last executing test programs: 1.591599056s ago: executing program 1 (id=1249): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) unlink(&(0x7f0000000080)='./file0\x00') setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x5, @loopback, 0xa}}, 0x0, 0x0, 0x22, 0x0, "bb353738cb473fc7c9f1cf53b6a7b4e23602a3c364ca41d6e5615445244740bd4c0b42a21d7214bf92594925208a0e2f964e654dc534a6324d4993fcf19b2df3ee818a118a7c49462189316d556d2ccd"}, 0xd8) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_tcp_int(r0, 0x6, 0x6, &(0x7f0000000240)=0x80000000, 0x4) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) sendto$inet6(r0, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r0, 0x2) memfd_create(&(0x7f0000000000)=')\x00', 0x6) 1.541805148s ago: executing program 1 (id=1252): r0 = socket$inet6(0xa, 0x802, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) (async) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="00020401"], 0x18) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) (async) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) (async) sendmsg$can_bcm(r1, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000280)=ANY=[], 0x48}}, 0x0) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) socket$igmp(0x2, 0x3, 0x2) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r4, 0x0) r5 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)) (async) ioctl$MEDIA_IOC_REQUEST_ALLOC(r5, 0x80047c05, &(0x7f0000000940)=0xffffffffffffffff) poll(&(0x7f0000000240)=[{r6, 0x10e}], 0x1, 0x1fe) prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x8, 0x20, 0x0, 0x7ffc0002}]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') (async) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00') preadv(r7, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0) (async) preadv(r7, &(0x7f0000000000)=[{&(0x7f00000001c0)=""/181, 0xb5}], 0x1, 0x0, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r8, 0x29, 0x48, &(0x7f0000000040), 0xfffffe23) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800480000340000000000069078ac141480ac1e00018907d700000000440400200000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) (async) syz_emit_ethernet(0x42, &(0x7f0000000400)=ANY=[@ANYBLOB="aaaaaaaaaaaa0380c20000000800480000340000000000069078ac141480ac1e00018907d700000000440400200000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB], 0x0) getsockopt$inet6_int(r8, 0x29, 0x48, 0x0, &(0x7f00007d0000)) openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) (async) r9 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0) io_setup(0x1, &(0x7f00000004c0)=0x0) io_submit(r10, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r9, &(0x7f0000000000)="98", 0x1, 0x1000004, 0x0, 0x10, r4}]) (async) io_submit(r10, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r9, &(0x7f0000000000)="98", 0x1, 0x1000004, 0x0, 0x10, r4}]) sync() mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000040)={0x0, @aes128, 0x0, @desc2}) 1.532290127s ago: executing program 3 (id=1256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x2, 0x0}, @generic={0x66}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6f) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r1, &(0x7f0000000000)="240000001a005f021483c6c5cd9008e696234eac188a8cf9f407000000001f5800000000", 0x24) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r0, 0x4002f516, &(0x7f0000000140)={0x8}) sendto(r2, 0x0, 0x5b, 0x40, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e000000200002800800050000000000050016000100000004001200"], 0x54}}, 0x0) 1.45087474s ago: executing program 3 (id=1258): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f00000001c0)=@deltaction={0x90, 0x31, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@TCA_ACT_TAB={0x3c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x7, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}]}, @TCA_ACT_TAB={0x30, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc}}, {0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x90}}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00831300000000fcdbcf25000000000000000008000500d47021fb"], 0x20}}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) r2 = io_uring_setup(0x52f8, &(0x7f0000000040)={0x0, 0x8bb5, 0x400, 0x0, 0x1c2}) io_uring_enter(r2, 0x59ec, 0x4f99, 0x29, &(0x7f00000000c0)={[0x5568]}, 0x8) 1.450050107s ago: executing program 3 (id=1259): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = syz_open_dev$I2C(&(0x7f0000003000), 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000040)={0x0, 0x7, 0x4, &(0x7f0000000000)={0x1d, "67d60edc3620031d451e5aa44d3cdb5637321451672f37163f5c64b821c4b14563"}}) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f0000000380)='hugetlb.2MB.rsvd.failcnt\x00', 0x2, 0x0) sendfile(r2, r2, 0x0, 0x9c) r3 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close_range(r4, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000048000000030a01020000000000000000010000000900030073797a320000000014000480080002400000000408000140000000000900010073797a300000000008000a400000000284000000060a010400000000000000000100000008000b40000000000900010073797a30"], 0x124}}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000280)={0x0, &(0x7f0000000040)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r7, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000400)={r8, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0], [0x0, 0x0, 0xf], [0x1000], [0x0, 0x0, 0x0, 0xffffffffffffffff]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r4, 0xc00c642d, &(0x7f0000000100)={r9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r11}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r5, 0xc01064c2, &(0x7f0000000340)={0x0, 0x1, r4}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r5, 0xc00864bf, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r3, 0xc00864bf, &(0x7f0000000480)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_SIGNAL(0xffffffffffffffff, 0xc01064c5, &(0x7f0000000500)={&(0x7f00000004c0)=[r13, r14, r15], 0x3}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r5, 0xc00c642d, &(0x7f00000001c0)={r12, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000200)={0x0, 0x0, r16}) r17 = syz_open_procfs(0x0, &(0x7f0000000000)='setgroups\x00') write$vhost_msg(r17, &(0x7f0000000840)={0x796e6564, {0x0, 0x0, 0x0}}, 0x7) r18 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r18, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYRES32=r18, @ANYRES32=0x0, @ANYRES8=r18], 0x70}, 0x1, 0x0, 0x0, 0x4040041}, 0x8080) r19 = dup3(r3, r11, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r19, 0xc00c642d, &(0x7f00000000c0)={r10}) 1.391254938s ago: executing program 3 (id=1261): ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000001540)={0x2, 0x0, 0x1, 0x1, 0x15c}) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x1000}, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmstat\x00', 0x0, 0x0) r3 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0), 0x8001, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000340)=@gcm_256={{0x304}, "00cd83f39500", "7979c06f94e1f3ed1945a2b2c7ff1bd557b28d5a73226a963826af565862c109", '\vv?\f', "dbdf3ad7d6801cf6"}, 0x38) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x11a, 0x4, 0x0, 0x0) r4 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000040)={0x0, 0x0, [0xf79, 0x2, 0x7fffffff, 0x3, 0x1000cf3c, 0x2, 0x4, 0x99]}) getsockopt$packet_int(r0, 0x107, 0x15, 0x0, &(0x7f0000000200)) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) sendfile(r6, r5, 0x0, 0x3fffff) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r8, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r8, 0x6, 0x18, &(0x7f0000000080)=0x80000049, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r8, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @mss, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r8, 0x6, 0x13, &(0x7f00000001c0), 0x4) write(r8, &(0x7f0000000400)="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", 0x980) sendmsg$nl_route(r7, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000001600000100000000000000000007000000", @ANYRESDEC=r1, @ANYRESHEX=r2, @ANYRES8=r0, @ANYRES16=0x0, @ANYRES32=r2], 0x30}}, 0x0) sendmmsg(r1, &(0x7f0000001480)=[{{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x9, @mcast1, 0x7, 0x1}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000d80)="515e49d2f2e205e85c81bdda3c09a0d1429906be952beebf037db4ad1c9135a7b29763825ad0849c16f8e6ff527402a022d4522ebc2f37b11dca47cd5c2cfba15a1705d0dcd4147e4dbc7eccbc1f7db70f8019620dca834453e3841ae6164ba067f246d78e0eb8747e3b21349a76e1aac4d95f24cb965731a5655f124ec41f3b2568aacac02230b4e8050af031db3ee0c423d01ba17055cec38119dab653f11ce6e6207f02cf6a3c6b40e9d5bcfae68cba25669f7cb88d0765e2665f2a8ff37862a4691c976ce7004af67ee802fe8a5eccd90d9eaedca2aae124", 0xda}], 0x1, &(0x7f0000000e80)=[{0x58, 0x107, 0xcb4, "4c6492328ab388c75fb65db8180bb48f91e158fe80f1a1bfe427f99417f14e3570a9be2e4ba6cad3761a808f0ac71a8e99d6d699c5f59683ec1817ffd15243710784df"}], 0x58}}, {{&(0x7f0000000f00)=@in={0x2, 0x4e21, @empty}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000f80)="e943d35789b2c69e5278a329495d88742591e6ec441467614b050fc5d7a31c3155403d32917b248ca3e975c06665977e3d59f28a4f6691b2f4a8202eff6f3a97aa50a4e0080da66207a0092454ee8aee", 0x50}, {&(0x7f0000001000)="350d2c7634266978b6c464858de398fd6c05cde585b681f25ecc1f82b9f0793ae2f9676d1ce042dc9bee22e0bab7edb9d7ff51905dc24d31ea2d28d7dcce68558106335714", 0x45}], 0x2, &(0x7f0000001080)=[{0x60, 0x113, 0x7f, "0aea537c91efabdb3f17ae582818965babde60b73798e2bf8144b18b24fdbba4d1eac3611a8a209d90a62d67c00ba07578cba3c6cd04b47281ed7f10aac05ecaa816461103211f02251892"}, {0x58, 0xff, 0x9, "742d1dccff48ada3b9d89af2d4cf8f297cf6ff3e3a3313bf6482ad79340f5e05287ac359e98f6b384b8de75a4350ed6b46957e583bf51280cb9739b9b791a9793e"}, {0x100, 0x110, 0x1, "eb8279453626e66f8c0cadf1c7b55a3c62923e5226ef9bbbe71b925aa04c13fc52093be7c573433142ac604f0ced1e2ff25039c64542513a68d03b19a1d53f3ffb2b99b75ad70f567a3199977eb15f765cf3197ed74f8c3b25a0eda47ae9b1fe1736d5123695f37072a1bd433345f664ec7b402140120986929308ca3f0f39165e7a489d227781b87b7c2b3e4649635b208978cbc6fcf080c81f9aa5ca6574bc0de5b3a410c4839d758077dedc84cdfd7985b8f1f2277d32162cb2caa8f1cda8f7399e158d85c192b0fe89fc356a188ef8aaecda43b80dd8583dba25b47e49aaa60d4c00ad3a992382"}, {0x100, 0x7baca1349bf8e0bd, 0x8, "4d1707fae06c54f200eba804b7b051b889e4ecea45a0f1bbe84926203be687811b35e284dd3658cfe0047a797cf88eda35689b847810e178027e9eb4b37447581800bf698f748682ea92e18711abd3dcc5f92daad9cf77c2c2c5690866f234a44bc7b6ca11a701cad579a08c57c27dfcfc3dd3c5da7bd2dfe622b2a660e52580ae8bd69b1b80540a9e2948012a7b1a6e6e9fee6095c2760bcdebc3a67c55f7a156e38c45573c6f6835033e97dac01d6ebb62f8efd3cd4e31741bacfebc88616a32438d9005491bd8ef990426cfd8e8cc0249e09e03bd49c484dbe23f4c788658f1d6ad704442d7628a"}, {0x78, 0x109, 0x0, "64569e7f85a57b3054f4c17549d41a0561ad1a110298dff694d66bbeaefa513927fc0584e63b632ccd7d66f1efa8ca581a07129f39688b02ffbb2dba561044b2d8831c718be39f69fd26f62d9e393b901647d2f970e43aca2c9b0eb89745834754e7e8af7c"}, {0x50, 0x3a, 0x1, "3748bc8ddfeac368e61cf15175adea81ee9d3a9db4aebc9d2ffac8ba54bc4f232d6f81c1966439866fc5a3b3ee606873ff19cc5d2db45aab1667301dcb54"}, {0x80, 0x10b, 0x2, "c003e578809058b1bb9c9cd16e0800b4b49d0e36b437ed92b2852bf86e3bd6ef055dfcd3be367d68d9800077ebd81b23defa8abc5429ee425be9259550528ec4ea1b55abf3cef6144d2f28bfbe03a0d0f75d4c2f73f186d30356e41ebd192b70e0a41001a628ede4de88ff229b88e0"}], 0x400}}], 0x2, 0x8011) 1.310472477s ago: executing program 2 (id=1265): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x2}]}], {0x14}}, 0xe4}}, 0x0) mlockall(0x1) read$FUSE(r0, &(0x7f0000004180)={0x2020}, 0x2020) 911.998961ms ago: executing program 2 (id=1267): syz_emit_ethernet(0x4e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dc58f", 0x18, 0x6, 0x0, @local, @local, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0xfffd, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0) (async) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/custom1\x00', 0x0, 0x0) 911.720436ms ago: executing program 2 (id=1268): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000140)={0x24, 0x1, 0x0, "27425ba25f170100cec1d8665c0084feea8be6b8a80052d063e6179d13f019e3", 0x494e4f4b}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000000)=0x80, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x10000000, @local}, 0x1c, 0x0}}], 0x1, 0x20000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) ioctl$vim2m_VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000040)=0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYRES64=r2], 0x7c}}, 0x0) 910.333914ms ago: executing program 2 (id=1269): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) (async) close(0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) (async) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000040)=@ethtool_stats}) r4 = fsmount(r2, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r1, r4, 0x3, 0x0, @val=@kprobe_multi=@addrs={0x1, 0x0, 0x0, 0x0, 0x80000001}}, 0x30) (async) timer_settime(0x0, 0x1, &(0x7f00000006c0)={{}, {0x0, 0x3938700}}, &(0x7f0000000700)) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0xa, [@var={0x6, 0x0, 0x0, 0xe, 0x2}, @union]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61, 0x2e, 0x5f]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, &(0x7f0000000280)={0x0, 0x6, 0xff, 0x2, 0x3, [0x0], [0xfab0, 0x3308, 0x5, 0x4], [0x9, 0x225, 0x1, 0x9], [0x6, 0x7ff, 0x7fffffffffffffff, 0xc61]}) (async) r8 = syz_open_dev$dri(&(0x7f0000000040), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r8, 0xc04064a0, &(0x7f0000000000)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r8, 0xc06864a1, &(0x7f00000004c0)={0x0, 0x0, r9, 0x0}) (async) getsockname$packet(r4, &(0x7f0000000540)={0x11, 