last executing test programs: 1m36.64786273s ago: executing program 1 (id=1103): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0) (async, rerun: 64) mount$binder(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0xe2ca6, &(0x7f0000000000)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0]) (rerun: 64) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000029c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x1, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8080}, 0x4000010) 1m36.527498231s ago: executing program 1 (id=1107): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000005c0)='configfs\x00', 0x200000, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) (async) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x280880, 0x0) close(r2) (async) socket$netlink(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'veth1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0xf}, {&(0x7f0000000140)="be34b4a6b14c4e5251427d6e6d20d375ae899ad7a2cfd64af69b162582", 0x1d}], 0x2) (async) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x67) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) (async) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r6, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) (async) r7 = dup(r6) write$FUSE_BMAP(r7, &(0x7f0000000100)={0x18}, 0x18) (async) write$FUSE_NOTIFY_RETRIEVE(r7, &(0x7f00000000c0)={0x14c}, 0x137) (async) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2cacd06b77dcc077663d00000046f8b3e855b6ce495a80e1eaba3985c9b67c61605358b0f17f50ad299eb66eec1fbf7c875a8693376a50422e09a72ec050c2b048670d07a8e2830dac12bc1efb6f9be4c58877cd35836879041610f5ebd20b000000f1a0ef0ae431bfaf449bed7175002be1c91e50a6402d5957f5ce53fba8d69826519f6c5b26c14d33419fe8233edc7b38fea193ce71bbd4ba947db9f8f27152b29ad717e52c1cf1c508f967158a4cc59c0db63b", @ANYRESHEX=r7]) (async) r8 = creat(&(0x7f0000000300)='./file0\x00', 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000180)={'pimreg0\x00'}) 1m36.318225034s ago: executing program 1 (id=1110): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x89fd, &(0x7f0000000900)={'bond0\x00', @broadcast}) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x6, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x13}, 0x94) unshare(0x22020600) r2 = syz_io_uring_setup(0x5444, &(0x7f0000000200)={0x0, 0xd83e, 0x10, 0x0, 0xf1}, &(0x7f0000000000), &(0x7f0000000100)) r3 = syz_io_uring_setup(0x15ae, &(0x7f0000000500)={0x0, 0xbc48, 0x13290, 0x0, 0x1e1, 0x0, r2}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r3}) io_uring_enter(r3, 0x1, 0xfffffffe, 0x1, 0x0, 0x0) openat$rfkill(0xffffff9c, &(0x7f0000000180), 0xc81, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYSTEM={0x8, 0x1a, @multicast2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048c4}, 0x0) 1m36.226024982s ago: executing program 1 (id=1111): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x150000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000580)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x1b5008, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0/file0\x00', 0x0, 0x80000, 0x0) 1m36.225612428s ago: executing program 1 (id=1112): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) (async) bind$inet(r0, &(0x7f0000000800)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x10008) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) dup(r2) (async) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_BMAP(r3, &(0x7f0000000000)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0) write$FUSE_GETXATTR(r3, &(0x7f00000004c0)={0x18, 0xfffffffffffffffe, 0x0, {0x40000}}, 0x18) openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) (async) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000008340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r3, &(0x7f00000005c0)={0xa0, 0x0, r5, {{0x1, 0x3, 0x1, 0x845, 0xfffffffa, 0x2c, {0x0, 0x7fffffff, 0x5, 0xa, 0x3, 0x8000000000000001, 0x4, 0x7, 0x102, 0x2000, 0x8e5, r6, r7, 0x7f, 0xffff}}, {0x0, 0x13}}}, 0xa0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000400)=ANY=[@ANYBLOB="7438a610c23b9ef1467266646e6f3d", @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r3, @ANYBLOB=',cache=fscache,\x00']) r8 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r8, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000680)=0x1000, 0x4) (async) setsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000680)=0x1000, 0x4) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) (async) r9 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_mtu_probing\x00', 0x1, 0x0) pwritev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0) (async) pwritev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="4c108416b9c57b", 0x7}], 0x1, 0x7, 0xb0) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) (async) sendmmsg$inet(r3, &(0x7f0000000600)=[{{&(0x7f0000000c00)={0x2, 0x4e20, @multicast2}, 0x10, 0x0}}], 0x1, 0xc044) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) r10 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi5\x00', 0x101000, 0x0) ioctl$COMEDI_BUFCONFIG(r10, 0x8020640d, &(0x7f00000001c0)={0x0, 0x9, 0x1, 0x8}) socket$inet(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r12, @ANYBLOB="800202000a000200577f0000aabb000020000e80050001008f000000050001000100000004000200050001"], 0x48}}, 0x0) sendmsg$nl_generic(r11, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000c40)=ANY=[@ANYBLOB="cc020000290000012bbd7000fcdbdf251d000000ce008e801400d30000000000000000000000000000000000717d9fbc02c6ea11dd7fa9f4ad515136752cfe609615e5c7d62bd8c8ac16ad8c6753ddcc8ebf2d60e13943dddef7bf9508004800640101016d2d9799be629f3ef5af48d2ca72a0b145f92f1167019c4b810ee0dcfaa541b267fae8f30d2f31f6c9569aaeb971fe0d15556eb0266fd7fd1b868e5e2a9a60a3c8a6661456e9c3243097e66ce4223b7530c63840186e6d703511e7ff7c84480e11f22c8687536b8a3d152815ed8152b6b74d0ad8b058742733caa0b226b3000053794d70acfbe78a575f8c37feaab042e5d6fd18e37877c776f3322a6419d2813965a358f1d776e16fe336e9b9b2aad73cd9f6c986ae686c538cc058830fb06456ba46e2c221a9f6cbe6641086797865fccf03d1c622d7339f69081f75cfb6de3a9a92f67bbad249b7252525b0e8971dc1254a60de8041f1ac07ad714574497bd389c7142e8fa13fb7c38083c7c555ba4a71dfb354ef19f630bf00cdf6d8672891c930e220f36a333c1233150db65f75abbb0bdb0c0171e427b36ddc68c87003a953b6d3d4fd4b5c42616b0b89a48bea20b4a9dab58d34393ca12f9a0074553649dd7cfc40949a2f7a05184f86d19fe264fd15fe8d965cc8264eed60be6ef86e17c2587d0bbee8aae671a53da0a0c2fa3315bbed91c7e6c75f34d301d8443179871632d39a5463726a5ee58e4ecbca3d99fd3ffb3743608ee5ad3f14d3a6b96d16080dd8f7b0400f02169ec39b2f492b55749050760a7436e0bcf30fc0a050a342c60c0d29be04d959a6fc274f025493ab841593dd00d922c1278417bd3ab834f17e043789d8faba3d4bed13ebf691cd4ca305a1d45e0270ba030c9ca754e05350af0b1586d6f8cfa1133f3fbe102aa6fc70e021ca14755510f40576f4689714563a952df973fde840ce947aa4951b72a651422be2f501c40a497f53d3bceb260800088004000f8031b6acd41c8875b42478c593f128a419c86bb9ba3e388ed8d65b930c9f8041d9ca741a684b7d96b284fac0f75e8bae3280298e45f54a0213e7ee2fb5011f0e0ebde1c178325d297f1a3a5bd2748cc92e73dbf4495b7025dbcc65119362978ff912e70364f0b39506477bfd0d73d2194fd7d2e8d9060342439e3fe8466414575b8ed325bcb25d14c2aeaabb567e54ba5e0727ac041d7a4afb535b240bca5d172b5a004426a4b119dbcb94569d4300a4c4d3f69cf87c157d87137ee629268dcede9ed9831430b66c30a6b02948e40dedba585d10f1ed8497fccabfb5c7459ff6f500dc0f7bdbc19511413722b86e45f168850c280eb7b7b954f6c5233474881c78bac6aac9a6c7ac1c94308cf7425f46719a65e46f3c14584bc66b36591ea0de9d8d54939b00423440215b6b4a7f72c8b416a08ede2498313ad5ca05441c498836663da68b"], 0x2cc}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 1m35.957465509s ago: executing program 1 (id=1113): r0 = io_uring_setup(0x6b1f, &(0x7f0000000000)={0x0, 0x252, 0x1000, 0x1, 0x2bf}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000024c0)={0x9, 0x0, &(0x7f0000002400)=[{&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/83, 0x53}, {&(0x7f0000001200)=""/244, 0xf4}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/195, 0xc3}], &(0x7f0000002480)=[0x2, 0x7], 0x7}, 0x20) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000002500)={0x0, @default, @bpq0, 0x5, 'syz1\x00', @null, 0xfffffffd, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002580)=""/25, 0x19}, {&(0x7f00000025c0)=""/73, 0x49}, {&(0x7f0000002640)=""/125, 0x7d}, {&(0x7f00000026c0)=""/213, 0xd5}, {&(0x7f00000027c0)=""/89, 0x59}], 0x5) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004300)=[{0x5, 0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000028c0)=""/17, 0x11}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/139, 0x8b}, {&(0x7f00000039c0)=""/219, 0xdb}, {&(0x7f0000003ac0)=""/179, 0xb3}], &(0x7f0000003c00)=[0x1, 0x6, 0xfffffffffffffff9, 0x40, 0x67800, 0x100, 0x1, 0x4, 0x1, 0x2]}, {0x5, 0x1, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c80)=""/115, 0x73}, {&(0x7f0000003d00)=""/81, 0x51}, {&(0x7f0000003d80)=""/248, 0xf8}, {&(0x7f0000003e80)=""/105, 0x69}, {&(0x7f0000003f00)=""/19, 0x13}], &(0x7f0000003fc0)=[0x7, 0x9]}, {0x3, 0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004000)=""/65, 0x41}, {&(0x7f0000004080)=""/232, 0xe8}, {&(0x7f0000004180)=""/200, 0xc8}], &(0x7f00000042c0)=[0xc, 0x2, 0x186c, 0x9]}], 0x3) r2 = syz_open_dev$sndpcmc(&(0x7f0000004380), 0x9, 0x41c000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f00000043c0)=0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000004400)='veth1_to_batadv\x00') ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000004440)={0x1, 0x1, 0x321, 0x63f, 0x2, 0xc7, 0x800, 0x7, 0x400, 0x4, 0x6, 0x1}) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfe0be4ebe08858e5) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000004500)={@multicast1}, &(0x7f0000004540)=0xc) ppoll(&(0x7f0000004580)=[{r3, 0x4}, {r0, 0x3000}, {r1, 0x18}, {r0, 0x500}], 0x4, &(0x7f00000045c0), &(0x7f0000004600)={[0x5]}, 0x8) r4 = syz_open_dev$sndpcmc(&(0x7f0000004640), 0x401, 0x400041) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000004680)={0x5, "54cec52275f147362dc4ce13fed9e24fa751bad834226fc7b9725d17d9f649c03e130e694031a636fddd19b2cc253e4973599d38cb473ecbada1c17164c8fb4b", {0x6, 0x100000000}}) r5 = creat(&(0x7f0000004740)='./file0\x00', 0x11d) ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0x40044145, &(0x7f0000004780)=0x80000000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000047c0)={0x0, 0x5a39}, &(0x7f0000004800)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000004840)={r6, 0x6}, &(0x7f0000004880)=0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000048c0), 0x232001, 0x0) r8 = dup(r7) socket$packet(0x11, 0x2, 0x300) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004940), r7) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000004b00)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004980)={0x124, r9, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x200}, @NL80211_ATTR_IE={0xdc, 0x2a, [@random={0x87, 0xd, "124c72b8e6bdc2be86b34ef9a8"}, @supported_rates={0x1, 0x4, [{0x2c}, {0x1, 0x1}, {0x18}, {0x36, 0x1}]}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x1000, 0x8, 0x0, 0x133, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x7}}, @mic={0x8c, 0x18, {0x6ae, "17ac4572c9cb", @long="9ce401522fa34ca1054ddb55cd8d2aeb"}}, @measure_req={0x26, 0x8b, {0xc, 0x5, 0x0, "2f96696a83c82054aa6ce09cba07d03a537d09a9a8e1a649baf879405a919ae8f80069b20584769208a0d66122cb65dfafe166e9368f293c0b32c22541900d19c104b71362f486099533f7f9cc2cffb85984f6868696e01ebc2a9236fa47882f9576a66da125c28545957096486f6fa06f52707804bf41ea7019b91338ef632db269eabbe07484d0"}}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0xc840}, 0x4000008) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x15c2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000004b40)={"edf9f0b886d0948c69035b736c4d53e1", 0x0, 0x0, {0x8000000000000001, 0x80000000}, {0xfffffffffffffffd, 0x7fffffff}, 0x1000, [0x8, 0x3ff, 0x27, 0x3e13, 0x1, 0x2, 0x4a, 0x779, 0x8c, 0x8, 0x6, 0x1000, 0xffffffffffffff39, 0xe44, 0x35, 0x9]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000004c40)={{r8}, r10, 0x0, @unused=[0x8, 0x5, 0x9, 0xffffffffffffffff], @name="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"}) ioctl$TIOCCONS(r5, 0x541d) 1m35.921320699s ago: executing program 32 (id=1113): r0 = io_uring_setup(0x6b1f, &(0x7f0000000000)={0x0, 0x252, 0x1000, 0x1, 0x2bf}) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r0, 0xe, &(0x7f00000024c0)={0x9, 0x0, &(0x7f0000002400)=[{&(0x7f0000000080)=""/104, 0x68}, {&(0x7f0000000100)=""/73, 0x49}, {&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/83, 0x53}, {&(0x7f0000001200)=""/244, 0xf4}, {&(0x7f0000001300)=""/4096, 0x1000}, {&(0x7f0000002300)=""/195, 0xc3}], &(0x7f0000002480)=[0x2, 0x7], 0x7}, 0x20) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r1, 0x890c, &(0x7f0000002500)={0x0, @default, @bpq0, 0x5, 'syz1\x00', @null, 0xfffffffd, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000002840)=[{&(0x7f0000002580)=""/25, 0x19}, {&(0x7f00000025c0)=""/73, 0x49}, {&(0x7f0000002640)=""/125, 0x7d}, {&(0x7f00000026c0)=""/213, 0xd5}, {&(0x7f00000027c0)=""/89, 0x59}], 0x5) io_uring_register$IORING_REGISTER_RING_FDS(r0, 0x14, &(0x7f0000004300)=[{0x5, 0x0, 0x0, &(0x7f0000003b80)=[{&(0x7f00000028c0)=""/17, 0x11}, {&(0x7f0000002900)=""/4096, 0x1000}, {&(0x7f0000003900)=""/139, 0x8b}, {&(0x7f00000039c0)=""/219, 0xdb}, {&(0x7f0000003ac0)=""/179, 0xb3}], &(0x7f0000003c00)=[0x1, 0x6, 0xfffffffffffffff9, 0x40, 0x67800, 0x100, 0x1, 0x4, 0x1, 0x2]}, {0x5, 0x1, 0x0, &(0x7f0000003f40)=[{&(0x7f0000003c80)=""/115, 0x73}, {&(0x7f0000003d00)=""/81, 0x51}, {&(0x7f0000003d80)=""/248, 0xf8}, {&(0x7f0000003e80)=""/105, 0x69}, {&(0x7f0000003f00)=""/19, 0x13}], &(0x7f0000003fc0)=[0x7, 0x9]}, {0x3, 0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000004000)=""/65, 0x41}, {&(0x7f0000004080)=""/232, 0xe8}, {&(0x7f0000004180)=""/200, 0xc8}], &(0x7f00000042c0)=[0xc, 0x2, 0x186c, 0x9]}], 0x3) r2 = syz_open_dev$sndpcmc(&(0x7f0000004380), 0x9, 0x41c000) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f00000043c0)=0x1) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000004400)='veth1_to_batadv\x00') ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r2, 0xc0884113, &(0x7f0000004440)={0x1, 0x1, 0x321, 0x63f, 0x2, 0xc7, 0x800, 0x7, 0x400, 0x4, 0x6, 0x1}) socket$nl_route(0x10, 0x3, 0x0) mprotect(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfe0be4ebe08858e5) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_mreqn(r3, 0x0, 0x0, &(0x7f0000004500)={@multicast1}, &(0x7f0000004540)=0xc) ppoll(&(0x7f0000004580)=[{r3, 0x4}, {r0, 0x3000}, {r1, 0x18}, {r0, 0x500}], 0x4, &(0x7f00000045c0), &(0x7f0000004600)={[0x5]}, 0x8) r4 = syz_open_dev$sndpcmc(&(0x7f0000004640), 0x401, 0x400041) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f0000004680)={0x5, "54cec52275f147362dc4ce13fed9e24fa751bad834226fc7b9725d17d9f649c03e130e694031a636fddd19b2cc253e4973599d38cb473ecbada1c17164c8fb4b", {0x6, 0x100000000}}) r5 = creat(&(0x7f0000004740)='./file0\x00', 0x11d) ioctl$SNDRV_PCM_IOCTL_PAUSE(r5, 0x40044145, &(0x7f0000004780)=0x80000000) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000047c0)={0x0, 0x5a39}, &(0x7f0000004800)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000004840)={r6, 0x6}, &(0x7f0000004880)=0x8) r7 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000048c0), 0x232001, 0x0) r8 = dup(r7) socket$packet(0x11, 0x2, 0x300) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004940), r7) sendmsg$NL80211_CMD_TRIGGER_SCAN(r8, &(0x7f0000004b00)={&(0x7f0000004900)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000004ac0)={&(0x7f0000004980)={0x124, r9, 0x4, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x14, 0x2c, 0x0, 0x1, [{0x8, 0x0, 0x6}, {0x8, 0x0, 0x6}]}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x7}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x200}, @NL80211_ATTR_IE={0xdc, 0x2a, [@random={0x87, 0xd, "124c72b8e6bdc2be86b34ef9a8"}, @supported_rates={0x1, 0x4, [{0x2c}, {0x1, 0x1}, {0x18}, {0x36, 0x1}]}, @ht={0x2d, 0x1a, {0xc, 0x0, 0x0, 0x0, {0x1000, 0x8, 0x0, 0x133, 0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x7}}, @mic={0x8c, 0x18, {0x6ae, "17ac4572c9cb", @long="9ce401522fa34ca1054ddb55cd8d2aeb"}}, @measure_req={0x26, 0x8b, {0xc, 0x5, 0x0, "2f96696a83c82054aa6ce09cba07d03a537d09a9a8e1a649baf879405a919ae8f80069b20584769208a0d66122cb65dfafe166e9368f293c0b32c22541900d19c104b71362f486099533f7f9cc2cffb85984f6868696e01ebc2a9236fa47882f9576a66da125c28545957096486f6fa06f52707804bf41ea7019b91338ef632db269eabbe07484d0"}}]}, @NL80211_ATTR_MEASUREMENT_DURATION_MANDATORY={0x4}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}]}, 0x124}, 0x1, 0x0, 0x0, 0xc840}, 0x4000008) ioctl$RTC_IRQP_SET(r5, 0x4008700c, 0x15c2) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r5, 0xc0c89425, &(0x7f0000004b40)={"edf9f0b886d0948c69035b736c4d53e1", 0x0, 0x0, {0x8000000000000001, 0x80000000}, {0xfffffffffffffffd, 0x7fffffff}, 0x1000, [0x8, 0x3ff, 0x27, 0x3e13, 0x1, 0x2, 0x4a, 0x779, 0x8c, 0x8, 0x6, 0x1000, 0xffffffffffffff39, 0xe44, 0x35, 0x9]}) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r1, 0x50009418, &(0x7f0000004c40)={{r8}, r10, 0x0, @unused=[0x8, 0x5, 0x9, 0xffffffffffffffff], @name="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"}) ioctl$TIOCCONS(r5, 0x541d) 55.759687647s ago: executing program 2 (id=1740): bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[], 0x20}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) (async) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x240200d0}, 0x11) sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x85}, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000d40012"], 0x110}}, 0x4000) (async) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0xfd, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) (async) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0xfffffffffffffffc, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) accept$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0xffff0000, 0xe, 0x0, &(0x7f00000003c0)="2b206d0748436697737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000003580)={0x2, 0x4e04, @multicast1}, 0x10) bind$inet(r7, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) 55.759165085s ago: executing program 2 (id=1741): syz_clone3(&(0x7f0000000300)={0x298000, &(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080), {0x35}, &(0x7f00000000c0)=""/45, 0x2d, &(0x7f0000000200)=""/239, &(0x7f0000000100)=[0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff], 0x4}, 0x58) r1 = gettid() r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000380)={{0x3, @default}, [@bcast, @netrom, @default, @null, @rose, @bcast, @remote, @bcast]}, &(0x7f0000000400)=0x48, 0x0) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x22528, 0x800}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa, 0x9}]}}}, @IFLA_LINK={0x8, 0x5, r5}]}, 0x48}}, 0x800) kcmp(r0, r1, 0x0, r2, r3) syz_emit_ethernet(0x107, &(0x7f0000000440)={@local, @remote, @void, {@llc={0x4, {@snap={0xff, 0xaa, '1', "5a65de", 0x6003, "19838a0aa72e61f13d8fb332a207c8256b9b181aca1c610ac6b03579a60ce790e90743475be7d2bc368ff467f8cfdcaec4500914e9d6c5c59a0ca8b94fab873fe5bbdc227ebc6613576353350176da0d6a48d8a75ada2f4e1af954f8a43f1c8579b8c2a1a0ff62eaac5060e314573eecb4f0f29ed6e31cdc4fae9335081cb4ebf58a00b866e5ba2426dc2d9214cd49983cb70ec92de69b8e18175779e6f606bcd2608036538dbb2ccc3a430d66e19ec859563f0bf17e7cb68c99f1b7d1edaa0b6bbfa5aff3e11f10a64180e4a7dbe68d79ecf3d81fe3c36175d8fa3814a3cce7d2fa0be5617245233952b5bdb3644ba3bc"}}}}}, 0x0) 55.689936928s ago: executing program 2 (id=1742): r0 = fsopen(&(0x7f00000022c0)='hugetlbfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='/\x00', &(0x7f0000000080)='mode\x00', 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r4, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r4, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r4, 