp(0x2c, 0x3, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)={0x0, 0x81, 0x80, 0x83, 0xffffffff}) r11 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r11, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) 1.598910888s ago: executing program 1 (id=987): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r2, &(0x7f0000000280)=""/140, 0xffd0) getdents(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x1b4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x188, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xb0, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPRESSIONS={0x68, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_DYNSET_EXPR={0x1c, 0x7, 0x0, 0x1, {{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x401}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x89}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1dc}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) fchdir(r1) (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) getdents(r2, &(0x7f0000000280)=""/140, 0xffd0) (async) getdents(r2, 0x0, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWRULE={0x1b4, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x188, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}, @NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0xb0, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0xa0, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_EXPRESSIONS={0x68, 0xa, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}, {0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}]}, @NFTA_DYNSET_EXPR={0x1c, 0x7, 0x0, 0x1, {{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LOOKUP_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}}}, {0x44, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x1}, @NFTA_QUEUE_FLAGS={0x6, 0x3, 0x1, 0x0, 0x2}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x10}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x401}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x7}]}}}, {0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_OFFSET={0x8, 0x4, 0x1, 0x0, 0x8}]}}}, {0x3c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x89}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1dc}}, 0x0) (async) 1.468832037s ago: executing program 0 (id=988): mkdir(&(0x7f0000000400)='./file1\x00', 0x0) ioprio_set$pid(0x3, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') mount$9p_virtio(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', &(0x7f0000000140), 0x2, &(0x7f0000000640)={'trans=virtio,', {[{@dfltgid}]}}) read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020) utimensat(r0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)={{0x0, 0xea60}, {0x77359400}}, 0x0) openat$hpet(0xffffffffffffff9c, &(0x7f0000000180), 0x14402, 0x0) 1.259217877s ago: executing program 0 (id=989): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000400)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x4, &(0x7f0000000080)=0xa, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @loopback}, 0x62) setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x4}, 0x10) write(r0, &(0x7f0000000000)="1c0000001a005f0214f9f407000904001f000000ff02000200020000", 0x1c) 1.258546869s ago: executing program 1 (id=990): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x28, r3, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xe}]}]}, 0x30}}, 0x44) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r8) sendmsg$TIPC_NL_MON_SET(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x20, r9, 0x5, 0x70bd2b, 0x25dfdafe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8005}, 0x20000000) 578.644534ms ago: executing program 4 (id=991): r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f0000000400)={&(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/116, 0x74}, {&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/232, 0xe8}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000000440)=""/118, 0x76}], 0x6, &(0x7f00000003c0)=""/26, 0x1a}, 0x10001) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r1, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x1, 0x3, 0xfffc}}, 0x26) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000340)={@private, @remote, 0x0}, &(0x7f0000000380)=0xc) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000000540)={@private0={0xfc, 0x0, '\x00', 0x1}, @private2, @remote, 0x6a, 0x3, 0x6, 0x0, 0x5, 0x2000000, r5}) (async) getsockopt$bt_BT_SECURITY(r1, 0x111, 0x5, 0x0, 0x20001f00) 339.372252ms ago: executing program 4 (id=992): bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={0x0}, 0x18) r0 = openat$fb1(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) migrate_pages(0x0, 0xc, &(0x7f0000000040)=0xe, &(0x7f0000000100)=0x82) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000140)={0x19}) 139.863606ms ago: executing program 0 (id=993): openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x440000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x275a, 0x0) read$proc_mixer(r0, &(0x7f00000004c0)=""/209, 0xd1) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) ioctl$CDROMSTART(r0, 0x5308) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000140), 0x402, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r0, 0x5381) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000180)=0x14) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x76) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0xf, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf711, 0x0, 0x0, 0x0, 0xb}, [@printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f00000000c0)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x1d, '\x00', r2, 0x0, r0, 0x8, &(0x7f0000000240)={0x4, 0x102}, 0x8, 0x10, &(0x7f0000000280)={0x0, 0x7, 0xa8, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[r0, r0, r0], &(0x7f0000000300)=[{0x5, 0x3, 0x8, 0xa}, {0x3, 0x2, 0xc, 0x4}, {0x3, 0x3, 0xb, 0x1}, {0x4, 0x1, 0xb, 0x3}, {0x4, 0x3, 0x7, 0x8}, {0x1, 0x2, 0x9, 0x7}, {0x2, 0x3, 0x7, 0xa}], 0x10, 0x9, @void, @value}, 0x94) ioctl$IMDELTIMER(r1, 0x80044941, &(0x7f00000001c0)) 90.056703ms ago: executing program 4 (id=994): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_udplite(0xa, 0x2, 0x88) (async) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="040e04015b0c"], 0x7) r0 = socket$inet(0xa, 0x801, 0x0) (async) r1 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000200)='source', &(0x7f00000002c0)='\\/\xe9\x838\x9d<\f\x91\a\xd4$\xae$\x91&6n @\xf4M\xba\xf2<\xd6A\xdb\xd7\xbeY@g\xcc\xca\n@\x06\xa3\xfe%\x02\x96\xb7b\xa7\x15R.\xa3`fd\xdc\x8b\x18rBl{\x82\xda\xbeA\x17\n\f\xcd=\'\x11\x1bZ\x8e\xa1\xc3j$v\xefw\x96/\xff\xa2\xfc\xe3\xb8\xc7\x0f\xaaQ\x98F*T\xd5\xcd4g+\xbd\xd1\xe0R\x9d\x18\x19a:\xa2\xdf\xbe\x8b\x89\x81', 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000000c000500ff000000000000000c0002000000020000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r4, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32=r0], 0x90}}, 0x0) 0s ago: executing program 0 (id=995): r0 = landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = memfd_create(&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xaaSc\xf3]WhI\xf4\x89\x85!mPl\x90\xa5\x93\x19\f\x9a\xae\xd5a\x9bU5\x1a\x86\x9d)5y\xef\x90\xea5\x81\xfeO;\xd4zh?\xbdW\xe0\x84\xe6\x9d\xcb\xcd\xb6\xad3\x7fWY\x02\xa2\x8baG\x00\x0e\x8e/\xc1\xaf\xd0\xbcH9\x04\x00\x00\x00z\x16\xdf\xf3hLpLaA\x89n]>,^M\x82\x8e\xe40\x97_\x809y)Z\xeb\x9d\xbawv\xe9\xc0\x16\xdc\xf5\xcb\xdb\x96\xd6\xba@\xa7\x1bl\xca\xe0\x1e3\x81\xc6S\x86\xf7\xf0\xba\x1b\x14N\xa2\x04\xdb\xb5X\xe4y\xef\xe8\xdb\xd5r\x11\xfb\xe4v\xef\x06\xbb\x00\x96CR\xe0~5\x16=:A2\x9c\b\xd9\xa0CB\r\xe9\xb8$\xfe\x8d\xb1Gg\xa9\xac<\xbf\x10]\b9\xd9\x89\xaf\xa6\xd1\x10\x1fq\xba\x06_NW\xdb67Xv(\xa8\xce\x1b\xe6\xbd\x947\x8f)8\xe5\xb3\xac;\x7f+\xf67\xea\x1ei\x92w-)\xa1B/M\x0e7:9\xdb~V\xb7\xd5\x13^v\x14\xe6O\xea\x00\x87\x8dkG\xdf%\xebe\x83\xb97\x01| \xb3\xd8W\xe8o\x17\x97\xd9\x14o\x92\xb9\x9a\x8c\xd7\xcf\xa2\x11\xc3\xa5\xb3\xd2\xdeQ\xa7\x05\x7f\x99Lq(\xcd\\\xa2y\x14or\x1efn\xf2\x97\x96c\xda7\t,', 0x4) r3 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r3, 0x29, 0x42, 0x0, &(0x7f00007d0000)) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x4010012, r2, 0x0) ftruncate(r2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x1fd6b38443af8512}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x3c}}, 0x4) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r7 = socket(0x15, 0x5, 0x0) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) getsockopt(r7, 0x200000000114, 0x8, 0x0, 0x0) r8 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP6T_SO_GET_INFO(r7, 0x29, 0x40, &(0x7f0000000300)={'filter\x00', 0x0, [0x3, 0x6, 0x7, 0x0, 0x2]}, &(0x7f0000000380)=0x54) sendmsg$L2TP_CMD_SESSION_DELETE(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="810000"], 0x24}}, 0x0) sendmsg$inet6(r7, &(0x7f0000000580)={&(0x7f0000000140)={0xa, 0x4e21, 0x9f98, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x80}, 0x1c, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8003, &(0x7f0000000000)=0x9, 0x6, 0x3) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000165000/0x1000)=nil, 0x1000, 0x3) ioperm(0x6, 0x1, 0x95d) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x1) kernel console output (not intermixed with test programs): ng 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 60.681736][ T25] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 60.684122][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.697457][ T25] usbtmc 9-1:16.0: bulk endpoints not found [ 60.725764][ T5296] Bluetooth: hci2: command tx timeout [ 61.615673][ T834] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 61.713893][ T6980] overlayfs: failed to resolve './file0': -2 [ 62.413457][ T7008] tipc: Started in network mode [ 62.414847][ T7008] tipc: Node identity 7f000001, cluster identity 4711 [ 62.417471][ T7008] tipc: Enabled bearer , priority 10 [ 62.417941][ T7009] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 62.515856][ T7003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.277'. [ 62.568872][ T7015] fuse: Bad value for 'user_id' [ 62.572644][ T7015] fuse: Bad value for 'user_id' [ 62.585476][ T5296] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 62.588459][ T5296] Bluetooth: hci0: Injecting HCI hardware error event [ 62.592344][ T5940] Bluetooth: hci0: hardware error 0x00 [ 62.646923][ T7016] netlink: 'syz.0.281': attribute type 2 has an invalid length. [ 62.864544][ T7027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.283'. [ 63.234757][ T1491] usb 9-1: USB disconnect, device number 3 [ 63.437682][ T7060] trusted_key: syz.4.293 sent an empty control message without MSG_MORE. [ 63.538252][ T7068] netlink: 8 bytes leftover after parsing attributes in process `syz.3.295'. [ 63.540723][ T7068] netlink: 12 bytes leftover after parsing attributes in process `syz.3.295'. [ 63.546908][ T1491] tipc: Node number set to 2130706433 [ 63.576509][ T7061] netlink: 'syz.1.292': attribute type 9 has an invalid length. [ 63.696858][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz.4.297'. [ 63.861068][ T7085] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=834 sclass=netlink_route_socket pid=7085 comm=syz.3.300 [ 63.877502][ T7085] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 63.905497][ T39] kauditd_printk_skb: 893 callbacks suppressed [ 63.905510][ T39] audit: type=1400 audit(1734769119.529:1386): avc: denied { create } for pid=7083 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.915548][ T39] audit: type=1400 audit(1734769119.529:1387): avc: denied { setopt } for pid=7083 comm="syz.4.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 63.922080][ T39] audit: type=1400 audit(1734769119.539:1388): avc: denied { read write } for pid=5945 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.933240][ T39] audit: type=1400 audit(1734769119.539:1389): avc: denied { read write open } for pid=5945 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.947333][ T39] audit: type=1400 audit(1734769119.539:1390): avc: denied { ioctl } for pid=5945 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.968659][ T7095] netlink: 28 bytes leftover after parsing attributes in process `syz.3.303'. [ 63.980325][ T39] audit: type=1400 audit(1734769119.599:1391): avc: denied { read write } for pid=6415 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 63.990223][ T39] audit: type=1400 audit(1734769119.599:1392): avc: denied { read write open } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.000640][ T39] audit: type=1400 audit(1734769119.599:1393): avc: denied { ioctl } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.013045][ T39] audit: type=1400 audit(1734769119.629:1394): avc: denied { read write } for pid=5945 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.020562][ T39] audit: type=1400 audit(1734769119.629:1395): avc: denied { read write open } for pid=5945 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 64.063717][ T7098] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 64.077848][ T7100] xt_NFQUEUE: number of total queues is 0 [ 64.139490][ T7098] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 64.239342][ T7108] loop2: detected capacity change from 0 to 7 [ 64.241941][ T7108] Dev loop2: unable to read RDB block 7 [ 64.243943][ T7108] loop2: AHDI p2 p3 [ 64.246774][ T7108] loop2: partition table partially beyond EOD, truncated [ 64.249264][ T7108] loop2: p2 start 33554432 is beyond EOD, truncated [ 64.393852][ T7114] netlink: 8 bytes leftover after parsing attributes in process `syz.1.310'. [ 64.443165][ T7118] xt_hashlimit: max too large, truncated to 1048576 [ 64.486362][ T7120] Cannot find del_set index 0 as target [ 64.487280][ T7117] netlink: 36 bytes leftover after parsing attributes in process `syz.0.311'. [ 64.510601][ T7120] binder: 7119:7120 ioctl c0405602 200002c0 returned -22 [ 64.634697][ T7127] netlink: 'syz.3.313': attribute type 29 has an invalid length. [ 64.637955][ T7127] netlink: 'syz.3.313': attribute type 29 has an invalid length. [ 64.663243][ T7127] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=29978 sclass=netlink_xfrm_socket pid=7127 comm=syz.3.313 [ 64.726126][ T5940] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 64.961072][ T7144] tty tty1: ldisc open failed (-12), clearing slot 0 [ 65.160313][ T7157] erofs (device loop4): cannot find valid erofs superblock [ 65.425532][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 65.595685][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 65.630667][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 65.634163][ T25] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 65.641027][ T25] usb 9-1: can't read configurations, error -71 [ 66.005241][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 66.062212][ T7189] capability: warning: `syz.3.329' uses deprecated v2 capabilities in a way that may be insecure [ 66.165389][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 66.192273][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 66.207723][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 66.210843][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 66.213596][ T35] usb 5-1: SerialNumber: syz [ 66.243883][ T35] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 66.439884][ T7171] netlink: 44 bytes leftover after parsing attributes in process `syz.0.325'. [ 66.444409][ T7172] netlink: 44 bytes leftover after parsing attributes in process `syz.0.325'. [ 66.555314][ T5946] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 66.655303][ T35] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 66.676209][ T6718] usb 5-1: USB disconnect, device number 4 [ 66.690620][ T5946] usb 6-1: device descriptor read/64, error -71 [ 66.815290][ T35] usb 8-1: not running at top speed; connect to a high speed hub [ 66.822821][ T35] usb 8-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid maxpacket 1536, setting to 64 [ 66.826842][ T35] usb 8-1: config 1 interface 0 has no altsetting 0 [ 66.838881][ T35] usb 8-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 66.841849][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.843954][ T35] usb 8-1: Manufacturer: äŠ [ 66.845562][ T35] usb 8-1: SerialNumber: у [ 66.858117][ T7203] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 66.925244][ T5946] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 67.065361][ T5946] usb 6-1: device descriptor read/64, error -71 [ 67.070190][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.072713][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.080964][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.093438][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.103534][ T7203] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 67.105900][ T7203] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 67.137293][ T35] usbhid 8-1:1.0: can't add hid device: -71 [ 67.138963][ T35] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 67.149449][ T35] usb 8-1: USB disconnect, device number 3 [ 67.175359][ T5946] usb usb6-port1: attempt power cycle [ 67.366610][ T5940] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 67.368919][ T5940] Bluetooth: hci2: Injecting HCI hardware error event [ 67.373094][ T5940] Bluetooth: hci2: hardware error 0x00 [ 67.533177][ T7239] netlink: 'syz.0.343': attribute type 9 has an invalid length. [ 67.535259][ T5946] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 67.561114][ T5946] usb 6-1: device descriptor read/8, error -71 [ 67.583709][ T7244] netlink: 8 bytes leftover after parsing attributes in process `syz.4.345'. [ 67.795278][ T5946] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 67.829449][ T5946] usb 6-1: device descriptor read/8, error -71 [ 67.937142][ T5946] usb usb6-port1: unable to enumerate USB device [ 68.021397][ T7256] loop2: detected capacity change from 0 to 7 [ 68.028404][ T7256] Dev loop2: unable to read RDB block 7 [ 68.033048][ T7256] loop2: AHDI p2 p3 [ 68.036342][ T7256] loop2: partition table partially beyond EOD, truncated [ 68.041423][ T7256] loop2: p2 start 33554432 is beyond EOD, truncated [ 68.546026][ T7272] netlink: 'syz.0.351': attribute type 1 has an invalid length. [ 68.548059][ T7272] netlink: 224 bytes leftover after parsing attributes in process `syz.0.351'. [ 68.670351][ T7271] netlink: 80 bytes leftover after parsing attributes in process `syz.4.352'. [ 68.676540][ T7271] nbd: illegal input index -1941246308 [ 68.922719][ T39] kauditd_printk_skb: 1694 callbacks suppressed [ 68.922733][ T39] audit: type=1400 audit(1734769124.539:3090): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.933532][ T39] audit: type=1400 audit(1734769124.549:3091): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.943145][ T39] audit: type=1400 audit(1734769124.559:3092): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.952682][ T39] audit: type=1400 audit(1734769124.569:3093): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.962701][ T39] audit: type=1400 audit(1734769124.579:3094): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.972676][ T39] audit: type=1400 audit(1734769124.589:3095): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.982926][ T39] audit: type=1400 audit(1734769124.599:3096): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.992664][ T39] audit: type=1400 audit(1734769124.609:3097): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.003357][ T39] audit: type=1400 audit(1734769124.619:3098): avc: denied { ioctl } for pid=7258 comm="syz.3.348" path="/dev/cec3" dev="devtmpfs" ino=988 ioctlcmd=0x6106 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 69.035148][ T39] audit: type=1400 audit(1734769124.649:3099): avc: denied { search } for pid=7281 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.245701][ T7269] x86/PAT: syz.4.352:7269 freeing invalid memtype [mem 0xfed00000-0xfed00fff] [ 69.394324][ T7295] binder: binder_mmap: 7291 20acc000-20ace000 bad vm_flags failed -1 [ 69.451431][ T5946] IPVS: starting estimator thread 0... [ 69.475304][ T5940] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 69.549605][ T7300] IPVS: using max 39 ests per chain, 93600 per kthread [ 69.634225][ T7307] netlink: 'syz.1.360': attribute type 11 has an invalid length. [ 69.805352][ T7311] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 70.359465][ T7333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 70.361829][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.365'. [ 70.364178][ T7333] netlink: 'syz.0.365': attribute type 20 has an invalid length. [ 71.056028][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.059319][ T1416] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.114901][ T7367] netlink: 'syz.1.375': attribute type 3 has an invalid length. [ 71.507101][ T7379] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 71.512366][ T7379] overlayfs: overlapping lowerdir path [ 71.810311][ T7391] qnx6: unable to set blocksize [ 71.942923][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 71.946979][ T7395] netlink: 36 bytes leftover after parsing attributes in process `syz.3.381'. [ 72.244300][ T7410] block device autoloading is deprecated and will be removed. [ 72.409214][ T7414] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.485441][ T7414] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.585334][ T7414] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.686968][ T5946] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 72.696340][ T7414] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.777416][ T7414] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.790071][ T7414] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.795145][ T7434] block nbd3: not configured, cannot reconfigure [ 72.799904][ T7414] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.823592][ T7414] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.865448][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.868458][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 72.878218][ T5946] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 72.880830][ T5946] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 72.884197][ T5946] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 72.896832][ T5946] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.907569][ T5946] usb 5-1: config 0 descriptor?? [ 73.293073][ T7457] loop2: detected capacity change from 0 to 7 [ 73.295046][ T7457] Dev loop2: unable to read RDB block 7 [ 73.298405][ T7457] loop2: AHDI p2 p3 [ 73.299409][ T7457] loop2: partition table partially beyond EOD, truncated [ 73.304967][ T7457] loop2: p2 start 33554432 is beyond EOD, truncated [ 73.307776][ T7455] netlink: 'syz.1.398': attribute type 1 has an invalid length. [ 73.309749][ T7455] netlink: 3 bytes leftover after parsing attributes in process `syz.1.398'. [ 73.671298][ T7465] netlink: 'syz.3.401': attribute type 9 has an invalid length. [ 73.750892][ T5946] usbhid 5-1:0.0: can't add hid device: -71 [ 73.752599][ T5946] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 73.763501][ T5946] usb 5-1: USB disconnect, device number 5 [ 73.935261][ T39] kauditd_printk_skb: 1509 callbacks suppressed [ 73.935273][ T39] audit: type=1400 audit(1734769129.549:4609): avc: denied { bpf } for pid=7476 comm="syz.4.404" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 73.943382][ T39] audit: type=1400 audit(1734769129.559:4610): avc: denied { search } for pid=7469 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.950767][ T39] audit: type=1400 audit(1734769129.559:4611): avc: denied { create } for pid=7476 comm="syz.4.404" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.958720][ T39] audit: type=1400 audit(1734769129.559:4612): avc: denied { search } for pid=7469 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.965045][ T39] audit: type=1400 audit(1734769129.559:4613): avc: denied { map } for pid=7476 comm="syz.4.404" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.974563][ T39] audit: type=1400 audit(1734769129.559:4614): avc: denied { search } for pid=7469 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.982790][ T39] audit: type=1400 audit(1734769129.559:4615): avc: denied { read write } for pid=7476 comm="syz.4.404" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.991826][ T39] audit: type=1400 audit(1734769129.559:4616): avc: denied { search } for pid=7469 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.998039][ T39] audit: type=1400 audit(1734769129.559:4617): avc: denied { map } for pid=7476 comm="syz.4.404" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.004353][ T39] audit: type=1400 audit(1734769129.559:4618): avc: denied { read write } for pid=7476 comm="syz.4.404" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=17124 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 74.305654][ T7486] ALSA: mixer_oss: invalid OSS volume 'ip_vti0' [ 74.307381][ T7486] ALSA: mixer_oss: invalid OSS volume '¬ª' [ 74.425302][ T6718] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 74.474238][ T7491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.408'. [ 74.482056][ T7491] netlink: 32 bytes leftover after parsing attributes in process `syz.4.408'. [ 74.488590][ T7493] loop2: detected capacity change from 0 to 7 [ 74.490482][ T7493] Dev loop2: unable to read RDB block 7 [ 74.492092][ T7493] loop2: AHDI p2 p3 [ 74.493169][ T7493] loop2: partition table partially beyond EOD, truncated [ 74.501114][ T7493] loop2: p2 start 33554432 is beyond EOD, truncated [ 74.539757][ T7495] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode broadcast(3) [ 74.551165][ T7495] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 74.553435][ T7495] SELinux: failed to load policy [ 74.575236][ T6718] usb 6-1: Using ep0 maxpacket: 16 [ 74.625649][ T6718] usb 6-1: config 12 has an invalid interface number: 229 but max is 3 [ 74.627818][ T6718] usb 6-1: config 12 has an invalid interface number: 198 but max is 3 [ 74.629933][ T6718] usb 6-1: config 12 has an invalid interface number: 143 but max is 3 [ 74.631985][ T6718] usb 6-1: config 12 contains an unexpected descriptor of type 0x2, skipping [ 74.645349][ T6718] usb 6-1: config 12 has an invalid interface number: 205 but max is 3 [ 74.647544][ T6718] usb 6-1: config 12 has an invalid descriptor of length 1, skipping remainder of the config [ 74.650162][ T6718] usb 6-1: config 12 has no interface number 0 [ 74.651808][ T6718] usb 6-1: config 12 has no interface number 1 [ 74.653422][ T6718] usb 6-1: config 12 has no interface number 2 [ 74.655005][ T6718] usb 6-1: config 12 has no interface number 3 [ 74.664055][ T7497] 9pnet_fd: p9_fd_create_tcp (7497): problem binding to privport [ 74.674421][ T7500] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 74.677916][ T6718] usb 6-1: config 12 interface 229 altsetting 33 endpoint 0x6 has invalid maxpacket 4263, setting to 64 [ 74.680804][ T6718] usb 6-1: config 12 interface 229 altsetting 33 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 74.683688][ T6718] usb 6-1: config 12 interface 229 altsetting 33 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 74.695068][ T6718] usb 6-1: config 12 interface 229 altsetting 33 bulk endpoint 0xC has invalid maxpacket 64 [ 74.699102][ T6718] usb 6-1: config 12 interface 198 altsetting 129 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 74.704827][ T6718] usb 6-1: config 12 interface 143 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 74.709007][ T6718] usb 6-1: config 12 interface 143 altsetting 6 endpoint 0x3 has invalid maxpacket 1023, setting to 64 [ 74.711899][ T6718] usb 6-1: config 12 interface 143 altsetting 6 endpoint 0xE has an invalid bInterval 22, changing to 8 [ 74.714795][ T6718] usb 6-1: config 12 interface 143 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 74.727615][ T6718] usb 6-1: config 12 interface 143 altsetting 6 has a duplicate endpoint with address 0xC, skipping [ 74.730439][ T6718] usb 6-1: config 12 interface 143 altsetting 6 has a duplicate endpoint with address 0x6, skipping [ 74.733287][ T6718] usb 6-1: config 12 interface 205 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 14 [ 74.755211][ T6718] usb 6-1: config 12 interface 229 has no altsetting 0 [ 74.757000][ T6718] usb 6-1: config 12 interface 198 has no altsetting 0 [ 74.758742][ T6718] usb 6-1: config 12 interface 143 has no altsetting 0 [ 74.763600][ T6718] usb 6-1: config 12 interface 205 has no altsetting 0 [ 74.789089][ T6718] usb 6-1: New USB device found, idVendor=27ad, idProduct=870c, bcdDevice=bc.3e [ 74.791448][ T6718] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.793559][ T6718] usb 6-1: Product: á ‰ [ 74.794673][ T6718] usb 6-1: Manufacturer: á¦ê¢®á¸’屔꧊쨎ꙵ剆䕥햑䕦ᬨ㽸懼ὺද䤌떇è¡æ¢œäµžé‡£ [ 74.802292][ T6718] usb 6-1: SerialNumber: ï¦æ¨•å´¶ä–±è§®æªâ¶¿â«”帧í”癧뇄熦㮭ç¿ï£é¹Žï¦¡é¿ åŽÆ®ã›ã„¬âƒ­ë»ªé¢«ë…®î®²Ä—韈 [ 74.849785][ T7483] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 75.086424][ T6718] usb-storage 6-1:12.229: USB Mass Storage device detected [ 75.100181][ T7520] loop2: detected capacity change from 0 to 7 [ 75.107709][ T7520] Dev loop2: unable to read RDB block 7 [ 75.109235][ T7520] loop2: AHDI p2 p3 [ 75.110357][ T7520] loop2: partition table partially beyond EOD, truncated [ 75.112658][ T7520] loop2: p2 start 33554432 is beyond EOD, truncated [ 75.236063][ T7523] netlink: 'syz.4.418': attribute type 9 has an invalid length. [ 75.355106][ T6718] usb 6-1: USB disconnect, device number 7 [ 75.428502][ T7534] vxcan1: tx address claim with dest, not broadcast [ 75.644151][ T7542] fuse: Unknown parameter 'c0x0000000000000005' [ 75.660493][ T7540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.422'. [ 75.678170][ T7540] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 75.702674][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.423'. [ 75.891091][ T7554] overlayfs: failed to resolve './file1': -2 [ 75.909257][ T7555] tty tty23: ldisc open failed (-12), clearing slot 22 [ 76.168964][ T9] cfg80211: failed to load regulatory.db [ 76.225634][ T7568] loop2: detected capacity change from 0 to 7 [ 76.235288][ T7568] Dev loop2: unable to read RDB block 7 [ 76.236799][ T7568] loop2: AHDI p2 p3 [ 76.237845][ T7568] loop2: partition table partially beyond EOD, truncated [ 76.239748][ T7568] loop2: p2 start 33554432 is beyond EOD, truncated [ 76.446963][ C2] Illegal XDP return value 16128 on prog (id 156) dev bond_slave_0, expect packet loss! [ 76.457311][ T7576] IPv6: NLM_F_CREATE should be specified when creating new route [ 76.804508][ T7587] netlink: 'syz.4.435': attribute type 2 has an invalid length. [ 76.815257][ T7587] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 77.248063][ T7613] netlink: 'syz.3.441': attribute type 1 has an invalid length. [ 77.250634][ T7613] netlink: 224 bytes leftover after parsing attributes in process `syz.3.441'. [ 77.260609][ T7613] netlink: 1276 bytes leftover after parsing attributes in process `syz.3.441'. [ 77.263657][ T7613] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.303601][ T7613] capability: warning: `syz.3.441' uses 32-bit capabilities (legacy support in use) [ 77.610204][ T7630] loop2: detected capacity change from 0 to 7 [ 77.612227][ T7630] Dev loop2: unable to read RDB block 7 [ 77.613764][ T7630] loop2: AHDI p2 p3 [ 77.614892][ T7630] loop2: partition table partially beyond EOD, truncated [ 77.618299][ T7630] loop2: p2 start 33554432 is beyond EOD, truncated [ 78.181831][ T7646] netlink: 'syz.4.448': attribute type 1 has an invalid length. [ 78.183928][ T7646] netlink: 'syz.4.448': attribute type 2 has an invalid length. [ 78.447402][ T7657] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 78.455771][ T7659] loop2: detected capacity change from 0 to 7 [ 78.457704][ T7659] Dev loop2: unable to read RDB block 7 [ 78.459180][ T7659] loop2: AHDI p2 p3 [ 78.460219][ T7659] loop2: partition table partially beyond EOD, truncated [ 78.462100][ T7659] loop2: p2 start 33554432 is beyond EOD, truncated [ 78.466577][ T7657] batman_adv: batadv0: Adding interface: team0 [ 78.468422][ T7657] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 78.654738][ T7666] input: syz1 as /devices/virtual/input/input11 [ 78.795256][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 78.929835][ T9] usb 5-1: device descriptor read/64, error -71 [ 78.945254][ T39] kauditd_printk_skb: 1879 callbacks suppressed [ 78.945264][ T39] audit: type=1400 audit(1734769134.559:6498): avc: denied { ioctl } for pid=7673 comm="syz.3.457" path="socket:[20576]" dev="sockfs" ino=20576 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.953026][ T39] audit: type=1400 audit(1734769134.569:6499): avc: denied { write } for pid=7673 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 78.965343][ T39] audit: type=1400 audit(1734769134.569:6500): avc: denied { read } for pid=7674 comm="syz.4.458" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 78.985220][ T39] audit: type=1400 audit(1734769134.569:6501): avc: denied { read open } for pid=7674 comm="syz.4.458" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.005222][ T39] audit: type=1400 audit(1734769134.569:6502): avc: denied { ioctl } for pid=7674 comm="syz.4.458" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.035294][ T39] audit: type=1400 audit(1734769134.569:6503): avc: denied { write } for pid=7673 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.040583][ T39] audit: type=1400 audit(1734769134.569:6504): avc: denied { create } for pid=7673 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.052813][ T39] audit: type=1400 audit(1734769134.569:6505): avc: denied { write } for pid=7673 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.064914][ T39] audit: type=1400 audit(1734769134.569:6506): avc: denied { read } for pid=7673 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.070204][ T39] audit: type=1400 audit(1734769134.569:6507): avc: denied { write } for pid=7673 comm="syz.3.457" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 79.177107][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 79.325293][ T9] usb 5-1: device descriptor read/64, error -71 [ 79.429904][ T7685] netlink: 