0x0, 0x0}, &(0x7f0000000580)=0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000002000000070000000104000000020000", @ANYRES32=r0, @ANYBLOB='\b\x00'/20, @ANYRES32=r11, @ANYRES32=r5, @ANYBLOB="65de0000b625632f4773f69300"], 0x50) ioctl$DRM_IOCTL_MODE_GETFB2(r8, 0xc06864ce, &(0x7f0000000440)={r10, 0x0, 0x20000000, 0x0, 0x0, [0x0], [0x1, 0x0, 0x0, 0x1], [0x0, 0xfffffffe, 0x0, 0xb68a], [0x0, 0x2, 0x0, 0xcbb]}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r8, 0xc00c642d, &(0x7f0000000080)={r12}) (async) ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f0000000300)={r6, 0x7, 0x400, 0x2, 0x0, [r7, 0x0, r12], [0x0, 0xffffffff, 0x3, 0xdda7f98b], [0x81, 0x3, 0x1ff, 0x7], [0x3, 0x8, 0x6]}) (async) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sysfs$1(0x1, &(0x7f0000000100)='/dev/hwrng\x00') (async, rerun: 32) r14 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (rerun: 32) setsockopt$inet_int(r14, 0x0, 0x14, &(0x7f0000000400)=0xfffffffd, 0x4) (async) getdents(r14, &(0x7f0000001fc0)=""/184, 0x20002078) (async) write$FUSE_NOTIFY_RETRIEVE(r14, &(0x7f0000000380)={0x30, 0x5, 0x0, {0x0, 0x1, 0x7, 0x4}}, 0x30) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r13}, 0x18) gettid() 831.923923ms ago: executing program 2 (id=1270): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x2, 0x80805, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001080)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$bt_hci(r1, 0x84, 0x0, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) r2 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="61124c000000000061134d0000000000bf2000000000000007000000150400003d0301"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f90824fc60040f170147000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r4) getsockname$packet(r4, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r7, 0x705, 0x70bd28, 0x4, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x8, 0x2, 0x0, 0x1, [{0x4}]}]}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xe, 0x3}, {}, {0x5, 0xfff1}}}, 0x24}}, 0x40004) 781.543844ms ago: executing program 2 (id=1271): ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0xffff0018) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newtaction={0x178, 0x30, 0x1, 0x0, 0x0, {}, [{0x164, 0x1, [@m_csum={0x160, 0x1, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x93b5, 0x1, 0x6, 0x5, 0x242f7c37}, 0x2f}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x2, 0x4, 0xfffffffe, 0x7}, 0x38}}]}, {0xf9, 0x6, "8564c26fbc2458ad110c32f9127155832fbb254275e0263ee802a49ffd8890332df700f1c23ebaceac043c2870bbad4226e8dfd0097058b85ef9e247145749cf96ef8068c55cd0cc51f2c56b0de5038213f65b8f72b4e89f37bef32c502813f49d727fb055948c51a4f1ac8079d4112241da618a5af62eac8dc4edccfe02aa43d58f2a8f25988899ceea493bc036d5907819d80216e3fe93985411e10547918967908334c906898febef781a75322b6a6b947e0b67712a64d6e34ae77d366e0f22b9388010865125af48aa0e4bbec54025e2b3d557e7a8024998dc25ace541c0b007a28fc0bc06a8fa2929273ee57fbfb2a84ef0b7"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x178}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r3, {0x5, 0x7}, {}, {0xa, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x8, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0x4}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x200c0e9}, 0x20000004) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket(0x2b, 0x1, 0x1) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x8}, 0x1c) r7 = syz_open_dev$ndb(&(0x7f0000000200), 0x0, 0x442) ioctl$NBD_SET_SOCK(r7, 0xab00, r6) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xffffdb4a, @empty, 0x8}, 0x1c) listen(r5, 0x0) r8 = socket$netlink(0x10, 0x3, 0x4) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000000)) 651.747072ms ago: executing program 1 (id=1272): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/mem_sleep', 0x101a02, 0x0) copy_file_range(r0, 0x0, r0, 0x0, 0x7, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfff0, 0xe1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='io_uring_cqe_overflow\x00', r4, 0x0, 0x8}, 0x18) r5 = syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0)) io_uring_enter(r5, 0x2def, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r2, 0x58, &(0x7f00000000c0)}, 0x10) 651.303717ms ago: executing program 1 (id=1273): mkdir(&(0x7f0000000300)='./bus\x00', 0x90) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x1000, 0x6}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x4, 0xfffffff5, 0x2d9406}) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) mount$9p_unix(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x84, &(0x7f00000008c0)) r4 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x2, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) sendto(r7, &(0x7f00000004c0)="62f1", 0x2, 0x8000, 0x0, 0x0) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "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"}]}}}}}}, 0x0) io_uring_enter(r4, 0x46f6, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x90) (async) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') (async) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0x19}) (async) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r2, 0x0, &(0x7f0000ff7000/0x2000)=nil, 0x2000}) (async) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r1, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r2, 0x0, 0xffffffffffffffff, 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r1, 0x3ba0, &(0x7f0000000140)={0x48, 0x7, r3, 0x0, 0x1, 0x0, 0x1000, 0x6}) (async) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r3, 0x0, 0x10000, 0x0, 0x4, 0xfffffff5, 0x2d9406}) (async) preadv(r0, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) (async) mount$9p_unix(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x84, &(0x7f00000008c0)) (async) syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x2, 0x10100}, &(0x7f00000000c0), &(0x7f0000000100)) (async) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) (async) syz_io_uring_submit(r5, r6, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r8, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) (async) sendto(r7, &(0x7f00000004c0)="62f1", 0x2, 0x8000, 0x0, 0x0) (async) syz_emit_ethernet(0x15e, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x128, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x20, "9595f429ae08a565c9a41d413270a44d2e6f790a3872d50bb14d25344dc5b3a281f175f5ee04aab21301b94d966c72c15a143c69205625466855101cf44d89d9f6ee47d77c0d4e53e34b67c542fc6f6f6c60139c43b78286f5bb8f4f11d164af24e2633a45bf4ed944b0ef6a7b7167f73cf54e78686ac09402659c29eb0ce380654c1bb0f61d255b1556b7a311096b7aab867396997ffab76abca01185b08d1e29ee14d8fe61245487104b1c5205c6adc794ba413b92d2d208b86f40983c4819c33b59c1abe2a4b0aa661fcb54e0855d6bb5dd267878ff59bcfc6079e7a5e0135118be22dc6c97e730f7053d6ec34ca11b5c7c3830af6b26868600f042ff"}]}}}}}}, 0x0) (async) io_uring_enter(r4, 0x46f6, 0x0, 0x0, 0x0, 0x0) (async) 581.640589ms ago: executing program 1 (id=1274): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x581, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x100, 0x202}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004002}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r2 = eventfd(0x2) syz_io_uring_setup(0x7793, &(0x7f0000000440)={0x0, 0x251b9, 0x26, 0x6, 0x2d7, 0x0, r2}, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=@newlink={0x50, 0x10, 0x40d, 0x10000000, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_BC_QUEUE_LEN={0x8, 0x9, 0x1}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x50}}, 0x0) 581.475641ms ago: executing program 1 (id=1275): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='timers\x00') read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000000540)={0x2020}, 0x2020) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r1 = socket$rds(0x15, 0x5, 0x0) recvfrom(r1, &(0x7f0000000200)=""/136, 0x88, 0x320, &(0x7f0000000140)=@generic={0x25, "a935548f2bdf98657fafddf1195b64690050c489b9f12e240a9aa615e5b733e9aaf03686f62559b565448edb46f289e8eb256d4663677965ce698f8db3a4df8167d33b95645e33f58b2cab32e5ee06e955fb310c4dd74020ddda0630c4cfdbb18abbf715a9da262b97473ddf44cd2427dabae08162671e706b7bc375d7cc"}, 0x80) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') 521.497842ms ago: executing program 3 (id=1276): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) ioctl$KVM_IRQ_LINE_STATUS(0xffffffffffffffff, 0xc008ae67, &(0x7f0000000080)={0x31e9, 0xfd2}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0xaaaaaaaaaaaac3a, 0x68, 0x0, 0x18) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='projid_map\x00') writev(r3, &(0x7f0000001580)=[{&(0x7f0000001440)="e679", 0x2}], 0x1) (async) writev(r3, &(0x7f0000001580)=[{&(0x7f0000001440)="e679", 0x2}], 0x1) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x1, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x4891) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x7fff8) r4 = socket(0x10, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r5, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x211000, 0x1000}, 0x20) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) (async) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f0000000040)=0x20, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r5, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1010020, 0x4) (async) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000140)=0x1010020, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r7}, 0x10) write(r4, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) socket$netlink(0x10, 0x3, 0x400000000000004) (async) r8 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) writev(r8, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) r9 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) 401.878442ms ago: executing program 3 (id=1277): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000140)=0xa84, 0x4) sendmmsg$inet6(r0, &(0x7f0000006b80)=[{{&(0x7f0000000040)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x40010) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x8, 0x5, 0x4, 0x63, @dev={0xfe, 0x80, '\x00', 0x1e}, @private1, 0x700, 0x8000, 0x1ff, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@deltclass={0x0, 0x29, 0x504, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x3, 0xfff7}, {0xffff, 0x4}, {0xf, 0xfff2}}, [@tclass_kind_options=@c_mq]}, 0x64}}, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000080)={&(0x7f00000000c0)={0x1d, r5}, 0x10, &(0x7f0000000140)={&(0x7f0000000200)=@can={{}, 0x0, 0x0, 0x4, 0x0, "1b2fd60012002890"}, 0x10}, 0x2, 0x0, 0x0, 0x80}, 0x4000855) r6 = socket$inet6(0xa, 0x806, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e61740024000280080006480000000b0800054000000003080001400000000008000240000000020900010073797a30000000000900020073797a320000000014000000110001"], 0xac}}, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r6, 0x3) r8 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r8, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r9 = accept4(r6, 0x0, 0x0, 0x0) sendmmsg(r9, &(0x7f0000001500), 0x588, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x2023, 0x0, 0x0) 308.682496ms ago: executing program 0 (id=1280): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) fanotify_init(0x10, 0x101000) r0 = socket$isdn_base(0x22, 0x3, 0x0) accept4(r0, 0x0, 0x0, 0x800) r1 = socket(0x40000000015, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="1b00000000000000000000000000000104000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000200)="67d8902400aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c14498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df895d9907e4afb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b907e0974f1073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf4dee8512f3bac440f5d5e4bed6b897608b01eae26a54433e5f5c74a2ee3c2fc50067be05a677ff52a7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fedb679328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e27252804059094a318c4cdeeddd5793a427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a958df39f9c5a8c8e876a52816446d0106f4a81dba144c80fda0b401f0774edbf73b3de44d7ca5c28b0830910f3b02be5e8", 0x427}], 0x2}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x2004c040) 60.523588ms ago: executing program 0 (id=1281): socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000040)="fb6bba8839fe8bc048c0cdafd1f8a9918bc4055eaaeb6db4ee9bcb25b1811dbf40b3a7da5a8a64db04ed6dd26eea2e37229c339b1f91201c2796173864", 0x3d}], 0x1}, 0x0) (async) recvmsg(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/60, 0x3c}], 0x1}, 0x60ff) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(des)\x00'}, 0x58) (async) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x4, 0x4010, 0xffffffffffffffff, 0x8000000) (async) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r3, 0x0, &(0x7f0000000180)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r4}}) (async) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000000400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="90010000305200001c00128009000100626f6e64000000000c000280050016"], 0x3c}}, 0x0) (rerun: 32) 60.066201ms ago: executing program 0 (id=1282): set_mempolicy(0x8000, 0x0, 0x7) 1.527922ms ago: executing program 0 (id=1283): r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_DESTROY$ioas(r1, 0x3b80, &(0x7f0000000540)={0x8, r2}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000005100)={'batadv0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000006e40)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x200, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xbd51}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000180)="1b8a0b360a619fa726960cc1b528ff77b89c51ceb19dd81d258999b7416e67e53578098e2e7fd117ec1fc5e2938a0ed639f3a7565199d4257767fed62c40e60799ef1693d4d96ca435f1cf77f4250fee90917aa0b2320ac135de8e9861291b9d17c40d99915e1ca37d04df48126e495e9b6ae785909f10af4503a019d50a0fd1b892466dc4c8ff97a78b18bf09368e6f39d837aec3163a0d20b3132d1d1139", 