last executing test programs: 8.027816386s ago: executing program 1 (id=643): chdir(&(0x7f0000000240)='./file0\x00') r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) r1 = getpid() getpid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000000400)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f00000004c0)=""/101, 0xfffffc60}], 0x286, 0x0) prctl$PR_SET_PTRACER(0x59616d61, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f00000000c0), 0xfea7) write$cgroup_int(r2, &(0x7f0000000040), 0x12) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_WAIT(0xffffffffffffffff, 0xc02864ca, &(0x7f0000000340)={&(0x7f0000001340), 0x0, 0x4}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r5, 0xc01064c8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0], 0x3, r6}) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r6], &(0x7f0000000200), &(0x7f0000000300)=[r7], &(0x7f0000000340)}) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000080)=0x7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r8, &(0x7f0000000200)=ANY=[], 0x118) socket$unix(0x1, 0x5, 0x0) 7.113718332s ago: executing program 1 (id=647): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) listen(r0, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a00) epoll_create1(0x80000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) r3 = syz_io_uring_setup(0x680b, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000200)={0x0, 0x200004, 0x0, 0x40010000, 0x85}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x2004) r7 = fcntl$dupfd(r6, 0x0, r6) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00!\x00\x00\x00']) 6.495817219s ago: executing program 3 (id=649): r0 = getpgrp(0x0) prlimit64(r0, 0x1, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x0, 0x3}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$AUDIT_ADD_RULE(r2, 0x0, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d02"], 0x17) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x4) r5 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r5) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) 6.126123246s ago: executing program 1 (id=651): mkdir(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x10000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$sock(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x0, 0x122, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) rseq(0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 5.42446209s ago: executing program 3 (id=653): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDSIGACCEPT(r3, 0x400455c8, 0x20) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x9, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x1b) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(r6, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2d, 0x6}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20044890) ioctl$CDROMREADTOCENTRY(r7, 0x5306, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10) r8 = epoll_create1(0x0) r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x0, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$netrom_NETROM_T2(r10, 0x103, 0x2, &(0x7f00000001c0)=0x3, 0x4) r11 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f0000000600)=@mangle={'mangle\x00', 0xc061, 0x6, 0x570, 0xe8, 0xe8, 0xe8, 0xe8, 0xe8, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x4a0, 0x6, 0x0, {[{{@ipv6={@mcast1, @empty, [], [], 'ip_vti0\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x0, 0x3a010000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@mcast1, @ipv6=@private0, 0xfd}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@ah={{0x30}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r10, &(0x7f0000000040)={0x60000014}) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r9, &(0x7f00000000c0)) epoll_pwait(r8, &(0x7f0000000200)=[{}], 0x1, 0x1, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) syz_init_net_socket$llc(0x1a, 0x1, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRES32=r0], 0x4c}}, 0x44801) 5.295747497s ago: executing program 3 (id=654): r0 = getpgrp(0x0) prlimit64(r0, 0x1, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x0, 0x3}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$AUDIT_ADD_RULE(r2, 0x0, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d02"], 0x17) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x4) r5 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r5) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) 5.295238934s ago: executing program 0 (id=655): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080026bd7000fcdbdf25090000000c00990002000000620000000f000a00afbddc2ec2c44bd2bb88ac000800090001ac0f0009000700be6d61881a000000c5f1c1ee26f31a8f94aa6f55493f451128e6f1c8d8e2f3679a5c9e85e568b9d8d4"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r3, 0x0, r2, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705200008000000850000000c00000095"], &(0x7f0000000300)='GPL\x00', 0x3f, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe00) r5 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0xfffffffe, 0x1}, &(0x7f0000000040), &(0x7f0000000140)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x41, 0x1, @thr={&(0x7f0000000580)="0f6612330840716f7538b3ce57a3590b60448be9c13074d6011ef88e97e4109fbf2d1f32e111677699729ef19692bf45", &(0x7f00000006c0)="da5f44633ebf8b0be4d08536b1e25133e6112d0335c251c94ac53e40d71944b775b1bfd6483b7ea01f1982d4bbbbe331b81f71eb536a206fda7c527282a76e3ce55a260a052d623275315d6a1d7d68843c59e04cf02d82d363c17961b0e5847c33e9aa6fea7e35e5bdf4941940826cbcd9e2bc6790925a075de372d65d387784e639bfe936cae72aae173ad1edcf538acb7602d79e23d2db6264bd6c0923c32fd08cf0cfd7ed1fc7a20ff574209fb58101ed9df69b23c3cbc668703a206c9f2025e5dfadb9fcd51edde7a7666cbcca0b"}}, &(0x7f0000000600)) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) accept4(r7, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000540)={0x90000001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r0, 0x0, 0x10001, 0x0, 0x3, 0x1a002d, 0x27e1a9}) pwrite64(r4, &(0x7f0000000200)="7f8c56d0d4c834b6a658f327f1473f61bfa54ed9cf4f0a94f696b2434f21b7fba2045ac7422baa8010ed7061c27d2fb62b93f5dd5925b9aeebb3f9accd84935e0ad18b4cd4f1ba046bf9017c234bb7d171bd64e72a3a500bd33b86", 0x5b, 0xfffffffffffffffa) 4.475814435s ago: executing program 1 (id=657): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) sendmmsg$inet(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='B', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'veth0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x38) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) read(r7, 0x0, 0x2006) dup2(r7, r6) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 4.449125778s ago: executing program 3 (id=658): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'veth0_macvtap\x00', {0x2, 0x0, @loopback}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0)=0x6, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="54030000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="360333008000000008021100000108021100000150505050505000000000000000000000000000000100030100058c0000009af6da3eccb31dfdb01e6e7177c98c64430a038b1a5dfa035ea7a9381b60d5573f7a471f2255656c6fda4f9fe2a1cefb7e307f95a05deb88da8d6767435855a59a04759977ef1cf00cf302f452d67e80c72e836d0cfcfd95ca366d0e284f1c03058e40a2283bb06b723df5c6eef98646cae544fd4eebdf5effc6f1ba5debee4b327b120000000000003c04000000007606000000000000ddb731851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc8887e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca05000000000000000a5d5addb3184fec9543e41f70eb1bcd9a87da54ab8f09ec2f4b39e15dca2e549f43749fdc5d2150d9349f08894e39ac26f6ddba1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd484826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335dd25523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366dd120941a0e096d40b7d3b60bec79aa8aaa3f566dd3f7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc62b9e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2edd0b0da71e815422994325dfecdd6530d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cefe477c38a52b4fb790de3ab2c08eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15cdd064f3fef835ea800000038d3b6030000009aab386eddcd74bd0a990a74a32d0520cef4e20037fc14fd1be83b638c04110b784e2038855bc69f536c27031736aac99c9f93b5a8ee8926e1ea777abd21b8a1485c4c183ccbc6c2271c7ccb2c6e47f349ebe91e6d059bab96f492ebb063e42581243ea1fae5d0ba5b9ca3c22b79283b4b3fe917653f57a4e800ffc69b72b1b3040df623f82742"], 0x354}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x2}}) r6 = memfd_secret(0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r6) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) socket$caif_stream(0x25, 0x1, 0x1000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="196dfccb73d4054326cd1fd9e2d7a80324741a492757daf6068dba5231127a9ff036ea71584437def515a00720e3a534", @ANYRES32=r11, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 4.246127672s ago: executing program 0 (id=659): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) listen(r0, 0x0) accept4$nfc_llcp(r0, 0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1a00) epoll_create1(0x80000) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$RTC_PIE_ON(r2, 0x7005) r3 = syz_io_uring_setup(0x680b, &(0x7f00000006c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)=0x0) syz_io_uring_setup(0x5e2, &(0x7f0000000200)={0x0, 0x200004, 0x0, 0x40010000, 0x85}, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4}) io_uring_enter(r3, 0x381b, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000000c0)=0x2004) r7 = fcntl$dupfd(r6, 0x0, r6) readv(r7, &(0x7f0000000000)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x20000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r8, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848120000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000140)='./control\x00', 0x0) mount$afs(0x0, &(0x7f00000000c0)='./control\x00', &(0x7f0000000100), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='\x00!\x00\x00\x00']) 4.200631231s ago: executing program 2 (id=660): syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) syz_open_dev$vcsn(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r3 = open(&(0x7f0000000280)='./file1\x00', 0x0, 0x0) mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f00000003c0)='./bus\x00') linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x0) read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000040)=0x1) ioctl$TCSETS(r4, 0x89f2, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, "bb5dee00"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, 0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f00000001c0), &(0x7f00000000c0)=0xc) 3.634312573s ago: executing program 2 (id=661): r0 = getpgrp(0x0) prlimit64(r0, 0x1, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x0, 0x3}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$AUDIT_ADD_RULE(r2, 0x0, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d02"], 0x17) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x4) r5 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r5) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) 3.484629626s ago: executing program 3 (id=662): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x300, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x61) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) 3.325148549s ago: executing program 0 (id=663): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000009c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mpls={0x30, 0x1, 0x0, 0x0, {{0x9}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000000)={0x2, @pix={0x0, 0x3, 0x36314d59, 0x0, 0xf, 0x4, 0xc, 0x7, 0x0, 0x2, 0x0, 0x2}}) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000100)={0xffff, 0x2, 0x4, 0x0, 0x8}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000140), 0xc00, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000005c0)={'batadv0\x00'}) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) move_mount(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, 0x0, 0x0) open_tree(r4, &(0x7f0000000300)='./file0\x00', 0x89000) syz_init_net_socket$nfc_raw(0x27, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r5 = io_uring_setup(0x4f85, &(0x7f0000000080)={0x0, 0x8dd5, 0x0, 0x2, 0x0, 0x0, r4}) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) ioctl$CDROMPLAYTRKIND(r2, 0x5304, &(0x7f0000000380)={0x0, 0x0, 0x1}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r6}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) 2.62560652s ago: executing program 2 (id=664): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010001040000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f08000340"], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073"], 0x7c}}, 0x0) readv(r3, &(0x7f0000000380)=[{&(0x7f0000000340)=""/22, 0x16}], 0x1) process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x146) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40012103, &(0x7f0000004a40)={0x77359400}) madvise(&(0x7f000022b000/0x4000)=nil, 0x4000, 0x15) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r6 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7ffc, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r6, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1}) ioctl$vim2m_VIDIOC_STREAMOFF(r6, 0x40045612, &(0x7f0000000000)=0x1) ioctl$vim2m_VIDIOC_DQBUF(r6, 0xc0585611, &(0x7f0000000200)=@overlay={0x0, 0x1, 0x4, 0x800, 0x0, {}, {0x0, 0x0, 0x1, 0x0, 0x4, 0x0, "12848098"}, 0x840}) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) r8 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r8, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) read$FUSE(r6, &(0x7f0000003800)={0x2020}, 0x2020) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], 0x40}}, 0x0) 2.351869552s ago: executing program 0 (id=665): mkdir(0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setrlimit(0x8, &(0x7f00000000c0)={0x10000}) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) socket(0x1, 0x80000, 0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getpid() r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r1, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) sendto$inet6(r1, &(0x7f00000000c0), 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000004c0)='k', 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000001a00)=""/4099, 0x1003}], 0x1}}], 0x1003, 0x10122, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) sendmsg$sock(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000500)="c4", 0x1}], 0x1}, 0x0) recvmmsg(r1, &(0x7f0000000bc0), 0x0, 0x122, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) rseq(0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) 1.864501461s ago: executing program 2 (id=666): r0 = getpgrp(0x0) prlimit64(r0, 0x1, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, &(0x7f00000001c0)=""/45, 0x2d, 0x40000140, 0x0, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$UHID_GET_REPORT_REPLY(0xffffffffffffffff, &(0x7f00000000c0)={0xa, {0x0, 0x3}}, 0xa) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$AUDIT_ADD_RULE(r2, 0x0, 0x4000041) sendmsg$kcm(r3, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x25000000) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_MODE_SETPROPERTY(0xffffffffffffffff, 0xc01064ab, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="02c90012000e00050018010a0000dd3c0d02"], 0x17) r4 = dup(0xffffffffffffffff) ioctl$VIDIOC_QUERYBUF_DMABUF(r4, 0xc0585609, 0x0) sendmsg$NL80211_CMD_SET_BSS(0xffffffffffffffff, &(0x7f00000014c0)={&(0x7f0000001380), 0xc, &(0x7f0000001480)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r2) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(0x0, 0x4) r5 = add_key$keyring(&(0x7f00000021c0), &(0x7f0000002200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, &(0x7f00000002c0)="97", 0x1, r5) r7 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r7, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r6}) keyctl$KEYCTL_MOVE(0x1e, r6, r5, r7, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) 1.395539352s ago: executing program 1 (id=667): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) futex(&(0x7f000000cffc), 0x9, 0x0, 0x0, 0x0, 0xfffffffe) futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f000000cffc), 0xa, 0x0, 0x0, 0x0, 0x1) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_KEY(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080026bd7000fcdbdf25090000000c00990002000000620000000f000a00afbddc2ec2c44bd2bb88ac000800090001ac0f0009000700be6d61881a000000c5f1c1ee26f31a8f94aa6f55493f451128e6f1c8d8e2f3679a5c9e85e568b9d8d4"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r3, 0x0, r2, 0x0, 0xffffffffffffffff, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080200000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705200008000000850000000c00000095"], &(0x7f0000000300)='GPL\x00', 0x3f, 0xff7, &(0x7f0000001e00)=""/4087, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff7d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe00) r5 = syz_io_uring_setup(0x16d2, &(0x7f0000000080)={0x0, 0xfffffffe, 0x1}, &(0x7f0000000040), &(0x7f0000000140)) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10, r5, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r7, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) timer_create(0x4, &(0x7f00000005c0)={0x0, 0x41, 0x1, @thr={&(0x7f0000000580)="0f6612330840716f7538b3ce57a3590b60448be9c13074d6011ef88e97e4109fbf2d1f32e111677699729ef19692bf45", &(0x7f00000006c0)="da5f44633ebf8b0be4d08536b1e25133e6112d0335c251c94ac53e40d71944b775b1bfd6483b7ea01f1982d4bbbbe331b81f71eb536a206fda7c527282a76e3ce55a260a052d623275315d6a1d7d68843c59e04cf02d82d363c17961b0e5847c33e9aa6fea7e35e5bdf4941940826cbcd9e2bc6790925a075de372d65d387784e639bfe936cae72aae173ad1edcf538acb7602d79e23d2db6264bd6c0923c32fd08cf0cfd7ed1fc7a20ff574209fb58101ed9df69b23c3cbc668703a206c9f2025e5dfadb9fcd51edde7a7666cbcca0b"}}, &(0x7f0000000600)) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) accept4(r7, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r6, &(0x7f0000000540)={0x90000001}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffdff}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff0010}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x16}]}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f00000000c0)={0x48, 0x7, r0, 0x0, 0x10001, 0x0, 0x3, 0x1a002d, 0x27e1a9}) pwrite64(r4, &(0x7f0000000200)="7f8c56d0d4c834b6a658f327f1473f61bfa54ed9cf4f0a94f696b2434f21b7fba2045ac7422baa8010ed7061c27d2fb62b93f5dd5925b9aeebb3f9accd84935e0ad18b4cd4f1ba046bf9017c234bb7d171bd64e72a3a500bd33b86", 0x5b, 0xfffffffffffffffa) 1.366154019s ago: executing program 0 (id=668): getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8}, @TCA_CAKE_OVERHEAD={0x8}]}}]}, 0x44}}, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000240)=0x214) r5 = open$dir(&(0x7f0000000000)='./file0\x00', 0x10907e, 0x0) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149282, 0x0) write$cgroup_int(r6, &(0x7f0000000040), 