0x11b, 0x5, &(0x7f0000000300)=0x1, 0x4) bind$xdp(r4, &(0x7f0000000100)={0x2c, 0x0, r6}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r4}, 0x60) r7 = fcntl$dupfd(r0, 0x0, r0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r8, 0x10e, 0x2, &(0x7f0000000040)=0xd, 0x4) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r8, 0x8008f512, &(0x7f00000000c0)) 55.61041254s ago: executing program 2 (id=1744): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000002, 0x200000005c832, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000000)=0xa0, 0x4) openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') (async) symlinkat(&(0x7f0000000200)='./file0/file0\x00', r0, &(0x7f0000000240)='./file0\x00') r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) (async) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, 0x0, &(0x7f0000001b00)) r3 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x2002) ioctl$EVIOCGSND(r3, 0x8040451a, &(0x7f0000000080)=""/230) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) 55.606052715s ago: executing program 2 (id=1745): r0 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time\x00') setns(r0, 0x80) (async) ioprio_set$uid(0x3, 0x0, 0x0) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f00000002c0)) (async) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 55.364430268s ago: executing program 2 (id=1748): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0xffffff66, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.239316778s ago: executing program 33 (id=1748): ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000002cc0)={0x1, [{0x1, 0x4d88, 0x6, &(0x7f0000000640)="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"}, {0x0, 0xffffff66, 0x7fffffff, 0x0}, {0x3, 0x0, 0x100d5b6, 0x0}, {0x1, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x1, 0x0, 0xa2d, 0x0}, {0x0, 0x0, 0x1, 0x0}, {0x1, 0x0, 0xf3f, 0x0}, {0x4, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x3, 0x0, 0x1000, 0x0}, {0x2, 0x0, 0x9, 0x0}, {0x0, 0x0, 0x0, 0x0}, {0x2, 0x0, 0x104, 0x0}, {0x1, 0x0, 0x40007, 0x0}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.86922834s ago: executing program 0 (id=2524): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY={0x14, 0x50, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x48844) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_SET_OP_GET_FNAME(r3, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz1\x00'}, &(0x7f0000000040)=0x2c) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) getsockopt$inet6_opts(r3, 0x29, 0x3a, 0x0, &(0x7f0000000340)) socket$nl_netfilter(0x10, 0x3, 0xc) 1.865393529s ago: executing program 0 (id=2526): syz_emit_ethernet(0x7a, &(0x7f0000000680)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "76db40", 0x44, 0x2f, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}, {}, {}, {0x8, 0x88be, 0x4}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x10}, 0x2, {0x8, 0x1}}}}}}}}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan0\x00'}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0xf) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x32, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.540192334s ago: executing program 0 (id=2533): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) (async) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'multiq3\x00', [0x4f37, 0x7, 0x3, 0x4, 0x5, 0xcc7, 0x8, 0x7, 0xa, 0x7fff, 0x2, 0x1, 0x200001, 0x81, 0x40006, 0x101, 0x0, 0x2, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x92d1, 0xb, 0xe69, 0x3d, 0x8, 0x6, 0x0, 0xfffffff9]}) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="66f6b6", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB="66f6b6", @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) read$FUSE(r0, &(0x7f00000021c0)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getdents64(r3, &(0x7f00000063c0)=""/1024, 0x400) r4 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000080)) (async) ioctl$RNDCLEARPOOL(r4, 0x5206, &(0x7f0000000080)) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(r0, &(0x7f00000067c0), 0x2000, &(0x7f00000087c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000008880)={0x30, 0x0, 0x0, [{0x0, 0x0, 0x4, 0x0, '#,,-'}]}, 0x0, 0x0, 0x0, 0x0}) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x550, 0x40, 0x1000, 0x0, 0xd968d5b908ac0cde, 0x0, {0x0, 0x8}, {0x350}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x1, 0x100, 0x0, 0xd614, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0xb}) 1.538495251s ago: executing program 0 (id=2535): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="640000000206050000000000000000000000000005000400000000000900020073797a320000000014000780050015000000000008001240000000000500050002000000050001000600000016003bcd170300686173683a6e65742c706f72742c6e6574000000"], 0x64}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x4}, 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0x23, 0x0, &(0x7f00000000c0)="3d6ee2e04b91ab10143d9abe86dd9a014efa09790d5e2ffd5d05eb6f982ff43034bdb3", 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r4, 0x11, 0x65, 0x0, &(0x7f0000000080)) recvfrom(r4, &(0x7f0000000380)=""/243, 0xf3, 0x40000040, 0x0, 0x0) 1.469329532s ago: executing program 4 (id=2536): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) r0 = io_uring_setup(0x373e, &(0x7f0000000000)={0x0, 0x1f2c, 0x10000, 0x1, 0xfffffbff}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt(r3, 0x1, 0x9, 0x0, &(0x7f0000000100)) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="ad43000000f45400000001"], 0x14}}, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, &(0x7f0000001440)={0x3, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000000c0)=""/185, 0xb9}, {&(0x7f0000000180)=""/211, 0xd3}, {&(0x7f0000000280)=""/215, 0xd7}, {&(0x7f0000000380)=""/4096, 0x1000}], &(0x7f0000001400)=[0x3, 0x2], 0x5}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 1.469043612s ago: executing program 0 (id=2537): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) setxattr(&(0x7f0000000380)='./file1\x00', &(0x7f0000000440)=ANY=[@ANYBLOB="6f73a3782e78696e6f3d6f6e"], &(0x7f0000000400)='&c@~!^\x00', 0x7, 0x1) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') chdir(&(0x7f00000000c0)='./bus\x00') r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCGICOUNT(r1, 0x545d, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x4a2880, 0x141) openat$vcs(0xffffffffffffff9c, &(0x7f0000000100), 0x400082, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x20020, &(0x7f0000000380)=ANY=[@ANYBLOB='mode=0']) read$FUSE(0xffffffffffffffff, &(0x7f0000002080)={0x2020}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000180)) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r3, 0x4068aea3, &(0x7f0000000000)={0x79}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_MP_STATE(r4, 0x4004ae99, &(0x7f0000000100)=0x4) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, 0x0}], 0x1, 0x60, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r4, 0x4008ae93, &(0x7f00000001c0)=0x2) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x4, 0x1, 0xd000, 0x1000, &(0x7f0000ffd000/0x1000)=nil}) ioctl$KVM_RUN(r4, 0xae80, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) 1.409824981s ago: executing program 4 (id=2539): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x10) (async) sendto$inet6(r0, &(0x7f0000000180)="ed43c643d6c94564c52bd9bb153f4e9c472a73090cadf80312a53eb0607e7daccb196b495d85cd194c122d3c0cebf934728bae969b0f2e44c3cc4d38b841af6002484fc8cc4d2f9fb6356ac6493d4903cf", 0x51, 0x4004001, &(0x7f0000000200)={0xa, 0x4e21, 0x3, @loopback, 0x7}, 0x1c) (async, rerun: 64) r2 = mq_open(&(0x7f0000000040)='!seli\x1a\x1d!\xa7\x00\x00inux\x00G\xd0\xc6(X', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000000300)={0x0, 0x1, 0x3}) (rerun: 64) mq_timedreceive(r2, &(0x7f00000017c0)=""/86, 0x56, 0x8000000000002001, 0x0) (async) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r1, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xce024d}, 0x9c) 1.407592262s ago: executing program 4 (id=2540): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x7, 0x3}}]}, 0x2c}}, 0x0) (async) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r4 = add_key$keyring(&(0x7f0000000080), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$restrict_keyring(0xa, r4, &(0x7f0000000300)='asymmetric\x00', &(0x7f0000000000)='id:cb2e') (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000200)={0x10000, 0x5, 0x0, 0x1000, &(0x7f00006bd000/0x1000)=nil}) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getneigh={0x14, 0x1e, 0x400, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4000801) (async) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000ffe000/0x1000)=nil) (async) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.339824921s ago: executing program 4 (id=2541): pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r0, r1, 0xfffffffffffffc01, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000100)={'ip6_vti0\x00', 0x0, 0x4, 0x5, 0x7, 0x9, 0x2, @local, @loopback, 0x700, 0x8057, 0x2, 0x2}}) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x13, 0x300, 0x70bd27, 0x25dfdbfb, {0xa, 0x2, 0x7, 0xe5, {0x4e24, 0x4e22, [0x3, 0x3, 0xb, 0xdf], [0xd9, 0xfffffffd, 0x0, 0x2], r2, [0x2, 0x8]}, 0x7fffffff, 0x7fff}}, 0x4c}, 0x1, 0x0, 0x0, 0x4050}, 0x14) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'cbcmac(des3_ede-generic)\x00'}, 0x58) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x9b99}, 0x9, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x6, 0xa2b9, 0x6, 0x7, 0xe4, 0x9, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x1, 0x2, 0x4, 0x7, 0x81, 0x8a, 0x79, 0x558e0d31, 0x4, 0x0, 0x91, 0x4, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x5, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x40, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x2, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x8000, 0x5, 0x2, 0x9, 0x80000c1, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x7, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x4, 0x1, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x4, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fbf, 0x762, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x95, 0x8000, 0x5, 0xfffffff9, 0x200004, 0x1000, 0xfffff801, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e6bf783, 0x80000001, 0xb, 0x5, 0x491, 0x8d3, 0x6, 0x8, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x4, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0xff, 0xd3, 0x7, 0x3435, 0x3, 0x9, 0x6f, 0x401, 0x101, 0xdd83, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x81, 0x3, 0x9, 0x9, 0xfffffff7, 0x8, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0x2000005, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x13ffd, 0x1, 0x1b18]}, 0x45c) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000002c0)={'veth1_to_batadv\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c00000010000305000000000000000000006dc4", @ANYRES32=0x0, @ANYBLOB="8b18010000000000240012800b0001006d61637365630000140002800500080000000000050007000000000008000500", @ANYRES32=r5], 0x4c}}, 0x0) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000003b80)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="010000000000000000001400000018"], 0x5c}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r8, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r9, 0x4090ae82, &(0x7f0000000000)={[0x36, 0xfff, 0x0, 0x180, 0x1e4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x5, 0x6, 0x0, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r11 = semget(0x1, 0x2, 0x40) semctl$GETPID(r11, 0x4, 0xb, &(0x7f0000000400)=""/253) r12 = dup(r10) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r13 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r13, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r13, 0xae80, 0x0) 1.259282843s ago: executing program 0 (id=2543): r0 = socket(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000280)="7800000018002507b9409b14ffff00000214ae04020206050a02040c430009003f000405100000000d0085a168d0bf46d389516a9069921a4b0005000a00000049935ade4a460c89b6ec0cff3959547f5000000000c902007a00004a324004001600040000d5808bd3e30a37e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) syz_emit_ethernet(0x8a, &(0x7f0000000400)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x54, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x4, 0x104, 0x0, 0x0, {[@md5sig={0x13, 0x12, "5a213255fc14f131de9a65cf2bec6042"}, @exp_smc={0xfe, 0x6}, @exp_fastopen={0xfe, 0x13, 0xf989, "3cca39fd810b37fec0a178de23ac97"}, @fastopen={0x22, 0x12, "2864064811009748a452859b6abf7349"}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@bloom_filter={0x1e, 0x8a54, 0x8, 0x0, 0x20000, 0x1, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)={0x1b, 0x0, 0x0, 0xffffb0cc, 0x0, r1, 0x8, '\x00', 0x0, r1, 0x5, 0x0, 0x3}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{r1, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000740)=@bpf_ext={0x1c, 0x15, &(0x7f0000000180)=@raw=[@generic={0x7d, 0x8, 0x4, 0xd4a, 0x10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe}}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @generic={0xa6, 0x2, 0x2, 0x3, 0xb2d}, @func, @tail_call={{0x18, 0x2, 0x1, 0x0, r1}}], &(0x7f0000000240)='GPL\x00', 0x800, 0x24, &(0x7f0000000300)=""/36, 0x41100, 0x1, '\x00', 0x0, 0x0, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x10, 0xffff, 0xd22}, 0x10, 0x501f, r1, 0x7, &(0x7f0000000680)=[r2, r3, r4, r1, r1, r1, r1, r1, r1], &(0x7f00000006c0)=[{0x3, 0x1, 0x7, 0x6}, {0x0, 0x4, 0xb, 0xb}, {0x3, 0x2, 0x4, 0x9}, {0x5, 0x3, 0xa, 0xc}, {0x0, 0x1, 0x10, 0xd}, {0x3, 0x5, 0x2, 0x6}, {0x1, 0x1, 0x8, 0x2}], 0x10, 0xffffffff}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x4) open(&(0x7f0000000000)='./bus\x00', 0x1050c1, 0x170) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0}, 0x18) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{0x5, 0x5, 0x9, 0x1}, {0x0, 0x6, 0x7, 0xfffffff9}, {0x8001, 0x9, 0x6, 0x15f}, {0x4, 0x9, 0x4, 0x4d7}, {0x2, 0x1, 0x2, 0x3}, {0xfff4, 0x7, 0x49, 0xa3}]}) r7 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x121000, 0x0) mmap$qrtrtun(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x13, r7, 0x7) ioctl$FS_IOC_GETFSSYSFSPATH(r0, 0x80811501, &(0x7f0000000000)={0x80}) 789.450864ms ago: executing program 5 (id=2548): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pivot_root(0x0, &(0x7f00000001c0)='./file0/../file0/../file0\x00') setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000080), &(0x7f0000000200), 0x2, 0x2) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix_mp={0xfffffffd, 0x9, 0x32315241, 0x7, 0x5, [{0x6, 0xd381}, {0xdc5, 0x7}, {0x0, 0x5}, {0x6, 0x10000}, {0x1000, 0xd3}, {0x5, 0x6}, {0x1, 0x5}, {0xffffffff, 0x8000}], 0x7, 0x7, 0x2, 0x0, 0x1}}) umount2(&(0x7f0000000240)='./file0\x00', 0xc) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x3a}) 788.202145ms ago: executing program 5 (id=2549): fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, 0x0}) getpgid(r0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r3, 0xc008ae88, &(0x7f0000000480)={0x1, 0x0, [{0xc0000101, 0x0, 0x9}]}) ioprio_set$pid(0x3, r0, 0x4000) quotactl$Q_SYNC(0xffffffff80000102, 0x0, 0x0, 0x0) 627.624082ms ago: executing program 5 (id=2550): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) openat$nci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x4, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000226aa140070ad0001310010203010902240001000000000904000002bd22f00009050303000000000009058aff92"], 0x0) syz_usb_control_io$cdc_ecm(r2, &(0x7f00000005c0)={0x14, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 449.896359ms ago: executing program 3 (id=2553): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c0260000410007010000000007000000017c00000400fc80a72601"], 0x26c0}, 0x1, 0x0, 0x0, 0x4044}, 0x400c011) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x20180, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) (async, rerun: 32) r2 = fcntl$dupfd(r1, 0x0, r1) (rerun: 32) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x3) (async) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000400)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x6) (async) mknodat$loop(r2, &(0x7f0000000040)='./file0\x00', 0x200, 0x0) 439.124882ms ago: executing program 3 (id=2554): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = dup(r1) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r2, 0x2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f00001d9000/0x18000)=nil, &(0x7f0000000900)=[@text16={0x10, 0x0}], 0x1, 0x1, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x3) read(r0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000010003b1500000000ffdbdf2500000000", @ANYRES32=r6, @ANYBLOB="0000000001500100200012800800010067747000140002800500050000000000080003000080000008000a00", @ANYRES32], 0x48}}, 0x2400c080) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000000080)={{0x4, @multicast1, 0x4e20, 0x3, 'rr\x00', 0x2a, 0x2, 0xd}, {@rand_addr=0x64010101, 0x4e20, 0x3, 0x6, 0x1, 0x1}}, 0x44) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000017c0000040042801400018006000600800a4a7fbf112000800a000025000280"], 0x30}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r6) 330.092954ms ago: executing program 4 (id=2555): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r1, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="c1090a000000000000001d1e", 0xc}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe200}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x6}]}, 0x28}}, 0x0) 329.612113ms ago: executing program 4 (id=2556): r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) r1 = socket$alg(0x26, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2000d00, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x28) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r3) ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000280)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x98f90b, 0xff, '\x00', @p_u8=&(0x7f0000000200)=0x3}}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x5) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x52, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0x8, 0x9, 0x0, 0x0, 0x2, 0x2, 0x4, 0x40, 0x7, 0xd0, 0x3, 0x0, 0x101, 0x5, 0xf9, 0xf9, 0x8, 0x4, '\x00', 0x3, 0x10001}) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}, {&(0x7f0000000080)="2f26ba45771208c30b9ce810fe3667568c1d4b7bc14f2c1e7113120873a225b1854a8f6b7fe68b16a3d8df435f7625315d6b69590003ebd2d2f35c183d08f13084c3b8b36dfcf868029e5c46c87bb3e2603dffa5b5909fd2275aa7b5ec8358761b797ee95597c3f10e28d61f8d26db838e318f55eafc6c20c7af4364afcb2d0f470c68630cd33ec1274eba2bcf77d693ac3252d05e", 0x95}, {&(0x7f0000000400)="ca79fbf5f047331000ea7755f92471fedf86211cddf205b81f566f2cfbe12a7a288e8d68bdacba56a2377344ca75b2ff2b0103c8a76fc63fb4c5ebb9dc18e55e734805ccaf75ea614b546ec3a4bbb8fb9278fdd66f2cb7560524be015de2428b82c271d9fdbb4a5d6f473b813704f447efb3068ebac2d4738c79b9df093b5217d1d79aab40f5d6298b6eb7b8e9396340cb893a2fb6f110841b89790d187f2f743bb03b6e791e2edf669afeeb95c97766c5ea6fc25a51162ab69c71e4f2c1434c1344b62b3f5e05eb53", 0xc9}, {&(0x7f0000000240)="7136a01148c52daa0d00403fdb2389d7ee2b7512ca76d7a78c4d56fabec0646d13cee5bd78f0bc128e3aa5400d1e31160fe76c0f27a1ccf8d760bfa9b410bf78274f1a2ec28e8acd0c95c1fd31a6b5ba2145a0840b5138ffc28ab802dcb29e9ec63bdd2f8e4a1ac5934c438004fd6f6290066605b0c5f00bea85ef89f391999aa854cac884ad9b805003a5f3c44ccdf9e96d526d7a24f30c085af5fbd2b0ec", 0x9f}, {&(0x7f0000000640)="8c9a43f97c2b1f3afe646996512139fc1a5e89e60b45f2795df6337c753082c2e200c663ba8b1d5437ecf5b280d1d2c9134984e6a19289fd4d698ee00ba956b588adc825332c986284ed738281c2e2fa7aea9dad9de7cbc9a360ec53794d417b8802f2fa81be41682922b106931bbc84bdddd8f332cef7392729ed3fa18e4a752f04ece985adb1", 