'syz.1.459': attribute type 9 has an invalid length. [ 79.435457][ T9] usb usb5-port1: attempt power cycle [ 79.499994][ T7687] hsr0: entered promiscuous mode [ 79.501596][ T7687] macsec2: entered promiscuous mode [ 79.503020][ T7687] macsec2: entered allmulticast mode [ 79.504412][ T7687] hsr0: entered allmulticast mode [ 79.516775][ T7687] hsr_slave_0: entered allmulticast mode [ 79.518263][ T7687] hsr_slave_1: entered allmulticast mode [ 79.522377][ T7687] hsr0: left allmulticast mode [ 79.523674][ T7687] hsr_slave_0: left allmulticast mode [ 79.525088][ T7687] hsr_slave_1: left allmulticast mode [ 79.745643][ T7694] netlink: 536 bytes leftover after parsing attributes in process `syz.4.461'. [ 79.747320][ T7675] Set syz1 is full, maxelem 65536 reached [ 79.747989][ T7694] netlink: 32 bytes leftover after parsing attributes in process `syz.4.461'. [ 79.775265][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 79.797595][ T9] usb 5-1: device descriptor read/8, error -71 [ 79.886831][ T7696] IPVS: You probably need to specify IP address on multicast interface. [ 79.889185][ T7696] IPVS: Error connecting to the multicast addr [ 80.035281][ T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 80.059364][ T9] usb 5-1: device descriptor read/8, error -71 [ 80.150351][ T7706] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 80.166598][ T9] usb usb5-port1: unable to enumerate USB device [ 80.213513][ T7706] IPVS: set_ctl: invalid protocol: 44 224.0.0.1:20003 [ 80.311425][ T7714] netlink: 28 bytes leftover after parsing attributes in process `syz.4.468'. [ 80.695244][ T835] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 80.825238][ T835] usb 9-1: device descriptor read/64, error -71 [ 81.065309][ T835] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 81.215358][ T835] usb 9-1: device descriptor read/64, error -71 [ 81.244428][ T7742] Debayer A: ================= START STATUS ================= [ 81.246877][ T7742] Debayer A: Debayer Mean Window Size: 3 [ 81.248559][ T7742] Debayer A: ================== END STATUS ================== [ 81.335360][ T835] usb usb9-port1: attempt power cycle [ 81.650572][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 81.652934][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 81.656964][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 81.659314][ T7756] netlink: 28 bytes leftover after parsing attributes in process `syz.1.479'. [ 81.675288][ T835] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 81.700145][ T835] usb 9-1: device descriptor read/8, error -71 [ 81.794706][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.797863][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.799839][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.801760][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.803735][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.822078][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.824048][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.829637][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.831580][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.833506][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.836806][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.838741][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.840939][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.843275][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.852325][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.854303][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.857644][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.859586][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.861478][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.863409][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.865381][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.867951][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.870844][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.873277][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.875880][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.877777][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.879714][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.881604][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.883540][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.885624][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.887519][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.889416][ T25] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 81.900011][ T25] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 81.955327][ T835] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 81.987001][ T835] usb 9-1: device descriptor read/8, error -71 [ 82.075585][ T1491] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 82.106216][ T835] usb usb9-port1: unable to enumerate USB device [ 82.175663][ T7770] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 82.179693][ T7770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.483'. [ 82.182149][ T7770] netlink: 'syz.0.483': attribute type 13 has an invalid length. [ 82.184203][ T7770] netlink: 'syz.0.483': attribute type 11 has an invalid length. [ 82.205307][ T1491] usb 6-1: device descriptor read/64, error -71 [ 82.455274][ T1491] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 82.585272][ T1491] usb 6-1: device descriptor read/64, error -71 [ 82.707181][ T1491] usb usb6-port1: attempt power cycle [ 83.055528][ T1491] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 83.079533][ T1491] usb 6-1: device descriptor read/8, error -71 [ 83.315334][ T1491] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 83.338094][ T1491] usb 6-1: device descriptor read/8, error -71 [ 83.355290][ T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 83.455541][ T1491] usb usb6-port1: unable to enumerate USB device [ 83.513088][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 83.516927][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 83.519893][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 83.522817][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.528253][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.530656][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.538167][ T9] usb 5-1: config 0 descriptor?? [ 83.545724][ T7787] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 83.548902][ T7789] netlink: 'syz.4.486': attribute type 21 has an invalid length. [ 83.551682][ T7790] netlink: 'syz.4.486': attribute type 21 has an invalid length. [ 83.780255][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 83.782913][ T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 83.799741][ T9] usb 5-1: USB disconnect, device number 10 [ 83.964314][ T39] kauditd_printk_skb: 1396 callbacks suppressed [ 83.964330][ T39] audit: type=1400 audit(1734769139.579:7904): avc: denied { map_create } for pid=7802 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.973313][ T39] audit: type=1400 audit(1734769139.579:7905): avc: denied { prog_load } for pid=7802 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 83.998115][ T39] audit: type=1400 audit(1734769139.579:7906): avc: denied { bpf } for pid=7802 comm="syz.0.489" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 84.003195][ T39] audit: type=1400 audit(1734769139.579:7907): avc: denied { map_create } for pid=7799 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.015390][ T39] audit: type=1400 audit(1734769139.579:7908): avc: denied { map_create } for pid=7802 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.019942][ T39] audit: type=1400 audit(1734769139.579:7909): avc: denied { map_create } for pid=7802 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.024485][ T39] audit: type=1400 audit(1734769139.579:7910): avc: denied { map_create } for pid=7799 comm="syz.4.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.035974][ T39] audit: type=1400 audit(1734769139.589:7911): avc: denied { map_create } for pid=7802 comm="syz.0.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 84.040420][ T39] audit: type=1400 audit(1734769139.619:7912): avc: denied { read write } for pid=6415 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.056401][ T39] audit: type=1400 audit(1734769139.619:7913): avc: denied { read write open } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 84.177631][ T7814] netlink: 28 bytes leftover after parsing attributes in process `syz.4.492'. [ 84.624109][ T7826] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 84.650499][ T7828] hpfs: hpfs_map_sector(): read error [ 85.165585][ T6718] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 85.295347][ T6718] usb 9-1: device descriptor read/64, error -71 [ 85.555628][ T6718] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 85.695292][ T6718] usb 9-1: device descriptor read/64, error -71 [ 85.807701][ T6718] usb usb9-port1: attempt power cycle [ 85.963682][ T7862] netlink: 'syz.0.504': attribute type 9 has an invalid length. [ 86.009218][ T7870] __nla_validate_parse: 1 callbacks suppressed [ 86.009228][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz.3.506'. [ 86.155536][ T6718] usb 9-1: new full-speed USB device number 12 using dummy_hcd [ 86.177560][ T6718] usb 9-1: device descriptor read/8, error -71 [ 86.415265][ T6718] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 86.447629][ T6718] usb 9-1: device descriptor read/8, error -71 [ 86.570133][ T6718] usb usb9-port1: unable to enumerate USB device [ 87.287598][ T7914] netlink: 512 bytes leftover after parsing attributes in process `syz.1.516'. [ 87.357370][ T7919] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 87.364202][ T7919] CIFS mount error: No usable UNC path provided in device string! [ 87.364202][ T7919] [ 87.373358][ T7919] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 87.506246][ T7926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7926 comm=syz.1.519 [ 87.653281][ T7931] netlink: 'syz.3.521': attribute type 9 has an invalid length. [ 87.892821][ T7941] @: renamed from vlan0 (while UP) [ 87.954981][ T7941] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2048 sclass=netlink_route_socket pid=7941 comm=syz.0.524 [ 87.962495][ T7941] netlink: 'syz.0.524': attribute type 1 has an invalid length. [ 87.989225][ T7948] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 88.023342][ T7941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 88.030899][ T7941] bond1: (slave bond2): making interface the new active one [ 88.033151][ T7941] bond1: (slave bond2): Enslaving as an active interface with an up link [ 88.208820][ T7958] syz.0.528 (7958) used greatest stack depth: 20432 bytes left [ 88.227059][ T7953] kvm: emulating exchange as write [ 88.467739][ T7968] tmpfs: Bad value for 'mpol' [ 88.848775][ T7987] netlink: 40 bytes leftover after parsing attributes in process `syz.4.535'. [ 88.966986][ T39] kauditd_printk_skb: 824 callbacks suppressed [ 88.966997][ T39] audit: type=1400 audit(1734769144.589:8738): avc: denied { prog_load } for pid=7990 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 88.973471][ T39] audit: type=1400 audit(1734769144.589:8739): avc: denied { bpf } for pid=7990 comm="syz.1.537" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.981972][ T39] audit: type=1400 audit(1734769144.589:8740): avc: denied { perfmon } for pid=7990 comm="syz.1.537" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 88.995456][ T39] audit: type=1400 audit(1734769144.589:8741): avc: denied { perfmon } for pid=7990 comm="syz.1.537" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.000704][ T39] audit: type=1400 audit(1734769144.589:8742): avc: denied { perfmon } for pid=7990 comm="syz.1.537" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.018095][ T39] audit: type=1400 audit(1734769144.589:8743): avc: denied { perfmon } for pid=7990 comm="syz.1.537" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.047103][ T39] audit: type=1400 audit(1734769144.589:8744): avc: denied { bpf } for pid=7990 comm="syz.1.537" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.052571][ T39] audit: type=1400 audit(1734769144.589:8745): avc: denied { bpf } for pid=7990 comm="syz.1.537" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.075273][ T39] audit: type=1400 audit(1734769144.589:8746): avc: denied { bpf } for pid=7990 comm="syz.1.537" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 89.080564][ T39] audit: type=1400 audit(1734769144.599:8747): avc: denied { prog_run } for pid=7990 comm="syz.1.537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 89.314841][ T7998] netlink: 'syz.1.539': attribute type 9 has an invalid length. [ 89.715289][ T64] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 89.855324][ T64] usb 9-1: device descriptor read/64, error -71 [ 90.108657][ T64] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 90.245262][ T64] usb 9-1: device descriptor read/64, error -71 [ 90.365405][ T64] usb usb9-port1: attempt power cycle [ 90.388824][ T8022] netlink: 256 bytes leftover after parsing attributes in process `syz.0.546'. [ 90.391225][ T8022] unsupported nlmsg_type 40 [ 90.457298][ T8024] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8024 comm=syz.0.547 [ 90.474364][ T8024] netlink: 'syz.0.547': attribute type 1 has an invalid length. [ 90.496588][ T8024] bond3: entered promiscuous mode [ 90.498612][ T8024] 8021q: adding VLAN 0 to HW filter on device bond3 [ 90.528628][ T8024] netlink: 3 bytes leftover after parsing attributes in process `syz.0.547'. [ 90.537173][ T8024] batadv1: entered promiscuous mode [ 90.538990][ T8024] batadv1: entered allmulticast mode [ 90.542435][ T8024] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 90.549309][ T8024] bond3: (slave batadv1): making interface the new active one [ 90.551970][ T8024] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 90.667405][ T8029] batadv0: entered promiscuous mode [ 90.669690][ T8029] team0: entered promiscuous mode [ 90.671059][ T8029] team_slave_0: entered promiscuous mode [ 90.672941][ T8029] team_slave_1: entered promiscuous mode [ 90.678735][ T8029] hsr1: entered promiscuous mode [ 90.680096][ T8029] hsr1: entered allmulticast mode [ 90.681450][ T8029] batadv0: entered allmulticast mode [ 90.682981][ T8029] team0: entered allmulticast mode [ 90.684344][ T8029] team_slave_0: entered allmulticast mode [ 90.685879][ T8029] team_slave_1: entered allmulticast mode [ 90.763773][ T64] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 90.813080][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.549'. [ 90.844213][ T64] usb 9-1: device descriptor read/8, error -71 [ 91.095267][ T64] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 91.126866][ T64] usb 9-1: device descriptor read/8, error -71 [ 91.235429][ T64] usb usb9-port1: unable to enumerate USB device [ 92.304122][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 92.308753][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.554'. [ 92.557106][ T8060] ipt_ECN: cannot use operation on non-tcp rule [ 92.967092][ T8074] fuse: Bad value for 'user_id' [ 92.968497][ T8074] fuse: Bad value for 'user_id' [ 93.415536][ T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 93.435633][ T6718] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 93.595272][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 93.602396][ T9] usb 5-1: config index 0 descriptor too short (expected 28277, got 45) [ 93.604634][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.607399][ T9] usb 5-1: config 0 has no interfaces? [ 93.608859][ T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 93.611291][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.619344][ T9] usb 5-1: config 0 descriptor?? [ 93.640568][ T6718] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 93.648961][ T6718] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 93.669724][ T6718] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 93.672170][ T6718] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.674257][ T6718] usb 9-1: Product: Ф [ 93.675548][ T6718] usb 9-1: Manufacturer: 裣â’촨蔖ⱎ㒼㣣䞰酢ᖱí°ìŒìŸ­é·žì—䤰ౌ֑깰鋻ㅸ榇픻ꉉ鰡꣪䰳腛â´ë¢¯ê¨§è’å€ìžŽå¸¶ä£«î²”蟱ᾫ耧é¨éƒä°¨ážªæ✋Ꚗߌ㠛ဖ«镈æ£íƒ‚טíœá¾³ê¡šâ“»æ°³íŒ”砱ᇘ᳨ꉋ㫵딯퀧鷈矵 [ 93.681610][ T6718] usb 9-1: SerialNumber: ෮㩡Թ⾼魲矮뭠駳᫣嬭땼濫ç¥í†‘ç¨í‚„邋ᅧ䦸è©îˆ‹á™ã˜«è­«î‡´è‰‚∓竊껗ê·à§Œã˜¸á³·å¡µà ¶é¡Ÿì¢·áª¿î§µë…¸ï˜ êƒ™âª¤ÒŽì†­ï³–䪑ã¤à®…䇚å†ìœéª©íŸ¥æ‰§ê’♙拊ǭ롲ã‹î‚Š [ 93.924212][ T6174] usb 5-1: USB disconnect, device number 11 [ 93.979167][ T39] kauditd_printk_skb: 563 callbacks suppressed [ 93.979179][ T39] audit: type=1400 audit(1734769149.599:9311): avc: denied { create } for pid=8084 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.995463][ T39] audit: type=1400 audit(1734769149.599:9312): avc: denied { write } for pid=8084 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.002417][ T39] audit: type=1400 audit(1734769149.599:9313): avc: denied { read } for pid=8084 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.010052][ T39] audit: type=1400 audit(1734769149.599:9314): avc: denied { read } for pid=8084 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.015837][ T39] audit: type=1400 audit(1734769149.609:9315): avc: denied { create } for pid=8084 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.021162][ T39] audit: type=1400 audit(1734769149.609:9316): avc: denied { write } for pid=8084 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.026516][ T39] audit: type=1400 audit(1734769149.609:9317): avc: denied { read } for pid=8084 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.031775][ T39] audit: type=1400 audit(1734769149.619:9318): avc: denied { read } for pid=8084 comm="syz.4.