0x12) sendfile(r5, r6, 0x0, 0x4) read(r1, &(0x7f0000000080)=""/241, 0xf1) ioctl$TCSETAF(r1, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, "9f762f0bc5e584a2"}) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x0, 0x43) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000100)='c:::\x00', 0x0) open(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) unshare(0x0) 965.419111ms ago: executing program 3 (id=669): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000280)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$FUSE_LK(r0, &(0x7f00000002c0)={0x28, 0xfffffffffffffffe, 0x0, {{0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0x28) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000006a006bb2"], 0x20}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000002140)={'wg2\x00'}) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newnexthop={0x18, 0x68, 0x1}, 0x18}}, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000d00)={0x80000000, [], 0x6, "2e4c86b1e7fe91"}) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x1b, 0x3, &(0x7f00000000c0)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x7}, @jmp={0x5, 0x0, 0x0, 0xa, 0x4, 0xfffffffffffffff8, 0xfffffffffffffffc}], &(0x7f0000000180)='GPL\x00', 0x81, 0x0, 0x0, 0x40f00, 0x4c, '\x00', 0x0, @fallback=0x1, r0, 0x8, &(0x7f0000000300)={0x5, 0x4}, 0x8, 0x10, &(0x7f00000003c0)={0x0, 0xb, 0x1, 0x1}, 0x10, 0x0, r1, 0x9, &(0x7f0000000400)=[r0, r1, r2, r1, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x3, 0x1, 0x1}, {0x1, 0x3, 0x10, 0x2}, {0x5, 0x2, 0xe, 0x9}, {0x1, 0x1, 0xc, 0x3}, {0x4, 0x3, 0xe, 0xa}, {0x1, 0x4, 0x0, 0x8}, {0x0, 0x1, 0xa, 0x9}, {0x2, 0x5, 0x7, 0x6}, {0x1, 0x1, 0xb, 0xc}], 0x10, 0xfffffbe9, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000040)={0x6, 0xb87}) socket$nl_route(0x10, 0x3, 0x0) futex_waitv(&(0x7f0000001b00)=[{0x0, &(0x7f0000000080), 0x2}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000100), 0x2}, {0x0, &(0x7f0000000140), 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x81, &(0x7f0000000200), 0x2}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000280), 0x2}, {0x0, &(0x7f00000002c0), 0x2}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000340), 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000480), 0x2}, {0x0, &(0x7f00000004c0), 0x82}, {0x0, &(0x7f0000000500), 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000440), 0x2}, {0x0, 0x0, 0x82}, {0x0, &(0x7f00000006c0), 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000780), 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000840), 0x82}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000640), 0x2}, {0x0, &(0x7f0000000900), 0x2}, {0x0, &(0x7f0000000940), 0x2}, {0xff, &(0x7f0000000980), 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000a40), 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, &(0x7f0000000b80), 0x2}, {0x0, &(0x7f0000000bc0), 0x2}, {0x0, &(0x7f0000000c00), 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0xfffffffffffffffe, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x82}, {0x0, 0x0, 0x2}], 0x3c, 0x0, 0x0, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0xc8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$MSR(0x0, 0x0, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001140)={[0xfffffffffffffff5]}, 0x8, 0x0) 964.800195ms ago: executing program 2 (id=670): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000080)={'veth0_macvtap\x00', {0x2, 0x0, @loopback}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x65, &(0x7f00000000c0)=0x6, 0x4) socket$phonet_pipe(0x23, 0x5, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="54030000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="360333008000000008021100000108021100000150505050505000000000000000000000000000000100030100058c0000009af6da3eccb31dfdb01e6e7177c98c64430a038b1a5dfa035ea7a9381b60d5573f7a471f2255656c6fda4f9fe2a1cefb7e307f95a05deb88da8d6767435855a59a04759977ef1cf00cf302f452d67e80c72e836d0cfcfd95ca366d0e284f1c03058e40a2283bb06b723df5c6eef98646cae544fd4eebdf5effc6f1ba5debee4b327b120000000000003c04000000007606000000000000ddb731851c27f0515dccb7554d54162c7b9db37edff2415d5589b53027d4db2f9527a9858f2910b19c7737136d933c4cb8b186a2cb77d33dc186120309d0107aae1822ca939dc8887e8bcc0f1b2831ed25db982a9cd8fcd5160c5cdc0cbe25dce28dc9925779fc4799284de17406d9ac3b5e35515e37ca05000000000000000a5d5addb3184fec9543e41f70eb1bcd9a87da54ab8f09ec2f4b39e15dca2e549f43749fdc5d2150d9349f08894e39ac26f6ddba1cb11f4c9767b25df19d1cb86cc9f4059996ff0021375555251d74cf6f777d24ac2b13bbd9b9d6f27b608e3a58d27ba7b7e16a8e13f0d8f288fa3e9a5e6c9ba0bd7028c0866f7cec56d3c8963c4d6e991fbd1547b046152bed86b40dc529d6663ed96a2f54759ca9fd484826eaa5b022f53aa9fb6bffaa0370be496fc201cd5b33db589eb87730dee906175a89a626342c521f0b18b5cb5ed9de356bf155e503ca39d841b335dd25523a4aa23e4123ca5c555c2b2bf412911511b4b39a758f6e3a496d64414c19f01ba62cf366dd120941a0e096d40b7d3b60bec79aa8aaa3f566dd3f7b1f666daa2c5732ac642cd918aea5ee68d9287e589b7d5326dd3b2bfb9e3d1679ee7c57f9ddfe7cc62b9e25076e5fbf36bd5882a567a92f5c2ba4e5d1fe2edd0b0da71e815422994325dfecdd6530d8ac98fdedffdf2ad390d8c532101bdebf905f4f96a12b5400578c02f802cac6cefe477c38a52b4fb790de3ab2c08eed8f45baef37217a654a07159fd6efe9fc5a4effdb0327c0802a3a873e92979e62ab34d31a748ae171a86d656075c5a8c88eaba15cdd064f3fef835ea800000038d3b6030000009aab386eddcd74bd0a990a74a32d0520cef4e20037fc14fd1be83b638c04110b784e2038855bc69f536c27031736aac99c9f93b5a8ee8926e1ea777abd21b8a1485c4c183ccbc6c2271c7ccb2c6e47f349ebe91e6d059bab96f492ebb063e42581243ea1fae5d0ba5b9ca3c22b79283b4b3fe917653f57a4e800ffc69b72b1b3040df623f82742"], 0x354}}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ_FIXED={0x4, 0x0, 0x0, @fd, 0x0, 0x20000000, 0x8020, 0x0, 0x0, {0x2}}) r6 = memfd_secret(0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r7 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) fcntl$dupfd(r7, 0x0, r6) ioctl$SCSI_IOCTL_GET_PCI(0xffffffffffffffff, 0x5393, &(0x7f0000000000)) socket$caif_stream(0x25, 0x1, 0x1000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r8 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r8, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) socket$inet6(0xa, 0x800, 0xfffffffb) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="196dfccb73d4054326cd1fd9e2d7a80324741a492757daf6068dba5231127a9ff036ea71584437def515a00720e3a534", @ANYRES32=r11, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) 513.977253ms ago: executing program 1 (id=671): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) sendmmsg$inet(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='B', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'veth0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x38) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, 0x0) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000200)=0x2) read(r7, 0x0, 0x2006) dup2(r7, r6) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 443.790593ms ago: executing program 0 (id=672): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x24000044, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r3, &(0x7f0000000340), &(0x7f0000000040)=@tcp=r2}, 0x20) sendmmsg$inet(r2, &(0x7f0000005740)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='B', 0x1}], 0x1}}], 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000880)={'veth0\x00'}) socket$netlink(0x10, 0x3, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0x38) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7e12ddc5a89047bf00"}) r7 = syz_open_pts(r6, 0x0) ioctl$TIOCSETD(r7, 0x5423, 0x0) read(r7, 0x0, 0x2006) dup2(r7, r6) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES32=r1], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) 0s ago: executing program 2 (id=673): r0 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r1 = dup2(r0, r0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r2, &(0x7f0000000380)='net/hci\x00') recvfrom$unix(r1, &(0x7f00000002c0)=""/177, 0xb1, 0x2002, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r3, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, &(0x7f00000003c0)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x2, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000003400)={0x1, 0x2, 0x8001, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000280)={0x5, 0x3, 0x3}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000007c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=ANY=[@ANYRESDEC=r7, @ANYRES32=r8], 0x38}}, 0x40804) r9 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000240)=0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r12, 0x1, 0x0, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r10}]}, 0x1c}}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x4008032, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) fsmount(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFC_CMD_FW_DOWNLOAD(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fcdbdf25150a00000a0014007770616e3100000008000100", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x20000054}, 0x80) kernel console output (not intermixed with test programs): ng attributes in process `syz.2.322'. [ 146.333207][ T7107] team0: entered promiscuous mode [ 146.334897][ T7107] team_slave_0: entered promiscuous mode [ 146.337155][ T7107] team_slave_1: entered promiscuous mode [ 146.341773][ T7107] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.344337][ T7107] batman_adv: batadv0: Interface activated: team0 [ 146.347256][ T7107] batman_adv: batadv0: Interface deactivated: team0 [ 146.350075][ T7107] batman_adv: batadv0: Removing interface: team0 [ 146.353511][ T7107] bridge0: port 3(team0) entered blocking state [ 146.355996][ T7107] bridge0: port 3(team0) entered disabled state [ 146.359169][ T7107] team0: entered allmulticast mode [ 146.361062][ T7107] team_slave_0: entered allmulticast mode [ 146.363097][ T7107] team_slave_1: entered allmulticast mode [ 146.367072][ T7107] bridge0: port 3(team0) entered blocking state [ 146.369664][ T7107] bridge0: port 3(team0) entered forwarding state [ 146.396701][ T7112] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 146.403896][ T7112] bridge0: port 3(team0) entered disabled state [ 146.407218][ T7112] team0: left allmulticast mode [ 146.411678][ T7112] team_slave_0: left allmulticast mode [ 146.414293][ T7112] team_slave_1: left allmulticast mode [ 146.416338][ T7112] team0: left promiscuous mode [ 146.419061][ T7112] team_slave_0: left promiscuous mode [ 146.421192][ T7112] team_slave_1: left promiscuous mode [ 146.423668][ T7112] bridge0: port 3(team0) entered disabled state [ 146.429087][ T7112] batman_adv: batadv0: Adding interface: team0 [ 146.431485][ T7112] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.441228][ T7112] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 146.448986][ T7112] netlink: 'syz.1.331': attribute type 10 has an invalid length. [ 146.451276][ T7112] netlink: 2 bytes leftover after parsing attributes in process `syz.1.331'. [ 146.454082][ T7112] team0: entered promiscuous mode [ 146.455586][ T7112] team_slave_0: entered promiscuous mode [ 146.457463][ T7112] team_slave_1: entered promiscuous mode [ 146.460922][ T7112] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.463940][ T7112] batman_adv: batadv0: Interface activated: team0 [ 146.465912][ T7112] batman_adv: batadv0: Interface deactivated: team0 [ 146.467868][ T7112] batman_adv: batadv0: Removing interface: team0 [ 146.470282][ T7112] bridge0: port 3(team0) entered blocking state [ 146.472178][ T7112] bridge0: port 3(team0) entered disabled state [ 146.474341][ T7112] team0: entered allmulticast mode [ 146.475841][ T7112] team_slave_0: entered allmulticast mode [ 146.477483][ T7112] team_slave_1: entered allmulticast mode [ 146.480321][ T7112] bridge0: port 3(team0) entered blocking state [ 146.482083][ T7112] bridge0: port 3(team0) entered forwarding state [ 146.758175][ T56] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 146.846672][ T39] audit: type=1326 audit(146.735:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.3.324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ff7def9 code=0x7ffc0000 [ 146.853447][ T39] audit: type=1326 audit(146.735:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.3.324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ff7def9 code=0x7ffc0000 [ 146.859789][ T39] audit: type=1326 audit(146.745:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7113 comm="syz.3.324" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ff7def9 code=0x7ffc0000 [ 146.937713][ T56] usb 5-1: Using ep0 maxpacket: 32 [ 146.949492][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 146.953551][ T56] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 146.956810][ T56] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 146.964502][ T56] usb 5-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 146.968410][ T56] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 146.971844][ T56] usb 5-1: Product: syz [ 146.973484][ T56] usb 5-1: Manufacturer: syz [ 146.975227][ T56] usb 5-1: SerialNumber: syz [ 146.981299][ T7110] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 146.990823][ T56] input: appletouch as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/input/input6 [ 147.003935][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 147.016149][ C0] appletouch 5-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 147.026705][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.3.324'. [ 147.061012][ T7114] netlink: 'syz.3.324': attribute type 1 has an invalid length. [ 147.063059][ T7114] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.324'. [ 149.506248][ T35] usb 5-1: USB disconnect, device number 15 [ 149.536760][ T35] appletouch 5-1:1.0: input: appletouch disconnected [ 149.624072][ T39] kauditd_printk_skb: 149 callbacks suppressed [ 149.624088][ T39] audit: type=1400 audit(149.515:753): avc: denied { ioctl } for pid=7125 comm="syz.1.335" path="socket:[14275]" dev="sockfs" ino=14275 ioctlcmd=0x940a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 149.789053][ T7127] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 149.793068][ T7127] netlink: 'syz.3.326': attribute type 10 has an invalid length. [ 149.810118][ T7127] netlink: 32 bytes leftover after parsing attributes in process `syz.3.326'. [ 149.964843][ T7132] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 149.967240][ T7132] IPv6: NLM_F_CREATE should be set when creating new route [ 149.970221][ T7132] IPv6: NLM_F_CREATE should be set when creating new route [ 149.975413][ T7132] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1539 sclass=netlink_route_socket pid=7132 comm=syz.3.327 [ 150.135932][ T7137] netlink: 24 bytes leftover after parsing attributes in process `syz.3.327'. [ 150.137276][ T7138] serio: Serial port pts0 [ 150.467672][ T58] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 150.626302][ T39] audit: type=1400 audit(150.515:754): avc: denied { ioctl } for pid=7144 comm="syz.1.330" path="socket:[16128]" dev="sockfs" ino=16128 ioctlcmd=0x9367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 150.650717][ T58] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 150.667801][ T58] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 150.677641][ T58] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 150.680814][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.692310][ T58] usb 5-1: rejected 1 configuration due to insufficient available bus power [ 150.711959][ T58] usb 5-1: no configuration chosen from 1 choice [ 150.735381][ T39] audit: type=1400 audit(150.615:755): avc: denied { mount } for pid=7144 comm="syz.1.330" name="/" dev="hugetlbfs" ino=14296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 150.825240][ T39] audit: type=1400 audit(150.715:756): avc: denied { module_request } for pid=7140 comm="syz.2.329" kmod="net-pf-10-proto-0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 150.888775][ T7152] serio: Serial port pts2 [ 151.220558][ T39] audit: type=1400 audit(151.105:757): avc: denied { unmount } for pid=5335 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 151.364278][ T7157] netlink: 'syz.1.333': attribute type 10 has an invalid length. [ 151.370192][ T7157] bridge0: port 3(team0) entered disabled state [ 151.379313][ T7157] team0: left allmulticast mode [ 151.380904][ T7157] team_slave_0: left allmulticast mode [ 151.382667][ T7157] team_slave_1: left allmulticast mode [ 151.385284][ T7157] team0: left promiscuous mode [ 151.387063][ T7157] team_slave_0: left promiscuous mode [ 151.389404][ T7157] team_slave_1: left promiscuous mode [ 151.392289][ T7157] bridge0: port 3(team0) entered disabled state [ 151.404257][ T7157] batman_adv: batadv0: Adding interface: team0 [ 151.406607][ T7157] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.417824][ T7157] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 151.426829][ T7157] netlink: 'syz.1.333': attribute type 10 has an invalid length. [ 151.431697][ T7157] netlink: 2 bytes leftover after parsing attributes in process `syz.1.333'. [ 151.434439][ T7157] team0: entered promiscuous mode [ 151.435823][ T7157] team_slave_0: entered promiscuous mode [ 151.438041][ T7157] team_slave_1: entered promiscuous mode [ 151.441891][ T7157] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.444402][ T7157] batman_adv: batadv0: Interface activated: team0 [ 151.446306][ T7157] batman_adv: batadv0: Interface deactivated: team0 [ 151.449343][ T7157] batman_adv: batadv0: Removing interface: team0 [ 151.452802][ T7157] bridge0: port 3(team0) entered blocking state [ 151.455063][ T7157] bridge0: port 3(team0) entered disabled state [ 151.457340][ T7157] team0: entered allmulticast mode [ 151.459815][ T7157] team_slave_0: entered allmulticast mode [ 151.461475][ T7157] team_slave_1: entered allmulticast mode [ 151.464174][ T7157] bridge0: port 3(team0) entered blocking state [ 151.465985][ T7157] bridge0: port 3(team0) entered forwarding state [ 151.610129][ T39] audit: type=1804 audit(151.505:758): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.334" name="/newroot/83/file1" dev="fuse" ino=1 res=1 errno=0 [ 151.616184][ T39] audit: type=1800 audit(151.505:759): pid=7162 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.334" name="/" dev="fuse" ino=1 res=0 errno=0 [ 152.246148][ T7166] netlink: 'syz.1.336': attribute type 4 has an invalid length. [ 152.286079][ T7166] netlink: 'syz.1.336': attribute type 4 has an invalid length. [ 152.398621][ T39] audit: type=1326 audit(152.295:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7167 comm="syz.2.337" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e057def9 code=0x0 [ 153.085001][ T58] usb 5-1: USB disconnect, device number 16 [ 153.205195][ T39] audit: type=1400 audit(153.095:761): avc: denied { read write } for pid=7176 comm="syz.1.347" name="nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.212803][ T39] audit: type=1400 audit(153.095:762): avc: denied { open } for pid=7176 comm="syz.1.347" path="/dev/nullb0" dev="devtmpfs" ino=693 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.518874][ T7179] vxcan0: tx drop: invalid sa for name 0x0000000000000002 [ 153.522328][ T7179] netlink: 'syz.2.338': attribute type 10 has an invalid length. [ 153.542566][ T7179] netlink: 32 bytes leftover after parsing attributes in process `syz.2.338'. [ 153.850973][ T7189] netlink: 'syz.2.339': attribute type 4 has an invalid length. [ 153.904245][ T7194] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25 (only 8 groups) [ 154.577704][ T35] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 154.779204][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 154.783161][ T35] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 154.801330][ T35] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 154.804604][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.807474][ T35] usb 6-1: Product: syz [ 154.809843][ T35] usb 6-1: Manufacturer: syz [ 154.811559][ T35] usb 6-1: SerialNumber: syz [ 154.818902][ T7208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 154.947743][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 154.947879][ T39] audit: type=1400 audit(154.835:765): avc: denied { setopt } for pid=7215 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 154.966733][ T39] audit: type=1400 audit(154.855:766): avc: denied { getopt } for pid=7215 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 154.983606][ T39] audit: type=1400 audit(154.865:767): avc: denied { read } for pid=7215 comm="syz.0.344" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 155.059694][ T7223] tls_set_device_offload: netdev not found [ 155.061076][ T35] usblp 6-1:1.