0xfffffffffffffced}], 0x5}, 0x80) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000480)=@ipv6_newroute={0x30, 0x18, 0xa01, 0x70bd2c, 0x25dfdbfc, {0xa, 0x20, 0x10, 0x0, 0xfe, 0x2, 0xc8, 0x0, 0x2000}, [@RTA_GATEWAY={0x14, 0x5, @loopback}]}, 0x30}, 0x1, 0x2, 0x0, 0x4000800}, 0x10) landlock_create_ruleset(0x0, 0x0, 0x2) r9 = socket$key(0xf, 0x3, 0x2) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r10, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0xfffe, 0x0, 0x0, 0x1, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0xfffffffffffffffd}}, {{@in=@multicast1, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x3, 0x0, 0x0, 0x0, 0x100000}}, 0xe8) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="020100090e"], 0x70}}, 0x0) sendmmsg(r9, &(0x7f0000000180), 0x3ef, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) 189.244844ms ago: executing program 3 (id=2557): r0 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) (async) mq_timedreceive(r0, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) (async) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r1, 0x0, 0x2, &(0x7f0000000000)={0x2ff, [0x5, 0xffffffff], 0x6}, 0x10) 189.036978ms ago: executing program 3 (id=2558): r0 = syz_io_uring_setup(0x22c4, &(0x7f0000000140)={0x0, 0x703d, 0x0, 0x3, 0x28a}, &(0x7f0000000040), &(0x7f00000001c0)) r1 = io_uring_setup(0x5bfc, &(0x7f0000000080)={0x0, 0x9779, 0x800, 0x3, 0x22a, 0x0, r0}) syz_io_uring_setup(0x7791, &(0x7f0000000440)={0x0, 0x251b9, 0xe2, 0x8, 0x156, 0x0, r1}, 0x0, 0x0) r2 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r3 = open(&(0x7f0000000100)='./bus\x00', 0x4000, 0x0) dup3(r3, r2, 0x0) finit_module(r3, 0x0, 0x6) setsockopt$packet_int(r3, 0x107, 0x3, &(0x7f0000000000)=0x1, 0x4) 140.059565ms ago: executing program 3 (id=2559): mkdir(&(0x7f0000000000)='./file0\x00', 0x2) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x81, 0x0, 0x0, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r2, 0x0, 0x2) read$FUSE(r2, 0x0, 0x0) r3 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r3, &(0x7f0000000100)=ANY=[], 0xc8) 139.201736ms ago: executing program 5 (id=2560): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x5}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x90) 58.831119ms ago: executing program 5 (id=2561): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000480)=0x400000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) (async) r2 = socket$key(0xf, 0x3, 0x2) (async) sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[], 0xa0}}, 0x4040080) (async) sendto$inet6(r1, 0x0, 0x0, 0x20040880, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) readv(r3, &(0x7f0000000a80)=[{&(0x7f0000000100)=""/47, 0x2f}, {&(0x7f0000000880)=""/169, 0xa9}, {&(0x7f0000000400)=""/21, 0x15}, {&(0x7f00000007c0)=""/173, 0xad}, {&(0x7f00000009c0)=""/188, 0xbc}, {&(0x7f0000000340)=""/129, 0x81}], 0x6) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_hsr\x00', 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="400200001000010400000200fefffdff00000000", @ANYRES32=0x0, @ANYBLOB="0780000000000001800c0809000e0000000000002008000a00", @ANYRES32=r4, @ANYBLOB="080023000500000000000f00eb98000008001300", @ANYRES32=r5, @ANYBLOB="08000500", @ANYRES32=r4, @ANYBLOB="08002300000000304c0012800b00010067726574617000003c000280060003000300000008000400080000000600030009000000080001001fe3111f63342b854c40cf2a6ab66a0b455385151978ccccbb1fb348693aeb55cac3be0ec7b755d99f4f3300"/112, @ANYRES32=r4, @ANYBLOB="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", @ANYRES8=r6], 0x240}, 0x1, 0x0, 0x0, 0x20004885}, 0x44055) (async) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) (async) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x1d, &(0x7f0000000580)=0x2, 0x4) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) (async) syz_open_dev$sndpcmc(&(0x7f00000049c0), 0xfffffffffffffffc, 0x448c00) (async) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000004c0)=0x1, 0x3) (async) connect$inet(r8, &(0x7f0000000080)={0x2, 0x4e24, @empty}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4048841) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f0000000240), 0x4) sendto$inet6(r2, &(0x7f0000000500)="3670e18443a79728622e433008bd2c917a9a46bf7a6c33b9e0041d1dc6337403678e998f21e93762e285b232a6cd2045a89b723955776e2b97092879098d478eba6c2f0c1a04f422350ac4e39d", 0x4d, 0x4004000, &(0x7f0000000140)={0xa, 0x4624, 0xc3, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0xa2}, 0x1c) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[], 0x0) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b000000000000c6ec4d7a01a6c7810d02000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) syz_open_procfs$pagemap(0x0, &(0x7f0000000600)) 55.930608ms ago: executing program 5 (id=2562): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mlock(&(0x7f0000593000/0x2000)=nil, 0x2000) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) creat(&(0x7f0000000000)='./bus\x00', 0x0) (async) write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="2400000018000900000000000000000002000000ff0000010000000008000500ac1414ff"], 0x24}}, 0x0) (async) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mlock(&(0x7f0000593000/0x2000)=nil, 0x2000) (async) 0s ago: executing program 3 (id=2563): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x5) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002}) (async, rerun: 32) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r1, 0x0) (rerun: 32) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000100)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c643c, &(0x7f0000000300)) mbind(&(0x7f0000126000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x2) mbind(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x1, 0x0, 0xbb2, 0x3) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="14005d035800010029bd7000fddbdf2500000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000c801}, 0x8040) (async, rerun: 64) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) (rerun: 64) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x20, r4, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0xc044}, 0x4) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x3, 0x1, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x16, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xffff, 0xffff}, {0xa, 0xfffc}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10010, 0xf, 0x0, 0x3}}]}}]}, 0x44}}, 0x4000010) (async) memfd_create(&(0x7f0000000000)='/dev/kvm\x00', 0x6) kernel console output (not intermixed with test programs): 8-1: config 32 has an invalid descriptor of length 1, skipping remainder of the config [ 154.172354][ T839] usb 8-1: config 32 has 2 interfaces, different from the descriptor's value: 4 [ 154.176537][ T839] usb 8-1: config 32 has no interface number 0 [ 154.179851][ T839] usb 8-1: config 32 has no interface number 1 [ 154.183546][ T839] usb 8-1: config 32 interface 177 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 8 [ 154.189261][ T839] usb 8-1: too many endpoints for config 32 interface 4 altsetting 6: 124, using maximum allowed: 30 [ 154.192490][T11687] input: syz1 as /devices/virtual/input/input13 [ 154.193697][ T839] usb 8-1: config 32 interface 4 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 124 [ 154.201048][ T839] usb 8-1: config 32 interface 177 has no altsetting 0 [ 154.203700][ T839] usb 8-1: config 32 interface 4 has no altsetting 0 [ 154.211368][ T839] usb 8-1: New USB device found, idVendor=045e, idProduct=04c9, bcdDevice=2b.0a [ 154.215545][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.218159][ T839] usb 8-1: Product: 㐁 [ 154.219560][ T839] usb 8-1: Manufacturer: 襔紮즨鬻☳Ო뤂쟌䁶ꅢ渼졙烙⢾賢攫䪃✘⃴䢚쫞ኖ鈆萕嫊㎙ឩ᳗࿧敀嘾过㞛䎜쵑엂榣ꫮᤒ켖尻뤭뛱荴갷얌㺫ꇇ顐䌸ꆺᙩ罒웲岾﬜辜⯄刁풅왝혌뷜욂ⱆꓧ䳍뤁퉺鋔缪糠 [ 154.228329][ T839] usb 8-1: SerialNumber: syz [ 154.244543][ T40] audit: type=1400 audit(1758154134.967:35077): avc: denied { read } for pid=11688 comm="syz.4.1689" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 154.321199][T11700] binder: 11699:11700 ioctl c0306201 200000000080 returned -14 [ 154.327428][T11700] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1692'. [ 154.346234][T11702] fuse: Unknown parameter 'gzoup_id' [ 154.528865][T11705] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.532264][T11705] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 154.535972][T11705] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 154.539185][T11705] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 154.556933][ T839] usb 8-1: USB disconnect, device number 12 [ 154.689099][T11719] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1698'. [ 154.692683][T11720] geneve2: entered promiscuous mode [ 154.694433][T11720] geneve2: entered allmulticast mode [ 154.696836][ T12] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.699719][ T12] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.702477][ T12] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.704239][T11719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1698'. [ 154.705924][ T12] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 154.777720][T11730] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1700'. [ 154.835664][T11733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1701'. [ 154.889654][T11747] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 154.982716][T11732] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 155.023120][T11770] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1713'. [ 155.030348][T11770] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32) [ 155.061659][T11776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1715'. [ 155.089288][T11782] tipc: Enabling not permitted [ 155.091083][T11782] tipc: Enabling of bearer rejected, failed to enable media [ 155.095760][T11784] netlink: 'syz.3.1718': attribute type 1 has an invalid length. [ 155.113436][T11784] bond4: (slave bridge3): making interface the new active one [ 155.116758][T11784] bond4: (slave bridge3): Enslaving as an active interface with an up link [ 155.119304][T11788] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1719'. [ 155.443599][T11804] overlay: ./file1 is not a directory [ 155.509569][T11813] tipc: Started in network mode [ 155.511658][T11813] tipc: Node identity ea463ce85db2, cluster identity 4711 [ 155.514751][T11813] tipc: Enabled bearer , priority 0 [ 155.522775][T11813] syzkaller0: entered promiscuous mode [ 155.525217][T11813] syzkaller0: entered allmulticast mode [ 155.545962][T11813] tipc: Resetting bearer [ 155.546096][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1730'. [ 155.560552][T11813] tipc: Disabling bearer [ 155.573611][T11821] bridge4: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 156.032984][T11839] 0X: renamed from caif0 [ 156.037239][T11839] 0X: entered allmulticast mode [ 156.039394][T11839] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 156.147295][T11853] netlink: 'syz.2.1741': attribute type 9 has an invalid length. [ 156.344519][T10242] syz_tun (unregistering): left promiscuous mode [ 156.497792][T11863] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 156.501996][T11863] cramfs: wrong magic [ 156.775346][ T840] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 156.804215][ T5976] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 156.808717][ T5976] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 156.813012][ T5976] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 156.816340][ T5976] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 156.819121][ T5976] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 156.842386][T11881] lo speed is unknown, defaulting to 1000 [ 156.905218][ T840] usb 8-1: device descriptor read/64, error -71 [ 156.946136][T11881] chnl_net:caif_netlink_parms(): no params data found [ 157.051674][T11881] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.059688][T11881] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.063083][T11881] bridge_slave_0: entered allmulticast mode [ 157.067857][T11881] bridge_slave_0: entered promiscuous mode [ 157.072365][T11881] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.076446][T11881] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.079569][T11881] bridge_slave_1: entered allmulticast mode [ 157.083428][T11881] bridge_slave_1: entered promiscuous mode [ 157.142643][T11881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.150607][T11881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.165041][ T840] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 157.205516][T11881] team0: Port device team_slave_0 added [ 157.216443][T11881] team0: Port device team_slave_1 added [ 157.267525][T11881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.270718][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.282991][T11881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.289405][T11881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.292396][T11881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.303674][T11881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.304913][ T840] usb 8-1: device descriptor read/64, error -71 [ 157.370725][T11881] hsr_slave_0: entered promiscuous mode [ 157.374044][T11881] hsr_slave_1: entered promiscuous mode [ 157.377283][T11881] debugfs: 'hsr0' already exists in 'hsr' [ 157.379929][T11881] Cannot create hsr debugfs directory [ 157.415257][ T840] usb usb8-port1: attempt power cycle [ 157.425131][ T25] block nbd0: Possible stuck request ffff888027cf5080: control (read@0,1024B). Runtime 90 seconds [ 157.429609][ T25] block nbd0: Possible stuck request ffff888027cf5240: control (read@1024,1024B). Runtime 90 seconds [ 157.434138][ T25] block nbd0: Possible stuck request ffff888027cf5400: control (read@2048,1024B). Runtime 90 seconds [ 157.439289][ T25] block nbd0: Possible stuck request ffff888027cf55c0: control (read@3072,1024B). Runtime 90 seconds [ 157.561271][T11881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 157.567454][T11881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 157.573626][T11881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 157.579421][T11881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 157.626109][T11881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.642196][T11881] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.648874][ T95] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.651213][ T95] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.660332][ T214] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.663352][ T214] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.755531][ T840] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 157.778135][ T840] usb 8-1: device descriptor read/8, error -71 [ 157.794337][T11881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.977595][T11881] veth0_vlan: entered promiscuous mode [ 157.984179][T11881] veth1_vlan: entered promiscuous mode [ 158.005799][T11881] veth0_macvtap: entered promiscuous mode [ 158.011406][T11881] veth1_macvtap: entered promiscuous mode [ 158.023319][T11881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.026614][ T840] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 158.036987][T11881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.043855][ T6759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.046928][ T6759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.056266][ T6759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.056564][ T840] usb 8-1: device descriptor read/8, error -71 [ 158.059390][ T6759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.122249][ T6759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.127395][ T6759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.152634][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.155724][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.175692][ T840] usb usb8-port1: unable to enumerate USB device [ 158.456272][ T63] Bluetooth: hci0: unknown advertising packet type: 0xf1 [ 158.491348][T11943] netlink: 'syz.4.1764': attribute type 2 has an invalid length. [ 158.787844][T11959] CIFS mount error: No usable UNC path provided in device string! [ 158.787844][T11959] [ 158.790945][T11959] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 158.865404][ T63] Bluetooth: hci3: command tx timeout [ 159.205027][ T839] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 159.375729][ T839] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 159.380320][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.383922][ T839] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.390883][ T839] usb 9-1: config 0 interface 0 has no altsetting 0 [ 159.394418][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.397800][ T839] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.401366][ T839] usb 9-1: config 0 interface 0 has no altsetting 0 [ 159.404417][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.407628][ T839] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.411139][ T839] usb 9-1: config 0 interface 0 has no altsetting 0 [ 159.414325][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.417239][ T839] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.420724][ T839] usb 9-1: config 0 interface 0 has no altsetting 0 [ 159.423460][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.426461][ T839] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.429889][ T839] usb 9-1: config 0 interface 0 has no altsetting 0 [ 159.432646][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.435743][ T839] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.439172][ T839] usb 9-1: config 0 interface 0 has no altsetting 0 [ 159.441980][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.444885][ T839] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.448369][ T839] usb 9-1: config 0 interface 0 has no altsetting 0 [ 159.451110][ T839] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 159.453953][ T839] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 159.457430][ T839] usb 9-1: config 0 interface 0 has no altsetting 0 [ 159.461072][ T839] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 159.463925][ T839] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 159.466633][ T839] usb 9-1: Product: syz [ 159.468063][ T839] usb 9-1: Manufacturer: syz [ 159.469564][ T839] usb 9-1: SerialNumber: syz [ 159.472285][ T839] usb 9-1: config 0 descriptor?? [ 159.479339][ T839] yurex 9-1:0.0: USB YUREX device now attached to Yurex #0 [ 159.601513][T11990] fuse: blksize only supported for fuseblk [ 159.780364][ C1] usb 9-1: yurex_control_callback - control failed: -71 [ 159.786633][ C2] usb 9-1: yurex_control_callback - control failed: -71 [ 159.786778][ T839] usb 9-1: USB disconnect, device number 3 [ 159.793452][ T839] yurex 9-1:0.0: USB YUREX #0 now disconnected [ 159.937808][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 159.937822][ T40] audit: type=1326 audit(2620699137.674:35084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12007 comm="syz.0.1785" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3562d8eba9 code=0x0 [ 160.064682][T12019] __nla_validate_parse: 9 callbacks suppressed [ 160.064694][T12019] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1788'. [ 160.084870][ T29] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 160.093490][ T40] audit: type=1400 audit(2620699137.824:35085): avc: denied { setopt } for pid=12020 comm="syz.0.