0x9f}, {&(0x7f00000002c0)="01933c3d3c5c00ed2adf9326bf062561ee0b1fb83612e7441cb4c659a0a16ac01e7260f2a0b60e9098f667386fb1d3f6540b04aee94dafc49de7004cca04ef7468bc00322b38efc6b8b8edda628362db9723b5a46869ba391c0d48aaac515134eec7bc7325398433b5b2191170c6d4deb98783ecd8d58a33f963e553ad4354ea5a74613e31d768244acdc201756272127e509a2eb22053d3615c676b05ab1d57850748147f01ffb90ad6e1e9401f19f4e1861b651c30ae23e5cd6aa49d", 0xbd}, {&(0x7f0000000a80)="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", 0x1000}], 0x3, &(0x7f0000000440)=[@flowinfo={{0x14, 0x29, 0xb, 0xb4da}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x6}}, @dstopts={{0x58, 0x29, 0x37, {0x2e, 0x7, '\x00', [@calipso={0x7, 0x10, {0x3, 0x2, 0x8, 0x7f, [0x9]}}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1, @pad1, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x53}}], 0xa0}}, {{&(0x7f00000000c0)={0xa, 0x4e24, 0xffffffff, @private0, 0x1ff}, 0x1c, &(0x7f0000002b00)=[{&(0x7f0000000580)="b5ab2fce04ba157d3230143152164a8c0e81f0398ddce7111eedb8afffe42cfe02c208d05d36e4a09dffaaaec2aca92cf0e66cb24204f7bd88740094bd7f0a1967b6c2cb990c448ebcf539909fa093ac1f0b288ee2335d8df0567c76d949de7839a440bc18870b05c9a07d2a9c63bb2c8a719ec1eaa179ff5cca70f2e29cad0f4e4b50083bfff184f7b0c5ccf7a31c485360a926cf008ed421decc5bc583b06fa394010ee9b9eeb8ff7618e184ed3bda202422fb77c28ced545e60c18a42bb0c75b927e8144e39724985931b6457d8e57b076317db8a6704b6ca5ebac44edb06f04fd11b78d9", 0xe6}, {&(0x7f0000000240)="a1db38d9", 0x4}, {&(0x7f0000000680)="7ee410cc6a2e4ec153e683b4a6ce504e9b50124116f21a8404d4535905d8b2705e0ecf8c02912e89bed08608224dded34d56f7008a96a2676efb5656387f96da0dd49385e4cc20c3c77f87cc668d45ed1a28285cc574174b564d212a19b17ca37a557f967c86f813a3b00a0658f69396289c7d1ac33d82ac99eccd8c020ff54ec0275bfcd80a73ff3c7ca2ee7d04b6c63ba57dd45255", 0x96}, {&(0x7f0000000880)="1e54cd9e4e7b3edd3e0aa45ce2e7d574f7a22a4fd131b2be9c5588fd29cb4863c2bb992eb007e564b6b5982347533b0ce8f17fdace37f0edc94d7993802943fc4bc75fd3caab3526f2063ac102803ecdfb3b858bed8644b5554b4b64267b3b097942ae301a8045a81f0a09f2a6eb60ba6662a950e7ed3249c5356ec184958b49", 0x80}, {&(0x7f00000003c0)="5c2e16aeb3c7fe36c494e1188b0a48852437245b", 0x14}, {&(0x7f0000000900)="880f68ccf77ac78fa8a9be12f72650213341c3f650cf1519f05b528ed14c57a88906a76354020837030e968692de29e68af23ee04a7b549a0ea33f97314fa924845092042a43b7e15d1da283a11818d60af7aa4ea099519ccc702f0ef810c9f7b932bdab11ffe62b659a2630a6aca757c0d94913b72580b2114ca867e2f5a00aa4b0a171a3caad8742cae37d51bde72a38bc5ab6bb9ee03994e30d29408aa5", 0x9f}, {&(0x7f0000000500)="2e4c1ddb89138ee395fbc1618c8b371a0d7f850d6d3da9fc80d9f98176fb41", 0x1f}, {&(0x7f0000001a80)="77ef93c73228a736d9a45e7b1a4cf3fb9c1ad5d50832e18923daaa2ef3c2e05febd6d248e7978bc10e576bc0ac304e72e9e9a9942b57183b8c68dab01284fd062a9d1e26acddfd1da063035d7a13776c82c2d98254f784c40347f76c990d46e8fbf1ab4ef27264e80cb55c2312b85468b73a86bdddd25fe421e3f06afd7c0cc2e51fceae9fe655b0f63f1e3626157e1bc2fbc9c003abfc76d1f8101860a19a12bd9bf0a7d44b07091bcca44fdb855380739186b391f2e0134acfd4031d35f194690546aacbc2c84ce1377436872ba9b41553d5b4e0385e79a6ed3b02ed753e074fa86c6c3ca4d85ce968e6a14bd8922e89997e7890929a5c3666df61dd8d4abeffa4613adbf777bfb7388b1b57242087fb6f91bd17035a59f576fae77943173b5f5fd56f04b939c7eeda8f42513b151b6bd3c85222b5ce7bafd7a5e4542c5a916e35b00867f5024d627f6e147114053cd425d9a4b19a6341d2f5ae4ec1a18eb376fb0487b36e77c96d2251015e40f8a7a36253549eda5f9631d1eacae4974de0b189da9a190ce80d98e8e2262e915e244def6754d3d60ab1503bdea7468ee27695898b726ac1bef49c2119435a2497eae2d2b5e00326dad95572742e5583e8a7837bc88ac1287873f273b55ff65b153b10be9f554d0b5afa9b8b5bf886192fd3f7cc3533d183bb0091bfc345f998c3dfa1a04539dd6bb2d16cb35f9fd40884a42e6fc4e313b7c34108ddbea03a27a002e480567387845f5ab4584230ccf896c351a8f7d388fb81ab17dca132a4d4f9d3da3f986a5211e27a51934c5d61808732f7f5e65735b8b190dd3c62ddff61ace09fdb725904e7cefcced97aaf4e239c7c2b68ed0bcc59d03de63171c89bb49d2bcd4cd00cb995f79ba3175045c33f9fe37e75aa3aec299c6eee9c9197fa320937c95a1d06f2314875757399f4ab2b9888c26c151431d0f3aa14539959babdfa64386f0cdf6aee86c13b948db351a10d93db8d20a853670fe68eb19587e6aaeba0e20939a65c200d9956e3ddb2dc021dfb5adf6c3e3ba3bc5139bac2820e0534f1cfc18d38decef98cf8a2d823e794ab817a92481985e475cd9e11023b242789f735b42356d6f4cb0e10dde1dbd52bbb0a072b2b223650d04191298ec95b75acab17265cd70be774289852df8fa7e2db497c46abd50e2b6dcbe237359836f4ae10cc756d77eacf14e7f7bd9d406a4920ab8400164e507ca786345af4d2d46eab97ecbc26050f27b2c5b3e119eb0cb2f0fc8ba3bbd4c5f35ce675335aa280d95b0ab747c8ccf0bba54c459381e5c355c3786c796385fbf47faaf4e3880a09b0676cae9b10c7ae9412c6a0c2a25afb497171603cf6bf4de2b8f4e48d95ecf34949b0f52fe1be82b2fe40b8797c7a1e348a9d29bda452b2452ea58238090c443a276aeac233401446540c8d17610810f07bca7b5a34f7fa9dc295ae12e532487e7e8d5330724c405fbdca3f133f57be0dcf0d73fd3fe47e4e67bd81c53dd836eb67ccc9a680792e914a6ccced2115e38b49a4784c5a2e5ac7e806e75c98d9286bc27ceac1808940c0fdda7f42d609a1ba98dd809158812ead101dc5b55dd8670b4b042cdb749dd3b0d65cde778bc1ca6a32fd3fe38faf0091d2caa25413bdbf0686ca3c240e0ee6a76dad7ac290bb22080b52009e9efd85a14b8288a870804770356254dfd2686dcaf14e836f93d62ea52d93d59ca6dd207fd2f9f8118b3d0f98753ebd3149b054457d5c0c35d2582b922dc7269f69cee71f21ecdd4a1177ac286b53f747c39684fbbba4181c2db537dcc2e9d600d7651008f1686026711cc60b54b43987399ee6815ffd2a3bc537d455115a1b73d8c5b450464c7cd59a2501aaadb217ada39c058ce8bea05f7819da54e6c1ab36e4bc1debe283268f702f1b177c1965058538fc5353e1a8bf7f7f6dd3ed3c0e32db056eb58e9beb817dfa312ab2cd91a4e72e75f9bb20fba79132032316522f57feaaeea4f168856d41e736771549249cba9b9675b96b1c81e4bba09b4f0210e8f91d3a547350e4af5ac6afd119d8c76e1588cd9989423f26e9dbc9671cba636a2d23e4145025a978416745d93d194ffba1b604d34485da11fd97f0ff9500e278060ea4b02bf38f66d75332879ce50fee6c5a898c6b66805e30d4cc70a0d7cd5bccbe8b04a5af88a02637669f497184e7c785fa23ce922b03806c65377db5f0304687819f75438bbf28b8811d050789fd325b78b290fec6f84fb8598c47d770bcff56e234316bf6aa6bbd5302bed184df76f90371f86f9b8797812097e2f8739afd80d6bee901f38ef1c7feec61406d817f1c652c80ceae2bd93c08003826cbd188667dddb73de6387fc71d6aefe0f8afd12c3b3810bd56a7832472801b8d967eca14627f7ba0c7b45b0c27621739c390713ade372ff292bbb8fb8148ae9a6920ef4435deb74ef89cfe51e7146c4895d80801d3bb702e9d34390bd277d77cfddfaaa247d79de7daeecfbc9d76c9d125f187ecb6115ea5b52021f95b3ed99d83adebf1fcd40ff30ff0df774501d3f4b69fc339897c52291e1b7755dd93331e0d2bc4e704cc1dc7a4b6418f04da763ae63ae09bccfefb82795e18544bafe52ba6f3cb1a7a999f6e48d76ffce0c4df3f1f335384519dd84a87245fa39916eb95d15c448701f4da58950ca35e8c754b1b7fad39e40135bc133db9c5c51c10467db44547336cab78fda34850dbe6b5b34fd36f6e8ef2669b579d5f515a1c042c9b16dc6cee181dbc364cc6d79e3cef9981931bb7c668b660245f4734c8e0149f266c9f96dff06cd21b7410b6e9263315403e514e653ef1ffb2f689cf0174fd679ba09382f7a5c423f59cdf1b7083e7c1fb18b77a41170142ba69beaa7057ed78dab91f0ec1412a62435410e6d1ca7416a00b9936b98b85174e19f9cca9df61bb375fe4c3a74ed9a2fba25f83bc2f1aad821aafe2c8bb4952f7d9a14e318f9adb59b3ec49844bf8f28be850b14adbe894f419124d54a7e5001fcd78ac3c6c819cac9aecf2de88f74d60ebae5bc543e387707d99e23faad087065c16780996092a3c4bc634ba83777948d3667247e32217cf7ae6a1c0e5fdaa3ff5f301aa672e8d230cd3c550c224d19201091ca55cdbd5b17a8dd56f5f108d57bde447f7361ee70d1b909b8d8552b854b3510f32b542550da8ecbbfb0b703b80464d4dbeea5f5ae111c6b7cc42f52ee5ea7551ed6b64dd5f4b71c0be2fb5827a9c1f038df19e755779e3ccddc093a10a6fc4cbd2d36f273c6a2a59edf8701df4fe0d0c6819780e80c0fadd6c9742d40feb174ab3bd4ba9510f68e59763be08402fdc6b55340696aa62c4512aa058312ce6a95deba8586b004a3ad9ff96aa9da8ab09490d88b48517a205044a29b6d91010acf0f13e4075534c5d267b5bdb216c7b620338597602959c4181e60bc8972bbc9da57de30d4411762c6100b97ff9f2a6ebbabdf6c84ebdc345001b5a856bf21765efe16f476dac575f5817ed9a6f59b661acb6bc4771a70dbf14d7643a6822636143d46c813a67ba54749dc34265f50d78172b42fbbf0952f01f27a6846ddec9962834749dae2e507f55aa32dd4ccb453ccf6df19800f43cb75fd9dcecebcf4073be407d8b20087230aa359321b80151a38dabe6739694db0109495acb8b9205b5f6329c2fb84dd10f5f1b5d96f4ca99ba19bfb024e64ae5925f8a5c87b4a41f4b4dee3cf501af62dc06692be2129aeb9019b5d92132241f59fb1a2af8edf2b892da14819f5590b0d8bf8fcf4005f209dc55cf52fa77d53810057455fed6c3ccff1e325206f91c447e0a3c305dbf70cc0acf3417bf66f7fdbfb1adf8ab0ae143573695a58abc68d01099a7005ba4386bc3a15c630bf408984a3ee10f3bfa5a071126f09a43b8ee40effebfa7eb40c538dc6adade97bd852dee0ff7153c8a385b7fc0fa4e59cb39f0f3b1052450c463d2ca40906201c1ba0116cf17cf046f4dd462e12c48c6497a811227bfe96943a9b4886bf55f64983c990ebe2f874b766b5360d542ee3c803f8097fc15ba954cd1df5273e192f610ca1389dba1108c7cde40eaa785248e8432bba6508f40de0151c423d83e8db14c7a932ebac7fdccec815fb762ed24005e9d4e7946f48a48edecffc4fbf38c901f168b8e4557d1a450f00a548f131bfc4b873d1ea768325d3e069f37545239e9b15be196a8aa94628aa51a29f6778d82c0b132d6bf47579653b6eb8c64be4a2aa25e6ed45ac25eda6cb4e55cb5e09cd95f4165bec699bc30a776bd0b4a80669cd95430c1d60a873f16fd62de594ee722a834b28eefc8770f2f3024153cb6c39c178e7ef10f0c8a9043dbc9c1acb0d7d0ae191a5a2dbdb13f5d26ae81199d74b96d573a96e98cfa528ca70af85dd77699cc52910dac8171ed4183e46b8c183ead45d32f9fbea29a277415680886e87e4024604969340e7f5d57c21b1058981d2482c0e91b7f2c7b2bae42c4836356c9aebabfab3d634de8b5ce3e24ec624960ba95399e58c2a0bf16daf3a1f6f7972245ddf026eba9a3edc66fe9aa24134038024631199da903f0e7025d51ed2691483a991338e8ffd38da7fc763633decf99bfa6e00b2ef1ea4045890c49c6a1e65e9fba53372d642a0363cc75903b2b07da14ae97516b331b9893f47376dc3e9d8660b91dd23bfd076747b0e2073113710d4e1aa5f3633ce87381f172885aabe2417f04e89f189910672fc8ae9e6b1d0fbbcbd84663583b3df8ac9a6537d572b3e12ca8ae46395591773b17c48475d23b6f341ff941a005c1befc269c03a466da7209e636c7e0a5e3f35e8b46e0a998e9e940fb267619800412efab2c24fc3ca05f679f04d211da6896bfd563ca3078c3bb61ea53cd696ceb995e20229efa2f5185e1f915d09a6e7d360be8b94515d7898d330ff179028dba2f6aa5afd452a937cebd3401d7692ce9e2f138c7802a2bb44394b52c42f2affda07a285b2d982103d0f75df55951227c322e3189d144ba2d777db646e17c8435cf5353d7ca204f4704269becb5f9d46579d69a94abca2f778638bb9bb37be69269f2ecca0cfea9a1f3ceff4c7cb3ab937ec738dcffec19f50ce3de73bcfadbf7ead3e4ae0a534bbae81b0c3e052af1f86da02357708255d950ba80d86f1c43ddd08e3879a3dec4b95e1769d28831687cd1ed2c4ab2405a297789986527d6ed2f73363954078d596fb997591680a4d732436f155aae3d9ab05acdbed99abc9dd4ba2267df5b2708ef5d87b47c617aeaded8dae2058d2a126dfecbb429b58f3d08a4aa2150c1ccfd56cab293595aae100c18872dc0c02cebc75c517d1e1c5696a8159133fd4be480f562fe546069a64098b26fb84d4890e182bd6530fb4e1cf2e2920c21d27fc9dbdd72546edc318b1f72fc3e3dfefbdd6088494a57b4895efcc44d7c33eb81d25c77b1204bf483b34f7339656823feebce42609aae0a7a6e9decd808d482a3a0d37795c73615a02125de5ab74975e9365b25ce97b25ea93845898b61139933af1fdc390ad853136d24ab24817140abb74fd20878bd5d35c419dcfec260b4a45e229ba87c72377dc0e6545f3ce5d7bf259d153b91debc6ebce1cfdfddd54d2f20f17bdd027b0513f04d150fd2e7eb552d6377247d80f61c663ba8dbfe77e6a9f3058576e5017b0a5a72316630f001f95ab5e796c6d80a72dbb222fbc3b451bcfdcd4b2efb56502ff7bf2c67eaf4fe2dc4a83c574d5121c9d691d9f7d391564778e16763b77b0196bd9929ee7ac667e8575269108246e7", 0x1000}, {&(0x7f00000009c0)="4fdda1ee1151a5152f457d4c2e1db648dfb68543b416ac86a00c674c8de633b0efed62c196bb20ee9e39be90075c9cead01a0a91a5c65dce4af44b0d17922556f432ae8f1395", 0x46}, {&(0x7f0000002a80)="4b698468577d9ebf6025f5bf646326a614f5a58ccff9008d9e114b7e3e555843a007c53a10e15898a4379f60a1bd542f7f86ef2f3258b7d12843eaf02b0adf863047cfe3e760b44f6f023445cf85f941365edbeb2156cd1ea4484b8ac919e7", 0x5f}], 0xa, &(0x7f0000002bc0)=[@flowinfo={{0x14, 0x29, 0xb, 0x9}}, @dstopts_2292={{0x20, 0x29, 0x4, {0xf9, 0x0, '\x00', [@padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}]}}}, @rthdr_2292={{0x18, 0x29, 0x39, {0xc, 0x0, 0x2, 0x4}}}], 0x50}}, {{&(0x7f0000000780)={0xa, 0x4e24, 0x6, @mcast1, 0x401}, 0x1c, &(0x7f0000005040)=[{&(0x7f0000002c40)="b29cb4b569b3dad81f815ae5e03218e13191d4c53ed30fca8833e5ad1d1ca3dba195eeca5ed60a61ae3e3c6c7181c39b6985b45e5d70e9828f9997a2e99e60c7b63326cc635fa5b00a269da2ac046abadf234f7f7cdd3cdc116ea23a419f62273fa3b19753326fad8af1f6c1c6aaa31e0dc75342eb3b94117691c0dad8c660e9293f1e6d3af306344a690c98b9de4e123fa8aecd30a078b942007434e9f6b59c90505737128871b8d4278730ae1de3a5791c2cea3fb0839c68f5ef62324b0eb1ee584602f19f1588f7", 0xc9}, {&(0x7f0000002d40)="ef3a4cea84cd4062e2cff7bced8849a0c5f98146c8e9394bea224d77441d2c6704005dad4b159019ecd2675d4d8280d28b2a94f2e7e15ae2dc4c35b91f7d89add7824401e619d75d90672ac0821287df5cc53494eb8c03052c6ec311c4e2e8cc44e4f4ae4d7c4811c6218a5c1eab0b889b6dd713ca6145e0c64764e8b05341d3f937ef82918dc5ffc437f1fcf88208050664806c509cbd786df7a4a3c468c10c4bc3e54a06fde90174f42081fe3007250644f7d13cc40f33f8717f4927231861e63f13edcf5df00e5a9cb49df06a58abd1776e556edc927ee73a311d7fa0cfbf293504cd2eb5a74b69c117", 0xeb}, {&(0x7f0000002e40)}, {&(0x7f0000002e80)="18a14cfdf6baec4a65a64200cb1b957627f19b81e859d3a002eb94c64d9a5b8cf70086fa6525d906196f575eaadc791f4ce9b07921a10a742d0c3da34efdb2984ccf4194abc9df89ef07ad2dd27cc209e9057f143eae78872498c08339644b3b65d14d296bfce5f498b054e7863004ee6b105ce6e216e96dccf2bba0", 0x7c}, {&(0x7f0000002f00)="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", 0x1000}, {&(0x7f0000003f00)="92b4136ffb6fd58b851545bb80c937f505df6d5ce8ecc95be3e000aa8a49c7d3d30329df61f42a7aab876cc1f321abaa463822", 0x33}, {&(0x7f0000003f40)="6dfc9471dd1f4121f02e0086f2b3f11062cffecf642eb2d6aac661500fca347ad03bf1a912f8a4a77786cd79df83a4898d1bdb9dc920d09e580314947aaff1402328703af3fd253fa4a7f92099d251f43799c35bb9e43af3ebaa59325edac88f304ab52e200444991d7ae2c39f32cc06166d6422e72eff325a10c990", 0x7c}, {&(0x7f0000003fc0)="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", 0x1000}, {&(0x7f0000004fc0)="1c98ca8e8586566ab6768f84aaf37d62cd327a711257c10f21207aee204100c6afc180d2f13ab434255c529f262a9f98691c69518bc84ff0cc4484e6aca804152f827a3e1c98", 