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 2 vid 0x0525 pid 0xA4A8 [ 155.114500][ T7222] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.345'. [ 155.354913][ T7234] ======================================================= [ 155.354913][ T7234] WARNING: The mand mount option has been deprecated and [ 155.354913][ T7234] and is ignored by this kernel. Remove the mand [ 155.354913][ T7234] option from the mount to silence this warning. [ 155.354913][ T7234] ======================================================= [ 155.354989][ T39] audit: type=1400 audit(155.245:768): avc: denied { remount } for pid=7207 comm="syz.1.342" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 155.368225][ T7234] hugetlbfs: Bad value 'A' for mount option 'nr_inodes' [ 155.368225][ T7234] [ 155.399039][ T7235] serio: Serial port pts1 [ 155.413195][ T39] audit: type=1400 audit(155.305:769): avc: denied { watch } for pid=7207 comm="syz.1.342" path="/proc/330/task" dev="proc" ino=16275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 155.657942][ T35] usb 6-1: USB disconnect, device number 13 [ 155.661958][ T35] usblp0: removed [ 155.815488][ T39] audit: type=1400 audit(155.705:770): avc: denied { write } for pid=7237 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.822960][ T39] audit: type=1400 audit(155.705:771): avc: denied { read } for pid=7237 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 155.966438][ T7243] serio: Serial port pts0 [ 156.294326][ T39] audit: type=1326 audit(156.185:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7245 comm="syz.1.352" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x0 [ 156.307686][ T8] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 156.428287][ T39] audit: type=1400 audit(156.325:773): avc: denied { create } for pid=7245 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 156.511774][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.514688][ T8] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 156.528427][ T8] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 156.532101][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.540099][ T8] usb 7-1: config 0 descriptor?? [ 156.553802][ T39] audit: type=1400 audit(156.445:774): avc: denied { write } for pid=7245 comm="syz.1.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 156.734479][ T7251] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 156.746711][ T7251] bridge0: port 3(team0) entered disabled state [ 156.750426][ T7251] team0: left allmulticast mode [ 156.752359][ T7251] team_slave_0: left allmulticast mode [ 156.754674][ T7251] team_slave_1: left allmulticast mode [ 156.756748][ T7251] team0: left promiscuous mode [ 156.758754][ T7251] team_slave_0: left promiscuous mode [ 156.776047][ T7251] team_slave_1: left promiscuous mode [ 156.778788][ T7251] bridge0: port 3(team0) entered disabled state [ 156.787102][ T7251] batman_adv: batadv0: Adding interface: team0 [ 156.789651][ T7251] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 156.798603][ T7251] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 156.803133][ T7252] netlink: 'syz.0.353': attribute type 10 has an invalid length. [ 156.806962][ T7252] netlink: 2 bytes leftover after parsing attributes in process `syz.0.353'. [ 156.810981][ T7252] team0: entered promiscuous mode [ 156.813051][ T7252] team_slave_0: entered promiscuous mode [ 156.815668][ T7252] team_slave_1: entered promiscuous mode [ 156.820125][ T7252] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.822802][ T7252] batman_adv: batadv0: Interface activated: team0 [ 156.825099][ T7252] batman_adv: batadv0: Interface deactivated: team0 [ 156.827401][ T7252] batman_adv: batadv0: Removing interface: team0 [ 156.831060][ T7252] bridge0: port 3(team0) entered blocking state [ 156.833445][ T7252] bridge0: port 3(team0) entered disabled state [ 156.835897][ T7252] team0: entered allmulticast mode [ 156.838954][ T7252] team_slave_0: entered allmulticast mode [ 156.845650][ T7252] team_slave_1: entered allmulticast mode [ 156.850815][ T7252] bridge0: port 3(team0) entered blocking state [ 156.853198][ T7252] bridge0: port 3(team0) entered forwarding state [ 157.704426][ T7264] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 158.388271][ T7264] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 158.394112][ T7264] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 158.401059][ T7298] netlink: 824 bytes leftover after parsing attributes in process `syz.3.357'. [ 158.486628][ T7301] netlink: 16 bytes leftover after parsing attributes in process `syz.3.357'. [ 158.840039][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 158.842154][ T8] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 158.846986][ T8] usb 7-1: USB disconnect, device number 16 [ 158.942078][ T7312] mkiss: ax0: crc mode is auto. [ 159.111644][ T7316] sctp: [Deprecated]: syz.1.360 (pid 7316) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.111644][ T7316] Use struct sctp_sack_info instead [ 159.590322][ T7330] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 159.592579][ T7330] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 159.595236][ T7330] vhci_hcd vhci_hcd.0: Device attached [ 159.734935][ T7340] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 159.805283][ T7340] bridge0: port 3(team0) entered disabled state [ 159.813735][ T7340] team0: left allmulticast mode [ 159.815960][ T7340] team_slave_0: left allmulticast mode [ 159.818654][ T7340] team_slave_1: left allmulticast mode [ 159.821125][ T7340] team0: left promiscuous mode [ 159.822723][ T7340] team_slave_0: left promiscuous mode [ 159.825581][ T7340] team_slave_1: left promiscuous mode [ 159.829310][ T7340] bridge0: port 3(team0) entered disabled state [ 159.836816][ T7340] batman_adv: batadv0: Adding interface: team0 [ 159.847776][ T7340] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 159.856866][ T7340] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 159.871811][ T7343] netlink: 'syz.0.363': attribute type 10 has an invalid length. [ 159.880035][ T7343] netlink: 2 bytes leftover after parsing attributes in process `syz.0.363'. [ 159.885342][ T7343] team0: entered promiscuous mode [ 159.888230][ T7343] team_slave_0: entered promiscuous mode [ 159.890018][ T7343] team_slave_1: entered promiscuous mode [ 159.893063][ T7343] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.896057][ T7343] batman_adv: batadv0: Interface activated: team0 [ 159.899507][ T7343] batman_adv: batadv0: Interface deactivated: team0 [ 159.902261][ T7343] batman_adv: batadv0: Removing interface: team0 [ 159.906145][ T7343] bridge0: port 3(team0) entered blocking state [ 159.908402][ T7331] vhci_hcd: unknown pdu 1 [ 159.910676][ T7343] bridge0: port 3(team0) entered disabled state [ 159.913793][ T7343] team0: entered allmulticast mode [ 159.915426][ T7343] team_slave_0: entered allmulticast mode [ 159.917228][ T7343] team_slave_1: entered allmulticast mode [ 159.919282][ T45] vhci_hcd: stop threads [ 159.920961][ T7343] bridge0: port 3(team0) entered blocking state [ 159.922666][ T45] vhci_hcd: release socket [ 159.923011][ T7343] bridge0: port 3(team0) entered forwarding state [ 159.926319][ T45] vhci_hcd: disconnect device [ 160.054723][ T1432] usb 16-1: enqueue for inactive port 0 [ 160.752524][ T7351] overlayfs: missing 'workdir' [ 160.754461][ T39] kauditd_printk_skb: 4 callbacks suppressed [ 160.754476][ T39] audit: type=1400 audit(160.645:779): avc: denied { mounton } for pid=7347 comm="syz.1.364" path="/92/file0/bus" dev="ramfs" ino=18435 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 160.764857][ T7352] serio: Serial port pts0 [ 160.821259][ T39] audit: type=1400 audit(160.715:780): avc: denied { nlmsg_write } for pid=7347 comm="syz.1.364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 160.858398][ T1432] usb usb16-port1: attempt power cycle [ 161.147794][ T5409] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 161.202579][ T7361] serio: Serial port pts1 [ 161.348378][ T5409] usb 5-1: no configurations [ 161.349860][ T5409] usb 5-1: can't read configurations, error -22 [ 161.515388][ T5409] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 161.530286][ T1432] usb usb16-port1: unable to enumerate USB device [ 161.547620][ T5398] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 161.699329][ T5409] usb 5-1: no configurations [ 161.701046][ T5409] usb 5-1: can't read configurations, error -22 [ 161.703413][ T5409] usb usb5-port1: attempt power cycle [ 161.751926][ T5398] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 161.761233][ T5398] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 161.764490][ T5398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.780475][ T5398] usb 6-1: config 0 descriptor?? [ 161.791473][ T5398] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 161.929370][ T7374] sctp: [Deprecated]: syz.3.369 (pid 7374) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.929370][ T7374] Use struct sctp_sack_info instead [ 162.137783][ T5409] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 162.185605][ T5409] usb 5-1: no configurations [ 162.187006][ T5409] usb 5-1: can't read configurations, error -22 [ 162.315043][ T7383] sctp: [Deprecated]: syz.2.370 (pid 7383) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.315043][ T7383] Use struct sctp_sack_info instead [ 162.347664][ T5409] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 162.382681][ T5409] usb 5-1: no configurations [ 162.384345][ T5409] usb 5-1: can't read configurations, error -22 [ 162.395152][ T5409] usb usb5-port1: unable to enumerate USB device [ 162.849250][ T7400] sp0: Synchronizing with TNC [ 163.067977][ T39] audit: type=1400 audit(162.955:781): avc: denied { create } for pid=7391 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 163.076043][ T39] audit: type=1400 audit(162.965:782): avc: denied { write } for pid=7391 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 163.245513][ T7412] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 163.250321][ T7412] bridge0: port 3(team0) entered disabled state [ 163.252789][ T7412] team0: left allmulticast mode [ 163.254194][ T7412] team_slave_0: left allmulticast mode [ 163.255818][ T7412] team_slave_1: left allmulticast mode [ 163.257331][ T7412] team0: left promiscuous mode [ 163.258872][ T7412] team_slave_0: left promiscuous mode [ 163.260794][ T7412] team_slave_1: left promiscuous mode [ 163.262669][ T7412] bridge0: port 3(team0) entered disabled state [ 163.269395][ T7412] batman_adv: batadv0: Adding interface: team0 [ 163.271095][ T7412] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 163.277938][ T7412] netlink: 'syz.3.373': attribute type 10 has an invalid length. [ 163.280058][ T7412] netlink: 2 bytes leftover after parsing attributes in process `syz.3.373'. [ 163.282524][ T7412] team0: entered promiscuous mode [ 163.284006][ T7412] team_slave_0: entered promiscuous mode [ 163.285789][ T7412] team_slave_1: entered promiscuous mode [ 163.289402][ T7412] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.291463][ T7412] batman_adv: batadv0: Interface activated: team0 [ 163.293320][ T7412] batman_adv: batadv0: Interface deactivated: team0 [ 163.295169][ T7412] batman_adv: batadv0: Removing interface: team0 [ 163.298718][ T7412] bridge0: port 3(team0) entered blocking state [ 163.301356][ T7412] bridge0: port 3(team0) entered disabled state [ 163.303343][ T7412] team0: entered allmulticast mode [ 163.304940][ T7412] team_slave_0: entered allmulticast mode [ 163.307027][ T7412] team_slave_1: entered allmulticast mode [ 163.310768][ T7412] bridge0: port 3(team0) entered blocking state [ 163.313161][ T7412] bridge0: port 3(team0) entered forwarding state [ 164.048216][ T5398] usb 6-1: USB disconnect, device number 14 [ 164.139886][ T7415] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 164.280569][ T7432] sctp: [Deprecated]: syz.1.376 (pid 7432) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.280569][ T7432] Use struct sctp_sack_info instead [ 165.146035][ T7456] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 165.167625][ T39] audit: type=1400 audit(165.045:783): avc: denied { write } for pid=7452 comm="syz.1.379" name="fb0" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 165.377058][ T7463] serio: Serial port pts0 [ 165.467274][ T7466] netlink: 16 bytes leftover after parsing attributes in process `syz.2.388'. [ 165.721052][ T7469] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.381'. [ 165.889128][ T7473] serio: Serial port pts2 [ 166.217623][ T56] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 166.365749][ T7477] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 166.370575][ T7477] bridge0: port 3(team0) entered disabled state [ 166.373292][ T7477] team0: left allmulticast mode [ 166.375248][ T7477] team_slave_0: left allmulticast mode [ 166.377370][ T7477] team_slave_1: left allmulticast mode [ 166.378995][ T7477] team0: left promiscuous mode [ 166.380402][ T7477] team_slave_0: left promiscuous mode [ 166.382076][ T7477] team_slave_1: left promiscuous mode [ 166.383835][ T7477] bridge0: port 3(team0) entered disabled state [ 166.388063][ T7477] batman_adv: batadv0: Adding interface: team0 [ 166.390617][ T7477] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.400390][ T7477] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 166.401029][ T56] usb 6-1: no configurations [ 166.404840][ T56] usb 6-1: can't read configurations, error -22 [ 166.406880][ T7477] netlink: 'syz.2.383': attribute type 10 has an invalid length. [ 166.409852][ T7477] netlink: 2 bytes leftover after parsing attributes in process `syz.2.383'. [ 166.413776][ T7477] team0: entered promiscuous mode [ 166.415493][ T7477] team_slave_0: entered promiscuous mode [ 166.417119][ T7477] team_slave_1: entered promiscuous mode [ 166.422369][ T7477] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.424881][ T7477] batman_adv: batadv0: Interface activated: team0 [ 166.426826][ T7477] batman_adv: batadv0: Interface deactivated: team0 [ 166.429108][ T7477] batman_adv: batadv0: Removing interface: team0 [ 166.432737][ T7477] bridge0: port 3(team0) entered blocking state [ 166.435465][ T7477] bridge0: port 3(team0) entered disabled state [ 166.437954][ T7477] team0: entered allmulticast mode [ 166.439836][ T7477] team_slave_0: entered allmulticast mode [ 166.441913][ T7477] team_slave_1: entered allmulticast mode [ 166.446651][ T7477] bridge0: port 3(team0) entered blocking state [ 166.449060][ T7477] bridge0: port 3(team0) entered forwarding state [ 166.567703][ T56] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 166.665974][ T7480] serio: Serial port pts1 [ 166.750394][ T56] usb 6-1: no configurations [ 166.752088][ T56] usb 6-1: can't read configurations, error -22 [ 166.757020][ T56] usb usb6-port1: attempt power cycle [ 167.007668][ T4515] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 167.151910][ T39] audit: type=1326 audit(167.045:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7482 comm="syz.2.385" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e057def9 code=0x0 [ 167.167775][ T56] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 167.200924][ T56] usb 6-1: no configurations [ 167.202309][ T56] usb 6-1: can't read configurations, error -22 [ 167.207500][ T4515] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 167.210898][ T4515] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 167.214395][ T4515] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 167.216943][ T4515] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.222959][ T4515] usb 5-1: config 0 descriptor?? [ 167.367666][ T56] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 167.400320][ T56] usb 6-1: no configurations [ 167.402150][ T56] usb 6-1: can't read configurations, error -22 [ 167.408021][ T56] usb usb6-port1: unable to enumerate USB device [ 167.673858][ T4515] usbhid 5-1:0.0: can't add hid device: -71 [ 167.678678][ T4515] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 167.686553][ T4515] usb 5-1: USB disconnect, device number 21 [ 168.393631][ T7492] sctp: [Deprecated]: syz.2.387 (pid 7492) Use of struct sctp_assoc_value in delayed_ack socket option. [ 168.393631][ T7492] Use struct sctp_sack_info instead [ 169.138206][ T7526] netlink: 16 bytes leftover after parsing attributes in process `syz.2.392'. [ 169.267066][ T7533] sctp: [Deprecated]: syz.0.393 (pid 7533) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.267066][ T7533] Use struct sctp_sack_info instead [ 169.313748][ T7535] tls_set_device_offload: netdev not found [ 170.166481][ T7562] serio: Serial port pts0 [ 170.188601][ T7563] netlink: 'syz.3.396': attribute type 4 has an invalid length. [ 170.226635][ T7563] netlink: 'syz.3.396': attribute type 4 has an invalid length. [ 170.507691][ T35] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 170.705838][ T7577] serio: Serial port pts1 [ 170.707624][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.711345][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 170.715929][ T35] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 170.719856][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.732142][ T35] usb 7-1: config 0 descriptor?? [ 170.744577][ T35] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 171.047655][ T1432] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 171.232489][ T1432] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 171.234711][ T1432] usb 6-1: can't read configurations, error -61 [ 171.355481][ T7587] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 171.397847][ T1432] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 171.627657][ T1432] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 171.629753][ T1432] usb 6-1: can't read configurations, error -61 [ 171.631713][ T1432] usb usb6-port1: attempt power cycle [ 171.966053][ T7597] netlink: 'syz.0.401': attribute type 10 has an invalid length. [ 171.987296][ T7597] kAFS: No cell specified [ 172.057639][ T1432] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 172.106581][ T1432] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 172.109628][ T1432] usb 6-1: can't read configurations, error -61 [ 172.257912][ T1432] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 172.294400][ T1432] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 172.296732][ T1432] usb 6-1: can't read configurations, error -61 [ 172.300512][ T1432] usb usb6-port1: unable to enumerate USB device [ 172.851494][ T7604] netlink: 16 bytes leftover after parsing attributes in process `syz.0.404'. [ 172.903180][ T7605] serio: Serial port pts2 [ 172.975992][ T56] usb 7-1: USB disconnect, device number 17 [ 173.133094][ T7609] sctp: [Deprecated]: syz.2.405 (pid 7609) Use of struct sctp_assoc_value in delayed_ack socket option. [ 173.133094][ T7609] Use struct sctp_sack_info instead [ 173.825365][ T7637] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 173.838720][ T7637] bridge0: port 3(team0) entered disabled state [ 173.848429][ T7637] team0: left allmulticast mode [ 173.851949][ T7637] team_slave_0: left allmulticast mode [ 173.856111][ T7637] team_slave_1: left allmulticast mode [ 173.858134][ T7637] team0: left promiscuous mode [ 173.863527][ T7637] team_slave_0: left promiscuous mode [ 173.867023][ T7637] team_slave_1: left promiscuous mode [ 173.880723][ T7637] bridge0: port 3(team0) entered disabled state [ 173.953949][ T7637] batman_adv: batadv0: Adding interface: team0 [ 173.959776][ T7637] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.970508][ T7637] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 173.979598][ T7642] netlink: 'syz.0.408': attribute type 10 has an invalid length. [ 173.982079][ T7642] netlink: 2 bytes leftover after parsing attributes in process `syz.0.408'. [ 173.986016][ T7642] team0: entered promiscuous mode [ 173.992689][ T7642] team_slave_0: entered promiscuous mode [ 173.996249][ T7642] team_slave_1: entered promiscuous mode [ 174.007048][ T7642] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.010863][ T7642] batman_adv: batadv0: Interface activated: team0 [ 174.013483][ T7642] batman_adv: batadv0: Interface deactivated: team0 [ 174.016192][ T7642] batman_adv: batadv0: Removing interface: team0 [ 174.025350][ T7642] bridge0: port 3(team0) entered blocking state [ 174.028239][ T7642] bridge0: port 3(team0) entered disabled state [ 174.032283][ T7642] team0: entered allmulticast mode [ 174.034002][ T7642] team_slave_0: entered allmulticast mode [ 174.036042][ T7642] team_slave_1: entered allmulticast mode [ 174.052374][ T7642] bridge0: port 3(team0) entered blocking state [ 174.054906][ T7642] bridge0: port 3(team0) entered forwarding state [ 174.664279][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 174.666655][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.409'. [ 174.680119][ T7660] binder: 7655:7660 ioctl c018620c 20000140 returned -22 [ 175.561312][ T7677] vivid-000: ================= START STATUS ================= [ 175.564344][ T7677] vivid-000: Radio HW Seek Mode: Bounded [ 175.566750][ T7677] vivid-000: Radio Programmable HW Seek: false [ 175.570612][ T7677] vivid-000: RDS Rx I/O Mode: Block I/O [ 175.572773][ T7677] vivid-000: Generate RBDS Instead of RDS: false [ 175.583381][ T7677] vivid-000: RDS Reception: true [ 175.585973][ T7677] vivid-000: RDS Program Type: 0 inactive [ 175.588755][ T7677] vivid-000: RDS PS Name: inactive [ 175.591663][ T7677] vivid-000: RDS Radio Text: inactive [ 175.594266][ T7677] vivid-000: RDS Traffic Announcement: false inactive [ 175.597441][ T7677] vivid-000: RDS Traffic Program: false inactive [ 175.599823][ T7677] vivid-000: RDS Music: false inactive [ 175.602477][ T7677] vivid-000: ================== END STATUS ================== [ 175.638021][ T7678] serio: Serial port pts0 [ 175.854480][ T7683] serio: Serial port pts1 [ 176.007831][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 176.197773][ T58] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 176.259600][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.263792][ T10] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.267333][ T10] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.271401][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.280373][ T10] usb 5-1: config 0 descriptor?? [ 176.289531][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 176.393993][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.396896][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 176.403197][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 176.405652][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 176.417841][ T58] usb 6-1: config 0 descriptor?? [ 177.032671][ T7691] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 177.284505][ T7698] tls_set_device_offload: netdev not found [ 177.293191][ T58] usbhid 6-1:0.0: can't add hid device: -71 [ 177.295495][ T58] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 177.303469][ T58] usb 6-1: USB disconnect, device number 23 [ 177.355476][ T7696] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 177.935970][ T7716] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 177.942838][ T7716] bridge0: port 3(team0) entered disabled state [ 177.946591][ T7716] team0: left allmulticast mode [ 177.950387][ T7716] team_slave_0: left allmulticast mode [ 177.952949][ T7716] team_slave_1: left allmulticast mode [ 177.955704][ T7716] team0: left promiscuous mode [ 177.957492][ T7716] team_slave_0: left promiscuous mode [ 177.961789][ T7716] team_slave_1: left promiscuous mode [ 177.964421][ T7716] bridge0: port 3(team0) entered disabled state [ 177.977043][ T7716] batman_adv: batadv0: Adding interface: team0 [ 177.980904][ T7716] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.992362][ T7716] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 177.999882][ T7718] netlink: 'syz.1.418': attribute type 10 has an invalid length. [ 178.003964][ T7718] netlink: 2 bytes leftover after parsing attributes in process `syz.1.418'. [ 178.007171][ T7718] team0: entered promiscuous mode [ 178.011887][ T7718] team_slave_0: entered promiscuous mode [ 178.014506][ T7718] team_slave_1: entered promiscuous mode [ 178.021749][ T7718] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.024794][ T7718] batman_adv: batadv0: Interface activated: team0 [ 178.028655][ T7718] batman_adv: batadv0: Interface deactivated: team0 [ 178.031678][ T7718] batman_adv: batadv0: Removing interface: team0 [ 178.036009][ T7718] bridge0: port 3(team0) entered blocking state [ 178.038655][ T7718] bridge0: port 3(team0) entered disabled state [ 178.042022][ T7718] team0: entered allmulticast mode [ 178.043884][ T7718] team_slave_0: entered allmulticast mode [ 178.045802][ T7718] team_slave_1: entered allmulticast mode [ 178.055679][ T7718] bridge0: port 3(team0) entered blocking state [ 178.058282][ T7718] bridge0: port 3(team0) entered forwarding state [ 178.566133][ T56] usb 5-1: USB disconnect, device number 22 [ 178.862394][ T7738] overlayfs: missing 'workdir' [ 179.034649][ T7745] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 179.047472][ T7745] bridge0: port 3(team0) entered disabled state [ 179.054096][ T7745] team0: left allmulticast mode [ 179.055941][ T7745] team_slave_0: left allmulticast mode [ 179.058142][ T7745] team_slave_1: left allmulticast mode [ 179.060243][ T7745] team0: left promiscuous mode [ 179.061928][ T7745] team_slave_0: left promiscuous mode [ 179.063684][ T7745] team_slave_1: left promiscuous mode [ 179.065635][ T7745] bridge0: port 3(team0) entered disabled state [ 179.131081][ T7745] batman_adv: batadv0: Adding interface: team0 [ 179.132853][ T7745] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 179.166563][ T7747] netlink: 'syz.3.421': attribute type 10 has an invalid length. [ 179.176484][ T7747] netlink: 2 bytes leftover after parsing attributes in process `syz.3.421'. [ 179.179463][ T7747] team0: entered promiscuous mode [ 179.180867][ T7747] team_slave_0: entered promiscuous mode [ 179.182847][ T7747] team_slave_1: entered promiscuous mode [ 179.187184][ T7747] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.190060][ T7747] batman_adv: batadv0: Interface activated: team0 [ 179.192071][ T7747] batman_adv: batadv0: Interface deactivated: team0 [ 179.194700][ T7747] batman_adv: batadv0: Removing interface: team0 [ 179.309807][ T7747] bridge0: port 3(team0) entered blocking state [ 179.314061][ T7747] bridge0: port 3(team0) entered disabled state [ 179.316627][ T7747] team0: entered allmulticast mode [ 179.318238][ T7747] team_slave_0: entered allmulticast mode [ 179.327241][ T7747] team_slave_1: entered allmulticast mode [ 179.343382][ T7747] bridge0: port 3(team0) entered blocking state [ 179.345131][ T7747] bridge0: port 3(team0) entered forwarding state [ 179.567041][ T39] audit: type=1400 audit(179.455:785): avc: denied { listen } for pid=7751 comm="syz.0.424" path=2F38372FE91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 179.663268][ T7753] serio: Serial port pts0 [ 180.007666][ T1432] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 180.080317][ T7763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.426'. [ 180.094244][ T39] audit: type=1326 audit(179.985:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7756 comm="syz.3.425" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f865ff74ea7 code=0x0 [ 180.204794][ T1432] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 180.209815][ T1432] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 180.216675][ T1432] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 180.228188][ T1432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 180.238011][ T1432] usb 7-1: config 0 descriptor?? [ 180.247718][ T1432] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 180.701000][ T39] audit: type=1400 audit(180.595:787): avc: denied { read } for pid=7770 comm="syz.1.428" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 180.709780][ T39] audit: type=1400 audit(180.595:788): avc: denied { open } for pid=7770 comm="syz.1.428" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 181.044090][ T39] audit: type=1400 audit(180.915:789): avc: denied { create } for pid=7777 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 181.083177][ T7776] sctp: [Deprecated]: syz.3.429 (pid 7776) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.083177][ T7776] Use struct sctp_sack_info instead [ 181.209661][ T39] audit: type=1400 audit(181.105:790): avc: denied { write } for pid=7777 comm="syz.1.430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 181.225436][ T7779] kAFS: unparsable volume name [ 181.272706][ T39] audit: type=1400 audit(181.145:791): avc: denied { execute } for pid=7777 comm="syz.1.430" name="file0" dev="ramfs" ino=18910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 181.281215][ T39] audit: type=1400 audit(181.155:792): avc: denied { execute_no_trans } for pid=7777 comm="syz.1.430" path="/file0" dev="ramfs" ino=18910 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 182.002494][ T39] audit: type=1400 audit(181.895:793): avc: denied { map } for pid=7794 comm="syz.3.432" path="/dev/usbmon0" dev="devtmpfs" ino=723 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 182.720189][ T1432] usb 7-1: USB disconnect, device number 18 [ 182.735458][ T7801] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 182.757658][ T7801] bridge0: port 3(team0) entered disabled state [ 182.770827][ T7801] team0: left allmulticast mode [ 182.772279][ T7801] team_slave_0: left allmulticast mode [ 182.773800][ T7801] team_slave_1: left allmulticast mode [ 182.775315][ T7801] team0: left promiscuous mode [ 182.776650][ T7801] team_slave_0: left promiscuous mode [ 182.778466][ T7801] team_slave_1: left promiscuous mode [ 182.793218][ T7801] bridge0: port 3(team0) entered disabled state [ 182.798576][ T7801] batman_adv: batadv0: Adding interface: team0 [ 182.800519][ T7801] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.807279][ T7801] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 182.811691][ T7806] netlink: 'syz.0.433': attribute type 10 has an invalid length. [ 182.814308][ T7806] netlink: 2 bytes leftover after parsing attributes in process `syz.0.433'. [ 182.821795][ T7806] team0: entered promiscuous mode [ 182.823215][ T7806] team_slave_0: entered promiscuous mode [ 182.824845][ T7806] team_slave_1: entered promiscuous mode [ 182.829707][ T7806] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.833355][ T7806] batman_adv: batadv0: Interface activated: team0 [ 182.836021][ T7806] batman_adv: batadv0: Interface deactivated: team0 [ 182.839016][ T7806] batman_adv: batadv0: Removing interface: team0 [ 182.843300][ T7806] bridge0: port 3(team0) entered blocking state [ 182.845719][ T7806] bridge0: port 3(team0) entered disabled state [ 182.851649][ T7806] team0: entered allmulticast mode [ 182.853625][ T7806] team_slave_0: entered allmulticast mode [ 182.855885][ T7806] team_slave_1: entered allmulticast mode [ 182.875544][ T7806] bridge0: port 3(team0) entered blocking state [ 182.877932][ T7806] bridge0: port 3(team0) entered forwarding state [ 183.413115][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 183.417290][ T7817] netlink: 8 bytes leftover after parsing attributes in process `syz.1.436'. [ 183.445832][ T7817] binder: 7812:7817 ioctl c018620c 20000140 returned -22 [ 183.471413][ T7818] sctp: [Deprecated]: syz.2.437 (pid 7818) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.471413][ T7818] Use struct sctp_sack_info instead [ 183.590851][ T39] audit: type=1400 audit(183.485:794): avc: denied { append } for pid=7819 comm="syz.3.438" name="001" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 184.262604][ T7848] sctp: [Deprecated]: syz.0.440 (pid 7848) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.262604][ T7848] Use struct sctp_sack_info instead [ 184.825737][ T7872] serio: Serial port pts1 [ 184.870508][ T7857] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 185.535315][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.0.444'. [ 185.548004][ T39] kauditd_printk_skb: 2 callbacks suppressed [ 185.548014][ T39] audit: type=1400 audit(185.445:797): avc: denied { setopt } for pid=7885 comm="syz.0.444" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 185.550818][ T7887] netlink: 68 bytes leftover after parsing attributes in process `syz.0.444'. [ 186.147774][ T7891] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 186.536551][ T7896] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 186.542282][ T7896] bridge0: port 3(team0) entered disabled state [ 186.545177][ T7896] team0: left allmulticast mode [ 186.546724][ T7896] team_slave_0: left allmulticast mode [ 186.548996][ T7896] team_slave_1: left allmulticast mode [ 186.552883][ T7896] team0: left promiscuous mode [ 186.554252][ T7896] team_slave_0: left promiscuous mode [ 186.555814][ T7896] team_slave_1: left promiscuous mode [ 186.557602][ T7896] bridge0: port 3(team0) entered disabled state [ 186.564874][ T7896] batman_adv: batadv0: Adding interface: team0 [ 186.566898][ T7896] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.580234][ T7896] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 186.601264][ T7896] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 186.604483][ T7896] netlink: 2 bytes leftover after parsing attributes in process `syz.1.447'. [ 186.608239][ T7896] team0: entered promiscuous mode [ 186.609840][ T7896] team_slave_0: entered promiscuous mode [ 186.611855][ T7896] team_slave_1: entered promiscuous mode [ 186.617422][ T7896] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.619984][ T7896] batman_adv: batadv0: Interface activated: team0 [ 186.621847][ T7896] batman_adv: batadv0: Interface deactivated: team0 [ 186.624169][ T7896] batman_adv: batadv0: Removing interface: team0 [ 186.627939][ T7896] bridge0: port 3(team0) entered blocking state [ 186.633897][ T7896] bridge0: port 3(team0) entered disabled state [ 186.640627][ T7896] team0: entered allmulticast mode [ 186.644793][ T7896] team_slave_0: entered allmulticast mode [ 186.653080][ T7896] team_slave_1: entered allmulticast mode [ 186.659024][ T7896] bridge0: port 3(team0) entered blocking state [ 186.661232][ T7896] bridge0: port 3(team0) entered forwarding state [ 187.397189][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz.1.449'. [ 187.406684][ T7908] netlink: 20 bytes leftover after parsing attributes in process `syz.1.449'. [ 187.621866][ T7912] sctp: [Deprecated]: syz.0.450 (pid 7912) Use of struct sctp_assoc_value in delayed_ack socket option. [ 187.621866][ T7912] Use struct sctp_sack_info instead [ 187.783384][ T7919] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 188.116539][ T7919] bridge0: port 3(team0) entered disabled state [ 188.127954][ T7919] team0: left allmulticast mode [ 188.129867][ T7919] team_slave_0: left allmulticast mode [ 188.132900][ T7919] team_slave_1: left allmulticast mode [ 188.136603][ T7919] team0: left promiscuous mode [ 188.148761][ T7919] team_slave_0: left promiscuous mode [ 188.151448][ T7919] team_slave_1: left promiscuous mode [ 188.153978][ T7919] bridge0: port 3(team0) entered disabled state [ 188.185735][ T7919] batman_adv: batadv0: Adding interface: team0 [ 188.194006][ T7919] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 188.203744][ T7921] netlink: 'syz.3.451': attribute type 10 has an invalid length. [ 188.226259][ T7921] netlink: 2 bytes leftover after parsing attributes in process `syz.3.451'. [ 188.230074][ T7921] team0: entered promiscuous mode [ 188.232066][ T7921] team_slave_0: entered promiscuous mode [ 188.234623][ T7921] team_slave_1: entered promiscuous mode [ 188.243963][ T7921] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.250297][ T7921] batman_adv: batadv0: Interface activated: team0 [ 188.252767][ T7921] batman_adv: batadv0: Interface deactivated: team0 [ 188.256745][ T7921] batman_adv: batadv0: Removing interface: team0 [ 188.267328][ T7921] bridge0: port 3(team0) entered blocking state [ 188.269989][ T7921] bridge0: port 3(team0) entered disabled state [ 188.272654][ T7921] team0: entered allmulticast mode [ 188.274570][ T7921] team_slave_0: entered allmulticast mode [ 188.276726][ T7921] team_slave_1: entered allmulticast mode [ 188.284506][ T7921] bridge0: port 3(team0) entered blocking state [ 188.286925][ T7921] bridge0: port 3(team0) entered forwarding state [ 188.560637][ T7935] netlink: 16 bytes leftover after parsing attributes in process `syz.2.453'. [ 188.718418][ T7933] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 188.819434][ T39] audit: type=1326 audit(188.715:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7938 comm="syz.0.454" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f882eb7def9 code=0x0 [ 188.991583][ T7948] blk_print_req_error: 21 callbacks suppressed [ 188.991596][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.007808][ T7948] buffer_io_error: 20 callbacks suppressed [ 189.007822][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.012084][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.014789][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.016987][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.023509][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.028319][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.031656][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.034656][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.038473][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.041896][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.045217][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.049945][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.053265][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.058088][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.061593][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.064673][ T7948] ldm_validate_partition_table(): Disk read failed. [ 189.067246][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.070996][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.078786][ T7948] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 189.083520][ T7948] Buffer I/O error on dev nbd1, logical block 0, async page read [ 189.086859][ T7948] Dev nbd1: unable to read RDB block 0 [ 189.090600][ T7948] nbd1: unable to read partition table [ 189.093095][ T7948] nbd1: partition table beyond EOD, truncated [ 189.190647][ T7949] syzkaller1: entered promiscuous mode [ 189.192271][ T7949] syzkaller1: entered allmulticast mode [ 189.199623][ T7949] netlink: 20 bytes leftover after parsing attributes in process `syz.1.456'. [ 189.659517][ T7959] mkiss: ax0: crc mode is auto. [ 189.928511][ T39] audit: type=1326 audit(189.825:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7961 comm="syz.3.459" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865ff7def9 code=0x0 [ 190.171952][ T7973] block device autoloading is deprecated and will be removed. [ 191.189894][ T7984] sctp: [Deprecated]: syz.1.463 (pid 7984) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.189894][ T7984] Use struct sctp_sack_info instead [ 191.946183][ T8004] netlink: 16 bytes leftover after parsing attributes in process `syz.3.465'. [ 192.851498][ T39] audit: type=1326 audit(192.745:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.867308][ T39] audit: type=1326 audit(192.755:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.880408][ T39] audit: type=1326 audit(192.755:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.883618][ T8044] sctp: [Deprecated]: syz.2.469 (pid 8044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.883618][ T8044] Use struct sctp_sack_info instead [ 192.894191][ T39] audit: type=1326 audit(192.755:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.901584][ T39] audit: type=1326 audit(192.755:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.931918][ T39] audit: type=1326 audit(192.775:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=442 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.948006][ T39] audit: type=1326 audit(192.775:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.964063][ T39] audit: type=1326 audit(192.775:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.976733][ T39] audit: type=1326 audit(192.785:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 192.987962][ T39] audit: type=1326 audit(192.785:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8030 comm="syz.1.475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 194.270885][ T1380] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.273373][ T1380] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.028686][ T8106] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 195.808987][ T8114] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 195.834818][ T8114] bridge0: port 3(team0) entered disabled state [ 195.841537][ T8114] team0: left allmulticast mode [ 195.841623][ T8114] team_slave_0: left allmulticast mode [ 195.841705][ T8114] team_slave_1: left allmulticast mode [ 195.841788][ T8114] team0: left promiscuous mode [ 195.841865][ T8114] team_slave_0: left promiscuous mode [ 195.843132][ T8114] team_slave_1: left promiscuous mode [ 195.845254][ T8114] bridge0: port 3(team0) entered disabled state [ 195.900973][ T8114] batman_adv: batadv0: Adding interface: team0 [ 195.900989][ T8114] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.901071][ T8114] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 195.904449][ T8120] netlink: 'syz.0.480': attribute type 10 has an invalid length. [ 195.904463][ T8120] netlink: 2 bytes leftover after parsing attributes in process `syz.0.480'. [ 195.904804][ T8120] team0: entered promiscuous mode [ 195.904935][ T8120] team_slave_0: entered promiscuous mode [ 195.905172][ T8120] team_slave_1: entered promiscuous mode [ 195.912786][ T8120] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.913846][ T8120] batman_adv: batadv0: Interface activated: team0 [ 195.913913][ T8120] batman_adv: batadv0: Interface deactivated: team0 [ 195.913930][ T8120] batman_adv: batadv0: Removing interface: team0 [ 195.914939][ T8120] bridge0: port 3(team0) entered blocking state [ 195.915168][ T8120] bridge0: port 3(team0) entered disabled state [ 195.915312][ T8120] team0: entered allmulticast mode [ 195.915322][ T8120] team_slave_0: entered allmulticast mode [ 195.915330][ T8120] team_slave_1: entered allmulticast mode [ 195.916933][ T8120] bridge0: port 3(team0) entered blocking state [ 195.916991][ T8120] bridge0: port 3(team0) entered forwarding state [ 196.650088][ T8125] sctp: [Deprecated]: syz.1.481 (pid 8125) Use of struct sctp_assoc_value in delayed_ack socket option. [ 196.650088][ T8125] Use struct sctp_sack_info instead [ 196.860072][ T8136] ptrace attach of "/syz-executor exec"[5636] was attempted by "/syz-executor exec"[8136] [ 196.918462][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.0.483'. [ 197.750683][ T8174] sctp: [Deprecated]: syz.1.494 (pid 8174) Use of struct sctp_assoc_value in delayed_ack socket option. [ 197.750683][ T8174] Use struct sctp_sack_info instead [ 199.128057][ T8202] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 199.400392][ T5406] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 199.609750][ T5406] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 199.614079][ T5406] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 199.617327][ T5406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.628271][ T5406] usb 5-1: config 0 descriptor?? [ 199.639084][ T5406] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 199.906513][ T8217] serio: Serial port pts2 [ 200.237669][ T1432] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 200.435144][ T1432] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 200.435191][ T1432] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 200.435212][ T1432] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 200.444955][ T1432] usb 7-1: config 0 descriptor?? [ 200.450083][ T1432] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 201.139013][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 201.139029][ T39] audit: type=1326 audit(201.025:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8221 comm="syz.3.495" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f865ff74ea7 code=0x0 [ 201.666886][ T39] audit: type=1400 audit(201.555:819): avc: denied { write } for pid=8229 comm="syz.1.496" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 201.892327][ T58] usb 5-1: USB disconnect, device number 23 [ 201.939921][ T8234] sctp: [Deprecated]: syz.3.497 (pid 8234) Use of struct sctp_assoc_value in delayed_ack socket option. [ 201.939921][ T8234] Use struct sctp_sack_info instead [ 202.303443][ T39] audit: type=1400 audit(202.195:820): avc: denied { read } for pid=8235 comm="syz.0.498" path="socket:[21841]" dev="sockfs" ino=21841 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 202.701510][ T1432] usb 7-1: USB disconnect, device number 19 [ 202.847845][ T8276] serio: Serial port pts0 [ 203.207634][ T6526] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 203.358998][ T8282] autofs: Bad value for 'fd' [ 203.367182][ T39] audit: type=1400 audit(203.255:821): avc: denied { write } for pid=8281 comm="syz.3.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 203.410844][ T6526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.413709][ T6526] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 203.418313][ T6526] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 203.420796][ T6526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.424138][ T6526] usb 6-1: config 0 descriptor?? [ 203.466812][ T8285] usb usb9: check_ctrlrecip: process 8285 (syz.3.501) requesting ep 01 but needs 81 [ 203.471000][ T8285] usb usb9: usbfs: process 8285 (syz.3.501) did not claim interface 0 before use [ 203.753359][ T8288] netlink: 'syz.0.502': attribute type 7 has an invalid length. [ 203.756416][ T8288] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.502'. [ 204.100417][ T8291] netlink: 16 bytes leftover after parsing attributes in process `syz.3.503'. [ 204.500377][ T6526] usbhid 6-1:0.0: can't add hid device: -71 [ 204.502463][ T6526] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 204.521148][ T8294] kAFS: unparsable volume name [ 204.542219][ T6526] usb 6-1: USB disconnect, device number 24 [ 204.710453][ T39] audit: type=1326 audit(204.605:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8295 comm="syz.0.505" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f882eb74ea7 code=0x0 [ 205.244992][ T8303] sctp: [Deprecated]: syz.3.508 (pid 8303) Use of struct sctp_assoc_value in delayed_ack socket option. [ 205.244992][ T8303] Use struct sctp_sack_info instead [ 205.786684][ T8320] netlink: 12 bytes leftover after parsing attributes in process `syz.2.510'. [ 205.798255][ T8320] netlink: 20 bytes leftover after parsing attributes in process `syz.2.510'. [ 206.411568][ T39] audit: type=1400 audit(206.305:823): avc: denied { mounton } for pid=8327 comm="syz.3.511" path="/syzcgroup/unified/syz3/cgroup.procs" dev="cgroup2" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 206.423240][ T39] audit: type=1400 audit(206.315:824): avc: denied { mount } for pid=8327 comm="syz.3.511" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 206.632520][ T8332] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 206.652626][ T8332] kvm: pic: level sensitive irq not supported [ 206.653269][ T8332] kvm: pic: non byte read [ 206.663132][ T8332] kvm: pic: level sensitive irq not supported [ 206.663698][ T8332] kvm: pic: non byte read [ 206.669507][ T8332] kvm: pic: level sensitive irq not supported [ 206.669851][ T8332] kvm: pic: non byte read [ 206.724143][ T8332] Bluetooth: MGMT ver 1.23 [ 206.862396][ T8344] sctp: [Deprecated]: syz.3.514 (pid 8344) Use of struct sctp_assoc_value in delayed_ack socket option. [ 206.862396][ T8344] Use struct sctp_sack_info instead [ 207.056575][ T8350] serio: Serial port pts1 [ 207.427616][ T10] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 207.662914][ T10] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1 [ 207.665669][ T10] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 207.673827][ T10] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 207.745945][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.837968][ T10] usb 7-1: config 0 descriptor?? [ 207.897458][ T8350] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 208.024106][ T10] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 208.330018][ T39] audit: type=1326 audit(208.215:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ff7def9 code=0x7ffc0000 [ 208.351886][ T39] audit: type=1326 audit(208.215:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8366 comm="syz.3.516" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f865ff7def9 code=0x7ffc0000 [ 208.769249][ T8395] cgroup: noprefix used incorrectly [ 208.861964][ T39] audit: type=1400 audit(208.755:827): avc: denied { create } for pid=8393 comm="syz.0.519" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.877739][ T39] audit: type=1400 audit(208.765:828): avc: denied { ioctl } for pid=8393 comm="syz.0.519" path="socket:[22955]" dev="sockfs" ino=22955 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.891940][ T39] audit: type=1400 audit(208.765:829): avc: denied { write } for pid=8393 comm="syz.0.519" path="socket:[22955]" dev="sockfs" ino=22955 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 208.935767][ T39] audit: type=1326 audit(208.825:830): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8390 comm="syz.3.518" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f865ff7def9 code=0x0 [ 209.055616][ T39] audit: type=1400 audit(208.945:831): avc: denied { read } for pid=8400 comm="syz.0.520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.148110][ T39] audit: type=1400 audit(209.045:832): avc: denied { ioctl } for pid=8400 comm="syz.0.520" path="socket:[22958]" dev="sockfs" ino=22958 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 209.839903][ T10] usb 7-1: USB disconnect, device number 20 [ 210.012589][ T8425] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 210.023669][ T8425] bridge0: port 3(team0) entered disabled state [ 210.026834][ T8425] team0: left allmulticast mode [ 210.028614][ T8425] team_slave_0: left allmulticast mode [ 210.030323][ T8425] team_slave_1: left allmulticast mode [ 210.032254][ T8425] team0: left promiscuous mode [ 210.035257][ T8425] team_slave_0: left promiscuous mode [ 210.037383][ T8425] team_slave_1: left promiscuous mode [ 210.039694][ T8425] bridge0: port 3(team0) entered disabled state [ 210.047347][ T8425] batman_adv: batadv0: Adding interface: team0 [ 210.057671][ T8425] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.067832][ T8425] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 210.081825][ T8427] netlink: 'syz.0.525': attribute type 10 has an invalid length. [ 210.084588][ T8427] netlink: 2 bytes leftover after parsing attributes in process `syz.0.525'. [ 210.088341][ T8427] team0: entered promiscuous mode [ 210.090318][ T8427] team_slave_0: entered promiscuous mode [ 210.092787][ T8427] team_slave_1: entered promiscuous mode [ 210.096612][ T8427] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.102655][ T8427] batman_adv: batadv0: Interface activated: team0 [ 210.107691][ T8427] batman_adv: batadv0: Interface deactivated: team0 [ 210.112225][ T8427] batman_adv: batadv0: Removing interface: team0 [ 210.120935][ T8427] bridge0: port 3(team0) entered blocking state [ 210.123544][ T8427] bridge0: port 3(team0) entered disabled state [ 210.125660][ T8427] team0: entered allmulticast mode [ 210.127688][ T8427] team_slave_0: entered allmulticast mode [ 210.132882][ T8427] team_slave_1: entered allmulticast mode [ 210.147952][ T8427] bridge0: port 3(team0) entered blocking state [ 210.149885][ T8427] bridge0: port 3(team0) entered forwarding state [ 210.168157][ T8428] syzkaller1: entered promiscuous mode [ 210.169680][ T8428] syzkaller1: entered allmulticast mode [ 210.184531][ T8426] netlink: 20 bytes leftover after parsing attributes in process `syz.2.523'. [ 210.667364][ T8439] sctp: [Deprecated]: syz.1.528 (pid 8439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.667364][ T8439] Use struct sctp_sack_info instead [ 211.741546][ T8468] sp0: Synchronizing with TNC [ 212.151776][ T39] audit: type=1326 audit(212.045:833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8466 comm="syz.1.531" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x0 [ 212.331703][ T39] audit: type=1400 audit(212.225:834): avc: denied { associate } for pid=8493 comm="syz.2.533" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 212.398155][ T39] audit: type=1400 audit(212.255:835): avc: denied { ioctl } for pid=8493 comm="syz.2.533" path="/131/file0/file1" dev="9p" ino=36575609 ioctlcmd=0x5204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.454954][ T8497] syz.2.533(8497): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 212.482211][ T8487] Process accounting resumed [ 213.085408][ T8505] syzkaller1: entered promiscuous mode [ 213.087316][ T8505] syzkaller1: entered allmulticast mode [ 213.130727][ T8505] netlink: 20 bytes leftover after parsing attributes in process `syz.3.534'. [ 213.142676][ T8506] netlink: 16 bytes leftover after parsing attributes in process `syz.1.542'. [ 213.220924][ T8508] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 213.381836][ T39] audit: type=1400 audit(213.275:836): avc: denied { mounton } for pid=8507 comm="syz.2.535" path="mnt:[4026532883]" dev="nsfs" ino=4026532883 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 214.138247][ T8518] netlink: 'syz.2.537': attribute type 10 has an invalid length. [ 214.143422][ T8518] bridge0: port 3(team0) entered disabled state [ 214.569046][ T8518] team0: left allmulticast mode [ 214.570391][ T8518] team_slave_0: left allmulticast mode [ 214.571767][ T8518] team_slave_1: left allmulticast mode [ 214.573169][ T8518] team0: left promiscuous mode [ 214.574528][ T8518] team_slave_0: left promiscuous mode [ 214.576692][ T8518] team_slave_1: left promiscuous mode [ 214.586538][ T8518] bridge0: port 3(team0) entered disabled state [ 214.603606][ T8518] batman_adv: batadv0: Adding interface: team0 [ 214.611114][ T8518] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.619574][ T8518] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 214.622969][ T8520] netlink: 'syz.2.537': attribute type 10 has an invalid length. [ 214.625381][ T8520] netlink: 2 bytes leftover after parsing attributes in process `syz.2.537'. [ 214.633252][ T8520] team0: entered promiscuous mode [ 214.634812][ T8520] team_slave_0: entered promiscuous mode [ 214.636589][ T8520] team_slave_1: entered promiscuous mode [ 214.639542][ T8520] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.641636][ T8520] batman_adv: batadv0: Interface activated: team0 [ 214.643644][ T8520] batman_adv: batadv0: Interface deactivated: team0 [ 214.645508][ T8520] batman_adv: batadv0: Removing interface: team0 [ 214.652499][ T8520] bridge0: port 3(team0) entered blocking state [ 214.653834][ T8529] sctp: [Deprecated]: syz.0.539 (pid 8529) Use of struct sctp_assoc_value in delayed_ack socket option. [ 214.653834][ T8529] Use struct sctp_sack_info instead [ 214.654397][ T8520] bridge0: port 3(team0) entered disabled state [ 214.662270][ T8520] team0: entered allmulticast mode [ 214.664284][ T8520] team_slave_0: entered allmulticast mode [ 214.666083][ T8520] team_slave_1: entered allmulticast mode [ 214.695398][ T8520] bridge0: port 3(team0) entered blocking state [ 214.697849][ T8520] bridge0: port 3(team0) entered forwarding state [ 215.220718][ T8552] kAFS: No cell specified [ 215.485568][ T8549] netlink: 'syz.2.541': attribute type 10 has an invalid length. [ 215.809557][ T8567] netlink: 16 bytes leftover after parsing attributes in process `syz.0.544'. [ 216.350998][ T8581] vivid-002: ================= START STATUS ================= [ 216.353515][ T8581] vivid-002: Radio HW Seek Mode: Bounded [ 216.355016][ T8581] vivid-002: Radio Programmable HW Seek: false [ 216.356989][ T8581] vivid-002: RDS Rx I/O Mode: Block I/O [ 216.359365][ T8581] vivid-002: Generate RBDS Instead of RDS: false [ 216.361478][ T8581] vivid-002: RDS Reception: true [ 216.363171][ T8581] vivid-002: RDS Program Type: 0 inactive [ 216.365491][ T8581] vivid-002: RDS PS Name: inactive [ 216.367328][ T8581] vivid-002: RDS Radio Text: inactive [ 216.372146][ T8581] vivid-002: RDS Traffic Announcement: false inactive [ 216.374535][ T8581] vivid-002: RDS Traffic Program: false inactive [ 216.376750][ T8581] vivid-002: RDS Music: false inactive [ 216.381355][ T8581] vivid-002: ================== END STATUS ================== [ 216.601841][ T39] audit: type=1400 audit(216.495:837): avc: denied { read } for pid=8585 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 216.607145][ T39] audit: type=1400 audit(216.495:838): avc: denied { setopt } for pid=8585 comm="syz.1.