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 94.041343][ T6718] usb 9-1: 0:2 : does not exist [ 94.051806][ T39] audit: type=1400 audit(1734769149.669:9319): avc: denied { read write } for pid=8102 comm="syz.1.567" name="uinput" dev="devtmpfs" ino=943 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 94.055070][ T8103] input input13: cannot allocate more than FF_MAX_EFFECTS effects [ 94.062812][ T6718] usb 9-1: USB disconnect, device number 18 [ 94.065287][ T39] audit: type=1400 audit(1734769149.669:9320): avc: denied { mounton } for pid=8099 comm="syz.3.566" path="/139/file0" dev="tmpfs" ino=770 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 94.656747][ T8122] netlink: 8 bytes leftover after parsing attributes in process `syz.3.573'. [ 94.659897][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.3.573'. [ 95.277875][ T8156] 9pnet_fd: p9_fd_create_tcp (8156): problem binding to privport [ 95.306069][ T8157] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8157 comm=syz.1.580 [ 95.404433][ T8161] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8161 comm=syz.1.580 [ 95.561970][ T8042] udevd[8042]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 95.638393][ T8170] netlink: 232 bytes leftover after parsing attributes in process `syz.4.586'. [ 95.706610][ T8171] loop2: detected capacity change from 0 to 7 [ 95.710278][ T8171] Dev loop2: unable to read RDB block 7 [ 95.711889][ T8171] loop2: AHDI p2 p3 [ 95.712957][ T8171] loop2: partition table partially beyond EOD, truncated [ 95.714921][ T8171] loop2: p2 start 33554432 is beyond EOD, truncated [ 95.747518][ T8173] netlink: 16 bytes leftover after parsing attributes in process `syz.4.587'. [ 96.966411][ T8218] loop2: detected capacity change from 0 to 7 [ 96.968531][ T8218] Dev loop2: unable to read RDB block 7 [ 96.970055][ T8218] loop2: AHDI p2 p3 [ 96.971179][ T8218] loop2: partition table partially beyond EOD, truncated [ 96.973921][ T8218] loop2: p2 start 33554432 is beyond EOD, truncated [ 97.889194][ T8248] binder: 8246:8248 unknown command 7823730 [ 97.890799][ T8248] binder: 8246:8248 ioctl c0306201 200003c0 returned -22 [ 97.903136][ T8249] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=48 sclass=netlink_audit_socket pid=8249 comm=syz.0.607 [ 97.910989][ T8249] pim6reg: entered allmulticast mode [ 98.092303][ T8240] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.426923][ T8263] netlink: 'syz.4.608': attribute type 9 has an invalid length. [ 98.668242][ T8280] delete_channel: no stack [ 98.759577][ T8285] loop2: detected capacity change from 0 to 7 [ 98.763363][ T8285] Dev loop2: unable to read RDB block 7 [ 98.765843][ T8285] loop2: AHDI p2 p3 [ 98.767766][ T8285] loop2: partition table partially beyond EOD, truncated [ 98.770761][ T8285] loop2: p2 start 33554432 is beyond EOD, truncated [ 99.066728][ T39] kauditd_printk_skb: 814 callbacks suppressed [ 99.066746][ T39] audit: type=1400 audit(1734769154.689:10135): avc: denied { ioctl } for pid=8286 comm="syz.0.616" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.114477][ T39] audit: type=1400 audit(1734769154.729:10136): avc: denied { read write } for pid=6415 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.125372][ T39] audit: type=1400 audit(1734769154.729:10137): avc: denied { read write open } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.131824][ T39] audit: type=1400 audit(1734769154.739:10138): avc: denied { ioctl } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 99.155492][ T39] audit: type=1400 audit(1734769154.769:10139): avc: denied { ioctl } for pid=8286 comm="syz.0.616" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.183610][ T39] audit: type=1400 audit(1734769154.799:10140): avc: denied { module_request } for pid=8286 comm="syz.0.616" kmod="crypto-cryptd(__ecb-serpent-avx)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 99.192517][ T39] audit: type=1400 audit(1734769154.809:10141): avc: denied { read write } for pid=8290 comm="syz.4.617" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 99.198568][ T39] audit: type=1400 audit(1734769154.809:10142): avc: denied { read write open } for pid=8290 comm="syz.4.617" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 99.206027][ T5946] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 99.208642][ T39] audit: type=1400 audit(1734769154.809:10143): avc: denied { ioctl } for pid=8290 comm="syz.4.617" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 99.235393][ T39] audit: type=1400 audit(1734769154.839:10144): avc: denied { ioctl } for pid=8286 comm="syz.0.616" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 99.287623][ T5940] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 99.290446][ T5940] Bluetooth: hci3: Injecting HCI hardware error event [ 99.293688][ T5940] Bluetooth: hci3: hardware error 0x00 [ 99.356306][ T5946] usb 5-1: device descriptor read/64, error -71 [ 99.595381][ T5946] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 99.735265][ T5946] usb 5-1: device descriptor read/64, error -71 [ 99.846740][ T5946] usb usb5-port1: attempt power cycle [ 100.195284][ T5946] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 100.216735][ T5946] usb 5-1: device descriptor read/8, error -71 [ 100.251788][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.253445][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.258267][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.260266][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.264116][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.266408][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.270196][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.272219][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.275052][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.276717][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.279275][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.280713][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.283381][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.285315][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.288533][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.289980][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.292620][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.294055][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.297097][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.299033][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.304419][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.306445][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.310222][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.312210][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.321495][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.322968][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.328989][ T8321] binder: BINDER_SET_CONTEXT_MGR already set [ 100.330451][ T8321] binder: 8320:8321 ioctl 4018620d 20000100 returned -16 [ 100.455423][ T5946] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 100.485350][ T5946] usb 5-1: device descriptor read/8, error -71 [ 100.597520][ T5946] usb usb5-port1: unable to enumerate USB device [ 100.612157][ T8331] 9pnet_virtio: no channels available for device syz [ 100.876710][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.632'. [ 100.894936][ T8340] netlink: 100 bytes leftover after parsing attributes in process `syz.1.632'. [ 100.907867][ T8340] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.245081][ T8357] xt_ipcomp: unknown flags 12 [ 101.377211][ T5940] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 101.944909][ T8375] loop6: detected capacity change from 0 to 524287999 [ 101.955602][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.959628][ C1] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.965113][ T6486] loop: Write error at byte offset 1, length 4096. [ 101.969798][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 101.972389][ C1] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 101.977187][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.980711][ C0] I/O error, dev loop6, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 101.984070][ T99] loop: Write error at byte offset 1, length 4096. [ 101.986014][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 101.988550][ C0] Buffer I/O error on dev loop6, logical block 0, lost async page write [ 102.120743][ T8378] loop2: detected capacity change from 0 to 7 [ 102.123556][ T8378] Dev loop2: unable to read RDB block 7 [ 102.125034][ T8378] loop2: AHDI p2 p3 [ 102.126138][ T8378] loop2: partition table partially beyond EOD, truncated [ 102.130420][ T8378] loop2: p2 start 33554432 is beyond EOD, truncated [ 102.308824][ T8383] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8383 comm=syz.0.644 [ 103.035461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.152811][ T8407] netlink: 32 bytes leftover after parsing attributes in process `syz.4.652'. [ 103.649158][ T8423] netlink: 'syz.0.655': attribute type 10 has an invalid length. [ 103.651533][ T8423] netlink: 40 bytes leftover after parsing attributes in process `syz.0.655'. [ 103.654636][ T8423] ipvlan1: entered promiscuous mode [ 103.656112][ T8423] ipvlan1: entered allmulticast mode [ 103.657520][ T8423] veth0_vlan: entered allmulticast mode [ 103.660844][ T8423] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 103.681168][ T8425] binder: 8424:8425 ioctl c040aed4 20000340 returned -22 [ 103.722354][ T8427] xt_hashlimit: size too large, truncated to 1048576 [ 103.831171][ T8431] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 103.848305][ T8433] loop2: detected capacity change from 0 to 7 [ 103.854685][ T8433] Dev loop2: unable to read RDB block 7 [ 103.859881][ T8433] loop2: AHDI p2 p3 [ 103.864245][ T8433] loop2: partition table partially beyond EOD, truncated [ 103.866443][ T8433] loop2: p2 start 33554432 is beyond EOD, truncated [ 104.092902][ T39] kauditd_printk_skb: 1328 callbacks suppressed [ 104.092912][ T39] audit: type=1400 audit(1734769159.709:11473): avc: denied { read } for pid=8435 comm="syz.3.661" dev="nsfs" ino=4026533051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.100190][ T39] audit: type=1400 audit(1734769159.709:11474): avc: denied { read open } for pid=8435 comm="syz.3.661" path="net:[4026533051]" dev="nsfs" ino=4026533051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 104.106449][ T39] audit: type=1400 audit(1734769159.709:11475): avc: denied { create } for pid=8435 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.108793][ T8441] netlink: 'syz.3.661': attribute type 11 has an invalid length. [ 104.111576][ T39] audit: type=1400 audit(1734769159.719:11476): avc: denied { create } for pid=8435 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.113546][ T8441] netlink: 216 bytes leftover after parsing attributes in process `syz.3.661'. [ 104.118346][ T39] audit: type=1400 audit(1734769159.729:11477): avc: denied { write } for pid=8435 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 104.125375][ T39] audit: type=1400 audit(1734769159.729:11478): avc: denied { write } for pid=8435 comm="syz.3.661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.140867][ T39] audit: type=1400 audit(1734769159.759:11479): avc: denied { read } for pid=8443 comm="syz.0.663" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.146716][ T39] audit: type=1400 audit(1734769159.759:11480): avc: denied { read } for pid=8443 comm="syz.0.663" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.152820][ T39] audit: type=1400 audit(1734769159.759:11481): avc: denied { read open } for pid=8443 comm="syz.0.663" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.158847][ T39] audit: type=1400 audit(1734769159.759:11482): avc: denied { read open } for pid=8443 comm="syz.0.663" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 104.472998][ T8435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.803056][ T8467] syzkaller0: entered promiscuous mode [ 104.804537][ T8467] syzkaller0: entered allmulticast mode [ 105.255707][ T8475] netlink: 1272 bytes leftover after parsing attributes in process `syz.1.673'. [ 105.258085][ T8475] openvswitch: netlink: Flow actions attr not present in new flow. [ 105.487024][ T8477] btrfs: Unknown parameter 'discardÍWó›ú·m l·å‚àL‹Ý[·/¸\“ô_TÁ•Œix?tðaák¥É áŠ' [ 106.196643][ T8493] Invalid source name [ 106.215431][ T8489] xt_socket: unknown flags 0x8 [ 106.368128][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 106.370427][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz.4.679'. [ 106.375670][ T8500] xt_l2tp: v2 doesn't support IP mode [ 106.413208][ C2] ata1: illegal qc_active transition (00000000->00180000) [ 106.582816][ T8511] autofs: Unknown parameter 'o' [ 106.638485][ T8513] netlink: 112 bytes leftover after parsing attributes in process `syz.0.684'. [ 106.738776][ T1109] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 106.742951][ T1109] ata1.00: configured for UDMA/100 [ 106.836800][ T25] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 106.985325][ T25] usb 9-1: Using ep0 maxpacket: 16 [ 106.992860][ T8533] netlink: 'syz.0.690': attribute type 10 has an invalid length. [ 106.993830][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.997999][ T25] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 107.001346][ T25] usb 9-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 107.004359][ T25] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.024511][ T25] usb 9-1: config 0 descriptor?? [ 107.034936][ T8533] netlink: 76 bytes leftover after parsing attributes in process `syz.0.690'. [ 107.259128][ T8510] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8510 comm=syz.4.683 [ 107.264155][ T25] usbhid 9-1:0.0: can't add hid device: -71 [ 107.265823][ T25] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 107.269981][ T25] usb 9-1: USB disconnect, device number 19 [ 107.291787][ T8540] fuse: Bad value for 'group_id' [ 107.293478][ T8540] fuse: Bad value for 'group_id' [ 107.815697][ T6174] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 108.021302][ T6174] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 108.023716][ T6174] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.026026][ T6174] usb 6-1: Product: syz [ 108.027123][ T6174] usb 6-1: Manufacturer: syz [ 108.028340][ T6174] usb 6-1: SerialNumber: syz [ 108.065613][ T8566] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2878) [ 108.066944][ T6174] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 108.068685][ T8566] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 108.209964][ T6174] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 108.278992][ T8570] netlink: 'syz.3.699': attribute type 9 has an invalid length. [ 108.352410][ T8576] loop2: detected capacity change from 0 to 7 [ 108.354418][ T8576] Dev loop2: unable to read RDB block 7 [ 108.356371][ T8576] loop2: AHDI p2 p3 [ 108.357851][ T8576] loop2: partition table partially beyond EOD, truncated [ 108.365260][ T8576] loop2: p2 start 33554432 is beyond EOD, truncated [ 108.781716][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.787920][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.809850][ T8595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 108.812166][ T8595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 108.937453][ T8600] netlink: 'syz.0.710': attribute type 10 has an invalid length. [ 109.003934][ T8600] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 109.133997][ T39] kauditd_printk_skb: 1268 callbacks suppressed [ 109.134007][ T39] audit: type=1400 audit(1734769164.749:12751): avc: denied { module_request } for pid=8596 comm="syz.0.710" kmod="crypto-cbcmac(camellia-generic)-all" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 109.142439][ T39] audit: type=1400 audit(1734769164.759:12752): avc: denied { read write } for pid=6415 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.159068][ T39] audit: type=1400 audit(1734769164.759:12753): avc: denied { read write open } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.176111][ T39] audit: type=1400 audit(1734769164.759:12754): avc: denied { ioctl } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.205228][ T39] audit: type=1400 audit(1734769164.779:12755): avc: denied { read write } for pid=5945 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.221974][ T39] audit: type=1400 audit(1734769164.789:12756): avc: denied { read write open } for pid=5945 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.234202][ T39] audit: type=1400 audit(1734769164.789:12757): avc: denied { ioctl } for pid=5945 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 109.291713][ T39] audit: type=1400 audit(1734769164.909:12758): avc: denied { create } for pid=8615 comm="syz.3.714" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.298140][ T6174] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 109.300234][ T6174] ath9k_htc: Failed to initialize the device [ 109.310678][ T39] audit: type=1400 audit(1734769164.909:12759): avc: denied { map } for pid=8615 comm="syz.3.714" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.331552][ T39] audit: type=1400 audit(1734769164.909:12760): avc: denied { read write } for pid=8615 comm="syz.3.714" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=25279 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 109.341000][ T6174] usb 6-1: ath9k_htc: USB layer deinitialized [ 109.572816][ T5946] usb 6-1: USB disconnect, device number 12 [ 110.197852][ T8655] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 110.200148][ T8655] overlayfs: missing 'lowerdir' [ 110.384106][ T8664] loop6: detected capacity change from 0 to 524287999 [ 110.410729][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 30 prio class 0 [ 110.417117][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.419542][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.423635][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 110.426073][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 110.507473][ T8673] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 110.569096][ T8675] netlink: 'syz.4.730': attribute type 1 has an invalid length. [ 110.889484][ T8677] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.270849][ T8714] program syz.0.743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.287269][ T8717] program syz.0.743 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 111.435445][ T57] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 111.613023][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 111.618907][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 111.621494][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 111.625378][ T57] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 111.627947][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.633602][ T57] usb 6-1: config 0 descriptor?? [ 111.730986][ T8742] netlink: 'syz.3.749': attribute type 32 has an invalid length. [ 111.737932][ T8742] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=60696 sclass=netlink_route_socket pid=8742 comm=syz.3.749 [ 112.033327][ T8761] (unnamed net_device) (uninitialized): (slave lo): Device is not bonding slave [ 112.035886][ T8761] (unnamed net_device) (uninitialized): option active_slave: invalid value (lo) [ 112.070269][ T57] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 112.083505][ T57] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 112.098733][ T57] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 112.197788][ T8764] syz.0.752: attempt to access beyond end of device [ 112.197788][ T8764] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 112.201441][ T8764] efs: cannot read volume header [ 112.378228][ T8770] netlink: 8 bytes leftover after parsing attributes in process `syz.4.755'. [ 112.436219][ T57] usb 6-1: USB disconnect, device number 13 [ 112.615104][ T8781] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 112.810989][ T8785] netlink: 40 bytes leftover after parsing attributes in process `syz.4.758'. [ 112.817555][ T8785] netlink: 'syz.4.758': attribute type 2 has an invalid length. [ 112.819603][ T8785] netlink: 'syz.4.758': attribute type 1 has an invalid length. [ 112.821598][ T8785] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 113.017240][ T8796] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 113.019063][ T8796] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 113.039669][ T8796] vhci_hcd vhci_hcd.0: Device attached [ 113.060017][ T8797] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 113.077995][ T7907] vhci_hcd: stop threads [ 113.079133][ T7907] vhci_hcd: release socket [ 113.080306][ T7907] vhci_hcd: disconnect device [ 113.175386][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.101253][ T8832] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=8832 comm=syz.4.771 [ 114.142656][ T39] kauditd_printk_skb: 927 callbacks suppressed [ 114.142666][ T39] audit: type=1400 audit(1734769169.759:13688): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.153056][ T39] audit: type=1400 audit(1734769169.759:13689): avc: denied { read write } for pid=6415 comm="syz-executor" name="loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.161840][ T39] audit: type=1400 audit(1734769169.759:13690): avc: denied { read write open } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.170299][ T39] audit: type=1400 audit(1734769169.769:13691): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.185256][ T39] audit: type=1400 audit(1734769169.769:13692): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.191879][ T39] audit: type=1400 audit(1734769169.769:13693): avc: denied { ioctl } for pid=6415 comm="syz-executor" path="/dev/loop4" dev="devtmpfs" ino=662 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.198797][ T39] audit: type=1400 audit(1734769169.769:13694): avc: denied { read write } for pid=5938 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.205057][ T39] audit: type=1400 audit(1734769169.769:13695): avc: denied { read write open } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.211589][ T39] audit: type=1400 audit(1734769169.769:13696): avc: denied { ioctl } for pid=5938 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.218281][ T39] audit: type=1400 audit(1734769169.819:13697): avc: denied { read } for pid=8836 comm="syz.0.772" name="nbd0" dev="devtmpfs" ino=690 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 114.286643][ T8837] netlink: 36 bytes leftover after parsing attributes in process `syz.0.772'. [ 114.363856][ T8848] block nbd0: NBD_DISCONNECT [ 114.373809][ T8848] block nbd0: Send disconnect failed -89 [ 114.416048][ T8848] nbd0: detected capacity change from 0 to 67108884 [ 114.424738][ T8042] block nbd0: Send control failed (result -89) [ 114.435551][ T8042] block nbd0: Request send failed, requeueing [ 114.437440][ T8042] block nbd0: Disconnected due to user request. [ 114.442307][ T36] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.445531][ T36] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.447678][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.450102][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.452234][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.454428][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.456452][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.458669][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.460621][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.462858][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.464826][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.467427][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.469392][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 114.471656][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.473662][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 114.475666][ T8042] ldm_validate_partition_table(): Disk read failed. [ 114.477623][ T8042] Dev nbd0: unable to read RDB block 0 [ 114.479788][ T8042] nbd0: unable to read partition table [ 114.495507][ T8042] ldm_validate_partition_table(): Disk read failed. [ 114.497397][ T8042] Dev nbd0: unable to read RDB block 0 [ 114.499024][ T8042] nbd0: unable to read partition table [ 115.174801][ T8878] MTD: Attempt to mount non-MTD device "/dev/nbd4" [ 115.184083][ T8878] cramfs: wrong magic [ 115.626240][ T8895] cgroup: Invalid name [ 115.654266][ T8897] openvswitch: netlink: Message has 1219 unknown bytes. [ 115.656974][ T8897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 116.068458][ T8918] netlink: 'syz.1.792': attribute type 3 has an invalid length. [ 116.068959][ T8919] netlink: 'syz.1.792': attribute type 3 has an invalid length. [ 116.070428][ T8918] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.792'. [ 116.072272][ T8919] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.792'. [ 116.365745][ T8928] netlink: 8 bytes leftover after parsing attributes in process `syz.0.793'. [ 116.373411][ T8928] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 116.820207][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 116.825791][ T8938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.799'. [ 116.828114][ T8938] netlink: 4 bytes leftover after parsing attributes in process `syz.3.799'. [ 117.465287][ T64] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 117.625255][ T64] usb 5-1: Using ep0 maxpacket: 8 [ 117.637699][ T64] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 117.639856][ T64] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 117.642030][ T64] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 117.644855][ T64] usb 5-1: config 250 has no interface number 0 [ 117.652612][ T64] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 117.658310][ T64] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 117.661002][ T64] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 117.663642][ T64] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 117.675235][ T64] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 117.678762][ T64] usb 5-1: config 250 interface 228 has no altsetting 0 [ 117.689099][ T64] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 117.691450][ T64] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 117.693702][ T64] usb 5-1: Product: syz [ 117.694856][ T64] usb 5-1: SerialNumber: syz [ 117.711538][ T64] hub 5-1:250.228: bad descriptor, ignoring hub [ 117.713227][ T64] hub 5-1:250.228: probe with driver hub failed with error -5 [ 117.868802][ T8974] netlink: 36 bytes leftover after parsing attributes in process `syz.4.807'. [ 117.923773][ T64] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 16 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 117.927871][ T8943] 9pnet_fd: p9_fd_create_tcp (8943): problem connecting socket to 127.0.0.1 [ 117.966687][ T64] usb 5-1: USB disconnect, device number 16 [ 117.974579][ T64] usblp0: removed [ 117.997196][ T7159] udevd[7159]: setting mode of /dev/bus/usb/005/016 to 020664 failed: No such file or directory [ 118.006994][ T7159] udevd[7159]: setting owner of /dev/bus/usb/005/016 to uid=0, gid=0 failed: No such file or directory [ 118.086563][ T5296] Bluetooth: hci1: command 0x0405 tx timeout [ 118.247873][ T8988] FAULT_INJECTION: forcing a failure. [ 118.247873][ T8988] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 118.253642][ T8988] CPU: 1 UID: 0 PID: 8988 Comm: syz.1.810 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 118.256416][ T8988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.259196][ T8988] Call Trace: [ 118.260070][ T8988] [ 118.260847][ T8988] dump_stack_lvl+0x16c/0x1f0 [ 118.262156][ T8988] should_fail_ex+0x497/0x5b0 [ 118.263414][ T8988] _copy_from_user+0x2e/0xd0 [ 118.264628][ T8988] copy_msghdr_from_user+0x99/0x160 [ 118.265985][ T8988] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 118.267513][ T8988] ___sys_sendmsg+0xff/0x1e0 [ 118.268749][ T8988] ? __pfx____sys_sendmsg+0x10/0x10 [ 118.270101][ T8988] ? __pfx_lock_release+0x10/0x10 [ 118.271582][ T8988] ? trace_lock_acquire+0x14e/0x1f0 [ 118.272946][ T8988] ? __fget_files+0x206/0x3a0 [ 118.274190][ T8988] __sys_sendmsg+0x16e/0x220 [ 118.275430][ T8988] ? __pfx___sys_sendmsg+0x10/0x10 [ 118.277127][ T8988] do_syscall_64+0xcd/0x250 [ 118.278455][ T8988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.280017][ T8988] RIP: 0033:0x7fca66785d29 [ 118.281180][ T8988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.286162][ T8988] RSP: 002b:00007fca67661038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.288327][ T8988] RAX: ffffffffffffffda RBX: 00007fca66976080 RCX: 00007fca66785d29 [ 118.290372][ T8988] RDX: 0000000004000020 RSI: 0000000020000480 RDI: 0000000000000004 [ 118.292434][ T8988] RBP: 00007fca67661090 R08: 0000000000000000 R09: 0000000000000000 [ 118.294518][ T8988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 118.296580][ T8988] R13: 0000000000000001 R14: 00007fca66976080 R15: 00007ffd5dc21a78 [ 118.298622][ T8988] [ 118.661801][ T9006] netlink: 'syz.4.813': attribute type 12 has an invalid length. [ 118.663901][ T9004] netlink: 'syz.4.813': attribute type 12 has an invalid length. [ 118.883695][ T9014] dvmrp8: entered allmulticast mode [ 119.030690][ T9011] dvmrp8: left allmulticast mode [ 119.043495][ T9020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.816'. [ 119.068396][ T9021] netlink: 8 bytes leftover after parsing attributes in process `syz.4.817'. [ 119.076912][ T9021] netlink: 'syz.4.817': attribute type 2 has an invalid length. [ 119.078928][ T9021] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 119.181017][ T39] kauditd_printk_skb: 1465 callbacks suppressed [ 119.181027][ T39] audit: type=1400 audit(1734769174.799:15163): avc: denied { read write } for pid=9026 comm="syz.1.818" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.190860][ T39] audit: type=1400 audit(1734769174.809:15164): avc: denied { read open } for pid=9026 comm="syz.1.818" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 119.196706][ T39] audit: type=1400 audit(1734769174.809:15165): avc: denied { create } for pid=9026 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.201762][ T39] audit: type=1400 audit(1734769174.809:15166): avc: denied { write } for pid=9026 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.207564][ T39] audit: type=1400 audit(1734769174.809:15167): avc: denied { read } for pid=9026 comm="syz.1.818" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.213033][ T39] audit: type=1400 audit(1734769174.809:15168): avc: denied { read open } for pid=9026 comm="syz.1.818" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.219178][ T39] audit: type=1400 audit(1734769174.819:15169): avc: denied { create } for pid=9026 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.224455][ T39] audit: type=1400 audit(1734769174.819:15170): avc: denied { read } for pid=9026 comm="syz.1.818" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.229867][ T39] audit: type=1400 audit(1734769174.819:15171): avc: denied { read open } for pid=9026 comm="syz.1.818" path="net:[4026532886]" dev="nsfs" ino=4026532886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 119.236021][ T39] audit: type=1400 audit(1734769174.819:15172): avc: denied { create } for pid=9026 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 119.280087][ T9028] x_tables: unsorted entry at hook 2 [ 120.048816][ T9056] netlink: 'syz.3.824': attribute type 2 has an invalid length. [ 120.056915][ T9056] netlink: 784 bytes leftover after parsing attributes in process `syz.3.824'. [ 120.233961][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.1.827'. [ 120.786550][ T9082] netlink: 4 bytes leftover after parsing attributes in process `syz.3.831'. [ 121.054649][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.061485][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.063446][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.068470][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.070385][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.074228][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.080681][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.082697][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.084742][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.087984][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.092433][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.096908][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.099364][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.101317][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.103297][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.105308][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.107342][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.109305][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.111267][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.113229][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.115427][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.117364][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.121710][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.123641][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.128065][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.130027][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.131967][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.133851][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.137191][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.139100][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.146598][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.148677][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.150675][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.160040][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.161986][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.163973][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.167293][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.169174][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.177346][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.179207][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.181023][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.182880][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.184748][ T25] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0 [ 121.196951][ T25] hid-generic 0000:0000:0000.0005: hidraw1: HID v0.00 Device [syz0] on syz0 [ 121.330929][ T9087] xt_socket: unknown flags 0xc [ 121.335132][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.840'. [ 122.334110][ T9148] Bluetooth: (null): Too short H5 packet [ 122.347185][ T9147] xt_HMARK: spi-set and port-set can't be combined [ 122.363371][ T9151] ubi0: attaching mtd0 [ 122.365506][ T9151] ubi0: scanning is finished [ 122.366846][ T9151] ubi0: empty MTD device detected [ 122.374235][ T9147] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.505898][ T9151] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 122.507884][ T9151] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 122.509669][ T9151] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 122.511475][ T9151] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 122.515352][ T9151] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 122.517209][ T9151] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 122.519193][ T9151] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 964906185 [ 122.521622][ T9151] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 122.531957][ T9158] ubi0: background thread "ubi_bgt0d" started, PID 9158 [ 122.705037][ T9160] netlink: 'syz.3.852': attribute type 9 has an invalid length. [ 123.565049][ T9193] usb usb9: usbfs: process 9193 (syz.3.859) did not claim interface 0 before use [ 123.703910][ T9198] syzkaller0: entered promiscuous mode [ 123.705732][ T9198] syzkaller0: entered allmulticast mode [ 124.045237][ T5946] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 124.205235][ T5946] usb 6-1: Using ep0 maxpacket: 8 [ 124.208451][ T39] kauditd_printk_skb: 1037 callbacks suppressed [ 124.208465][ T39] audit: type=1400 audit(1734769179.839:16210): avc: denied { ioctl } for pid=9199 comm="syz.1.862" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.228098][ T39] audit: type=1400 audit(1734769179.849:16211): avc: denied { ioctl } for pid=9199 comm="syz.1.862" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.229065][ T5946] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 124.234556][ T39] audit: type=1400 audit(1734769179.849:16212): avc: denied { ioctl } for pid=9199 comm="syz.1.862" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.236694][ T5946] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 124.245478][ T5946] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 124.247947][ T5946] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 124.250360][ T5946] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 124.259471][ T39] audit: type=1400 audit(1734769179.849:16213): avc: denied { ioctl } for pid=9199 comm="syz.1.862" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.265238][ T5946] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 124.269581][ T5946] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.273611][ T39] audit: type=1400 audit(1734769179.849:16214): avc: denied { ioctl } for pid=9199 comm="syz.1.862" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5503 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.282159][ T39] audit: type=1400 audit(1734769179.849:16215): avc: denied { ioctl } for pid=9199 comm="syz.1.862" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.293061][ T39] audit: type=1400 audit(1734769179.879:16216): avc: denied { search } for pid=9202 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.300209][ T39] audit: type=1400 audit(1734769179.879:16217): avc: denied { search } for pid=9202 comm="rm" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.306900][ T39] audit: type=1400 audit(1734769179.879:16218): avc: denied { search } for pid=9202 comm="rm" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.313585][ T39] audit: type=1400 audit(1734769179.909:16219): avc: denied { ioctl } for pid=9199 comm="syz.1.862" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 124.499325][ T5946] usb 6-1: GET_CAPABILITIES returned 0 [ 124.500761][ T5946] usbtmc 6-1:16.0: can't read capabilities [ 124.749378][ T5946] usb 6-1: USB disconnect, device number 14 [ 124.888135][ T9210] x_tables: duplicate underflow at hook 2 [ 125.300534][ T5296] Bluetooth: hci1: link tx timeout [ 125.302065][ T5296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.305341][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.863'. [ 125.309306][ T9217] netlink: 16 bytes leftover after parsing attributes in process `syz.1.867'. [ 125.311584][ T9217] tipc: Invalid UDP bearer configuration [ 125.311602][ T9217] tipc: Enabling of bearer rejected, failed to enable media [ 125.419858][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.0.868'. [ 125.422379][ T9225] netem: incorrect ge model size [ 125.425213][ T9225] netem: change failed [ 125.602313][ T5296] Bluetooth: hci1: link tx timeout [ 125.603661][ T5296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.636854][ T5296] Bluetooth: hci1: link tx timeout [ 125.638280][ T5296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 125.685554][ T5940] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 125.756156][ T9241] ax25_connect(): syz.1.874 uses autobind, please contact jreuter@yaina.de [ 125.763647][ T9241] fuse: Unknown parameter 'rooÏìode' [ 125.932005][ T9251] netlink: 8 bytes leftover after parsing attributes in process `syz.0.878'. [ 125.967362][ T5296] Bluetooth: hci1: link tx timeout [ 125.969159][ T5296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.039237][ T9252] netlink: 'syz.1.877': attribute type 9 has an invalid length. [ 126.125245][ T5946] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 126.265988][ T5296] Bluetooth: hci1: link tx timeout [ 126.267923][ T5296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.285560][ T5946] usb 9-1: Using ep0 maxpacket: 8 [ 126.296791][ T5946] usb 9-1: config index 0 descriptor too short (expected 301, got 45) [ 126.298962][ T5946] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 126.302440][ T5946] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 126.304992][ T5946] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.315219][ T5946] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.318500][ T5946] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 126.320782][ T5946] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.541286][ T5946] usb 9-1: usb_control_msg returned -32 [ 126.542796][ T5946] usbtmc 9-1:16.0: can't read capabilities [ 126.916463][ T9282] usb 9-1: usbtmc_ioctl_clear_in_halt returned -32 [ 127.057772][ T5296] Bluetooth: hci1: link tx timeout [ 127.059189][ T5296] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 127.073677][ T9284] loop2: detected capacity change from 0 to 7 [ 127.076033][ T9284] Dev loop2: unable to read RDB block 7 [ 127.077563][ T9284] loop2: AHDI p2 p3 [ 127.078736][ T9284] loop2: partition table partially beyond EOD, truncated [ 127.080670][ T9284] loop2: p2 start 33554432 is beyond EOD, truncated [ 127.365447][ T5296] Bluetooth: hci1: command 0x0405 tx timeout [ 128.791339][ T5977] usb 9-1: USB disconnect, device number 20 [ 129.303891][ T39] kauditd_printk_skb: 879 callbacks suppressed [ 129.303901][ T39] audit: type=1400 audit(1734769184.919:17099): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.315781][ T39] audit: type=1400 audit(1734769184.929:17100): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.322502][ T39] audit: type=1400 audit(1734769184.929:17101): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 129.353718][ T39] audit: type=1400 audit(1734769184.969:17102): avc: denied { unmount } for pid=6415 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 129.379243][ T39] audit: type=1400 audit(1734769184.999:17103): avc: denied { read } for pid=9307 comm="syz.1.893" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.386189][ T39] audit: type=1400 audit(1734769184.999:17105): avc: denied { read open } for pid=9307 comm="syz.1.893" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.393122][ T39] audit: type=1400 audit(1734769184.999:17104): avc: denied { create } for pid=9319 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.398655][ T39] audit: type=1400 audit(1734769184.999:17106): avc: denied { map } for pid=9307 comm="syz.1.893" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.405689][ T39] audit: type=1400 audit(1734769184.999:17107): avc: denied { read } for pid=9307 comm="syz.1.893" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 129.413038][ T39] audit: type=1400 audit(1734769184.999:17108): avc: denied { setopt } for pid=9319 comm="syz.0.895" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 129.425722][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.0.895'. [ 129.542874][ T9322] loop2: detected capacity change from 0 to 7 [ 129.547608][ T9322] Dev loop2: unable to read RDB block 7 [ 129.549628][ T9322] loop2: AHDI p2 p3 [ 129.551126][ T9322] loop2: partition table partially beyond EOD, truncated [ 129.553760][ T9322] loop2: p2 start 33554432 is beyond EOD, truncated [ 129.666365][ T9326] netlink: 'syz.4.898': attribute type 10 has an invalid length. [ 129.879128][ T9335] FAULT_INJECTION: forcing a failure. [ 129.879128][ T9335] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 129.882513][ T9335] CPU: 2 UID: 0 PID: 9335 Comm: syz.3.900 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 129.885115][ T9335] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 129.887853][ T9335] Call Trace: [ 129.888692][ T9335] [ 129.889431][ T9335] dump_stack_lvl+0x16c/0x1f0 [ 129.890607][ T9335] should_fail_ex+0x497/0x5b0 [ 129.891833][ T9335] _copy_from_iter+0x2a1/0x1560 [ 129.893073][ T9335] ? trace_lock_acquire+0x14e/0x1f0 [ 129.894431][ T9335] ? __alloc_skb+0x1fe/0x380 [ 129.895632][ T9335] ? __pfx__copy_from_iter+0x10/0x10 [ 129.896995][ T9335] ? __virt_addr_valid+0x1a4/0x590 [ 129.898323][ T9335] ? __virt_addr_valid+0x5e/0x590 [ 129.899613][ T9335] ? __phys_addr_symbol+0x30/0x80 [ 129.900911][ T9335] ? __check_object_size+0x488/0x710 [ 129.902291][ T9335] netlink_sendmsg+0x813/0xd70 [ 129.903532][ T9335] ? __pfx_netlink_sendmsg+0x10/0x10 [ 129.904903][ T9335] ____sys_sendmsg+0xaaf/0xc90 [ 129.906097][ T9335] ? copy_msghdr_from_user+0x10b/0x160 [ 129.907446][ T9335] ? __pfx_____sys_sendmsg+0x10/0x10 [ 129.908788][ T9335] ___sys_sendmsg+0x135/0x1e0 [ 129.909984][ T9335] ? __pfx____sys_sendmsg+0x10/0x10 [ 129.911337][ T9335] ? __pfx_lock_release+0x10/0x10 [ 129.912622][ T9335] ? trace_lock_acquire+0x14e/0x1f0 [ 129.913979][ T9335] ? __fget_files+0x206/0x3a0 [ 129.915174][ T9335] __sys_sendmsg+0x16e/0x220 [ 129.916357][ T9335] ? __pfx___sys_sendmsg+0x10/0x10 [ 129.917676][ T9335] do_syscall_64+0xcd/0x250 [ 129.918850][ T9335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.920375][ T9335] RIP: 0033:0x7f80d5985d29 [ 129.921531][ T9335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.926367][ T9335] RSP: 002b:00007f80d66d1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 129.928495][ T9335] RAX: ffffffffffffffda RBX: 00007f80d5b76080 RCX: 00007f80d5985d29 [ 129.930515][ T9335] RDX: 0000000004000020 RSI: 0000000020000480 RDI: 0000000000000004 [ 129.932527][ T9335] RBP: 00007f80d66d1090 R08: 0000000000000000 R09: 0000000000000000 [ 129.934533][ T9335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 129.936597][ T9335] R13: 0000000000000001 R14: 00007f80d5b76080 R15: 00007fff63f9ed28 [ 129.938633][ T9335] [ 130.851245][ T9326] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.855477][ T9326] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.857776][ T9326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.863078][ T9326] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 131.052255][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.905'. [ 131.073805][ T9357] netlink: 24 bytes leftover after parsing attributes in process `syz.4.906'. [ 131.074921][ T9358] pim6reg527: entered allmulticast mode [ 131.122068][ T9358] ip6t_REJECT: ECHOREPLY is not supported [ 131.129368][ T9358] netlink: 188 bytes leftover after parsing attributes in process `syz.3.907'. [ 131.150297][ T9360] netlink: 12 bytes leftover after parsing attributes in process `syz.0.908'. [ 131.272916][ T9367] loop2: detected capacity change from 0 to 7 [ 131.274877][ T9367] Dev loop2: unable to read RDB block 7 [ 131.276889][ T9367] loop2: AHDI p2 p3 [ 131.277981][ T9367] loop2: partition table partially beyond EOD, truncated [ 131.280312][ T9367] loop2: p2 start 33554432 is beyond EOD, truncated [ 131.675920][ T6174] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 131.790693][ T9383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.916'. [ 132.193208][ T9395] loop2: detected capacity change from 0 to 7 [ 132.196101][ T9395] Dev loop2: unable to read RDB block 7 [ 132.198069][ T9395] loop2: AHDI p2 p3 [ 132.199454][ T9395] loop2: partition table partially beyond EOD, truncated [ 132.202447][ T9395] loop2: p2 start 33554432 is beyond EOD, truncated [ 132.245350][ T9394] netlink: 16 bytes leftover after parsing attributes in process `syz.0.921'. [ 132.342689][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 132.344903][ T9400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.923'. [ 132.369919][ T9401] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=9401 comm=syz.3.923 [ 132.373838][ T9400] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5130 sclass=netlink_route_socket pid=9400 comm=syz.3.923 [ 132.487265][ T1416] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.794994][ T9411] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 132.918251][ T9419] netlink: 'syz.4.925': attribute type 9 has an invalid length. [ 133.151468][ T9427] afs: Unknown parameter '' [ 133.610270][ T9443] loop2: detected capacity change from 0 to 7 [ 133.613101][ T9443] Dev loop2: unable to read RDB block 7 [ 133.614584][ T9443] loop2: AHDI p2 p3 [ 133.618541][ T9443] loop2: partition table partially beyond EOD, truncated [ 133.623779][ T9443] loop2: p2 start 33554432 is beyond EOD, truncated [ 133.797976][ T9449] Bluetooth: MGMT ver 1.23 [ 133.913830][ T9453] netlink: 40 bytes leftover after parsing attributes in process `syz.1.935'. [ 134.007603][ T9457] block nbd3: NBD_DISCONNECT [ 134.166446][ T9463] netlink: 8 bytes leftover after parsing attributes in process `syz.0.938'. [ 134.299941][ T9466] SELinux: syz.3.939 (9466) set checkreqprot to 1. This is no longer supported. [ 134.311889][ T39] kauditd_printk_skb: 650 callbacks suppressed [ 134.311902][ T39] audit: type=1400 audit(1734769189.929:17759): avc: denied { read } for pid=9462 comm="syz.0.938" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.329108][ T39] audit: type=1400 audit(1734769189.949:17760): avc: denied { read open } for pid=9462 comm="syz.0.938" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.337689][ T39] audit: type=1400 audit(1734769189.959:17761): avc: denied { read } for pid=9464 comm="syz.3.939" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.343202][ T39] audit: type=1400 audit(1734769189.959:17762): avc: denied { read open } for pid=9464 comm="syz.3.939" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.346289][ T9465] binder: 9462:9465 ioctl c0306201 20000580 returned -14 [ 134.357065][ T39] audit: type=1400 audit(1734769189.959:17763): avc: denied { ioctl } for pid=9462 comm="syz.0.938" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.363833][ T39] audit: type=1400 audit(1734769189.959:17764): avc: denied { ioctl } for pid=9464 comm="syz.3.939" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 134.375473][ T39] audit: type=1400 audit(1734769189.969:17765): avc: denied { ioctl } for pid=9462 comm="syz.0.938" path="/dev/binderfs/binder0" dev="binder" ino=10 ioctlcmd=0x6201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 134.391553][ T39] audit: type=1400 audit(1734769190.009:17766): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 134.412341][ T39] audit: type=1400 audit(1734769190.009:17767): avc: denied { search } for pid=5334 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 