0x46}], 0x9, &(0x7f0000005140)=[@hopopts={{0xb0, 0x29, 0x36, {0x6c, 0x12, '\x00', [@jumbo={0xc2, 0x4, 0xb8}, @calipso={0x7, 0x58, {0x3, 0x14, 0x2, 0x2, [0x1, 0x2, 0x6, 0x64, 0x8, 0x8, 0x0, 0x2, 0x1, 0x0]}}, @calipso={0x7, 0x30, {0x0, 0xa, 0x58, 0x4, [0x2, 0x6, 0x7fffffffffffffff, 0x3, 0xfffffffffffffffb]}}, @ra]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3b, 0x4, 0x0, 0xff, 0x0, [@loopback, @empty]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x2}}, @rthdr={{0x78, 0x29, 0x39, {0x73, 0xc, 0x0, 0x5, 0x0, [@mcast1, @mcast2, @private0, @dev={0xfe, 0x80, '\x00', 0x40}, @empty, @loopback]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x4, 0x2, 0x1, 0x2, 0x0, [@remote]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r3}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x8000}}, @flowinfo={{0x14, 0x29, 0xb, 0xc}}, @hopopts_2292={{0x78, 0x29, 0x36, {0x88, 0xb, '\x00', [@jumbo={0xc2, 0x4, 0x2}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x18, {0x0, 0x4, 0x7, 0xc0cb, [0x42f99146, 0x9a]}}, @enc_lim={0x4, 0x1, 0xf9}, @generic={0x6, 0x32, "c315426621c4f528d938e575c9a2609157c77f6599f53df14540bfff5698f3baea9b6caed00954f9d42657181f93c699c559"}, @pad1]}}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x2, 0x2, 0x0, 0x5, 0x0, [@loopback]}}}], 0x298}}, {{&(0x7f0000005400)={0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x8}, 0x1c, &(0x7f0000005640)=[{&(0x7f0000005440)="21f286d4c5750b7d06c4f2af8b82ecd35fa904513f75675392362d7f2b754d14b0e80519fd8d5b4c94f8c883ae9a779b5bfd89c3d17b21088b8e9b20971b751904a9b5c7bae81c6db15874928ba188457280850637dfbe262b8a2377b778f3d1da4ec8f57c889fa47db60af0070cc4f6fdcc923093440161552dda0141ed1c920c9bfdda785c81059dd958a107900080e4a01f3bd0fc3114f2f6bada7d2717c483d183015172aa22849f711ea3de571ce00e8032ab6c48f4d33663e010e436299fe7a7f69c94", 0xc6}, {&(0x7f0000005540)="eddcb8391c6790dda9db68a823bb09db67b033b6b5fcfeea56d9925daf5fd2695c26591a26226f8fc1b37f22a3c90d01489437cb10de91c581c1b66c0cceff398190c07153068c1c9868c157ea1a15543fea2f355e91b409f4da5de2ba90662b3ee30ea861265022a3d76d21773da0a0b4b9733877edefacb377a6208f79d091c9d2ae5a1fd76b8eac23c3", 0x8b}, {&(0x7f0000005600)="ad5d0dda8b2ff38c4dcc0c5f7d8e9aa191975514a467", 0x16}], 0x3, &(0x7f0000005680)=[@dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @dstopts_2292={{0xd8, 0x29, 0x4, {0x5e, 0x17, '\x00', [@enc_lim={0x4, 0x1, 0x8}, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x86, "fdb53752c10ace1d3ed11d6b3e2dd82c962cb47589b04f7dd685d380c1acdf61b5de2214e654ffb18264f120501141cc3e60c582de2348c0c24aa3744a1fdae2d546cdeffb9705ccdb55fa879d30e1a64c2814787653f80b7dd72e327b8184e5a7e88288f1b2e9211ac6b62ac948cdf97b5abeb8a463bd46fb0d6f5566de506769592cf4e916"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @enc_lim={0x4, 0x1, 0xc}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0xc, 0x2, [0x0]}}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x1, 0xa, 0x0, 0x0, 0x0, [@private2={0xfc, 0x2, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @private1, @mcast2]}}}, @hopopts_2292={{0x18, 0x29, 0x36, {0x3a}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fff}}], 0x188}}, {{&(0x7f0000005840)={0xa, 0x4e23, 0x3ff, @dev={0xfe, 0x80, '\x00', 0x32}, 0x4}, 0x1c, &(0x7f0000006b00)=[{&(0x7f0000005880)="e7a694d1ad6bc5b383e5f8b93ad9ef854dbe21ce3dbbfb31d4830d6592a7ed3602d86d5615e6c0a3c7a7feec90c4cdc74cbd466d8979dbefdaf1558ea5d5a04db5e31634e982083302a654b27c8c3b0a3a4854b814f85bf317464dd35f476d773ebf2510994c75846d226c39604c4de73f181e3915d485723e78a67ab74a3915b347793d631d88fd1e32e7f7b143ef835b5754a365f375f027849724701bb11d3137c7a97f2d1d0ee5b3711d834ee94696f114eced02000c09516ae43a1dfd6c944a658b137e77a23a5db0d5aadcd0a94c05329471be0191c6d6d9d35345845c5b7ff3c49ed0d0dfd12e40", 0xeb}, {&(0x7f0000005980)="1972abd37da13f06dc74c576ce30137c7bd75244c379b5fe7eb376f20e2014df68d7bd9501b3a818fa72d7470aaacfe736fd60d8ee155a8a8707915211a706233e424ba74011771bea535e10278c7b30ccd41b79547d118b3b06affbdf", 0x5d}, {&(0x7f0000005a00)='!&J', 0x3}, {&(0x7f0000005a40)="f6f3502571d4c4c0f0a96567a066fdc942c548d8c99d19cd950c26ce2d1de13af6ee4b2606d1138c8a728e1a26a0dda018391c4534881c1ac4d7241bebfa156939fb2354d9742c6e95e22495d0846bcc19b8ec806effb2caa0f29f96c51aba4f9b31163e29ac6a9be6", 0x69}, {&(0x7f0000005ac0)="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", 0x1000}, {&(0x7f0000006ac0)="1d8bd5267aa376e1e03f3ab9", 0xc}], 0x6, &(0x7f0000006b80)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x2, 0xc, 0x0, 0x8d, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @empty, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, @mcast2, @private1]}}}, @rthdr_2292={{0x58, 0x29, 0x39, {0x87, 0x8, 0x1, 0x0, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x44}, @dev={0xfe, 0x80, '\x00', 0x2a}, @local]}}}, @hopopts_2292={{0x90, 0x29, 0x36, {0xc, 0xe, '\x00', [@ra={0x5, 0x2, 0x9}, @calipso={0x7, 0x48, {0x1, 0x10, 0x9, 0x6, [0x7ff, 0x8, 0x9, 0x9, 0x1000000000, 0xfffffffffffffff8, 0x8000000000000001, 0x7]}}, @generic={0x9, 0x27, "790ce0ef6add368af27534fbdaf33ba2c65be246dbdbc567f9c185e7464a487839c66e1bb18fef"}]}}}, @rthdr={{0x48, 0x29, 0x39, {0x89, 0x6, 0x0, 0x0, 0x0, [@dev={0xfe, 0x80, '\x00', 0x27}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x1, 0x4, 0x2, 0xa, 0x0, [@loopback, @private0]}}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x11, 0x4, 0x2, 0x7, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1]}}}, @hopopts_2292={{0x80, 0x29, 0x36, {0x570226b40a3cba98, 0xc, '\x00', [@enc_lim={0x4, 0x1, 0x80}, @ra={0x5, 0x2, 0x3}, @generic={0xfc, 0x4f, "3b43cd7f744c0586865a40edc26e26826bdef0d142fe0ac9cee1b10cdca0f9d974f1d844494f1de4a1b7236847139bfd2970f8e3f1aa966df9b25a5dbe7dff62a972876decb7618b6d01f8a2cdbc0f"}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x2b}}}], 0x2b0}}], 0x5, 0x40800) r4 = syz_open_dev$video4linux(&(0x7f0000000280), 0x2ee, 0x2382) ioctl$VIDIOC_SUBDEV_G_FMT(r4, 0xc0085666, &(0x7f0000000100)={0x4b8c76c522e9be76, 0x0, {0xaca2a353, 0x8000000, 0x1016, 0x2, 0xa, 0x0, 0x1, 0x5}}) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r4, 0xc0305615, &(0x7f0000000380)={0x0, {0x1, 0x8684}}) preadv(r0, &(0x7f0000000a40)=[{&(0x7f00000007c0)=""/129, 0x81}, {0x0, 0x2}], 0x2, 0x0, 0x0) 886.659µs ago: executing program 0 (id=1284): syz_emit_ethernet(0x12, &(0x7f0000000080)={@random="659b3dfadf01", @link_local, @void, {@llc={0x4, {@llc={0x0, 0x0, "e3", "dd"}}}}}, 0x0) syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_disconn_logical_link_complete={{0x46, 0x4}, {0xa, 0xc8, 0x28}}}, 0x7) 0s ago: executing program 0 (id=1285): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x68942, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) futex(&(0x7f0000000140)=0x4, 0x8, 0xfffffffe, 0x0, 0x0, 0x2) (async) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r3, 0x3b87, &(0x7f0000000280)={0x18}) (async) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) (async) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r5, {0x8}}, './file0\x00'}) ioctl$KVM_SET_SREGS(r6, 0x4138ae84, &(0x7f0000000100)={{}, {}, {0xeeee8000, 0x0, 0x0, 0xfd}, {0x1}, {0xdddd1000, 0x0, 0x0, 0x0, 0x1}, {0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd}, {0x4000, 0x0, 0x0, 0x0, 0x3e, 0x26}, {0x26000, 0x0, 0x0, 0x0, 0x0, 0xfc}, {0xdddd0000}, {}, 0xddf8ffdb, 0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x8080000}) ioctl$KVM_TRANSLATE(r6, 0xc018ae85, &(0x7f0000000040)) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xdddd0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x4c, r10, 0x607, 0x70bd28, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x7fff}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x8801}, 0x810) (async) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="200029bd09100000000000000000"], 0x14}, 0x1, 0x0, 0x0, 0x4044040}, 0x4000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x2041) (async) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="04030b09c900aaaaaaaaaa100157259c9d0dcb0c1855ae3eaf4868d578dc30b0e7a3686b0e87ba2aac51a10481efe0349f1308d8b49cda62c963a487722ec79b69"], 0xe) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000757d850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x2, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): . [ 54.455181][ T6434] capability: warning: `syz.1.116' uses deprecated v2 capabilities in a way that may be insecure [ 54.503603][ T6448] program syz.1.118 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 54.546316][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 54.548624][ T1109] ata1.00: irq_stat 0x40000000 [ 54.550084][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT [ 54.551802][ T1109] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 20 [ 54.551802][ T1109] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 54.556698][ T1109] ata1.00: status: { DRDY ERR } [ 54.558218][ T1109] ata1.00: error: { ABRT } [ 54.560211][ T1109] ata1.00: device reported invalid CHS sector 0 [ 54.577296][ T6448] netlink: 12 bytes leftover after parsing attributes in process `syz.1.118'. [ 54.580599][ T6448] x_tables: ip_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 54.586761][ T5297] Bluetooth: hci2: unexpected event 0x03 length: 17 > 11 [ 54.781592][ T6472] erofs (device loop0): cannot find valid erofs superblock [ 54.829914][ T6474] netlink: 76 bytes leftover after parsing attributes in process `syz.0.127'. [ 55.254842][ T5297] Bluetooth: hci0: command 0x0419 tx timeout [ 55.534932][ T65] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 55.707277][ T65] usb 5-1: Using ep0 maxpacket: 16 [ 55.718362][ T65] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 55.722926][ T65] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 117, changing to 10 [ 55.727630][ T65] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 26144, setting to 1024 [ 55.731803][ T65] usb 5-1: config 0 interface 0 has no altsetting 0 [ 55.738337][ T65] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 55.741699][ T65] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.745163][ T65] usb 5-1: Product: syz [ 55.746734][ T65] usb 5-1: Manufacturer: syz [ 55.748475][ T65] usb 5-1: SerialNumber: syz [ 55.752703][ T65] usb 5-1: config 0 descriptor?? [ 55.755469][ T6503] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 55.830056][ T6512] syz.1.134: attempt to access beyond end of device [ 55.830056][ T6512] nbd1: rw=4096, sector=0, nr_sectors = 1 limit=0 [ 55.834468][ T6512] XFS (nbd1): SB validate failed with error -5. [ 55.856200][ T6512] i2c i2c-1: Invalid block write size 34 [ 55.892328][ T40] kauditd_printk_skb: 110 callbacks suppressed [ 55.892339][ T40] audit: type=1400 audit(1743893400.733:358): avc: denied { create } for pid=6518 comm="syz.1.135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1 [ 55.961263][ T6503] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 55.964891][ T5297] Bluetooth: hci3: command 0x0419 tx timeout [ 55.965428][ T5948] Bluetooth: hci1: command 0x0419 tx timeout [ 55.967286][ T5961] Bluetooth: hci2: command 0x0419 tx timeout [ 55.971019][ T65] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input7 [ 56.112067][ T40] audit: type=1400 audit(1743893400.953:359): avc: denied { unmount } for pid=6527 comm="syz.1.138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 56.312192][ T40] audit: type=1400 audit(1743893401.153:360): avc: denied { read } for pid=6502 comm="syz.0.132" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.315463][ T834] usb 8-1: USB disconnect, device number 2 [ 56.321174][ T40] audit: type=1400 audit(1743893401.153:361): avc: denied { open } for pid=6502 comm="syz.0.132" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.340698][ T40] audit: type=1400 audit(1743893401.183:362): avc: denied { mount } for pid=6530 comm="syz.3.139" name="/" dev="configfs" ino=2118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.349209][ T40] audit: type=1400 audit(1743893401.183:363): avc: denied { write } for pid=6530 comm="syz.3.139" name="/" dev="configfs" ino=2118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.358424][ T40] audit: type=1400 audit(1743893401.183:364): avc: denied { mounton } for pid=6530 comm="syz.3.139" path="/38/file0" dev="configfs" ino=2118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.365636][ T40] audit: type=1400 audit(1743893401.203:365): avc: denied { unmount } for pid=5958 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.410592][ T40] audit: type=1400 audit(1743893401.253:366): avc: denied { append } for pid=6536 comm="syz.3.141" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 56.492930][ T5961] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 56.494203][ T40] audit: type=1400 audit(1743893401.333:367): avc: denied { append } for pid=6539 comm="syz.2.142" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 56.988804][ T6552] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=35887 sclass=netlink_route_socket pid=6552 comm=syz.1.146 [ 57.091731][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 57.099884][ T6560] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'. [ 57.233016][ T6554] program syz.1.147 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 57.285127][ T1109] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 57.287299][ T1109] ata1.00: irq_stat 0x40000000 [ 57.288671][ T1109] ata1.00: failed command: ZAC MANAGEMENT OUT [ 57.290419][ T1109] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 21 [ 57.290419][ T1109] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 57.304767][ T1109] ata1.00: status: { DRDY ERR } [ 57.306178][ T1109] ata1.00: error: { ABRT } [ 57.307488][ T1109] ata1.00: device reported invalid