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 217.456871][ T8605] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 217.464054][ T8605] bridge0: port 3(team0) entered disabled state [ 217.468545][ T8605] team0: left allmulticast mode [ 217.470243][ T8605] team_slave_0: left allmulticast mode [ 217.472129][ T8605] team_slave_1: left allmulticast mode [ 217.474107][ T8605] team0: left promiscuous mode [ 217.475749][ T8605] team_slave_0: left promiscuous mode [ 217.478261][ T8605] team_slave_1: left promiscuous mode [ 217.480438][ T8605] bridge0: port 3(team0) entered disabled state [ 217.489890][ T8605] batman_adv: batadv0: Adding interface: team0 [ 217.492177][ T8605] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.502390][ T8605] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 217.513368][ T8605] netlink: 'syz.1.550': attribute type 10 has an invalid length. [ 217.522754][ T8605] netlink: 2 bytes leftover after parsing attributes in process `syz.1.550'. [ 217.525320][ T8605] team0: entered promiscuous mode [ 217.526702][ T8605] team_slave_0: entered promiscuous mode [ 217.533149][ T8605] team_slave_1: entered promiscuous mode [ 217.546490][ T8605] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.549411][ T8605] batman_adv: batadv0: Interface activated: team0 [ 217.551777][ T8605] batman_adv: batadv0: Interface deactivated: team0 [ 217.554155][ T8605] batman_adv: batadv0: Removing interface: team0 [ 217.573119][ T8605] bridge0: port 3(team0) entered blocking state [ 217.575382][ T8605] bridge0: port 3(team0) entered disabled state [ 217.585807][ T8605] team0: entered allmulticast mode [ 217.587709][ T8605] team_slave_0: entered allmulticast mode [ 217.590059][ T8605] team_slave_1: entered allmulticast mode [ 217.597049][ T8605] bridge0: port 3(team0) entered blocking state [ 217.599511][ T8605] bridge0: port 3(team0) entered forwarding state [ 217.753712][ T8613] serio: Serial port pts1 [ 217.777058][ T8614] sctp: [Deprecated]: syz.2.552 (pid 8614) Use of struct sctp_assoc_value in delayed_ack socket option. [ 217.777058][ T8614] Use struct sctp_sack_info instead [ 217.806700][ T8612] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 217.822831][ T39] audit: type=1400 audit(217.695:839): avc: denied { mount } for pid=8606 comm="syz.0.551" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 217.849133][ T39] audit: type=1400 audit(217.715:840): avc: denied { read } for pid=8606 comm="syz.0.551" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.865193][ T39] audit: type=1400 audit(217.735:841): avc: denied { open } for pid=8606 comm="syz.0.551" path="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 218.091451][ T8] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 218.289418][ T8] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 2 [ 218.306285][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 218.310159][ T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 218.315815][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.333125][ T8] usb 6-1: config 0 descriptor?? [ 218.337002][ T39] audit: type=1400 audit(218.225:842): avc: denied { unmount } for pid=5636 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 218.349340][ T8613] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 218.355391][ T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 218.798305][ T8652] netlink: 32 bytes leftover after parsing attributes in process `syz.0.555'. [ 219.003934][ T8658] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 219.103509][ T8658] bridge0: port 3(team0) entered disabled state [ 219.139527][ T8658] team0: left allmulticast mode [ 219.141521][ T8658] team_slave_0: left allmulticast mode [ 219.148141][ T8658] team_slave_1: left allmulticast mode [ 219.168195][ T8658] team0: left promiscuous mode [ 219.171729][ T8658] team_slave_0: left promiscuous mode [ 219.176953][ T8658] team_slave_1: left promiscuous mode [ 219.193305][ T8658] bridge0: port 3(team0) entered disabled state [ 219.259815][ T8658] batman_adv: batadv0: Adding interface: team0 [ 219.262322][ T8658] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 219.284317][ T8662] netlink: 'syz.3.556': attribute type 10 has an invalid length. [ 219.303156][ T8662] netlink: 2 bytes leftover after parsing attributes in process `syz.3.556'. [ 219.306538][ T8662] team0: entered promiscuous mode [ 219.308422][ T8662] team_slave_0: entered promiscuous mode [ 219.310600][ T8662] team_slave_1: entered promiscuous mode [ 219.324785][ T8662] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.335621][ T8662] batman_adv: batadv0: Interface activated: team0 [ 219.338136][ T8662] batman_adv: batadv0: Interface deactivated: team0 [ 219.341220][ T8662] batman_adv: batadv0: Removing interface: team0 [ 219.382148][ T8662] bridge0: port 3(team0) entered blocking state [ 219.384351][ T8662] bridge0: port 3(team0) entered disabled state [ 219.390583][ T8662] team0: entered allmulticast mode [ 219.395571][ T8662] team_slave_0: entered allmulticast mode [ 219.397809][ T8662] team_slave_1: entered allmulticast mode [ 219.414403][ T8662] bridge0: port 3(team0) entered blocking state [ 219.416547][ T8662] bridge0: port 3(team0) entered forwarding state [ 220.090134][ T8679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.558'. [ 220.667068][ T8696] sctp: [Deprecated]: syz.2.562 (pid 8696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 220.667068][ T8696] Use struct sctp_sack_info instead [ 221.117116][ T8707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.563'. [ 221.118250][ T10] usb 6-1: USB disconnect, device number 25 [ 221.127264][ T8707] netlink: 20 bytes leftover after parsing attributes in process `syz.0.563'. [ 222.125969][ T8731] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 222.306724][ T8731] bridge0: port 3(team0) entered disabled state [ 222.407943][ T8731] team0: left allmulticast mode [ 222.409927][ T8731] team_slave_0: left allmulticast mode [ 222.412055][ T8731] team_slave_1: left allmulticast mode [ 222.413889][ T8731] team0: left promiscuous mode [ 222.415821][ T8731] team_slave_0: left promiscuous mode [ 222.419592][ T8731] team_slave_1: left promiscuous mode [ 222.425762][ T8731] bridge0: port 3(team0) entered disabled state [ 222.543406][ T8731] batman_adv: batadv0: Adding interface: team0 [ 222.545745][ T8731] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 222.563337][ T8736] netlink: 'syz.3.566': attribute type 10 has an invalid length. [ 222.577241][ T8736] netlink: 2 bytes leftover after parsing attributes in process `syz.3.566'. [ 222.584543][ T8736] team0: entered promiscuous mode [ 222.586191][ T8736] team_slave_0: entered promiscuous mode [ 222.600001][ T8736] team_slave_1: entered promiscuous mode [ 222.604590][ T8736] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.618384][ T8736] batman_adv: batadv0: Interface activated: team0 [ 222.621881][ T8736] batman_adv: batadv0: Interface deactivated: team0 [ 222.624240][ T8736] batman_adv: batadv0: Removing interface: team0 [ 222.624851][ T8750] autofs: Bad value for 'fd' [ 222.633294][ T8736] bridge0: port 3(team0) entered blocking state [ 222.637103][ T8736] bridge0: port 3(team0) entered disabled state [ 222.641684][ T8736] team0: entered allmulticast mode [ 222.644522][ T8736] team_slave_0: entered allmulticast mode [ 222.648125][ T8736] team_slave_1: entered allmulticast mode [ 222.654795][ T8736] bridge0: port 3(team0) entered blocking state [ 222.657221][ T8736] bridge0: port 3(team0) entered forwarding state [ 222.662132][ T8735] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 222.667320][ T8735] bridge0: port 3(team0) entered disabled state [ 222.673801][ T8735] team0: left allmulticast mode [ 222.675540][ T8735] team_slave_0: left allmulticast mode [ 222.678006][ T8735] team_slave_1: left allmulticast mode [ 222.681419][ T8735] team0: left promiscuous mode [ 222.683669][ T8735] team_slave_0: left promiscuous mode [ 222.689481][ T8735] team_slave_1: left promiscuous mode [ 222.693583][ T8735] bridge0: port 3(team0) entered disabled state [ 222.703505][ T8735] batman_adv: batadv0: Adding interface: team0 [ 222.706319][ T8735] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.716022][ T8735] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 222.721376][ T8747] netlink: 'syz.0.567': attribute type 10 has an invalid length. [ 222.725402][ T8747] netlink: 2 bytes leftover after parsing attributes in process `syz.0.567'. [ 222.728059][ T8747] team0: entered promiscuous mode [ 222.729603][ T8747] team_slave_0: entered promiscuous mode [ 222.732029][ T8747] team_slave_1: entered promiscuous mode [ 222.736076][ T8747] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.738851][ T8747] batman_adv: batadv0: Interface activated: team0 [ 222.740746][ T8747] batman_adv: batadv0: Interface deactivated: team0 [ 222.742491][ T8747] batman_adv: batadv0: Removing interface: team0 [ 222.744849][ T8747] bridge0: port 3(team0) entered blocking state [ 222.746456][ T8747] bridge0: port 3(team0) entered disabled state [ 222.748381][ T8747] team0: entered allmulticast mode [ 222.749812][ T8747] team_slave_0: entered allmulticast mode [ 222.752514][ T8747] team_slave_1: entered allmulticast mode [ 222.755512][ T8747] bridge0: port 3(team0) entered blocking state [ 222.757365][ T8747] bridge0: port 3(team0) entered forwarding state [ 222.838944][ T8750] usb usb9: check_ctrlrecip: process 8750 (syz.2.569) requesting ep 01 but needs 81 [ 222.841636][ T8750] usb usb9: usbfs: process 8750 (syz.2.569) did not claim interface 0 before use [ 222.848914][ T8758] overlayfs: failed to resolve './file1': -2 [ 222.855972][ T8758] netlink: 4 bytes leftover after parsing attributes in process `syz.3.570'. [ 222.865722][ T8760] trusted_key: encrypted_key: keylen parameter is missing [ 222.886343][ T6526] IPVS: starting estimator thread 0... [ 222.977675][ T8762] IPVS: using max 22 ests per chain, 52800 per kthread [ 223.247250][ T8770] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 223.254710][ T8770] bridge0: port 3(team0) entered disabled state [ 223.270874][ T8770] team0: left allmulticast mode [ 223.272246][ T8770] team_slave_0: left allmulticast mode [ 223.273874][ T8770] team_slave_1: left allmulticast mode [ 223.276764][ T8770] team0: left promiscuous mode [ 223.278362][ T8770] team_slave_0: left promiscuous mode [ 223.279884][ T8770] team_slave_1: left promiscuous mode [ 223.281577][ T8770] bridge0: port 3(team0) entered disabled state [ 223.309620][ T8770] batman_adv: batadv0: Adding interface: team0 [ 223.311385][ T8770] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.320024][ T8770] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 223.323558][ T8771] netlink: 'syz.2.574': attribute type 10 has an invalid length. [ 223.326388][ T8771] netlink: 2 bytes leftover after parsing attributes in process `syz.2.574'. [ 223.334317][ T8771] team0: entered promiscuous mode [ 223.336520][ T8771] team_slave_0: entered promiscuous mode [ 223.342079][ T8771] team_slave_1: entered promiscuous mode [ 223.352826][ T8771] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.362735][ T8771] batman_adv: batadv0: Interface activated: team0 [ 223.364964][ T8771] batman_adv: batadv0: Interface deactivated: team0 [ 223.366939][ T8771] batman_adv: batadv0: Removing interface: team0 [ 223.376285][ T8771] bridge0: port 3(team0) entered blocking state [ 223.378421][ T8771] bridge0: port 3(team0) entered disabled state [ 223.381738][ T8771] team0: entered allmulticast mode [ 223.383144][ T8771] team_slave_0: entered allmulticast mode [ 223.384880][ T8771] team_slave_1: entered allmulticast mode [ 223.392501][ T8771] bridge0: port 3(team0) entered blocking state [ 223.394149][ T8771] bridge0: port 3(team0) entered forwarding state [ 225.992331][ T8778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.576'. [ 225.997252][ T8778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.576'. [ 226.397942][ T35] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 226.583943][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.587006][ T35] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.593006][ T35] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.595801][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.604797][ T35] usb 6-1: config 0 descriptor?? [ 226.613686][ T35] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 226.627644][ T58] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 226.812014][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.815064][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 226.820469][ T58] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 226.823678][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.831938][ T58] usb 5-1: config 0 descriptor?? [ 227.161723][ T8796] overlayfs: failed to resolve './file1': -2 [ 227.186635][ T8796] sctp: [Deprecated]: syz.3.579 (pid 8796) Use of struct sctp_assoc_value in delayed_ack socket option. [ 227.186635][ T8796] Use struct sctp_sack_info instead [ 227.623928][ T58] usbhid 5-1:0.0: can't add hid device: -71 [ 227.627363][ T58] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 227.630731][ T58] usb 5-1: USB disconnect, device number 24 [ 228.248888][ T8815] sctp: [Deprecated]: syz.3.582 (pid 8815) Use of struct sctp_assoc_value in delayed_ack socket option. [ 228.248888][ T8815] Use struct sctp_sack_info instead [ 228.650156][ T8816] can0: slcan on ptm0. [ 228.742093][ T39] audit: type=1400 audit(228.625:843): avc: denied { getattr } for pid=8808 comm="syz.2.581" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 228.751393][ T8816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 228.897238][ T8829] serio: Serial port pts1 [ 229.034940][ T8808] can0 (unregistered): slcan off ptm0. [ 229.069419][ T39] audit: type=1400 audit(228.965:844): avc: denied { read write } for pid=8832 comm="syz.0.585" name="file1" dev="9p" ino=36575609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.079681][ T8] usb 6-1: USB disconnect, device number 26 [ 229.090512][ T39] audit: type=1400 audit(228.965:845): avc: denied { open } for pid=8832 comm="syz.0.585" path="/128/file0/file1" dev="9p" ino=36575609 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.133642][ T39] audit: type=1400 audit(229.015:846): avc: denied { ioctl } for pid=8832 comm="syz.0.585" path="/128/file0/file1" dev="9p" ino=36575609 ioctlcmd=0x5204 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 229.867799][ T58] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 229.967723][ T8] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 229.986981][ T39] audit: type=1400 audit(229.875:847): avc: denied { ioctl } for pid=8850 comm="syz.0.590" path="/dev/vhost-net" dev="devtmpfs" ino=1116 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 230.167464][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 230.173265][ T58] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.523950][ T58] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 230.529583][ T58] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 230.533299][ T58] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.543996][ T58] usb 6-1: config 0 descriptor?? [ 230.548281][ T8] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 230.562923][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 230.581719][ T58] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 230.588281][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.596905][ T8842] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 230.652387][ T8] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 231.679798][ T8864] tipc: Started in network mode [ 231.681746][ T8864] tipc: Node identity ac1414aa, cluster identity 4711 [ 231.688284][ T8864] tipc: Enabled bearer , priority 10 [ 232.070312][ T39] audit: type=1400 audit(231.965:848): avc: denied { read } for pid=8868 comm="syz.0.593" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 232.083700][ T8870] affs: No valid root block on device nbd0 [ 232.602927][ T5398] usb 7-1: USB disconnect, device number 21 [ 232.749027][ T8881] netlink: 'syz.2.596': attribute type 10 has an invalid length. [ 232.757151][ T8881] kAFS: No cell specified [ 232.814458][ T10] tipc: Node number set to 2886997162 [ 232.955546][ T35] usb 6-1: USB disconnect, device number 27 [ 233.449481][ T8891] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 233.457706][ T39] audit: type=1326 audit(233.345:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.1.597" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 233.463699][ T39] audit: type=1326 audit(233.355:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8882 comm="syz.1.597" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x7ffc0000 [ 233.677043][ T39] audit: type=1400 audit(233.565:851): avc: denied { read } for pid=8889 comm="syz.0.598" laddr=::ffff:127.0.0.1 lport=20003 faddr=::ffff:127.0.0.1 fport=50568 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 234.362920][ T8889] dccp_close: ABORT with 32 bytes