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 160.096645][T12021] netlink: 832 bytes leftover after parsing attributes in process `syz.0.1789'. [ 160.125957][T12023] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 160.246543][ T29] usb 8-1: config index 0 descriptor too short (expected 45, got 36) [ 160.249659][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 160.253228][ T29] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 160.256959][ T29] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 160.260812][ T29] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 160.263735][ T29] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.268438][ T29] usb 8-1: config 0 descriptor?? [ 160.270776][T12004] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 160.680582][ T29] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd [ 160.699942][ T29] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 160.924218][T12047] tipc: Failed to obtain node identity [ 160.926072][T12047] tipc: Enabling of bearer rejected, failed to enable media [ 160.937327][ T29] usb 8-1: USB disconnect, device number 17 [ 160.945283][ T63] Bluetooth: hci3: command tx timeout [ 160.962201][T12051] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1797'. [ 161.029425][T12056] 8021q: adding VLAN 0 to HW filter on device bond6 [ 161.474942][ T61] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 161.524029][T12078] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1808'. [ 161.539690][T12078] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3371878526 (53950056416 ns) > initial count (26846711520 ns). Using initial count to start timer. [ 161.638566][ T61] usb 9-1: Using ep0 maxpacket: 8 [ 161.642394][ T61] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 161.645921][ T61] usb 9-1: config 179 has no interface number 0 [ 161.647927][ T61] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 161.652320][ T61] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 161.655925][ T61] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 161.659437][ T61] usb 9-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 161.662784][ T61] usb 9-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 161.668333][ T61] usb 9-1: config 179 interface 65 has no altsetting 0 [ 161.671249][ T61] usb 9-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 161.674187][ T61] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.689162][ T61] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input15 [ 161.705060][T12083] 9p: Unknown access argument 18446744073709551615: -34 [ 161.885922][ T6051] usb 9-1: USB disconnect, device number 4 [ 161.885952][ C3] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 162.631871][ T40] audit: type=1800 audit(2620699140.364:35086): pid=12149 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.1820" name="file1" dev="overlay" ino=2077 res=0 errno=0 [ 162.686365][ T40] audit: type=1400 audit(2620699140.424:35087): avc: denied { read } for pid=12173 comm="syz.3.1821" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.696107][ T40] audit: type=1400 audit(2620699140.424:35088): avc: denied { open } for pid=12173 comm="syz.3.1821" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.706688][ T40] audit: type=1400 audit(2620699140.424:35089): avc: denied { map } for pid=12173 comm="syz.3.1821" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 162.722186][T12186] netlink: 'syz.4.1822': attribute type 1 has an invalid length. [ 162.725602][T12186] netlink: 105116 bytes leftover after parsing attributes in process `syz.4.1822'. [ 162.822374][T12199] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 163.021728][T12211] selinux_netlink_send: 56 callbacks suppressed [ 163.021744][T12211] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12211 comm=syz.3.1829 [ 163.025215][ T63] Bluetooth: hci3: command tx timeout [ 163.084965][T12222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1829'. [ 163.131467][T12228] netlink: 'syz.3.1830': attribute type 1 has an invalid length. [ 163.514109][T12244] IPVS: set_ctl: invalid protocol: 8 100.1.1.2:20003 [ 163.607346][ T40] audit: type=1400 audit(2620699141.344:35090): avc: denied { create } for pid=12247 comm="syz.4.1836" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 163.691620][T12256] netlink: 'syz.3.1839': attribute type 1 has an invalid length. [ 163.749526][ T40] audit: type=1800 audit(2620699141.484:35091): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1840" name="file0" dev="tmpfs" ino=2947 res=0 errno=0 [ 163.756807][ T40] audit: type=1804 audit(2620699141.484:35092): pid=12266 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.1840" name="file0" dev="tmpfs" ino=2947 res=1 errno=0 [ 163.837419][ T63] Bluetooth: hci0: link tx timeout [ 163.902286][T12282] [U] zͻi[27| [ 163.903746][T12282] [U] BswAerOU]~A`1eX!j5i5y2ڂ_S"qh$6\P[2*/Wb_$0A7 Xۖ(wc# =g< [ 163.908356][T12282] [U] Iwub:lEeiBHk^VI|ȥ\xd [ 163.911058][T12282] [U] |KIH;F~{Iӎ=Mkq%hd9!@a*lz~`E=[>meLhc`'u~+ۤmͷLXX舂i 'j3e=:3/C_81(FW [ 163.922723][T12282] [U] 8)X)YvxRĻbmbN@ox;JD, [ 163.925453][T12282] [U] *Cn3v7KEXgt_3 [ 163.927144][T12282] [U] D/QazҬEHgE1$_ks=R@ [ 163.928991][T12282] [U] ϼcEv @ [ 163.930262][T12282] [U] a% [ 163.931376][T12282] [U] @cÏ_-ƱZ&<Z9ah_L@bKÈs3JJ5D;wWˆUuyLbҳ53ż{4XRQrH=M"/@ opS~{Pӡ~i*T~W)Q~ȵ_ߜͬz~Vq۪` [ 163.938213][T12282] [U] f1p3 [ 163.939412][T12282] [U] N0[L;a_l&kMC [ 163.941206][T12282] [U] r6w^gP$u4~GCߚpkFtw~@L1 [ 163.947138][T12281] [U] :K!:Y咑;Rdma9tbt= Ҫ+sS i-YJc (ґx|]k|_V҉T8MNi׎ͪY΃zAM"ev3KěO0q]^)?ס8ⅴS ܝXeݢ%4 rejected, failed to enable media [ 166.414749][T12406] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1885'. [ 166.418661][T12406] netlink: 'syz.0.1885': attribute type 3 has an invalid length. [ 166.433143][T12408] SELinux: failed to load policy [ 166.482846][T12421] tipc: Started in network mode [ 166.484478][T12421] tipc: Node identity 00000000000000008, cluster identity 4711 [ 166.502087][T12421] lo speed is unknown, defaulting to 1000 [ 166.640068][T12456] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1900'. [ 166.642873][T12456] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1900'. [ 166.746255][T12473] IPv6: Can't replace route, no match found [ 166.777089][T12479] NILFS (nbd4): device size too small [ 166.783820][T12479] SELinux: Context system_u:object_r:inetd_exec_t:s0 is not valid (left unmapped). [ 166.963446][T12512] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 167.022868][T12523] tmpfs: Bad value for 'mpol' [ 167.169112][T12551] fuse: Unknown parameter '0x0000000000000006' [ 167.173872][T12543] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3371878526 (53950056416 ns) > initial count (26846711520 ns). Using initial count to start timer. [ 167.454860][ T6038] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 167.607168][ T6038] usb 10-1: config 0 has an invalid interface number: 160 but max is 0 [ 167.609858][ T6038] usb 10-1: config 0 has no interface number 0 [ 167.611803][ T6038] usb 10-1: config 0 interface 160 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 167.618455][ T6038] usb 10-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=9e.4e [ 167.621430][ T6038] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.623998][ T6038] usb 10-1: Product: syz [ 167.627794][ T6038] usb 10-1: Manufacturer: syz [ 167.629372][ T6038] usb 10-1: SerialNumber: syz [ 167.632816][ T6038] usb 10-1: config 0 descriptor?? [ 167.640067][ T6038] usb 10-1: Found UVC 0.00 device syz (05ac:8501) [ 167.642313][ T6038] usb 10-1: No valid video chain found. [ 168.102066][T12586] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4) [ 168.104716][T12586] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 168.108562][T12586] vhci_hcd vhci_hcd.0: Device attached [ 168.111356][T12587] vhci_hcd: connection closed [ 168.112826][ T6748] vhci_hcd: stop threads [ 168.116078][ T6748] vhci_hcd: release socket [ 168.117547][ T6748] vhci_hcd: disconnect device [ 168.873044][T12599] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 168.877109][T12599] netlink: 'syz.0.1937': attribute type 1 has an invalid length. [ 169.234907][T12613] nbd1: detected capacity change from 0 to 127 [ 169.290258][ T63] block nbd1: Receive control failed (result -104) [ 170.085400][ T838] usb 10-1: USB disconnect, device number 2 [ 170.179910][T12636] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12636 comm=syz.0.1951 [ 170.259589][T12649] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 170.261667][T12649] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 170.269747][T12649] vhci_hcd vhci_hcd.0: Device attached [ 170.282297][T12649] batadv1: entered promiscuous mode [ 170.295418][T12652] batadv1: entered promiscuous mode [ 170.339015][T12662] __nla_validate_parse: 9 callbacks suppressed [ 170.339026][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1958'. [ 170.481169][T12673] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1961'. [ 170.499430][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 170.499440][ T40] audit: type=1400 audit(2620699148.234:35113): avc: denied { read write } for pid=12675 comm="syz.3.1962" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 170.504982][T12676] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 170.511540][ T40] audit: type=1400 audit(2620699148.234:35114): avc: denied { open } for pid=12675 comm="syz.3.1962" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 170.514881][ T838] usb 47-1: new high-speed USB device number 2 using vhci_hcd [ 170.520872][ T40] audit: type=1400 audit(2620699148.234:35115): avc: denied { ioctl } for pid=12675 comm="syz.3.1962" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 ioctlcmd=0x6722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 170.560568][T12680] lo speed is unknown, defaulting to 1000 [ 170.566586][T12682] input: syz1 as /devices/virtual/input/input17 [ 170.585467][T12650] vhci_hcd: connection reset by peer [ 170.587710][ T6744] vhci_hcd: stop threads [ 170.589543][ T6744] vhci_hcd: release socket [ 170.593409][ T6744] vhci_hcd: disconnect device [ 170.601464][T12689] overlayfs: failed to clone upperpath [ 170.610106][T12692] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1968'. [ 170.632667][ T40] audit: type=1400 audit(2620699148.364:35116): avc: denied { read } for pid=12681 comm="syz.3.1965" name="file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 170.632849][T12692] netlink: 'syz.5.1968': attribute type 10 has an invalid length. [ 170.639849][ T40] audit: type=1400 audit(2620699148.364:35117): avc: denied { open } for pid=12681 comm="syz.3.1965" path="/415/file0/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 170.650362][ T40] audit: type=1400 audit(2620699148.384:35118): avc: denied { ioctl } for pid=12681 comm="syz.3.1965" path="/415/file0/file0" dev="fuse" ino=1 ioctlcmd=0x1261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 170.656137][T12692] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.662376][T12692] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.806113][ T5976] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.811956][ T5976] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.815902][ T5976] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.819506][ T5976] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.823139][ T5976] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.903723][T12714] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1975'. [ 170.904408][T12702] lo speed is unknown, defaulting to 1000 [ 170.961621][T12717] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 171.005106][T12729] loop3: detected capacity change from 0 to 7 [ 171.012754][T12729] Dev loop3: unable to read RDB block 7 [ 171.014465][T12729] loop3: unable to read partition table [ 171.016922][T12729] loop3: partition table beyond EOD, truncated [ 171.019300][T12729] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 171.022824][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1978'. [ 171.045510][T12702] chnl_net:caif_netlink_parms(): no params data found [ 171.047645][T12729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1978'. [ 171.050582][T12729] nbd: nbd64 already in use [ 171.133582][ T7190] udevd[7190]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 171.186940][T12734] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.193807][T12734] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.296789][T12734] geneve2: left promiscuous mode [ 171.298594][T12734] geneve2: left allmulticast mode [ 171.308904][ T6745] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.312571][ T6745] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 171.316456][ T6745] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.319873][ T6745] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 171.331619][ T6745] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.335507][ T6745] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 171.338956][ T6745] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.342382][ T6745] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 171.363101][T12753] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=4624 sclass=netlink_route_socket pid=12753 comm=syz.3.1985 [ 171.404371][T12758] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1986'. [ 171.409872][T12758] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1986'. [ 171.412772][T12702] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.416358][T12702] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.418962][T12702] bridge_slave_0: entered allmulticast mode [ 171.421777][T12702] bridge_slave_0: entered promiscuous mode [ 171.428053][T12702] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.430394][T12702] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.432765][T12702] bridge_slave_1: entered allmulticast mode [ 171.435559][T12702] bridge_slave_1: entered promiscuous mode [ 171.441107][T12758] vlan3: entered allmulticast mode [ 171.442812][T12758] bond0: entered allmulticast mode [ 171.444460][T12758] bond_slave_0: entered allmulticast mode [ 171.446459][T12758] bond_slave_1: entered allmulticast mode [ 171.448379][T12758] bridge0: entered allmulticast mode [ 171.492316][T12702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.496880][T12702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 171.544468][T12702] team0: Port device team_slave_0 added [ 171.549970][T12702] team0: Port device team_slave_1 added [ 171.593738][T12702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.596959][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.606827][T12702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.613402][T12702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.616158][T12702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.626068][T12702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.675778][T12702] hsr_slave_0: entered promiscuous mode [ 171.679067][T12702] hsr_slave_1: entered promiscuous mode [ 171.681971][T12702] debugfs: 'hsr0' already exists in 'hsr' [ 171.683834][T12702] Cannot create hsr debugfs directory [ 171.865983][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 171.994880][ T24] usb 10-1: device descriptor read/64, error -71 [ 172.112258][T12702] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 172.117515][T12702] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 172.123369][T12702] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.129373][T12702] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.165253][ T6038] usb 9-1: new low-speed USB device number 5 using dummy_hcd [ 172.178769][T12702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.199882][T12702] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.209675][ T6745] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.211975][ T6745] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.220154][ T6744] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.222359][ T6744] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.234935][ T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 172.337406][ T6038] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 172.337430][ T6038] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 172.337442][ T6038] usb 9-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 172.340283][ T6038] usb 9-1: string descriptor 0 read error: -22 [ 172.341785][T12702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.354438][ T6038] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 172.354453][ T6038] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.356445][T12783] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 172.365526][ T24] usb 10-1: device descriptor read/64, error -71 [ 172.366013][T12702] veth0_vlan: entered promiscuous mode [ 172.371140][T12702] veth1_vlan: entered promiscuous mode [ 172.399030][T12702] veth0_macvtap: entered promiscuous mode [ 172.403559][T12702] veth1_macvtap: entered promiscuous mode [ 172.414071][T12702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.418779][T12702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.422150][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.422296][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.422315][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.422332][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.461485][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.461499][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.475556][ T24] usb usb10-port1: attempt power cycle [ 172.481174][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.486322][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.646915][T12805] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 172.652962][ T6038] cdc_ncm 9-1:1.0: bind() failure [ 172.658530][ T6038] cdc_ncm 9-1:1.1: CDC Union missing and no IAD found [ 172.661219][ T6038] cdc_ncm 9-1:1.1: bind() failure [ 172.665984][ T6038] usb 9-1: USB disconnect, device number 5 [ 172.667649][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 172.748197][ T40] audit: type=1400 audit(2620699150.484:35119): avc: denied { mount } for pid=12812 comm="syz.3.1999" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 172.795334][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 172.814978][ T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 172.835704][ T24] usb 10-1: device descriptor read/8, error -71 [ 172.875179][ T63] Bluetooth: hci4: command tx timeout [ 172.905231][ T29] e1000 0000:00:06.0 eth0: Reset adapter [ 173.074869][ T24] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 173.096911][ T24] usb 10-1: device descriptor read/8, error -71 [ 173.205104][ T24] usb usb10-port1: unable to enumerate USB device [ 174.954917][ T63] Bluetooth: hci4: command tx timeout [ 175.026068][ T5957] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 175.654974][ T838] vhci_hcd: vhci_device speed not set [ 175.692573][T12839] netlink: 'syz.0.2006': attribute type 4 has an invalid length. [ 175.697659][ T40] audit: type=1400 audit(2620699153.434:35120): avc: denied { mounton } for pid=12836 comm="syz.0.2006" path="/6/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 175.711744][ T40] audit: type=1400 audit(2620699153.444:35121): avc: denied { unmount } for pid=12702 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 175.740697][T12846] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2010'. [ 175.743934][T12846] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (133) [ 175.906780][T12859] binder: 12858:12859 ioctl c0306201 200000000080 returned -22 [ 175.968068][T12851] syz.4.2007 (12851): drop_caches: 2 [ 175.972133][T12851] syz.4.2007 (12851): drop_caches: 2 [ 176.290351][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2018'. [ 176.338682][T12881] netlink: 'syz.0.2018': attribute type 3 has an invalid length. [ 176.341411][T12881] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2018'. [ 176.349349][T12883] lo speed is unknown, defaulting to 1000 [ 