CHS sector 0 [ 57.328279][ T5961] Bluetooth: hci0: command 0x0419 tx timeout [ 57.347069][ T6580] netlink: 4 bytes leftover after parsing attributes in process `syz.2.154'. [ 57.413138][ C2] ata1: illegal qc_active transition (00000000->00000020) [ 57.488100][ T6588] tipc: Started in network mode [ 57.490137][ T6588] tipc: Node identity 8677050fc775, cluster identity 4711 [ 57.493850][ T6588] tipc: Enabled bearer , priority 0 [ 57.547518][ T6587] tipc: Resetting bearer [ 57.740070][ T1109] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 57.748032][ T1109] ata1.00: configured for UDMA/100 [ 57.774164][ T6592] sctp: [Deprecated]: syz.3.158 (pid 6592) Use of struct sctp_assoc_value in delayed_ack socket option. [ 57.774164][ T6592] Use struct sctp_sack_info instead [ 57.843423][ T6600] netlink: 32 bytes leftover after parsing attributes in process `syz.3.160'. [ 58.025055][ T6604] Falling back ldisc for ttyprintk. [ 58.044851][ T5961] Bluetooth: hci1: command 0x0419 tx timeout [ 58.044923][ T5297] Bluetooth: hci2: command 0x0419 tx timeout [ 58.044941][ T5948] Bluetooth: hci3: command 0x0419 tx timeout [ 58.302811][ T6587] tipc: Disabling bearer [ 58.307998][ T9] usb 5-1: USB disconnect, device number 3 [ 58.360165][ T6614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51375 sclass=netlink_route_socket pid=6614 comm=syz.1.164 [ 58.368619][ T6614] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 58.430659][ T5297] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 58.463100][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 58.466544][ T6625] netlink: 4 bytes leftover after parsing attributes in process `syz.0.165'. [ 58.561339][ T6638] capability: warning: `syz.3.173' uses 32-bit capabilities (legacy support in use) [ 58.674904][ T1467] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.736443][ T6645] xt_socket: unknown flags 0x8 [ 58.804848][ T1467] usb 7-1: device descriptor read/64, error -71 [ 59.064779][ T1467] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 59.124958][ T65] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 59.194854][ T1467] usb 7-1: device descriptor read/64, error -71 [ 59.274883][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 59.277609][ T65] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 59.280268][ T65] usb 6-1: config 0 has no interface number 0 [ 59.282091][ T65] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 59.286409][ T65] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 59.288997][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.292533][ T65] usb 6-1: config 0 descriptor?? [ 59.297719][ T65] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 59.305121][ T1467] usb usb7-port1: attempt power cycle [ 59.404833][ T5961] Bluetooth: hci0: command 0x0419 tx timeout [ 59.440531][ T6656] Bluetooth: hci4: Frame reassembly failed (-84) [ 59.443505][ T1144] Bluetooth: hci4: Frame reassembly failed (-84) [ 59.449238][ T6661] __nla_validate_parse: 1 callbacks suppressed [ 59.449247][ T6661] netlink: 16 bytes leftover after parsing attributes in process `syz.3.181'. [ 59.482211][ T6661] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.549530][ T6663] netlink: 12 bytes leftover after parsing attributes in process `syz.1.177'. [ 59.579790][ T6661] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.645050][ T1467] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 59.665201][ T1467] usb 7-1: device descriptor read/8, error -71 [ 59.685262][ T6661] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.759552][ T6661] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 59.834565][ T6661] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.845956][ T6661] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.856720][ T6661] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.868409][ T6661] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.903995][ T6665] netlink: 'syz.3.182': attribute type 8 has an invalid length. [ 59.914798][ T1467] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 59.936196][ T1467] usb 7-1: device descriptor read/8, error -71 [ 60.032159][ T6667] erspan0: default FDB implementation only supports local addresses [ 60.044899][ T1467] usb usb7-port1: unable to enumerate USB device [ 60.124839][ T5948] Bluetooth: hci1: command 0x0419 tx timeout [ 60.124862][ T5956] Bluetooth: hci3: command 0x0419 tx timeout [ 60.127073][ T5959] Bluetooth: hci2: command 0x0419 tx timeout [ 60.326718][ T6687] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 60.401871][ T5959] Bluetooth: hci3: unexpected event for opcode 0x2042 [ 60.417075][ T10] libceph: connect (1)[c::]:6789 error -101 [ 60.419562][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 60.528281][ T57] usb 6-1: USB disconnect, device number 2 [ 60.676448][ T10] libceph: connect (1)[c::]:6789 error -101 [ 60.678657][ T10] libceph: mon0 (1)[c::]:6789 connect error [ 61.080765][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 61.080781][ T40] audit: type=1400 audit(1743893405.923:398): avc: denied { link } for pid=6696 comm="syz.1.192" name="#5" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.083901][ T6697] evm: overlay not supported [ 61.089433][ T40] audit: type=1400 audit(1743893405.923:399): avc: denied { rename } for pid=6696 comm="syz.1.192" name="#6" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 61.186259][ T1467] libceph: connect (1)[c::]:6789 error -101 [ 61.188041][ T1467] libceph: mon0 (1)[c::]:6789 connect error [ 61.235791][ T6691] ceph: No mds server is up or the cluster is laggy [ 61.282338][ T5959] Bluetooth: hci3: unexpected event for opcode 0x200b [ 61.304566][ T40] audit: type=1400 audit(1743893406.143:400): avc: denied { getopt } for pid=6706 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 61.306689][ T6707] ata3.00: invalid multi_count 1 ignored [ 61.473265][ T6726] aaaaaaaaa: renamed from lo [ 61.485777][ T5959] Bluetooth: hci4: command 0xfc11 tx timeout [ 61.486399][ T5961] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 61.515488][ T6728] netlink: 76 bytes leftover after parsing attributes in process `syz.2.204'. [ 61.551309][ T40] audit: type=1400 audit(1743893406.393:401): avc: denied { bind } for pid=6732 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.557217][ T40] audit: type=1400 audit(1743893406.393:402): avc: denied { listen } for pid=6732 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.557423][ T6733] netlink: 40 bytes leftover after parsing attributes in process `syz.0.206'. [ 61.562570][ T40] audit: type=1400 audit(1743893406.393:403): avc: denied { connect } for pid=6732 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.570810][ T40] audit: type=1400 audit(1743893406.403:404): avc: denied { accept } for pid=6732 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.577309][ T40] audit: type=1400 audit(1743893406.403:405): avc: denied { read } for pid=6732 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.583642][ T40] audit: type=1400 audit(1743893406.403:406): avc: denied { write } for pid=6732 comm="syz.0.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 61.599610][ T6735] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 61.631157][ T1140] Bluetooth: hci4: Frame reassembly failed (-84) [ 61.664041][ T40] audit: type=1400 audit(1743893406.503:407): avc: denied { name_bind } for pid=6743 comm="syz.2.209" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 61.694812][ T57] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.854768][ T57] usb 6-1: Using ep0 maxpacket: 32 [ 61.857662][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 61.860763][ T57] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 61.863657][ T57] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 61.866324][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.870804][ T57] usb 6-1: config 0 descriptor?? [ 62.079608][ T57] savu 0003:1E7D:2D5A.0004: hiddev0,hidraw1: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0 [ 62.133950][ T6762] overlay: Unknown parameter 'subj_role' [ 62.276852][ T10] usb 6-1: USB disconnect, device number 3 [ 63.049000][ T6794] netlink: 8 bytes leftover after parsing attributes in process `syz.2.223'. [ 63.054177][ T6794] netlink: 68 bytes leftover after parsing attributes in process `syz.2.223'. [ 63.103316][ T6797] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=6797 comm=syz.3.225 [ 63.183641][ T5959] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 63.227571][ T6814] netlink: 28 bytes leftover after parsing attributes in process `syz.3.232'. [ 63.232186][ T6814] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'. [ 63.238867][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.3.232'. [ 63.241332][ T6814] netlink: 24 bytes leftover after parsing attributes in process `syz.3.232'. [ 63.320373][ T6824] syzkaller0: entered promiscuous mode [ 63.321797][ T6824] syzkaller0: entered allmulticast mode [ 63.647168][ T5961] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 63.647190][ T5959] Bluetooth: hci4: command 0x1003 tx timeout [ 64.110540][ T6853] netlink: 'syz.3.241': attribute type 1 has an invalid length. [ 64.161789][ T6858] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.272001][ T6870] ip6gretap1: entered promiscuous mode [ 64.273637][ T6870] ip6gretap1: entered allmulticast mode [ 64.275596][ T6876] tty tty1: ldisc open failed (-12), clearing slot 0 [ 64.335296][ T6887] sp0: Synchronizing with TNC [ 64.337349][ T6887] [U] [ 64.542245][ T6911] xt_TPROXY: Can be used only with -p tcp or -p udp [ 64.632679][ T6921] xt_hashlimit: max too large, truncated to 1048576 [ 64.659285][ T6924] program syz.0.261 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.784813][ T65] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 64.795959][ T6937] __nla_validate_parse: 1 callbacks suppressed [ 64.795969][ T6937] netlink: 24 bytes leftover after parsing attributes in process `syz.0.262'. [ 64.935049][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 64.938704][ T65] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.941636][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.944432][ T65] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 64.947380][ T65] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 64.951389][ T65] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 64.955057][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.168124][ T65] usb 6-1: GET_CAPABILITIES returned 0 [ 65.169740][ T65] usbtmc 6-1:16.0: can't read capabilities [ 65.197532][ T65] usb 6-1: USB disconnect, device number 4 [ 65.472693][ T6943] overlayfs: failed to clone upperpath [ 65.524966][ T65] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 65.658815][ T6952] tipc: Enabling of bearer rejected, failed to enable media [ 65.661161][ T6953] tipc: Enabling of bearer rejected, failed to enable media [ 65.686151][ T6955] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1040 sclass=netlink_route_socket pid=6955 comm=syz.3.269 [ 65.686388][ T5961] Bluetooth: hci1: unexpected event for opcode 0x1407 [ 65.694909][ T65] usb 6-1: Using ep0 maxpacket: 8 [ 65.698510][ T65] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 65.700795][ T65] usb 6-1: config 0 has no interface number 0 [ 65.702589][ T65] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 65.706494][ T65] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 65.709745][ T65] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 65.712828][ T65] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 65.715783][ T65] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 65.719600][ T65] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 65.722070][ T65] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.729063][ T65] usb 6-1: config 0 descriptor?? [ 65.733561][ T65] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 65.739707][ T6961] netlink: 40 bytes leftover after parsing attributes in process `syz.2.273'. [ 65.766307][ T6961] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=6961 comm=syz.2.273 [ 66.014397][ T6966] ldusb 6-1:0.55: Couldn't submit interrupt_in_urb -90 [ 66.215764][ T6968] warning: `syz.3.274' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 66.422706][ T6975] bpf: Bad value for 'mode' [ 66.519318][ T834] usb 6-1: USB disconnect, device number 5 [ 66.522456][ T834] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 66.543259][ T6990] tipc: Enabling of bearer rejected, failed to enable media [ 66.549461][ T6989] xt_TPROXY: Can be used only with -p tcp or -p udp [ 66.571938][ T6996] tmpfs: Bad value for 'mpol' [ 66.611366][ T9] IPVS: starting estimator thread 0... [ 66.655821][ T40] kauditd_printk_skb: 31 callbacks suppressed [ 66.655831][ T40] audit: type=1400 audit(1743893411.503:439): avc: denied { read } for pid=7005 comm="syz.2.288" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.663771][ T40] audit: type=1400 audit(1743893411.503:440): avc: denied { ioctl } for pid=7005 comm="syz.2.288" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x9205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 66.705030][ T7004] IPVS: using max 47 ests per chain, 112800 per kthread [ 66.728840][ T40] audit: type=1400 audit(1743893411.573:441): avc: denied { bind } for pid=7027 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.734864][ T40] audit: type=1400 audit(1743893411.583:442): avc: denied { getopt } for pid=7027 comm="syz.3.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 66.740494][ T7030] netlink: 100 bytes leftover after parsing attributes in process `syz.0.295'. [ 66.864143][ T40] audit: type=1400 audit(1743893411.703:443): avc: denied { setopt } for pid=7043 comm="syz.0.