134.429685][ T39] audit: type=1400 audit(1734769190.009:17768): avc: denied { append } for pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 134.848153][ T9483] cgroup: subsys name conflicts with all [ 135.066145][ T9493] usb usb9: check_ctrlrecip: process 9493 (syz.4.945) requesting ep 01 but needs 81 [ 135.068618][ T9493] usb usb9: usbfs: process 9493 (syz.4.945) did not claim interface 0 before use [ 135.810913][ T9534] all: renamed from gretap0 (while UP) [ 135.932372][ T9538] netlink: 'syz.0.958': attribute type 29 has an invalid length. [ 135.936237][ T9538] netlink: 'syz.0.958': attribute type 29 has an invalid length. [ 135.949814][ T9538] netlink: 'syz.0.958': attribute type 29 has an invalid length. [ 136.104531][ T9545] nftables ruleset with unbound set [ 136.220393][ T9549] cgroup: release_agent respecified [ 136.522250][ T9563] netlink: ct family unspecified [ 136.523619][ T9563] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 136.875620][ T57] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 137.037153][ T57] usb 5-1: Using ep0 maxpacket: 8 [ 137.052413][ T9578] overlayfs: empty lowerdir [ 137.053763][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 137.059425][ T57] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 137.061707][ T57] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.080375][ T57] usb 5-1: config 0 descriptor?? [ 137.312159][ T57] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 137.802445][ T1169] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.842507][ T9568] __nla_validate_parse: 3 callbacks suppressed [ 137.842519][ T9568] netlink: 36 bytes leftover after parsing attributes in process `syz.0.969'. [ 137.848015][ T35] usb 5-1: USB disconnect, device number 17 [ 137.954340][ T1169] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.002222][ T5296] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 138.005842][ T5296] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 138.008794][ T5296] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 138.011106][ T5296] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 138.013589][ T5296] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 138.015548][ T5296] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 138.017502][ T9599] loop2: detected capacity change from 0 to 7 [ 138.024124][ T9599] Dev loop2: unable to read RDB block 7 [ 138.028778][ T9599] loop2: AHDI p2 p3 [ 138.029848][ T9599] loop2: partition table partially beyond EOD, truncated [ 138.031709][ T9599] loop2: p2 start 33554432 is beyond EOD, truncated [ 138.110561][ T1169] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.168785][ T9606] netlink: 'syz.4.984': attribute type 2 has an invalid length. [ 138.228911][ T9609] netlink: 1276 bytes leftover after parsing attributes in process `syz.1.985'. [ 138.231378][ T9609] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.260278][ T1169] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.612282][ T9601] chnl_net:caif_netlink_parms(): no params data found [ 138.647787][ T1169] bridge_slave_1: left allmulticast mode [ 138.649345][ T1169] bridge_slave_1: left promiscuous mode [ 138.650848][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.672808][ T1169] bridge_slave_0: left allmulticast mode [ 138.674328][ T1169] bridge_slave_0: left promiscuous mode [ 138.678300][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.845091][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.990'. [ 138.847571][ T9625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.990'. [ 138.849582][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.990'. [ 138.851662][ T9625] netlink: 36 bytes leftover after parsing attributes in process `syz.1.990'. [ 139.096525][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.101078][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.104478][ T1169] bond0 (unregistering): Released all slaves [ 139.129215][ T8] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 139.219152][ T9601] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.221123][ T9601] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.223144][ T9601] bridge_slave_0: entered allmulticast mode [ 139.235367][ T9601] bridge_slave_0: entered promiscuous mode [ 139.270969][ T9601] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.273674][ T9601] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.276395][ T9601] bridge_slave_1: entered allmulticast mode [ 139.279239][ T9601] bridge_slave_1: entered promiscuous mode [ 139.285293][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 139.309957][ T8] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 139.313468][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.319423][ T8] usb 6-1: Product: syz [ 139.320563][ T8] usb 6-1: Manufacturer: syz [ 139.321901][ T8] usb 6-1: SerialNumber: syz [ 139.324900][ T39] kauditd_printk_skb: 1185 callbacks suppressed [ 139.324909][ T39] audit: type=1400 audit(1734769194.939:18954): avc: denied { create } for pid=9636 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.331798][ T39] audit: type=1400 audit(1734769194.949:18955): avc: denied { read } for pid=9636 comm="syz.4.991" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 139.333570][ T9601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.337026][ T39] audit: type=1400 audit(1734769194.949:18956): avc: denied { ioctl } for pid=9624 comm="syz.1.990" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.337048][ T39] audit: type=1400 audit(1734769194.949:18957): avc: denied { ioctl } for pid=9624 comm="syz.1.990" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.337066][ T39] audit: type=1400 audit(1734769194.949:18958): avc: denied { ioctl } for pid=9624 comm="syz.1.990" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.337083][ T39] audit: type=1400 audit(1734769194.949:18959): avc: denied { ioctl } for pid=9624 comm="syz.1.990" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.349546][ T39] audit: type=1400 audit(1734769194.979:18960): avc: denied { ioctl } for pid=9624 comm="syz.1.990" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.350393][ T8] r8152-cfgselector 6-1: Unknown version 0x0000 [ 139.350416][ T8] r8152-cfgselector 6-1: config 0 descriptor?? [ 139.380235][ T39] audit: type=1400 audit(1734769194.979:18961): avc: denied { ioctl } for pid=9624 comm="syz.1.990" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.387292][ T39] audit: type=1400 audit(1734769194.979:18962): avc: denied { ioctl } for pid=9624 comm="syz.1.990" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x550a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.388191][ T9601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.400437][ T39] audit: type=1400 audit(1734769194.979:18963): avc: denied { ioctl } for pid=9624 comm="syz.1.990" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5509 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 139.474641][ T9601] team0: Port device team_slave_0 added [ 139.483570][ T9601] team0: Port device team_slave_1 added [ 139.548525][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.550606][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.557655][ T9601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.565566][ T9601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.567443][ T9601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.574026][ T9601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.592539][ T8] r8152-cfgselector 6-1: Unknown version 0x0000 [ 139.594260][ T8] r8152-cfgselector 6-1: bad CDC descriptors [ 139.606214][ T8] r8152-cfgselector 6-1: USB disconnect, device number 15 [ 139.725623][ T1169] hsr_slave_0: left promiscuous mode [ 139.755283][ T1169] hsr_slave_1: left promiscuous mode [ 139.786311][ T1169] batman_adv: batadv0: Removing interface: team0 [ 139.793222][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 139.799388][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.804173][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.808001][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.835915][ T1169] veth1_macvtap: left promiscuous mode [ 139.837387][ T1169] veth0_macvtap: left promiscuous mode [ 139.838881][ T1169] veth1_vlan: left promiscuous mode [ 139.840317][ T1169] veth0_vlan: left promiscuous mode [ 139.866082][ T9648] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 139.882277][ T9647] netlink: 8 bytes leftover after parsing attributes in process `syz.4.994'. [ 139.912378][ T1169] pim6reg527 (unregistering): left allmulticast mode [ 139.935416][ T9647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.994'. [ 139.938867][ T9647] netlink: 32 bytes leftover after parsing attributes in process `syz.4.994'. [ 139.985663][ T5949] block nbd0: Receive control failed (result -107) [ 140.056924][ T9647] [ 140.057625][ T9647] ====================================================== [ 140.059405][ T9647] WARNING: possible circular locking dependency detected [ 140.061153][ T9647] 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 Not tainted [ 140.063187][ T9647] ------------------------------------------------------ [ 140.066338][ T9647] syz.4.994/9647 is trying to acquire lock: [ 140.067898][ T9647] ffff888106a4f290 (&q->limits_lock){+.+.}-{4:4}, at: __nbd_set_size+0x2c0/0x730 [ 140.070279][ T9647] [ 140.070279][ T9647] but task is already holding lock: [ 140.072189][ T9647] ffff888106a4ec40 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 140.074778][ T9647] [ 140.074778][ T9647] which lock already depends on the new lock. [ 140.074778][ T9647] [ 140.077412][ T9647] [ 140.077412][ T9647] the existing dependency chain (in reverse order) is: [ 140.079726][ T9647] [ 140.079726][ T9647] -> #5 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 140.081890][ T9647] blk_mq_submit_bio+0x1fb6/0x24c0 [ 140.083361][ T9647] __submit_bio+0x384/0x540 [ 140.084649][ T9647] submit_bio_noacct_nocheck+0x698/0xd70 [ 140.086267][ T9647] submit_bio_noacct+0x93a/0x1e20 [ 140.087730][ T9647] mpage_readahead+0x41d/0x590 [ 140.089116][ T9647] read_pages+0x1a8/0xdc0 [ 140.090427][ T9647] page_cache_ra_unbounded+0x3dc/0x750 [ 140.092014][ T9647] force_page_cache_ra+0x24b/0x340 [ 140.093469][ T9647] page_cache_sync_ra+0x110/0x9c0 [ 140.094953][ T9647] filemap_get_pages+0xd7b/0x1be0 [ 140.096378][ T9647] filemap_read+0x3ca/0xd70 [ 140.097678][ T9647] blkdev_read_iter+0x187/0x480 [ 140.099111][ T9647] vfs_read+0x87f/0xbe0 [ 140.100391][ T9647] ksys_read+0x12b/0x250 [ 140.101649][ T9647] do_syscall_64+0xcd/0x250 [ 140.103018][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.104751][ T9647] [ 140.104751][ T9647] -> #4 (mapping.invalidate_lock#2){++++}-{4:4}: [ 140.107043][ T9647] down_read+0x9a/0x330 [ 140.108330][ T9647] filemap_fault+0x2e0/0x2820 [ 140.109750][ T9647] __do_fault+0x10a/0x490 [ 140.111078][ T9647] do_pte_missing+0xebd/0x3e00 [ 140.112496][ T9647] __handle_mm_fault+0x103c/0x2a40 [ 140.114026][ T9647] handle_mm_fault+0x3fa/0xaa0 [ 140.115243][ T5949] Bluetooth: hci3: command tx timeout [ 140.115436][ T9647] do_user_addr_fault+0x7a3/0x13f0 [ 140.118278][ T9647] exc_page_fault+0x5c/0xc0 [ 140.119681][ T9647] asm_exc_page_fault+0x26/0x30 [ 140.121139][ T9647] copy_iovec_from_user+0x84/0x170 [ 140.122635][ T9647] __import_iovec+0x4b6/0x6d0 [ 140.124033][ T9647] import_iovec+0x108/0x140 [ 140.125451][ T9647] vfs_readv+0x19b/0x890 [ 140.126797][ T9647] do_readv+0x133/0x340 [ 140.128081][ T9647] do_syscall_64+0xcd/0x250 [ 140.129451][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.131210][ T9647] [ 140.131210][ T9647] -> #3 (&mm->mmap_lock){++++}-{4:4}: [ 140.133230][ T9647] __might_fault+0x11b/0x190 [ 140.134553][ T9647] _copy_from_user+0x29/0xd0 [ 140.136007][ T9647] __blk_trace_setup+0xa8/0x180 [ 140.137433][ T9647] blk_trace_ioctl+0x163/0x290 [ 140.138885][ T9647] blkdev_ioctl+0x109/0x6d0 [ 140.140284][ T9647] __x64_sys_ioctl+0x190/0x200 [ 140.141704][ T9647] do_syscall_64+0xcd/0x250 [ 140.143072][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.144802][ T9647] [ 140.144802][ T9647] -> #2 (&q->debugfs_mutex){+.+.}-{4:4}: [ 140.146895][ T9647] __mutex_lock+0x19b/0xa60 [ 140.148267][ T9647] blk_mq_init_sched+0x42b/0x640 [ 140.149764][ T9647] elevator_init_mq+0x2cd/0x420 [ 140.151231][ T9647] add_disk_fwnode+0x113/0x1300 [ 140.152657][ T9647] sd_probe+0xa86/0x1000 [ 140.154119][ T9647] really_probe+0x23e/0xa90 [ 140.155499][ T9647] __driver_probe_device+0x1de/0x440 [ 140.157039][ T9647] driver_probe_device+0x4c/0x1b0 [ 140.158517][ T9647] __device_attach_driver+0x1df/0x310 [ 140.160121][ T9647] bus_for_each_drv+0x157/0x1e0 [ 140.161580][ T9647] __device_attach_async_helper+0x1d3/0x290 [ 140.163443][ T9647] async_run_entry_fn+0x9c/0x530 [ 140.165053][ T9647] process_one_work+0x9c5/0x1ba0 [ 140.166514][ T9647] worker_thread+0x6c8/0xf00 [ 140.167901][ T9647] kthread+0x2c1/0x3a0 [ 140.169158][ T9647] ret_from_fork+0x45/0x80 [ 140.170465][ T9647] ret_from_fork_asm+0x1a/0x30 [ 140.171841][ T9647] [ 140.171841][ T9647] -> #1 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 140.174160][ T9647] blk_queue_enter+0x50f/0x640 [ 140.175712][ T9647] blk_mq_alloc_request+0x59b/0x950 [ 140.177647][ T9647] scsi_execute_cmd+0x1eb/0xf40 [ 140.179484][ T9647] read_capacity_16+0x213/0xe10 [ 140.181310][ T9647] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 140.183174][ T9647] sd_probe+0x904/0x1000 [ 140.184422][ T9647] really_probe+0x23e/0xa90 [ 140.185790][ T9647] __driver_probe_device+0x1de/0x440 [ 140.187430][ T9647] driver_probe_device+0x4c/0x1b0 [ 140.188861][ T9647] __device_attach_driver+0x1df/0x310 [ 140.190388][ T9647] bus_for_each_drv+0x157/0x1e0 [ 140.191811][ T9647] __device_attach_async_helper+0x1d3/0x290 [ 140.193402][ T9647] async_run_entry_fn+0x9c/0x530 [ 140.194783][ T9647] process_one_work+0x9c5/0x1ba0 [ 140.196488][ T9647] worker_thread+0x6c8/0xf00 [ 140.197855][ T9647] kthread+0x2c1/0x3a0 [ 140.199115][ T9647] ret_from_fork+0x45/0x80 [ 140.200396][ T9647] ret_from_fork_asm+0x1a/0x30 [ 140.201766][ T9647] [ 140.201766][ T9647] -> #0 (&q->limits_lock){+.+.}-{4:4}: [ 140.203784][ T9647] __lock_acquire+0x249e/0x3c40 [ 140.205169][ T9647] lock_acquire.part.0+0x11b/0x380 [ 140.206649][ T9647] __mutex_lock+0x19b/0xa60 [ 140.207973][ T9647] __nbd_set_size+0x2c0/0x730 [ 140.209321][ T9647] nbd_start_device+0x8fd/0xd70 [ 140.210716][ T9647] nbd_genl_connect+0x1204/0x1c00 [ 140.212188][ T9647] genl_family_rcv_msg_doit+0x202/0x2f0 [ 140.213818][ T9647] genl_rcv_msg+0x565/0x800 [ 140.215129][ T9647] netlink_rcv_skb+0x16b/0x440 [ 140.217005][ T9647] genl_rcv+0x28/0x40 [ 140.218367][ T9647] netlink_unicast+0x53c/0x7f0 [ 140.219757][ T9647] netlink_sendmsg+0x8b8/0xd70 [ 140.221125][ T9647] ____sys_sendmsg+0xaaf/0xc90 [ 140.222499][ T9647] ___sys_sendmsg+0x135/0x1e0 [ 140.223896][ T9647] __sys_sendmsg+0x16e/0x220 [ 140.225226][ T9647] do_syscall_64+0xcd/0x250 [ 140.226573][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.228226][ T9647] [ 140.228226][ T9647] other info that might help us debug this: [ 140.228226][ T9647] [ 140.230823][ T9647] Chain exists of: [ 140.230823][ T9647] &q->limits_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io)#49 [ 140.230823][ T9647] [ 140.234720][ T9647] Possible unsafe locking scenario: [ 140.234720][ T9647] [ 140.237208][ T9647] CPU0 CPU1 [ 140.238703][ T9647] ---- ---- [ 140.240097][ T9647] lock(&q->q_usage_counter(io)#49); [ 140.241492][ T9647] lock(mapping.invalidate_lock#2); [ 140.243571][ T9647] lock(&q->q_usage_counter(io)#49); [ 140.245629][ T9647] lock(&q->limits_lock); [ 140.246790][ T9647] [ 140.246790][ T9647] *** DEADLOCK *** [ 140.246790][ T9647] [ 140.249365][ T9647] 5 locks held by syz.4.994/9647: [ 140.250992][ T9647] #0: ffffffff8ff7b910 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 140.253146][ T9647] #1: ffffffff8ff7b9c8 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x580/0x800 [ 140.255625][ T9647] #2: ffff8880266cf198 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0xa1b/0x1c00 [ 140.258320][ T9647] #3: ffff888106a4ec40 (&q->q_usage_counter(io)#49){++++}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 140.261126][ T9647] #4: ffff888106a4ec78 (&q->q_usage_counter(queue)#33){+.+.