176.415404][T12895] netlink: 'syz.3.2021': attribute type 11 has an invalid length. [ 176.422621][T12895] vlan3: entered promiscuous mode [ 176.424320][T12895] bridge0: entered promiscuous mode [ 176.452317][T12897] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2022'. [ 176.476564][T12902] netlink: 'syz.0.2023': attribute type 4 has an invalid length. [ 176.484620][T12902] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35 sclass=netlink_route_socket pid=12902 comm=syz.0.2023 [ 176.491478][T12902] tmpfs: Bad value for 'mpol' [ 176.571499][T12901] kvm: kvm [12900]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc1) = 0x1 [ 176.576090][T12901] kvm: kvm [12900]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0xc2) = 0x1 [ 176.576487][ T40] audit: type=1326 audit(2620699154.304:35122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12900 comm="syz.3.2024" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf6d38eba9 code=0x0 [ 176.600764][T12901] kvm: kvm [12900]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x11e) = 0xbe702112 [ 176.621252][T12901] kvm: kvm [12900]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x186) = 0x1 [ 176.625912][T12901] kvm: kvm [12900]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x187) = 0x1 [ 176.643177][T12901] kvm_intel: kvm [12900]: vcpu0, guest rIP: 0x9131 Unhandled WRMSR(0x1d9) = 0x1 [ 176.737024][T12920] netlink: 'syz.4.2029': attribute type 1 has an invalid length. [ 176.765205][ T840] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 176.769922][T12922] ntfs3(sr0): Primary boot signature is not NTFS. [ 176.772517][T12922] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 176.802368][ T40] audit: type=1400 audit(2620699154.534:35123): avc: denied { map } for pid=12923 comm="syz.4.2031" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 176.806026][T12924] tmpfs: Cannot enable quota on remount [ 176.893740][T12931] netlink: 'syz.4.2034': attribute type 1 has an invalid length. [ 176.893865][T12930] kernel profiling enabled (shift: 6) [ 176.899617][T12934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2035'. [ 176.924954][ T840] usb 5-1: Using ep0 maxpacket: 16 [ 176.942446][ T840] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 176.950621][ T840] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.953236][ T840] usb 5-1: Product: syz [ 176.954568][ T840] usb 5-1: Manufacturer: syz [ 176.956314][ T840] usb 5-1: SerialNumber: syz [ 176.959169][ T840] usb 5-1: config 0 descriptor?? [ 177.150557][T12944] binder: 12943:12944 ioctl c00c620f 200000000140 returned -22 [ 177.234432][T12951] ALSA: mixer_oss: invalid OSS volume 'PHONEX0IN' [ 177.370038][ T840] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 177.377830][ T840] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 177.382104][ T840] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 177.384718][ T840] usb 5-1: media controller created [ 177.399188][ T840] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 177.531130][ T40] audit: type=1804 audit(2620699155.264:35124): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2048" name="/newroot/438/file0" dev="tmpfs" ino=2405 res=1 errno=0 [ 177.540232][ T40] audit: type=1800 audit(2620699155.264:35125): pid=12973 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2048" name="file0" dev="tmpfs" ino=2405 res=0 errno=0 [ 177.569763][T12975] netlink: 'syz.3.2049': attribute type 3 has an invalid length. [ 177.572453][T12975] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2049'. [ 177.573437][ T840] zl10353_read_register: readreg error (reg=127, ret==0) [ 177.577675][ T840] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 177.581038][ T840] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 177.596276][ T840] usb 5-1: USB disconnect, device number 3 [ 177.626470][ T40] audit: type=1400 audit(2620699155.364:35126): avc: denied { shutdown } for pid=12976 comm="syz.4.2050" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 177.627114][ T840] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 177.682055][T12980] rdma_rxe: rxe_newlink: failed to add lo [ 177.683250][T12978] overlayfs: cannot append lower layer [ 177.712820][ T40] audit: type=1400 audit(2620699155.444:35127): avc: denied { accept } for pid=12983 comm="syz.3.2052" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 177.808005][ T40] audit: type=1400 audit(2620699155.544:35128): avc: denied { relabelfrom } for pid=12997 comm="syz.5.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 177.814064][ T40] audit: type=1400 audit(2620699155.544:35129): avc: denied { relabelto } for pid=12997 comm="syz.5.2057" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 178.041134][T13024] binder: 13019:13024 ioctl c0306201 200000000640 returned -22 [ 178.118330][T13028] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2063'. [ 178.153966][T13032] rdma_op ffff888055fbf1f0 conn xmit_rdma 0000000000000000 [ 178.216572][T13043] netlink: 'syz.4.2068': attribute type 1 has an invalid length. [ 178.235224][T13037] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 178.238260][T13038] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 178.250125][T13043] bond2: (slave bridge0): making interface the new active one [ 178.252917][T13043] bond2: (slave bridge0): Enslaving as an active interface with an up link [ 178.304997][ T63] Bluetooth: hci4: command tx timeout [ 178.427534][T13055] overlayfs: conflicting options: nfs_export=on,index=off [ 178.432697][T13056] overlayfs: conflicting options: nfs_export=on,index=off [ 178.450748][T13059] block nbd4: Attempted send on invalid socket [ 178.453024][T13048] syzkaller0: entered promiscuous mode [ 178.453384][T13059] I/O error, dev nbd4, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.456737][T13048] syzkaller0: entered allmulticast mode [ 178.458842][T13059] vxfs: unable to read disk superblock at 1 [ 178.464216][T13059] block nbd4: Attempted send on invalid socket [ 178.467580][T13059] I/O error, dev nbd4, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 178.470774][T13059] vxfs: unable to read disk superblock at 8 [ 178.472830][T13059] vxfs: can't find superblock. [ 178.501871][T13059] can: request_module (can-proto-0) failed. [ 178.504046][T13059] netlink: 'syz.4.2072': attribute type 21 has an invalid length. [ 178.506885][T13059] netlink: 156 bytes leftover after parsing attributes in process `syz.4.2072'. [ 178.510227][T13059] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 178.737445][T13075] kvm: pic: non byte write [ 178.759369][T13083] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2080'. [ 178.762446][T13083] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 178.768708][T13083] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2080'. [ 178.798194][T13086] ubi31: attaching mtd0 [ 178.801302][T13086] ubi31: scanning is finished [ 178.871300][T13086] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 178.877454][T13086] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 178.879760][T13086] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 178.881955][T13086] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 178.884418][T13086] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 178.886908][T13086] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 178.889454][T13086] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 627665754 [ 178.892575][T13086] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 178.896328][T13092] ubi31: background thread "ubi_bgt31d" started, PID 13092 [ 179.056330][T13095] netlink: 'syz.3.2083': attribute type 10 has an invalid length. [ 179.071814][T13095] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 179.076721][T13095] bridge_slave_1: left allmulticast mode [ 179.078533][T13095] bridge_slave_1: left promiscuous mode [ 179.080468][T13095] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.083970][T13095] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.101596][T13095] bond0: (slave bridge0): Releasing backup interface [ 179.300638][T13105] lo speed is unknown, defaulting to 1000 [ 179.352060][T13105] lo speed is unknown, defaulting to 1000 [ 179.642978][T13118] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 180.627762][T13139] afs: Unknown parameter 'dn' [ 180.724290][T13155] overlayfs: failed to resolve './file0': -2 [ 180.739979][T13155] lo speed is unknown, defaulting to 1000 [ 180.946239][T13165] netlink: 'syz.3.2107': attribute type 1 has an invalid length. [ 180.948807][T13165] netlink: 'syz.3.2107': attribute type 2 has an invalid length. [ 180.953235][T13167] netlink: 'syz.3.2107': attribute type 1 has an invalid length. [ 180.955981][T13167] netlink: 'syz.3.2107': attribute type 2 has an invalid length. [ 180.997230][T13170] overlay: ./bus is not a directory [ 181.028218][T13172] netlink: 'syz.3.2109': attribute type 12 has an invalid length. [ 181.071859][T13174] netlink: 'syz.3.2110': attribute type 2 has an invalid length. [ 181.105059][ T5957] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 181.256215][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 181.260600][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 181.264117][ T5957] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 181.269359][ T5957] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 181.273563][ T5957] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 181.279371][ T5957] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.283262][ T5957] usb 5-1: config 0 descriptor?? [ 181.285386][T13161] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 181.484897][ T29] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 181.636199][ T29] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 181.639040][ T29] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 181.642252][ T29] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 181.645176][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 181.648925][ T29] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 181.653814][ T29] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 181.656684][ T29] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 181.659273][ T29] usb 8-1: Product: syz [ 181.660689][ T29] usb 8-1: Manufacturer: syz [ 181.669460][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 181.671340][ T29] cdc_wdm 8-1:1.0: skipping garbage [ 181.674606][ T29] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 181.676587][ T29] cdc_wdm 8-1:1.0: Unknown control protocol [ 181.693398][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.695838][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.698134][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.700541][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.702887][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.705671][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.708657][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.711795][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.714647][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.717124][ T5957] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 181.725266][ T5957] plantronics 0003:047F:FFFF.0006: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 181.869553][ T40] kauditd_printk_skb: 6 callbacks suppressed [ 181.869567][ T40] audit: type=1400 audit(2620699159.604:35136): avc: denied { read write } for pid=13177 comm="syz.3.2112" name="cdc-wdm0" dev="devtmpfs" ino=3149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 181.870198][T13178] cdc_wdm 8-1:1.0: Error submitting int urb - -90 [ 181.871885][ T40] audit: type=1400 audit(2620699159.604:35137): avc: denied { open } for pid=13177 comm="syz.3.2112" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3149 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 181.884518][T13178] loop7: detected capacity change from 0 to 7 [ 181.895746][T13161] bridge_slave_0: left allmulticast mode [ 181.897622][T13161] bridge_slave_0: left promiscuous mode [ 181.899487][T13161] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.899846][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 181.906302][ C2] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.909337][ C2] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.912478][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.915296][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.918419][ C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.922078][ C0] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.926358][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.929387][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.933348][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 181.936474][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 181.943669][T13184] loop8: detected capacity change from 0 to 9 [ 181.946552][T13184] loop8: [CUMANA/ADFS] p1 [ADFS] p1 [ 181.949244][T13184] loop8: partition table partially beyond EOD, truncated [ 181.951851][T13184] loop8: p1 size 2479356556 extends beyond EOD, truncated [ 182.170346][T13161] bridge_slave_1: left allmulticast mode [ 182.172546][T13161] bridge_slave_1: left promiscuous mode [ 182.174475][T13161] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.182795][T13161] bond0: (slave bond_slave_0): Releasing backup interface [ 182.188117][T13161] bond0: (slave bond_slave_1): Releasing backup interface [ 182.206057][T13161] team0: Port device team_slave_0 removed [ 182.210291][T13161] team0: Port device team_slave_1 removed [ 182.212471][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.215162][T13161] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.216484][T13178] loop7: detected capacity change from 7 to 8 [ 182.222433][T13161] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.225913][T13161] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.228389][ T24] usb 8-1: USB disconnect, device number 19 [ 182.464345][T13200] binder: 13198:13200 unknown command 0 [ 182.468235][T13200] binder: 13198:13200 ioctl c0306201 200000000080 returned -22 [ 182.497664][T13204] tmpfs: Bad value for 'size' [ 182.501062][T13205] tmpfs: Bad value for 'size' [ 182.528551][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.531907][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.535254][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.537786][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.540334][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.541731][T13208] lo speed is unknown, defaulting to 1000 [ 182.545986][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.549461][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.552947][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.557517][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.560993][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.564443][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.567902][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.571325][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.574724][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.578481][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.581823][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.585354][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.589197][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.592553][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.595966][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.599208][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.602521][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.605906][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.609143][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.612474][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.615891][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.618649][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.621895][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.625339][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.628601][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.631776][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.635144][T13209] overlay: filesystem on ./bus not supported as upperdir [ 182.791599][ T61] usb 5-1: USB disconnect, device number 4 [ 182.809293][T13222] usb usb4: usbfs: interface 0 claimed by hub while 'syz.5.2123' sets config #1 [ 182.829535][T13227] IPv6: NLM_F_CREATE should be specified when creating new route [ 182.847480][T13224] pim6reg: entered allmulticast mode [ 182.852220][T13224] __nla_validate_parse: 3 callbacks suppressed [ 182.852232][T13224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2124'. [ 182.859943][T13224] tmpfs: Bad value for 'mpol' [ 182.993693][ T40] audit: type=1400 audit(2620699160.724:35138): avc: denied { map } for pid=13238 comm="syz.3.2129" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.003379][ T40] audit: type=1400 audit(2620699160.724:35139): avc: denied { execute } for pid=13238 comm="syz.3.2129" path="/dev/vhost-vsock" dev="devtmpfs" ino=1301 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 183.238062][T13255] binfmt_misc: register: failed to install interpreter file ./file0 [ 183.277076][ T40] audit: type=1400 audit(2620699161.004:35140): avc: denied { mount } for pid=13264 comm="syz.4.2136" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 183.298116][T13267] input: syz0 as /devices/virtual/input/input20 [ 183.377629][T13275] netlink: 'syz.4.2139': attribute type 21 has an invalid length. [ 183.380110][T13275] IPv6: NLM_F_CREATE should be specified when creating new route [ 183.565745][T13278] Bluetooth: MGMT ver 1.23 [ 183.615011][ T1154] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.618338][ T1154] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.621045][ T1154] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.623773][ T1154] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 184.207286][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2146'. [ 184.211025][T13300] netlink: 'syz.3.2146': attribute type 30 has an invalid length. [ 184.214412][T13300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2146'. [ 184.930773][T13304] 9pnet_virtio: no channels available for device syz [ 184.953595][ T6759] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.957675][ T6759] netdevsim netdevsim3 eth0: unset [0, 1] type 1 family 0 port 2816 - 0 [ 184.961056][ T6759] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.964493][ T6759] netdevsim netdevsim3 eth1: unset [0, 1] type 1 family 0 port 2816 - 0 [ 184.968914][ T6759] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.972354][ T6759] netdevsim netdevsim3 eth2: unset [0, 1] type 1 family 0 port 2816 - 0 [ 184.976257][ T6759] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 184.979671][ T6759] netdevsim netdevsim3 eth3: unset [0, 1] type 1 family 0 port 2816 - 0 [ 185.047868][T13307] ntfs3(sr0): Primary boot signature is not NTFS. [ 185.050711][T13307] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 185.087430][T13307] usb usb8: usbfs: process 13307 (syz.3.2148) did not claim interface 0 before use [ 185.130375][ T40] audit: type=1804 audit(2620699162.864:35141): pid=13313 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2149" name="/newroot/201/file0" dev="tmpfs" ino=1097 res=1 errno=0 [ 185.244515][T13321] netlink: 'syz.4.2153': attribute type 1 has an invalid length. [ 185.273493][T13321] bond3: (slave bridge6): making interface the new active one [ 185.277293][T13321] bond3: (slave bridge6): Enslaving as an active interface with an up link [ 185.586003][ T5957] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 185.747642][ T5957] usb 9-1: config 0 has too many interfaces: 175, using maximum