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 66.939220][ T65] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 66.952965][ T7059] /dev/nbd3: Can't lookup blockdev [ 66.957384][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.3.306'. [ 66.961561][ T7059] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.029046][ T7059] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.090821][ T7059] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.106563][ T65] usb 7-1: not running at top speed; connect to a high speed hub [ 67.109572][ T65] usb 7-1: config 1 interface 0 altsetting 133 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 67.113171][ T65] usb 7-1: config 1 interface 0 has no altsetting 0 [ 67.116856][ T65] usb 7-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.40 [ 67.119437][ T65] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.121712][ T65] usb 7-1: Product: syz [ 67.122974][ T65] usb 7-1: Manufacturer: С [ 67.124325][ T65] usb 7-1: SerialNumber: syz [ 67.178142][ T7059] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.253349][ T7059] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.260600][ T7059] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.267109][ T7059] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.273345][ T7059] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.345036][ T7021] IPVS: set_ctl: invalid protocol: 136 172.20.20.50:20003 [ 67.364460][ T40] audit: type=1400 audit(1743893412.203:444): avc: denied { setattr } for pid=7094 comm="syz.3.317" name="PACKET" dev="sockfs" ino=14438 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 67.371429][ T40] audit: type=1400 audit(1743893412.213:445): avc: denied { bind } for pid=7094 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 67.384770][ T40] audit: type=1400 audit(1743893412.213:446): avc: denied { name_bind } for pid=7094 comm="syz.3.317" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 67.390398][ T40] audit: type=1400 audit(1743893412.213:447): avc: denied { node_bind } for pid=7094 comm="syz.3.317" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 67.415864][ T40] audit: type=1400 audit(1743893412.263:448): avc: denied { getopt } for pid=7097 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 67.473082][ T7099] overlayfs: failed to clone upperpath [ 67.509195][ T65] usbhid 7-1:1.0: can't add hid device: -71 [ 67.510925][ T65] usbhid 7-1:1.0: probe with driver usbhid failed with error -71 [ 67.516204][ T65] usb 7-1: USB disconnect, device number 6 [ 67.582127][ T7111] xt_hashlimit: size too large, truncated to 1048576 [ 68.225576][ T7134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.328'. [ 69.312631][ T7183] syz.1.342 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 69.646780][ T7199] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 69.648900][ T7199] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 69.692343][ T7202] xt_hashlimit: size too large, truncated to 1048576 [ 69.815098][ T7201] overlayfs: missing 'lowerdir' [ 70.047866][ T7211] openvswitch: netlink: EtherType 0 is less than min 600 [ 70.327206][ T7223] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 70.537493][ T7241] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 70.539978][ T7241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.360'. [ 70.542418][ T7241] netlink: 'syz.2.360': attribute type 18 has an invalid length. [ 70.649147][ T7251] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.657398][ T7251] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 70.666731][ T7255] ip6gretap1: entered promiscuous mode [ 70.668336][ T7255] ip6gretap1: entered allmulticast mode [ 70.676452][ T7255] cgroup: subsys name conflicts with all [ 70.841008][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.367'. [ 70.924659][ T5961] Bluetooth: hci2: unexpected event for opcode 0x200d [ 71.010679][ T7287] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 71.098039][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.286982][ T7298] unknown channel width for channel at 909000KHz? [ 71.289371][ T5961] Bluetooth: hci1: unexpected event for opcode 0x0c03 [ 71.371681][ T7301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.376'. [ 71.872424][ T7310] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10510 sclass=netlink_route_socket pid=7310 comm=syz.1.379 [ 72.051360][ T40] kauditd_printk_skb: 26 callbacks suppressed [ 72.051370][ T40] audit: type=1400 audit(1743893416.893:475): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 72.085547][ T5961] Bluetooth: hci2: ACL packet too small [ 72.244157][ T7330] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7330 comm=syz.1.384 [ 72.248314][ T7330] netlink: 'syz.1.384': attribute type 58 has an invalid length. [ 72.250462][ T7330] netlink: 20 bytes leftover after parsing attributes in process `syz.1.384'. [ 72.308183][ T40] audit: type=1400 audit(1743893417.153:476): avc: denied { getopt } for pid=7331 comm="syz.2.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.473411][ T7343] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 72.552551][ T40] audit: type=1400 audit(1743893417.393:477): avc: denied { append } for pid=7349 comm="syz.1.392" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 72.797298][ T40] audit: type=1400 audit(1743893417.633:478): avc: denied { setopt } for pid=7388 comm="syz.2.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.873619][ T7398] xt_TPROXY: Can be used only with -p tcp or -p udp [ 73.058410][ T40] audit: type=1400 audit(1743893417.903:479): avc: denied { create } for pid=7420 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.062840][ T7421] batadv_slave_1: entered promiscuous mode [ 73.068397][ T7420] batadv_slave_1: left promiscuous mode [ 73.073471][ T40] audit: type=1400 audit(1743893417.903:480): avc: denied { setopt } for pid=7420 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.073752][ T7423] netlink: 16 bytes leftover after parsing attributes in process `syz.2.411'. [ 73.086696][ T40] audit: type=1400 audit(1743893417.913:481): avc: denied { bind } for pid=7420 comm="syz.0.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.095923][ T7425] ip6tnl1: entered promiscuous mode [ 73.097482][ T7425] ip6tnl1: entered allmulticast mode [ 73.099617][ T7425] team0: Device ip6tnl1 is of different type [ 73.114281][ T7427] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 73.131352][ T7427] overlayfs: workdir and upperdir must reside under the same mount [ 73.179858][ T7432] netlink: 12 bytes leftover after parsing attributes in process `syz.2.415'. [ 73.209825][ T7441] netlink: 'syz.1.416': attribute type 39 has an invalid length. [ 73.221457][ T7441] veth0_macvtap: left promiscuous mode [ 73.253121][ T40] audit: type=1400 audit(1743893418.093:482): avc: denied { shutdown } for pid=7442 comm="syz.0.417" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.322403][ T7456] block device autoloading is deprecated and will be removed. [ 73.514815][ T835] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 73.673341][ T7470] netlink: 20 bytes leftover after parsing attributes in process `syz.1.424'. [ 73.678120][ T835] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 73.681182][ T835] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 73.683736][ T835] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 73.686081][ T835] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.691087][ T7445] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 73.696494][ T835] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 73.896922][ T835] usb 5-1: USB disconnect, device number 4 [ 74.004773][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 74.161563][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 74.167866][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 74.170858][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 74.193467][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 74.199487][ T9] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 74.202018][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.204561][ T7479] veth1_to_bridge: left allmulticast mode [ 74.205543][ T9] usb 6-1: config 0 descriptor?? [ 74.207563][ T7479] netlink: 'syz.2.427': attribute type 7 has an invalid length. [ 74.209601][ T40] audit: type=1400 audit(1743893419.053:483): avc: denied { setopt } for pid=7478 comm="syz.2.427" lport=44995 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 74.335554][ T7492] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 74.340486][ T40] audit: type=1400 audit(1743893419.183:484): avc: denied { map } for pid=7491 comm="syz.2.431" path="socket:[18267]" dev="sockfs" ino=18267 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 74.614861][ T5987] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 74.635125][ T9] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 74.637103][ T9] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 74.639035][ T9] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 74.641643][ T9] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 74.643652][ T9] shield 0003:0955:7214.0005: unknown main item tag 0x0 [ 74.647410][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input10 [ 74.671816][ T9] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 74.676370][ T9] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.1-1/input0 [ 74.776331][ T5987] usb 7-1: Using ep0 maxpacket: 16 [ 74.779318][ T5987] usb 7-1: config 0 has an invalid interface number: 145 but max is 0 [ 74.781596][ T5987] usb 7-1: config 0 has no interface number 0 [ 74.785513][ T5987] usb 7-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 74.788060][ T5987] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 74.790282][ T5987] usb 7-1: Product: syz [ 74.791495][ T5987] usb 7-1: Manufacturer: syz [ 74.792865][ T5987] usb 7-1: SerialNumber: syz [ 74.805141][ T5987] usb 7-1: config 0 descriptor?? [ 74.808437][ T5987] hub 7-1:0.145: bad descriptor, ignoring hub [ 74.810176][ T5987] hub 7-1:0.145: probe with driver hub failed with error -5 [ 74.814020][ T5987] input: bcm5974 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.145/input/input11 [ 74.839070][ T7474] random: crng reseeded on system resumption [ 75.071121][ T7506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.075717][ T7506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.109499][ T7510] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in; [ 75.109499][ T7510] program syz.2.434 not setting count and/or reply_len properly [ 75.176061][ T5961] Bluetooth: hci0: command tx timeout [ 75.393072][ T7523] xt_l2tp: missing protocol rule (udp|l2tpip) [ 75.564574][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.571128][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.584926][ T7533] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(9) [ 75.587104][ T7533] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.592053][ T7533] vhci_hcd vhci_hcd.0: Device attached [ 75.596358][ T7533] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(11) [ 75.598224][ T7533] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 75.600380][ T7533] vhci_hcd vhci_hcd.0: Device attached [ 75.602820][ T7533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.607146][ T7533] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 75.608986][ T7533] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 75.611136][ T7533] vhci_hcd vhci_hcd.0: Device attached [ 75.613845][ T7533] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(18) [ 75.615726][ T7533] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 75.618028][ T7533] vhci_hcd vhci_hcd.0: Device attached [ 75.620087][ T7533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.622669][ T7533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.625418][ T7533] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 75.635442][ T7533] vhci_hcd vhci_hcd.0: port 0 already used [ 75.651294][ T7533] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.655703][ T7536] vhci_hcd: connection closed [ 75.656065][ T7540] vhci_hcd: connection closed [ 75.657727][ T7538] vhci_hcd: connection closed [ 75.658494][ T1139] vhci_hcd: stop threads [ 75.659171][ T7534] vhci_hcd: connection closed [ 75.661453][ T1139] vhci_hcd: release socket [ 75.665776][ T1139] vhci_hcd: disconnect device [ 75.668348][ T1139] vhci_hcd: stop threads [ 75.669587][ T1139] vhci_hcd: release socket [ 75.670853][ T1139] vhci_hcd: disconnect device [ 75.672236][ T1139] vhci_hcd: stop threads [ 75.673515][ T1139] vhci_hcd: release socket [ 75.674945][ T1139] vhci_hcd: disconnect device [ 75.676565][ T1139] vhci_hcd: stop threads [ 75.677821][ T1139] vhci_hcd: release socket [ 75.679257][ T1139] vhci_hcd: disconnect device [ 75.698022][ T6007] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 75.703939][ T6007] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 75.708981][ T6007] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 75.713169][ T6007] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 76.486132][ T7544] usb 6-1: USB disconnect, device number 6 [ 76.504661][ T7573] netlink: 100 bytes leftover after parsing attributes in process `syz.2.447'. [ 76.512829][ T7573] netlink: 100 bytes leftover after parsing attributes in process `syz.2.447'. [ 76.519206][ T7573] netlink: 20 bytes leftover after parsing attributes in process `syz.2.447'. [ 76.771752][ T7590] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=538 sclass=netlink_route_socket pid=7590 comm=syz.1.451 [ 77.562193][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 77.562207][ T40] audit: type=1400 audit(1743893422.403:497): avc: denied { ioctl } for pid=7610 comm="syz.2.456" path="socket:[19609]" dev="sockfs" ino=19609 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.562515][ T7611] netlink: 8 bytes leftover after parsing attributes in process `syz.2.456'. [ 77.575286][ T40] audit: type=1400 audit(1743893422.423:498): avc: denied { accept } for pid=7610 comm="syz.2.456" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 77.779217][ T7620] netlink: 'syz.1.459': attribute type 1 has an invalid length. [ 77.781561][ T7620] netlink: 228 bytes leftover after parsing attributes in process `syz.1.459'. [ 77.867640][ T7625] netlink: 16 bytes leftover after parsing attributes in process `syz.1.461'. [ 77.875801][ T7626] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 77.978711][ T40] audit: type=1400 audit(1743893422.813:499): avc: denied { kexec_image_load } for pid=7634 comm="syz.1.