unread [ 235.245621][ T8910] serio: Serial port pts0 [ 235.523517][ T8913] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 235.553635][ T8913] bridge0: port 3(team0) entered disabled state [ 235.557320][ T8913] team0: left allmulticast mode [ 235.559309][ T8913] team_slave_0: left allmulticast mode [ 235.561234][ T8913] team_slave_1: left allmulticast mode [ 235.563123][ T8913] team0: left promiscuous mode [ 235.564828][ T8913] team_slave_0: left promiscuous mode [ 235.567225][ T8913] team_slave_1: left promiscuous mode [ 235.583374][ T8913] bridge0: port 3(team0) entered disabled state [ 235.601100][ T8913] batman_adv: batadv0: Adding interface: team0 [ 235.603342][ T8913] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 235.619933][ T8914] netlink: 'syz.3.604': attribute type 10 has an invalid length. [ 235.622627][ T8914] netlink: 2 bytes leftover after parsing attributes in process `syz.3.604'. [ 235.639018][ T8914] team0: entered promiscuous mode [ 235.640779][ T8914] team_slave_0: entered promiscuous mode [ 235.651711][ T8914] team_slave_1: entered promiscuous mode [ 235.655633][ T8914] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.659159][ T8914] batman_adv: batadv0: Interface activated: team0 [ 235.662291][ T8914] batman_adv: batadv0: Interface deactivated: team0 [ 235.664669][ T8914] batman_adv: batadv0: Removing interface: team0 [ 235.678915][ T8914] bridge0: port 3(team0) entered blocking state [ 235.681664][ T8914] bridge0: port 3(team0) entered disabled state [ 235.684171][ T8914] team0: entered allmulticast mode [ 235.685892][ T8914] team_slave_0: entered allmulticast mode [ 235.687697][ T8914] team_slave_1: entered allmulticast mode [ 235.697872][ T8914] bridge0: port 3(team0) entered blocking state [ 235.700360][ T8914] bridge0: port 3(team0) entered forwarding state [ 235.764681][ T8919] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 235.906707][ T8922] netlink: 'syz.3.607': attribute type 10 has an invalid length. [ 235.915492][ T8922] kAFS: No cell specified [ 236.017805][ T58] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 236.202419][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 236.205834][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 236.209660][ T58] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 236.212693][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.217486][ T58] usb 5-1: config 0 descriptor?? [ 236.678356][ T58] usbhid 5-1:0.0: can't add hid device: -71 [ 236.680078][ T58] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 236.685452][ T58] usb 5-1: USB disconnect, device number 25 [ 237.886562][ T8947] sctp: [Deprecated]: syz.0.612 (pid 8947) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.886562][ T8947] Use struct sctp_sack_info instead [ 238.308243][ T8949] netlink: 32 bytes leftover after parsing attributes in process `syz.2.611'. [ 238.765445][ T8970] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 238.774298][ T8970] bridge0: port 3(team0) entered disabled state [ 238.778180][ T8970] team0: left allmulticast mode [ 238.780049][ T8970] team_slave_0: left allmulticast mode [ 238.782042][ T8970] team_slave_1: left allmulticast mode [ 238.783932][ T8970] team0: left promiscuous mode [ 238.785795][ T8970] team_slave_0: left promiscuous mode [ 238.790749][ T8970] team_slave_1: left promiscuous mode [ 238.794594][ T8970] bridge0: port 3(team0) entered disabled state [ 238.804831][ T8970] batman_adv: batadv0: Adding interface: team0 [ 238.807232][ T8970] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.844627][ T8976] serio: Serial port pts0 [ 238.852054][ T8970] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 238.888087][ T8975] netlink: 'syz.0.615': attribute type 10 has an invalid length. [ 238.890809][ T8975] netlink: 2 bytes leftover after parsing attributes in process `syz.0.615'. [ 238.894124][ T8975] team0: entered promiscuous mode [ 238.904070][ T8975] team_slave_0: entered promiscuous mode [ 238.928913][ T8975] team_slave_1: entered promiscuous mode [ 239.029430][ T8975] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.031478][ T8975] batman_adv: batadv0: Interface activated: team0 [ 239.033224][ T8975] batman_adv: batadv0: Interface deactivated: team0 [ 239.034978][ T8975] batman_adv: batadv0: Removing interface: team0 [ 239.038309][ T8975] bridge0: port 3(team0) entered blocking state [ 239.040082][ T8975] bridge0: port 3(team0) entered disabled state [ 239.041903][ T8975] team0: entered allmulticast mode [ 239.043345][ T8975] team_slave_0: entered allmulticast mode [ 239.045006][ T8975] team_slave_1: entered allmulticast mode [ 239.049240][ T8975] bridge0: port 3(team0) entered blocking state [ 239.050907][ T8975] bridge0: port 3(team0) entered forwarding state [ 239.198664][ T8982] sctp: [Deprecated]: syz.1.620 (pid 8982) Use of struct sctp_assoc_value in delayed_ack socket option. [ 239.198664][ T8982] Use struct sctp_sack_info instead [ 239.894809][ T39] audit: type=1326 audit(239.785:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.0.621" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882eb7def9 code=0x7ffc0000 [ 239.903303][ T39] audit: type=1326 audit(239.785:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8985 comm="syz.0.621" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f882eb7def9 code=0x7ffc0000 [ 239.975678][ T9007] netlink: 16 bytes leftover after parsing attributes in process `syz.1.623'. [ 240.364421][ T9010] sctp: [Deprecated]: syz.0.624 (pid 9010) Use of struct sctp_assoc_value in delayed_ack socket option. [ 240.364421][ T9010] Use struct sctp_sack_info instead [ 240.926284][ T9035] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 240.932888][ T9035] bridge0: port 3(team0) entered disabled state [ 240.935389][ T9035] team0: left allmulticast mode [ 240.936782][ T9035] team_slave_0: left allmulticast mode [ 240.938386][ T9035] team_slave_1: left allmulticast mode [ 240.939875][ T9035] team0: left promiscuous mode [ 240.941170][ T9035] team_slave_0: left promiscuous mode [ 240.942738][ T9035] team_slave_1: left promiscuous mode [ 240.944408][ T9035] bridge0: port 3(team0) entered disabled state [ 240.948887][ T9035] batman_adv: batadv0: Adding interface: team0 [ 240.951173][ T9035] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.959214][ T9035] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 240.964515][ T9035] netlink: 'syz.1.629': attribute type 10 has an invalid length. [ 240.966596][ T9035] netlink: 2 bytes leftover after parsing attributes in process `syz.1.629'. [ 240.969374][ T9035] team0: entered promiscuous mode [ 240.970724][ T9035] team_slave_0: entered promiscuous mode [ 240.972347][ T9035] team_slave_1: entered promiscuous mode [ 240.975012][ T9035] 8021q: adding VLAN 0 to HW filter on device team0 [ 240.977051][ T9035] batman_adv: batadv0: Interface activated: team0 [ 240.979345][ T9035] batman_adv: batadv0: Interface deactivated: team0 [ 240.981120][ T9035] batman_adv: batadv0: Removing interface: team0 [ 240.983432][ T9035] bridge0: port 3(team0) entered blocking state [ 240.985318][ T9035] bridge0: port 3(team0) entered disabled state [ 240.987061][ T9035] team0: entered allmulticast mode [ 240.989550][ T9035] team_slave_0: entered allmulticast mode [ 240.991098][ T9035] team_slave_1: entered allmulticast mode [ 240.993855][ T9035] bridge0: port 3(team0) entered blocking state [ 240.995593][ T9035] bridge0: port 3(team0) entered forwarding state [ 241.146748][ T9039] tipc: Started in network mode [ 241.149008][ T9039] tipc: Node identity ac1414aa, cluster identity 4711 [ 241.153401][ T9039] tipc: Enabled bearer , priority 10 [ 241.340180][ T9044] overlayfs: failed to resolve './file1': -2 [ 241.356313][ T9044] sctp: [Deprecated]: syz.2.631 (pid 9044) Use of struct sctp_assoc_value in delayed_ack socket option. [ 241.356313][ T9044] Use struct sctp_sack_info instead [ 241.865691][ T9063] netlink: 16 bytes leftover after parsing attributes in process `syz.2.634'. [ 242.147943][ T35] tipc: Node number set to 2886997162 [ 242.277352][ T9068] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 242.301959][ T9068] bridge0: port 3(team0) entered disabled state [ 242.305912][ T9068] team0: left allmulticast mode [ 242.307963][ T9068] team_slave_0: left allmulticast mode [ 242.309548][ T9068] team_slave_1: left allmulticast mode [ 242.312226][ T9068] team0: left promiscuous mode [ 242.313798][ T9068] team_slave_0: left promiscuous mode [ 242.317130][ T9068] team_slave_1: left promiscuous mode [ 242.323481][ T9068] bridge0: port 3(team0) entered disabled state [ 242.343578][ T9068] batman_adv: batadv0: Adding interface: team0 [ 242.348539][ T9068] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.357673][ T9068] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 242.362198][ T9069] netlink: 'syz.0.635': attribute type 10 has an invalid length. [ 242.364471][ T9069] netlink: 2 bytes leftover after parsing attributes in process `syz.0.635'. [ 242.364712][ T9069] team0: entered promiscuous mode [ 242.369511][ T9069] team_slave_0: entered promiscuous mode [ 242.371454][ T9069] team_slave_1: entered promiscuous mode [ 242.376038][ T9069] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.378211][ T9069] batman_adv: batadv0: Interface activated: team0 [ 242.379985][ T9069] batman_adv: batadv0: Interface deactivated: team0 [ 242.381771][ T9069] batman_adv: batadv0: Removing interface: team0 [ 242.419984][ T9069] bridge0: port 3(team0) entered blocking state [ 242.429979][ T9069] bridge0: port 3(team0) entered disabled state [ 242.435204][ T9069] team0: entered allmulticast mode [ 242.436663][ T9069] team_slave_0: entered allmulticast mode [ 242.444832][ T9069] team_slave_1: entered allmulticast mode [ 242.455369][ T9069] bridge0: port 3(team0) entered blocking state [ 242.457250][ T9069] bridge0: port 3(team0) entered forwarding state [ 242.586939][ T9073] netlink: 'syz.3.638': attribute type 10 has an invalid length. [ 242.607961][ T9073] bridge0: port 3(team0) entered disabled state [ 242.620291][ T9073] team0: left allmulticast mode [ 242.629083][ T9073] team_slave_0: left allmulticast mode [ 242.634724][ T9073] team_slave_1: left allmulticast mode [ 242.640532][ T9073] team0: left promiscuous mode [ 242.641145][ T39] audit: type=1326 audit(242.535:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9074 comm="syz.2.637" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f50e057def9 code=0x0 [ 242.641842][ T9073] team_slave_0: left promiscuous mode [ 242.652717][ T9073] team_slave_1: left promiscuous mode [ 242.660199][ T9073] bridge0: port 3(team0) entered disabled state [ 242.668344][ T9073] batman_adv: batadv0: Adding interface: team0 [ 242.670060][ T9073] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 242.678062][ T9076] netlink: 'syz.3.638': attribute type 10 has an invalid length. [ 242.680360][ T9076] netlink: 2 bytes leftover after parsing attributes in process `syz.3.638'. [ 242.684975][ T9076] team0: entered promiscuous mode [ 242.687235][ T9076] team_slave_0: entered promiscuous mode [ 242.692348][ T9076] team_slave_1: entered promiscuous mode [ 242.695631][ T9076] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.698046][ T9076] batman_adv: batadv0: Interface activated: team0 [ 242.700441][ T9076] batman_adv: batadv0: Interface deactivated: team0 [ 242.702823][ T9076] batman_adv: batadv0: Removing interface: team0 [ 242.717910][ T9076] bridge0: port 3(team0) entered blocking state [ 242.721241][ T9076] bridge0: port 3(team0) entered disabled state [ 242.724741][ T9076] team0: entered allmulticast mode [ 242.726862][ T9076] team_slave_0: entered allmulticast mode [ 242.730444][ T9076] team_slave_1: entered allmulticast mode [ 242.733838][ T9076] bridge0: port 3(team0) entered blocking state [ 242.735542][ T9076] bridge0: port 3(team0) entered forwarding state [ 242.783266][ T9081] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 242.947642][ T39] audit: type=1326 audit(242.835:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9078 comm="syz.1.639" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x0 [ 243.571629][ T9100] overlayfs: failed to resolve './file1': -2 [ 243.591577][ T9100] sctp: [Deprecated]: syz.2.642 (pid 9100) Use of struct sctp_assoc_value in delayed_ack socket option. [ 243.591577][ T9100] Use struct sctp_sack_info instead [ 243.742572][ T9104] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.772922][ T39] audit: type=1400 audit(243.665:856): avc: denied { ioctl } for pid=9103 comm="syz.3.644" path="/dev/autofs" dev="devtmpfs" ino=104 ioctlcmd=0x937e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 244.271925][ T9125] netlink: 'syz.3.644': attribute type 1 has an invalid length. [ 244.749998][ T9146] netlink: 'syz.1.647': attribute type 10 has an invalid length. [ 244.757862][ T9146] kAFS: No cell specified [ 244.774561][ T9147] netlink: 16 bytes leftover after parsing attributes in process `syz.2.646'. [ 245.096601][ T9104] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 245.100339][ T9104] cramfs: wrong magic [ 245.386273][ T9158] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 245.401559][ T9158] bridge0: port 3(team0) entered disabled state [ 245.405075][ T9158] team0: left allmulticast mode [ 245.409023][ T9158] team_slave_0: left allmulticast mode [ 245.411069][ T9158] team_slave_1: left allmulticast mode [ 245.413063][ T9158] team0: left promiscuous mode [ 245.414877][ T9158] team_slave_0: left promiscuous mode [ 245.417093][ T9158] team_slave_1: left promiscuous mode [ 245.419840][ T9158] bridge0: port 3(team0) entered disabled state [ 245.425183][ T9158] batman_adv: batadv0: Adding interface: team0 [ 245.427663][ T9158] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 245.441039][ T9158] netlink: 'syz.3.649': attribute type 10 has an invalid length. [ 245.444449][ T9158] netlink: 2 bytes leftover after parsing attributes in process `syz.3.649'. [ 245.448304][ T9158] team0: entered promiscuous mode [ 245.450515][ T9158] team_slave_0: entered promiscuous mode [ 245.453068][ T9158] team_slave_1: entered promiscuous mode [ 245.457330][ T9158] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.460007][ T9158] batman_adv: batadv0: Interface activated: team0 [ 245.462352][ T9158] batman_adv: batadv0: Interface deactivated: team0 [ 245.464777][ T9158] batman_adv: batadv0: Removing interface: team0 [ 245.468234][ T9158] bridge0: port 3(team0) entered blocking state [ 245.470601][ T9158] bridge0: port 3(team0) entered disabled state [ 245.473001][ T9158] team0: entered allmulticast mode [ 245.475351][ T9158] team_slave_0: entered allmulticast mode [ 245.477727][ T9158] team_slave_1: entered allmulticast mode [ 245.483684][ T9158] bridge0: port 3(team0) entered blocking state [ 245.486166][ T9158] bridge0: port 3(team0) entered forwarding state [ 246.502548][ T9174] netlink: 'syz.3.654': attribute type 10 has an invalid length. [ 246.506325][ T9174] bridge0: port 3(team0) entered disabled state [ 246.510377][ T9174] team0: left allmulticast mode [ 246.512213][ T9174] team_slave_0: left allmulticast mode [ 246.513921][ T9174] team_slave_1: left allmulticast mode [ 246.515877][ T9174] team0: left promiscuous mode [ 246.522639][ T9174] team_slave_0: left promiscuous mode [ 246.524728][ T9174] team_slave_1: left promiscuous mode [ 246.526947][ T9174] bridge0: port 3(team0) entered disabled state [ 246.546629][ T9174] batman_adv: batadv0: Adding interface: team0 [ 246.564611][ T9174] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 246.598849][ T9177] netlink: 'syz.3.654': attribute type 10 has an invalid length. [ 246.601644][ T9177] netlink: 2 bytes leftover after parsing attributes in process `syz.3.654'. [ 246.605254][ T9177] team0: entered promiscuous mode [ 246.609030][ T9177] team_slave_0: entered promiscuous mode [ 246.611384][ T9177] team_slave_1: entered promiscuous mode [ 246.624839][ T9177] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.632308][ T9177] batman_adv: batadv0: Interface activated: team0 [ 246.634756][ T9177] batman_adv: batadv0: Interface deactivated: team0 [ 246.637154][ T9177] batman_adv: batadv0: Removing interface: team0 [ 246.642550][ T9177] bridge0: port 3(team0) entered blocking state [ 246.645176][ T9177] bridge0: port 3(team0) entered disabled state [ 246.650128][ T9177] team0: entered allmulticast mode [ 246.652344][ T9177] team_slave_0: entered allmulticast mode [ 246.657780][ T9177] team_slave_1: entered allmulticast mode [ 246.677279][ T9177] bridge0: port 3(team0) entered blocking state [ 246.679872][ T9177] bridge0: port 3(team0) entered forwarding state [ 246.790572][ T39] audit: type=1326 audit(246.685:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9176 comm="syz.0.655" exe="/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f882eb74ea7 code=0x0 [ 247.428680][ T9190] netlink: 16 bytes leftover after parsing attributes in process `syz.3.658'. [ 247.658701][ T9195] overlayfs: failed to resolve './file1': -2 [ 247.669244][ T9196] netlink: 'syz.0.659': attribute type 10 has an invalid length. [ 247.673759][ T9196] kAFS: No cell specified [ 247.680672][ T9195] sctp: [Deprecated]: syz.2.660 (pid 9195) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.680672][ T9195] Use struct sctp_sack_info instead [ 247.707659][ T6526] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 247.898959][ T6526] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 247.901966][ T6526] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 247.905920][ T6526] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 247.914468][ T6526] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.918602][ T6526] usb 6-1: config 0 descriptor?? [ 247.924120][ T6526] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 248.176286][ T9210] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 248.198800][ T9210] bridge0: port 3(team0) entered disabled state [ 248.202184][ T9210] team0: left allmulticast mode [ 248.204089][ T9210] team_slave_0: left allmulticast mode [ 248.206019][ T9210] team_slave_1: left allmulticast mode [ 248.208880][ T9210] team0: left promiscuous mode [ 248.210606][ T9210] team_slave_0: left promiscuous mode [ 248.212855][ T9210] team_slave_1: left promiscuous mode [ 248.215373][ T9210] bridge0: port 3(team0) entered disabled state [ 248.225034][ T9210] batman_adv: batadv0: Adding interface: team0 [ 248.228522][ T9210] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.237603][ T9210] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 248.241206][ T9211] netlink: 'syz.2.661': attribute type 10 has an invalid length. [ 248.243427][ T9211] netlink: 2 bytes leftover after parsing attributes in process `syz.2.661'. [ 248.245997][ T9211] team0: entered promiscuous mode [ 248.247466][ T9211] team_slave_0: entered promiscuous mode [ 248.250227][ T9211] team_slave_1: entered promiscuous mode [ 248.254432][ T9211] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.257155][ T9211] batman_adv: batadv0: Interface activated: team0 [ 248.259935][ T9211] batman_adv: batadv0: Interface deactivated: team0 [ 248.262597][ T9211] batman_adv: batadv0: Removing interface: team0 [ 248.266802][ T9211] bridge0: port 3(team0) entered blocking state [ 248.269546][ T9211] bridge0: port 3(team0) entered disabled state [ 248.272113][ T9211] team0: entered allmulticast mode [ 248.274099][ T9211] team_slave_0: entered allmulticast mode [ 248.276234][ T9211] team_slave_1: entered allmulticast mode [ 248.283914][ T9211] bridge0: port 3(team0) entered blocking state [ 248.285933][ T9211] bridge0: port 3(team0) entered forwarding state [ 249.353297][ T9220] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 250.019870][ T9229] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 250.040400][ T9229] bridge0: port 3(team0) entered disabled state [ 250.043639][ T9229] team0: left allmulticast mode [ 250.045200][ T9229] team_slave_0: left allmulticast mode [ 250.046597][ T9229] team_slave_1: left allmulticast mode [ 250.048559][ T9229] team0: left promiscuous mode [ 250.049838][ T9229] team_slave_0: left promiscuous mode [ 250.051346][ T9229] team_slave_1: left promiscuous mode [ 250.053020][ T9229] bridge0: port 3(team0) entered disabled state [ 250.057054][ T9229] batman_adv: batadv0: Adding interface: team0 [ 250.058833][ T9229] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.065151][ T9229] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 250.117892][ T9229] netlink: 'syz.2.666': attribute type 10 has an invalid length. [ 250.120047][ T9229] netlink: 2 bytes leftover after parsing attributes in process `syz.2.666'. [ 250.122422][ T9229] team0: entered promiscuous mode [ 250.123768][ T9229] team_slave_0: entered promiscuous mode [ 250.125505][ T9229] team_slave_1: entered promiscuous mode [ 250.129892][ T9229] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.131967][ T9229] batman_adv: batadv0: Interface activated: team0 [ 250.133891][ T9229] batman_adv: batadv0: Interface deactivated: team0 [ 250.135608][ T9229] batman_adv: batadv0: Removing interface: team0 [ 250.153197][ T9229] bridge0: port 3(team0) entered blocking state [ 250.155134][ T9229] bridge0: port 3(team0) entered disabled state [ 250.157035][ T9229] team0: entered allmulticast mode [ 250.158518][ T9229] team_slave_0: entered allmulticast mode [ 250.160109][ T9229] team_slave_1: entered allmulticast mode [ 250.164308][ T9229] bridge0: port 3(team0) entered blocking state [ 250.166054][ T9229] bridge0: port 3(team0) entered forwarding state [ 250.305931][ T1432] usb 6-1: USB disconnect, device number 28 [ 250.728318][ T39] audit: type=1326 audit(250.625:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9231 comm="syz.1.667" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f54c697def9 code=0x0 [ 250.888549][ T39] audit: type=1400 audit(250.775:859): avc: denied { append } for pid=9241 comm="syz.3.669" name="blkio.bfq.io_serviced" dev="9p" ino=36575689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.920079][ T39] audit: type=1400 audit(250.815:860): avc: denied { map } for pid=9241 comm="syz.3.669" path="/169/file0/blkio.bfq.io_serviced" dev="9p" ino=36575689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 250.926161][ T9242] netfs: Couldn't get user pages (rc=-14) [ 250.951844][ T9245] netlink: 16 bytes leftover after parsing attributes in process `syz.2.670'. [ 251.051139][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.669'. [ 251.627649][ T1432] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 251.732051][ T9242] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2024d pfn:0x57558 [ 251.735737][ T9242] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 251.741063][ T9242] page_type: 0xbfffffff(buddy) [ 251.742871][ T9242] raw: 00fff00000000000 ffffea0000f6a208 ffffea0001411e08 0000000000000000 [ 251.745812][ T9242] raw: 000000000002024d 0000000000000003 00000000bfffffff 0000000000000000 [ 251.748866][ T9242] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 251.752383][ T9242] page_owner tracks the page as freed [ 251.754867][ T9242] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 9221, tgid 9219 (syz.2.664), ts 249313830025, free_ts 249771444687 [ 251.764786][ T9242] post_alloc_hook+0x2d1/0x350 [ 251.768605][ T9242] get_page_from_freelist+0x1351/0x2e50 [ 251.771889][ T9242] __alloc_pages_noprof+0x22b/0x2460 [ 251.773305][ T9242] alloc_pages_mpol_noprof+0x275/0x610 [ 251.774761][ T9242] folio_alloc_mpol_noprof+0x36/0xd0 [ 251.776178][ T9242] vma_alloc_folio_noprof+0xee/0x1b0 [ 251.778772][ T9242] do_wp_page+0xfd7/0x3430 [ 251.780191][ T9242] __handle_mm_fault+0x2474/0x5650 [ 251.781553][ T9242] handle_mm_fault+0x498/0xa60 [ 251.782823][ T9242] do_user_addr_fault+0x7a3/0x13f0 [ 251.784367][ T9242] exc_page_fault+0x5c/0xc0 [ 251.786048][ T9242] asm_exc_page_fault+0x26/0x30 [ 251.787893][ T58] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 251.795832][ T9242] page last free pid 9219 tgid 9219 stack trace: [ 251.797961][ T9242] free_unref_folios+0x9e9/0x1390 [ 251.799320][ T9242] folios_put_refs+0x560/0x760 [ 251.800924][ T9242] free_pages_and_swap_cache+0x36d/0x510 [ 251.802391][ T9242] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 251.804020][ T9242] tlb_flush_mmu+0xe9/0x590 [ 251.805724][ T9242] unmap_page_range+0x1d20/0x3d30 [ 251.808257][ T9242] unmap_single_vma+0x194/0x2b0 [ 251.809606][ T9242] unmap_vmas+0x22f/0x490 [ 251.811425][ T9242] exit_mmap+0x1b8/0xb20 [ 251.812555][ T9242] __mmput+0x12a/0x480 [ 251.813610][ T9242] mmput+0x62/0x70 [ 251.814651][ T9242] do_exit+0x9bf/0x2bb0 [ 251.815785][ T9242] do_group_exit+0xd3/0x2a0 [ 251.817094][ T9242] __x64_sys_exit_group+0x3e/0x50 [ 251.818924][ T9242] x64_sys_call+0x14a9/0x16a0 [ 251.820213][ T9242] do_syscall_64+0xcd/0x250 [ 251.826684][ T9242] ------------[ cut here ]------------ [ 251.828683][ T9242] kernel BUG at include/linux/mm.h:1460! [ 251.830161][ T9242] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 251.832038][ T9242] CPU: 1 UID: 0 PID: 9242 Comm: syz.3.669 Not tainted 6.11.0-syzkaller-02574-ga430d95c5efa #0 [ 251.833592][ T1432] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 251.836502][ T9242] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 251.836514][ T9242] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 251.840441][ T1432] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 251.843083][ T9242] Code: b0 8b 48 89 df e8 82 b1 48 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 42 30 04 fd 48 c7 c6 00 b7 b0 8b 4c 89 e7 e8 63 b1 48 fd 90 <0f> 0b e8 2b 30 04 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 251.843097][ T9242] RSP: 0018:ffffc9000473ec90 EFLAGS: 00010293 [ 251.845376][ T1432] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 251.848904][ T9242] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 251.848915][ T9242] RDX: ffff88803028a440 RSI: ffffffff8487a8ad RDI: ffff88803028a884 [ 251.848922][ T9242] RBP: ffffea00015d5634 R08: 0000000000000001 R09: fffffbfff2d39b07 [ 251.848928][ T9242] R10: ffffffff969cd83f R11: ffff88806a728a40 R12: ffffea00015d5600 [ 251.848934][ T9242] R13: ffff88802bb2c000 R14: 0000000000001000 R15: 0000000000001000 [ 251.848940][ T9242] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 251.848959][ T9242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 251.848968][ T9242] CR2: 0000001b317baff8 CR3: 0000000026558000 CR4: 0000000000350ef0 [ 251.848974][ T9242] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 251.859020][ T1432] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.859955][ T9242] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 251.871104][ T1432] usb 6-1: config 0 descriptor?? [ 251.871316][ T9242] Call Trace: [ 251.871326][ T9242] [ 251.871334][ T9242] ? show_regs+0x8c/0xa0 [ 251.894621][ T1432] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 251.895523][ T9242] ? die+0x36/0xa0 [ 251.899084][ T9242] ? do_trap+0x232/0x430 [ 251.900304][ T9242] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 251.901994][ T9242] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 251.903598][ T9242] ? do_error_trap+0xf4/0x230 [ 251.905024][ T9242] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 251.906466][ T9242] ? handle_invalid_op+0x34/0x40 [ 251.907650][ T9242] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 251.909144][ T9242] ? exc_invalid_op+0x2e/0x50 [ 251.910367][ T9242] ? asm_exc_invalid_op+0x1a/0x20 [ 251.911689][ T9242] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 251.913454][ T9242] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 251.915468][ T9242] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 251.917646][ T9242] ? radix_tree_node_alloc.constprop.0+0x1b8/0x350 [ 251.919953][ T9242] ? delete_node+0x207/0x8e0 [ 251.921723][ T9242] iov_iter_get_pages_alloc2+0x53/0xf0 [ 251.923927][ T9242] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 251.926441][ T9242] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 251.929007][ T9242] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 251.930783][ T9242] p9_virtio_zc_request+0x1be/0x1390 [ 251.932645][ T9242] ? p9pdu_writef+0xc4/0x100 [ 251.934096][ T9242] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 251.935669][ T9242] ? __pfx_p9_tag_alloc+0x10/0x10 [ 251.937230][ T9242] ? rcu_is_watching+0x12/0xc0 [ 251.938599][ T9242] ? trace_9p_protocol_dump+0x192/0x220 [ 251.940148][ T9242] ? rcu_is_watching+0x12/0xc0 [ 251.941471][ T9242] ? p9_client_prepare_req+0x111/0x4d0 [ 251.942984][ T9242] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 251.944821][ T9242] ? hlock_class+0x4e/0x130 [ 251.946253][ T9242] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 251.948164][ T9242] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 251.950227][ T9242] ? __pfx___lock_acquire+0x10/0x10 [ 251.951639][ T9242] ? hlock_class+0x4e/0x130 [ 251.952891][ T9242] ? mark_lock+0xb5/0xc60 [ 251.954266][ T9242] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 251.956219][ T9242] p9_client_write+0x447/0x680 [ 251.957804][ T9242] ? __pfx_p9_client_write+0x10/0x10 [ 251.959633][ T9242] ? mark_held_locks+0x9f/0xe0 [ 251.961324][ T9242] v9fs_issue_write+0xe2/0x180 [ 251.963001][ T9242] ? __pfx_v9fs_issue_write+0x10/0x10 [ 251.964832][ T9242] ? rcu_is_watching+0x12/0xc0 [ 251.966297][ T9242] ? trace_netfs_sreq+0x193/0x220 [ 251.967926][ T9242] netfs_do_issue_write+0x92/0x110 [ 251.969900][ T9242] netfs_advance_write+0x164/0xbd0 [ 251.971743][ T9242] ? netfs_buffer_append_folio+0x569/0x750 [ 251.973668][ T9242] netfs_write_folio+0xc44/0x18f0 [ 251.975484][ T9242] netfs_writepages+0x2ba/0xb90 [ 251.977233][ T9242] ? __pfx_netfs_writepages+0x10/0x10 [ 251.979178][ T9242] ? __pfx___lock_acquire+0x10/0x10 [ 251.981010][ T9242] ? __pfx_netfs_writepages+0x10/0x10 [ 251.982944][ T9242] do_writepages+0x1a3/0x7f0 [ 251.984624][ T9242] ? __pfx_do_writepages+0x10/0x10 [ 251.986455][ T9242] ? __pfx_lock_acquire+0x10/0x10 [ 251.988223][ T9242] ? __pfx_mark_lock+0x10/0x10 [ 251.989551][ T9242] ? do_raw_spin_lock+0x12d/0x2c0 [ 251.991289][ T9242] ? do_raw_spin_unlock+0x172/0x230 [ 251.993236][ T9242] ? _raw_spin_unlock+0x28/0x50 [ 251.994993][ T9242] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 251.997057][ T9242] filemap_fdatawrite_wbc+0x148/0x1c0 [ 251.998903][ T9242] v9fs_mmap_vm_close+0x20d/0x260 [ 252.000734][ T9242] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 252.002600][ T9242] ? mas_walk+0x67c/0x8d0 [ 252.004043][ T9242] ? __pfx___might_resched+0x10/0x10 [ 252.005898][ T9242] ? __pfx_v9fs_mmap_vm_close+0x10/0x10 [ 252.007950][ T9242] remove_vma+0x8b/0x180 [ 252.009508][ T9242] exit_mmap+0x4d4/0xb20 [ 252.011011][ T9242] ? __pfx_exit_mmap+0x10/0x10 [ 252.012709][ T9242] __mmput+0x12a/0x480 [ 252.013930][ T9242] mmput+0x62/0x70 [ 252.015250][ T9242] do_exit+0x9bf/0x2bb0 [ 252.016675][ T9242] ? get_signal+0x8f2/0x2770 [ 252.018095][ T9242] ? __pfx_do_exit+0x10/0x10 [ 252.019706][ T9242] ? do_raw_spin_lock+0x12d/0x2c0 [ 252.021146][ T9242] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 252.022796][ T9242] do_group_exit+0xd3/0x2a0 [ 252.024296][ T9242] get_signal+0x25fb/0x2770 [ 252.025576][ T9242] ? __pfx_get_signal+0x10/0x10 [ 252.027218][ T9242] ? kick_process+0xf6/0x1b0 [ 252.028686][ T9242] ? task_work_add+0x1d6/0x370 [ 252.030093][ T9242] arch_do_signal_or_restart+0x90/0x7e0 [ 252.031571][ T9242] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 252.033223][ T9242] ? ksys_write+0x1ab/0x260 [ 252.034744][ T9242] ? __pfx_ksys_write+0x10/0x10 [ 252.036536][ T9242] syscall_exit_to_user_mode+0x150/0x2a0 [ 252.038585][ T9242] do_syscall_64+0xda/0x250 [ 252.039814][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.041341][ T9242] RIP: 0033:0x7f865ff7def9 [ 252.042509][ T9242] Code: Unable to access opcode bytes at 0x7f865ff7decf. [ 252.044465][ T9242] RSP: 002b:00007f8660d6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 252.047161][ T9242] RAX: 0000000000020000 RBX: 00007f8660135f80 RCX: 00007f865ff7def9 [ 252.049800][ T9242] RDX: 00000000fffffecc RSI: 0000000020000000 RDI: 0000000000000005 [ 252.052501][ T9242] RBP: 00007f865fff0b76 R08: 0000000000000000 R09: 0000000000000000 [ 252.055012][ T9242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 252.057695][ T9242] R13: 0000000000000000 R14: 00007f8660135f80 R15: 00007ffccee75ce8 [ 252.060370][ T9242] [ 252.061452][ T9242] Modules linked in: [ 252.090933][ T58] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 252.094293][ T58] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 252.097324][ T9242] ---[ end trace 0000000000000000 ]--- [ 252.098338][ T58] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 252.101157][ T9242] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 252.101612][ T58] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 252.102679][ T58] usb 5-1: config 0 descriptor?? [ 252.113216][ T9242] Code: b0 8b 48 89 df e8 82 b1 48 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 42 30 04 fd 48 c7 c6 00 b7 b0 8b 4c 89 e7 e8 63 b1 48 fd 90 <0f> 0b e8 2b 30 04 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 252.128902][ T9242] RSP: 0018:ffffc9000473ec90 EFLAGS: 00010293 [ 252.130556][ T9242] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 252.132644][ T9242] RDX: ffff88803028a440 RSI: ffffffff8487a8ad RDI: ffff88803028a884 [ 252.147695][ T9242] RBP: ffffea00015d5634 R08: 0000000000000001 R09: fffffbfff2d39b07 [ 252.149893][ T9242] R10: ffffffff969cd83f R11: ffff88806a728a40 R12: ffffea00015d5600 [ 252.152041][ T9242] R13: ffff88802bb2c000 R14: 0000000000001000 R15: 0000000000001000 [ 252.154086][ T9242] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 252.156963][ T9242] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 252.159194][ T9242] CR2: 0000000020021000 CR3: 000000002632c000 CR4: 0000000000350ef0 [ 252.161927][ T9242] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 252.164100][ T9242] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 252.172136][ T9242] Kernel panic - not syncing: Fatal exception [ 252.174395][ T9242] Kernel Offset: disabled [ 252.175850][ T9242] Rebooting in 86400 seconds.. VM DIAGNOSIS: 03:45:00 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000000 RBX=ffffc9000467fb80 RCX=0000000000000000 RDX=0000000000000000 RSI=ffffffff84b99634 RDI=ffffc9000467fb80 RBP=ffffffff84b99620 RSP=ffffc90000007f60 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=ffffc90000007ff8 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000000 R15=ffffc9000467fb48 RIP=ffffffff84b9965d RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002004f000 CR3=000000003116e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000001 Opmask01=0000000000000001 Opmask02=00000000fc000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffa7adcab0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8503b9e5 RDI=ffffffff9a687d80 RBP=ffffffff9a687d40 RSP=ffffc9000473e628 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=0000000000000020 R14=ffffffff8503b980 R15=0000000000000000 RIP=ffffffff8503ba0f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b317baff8 CR3=0000000026558000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000006001 Opmask01=0000000000c00200 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc58ade720 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78302f3437343278 302b746c7561665f 6d00006463685f79 6d6d756420676e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7230253437343272 3021746675616655 6700006463625573 6767756420676400 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616d6f2062206600 0020303030303030 30202e3030303030 3020206664612d66 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3432202030203000 0020202630303030 30202e3000003030 2020202026232d36 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3e382a797e556f6f 786c2a263f383a3a 3932393b39333e38 2a797e2a26233e3c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6b677e6b682a6c0a 0a3a3a3a3a3a3a3a 3a3a3a3a3a3a3a3a 3a2a6c6c6c6c6c6c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000062 RCX=ffffffff816cc781 RDX=ffff888029744880 RSI=ffffffff816cc76f RDI=0000000000000001 RBP=0000000000000001 RSP=ffffc90006dff420 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=0000000000000200 R13=ffff88803028a440 R14=ffffffff8bdbea00 R15=ffffc90006dff480 RIP=ffffffff816cc771 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020023000 CR3=0000000026f12000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffff800 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c76dbf70 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f54c69f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000312e63 64755f796d6d7564 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=ffffc900042cf4f8 RBX=ffffc900042cecb0 RCX=ffffc900071d2000 RDX=0000000000040000 RSI=ffffffff813cfe75 RDI=0000000000000005 RBP=ffffc900042cf4f0 RSP=ffffc900042cebe0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=dffffc0000000000 R12=ffffc900042cecb8 R13=ffffc900042cecc0 R14=0000000000000001 R15=ffffc900042d0000 RIP=ffffffff818bd8e0 RFL=00000212 [----A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f50e13946c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020948000 CR3=0000000032b38000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000fc000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff3bf84bf0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50e05f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50e05f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50e05f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50e05f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50e05f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f50e05f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000e4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000003 0000000000000000 0000000000000000 00000000000000e4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000