allowed: 32 [ 185.750436][ T5957] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.753561][ T5957] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 175 [ 185.754941][ T63] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 185.755024][ T5976] Bluetooth: hci2: command 0xfc11 tx timeout [ 185.759875][ T5957] usb 9-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 185.765231][ T5957] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.767797][ T5957] usb 9-1: Product: syz [ 185.769236][ T5957] usb 9-1: Manufacturer: syz [ 185.770693][ T5957] usb 9-1: SerialNumber: syz [ 185.773323][ T5957] usb 9-1: config 0 descriptor?? [ 185.916341][T13332] loop6: detected capacity change from 0 to 524287999 [ 185.990027][T13335] netlink: 696 bytes leftover after parsing attributes in process `syz.0.2157'. [ 186.056159][ T6031] usb 9-1: USB disconnect, device number 6 [ 186.315954][T13362] netlink: 'syz.0.2164': attribute type 10 has an invalid length. [ 186.338884][T13362] mac80211_hwsim hwsim20 : renamed from wlan1 [ 186.454081][ T40] audit: type=1400 audit(2620699164.184:35142): avc: denied { watch } for pid=13367 comm="syz.3.2167" path="/476/file0" dev="tmpfs" ino=2614 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 186.522440][T13377] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2170'. [ 186.526538][ T40] audit: type=1400 audit(2620699164.264:35143): avc: denied { ioctl } for pid=13376 comm="syz.3.2170" path="socket:[47020]" dev="sockfs" ino=47020 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 186.672186][T13390] openvswitch: netlink: Tunnel attr 16370 out of range max 16 [ 186.725711][ T40] audit: type=1400 audit(2620699164.464:35144): avc: denied { lock } for pid=13389 comm="syz.0.2174" path="socket:[47061]" dev="sockfs" ino=47061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 186.762009][ T40] audit: type=1400 audit(2620699164.494:35145): avc: denied { accept } for pid=13393 comm="syz.0.2175" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 186.763007][T13394] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13394 comm=syz.0.2175 [ 186.772092][T13395] netlink: 'syz.0.2175': attribute type 1 has an invalid length. [ 186.873682][T13405] overlayfs: upper fs does not support file handles, falling back to index=off. [ 186.957120][T13408] syz.0.2179 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 187.000239][T13413] netlink: 'syz.0.2180': attribute type 1 has an invalid length. [ 187.018711][T13413] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 187.022713][T13413] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 187.069703][T13415] gretap1: entered promiscuous mode [ 187.073862][T13415] bond2: (slave gretap1): making interface the new active one [ 187.077571][T13415] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 187.086910][T13413] macvlan2: entered promiscuous mode [ 187.088761][T13413] macvlan2: entered allmulticast mode [ 187.091313][T13413] bond2: entered promiscuous mode [ 187.093465][T13413] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 187.097691][T13413] bond2: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 187.103084][T13413] bond2: left promiscuous mode [ 187.222642][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2181'. [ 187.438814][T13433] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11536 sclass=netlink_route_socket pid=13433 comm=syz.3.2184 [ 187.516666][ T25] block nbd0: Possible stuck request ffff888027cf5080: control (read@0,1024B). Runtime 120 seconds [ 187.521209][ T25] block nbd0: Possible stuck request ffff888027cf5240: control (read@1024,1024B). Runtime 120 seconds [ 187.527348][ T25] block nbd0: Possible stuck request ffff888027cf5400: control (read@2048,1024B). Runtime 120 seconds [ 187.531923][ T25] block nbd0: Possible stuck request ffff888027cf55c0: control (read@3072,1024B). Runtime 120 seconds [ 187.571634][ T40] audit: type=1400 audit(2620699165.304:35146): avc: denied { create } for pid=13435 comm="syz.0.2186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 187.632033][ T6763] Bluetooth: hci2: Frame reassembly failed (-84) [ 187.634451][ T6763] Bluetooth: hci2: Frame reassembly failed (-84) [ 187.914474][T13454] FAT-fs (sr0): bogus number of reserved sectors [ 187.918517][T13454] FAT-fs (sr0): Can't find a valid FAT filesystem [ 188.834875][T13475] loop7: detected capacity change from 8 to 0 [ 188.871977][T13478] IPv6: NLM_F_CREATE should be specified when creating new route [ 188.895701][T13480] ieee802154 phy1 wpan1: encryption failed: -22 [ 189.019442][ T40] audit: type=1400 audit(2620699166.754:35147): avc: denied { mounton } for pid=13484 comm="syz.3.2202" path="/489/file0" dev="tmpfs" ino=2682 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 189.678198][ T5976] Bluetooth: hci2: command 0xfc11 tx timeout [ 189.678228][ T63] Bluetooth: hci2: Entering manufacturer mode failed (-110) [ 189.893314][T13495] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2205'. [ 190.084636][T13502] netlink: 'syz.3.2206': attribute type 1 has an invalid length. [ 190.105713][T13493] syzkaller1: entered promiscuous mode [ 190.107684][T13493] syzkaller1: entered allmulticast mode [ 190.189483][T13510] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2208'. [ 190.207151][T13512] : renamed from veth1_to_batadv (while UP) [ 190.213489][ T40] audit: type=1400 audit(2620699167.944:35148): avc: denied { setopt } for pid=13513 comm="syz.4.2210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 190.248738][T13520] geneve3: entered promiscuous mode [ 190.252077][T13520] geneve3: entered allmulticast mode [ 190.314998][T13524] openvswitch: netlink: IP tunnel dst address not specified [ 190.330322][T13526] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2214'. [ 190.369270][T13529] lo speed is unknown, defaulting to 1000 [ 190.389614][T13537] kvm: user requested TSC rate below hardware speed [ 190.407429][T13529] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2216'. [ 190.446007][T13546] 9pnet_virtio: no channels available for device syz [ 190.571483][T13552] overlay: filesystem on ./file0 not supported as upperdir [ 190.580979][T13550] QAT: failed to copy from user cfg_data. [ 190.638215][T13555] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 190.666347][ T840] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 190.824946][ T840] usb 5-1: Using ep0 maxpacket: 16 [ 190.828382][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.831857][ T840] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 190.835440][ T840] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 190.838343][ T840] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.842545][ T840] usb 5-1: config 0 descriptor?? [ 190.934929][ T838] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 191.090573][ T840] usbhid 5-1:0.0: can't add hid device: -71 [ 191.095450][ T840] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 191.104910][ T838] usb 9-1: Using ep0 maxpacket: 8 [ 191.108115][ T838] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 191.109097][ T840] usb 5-1: USB disconnect, device number 5 [ 191.111583][ T838] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 191.111599][ T838] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 29728, setting to 1024 [ 191.111615][ T838] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 191.111627][ T838] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 191.111648][ T838] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 191.133281][ T838] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.341251][ T838] usb 9-1: GET_CAPABILITIES returned 0 [ 191.343046][ T838] usbtmc 9-1:16.0: can't read capabilities [ 191.546148][ T839] usb 9-1: USB disconnect, device number 7 [ 191.678631][T13569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2225'. [ 191.798510][T13578] overlayfs: statfs failed on './file0' [ 192.045556][T13590] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 192.049587][T13590] overlayfs: overlapping lowerdir path [ 192.089074][T13593] netlink: 'syz.0.2231': attribute type 7 has an invalid length. [ 192.092246][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2231'. [ 192.100163][T13595] 9pnet_virtio: no channels available for device syz [ 192.103263][T13595] 9pnet_virtio: no channels available for device syz [ 192.106825][T13595] 9pnet_virtio: no channels available for device syz [ 192.109905][T13595] 9pnet_virtio: no channels available for device syz [ 192.340989][ T40] audit: type=1400 audit(2620699170.074:35149): avc: denied { transfer } for pid=13608 comm="syz.4.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 192.395014][ T838] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 192.545058][ T838] usb 5-1: Using ep0 maxpacket: 32 [ 192.548664][ T838] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 192.552624][ T838] usb 5-1: config 1 interface 0 has no altsetting 0 [ 192.558738][ T838] usb 5-1: New USB device found, idVendor=05ac, idProduct=023f, bcdDevice= 0.40 [ 192.561599][ T838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.564078][ T838] usb 5-1: Product: М [ 192.565514][ T838] usb 5-1: Manufacturer: ѕ [ 192.566947][ T838] usb 5-1: SerialNumber: syz [ 192.594947][ T24] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 192.756915][ T24] usb 9-1: config index 0 descriptor too short (expected 39, got 27) [ 192.759474][ T24] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 192.762514][ T24] usb 9-1: config 0 interface 0 has no altsetting 0 [ 192.766244][ T24] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 192.769140][ T24] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 192.772275][ T24] usb 9-1: Product: syz [ 192.773602][ T24] usb 9-1: Manufacturer: syz [ 192.777088][ T24] usb 9-1: SerialNumber: syz [ 192.778334][ T838] usbhid 5-1:1.0: can't add hid device: -71 [ 192.779694][ T24] usb 9-1: config 0 descriptor?? [ 192.780444][ T838] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 192.787300][ T24] hub 9-1:0.0: bad descriptor, ignoring hub [ 192.787873][ T838] usb 5-1: USB disconnect, device number 6 [ 192.789172][ T24] hub 9-1:0.0: probe with driver hub failed with error -5 [ 192.796727][ T24] usb 9-1: selecting invalid altsetting 0 [ 192.858826][T13625] ptrace attach of "/syz-executor exec"[5967] was attempted by " b\x0a\x0c ! \x07    ?j}6ٱĞ Dl\x0a9:$VQ\x09d'ZbWzr‘Q``V\x5c4fL\x0a6\x0az^k`q0ȟ [ 193.041450][ T40] audit: type=1400 audit(2620699170.774:35150): avc: denied { listen } for pid=13608 comm="syz.4.2235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 193.535241][ T840] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 193.625495][ T29] usb 9-1: USB disconnect, device number 8 [ 193.686936][ T840] usb 5-1: config index 0 descriptor too short (expected 39, got 27) [ 193.689898][ T840] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 193.692898][ T840] usb 5-1: config 0 interface 0 has no altsetting 0 [ 193.696664][ T840] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 193.699444][ T840] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 193.701978][ T840] usb 5-1: Product: syz [ 193.703282][ T840] usb 5-1: Manufacturer: syz [ 193.704736][ T840] usb 5-1: SerialNumber: syz [ 193.708044][ T840] usb 5-1: config 0 descriptor?? [ 193.711871][ T840] hub 5-1:0.0: bad descriptor, ignoring hub [ 193.713787][ T840] hub 5-1:0.0: probe with driver hub failed with error -5 [ 193.717419][ T840] usb 5-1: selecting invalid altsetting 0 [ 193.769727][T13639] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2246'. [ 194.021565][T13652] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2249'. [ 194.025375][T13652] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 194.218158][T13654] kvm: pic: non byte write [ 194.549677][ T1424] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.606500][T13635] usb 5-1: reset high-speed USB device number 7 using dummy_hcd [ 194.612082][T13635] usb 5-1: device reset changed ep0 maxpacket size! [ 194.617432][ T838] usb 5-1: USB disconnect, device number 7 [ 194.755278][ T838] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 194.905263][ T838] usb 5-1: Using ep0 maxpacket: 8 [ 194.912252][ T838] usb 5-1: unable to get BOS descriptor or descriptor too short [ 194.915321][ T838] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 194.917719][ T838] usb 5-1: can't read configurations, error -71 [ 195.128919][T13660] qnx4: no qnx4 filesystem (no root dir). [ 195.155102][ T40] audit: type=1400 audit(2620699172.894:35151): avc: denied { getopt } for pid=13661 comm="syz.4.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 195.163811][ T40] audit: type=1400 audit(2620699172.894:35152): avc: denied { write } for pid=13661 comm="syz.4.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 195.181995][ T40] audit: type=1400 audit(2620699172.914:35153): avc: denied { lock } for pid=13663 comm="syz.4.2254" path="socket:[49005]" dev="sockfs" ino=49005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 195.183175][T13664] nbd: must specify at least one socket [ 195.227295][T13668] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 195.375975][T13677] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(6) [ 195.378303][T13677] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 195.381661][T13677] vhci_hcd vhci_hcd.0: Device attached [ 195.383634][T13680] vhci_hcd: connection closed [ 195.384495][ T46] vhci_hcd: stop threads [ 195.387696][ T46] vhci_hcd: release socket [ 195.388981][ T46] vhci_hcd: disconnect device [ 195.612503][T13690] qnx4: no qnx4 filesystem (no root dir). [ 195.618557][T13690] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2261'. [ 195.909796][T13697] raw_sendmsg: syz.5.2264 forgot to set AF_INET. Fix it! [ 195.965144][ T838] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 195.977040][T13704] random: crng reseeded on system resumption [ 196.014626][T13706] tap0: tun_chr_ioctl cmd 1074025675 [ 196.017158][T13706] tap0: persist enabled [ 196.018951][T13706] tap0: tun_chr_ioctl cmd 1074025675 [ 196.020705][T13706] tap0: persist disabled [ 196.022543][T13706] tap0: tun_chr_ioctl cmd 1074025675 [ 196.024279][T13706] tap0: persist enabled [ 196.134952][ T838] usb 5-1: Using ep0 maxpacket: 16 [ 196.138073][ T838] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 196.140613][ T838] usb 5-1: config 0 has no interface number 0 [ 196.142568][ T838] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 196.146169][ T838] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 196.152999][ T838] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 196.155972][ T838] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 196.159003][ T838] usb 5-1: Product: syz [ 196.160506][ T838] usb 5-1: SerialNumber: syz [ 196.163243][ T838] usb 5-1: config 0 descriptor?? [ 196.168112][ T838] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 196.172705][ T838] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input24 [ 196.284948][ T6035] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 196.367706][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 196.371064][T13739] netlink: 'syz.3.2277': attribute type 10 has an invalid length. [ 196.373619][T13739] team0: Cannot enslave team device to itself [ 196.416699][ T839] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 196.445049][ T6035] usb 10-1: Using ep0 maxpacket: 32 [ 196.448107][ T6035] usb 10-1: config index 0 descriptor too short (expected 156, got 27) [ 196.450758][ T6035] usb 10-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 196.454033][ T6035] usb 10-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 196.457629][ T6035] usb 10-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 196.461636][ T6035] usb 10-1: config 0 interface 0 has no altsetting 0 [ 196.465552][ T6035] usb 10-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 196.468416][ T6035] usb 10-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 196.471037][ T6035] usb 10-1: Product: syz [ 196.472632][ T6035] usb 10-1: Manufacturer: syz [ 196.474130][ T6035] usb 10-1: SerialNumber: syz [ 196.478347][ T6035] usb 10-1: config 0 descriptor?? [ 196.481591][ T6035] ldusb 10-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 196.485662][ T6035] ldusb 10-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 196.544859][ T839] usb 9-1: device descriptor read/64, error -71 [ 196.589042][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.592129][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.595009][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.597458][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.599716][ T29] usb 5-1: USB disconnect, device number 9 [ 196.601607][ C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 196.601618][ C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 196.610109][ T29] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 196.685567][ T6035] usb 10-1: USB disconnect, device number 7 [ 196.688614][T13743] ldusb 10-1:0.0: Couldn't submit interrupt_in_urb -19 [ 196.693938][ T6035] ldusb 10-1:0.0: LD USB Device #0 now disconnected [ 196.745695][ T40] audit: type=1400 audit(2620699174.484:35154): avc: denied { lock } for pid=13746 comm="syz.5.2279" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 196.771396][T13749] Bluetooth: MGMT ver 1.23 [ 196.784942][ T839] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 196.915355][ T839] usb 9-1: device descriptor read/64, error -71 [ 197.021387][T13759] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2284'. [ 197.025012][ T40] audit: type=1400 audit(2620699174.754:35155): avc: denied { setattr } for pid=13758 comm="syz.5.2284" name="sr0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 197.025588][ T839] usb usb9-port1: attempt power cycle [ 197.184279][T13775] netlink: 'syz.5.2289': attribute type 10 has an invalid length. [ 197.191294][T13775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.194264][T13775] batadv0: entered allmulticast mode [ 197.197579][T13775] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 197.374930][ T839] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 197.384900][ T29] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 197.395286][ T839] usb 9-1: device descriptor read/8, error -71 [ 197.434198][T13792] netlink: 'syz.5.2293': attribute type 1 has an invalid length. [ 197.464529][ T40] audit: type=1400 audit(2620699175.194:35156): avc: denied { getopt } for pid=13789 comm="syz.5.2293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 197.484946][ T5957] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 197.545623][ T29] usb 5-1: config 0 has no interfaces? [ 197.548943][ T29] usb 5-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df [ 197.551684][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.554122][ T29] usb 5-1: Product: syz [ 197.556078][ T29] usb 5-1: Manufacturer: syz [ 197.557566][ T29] usb 5-1: SerialNumber: syz [ 197.560303][ T29] usb 5-1: config 0 descriptor?? [ 197.634868][ T839] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 197.640275][ T5957] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 197.643143][ T5957] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.645938][ T5957] usb 8-1: Product: syz [ 197.647251][ T5957] usb 8-1: Manufacturer: syz [ 197.648809][ T5957] usb 8-1: SerialNumber: syz [ 197.651451][ T5957] usb 8-1: config 0 descriptor?? [ 197.655486][ T839] usb 9-1: device descriptor read/8, error -71 [ 197.766541][ T839] usb usb9-port1: unable to enumerate USB device [ 197.767683][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2296'. [ 197.866276][ T5957] usb 8-1: USB disconnect, device number 20 [ 197.870543][ T838] usb 5-1: USB disconnect, device number 10 [ 197.932794][ T5973] udevd[5973]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 198.099330][ T40] audit: type=1400 audit(2620699175.834:35157): avc: denied { map } for pid=13833 comm="syz.3.2304" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.107003][ T40] audit: type=1400 audit(2620699175.834:35158): avc: denied { execute } for pid=13833 comm="syz.3.2304" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 198.195841][ T40] audit: type=1400 audit(2620699175.924:35159): avc: denied { setattr } for pid=13840 comm="syz.3.2307" name="secretmem" dev="secretmem" ino=49866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.297489][T13854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13854 comm=syz.3.2311 [ 198.323329][T13857] usb usb1: check_ctrlrecip: process 13857 (syz.3.2312) requesting ep 01 but needs 81 [ 198.326918][T13857] usb usb1: usbfs: process 13857 (syz.3.2312) did not claim interface 0 before use [ 198.526543][ T40] audit: type=1400 audit(2620699176.264:35160): avc: denied { write } for pid=13866 comm="syz.0.2316" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 198.663805][T13878] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2319'. [ 198.693832][T13878] input: syz0 as /devices/virtual/input/input25 [ 199.145115][ T61] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 199.307390][ T61] usb 10-1: config 16 has an invalid interface number: 196 but max is 3 [ 199.310498][ T61] usb 10-1: config 16 has an invalid interface number: 129 but max is 3 [ 199.313152][ T61] usb 10-1: config 16 has an invalid interface number: 92 but max is 3 [ 199.315956][ T61] usb 10-1: config 16 has an invalid interface number: 5 but max is 3 [ 199.318694][ T61] usb 10-1: config 16 contains an unexpected descriptor of type 0x2, skipping [ 199.322040][ T61] usb 10-1: config 16 has an invalid interface number: 190 but max is 3 [ 199.324690][ T61] usb 10-1: config 16 has 5 interfaces, different from the descriptor's value: 4 [ 199.327940][ T61] usb 10-1: config 16 has no interface number 0 [ 199.329954][ T61] usb 10-1: config 16 has no interface number 1 [ 199.331973][ T61] usb 10-1: config 16 has no interface number 2 [ 199.334007][ T61] usb 10-1: config 16 has no interface number 3 [ 199.337740][ T61] usb 10-1: config 16 has no interface number 4 [ 199.340427][ T61] usb 10-1: config 16 interface 196 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 199.345123][ T61] usb 10-1: config 16 interface 196 altsetting 8 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 199.349722][ T61] usb 10-1: config 16 interface 196 altsetting 8 endpoint 0xC has invalid maxpacket 1023, setting to 64 [ 199.353920][ T61] usb 10-1: config 16 interface 196 altsetting 8 has an invalid descriptor for endpoint zero, skipping [ 199.357410][ T61] usb 10-1: config 16 interface 196 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 199.360770][ T61] usb 10-1: config 16 interface 196 altsetting 8 endpoint 0x1 has invalid maxpacket 512, setting to 64 [ 199.364391][ T61] usb 10-1: config 16 interface 196 altsetting 8 endpoint 0x5 has invalid maxpacket 1024, setting to 64 [ 199.368570][ T61] usb 10-1: config 16 interface 196 altsetting 8 has a duplicate endpoint with address 0x5, skipping [ 199.371903][ T61] usb 10-1: too many endpoints for config 16 interface 129 altsetting 196: 85, using maximum allowed: 30 [ 199.375602][ T61] usb 10-1: config 16 interface 129 altsetting 196 has 0 endpoint descriptors, different from the interface descriptor's value: 85 [ 199.380066][ T61] usb 10-1: config 16 interface 92 altsetting 0 has a duplicate endpoint with address 0xC, skipping [ 199.382809][T13903] SELinux: policydb string length 14080 does not match expected length 8 [ 199.383682][ T61] usb 10-1: config 16 interface 92 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 199.384487][T13902] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 199.386703][T13903] SELinux: failed to load policy [ 199.389941][ T61] usb 10-1: config 16 interface 92 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64 h[ 199.397830][ T61] usb 10-1: config 16 interface 92 altsetting 0 has a duplicate endpoint with address 0xF, skipping [ 199.401460][ T61] usb 10-1: config 16 interface 92 altsetting 0 has a duplicate endpoint with address 0xA, skipping [ 199.403507][T13902] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 199.405570][ T61] usb 10-1: config 16 interface 92 altsetting 0 endpoint 0x2 has invalid maxpacket 1024, setting to 64 [ 199.411826][ T61] usb 10-1: config 16 interface 92 altsetting 0 has a duplicate endpoint with address 0xF, skipping h[ 199.415474][ T61] usb 10-1: config 16 interface 92 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 199.419404][ T61] usb 10-1: config 16 interface 92 altsetting 0 has a duplicate endpoint with address 0x4, skipping [ 199.420694][T13902] kvm: requested 108114 ns i8254 timer period limited to 200000 ns [ 199.423114][ T61] usb 10-1: config 16 interface 92 altsetting 0 has 9 endpoint descriptors, different from the interface descriptor's value: 8 [ 199.423141][ T61] usb 10-1: config 16 interface 5 altsetting 5 has a duplicate endpoint with address 0x5, skipping [ 199.423152][ T61] usb 10-1: config 16 interface 5 altsetting 5 has a duplicate endpoint with address 0xF, skipping h[ 199.423164][ T61] usb 10-1: config 16 interface 5 altsetting 5 has an invalid descriptor for endpoint zero, skipping [ 199.423179][ T61] usb 10-1: config 16 interface 190 altsetting 7 has a duplicate endpoint with address 0xE, skipping [ 199.446593][ T61] usb 10-1: config 16 interface 190 altsetting 7 has a duplicate endpoint with address 0x7, skipping [ 199.450365][ T61] usb 10-1: config 16 interface 190 altsetting 7 has a duplicate endpoint with address 0x5, skipping [ 199.453803][ T61] usb 10-1: config 16 interface 190 altsetting 7 has a duplicate endpoint with address 0x5, skipping h[ 199.457610][ T61] usb 10-1: config 16 interface 190 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 199.461843][ T61] usb 10-1: config 16 interface 196 has no altsetting 0 [ 199.464112][ T61] usb 10-1: config 16 interface 129 has no altsetting 0 [ 199.466352][ T61] usb 10-1: config 16 interface 5 has no altsetting 0 [ 199.468707][ T61] usb 10-1: config 16 interface 190 has no altsetting 0 h h[ 199.472459][ T61] usb 10-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=74.79 [ 199.476504][ T61] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.479027][ T61] usb 10-1: Product: syz [ 199.480783][ T61] usb 10-1: Manufacturer: 㢽࿎묀⛂엙㉞욇畓ᰩ鋈㥽饄ጘ枩䝚桠砺㭦藃㔴᜖쬀⽎꒙⩀刨ᔏי柳椧퀈쒽뮀멗侼沭噂鞘鑆܄䮪櫪萣♀沔Ᵽ뗚謽솉㹹坦㗂鬨䷉㝄泱熝︓䭿틴홣㑃抰삢㼑酁륵憅㼺ꄴ툫⢖稨攫倈痧㍺ h[ 199.489063][ T61] usb 10-1: SerialNumber: syz h h h h h h h h h h h h h h h h h h h h h h h h h h[ 199.671205][ T1265] block nbd1: Possible stuck request ffff888027dc0000: control (read@0,1024B). Runtime 30 seconds [ 199.674592][ T1265] block nbd1: Possible stuck request ffff888027dc01c0: control (read@1024,1024B). Runtime 30 seconds [ 199.678331][ T1265] block nbd1: Possible stuck request ffff888027dc0380: control (read@2048,1024B). Runtime 30 seconds [ 199.681735][ T1265] block nbd1: Possible stuck request ffff888027dc0540: control (read@3072,1024B). Runtime 30 seconds [ 199.698376][T13884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 199.701776][T13884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 199.723517][ T61] usb 10-1: USB disconnect, device number 8 [ 199.913961][T13939] SELinux: Context is not valid (left unmapped). [ 200.110522][T13945] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2341'. [ 200.114670][T13947] random: crng reseeded on system resumption [ 200.179381][ T40] audit: type=1326 audit(2620699177.914:35161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13957 comm="syz.0.2345" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1a2298eba9 code=0x0 [ 200.245976][T13963] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2346'. [ 200.249615][T13963] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 200.263377][T13965] netlink: 700 bytes leftover after parsing attributes in process `syz.0.2347'. [ 201.026745][ T61] libceph: connect (1)[c::]:6789 error -101 [ 201.029424][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 201.130828][ T40] audit: type=1400 audit(2620699178.864:35162): avc: denied { create } for pid=13979 comm="syz.4.2351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 201.153265][ T40] audit: type=1400 audit(2620699178.884:35163): avc: denied { getopt } for pid=13984 comm="syz.0.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 201.166127][ T40] audit: type=1400 audit(2620699178.904:35164): avc: denied { append } for pid=13986 comm="syz.4.2353" name="ptp0" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 201.181075][ T40] audit: type=1400 audit(2620699178.914:35165): avc: denied { mount } for pid=13988 comm="syz.0.2354" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 201.182634][T13989] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 201.195119][T13989] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 201.228326][T13989] overlayfs: failed lookup in lower (/, name='tracing', err=-66): unsupported object type [ 201.232789][T13989] overlayfs: failed to look up (tracing) for ino (-66) [ 201.261947][ T40] audit: type=1400 audit(2620699178.994:35166): avc: denied { unmount } for pid=12702 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 201.285691][ T61] libceph: connect (1)[c::]:6789 error -101 [ 201.287719][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 201.337770][T14004] usb usb8: usbfs: process 14004 (syz.4.2359) did not claim interface 0 before use [ 201.515014][ T839] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 201.522447][T14019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2362'. [ 201.560301][T14019] FAT-fs (nullb0): bogus number of reserved sectors [ 201.562375][T14019] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 201.665253][ T839] usb 5-1: Using ep0 maxpacket: 8 [ 201.668895][ T839] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 201.672959][ T839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 201.676329][ T839] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 201.680024][ T839] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 201.684170][ T839] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 201.687803][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.733714][T14031] veth0: entered promiscuous mode [ 201.738568][T14030] veth0: left promiscuous mode [ 201.795176][ T61] libceph: connect (1)[c::]:6789 error -101 [ 201.797236][ T61] libceph: mon0 (1)[c::]:6789 connect error [ 201.851795][T13976] ceph: No mds server is up or the cluster is laggy [ 201.893434][ T839] usb 5-1: GET_CAPABILITIES returned 0 [ 201.895909][ T839] usbtmc 5-1:16.0: can't read capabilities [ 202.031142][T14050] gfs2: gfs2 mount does not exist [ 202.072840][T14058] overlayfs: option "index=on" is useless in a non-upper mount, ignore [ 202.076581][T14058] overlayfs: missing 'lowerdir' [ 202.082766][T14058] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 202.089633][T14058] tmpfs: User quota inode hardlimit too large. [ 202.095727][T13997] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 202.099002][T13997] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2356'. [ 202.103647][ T839] usb 5-1: USB disconnect, device number 11 [ 202.309320][T14080] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2381'. [ 202.403495][T14089] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2386'. [ 202.461210][T14102] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2389'. [ 202.542891][T14111] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2392'. [ 202.548490][T14111] netlink: 'syz.4.2392': attribute type 1 has an invalid length. [ 202.665066][ T9] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 202.715079][T14118] kvm: pic: level sensitive irq not supported [ 202.715573][T14118] kvm: pic: non byte read [ 202.815127][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 202.818997][ T9] usb 8-1: config 0 interface 0 has no altsetting 0 [ 202.821109][ T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 202.823874][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.832943][ T9] usb 8-1: config 0 descriptor?? [ 203.150449][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'. [ 203.153584][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'. [ 203.156594][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'. [ 203.159711][T14124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2395'. [ 203.226048][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 203.226058][ T40] audit: type=1400 audit(2620699180.964:35171): avc: denied { write } for pid=14127 comm="syz.5.2396" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 203.243898][ T9] mcp2221 0003:04D8:00DD.0007: USB HID vff.ff Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 203.443092][ T9] usb 8-1: USB disconnect, device number 21 [ 203.463733][ T1333] hid_parser_main: 5 callbacks suppressed [ 203.463751][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.471514][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.474180][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.477248][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.479976][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.482975][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.486397][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.489280][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.492151][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.495292][ T1333] hid-generic 0003:0004:0000.0008: unknown main item tag 0x0 [ 203.501873][ T1333] hid-generic 0003:0004:0000.0008: hidraw1: USB HID v0.00 Device [syz0] on syz1 [ 203.533753][T14136] fido_id[14136]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 203.555111][T14139] netlink: 'syz.5.2399': attribute type 1 has an invalid length. [ 203.916684][T14148] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 203.975008][ T40] audit: type=1400 audit(2620699181.714:35172): avc: denied { connect } for pid=14149 comm="syz.0.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 204.007434][T14160] ceph: Path missing in source [ 204.044968][T14157] Malformed UNC in devname [ 204.044968][T14157] [ 204.047269][T14157] CIFS: VFS: Malformed UNC in devname [ 204.126431][T14172] ntfs3(sr0): Primary boot signature is not NTFS. [ 204.129097][T14172] ntfs3(sr0): try to read out of volume at offset 0xf800 [ 204.221921][T14176] netlink: 'syz.3.2410': attribute type 3 has an invalid length. [ 204.396956][T14191] 9pnet_fd: Insufficient options for proto=fd [ 204.409110][T14191] bond8: entered promiscuous mode [ 204.411020][T14191] 8021q: adding VLAN 0 to HW filter on device bond8 [ 204.557242][ T40] audit: type=1400 audit(2620699182.294:35173): avc: denied { shutdown } for pid=14208 comm="syz.3.2418" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 204.601719][ T40] audit: type=1400 audit(2620699182.334:35174): avc: denied { append } for pid=14213 comm="syz.4.2419" name="pfkey" dev="proc" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 204.608736][ T40] audit: type=1400 audit(2620699182.334:35175): avc: denied { map } for pid=14213 comm="syz.4.2419" path="/proc/866/net/pfkey" dev="proc" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 205.274988][ T839] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 205.447107][ T839] usb 8-1: not running at top speed; connect to a high speed hub [ 205.450863][ T839] usb 8-1: config 4 has an invalid interface number: 84 but max is 1 [ 205.453420][ T839] usb 8-1: config 4 has an invalid descriptor of length 1, skipping remainder of the config [ 205.456746][ T839] usb 8-1: config 4 has 1 interface, different from the descriptor's value: 2 [ 205.459480][ T839] usb 8-1: config 4 has no interface number 0 [ 205.461588][ T839] usb 8-1: config 4 interface 84 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 16 [ 205.465582][ T61] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 205.467969][ T839] usb 8-1: config 4 interface 84 has no altsetting 0 [ 205.471600][ T839] usb 8-1: New USB device found, idVendor=15c2, idProduct=0039, bcdDevice=fe.48 [ 205.474380][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.476944][ T839] usb 8-1: Product: 꺈톔즷ힼ訚귗ק섄❸胱腊깽‬ﺅ撸筩⩦ꌧ䈼꠆ࡊ烝鍀䮛醹碌鱇ઍ墱┟퐗ꅧ熽엏؉㞼⍯䶬輀๟⽞䕭碓桷㱥捪艺㟪萸㴅헕ꈋ®⃭搹橿칥澘ℤ䭼뼇晕邒㓇ࢶ汚޸쳴콬혵䠚汱‭앺놅ջ틨ẳ맢쎟ᶵ塅룆踁楗殥륊蒘 [ 205.485659][ T839] usb 8-1: Manufacturer: ⠉ [ 205.487386][ T839] usb 8-1: SerialNumber: syz [ 205.624960][ T61] usb 10-1: Using ep0 maxpacket: 16 [ 205.628807][ T61] usb 10-1: config 128 has an invalid interface number: 11 but max is 2 [ 205.632288][ T61] usb 10-1: config 128 has an invalid interface number: 91 but max is 2 [ 205.636405][ T61] usb 10-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 205.640136][ T61] usb 10-1: config 128 has an invalid interface descriptor of length 5, skipping [ 205.643875][ T61] usb 10-1: config 128 has an invalid interface number: 235 but max is 2 [ 205.647486][ T61] usb 10-1: config 128 contains an unexpected descriptor of type 0x2, skipping [ 205.651110][ T61] usb 10-1: config 128 has an invalid descriptor of length 1, skipping remainder of the config [ 205.655132][ T61] usb 10-1: config 128 has no interface number 0 [ 205.657802][ T61] usb 10-1: config 128 has no interface number 1 [ 205.660476][ T61] usb 10-1: config 128 has no interface number 2 [ 205.663168][ T61] usb 10-1: config 128 interface 91 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 205.668400][ T61] usb 10-1: config 128 interface 91 altsetting 0 endpoint 0xE has invalid maxpacket 552, setting to 64 [ 205.673606][ T61] usb 10-1: config 128 interface 91 altsetting 0 endpoint 0x7 has an invalid bInterval 231, changing to 7 [ 205.678411][ T61] usb 10-1: config 128 interface 91 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 205.682859][ T61] usb 10-1: config 128 interface 91 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 205.688393][ T61] usb 10-1: config 128 interface 235 altsetting 8 has 0 endpoint descriptors, different from the interface descriptor's value: 10 [ 205.693860][ T839] imon 8-1:4.84: unable to register, err -19 [ 205.694173][ T61] usb 10-1: config 128 interface 11 has no altsetting 0 [ 205.698318][ T61] usb 10-1: config 128 interface 235 has no altsetting 0 [ 205.700657][ T839] usb 8-1: USB disconnect, device number 22 [ 205.704843][ T61] usb 10-1: New USB device found, idVendor=19d2, idProduct=1298, bcdDevice=90.7b [ 205.707626][ T61] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.710145][ T61] usb 10-1: Product: ч [ 205.711465][ T61] usb 10-1: Manufacturer: 䟰繰袡ੌꑲ堵顃ⷙ紀娧ⶸ욇䑼萖亚㩜貒텸匛囘 [ 205.714680][ T61] usb 10-1: SerialNumber: 䰊 [ 205.750552][ T40] audit: type=1400 audit(2620699183.484:35176): avc: denied { connect } for pid=14286 comm="syz.4.2436" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 205.916403][T14294] kvm: faulting far call emulation tainted memory [ 205.943209][ T61] option 10-1:128.11: GSM modem (1-port) converter detected [ 205.960336][ T61] usb 10-1: USB disconnect, device number 9 [ 205.966497][ T61] option 10-1:128.11: device disconnected [ 206.014055][ T40] audit: type=1400 audit(2620699183.744:35177): avc: denied { map } for pid=14305 comm="syz.0.2443" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.023403][ T40] audit: type=1400 audit(2620699183.744:35178): avc: denied { execute } for pid=14305 comm="syz.0.2443" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 206.191244][T14320] openvswitch: netlink: Key 27 has unexpected len 0 expected 40 [ 206.217576][T14324] netlink: 'syz.5.2446': attribute type 5 has an invalid length. [ 206.288987][T14336] program syz.5.2450 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 206.520500][ T40] audit: type=1400 audit(2620699184.254:35179): avc: denied { unmount } for pid=12702 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 206.543282][T14353] netlink: 'syz.0.2455': attribute type 10 has an invalid length. [ 206.564937][T14353] __nla_validate_parse: 33 callbacks suppressed [ 206.564953][T14353] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2455'. [ 206.571910][ T40] audit: type=1400 audit(2620699184.304:35180): avc: denied { map } for pid=14354 comm="syz.5.2456" path="socket:[54038]" dev="sockfs" ino=54038 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 206.634017][ T5972] Bluetooth: hci3: unknown advertising packet type: 0x65 [ 206.634080][ T5972] Bluetooth: hci3: Malformed LE Event: 0x02 [ 206.892545][T14368] bond0: (slave bond_slave_0): Releasing backup interface [ 206.896934][T14368] bond0: (slave bond_slave_1): Releasing backup interface [ 206.903217][T14368] team0: Port device team_slave_0 removed [ 206.906548][T14368] team0: Port device team_slave_1 removed [ 206.908645][T14368] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 206.912140][T14368] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.916659][T14368] bond2: (slave bridge0): Releasing active interface [ 206.924751][T14368] bond3: (slave bridge6): Releasing active interface [ 206.937068][T14368] team0: Mode changed to "broadcast" [ 207.970149][T14395] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 208.006978][T14408] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2473'. [ 208.033825][T14415] overlayfs: failed lookup in lower (newroot/281, name='file1', err=-40): overlapping layers [ 208.097449][T14425] 9pnet_virtio: no channels available for device syz [ 208.182749][T14438] PKCS8: Unsupported PKCS#8 version [ 208.300784][T14457] GUP no longer grows the stack in syz.4.2490 (14457): 200000007000-20000000a000 (200000004000) [ 208.304419][T14457] CPU: 1 UID: 0 PID: 14457 Comm: syz.4.2490 Not tainted syzkaller #0 PREEMPT(full) [ 208.304434][T14457] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 208.304441][T14457] Call Trace: [ 208.304445][T14457] [ 208.304449][T14457] dump_stack_lvl+0x16c/0x1f0 [ 208.304486][T14457] gup_vma_lookup+0x1d2/0x220 [ 208.304506][T14457] __get_user_pages+0x243/0x34a0 [ 208.304528][T14457] ? xsk_setsockopt+0x6db/0x9a0 [ 208.304537][T14457] ? do_sock_setsockopt+0xf3/0x1d0 [ 208.304552][T14457] ? __sys_setsockopt+0x1a0/0x230 [ 208.304563][T14457] ? __x64_sys_setsockopt+0xbd/0x160 [ 208.304577][T14457] ? __pfx___get_user_pages+0x10/0x10 [ 208.304595][T14457] __gup_longterm_locked+0x2dd/0x17e0 [ 208.304609][T14457] ? __lock_acquire+0xb80/0x1ce0 [ 208.304628][T14457] ? __pfx___gup_longterm_locked+0x10/0x10 [ 208.304649][T14457] pin_user_pages+0x13c/0x160 [ 208.304664][T14457] ? __pfx_pin_user_pages+0x10/0x10 [ 208.304681][T14457] ? xdp_umem_create+0x652/0x1270 [ 208.304695][T14457] xdp_umem_create+0x73c/0x1270 [ 208.304710][T14457] xsk_setsockopt+0x6db/0x9a0 [ 208.304721][T14457] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.304731][T14457] ? find_held_lock+0x2b/0x80 [ 208.304746][T14457] ? selinux_socket_setsockopt+0x6a/0x80 [ 208.304760][T14457] ? __pfx_xsk_setsockopt+0x10/0x10 [ 208.304786][T14457] do_sock_setsockopt+0xf3/0x1d0 [ 208.304805][T14457] __sys_setsockopt+0x1a0/0x230 [ 208.304820][T14457] __x64_sys_setsockopt+0xbd/0x160 [ 208.304832][T14457] ? do_syscall_64+0x91/0x4e0 [ 208.304850][T14457] ? lockdep_hardirqs_on+0x7c/0x110 [ 208.304863][T14457] do_syscall_64+0xcd/0x4e0 [ 208.304877][T14457] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.304888][T14457] RIP: 0033:0x7f8f02b8eba9 [ 208.304897][T14457] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.304908][T14457] RSP: 002b:00007f8f03933038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 208.304918][T14457] RAX: ffffffffffffffda RBX: 00007f8f02dd5fa0 RCX: 00007f8f02b8eba9 [ 208.304925][T14457] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 208.304930][T14457] RBP: 00007f8f02c11e19 R08: 0000000000000020 R09: 0000000000000000 [ 208.304936][T14457] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 208.304942][T14457] R13: 00007f8f02dd6038 R14: 00007f8f02dd5fa0 R15: 00007ffe84323258 [ 208.304956][T14457] [ 208.334703][T14459] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 208.445798][T14461] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2492'. [ 208.641956][T14468] binder: 14467:14468 ioctl 4018620d 0 returned -22 [ 208.644866][T14470] netlink: 17 bytes leftover after parsing attributes in process `syz.0.2495'. [ 208.683435][T14457] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2490'. [ 208.783426][T14480] netlink: 48 bytes leftover after parsing attributes in process `syz.4.2498'. [ 208.821882][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 208.821893][ T40] audit: type=1400 audit(2620699186.554:35184): avc: denied { setattr } for pid=14481 comm="syz.5.2499" path="/dev/ptyqf" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 208.905892][T14488] netlink: 'syz.5.2501': attribute type 5 has an invalid length. [ 209.000404][T14493] bridge: RTM_NEWNEIGH with invalid ether address [ 209.008570][T14493] bridge: RTM_NEWNEIGH with invalid ether address [ 209.156492][T14499] macvlan0: entered promiscuous mode [ 209.158947][T14499] macvlan0: entered allmulticast mode [ 209.161226][T14499] veth1_vlan: entered allmulticast mode [ 209.239195][ T40] audit: type=1400 audit(2620699186.974:35185): avc: denied { setattr } for pid=14503 comm="syz.5.2506" name="ALG" dev="sockfs" ino=57368 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 209.265508][T14504] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 209.288709][ T40] audit: type=1400 audit(2620699187.024:35186): avc: denied { unmount } for pid=11881 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 209.313280][ T40] audit: type=1400 audit(2620699187.044:35187): avc: denied { ioctl } for pid=14507 comm="syz.5.2507" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 209.579147][T14527] IPVS: Error connecting to the multicast addr [ 209.739842][ T40] audit: type=1400 audit(2620699187.474:35188): avc: denied { watch watch_reads } for pid=14532 comm="syz.5.2515" path="pipe:[55497]" dev="pipefs" ino=55497 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 209.791554][T14536] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 209.793819][T14533] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 209.824477][T14542] loop6: detected capacity change from 0 to 7 [ 209.838004][T14542] Dev loop6: unable to read RDB block 7 [ 209.839784][T14542] loop6: unable to read partition table [ 209.841821][T14542] loop6: partition table beyond EOD, truncated [ 209.844664][T14542] loop_reread_partitions: partition scan of loop6 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 209.910014][T14553] /dev/nullb0: Can't open blockdev [ 209.915945][T14553] /dev/nullb0: Can't open blockdev [ 209.918307][T14553] /dev/nullb0: Can't open blockdev [ 209.920276][T14553] /dev/nullb0: Can't open blockdev [ 209.922293][T14553] /dev/nullb0: Can't open blockdev [ 209.924261][T14553] /dev/nullb0: Can't open blockdev [ 209.926427][T14553] /dev/nullb0: Can't open blockdev [ 209.928357][T14553] /dev/nullb0: Can't open blockdev [ 209.930628][T14553] /dev/nullb0: Can't open blockdev [ 209.933235][T14553] /dev/nullb0: Can't open blockdev [ 209.936399][T14553] /dev/nullb0: Can't open blockdev [ 209.939207][T14553] /dev/nullb0: Can't open blockdev [ 209.942341][T14553] /dev/nullb0: Can't open blockdev [ 209.944407][T14553] /dev/nullb0: Can't open blockdev [ 209.946716][T14553] /dev/nullb0: Can't open blockdev [ 209.948698][T14553] /dev/nullb0: Can't open blockdev [ 209.950611][T14553] /dev/nullb0: Can't open blockdev [ 209.952527][T14553] /dev/nullb0: Can't open blockdev [ 209.954443][T14553] /dev/nullb0: Can't open blockdev [ 209.956929][T14553] /dev/nullb0: Can't open blockdev [ 209.958842][T14553] /dev/nullb0: Can't open blockdev [ 209.962071][T14553] /dev/nullb0: Can't open blockdev [ 209.963993][T14553] /dev/nullb0: Can't open blockdev [ 210.007204][T14563] netlink: 'syz.4.2523': attribute type 58 has an invalid length. [ 210.083743][T14573] ubi: mtd0 is already attached to ubi31 [ 210.086594][T14573] netlink: 'syz.5.2527': attribute type 1 has an invalid length. [ 210.125972][T14579] /dev/nullb0: Can't open blockdev [ 210.288366][T14579] program syz.5.2528 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.308873][T14587] i2c i2c-1: Invalid block write size 34 [ 210.330998][T14594] fuse: Unknown parameter 'f0x0000000000000003' [ 210.331038][T14593] fuse: Unknown parameter 'f0x0000000000000003' [ 210.421609][T14608] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 210.428503][T14608] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 210.438810][ T40] audit: type=1400 audit(2620699188.174:35189): avc: denied { mounton } for pid=14607 comm="syz.0.2537" path="/129/bus/bus/file0" dev="overlay" ino=717 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysfs_t tclass=dir permissive=1 [ 210.448391][ T40] audit: type=1400 audit(2620699188.184:35190): avc: denied { remount } for pid=14607 comm="syz.0.2537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 210.560880][ T838] hid_parser_main: 8 callbacks suppressed [ 210.560894][ T838] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 210.575685][ T838] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz1] on syz0 [ 210.741903][T14625] Invalid source name [ 210.743291][T14625] UBIFS error (pid: 14625): cannot open "/dev/sg0", error -22 [ 210.934127][T14632] lo speed is unknown, defaulting to 1000 [ 211.002989][T14638] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 211.081823][T14645] overlayfs: conflicting lowerdir path [ 211.382892][T14653] block nbd3: Attempted send on invalid socket [ 211.386874][T14653] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 211.390108][T14653] EXT4-fs (nbd3): unable to read superblock [ 211.508913][T14659] IPVS: set_ctl: invalid protocol: 4 224.0.0.1:20000 [ 211.511347][T14659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2554'. [ 211.514198][T14659] openvswitch: netlink: Flow actions attr not present in new flow. [ 211.839221][T14676] qrtr: Invalid version 0 [ 211.984852][ T5972] Bluetooth: hci4: command tx timeout [ 212.066718][ T5972] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 212.069546][ T5972] Bluetooth: hci4: Injecting HCI hardware error event [ 212.072980][ T5972] Bluetooth: hci4: hardware error 0x00 [ 212.103031][T13742] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 212.107962][T13742] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 212.113421][T13742] CPU: 0 UID: 0 PID: 13742 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 212.117390][T13742] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 212.121545][T13742] RIP: 0010:klist_put+0x4d/0x1b0 [ 212.123676][T13742] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 3c 3e 0d [ 212.131689][T13742] RSP: 0018:ffffc90006a579b0 EFLAGS: 00010202 [ 212.134272][T13742] RAX: dffffc0000000000 RBX: ffff8880380ac060 RCX: ffffffff82611b4d [ 212.137284][T13742] RDX: 000000000000000b RSI: ffffffff8b89e035 RDI: 0000000000000058 [ 212.140739][T13742] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 212.143721][T13742] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 212.147090][T13742] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 212.150462][T13742] FS: 0000000000000000(0000) GS:ffff8880d66b3000(0000) knlGS:0000000000000000 [ 212.154308][T13742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.157174][T13742] CR2: 0000200000000000 CR3: 000000003e76c000 CR4: 0000000000352ef0 [ 212.160548][T13742] Call Trace: [ 212.162010][T13742] [ 212.163282][T13742] device_del+0x1d8/0x9f0 [ 212.165137][T13742] ? __pfx_device_del+0x10/0x10 [ 212.167241][T13742] ? netdev_unregister_kobject+0x2da/0x540 [ 212.169753][T13742] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 212.172532][T13742] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 212.175318][T13742] ? __pfx___mutex_lock+0x10/0x10 [ 212.177464][T13742] unregister_netdevice_queue+0x305/0x3f0 [ 212.179897][T13742] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 212.182551][T13742] ? rtnl_net_dev_lock+0x28/0x360 [ 212.184935][T13742] ? rtnl_net_dev_lock+0x146/0x360 [ 212.187096][T13742] ? rtnl_lock+0x9/0x20 [ 212.188881][T13742] ? rtnl_net_dev_lock+0x146/0x360 [ 212.191056][T13742] unregister_netdev+0x1f/0x60 [ 212.193117][T13742] bnep_session+0x224e/0x2d80 [ 212.195185][T13742] ? __pfx_bnep_session+0x10/0x10 [ 212.197046][T13742] ? do_raw_spin_lock+0x12c/0x2b0 [ 212.198636][T13742] ? __pfx_woken_wake_function+0x10/0x10 [ 212.200440][T13742] ? rcu_is_watching+0x12/0xc0 [ 212.201969][T13742] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 212.203784][T13742] ? lockdep_hardirqs_on+0x7c/0x110 [ 212.205454][T13742] ? __kthread_parkme+0x19e/0x250 [ 212.207091][T13742] ? __pfx_bnep_session+0x10/0x10 [ 212.208701][T13742] kthread+0x3c2/0x780 [ 212.209983][T13742] ? __pfx_kthread+0x10/0x10 [ 212.211434][T13742] ? rcu_is_watching+0x12/0xc0 [ 212.212960][T13742] ? __pfx_kthread+0x10/0x10 [ 212.214415][T13742] ret_from_fork+0x56a/0x730 [ 212.215888][T13742] ? __pfx_kthread+0x10/0x10 [ 212.217486][T13742] ret_from_fork_asm+0x1a/0x30 [ 212.219011][T13742] [ 212.220005][T13742] Modules linked in: [ 212.221761][T13742] ---[ end trace 0000000000000000 ]--- [ 212.225293][T13742] RIP: 0010:klist_put+0x4d/0x1b0 [ 212.226881][T13742] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 3c 3e 0d [ 212.232949][T13742] RSP: 0018:ffffc90006a579b0 EFLAGS: 00010202 [ 212.235076][T13742] RAX: dffffc0000000000 RBX: ffff8880380ac060 RCX: ffffffff82611b4d [ 212.237835][T13742] RDX: 000000000000000b RSI: ffffffff8b89e035 RDI: 0000000000000058 [ 212.240572][T13742] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 212.243229][T13742] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 212.245992][T13742] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 212.248917][T13742] FS: 0000000000000000(0000) GS:ffff8880d67b3000(0000) knlGS:0000000000000000 [ 212.252300][T13742] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 212.254897][T13742] CR2: 00002000006e5000 CR3: 0000000066249000 CR4: 0000000000352ef0 [ 212.257578][T13742] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 212.259183][ T40] audit: type=1400 audit(2620699189.994:35191): avc: denied { read } for pid=5360 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 212.260425][T13742] DR3: 000000000000e58e DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 212.272502][T13742] Kernel panic - not syncing: Fatal exception [ 212.275101][T13742] Kernel Offset: disabled [ 212.276602][T13742] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:27:29 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85648ef5 RDI=ffffffff9b1170a0 RBP=ffffffff9b117060 RSP=ffffc90006a573b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b117060 R15=ffffffff85648e90 RIP=ffffffff85648f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000200000000000 CR3=000000003e76c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=000000000000003f Opmask02=00000000fffdffbf Opmask03=0000000000400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 00007ffda9108540 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055f830d7b670 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffff000000000000 ffff0000000000ff ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373268b43a40483 7373268e1c438159 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 917b69ffdfc81c28 737373762cf07ef1 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 78742f7365756575 712f3070656e622f 74656e2f3030323a 346963682f346963 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d78742f736575 6575712f3070656e 622f74656e2f3030 323a346963682f34 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6963682f68746f6f 7465756c622f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000881 000055fd6f5acf1a 000000316500322d 6332692f7665642d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c3061722c3332 322c3232322c3132 322c3032322c4533 312c4433312c4333 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c4233312c4133 312c3733312c3633 312c3433312c3333 312c3133312c3033 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 316b2c35312c332c 312c30652d303030 3065343030307042 4132317633303030 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88806a53b540 RCX=ffffffff81afb673 RDX=ffff88801dadc880 RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90000157d08 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb9886 R12=1ffff9200002af80 R13=0000000000000002 R14=0000000000000001 R15=ffffed100d4a76a9 RIP=ffffffff81bb9a10 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c01300 GS =0000 ffff8880d67b3000 ffffffff 00c01300 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000006e5000 CR3=000000002b7fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000002fefcf8 Opmask02=0000000002fefcfe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb058cbf6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffeb058cbf6 00007ffeb058cbfc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3562812e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3562812e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3562812e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3562812e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3562812ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3562812fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35629a74a8 00007f35629a74a0 00007f35629a7498 00007f35629a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f356350d100 00007f35629a7460 00007f35629a7478 00007f35629a74c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f35629a74b8 00007f35629a74b0 00007f35629a74a8 00007f35629a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000013 RCX=ffffffff84ebecec RDX=ffff888047a3a440 RSI=ffffffff84ebefd6 RDI=0000000000000005 RBP=ffffffff8f17f43a RSP=ffffc90004dce980 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffff888057050030 R12=0000000000000000 R13=dffffc0000000000 R14=0000000000000001 R15=ffff888057050000 RIP=ffffffff84ebefdd RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f35635546c0 ffffffff 00c00000 GS =0000 ffff8880d68b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f6f4a7e9e9c CR3=000000002b7fc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=dffffc0000000000 RBX=ffff8880554e9800 RCX=1ffff1100aa9d306 RDX=0000000000000000 RSI=ffff888021adc900 RDI=ffff888021addd84 RBP=0000000000000409 RSP=ffffc900006f8c10 R8 =ffff88806a73a300 R9 =ffffed1008f528f8 R10=ffff888047a947c7 R11=0000000000000003 R12=ffff888021adc9a8 R13=0000000000000000 R14=ffff888021adc900 R15=0000000000000000 RIP=ffffffff818e3b54 RFL=00000803 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555585ec1500 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f0810536e9c CR3=000000003e76c000 CR4=00352ef0 DR0=0000000000000008 DR1=8000000000000000 DR2=000000000000cd97 DR3=0000000000005064 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 726665645f65646f 6e5f65746f6d6572 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f697461725f6761 726665645f65646f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdba63da16 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdba63da16 00007ffdba63da1c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a22a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a22a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a22a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a22a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a22a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1a22a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000