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 78.028497][ T40] audit: type=1400 audit(1743893422.873:500): avc: denied { create } for pid=7641 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.036459][ T40] audit: type=1400 audit(1743893422.883:501): avc: denied { getopt } for pid=7641 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 78.044377][ T40] audit: type=1400 audit(1743893422.883:502): avc: denied { nlmsg_write } for pid=7641 comm="syz.0.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 78.068045][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.0.468'. [ 78.071089][ T40] audit: type=1400 audit(1743893422.913:503): avc: denied { write } for pid=7644 comm="syz.0.468" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 78.199511][ T7650] Unsupported ieee802154 address type: 0 [ 78.209603][ T7650] netlink: 28 bytes leftover after parsing attributes in process `syz.0.470'. [ 78.214958][ T7650] netlink: 24 bytes leftover after parsing attributes in process `syz.0.470'. [ 78.215414][ T40] audit: type=1400 audit(1743893423.053:504): avc: denied { nlmsg_read } for pid=7649 comm="syz.0.470" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 78.293768][ T7656] netlink: 14601 bytes leftover after parsing attributes in process `syz.1.473'. [ 78.315490][ T9] usb 7-1: USB disconnect, device number 7 [ 78.338478][ T7659] xt_TPROXY: Can be used only with -p tcp or -p udp [ 78.389634][ T40] audit: type=1400 audit(1743893423.233:505): avc: denied { connect } for pid=7660 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 78.397033][ T40] audit: type=1400 audit(1743893423.243:506): avc: denied { create } for pid=7660 comm="syz.0.475" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 78.616692][ T7681] mac80211_hwsim hwsim4 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 79.060652][ T7741] xt_hashlimit: size too large, truncated to 1048576 [ 79.100726][ T7743] ./file1: Can't lookup blockdev [ 79.225723][ T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 79.335072][ T7757] pipefs: Unknown parameter '\AkIb `t 9 [Z1+‰tx};' [ 79.374821][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 79.378376][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 79.384027][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 79.387583][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 79.389796][ T9] usb 5-1: Product: syz [ 79.390901][ T9] usb 5-1: Manufacturer: syz [ 79.392116][ T9] usb 5-1: SerialNumber: syz [ 79.394546][ T9] usb 5-1: config 0 descriptor?? [ 79.396382][ T7735] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 79.521063][ T7770] input: syz0 as /devices/virtual/input/input12 [ 79.536578][ T7770] Invalid ELF header len 1 [ 79.548297][ T7768] hfs: unable to load iocharset "io#harset" [ 79.653990][ T9] usb 5-1: USB disconnect, device number 5 [ 79.925077][ T7544] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 80.055464][ T7544] usb 6-1: device descriptor read/64, error -71 [ 80.314874][ T7544] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 80.317081][ T9] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 80.455121][ T7544] usb 6-1: device descriptor read/64, error -71 [ 80.475009][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 80.510546][ T7830] cgroup: Unknown subsys name 'cpuset' [ 80.566521][ T7544] usb usb6-port1: attempt power cycle [ 80.615888][ T9] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 80.784897][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 80.787313][ T9] usb usb5-port1: attempt power cycle [ 80.906663][ T7544] usb 6-1: new low-speed USB device number 9 using dummy_hcd [ 80.935983][ T7544] usb 6-1: device descriptor read/8, error -71 [ 81.136125][ T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 81.156690][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 81.186599][ T7544] usb 6-1: new low-speed USB device number 10 using dummy_hcd [ 81.216556][ T7544] usb 6-1: device descriptor read/8, error -71 [ 81.284816][ T9] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 81.305692][ T9] usb 5-1: Invalid ep0 maxpacket: 32 [ 81.310528][ T9] usb usb5-port1: unable to enumerate USB device [ 81.330323][ T7544] usb usb6-port1: unable to enumerate USB device [ 81.335150][ T833] cfg80211: failed to load regulatory.db [ 81.449238][ T7885] netlink: 'syz.3.546': attribute type 10 has an invalid length. [ 81.456270][ T7885] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.506418][ T7889] tmpfs: Unknown parameter 'quota' [ 81.775826][ T7915] __nla_validate_parse: 12 callbacks suppressed [ 81.775838][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.2.556'. [ 82.534995][ T64] wlan0: Trigger new scan to find an IBSS to join [ 82.560358][ T5961] Bluetooth: hci3: unexpected event for opcode 0x0404 [ 82.676608][ T7921] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 82.717282][ T7943] netlink: 8 bytes leftover after parsing attributes in process `syz.3.565'. [ 82.720538][ T7943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.565'. [ 82.747447][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 82.747462][ T40] audit: type=1400 audit(1743893427.593:529): avc: denied { setopt } for pid=7946 comm="syz.2.568" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 82.748806][ T7947] netlink: 8 bytes leftover after parsing attributes in process `syz.1.567'. [ 82.815914][ T7961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.572'. [ 82.821966][ T7961] gretap0: entered promiscuous mode [ 82.827441][ T7961] gretap0: left promiscuous mode [ 83.010702][ T40] audit: type=1400 audit(1743893427.853:530): avc: denied { create } for pid=7976 comm="syz.2.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 83.011917][ T7976] delete_channel: no stack [ 83.021674][ T7979] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 83.027558][ T6207] Bluetooth: hci4: Frame reassembly failed (-84) [ 83.028757][ T7979] ptm ptm1: ldisc open failed (-12), clearing slot 1 [ 83.629393][ T7990] overlay: Unknown parameter 'appraise_type' [ 83.973745][ T8020] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 84.374835][ T40] audit: type=1800 audit(1743893429.213:531): pid=8044 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.598" name="/" dev="9p" ino=2 res=0 errno=0 [ 84.381447][ T40] audit: type=1400 audit(1743893429.223:532): avc: denied { map } for pid=8043 comm="syz.2.598" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.391685][ T40] audit: type=1400 audit(1743893429.223:533): avc: denied { execute } for pid=8043 comm="syz.2.598" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 84.398485][ T40] audit: type=1400 audit(1743893429.223:534): avc: denied { remount } for pid=8043 comm="syz.2.598" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 84.543347][ T8049] tmpfs: Invalid gid '0x00000000ffffffff' [ 84.547113][ T40] audit: type=1400 audit(1743893429.393:535): avc: denied { audit_write } for pid=8047 comm="syz.1.600" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 84.602472][ T8048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.600'. [ 84.606394][ T8048] IPv6: NLM_F_CREATE should be specified when creating new route [ 84.705631][ T8046] netlink: 100 bytes leftover after parsing attributes in process `syz.2.599'. [ 85.084922][ T5961] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.102512][ T5961] Bluetooth: hci3: unexpected cc 0x201c length: 1 < 9 [ 85.105940][ T5961] Bluetooth: hci3: unexpected event for opcode 0x201c [ 85.112742][ T8075] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 85.115701][ T8075] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 85.118880][ T8075] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 85.121787][ T8075] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 85.565041][ T6198] wlan0: Trigger new scan to find an IBSS to join [ 85.569905][ T40] audit: type=1400 audit(1743893430.413:536): avc: denied { getopt } for pid=8095 comm="syz.2.615" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 86.251435][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.620'. [ 86.264438][ T8113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.620'. [ 86.288463][ T835] IPVS: starting estimator thread 0... [ 86.296503][ T40] audit: type=1400 audit(1743893431.143:537): avc: denied { connect } for pid=8112 comm="syz.0.620" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 86.307325][ T40] audit: type=1400 audit(1743893431.153:538): avc: denied { bind } for pid=8115 comm="syz.1.621" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 86.374803][ T8114] IPVS: using max 47 ests per chain, 112800 per kthread [ 86.385964][ T8127] netlink: 'syz.0.623': attribute type 1 has an invalid length. [ 86.388114][ T8127] netlink: 228 bytes leftover after parsing attributes in process `syz.0.623'. [ 86.451840][ T8134] netlink: 'syz.0.625': attribute type 7 has an invalid length. [ 86.454943][ T8134] netlink: 'syz.0.625': attribute type 8 has an invalid length. [ 86.470767][ T6207] wlan0: Creating new IBSS network, BSSID 7e:8d:e7:26:ef:e0 [ 86.665139][ T8152] netlink: 'syz.2.630': attribute type 1 has an invalid length. [ 86.686385][ T8153] input: syz0 as /devices/virtual/input/input13 [ 86.824261][ T8163] netlink: 'syz.2.633': attribute type 1 has an invalid length. [ 86.828570][ T8163] __nla_validate_parse: 4 callbacks suppressed [ 86.828578][ T8163] netlink: 44 bytes leftover after parsing attributes in process `syz.2.633'. [ 86.877277][ T8170] netlink: 4 bytes leftover after parsing attributes in process `syz.3.636'. [ 86.880395][ T8170] netlink: 'syz.3.636': attribute type 12 has an invalid length. [ 86.882572][ T8170] netlink: 'syz.3.636': attribute type 29 has an invalid length. [ 86.884847][ T8170] netlink: 148 bytes leftover after parsing attributes in process `syz.3.636'. [ 86.887367][ T8170] netlink: 'syz.3.636': attribute type 1 has an invalid length. [ 86.889478][ T8170] netlink: 'syz.3.636': attribute type 2 has an invalid length. [ 86.892018][ T8170] netlink: 39 bytes leftover after parsing attributes in process `syz.3.636'. [ 87.304883][ T8213] /dev/nbd3: Can't lookup blockdev [ 87.328334][ T8212] delete_channel: no stack [ 87.383973][ T8218] netlink: 'syz.3.649': attribute type 6 has an invalid length. [ 87.494639][ T8233] netlink: 52 bytes leftover after parsing attributes in process `syz.3.654'. [ 87.497245][ T8233] netlink: 8 bytes leftover after parsing attributes in process `syz.3.654'. [ 87.499645][ T8233] tipc: MTU too low for tipc bearer [ 87.709450][ T8249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.659'. [ 87.798991][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 87.799004][ T40] audit: type=1400 audit(1743893432.643:543): avc: denied { mounton } for pid=8250 comm="syz.1.660" path="/162/file0" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 87.819862][ T8252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.823291][ T8252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.054876][ T5988] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 88.217217][ T5988] usb 6-1: config 8 has an invalid interface number: 174 but max is 3 [ 88.219590][ T5988] usb 6-1: config 8 has an invalid interface number: 44 but max is 3 [ 88.221956][ T5988] usb 6-1: config 8 has an invalid interface number: 47 but max is 3 [ 88.224241][ T5988] usb 6-1: config 8 has an invalid interface number: 254 but max is 3 [ 88.226560][ T5988] usb 6-1: config 8 has no interface number 0 [ 88.228315][ T5988] usb 6-1: config 8 has no interface number 1 [ 88.230169][ T5988] usb 6-1: config 8 has no interface number 2 [ 88.231961][ T5988] usb 6-1: config 8 has no interface number 3 [ 88.234308][ T5988] usb 6-1: config 8 interface 174 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 88.238362][ T5988] usb 6-1: config 8 interface 174 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 88.242471][ T5988] usb 6-1: config 8 interface 174 altsetting 7 bulk endpoint 0x5 has invalid maxpacket 1023 [ 88.246313][ T5988] usb 6-1: config 8 interface 174 altsetting 7 has an invalid descriptor for endpoint zero, skipping [ 88.250177][ T5988] usb 6-1: config 8 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 88.253155][ T5988] usb 6-1: config 8 interface 44 altsetting 0 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 88.256317][ T5988] usb 6-1: config 8 interface 44 altsetting 0 has a duplicate endpoint with address 0x5, skipping [ 88.259127][ T5988] usb 6-1: config 8 interface 44 altsetting 0 endpoint 0x9 has invalid maxpacket 512, setting to 64 [ 88.262087][ T5988] usb 6-1: config 8 interface 44 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 88.263188][ T8262] can0: slcan on ptm0. [ 88.265306][ T5988] usb 6-1: config 8 interface 44 altsetting 0 endpoint 0xE has invalid maxpacket 512, setting to 64 [ 88.269724][ T5988] usb 6-1: config 8 interface 44 altsetting 0 