}-{0:0}, at: nbd_start_device+0x8ef/0xd70 [ 140.263972][ T9647] [ 140.263972][ T9647] stack backtrace: [ 140.265609][ T9647] CPU: 1 UID: 0 PID: 9647 Comm: syz.4.994 Not tainted 6.13.0-rc3-syzkaller-00193-ge9b8ffafd20a #0 [ 140.269144][ T9647] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 140.272891][ T9647] Call Trace: [ 140.274037][ T9647] [ 140.274812][ T9647] dump_stack_lvl+0x116/0x1f0 [ 140.276244][ T9647] print_circular_bug+0x419/0x5d0 [ 140.277923][ T9647] check_noncircular+0x31a/0x400 [ 140.279226][ T9647] ? __pfx_check_noncircular+0x10/0x10 [ 140.280640][ T9647] ? lockdep_lock+0xc6/0x200 [ 140.281904][ T9647] ? __pfx_lockdep_lock+0x10/0x10 [ 140.283238][ T9647] ? __pfx_mark_lock+0x10/0x10 [ 140.284533][ T9647] __lock_acquire+0x249e/0x3c40 [ 140.285891][ T9647] ? __pfx___lock_acquire+0x10/0x10 [ 140.287246][ T9647] ? __lock_acquire+0x15a9/0x3c40 [ 140.288551][ T9647] lock_acquire.part.0+0x11b/0x380 [ 140.289848][ T9647] ? __nbd_set_size+0x2c0/0x730 [ 140.291216][ T9647] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 140.292693][ T9647] ? rcu_is_watching+0x12/0xc0 [ 140.293985][ T9647] ? trace_lock_acquire+0x14e/0x1f0 [ 140.295468][ T9647] ? __nbd_set_size+0x2c0/0x730 [ 140.297250][ T9647] ? lock_acquire+0x2f/0xb0 [ 140.298487][ T9647] ? __nbd_set_size+0x2c0/0x730 [ 140.299780][ T9647] __mutex_lock+0x19b/0xa60 [ 140.300971][ T9647] ? __nbd_set_size+0x2c0/0x730 [ 140.302291][ T9647] ? __nbd_set_size+0x2c0/0x730 [ 140.303582][ T9647] ? __lock_acquire+0x15a9/0x3c40 [ 140.304954][ T9647] ? __pfx___mutex_lock+0x10/0x10 [ 140.306615][ T9647] ? __pfx___lock_acquire+0x10/0x10 [ 140.308565][ T9647] ? __nbd_set_size+0x2c0/0x730 [ 140.310342][ T9647] __nbd_set_size+0x2c0/0x730 [ 140.312067][ T9647] ? lock_acquire.part.0+0x11b/0x380 [ 140.313995][ T9647] ? find_held_lock+0x2d/0x110 [ 140.315746][ T9647] ? blk_mq_freeze_queue_wait+0x186/0x190 [ 140.317791][ T9647] ? __pfx_lock_release+0x10/0x10 [ 140.319626][ T9647] ? __pfx___nbd_set_size+0x10/0x10 [ 140.321541][ T9647] ? __pfx_autoremove_wake_function+0x10/0x10 [ 140.323711][ T9647] ? nbd_start_device+0x8ef/0xd70 [ 140.325537][ T9647] nbd_start_device+0x8fd/0xd70 [ 140.327314][ T9647] nbd_genl_connect+0x1204/0x1c00 [ 140.329141][ T9647] ? __pfx_nbd_genl_connect+0x10/0x10 [ 140.331095][ T9647] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 140.333772][ T9647] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 140.336423][ T9647] genl_family_rcv_msg_doit+0x202/0x2f0 [ 140.338429][ T9647] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 140.340639][ T9647] ? genl_get_cmd+0x195/0x580 [ 140.342357][ T9647] ? __radix_tree_lookup+0x21f/0x2c0 [ 140.344276][ T9647] genl_rcv_msg+0x565/0x800 [ 140.345840][ T9647] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.347520][ T9647] ? __pfx_nbd_genl_connect+0x10/0x10 [ 140.349314][ T9647] ? __pfx___lock_acquire+0x10/0x10 [ 140.351073][ T9647] netlink_rcv_skb+0x16b/0x440 [ 140.352789][ T9647] ? __pfx_genl_rcv_msg+0x10/0x10 [ 140.354618][ T9647] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 140.356531][ T9647] ? down_read+0xc9/0x330 [ 140.358106][ T9647] ? __pfx_down_read+0x10/0x10 [ 140.359807][ T9647] ? netlink_deliver_tap+0x1ae/0xd30 [ 140.361273][ T9647] genl_rcv+0x28/0x40 [ 140.362276][ T9647] netlink_unicast+0x53c/0x7f0 [ 140.363484][ T9647] ? __pfx_netlink_unicast+0x10/0x10 [ 140.364797][ T9647] netlink_sendmsg+0x8b8/0xd70 [ 140.366540][ T9647] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.367921][ T9647] ____sys_sendmsg+0xaaf/0xc90 [ 140.369077][ T9647] ? copy_msghdr_from_user+0x10b/0x160 [ 140.370373][ T9647] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.371677][ T9647] ___sys_sendmsg+0x135/0x1e0 [ 140.372890][ T9647] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.374201][ T9647] ? __pfx_lock_release+0x10/0x10 [ 140.375681][ T9647] ? trace_lock_acquire+0x14e/0x1f0 [ 140.377481][ T9647] ? __fget_files+0x206/0x3a0 [ 140.379129][ T9647] __sys_sendmsg+0x16e/0x220 [ 140.380730][ T9647] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.382438][ T9647] ? __x64_sys_futex+0x1e1/0x4c0 [ 140.383700][ T9647] do_syscall_64+0xcd/0x250 [ 140.384833][ T9647] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.386741][ T9647] RIP: 0033:0x7feb3ff85d29 [ 140.387876][ T9647] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.392701][ T9647] RSP: 002b:00007feb3fdf9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.394826][ T9647] RAX: ffffffffffffffda RBX: 00007feb40175fa0 RCX: 00007feb3ff85d29 [ 140.397311][ T9647] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000b [ 140.399882][ T9647] RBP: 00007feb40001aa8 R08: 0000000000000000 R09: 0000000000000000 [ 140.402548][ T9647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.404887][ T9647] R13: 0000000000000000 R14: 00007feb40175fa0 R15: 00007fffa24c3338 [ 140.407518][ T9647] [ 140.408716][ C1] vkms_vblank_simulate: vblank timer overrun [ 140.418880][ T9647] nbd0: detected capacity change from 0 to 256 [ 140.424512][ T8042] block nbd0: Dead connection, failed to find a fallback SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 140.446279][ T8042] block nbd0: shutting down sockets [ 140.448040][ T8042] blk_print_req_error: 27 callbacks suppressed [ 140.448048][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.457757][ T8042] buffer_io_error: 25 callbacks suppressed [ 140.457767][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.461383][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.463708][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.467266][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.469615][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.471664][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.473998][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.476084][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.478397][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.480429][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.482781][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.484809][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.487225][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.489248][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.491591][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.493599][ T8042] ldm_validate_partition_table(): Disk read failed. [ 140.495364][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.497688][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.499736][ T8042] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 140.524982][ T8042] Buffer I/O error on dev nbd0, logical block 0, async page read [ 140.535296][ T8042] Dev nbd0: unable to read RDB block 0 [ 140.536936][ T8042] nbd0: unable to read partition table [ 140.543340][ T8042] ldm_validate_partition_table(): Disk read failed. [ 140.547407][ T8042] Dev nbd0: unable to read RDB block 0 [ 140.549020][ T8042] nbd0: unable to read partition table [ 140.967387][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 141.043351][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 141.536930][ T5935] bond0: (slave syz_tun): Releasing backup interface [ 141.983275][ T1169] IPVS: stop unused estimator thread 0... [ 142.150707][ T1169] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.198604][ T1169] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.281468][ T1169] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.408123][ T1169] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.498650][ T1169] bridge_slave_1: left allmulticast mode [ 142.500597][ T1169] bridge_slave_1: left promiscuous mode [ 142.502564][ T1169] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.507896][ T1169] bridge_slave_0: left allmulticast mode [ 142.509785][ T1169] bridge_slave_0: left promiscuous mode [ 142.511757][ T1169] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.559891][ T1169] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 142.657166][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.660517][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.663836][ T1169] bond0 (unregistering): Released all slaves [ 142.677660][ T1169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 142.681286][ T1169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 142.686026][ T1169] bond0 (unregistering): Released all slaves [ 142.776580][ T1169] tipc: Disabling bearer [ 142.778048][ T1169] tipc: Left network mode [ 143.001256][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.007348][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.011825][ T1169] batadv0: left promiscuous mode [ 143.017375][ T1169] team0: left promiscuous mode [ 143.019151][ T1169] team_slave_0: left promiscuous mode [ 143.021182][ T1169] team_slave_1: left promiscuous mode [ 143.030135][ T1169] hsr_slave_0: left promiscuous mode [ 143.034242][ T1169] hsr_slave_1: left promiscuous mode [ 143.037809][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.039877][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.042778][ T1169] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.047711][ T1169] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.052052][ T1169] veth1_macvtap: left promiscuous mode [ 143.053543][ T1169] veth0_macvtap: left promiscuous mode [ 143.055002][ T1169] veth1_vlan: left promiscuous mode [ 143.056437][ T1169] veth0_vlan: left promiscuous mode [ 143.087119][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 143.096667][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 143.327414][ T1169] team_slave_1 (unregistering): left allmulticast mode [ 143.329922][ T1169] team0 (unregistering): Port device team_slave_1 removed [ 143.373456][ T1169] team_slave_0 (unregistering): left allmulticast mode [ 143.376233][ T1169] team0 (unregistering): Port device team_slave_0 removed [ 144.325725][ T39] kauditd_printk_skb: 2361 callbacks suppressed [ 144.325742][ T39] audit: type=1400 audit(1734769199.949:21325): avc: denied { getattr } for pid=9683 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.333805][ T39] audit: type=1400 audit(1734769199.949:21326): avc: denied { search } for pid=9683 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.339524][ T39] audit: type=1400 audit(1734769199.949:21327): avc: denied { search } for pid=9683 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.345443][ T39] audit: type=1400 audit(1734769199.949:21328): avc: denied { search } for pid=9683 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.351376][ T9683] audit: audit_backlog=65 > audit_backlog_limit=64 [ 144.351665][ T39] audit: type=1400 audit(1734769199.949:21329): avc: denied { search } for pid=9683 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.353388][ T9683] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 144.359338][ T39] audit: type=1400 audit(1734769199.949:21330): avc: denied { search } for pid=9683 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 144.361553][ T9683] audit: backlog limit exceeded [ 144.367599][ T39] audit: type=1400 audit(1734769199.949:21331): avc: denied { search } for pid=9683 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.492919][ T39] kauditd_printk_skb: 3973 callbacks suppressed [ 149.492936][ T39] audit: type=1400 audit(1734769205.109:25263): avc: denied { search } for pid=9741 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.503097][ T39] audit: type=1400 audit(1734769205.109:25264): avc: denied { search } for pid=9741 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.510540][ T39] audit: type=1400 audit(1734769205.109:25265): avc: denied { search } for pid=9741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.517371][ T39] audit: type=1400 audit(1734769205.109:25266): avc: denied { search } for pid=9741 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.523318][ T39] audit: type=1400 audit(1734769205.119:25267): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 149.528980][ T39] audit: type=1400 audit(1734769205.119:25268): avc: denied { search } for pid=5334 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 149.534536][ T39] audit: type=1400 audit(1734769205.119:25269): avc: denied { append } for pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.537657][ T9742] audit: audit_backlog=65 > audit_backlog_limit=64 [ 149.540364][ T39] audit: type=1400 audit(1734769205.119:25270): avc: denied { append open } for pid=5334 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 149.542637][ T9742] audit: audit_lost=16 audit_rate_limit=0 audit_backlog_limit=64 VM DIAGNOSIS: 08:19:55 Registers: info registers vcpu 0 CPU#0 RAX=00000000000f6241 RBX=0000000000000000 RCX=ffffffff8b29b759 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1eba0 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f3550 R15=0000000000000000 RIP=ffffffff8b29cb3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1f63d69ae0 CR3=0000000030bda000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000008 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=000000000000001f Opmask02=000000000000ffdf Opmask03=2040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055789c7b4440 000055789c81d850 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000ff00000000 00ff000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00ff000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5c431d1c1a141601 5c43000611171d5c ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000211 0000000000000000 44455a494c414954 494e495f43455355 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6f742079617272 6120656c75722079 7261726f706d6574 002a3f005b3f2a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a4a51055c445757 440540495057055c 5744574a55484051 000f1a005b1a0f00 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000009bb1 000000317968702f 3435313230386565 65692f6d69737768 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 c5c32436bd974f7b 0000557dcbf0339d 0000000000000041 000000317968702f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fab485f1b00 00007f007665642f 0000000000000021 0000003177617264 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 26483b3a3a264b3b 3a0a00307f617930 3b2433273f397b27 697a787c69303b7e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692054524f50202c 2064696c61696d20 0070253a20252054 524f504d49005452 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 692020520050202c 2025204f504d4900 0061253a20252000 2527204d49005452 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 1 CPU#1 RAX=000000000000002d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bc075 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc9000c1e67b8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=000000000000002d R14=ffffffff851bc010 R15=0000000000000000 RIP=ffffffff851bc09f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feb3fdf96c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5f4f70d440 CR3=000000005c362000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000002000c0000 0000000000ff0005 000c000000010000 0000000000000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004400000000000a 0008000000000000 00000008000c8007 0004000000000002 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000880070044 00000000000a0008 0000000000000000 0008000c80070004 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000020000 0002000c00000000 000000ff0005000c 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=dffffc0000000000 RCX=0000000000000004 RDX=0000000000000000 RSI=0000000000000003 RDI=ffff88806a8289b8 RBP=0000000000000003 RSP=ffffc90000fc7a40 R8 =0000000000000003 R9 =0000000000000000 R10=ffff88801c6bc91f R11=ffffffff816bc27e R12=ffffffff905f3710 R13=ffff88806a8289b8 R14=0000000000000000 R15=0000000000000003 RIP=ffffffff849eefb7 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f1f64b6ad58 CR3=0000000064e24000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb40002bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000002000c0000 0000000000ff0005 000c000000010000 0000000000000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004400000000000a 0008000000000000 00000008000c8007 0004000000000002 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001000880070044 00000000000a0008 0000000000000000 0008000c80070004 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000020000 0002000c00000000 000000ff0005000c 0000000100000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=ffff88806a93fdc0 RCX=ffffffff818e22f4 RDX=ffff88801d688000 RSI=ffffffff818e22cf RDI=0000000000000005 RBP=ffffc90000167d78 RSP=ffffc90000167ca0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1c38d66 R12=1ffff9200002cf98 R13=0000000000000001 R14=0000000000000003 R15=ffffed100d527fb9 RIP=ffffffff818e22d1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055838fcfd300 CR3=00000000534f0000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c004ff Opmask01=0000000000000001 Opmask02=000000003b3f3ffb Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020262620003a25 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0070006e69622f72 73752f3a6e69622f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff0f0e0d0c0b0a09 0807060504030201 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0020262620003a25 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000ff00ff ffff000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 0000000000ff0000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055838f00662d 000055838fd0ed48 000055838fd0ed68 6c69665f70006d72 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055838f00662d 000055838fd0ed48 000055838fd0ed68 6c69665f70006d72 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055838f004902 000055838fd0c248 000055838fd0c247 4346495f5f00425d ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055838fd04938 0000000000000000 000000000000000f 0000000000885d81 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000