has a duplicate endpoint with address 0x6, skipping [ 88.273314][ T5988] usb 6-1: config 8 interface 44 altsetting 0 has a duplicate endpoint with address 0xB, skipping [ 88.277325][ T5988] usb 6-1: config 8 interface 44 altsetting 0 endpoint 0x2 has an invalid bInterval 127, changing to 10 [ 88.280694][ T5988] usb 6-1: config 8 interface 47 altsetting 4 has a duplicate endpoint with address 0x6, skipping [ 88.284182][ T5988] usb 6-1: config 8 interface 254 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 88.287308][ T5988] usb 6-1: config 8 interface 254 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 88.290460][ T5988] usb 6-1: config 8 interface 254 altsetting 8 has a duplicate endpoint with address 0x7, skipping [ 88.293517][ T5988] usb 6-1: config 8 interface 254 altsetting 8 has a duplicate endpoint with address 0x2, skipping [ 88.296672][ T5988] usb 6-1: config 8 interface 254 altsetting 8 endpoint 0xC has an invalid bInterval 134, changing to 7 [ 88.299758][ T5988] usb 6-1: config 8 interface 174 has no altsetting 0 [ 88.302234][ T5988] usb 6-1: config 8 interface 47 has no altsetting 0 [ 88.305062][ T5988] usb 6-1: config 8 interface 254 has no altsetting 0 [ 88.309348][ T5988] usb 6-1: New USB device found, idVendor=174f, idProduct=8a33, bcdDevice=5d.a2 [ 88.312717][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.315415][ T5988] usb 6-1: Product: щ [ 88.315503][ T8262] can0 (unregistered): slcan off ptm0. [ 88.316556][ T5988] usb 6-1: Manufacturer: й [ 88.319652][ T5988] usb 6-1: SerialNumber: ࠇ [ 88.323930][ T8251] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 88.372403][ T8267] netlink: 72 bytes leftover after parsing attributes in process `syz.2.663'. [ 88.390964][ T8269] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=8269 comm=syz.0.666 [ 88.396372][ T8271] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.665'. [ 88.447134][ T8275] netlink: 8 bytes leftover after parsing attributes in process `syz.3.668'. [ 88.481542][ T40] audit: type=1800 audit(1743893433.323:544): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.670" name="nullb0" dev="tmpfs" ino=392 res=0 errno=0 [ 88.544924][ T5988] usb 6-1: USB disconnect, device number 11 [ 88.590998][ T8291] pimreg: entered allmulticast mode [ 88.625790][ T8291] pimreg: left allmulticast mode [ 89.203816][ T40] audit: type=1400 audit(1743893434.043:545): avc: denied { getopt } for pid=8310 comm="syz.1.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 89.597373][ T8326] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.600436][ T8326] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.603179][ T8326] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.608373][ T8326] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 89.611184][ T8326] geneve2: entered promiscuous mode [ 89.612910][ T8326] geneve2: entered allmulticast mode [ 89.625007][ T40] audit: type=1400 audit(1743893434.463:546): avc: denied { connect } for pid=8325 comm="syz.3.686" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 89.695517][ T8342] IPVS: set_ctl: invalid protocol: 1 0.0.0.0:20002 [ 89.785475][ T40] audit: type=1400 audit(1743893434.633:547): avc: denied { create } for pid=8359 comm="syz.1.696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 89.790759][ T40] audit: type=1400 audit(1743893434.633:548): avc: denied { ioctl } for pid=8359 comm="syz.1.696" path="socket:[23742]" dev="sockfs" ino=23742 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 89.858069][ T40] audit: type=1400 audit(1743893434.703:549): avc: denied { ioctl } for pid=8361 comm="syz.1.697" path="socket:[21452]" dev="sockfs" ino=21452 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 89.906232][ T8370] mmap: syz.3.699 (8370): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 90.174822][ T40] audit: type=1400 audit(1743893435.013:550): avc: denied { module_request } for pid=8399 comm="syz.1.709" kmod="crypto-cryptd(__rfc4106-gcm-aesni)" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 90.427882][ T40] audit: type=1400 audit(1743893435.273:551): avc: denied { read append } for pid=8423 comm="syz.1.716" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 90.434530][ T40] audit: type=1400 audit(1743893435.273:552): avc: denied { open } for pid=8423 comm="syz.1.716" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 90.444857][ T5961] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 90.779572][ T8447] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 90.884347][ T8452] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.887738][ T8452] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.890132][ T8452] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.892563][ T8452] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 90.895810][ T8452] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 90.898215][ T8452] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 90.900673][ T8452] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 90.903181][ T8452] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 90.904789][ T835] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 90.907987][ T8452] geneve2: entered promiscuous mode [ 90.909615][ T8452] geneve2: entered allmulticast mode [ 90.987049][ T8458] syz.1.727: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 90.992170][ T8458] CPU: 2 UID: 0 PID: 8458 Comm: syz.1.727 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 90.992185][ T8458] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.992192][ T8458] Call Trace: [ 90.992196][ T8458] [ 90.992200][ T8458] dump_stack_lvl+0x16c/0x1f0 [ 90.992238][ T8458] warn_alloc+0x248/0x3a0 [ 90.992251][ T8458] ? __pfx_warn_alloc+0x10/0x10 [ 90.992266][ T8458] ? __get_vm_area_node+0x1b9/0x300 [ 90.992282][ T8458] ? __get_vm_area_node+0x1e5/0x300 [ 90.992299][ T8458] __vmalloc_node_range_noprof+0x1110/0x1540 [ 90.992320][ T8458] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 90.992337][ T8458] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.992358][ T8458] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 90.992370][ T8458] vmalloc_user_noprof+0x6b/0x90 [ 90.992386][ T8458] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 90.992398][ T8458] vb2_vmalloc_alloc+0x135/0x3f0 [ 90.992411][ T8458] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 90.992423][ T8458] __vb2_queue_alloc+0x8c6/0x1280 [ 90.992442][ T8458] vb2_core_reqbufs+0xa90/0xfe0 [ 90.992457][ T8458] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 90.992469][ T8458] ? __pfx___mutex_trylock_common+0x10/0x10 [ 90.992481][ T8458] ? __pfx___might_resched+0x10/0x10 [ 90.992498][ T8458] ? trace_contention_end+0xdd/0x130 [ 90.992509][ T8458] ? __mutex_lock+0x1ca/0xb90 [ 90.992526][ T8458] vb2_reqbufs+0x1a3/0x1f0 [ 90.992535][ T8458] ? __pfx_vb2_reqbufs+0x10/0x10 [ 90.992544][ T8458] ? __pfx_avc_has_extended_perms+0x10/0x10 [ 90.992563][ T8458] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 90.992576][ T8458] v4l2_m2m_ioctl_reqbufs+0xdc/0x1e0 [ 90.992589][ T8458] v4l_reqbufs+0x14f/0x1e0 [ 90.992603][ T8458] __video_do_ioctl+0xb3d/0xfc0 [ 90.992621][ T8458] ? __might_fault+0xe3/0x190 [ 90.992631][ T8458] ? __pfx___video_do_ioctl+0x10/0x10 [ 90.992652][ T8458] video_usercopy+0x4cd/0x1720 [ 90.992669][ T8458] ? __pfx___video_do_ioctl+0x10/0x10 [ 90.992684][ T8458] ? selinux_bprm_creds_for_exec+0xc60/0xc60 [ 90.992702][ T8458] ? __pfx_video_usercopy+0x10/0x10 [ 90.992727][ T8458] v4l2_ioctl+0x1ba/0x250 [ 90.992741][ T8458] ? __pfx_v4l2_ioctl+0x10/0x10 [ 90.992757][ T8458] __x64_sys_ioctl+0x190/0x200 [ 90.992773][ T8458] do_syscall_64+0xcd/0x260 [ 90.992789][ T8458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.992800][ T8458] RIP: 0033:0x7ffa5238d169 [ 90.992809][ T8458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.992819][ T8458] RSP: 002b:00007ffa531db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.992829][ T8458] RAX: ffffffffffffffda RBX: 00007ffa525a5fa0 RCX: 00007ffa5238d169 [ 90.992836][ T8458] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000004 [ 90.992842][ T8458] RBP: 00007ffa5240e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 90.992848][ T8458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.992853][ T8458] R13: 0000000000000000 R14: 00007ffa525a5fa0 R15: 00007ffd61190968 [ 90.992867][ T8458] [ 90.992870][ T8458] Mem-Info: [ 91.065261][ T835] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 91.066094][ T835] usb 5-1: config 0 has no interfaces? [ 91.067972][ T8458] active_anon:6965 inactive_anon:0 isolated_anon:0 [ 91.067972][ T8458] active_file:5198 inactive_file:49804 isolated_file:0 [ 91.067972][ T8458] unevictable:1799 dirty:33 writeback:0 [ 91.067972][ T8458] slab_reclaimable:11457 slab_unreclaimable:71864 [ 91.067972][ T8458] mapped:24080 shmem:2445 pagetables:1067 [ 91.067972][ T8458] sec_pagetables:300 bounce:0 [ 91.067972][ T8458] kernel_misc_reclaimable:0 [ 91.067972][ T8458] free:461298 free_pcp:4142 free_cma:0 [ 91.069513][ T835] usb 5-1: config 0 has no interfaces? [ 91.075889][ T8458] Node 0 active_anon:27860kB inactive_anon:0kB active_file:20792kB inactive_file:199144kB unevictable:3660kB isolated(anon):0kB isolated(file):0kB mapped:96320kB dirty:132kB writeback:0kB shmem:6244kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12816kB pagetables:4268kB sec_pagetables:1200kB all_unreclaimable? no Balloon:0kB [ 91.082144][ T835] usb 5-1: config 0 has no interfaces? [ 91.085745][ T8458] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:112kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 91.099782][ T835] usb 5-1: config 0 has no interfaces? [ 91.113341][ T8458] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.113388][ T8458] lowmem_reserve[]: 0 1236 1236 1236 1236 [ 91.113415][ T8458] Node 0 DMA32 free:250856kB boost:0kB min:27548kB low:34432kB high:41316kB reserved_highatomic:0KB active_anon:27860kB inactive_anon:0kB active_file:20792kB inactive_file:199144kB unevictable:3660kB writepending:132kB present:2080628kB managed:1265916kB mlocked:124kB bounce:0kB free_pcp:14160kB local_pcp:1068kB free_cma:0kB [ 91.121987][ T835] usb 5-1: config 0 has no interfaces? [ 91.123743][ T8458] lowmem_reserve[]: [ 91.127147][ T835] usb 5-1: config 0 has no interfaces? [ 91.133844][ T8458] 0 [ 91.135991][ T835] usb 5-1: config 0 has no interfaces? [ 91.142277][ T8458] 0 0 [ 91.144659][ T835] usb 5-1: config 0 has no interfaces? [ 91.153430][ T8458] 0 [ 91.157023][ T835] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 91.159293][ T8458] 0 [ 91.159504][ T835] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.160262][ T8458] [ 91.161694][ T835] usb 5-1: Product: syz [ 91.162398][ T8458] Node 1 [ 91.164928][ T835] usb 5-1: Manufacturer: syz [ 91.169360][ T8458] Normal free:1578468kB boost:0kB min:39692kB low:49612kB high:59532kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781964kB mlocked:0kB bounce:0kB free_pcp:2728kB local_pcp:2272kB free_cma:0kB [ 91.169506][ T835] usb 5-1: SerialNumber: syz [ 91.170793][ T8458] lowmem_reserve[]: [ 91.175681][ T835] usb 5-1: config 0 descriptor?? [ 91.182530][ T8458] 0 0 0 0 0 [ 91.188687][ T8458] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (UM) = 15360kB [ 91.193740][ T8458] Node 0 DMA32: 264*4kB (UME) 367*8kB (UME) 406*16kB (UME) 390*32kB (UME) 451*64kB (UME) 57*128kB (UME) 35*256kB (UME) 24*512kB (UM) 17*1024kB (UM) 11*2048kB (UME) 32*4096kB (UM) = 251384kB [ 91.201077][ T8458] Node 1 Normal: 7*4kB (UME) 9*8kB (UME) 30*16kB (UME) 145*32kB (UME) 48*64kB (UME) 21*128kB (UME) 5*256kB (UE) 5*512kB (UME) 3*1024kB (UE) 0*2048kB 381*4096kB (M) = 1578468kB [ 91.208126][ T8458] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.210762][ T8458] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.213289][ T8458] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.216241][ T8458] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.218680][ T8458] 57447 total pagecache pages [ 91.220020][ T8458] 0 pages in swap cache [ 91.221274][ T8458] Free swap = 124996kB [ 91.222384][ T8458] Total swap = 124996kB [ 91.223570][ T8458] 1048443 pages RAM [ 91.224618][ T8458] 0 pages HighMem/MovableOnly [ 91.226291][ T8458] 282633 pages reserved [ 91.227434][ T8458] 0 pages cma reserved [ 91.374946][ T8477] tipc: Enabled bearer , priority 0 [ 91.378048][ T8477] syzkaller0: entered promiscuous mode [ 91.380191][ T8477] syzkaller0: entered allmulticast mode [ 91.384257][ T8476] tipc: Resetting bearer [ 91.387994][ T1467] usb 5-1: USB disconnect, device number 10 [ 91.398794][ T8476] tipc: Disabling bearer [ 91.592929][ T8487] new mount options do not match the existing superblock, will be ignored [ 92.034780][ T1467] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 92.185241][ T1467] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 92.188813][ T1467] usb 5-1: config 0 has no interfaces? [ 92.192977][ T1467] usb 5-1: config 0 has no interfaces? [ 92.196795][ T1467] usb 5-1: config 0 has no interfaces? [ 92.199025][ T1467] usb 5-1: config 0 has no interfaces? [ 92.204166][ T1467] usb 5-1: config 0 has no interfaces? [ 92.207768][ T1467] usb 5-1: config 0 has no interfaces? [ 92.210420][ T1467] usb 5-1: config 0 has no interfaces? [ 92.213527][ T1467] usb 5-1: config 0 has no interfaces? [ 92.217944][ T1467] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 92.221219][ T1467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.224122][ T1467] usb 5-1: Product: syz [ 92.226742][ T1467] usb 5-1: Manufacturer: syz [ 92.228014][ T1467] usb 5-1: SerialNumber: syz [ 92.230773][ T1467] usb 5-1: config 0 descriptor?? [ 92.367779][ T8517] __nla_validate_parse: 7 callbacks suppressed [ 92.367793][ T8517] netlink: 60 bytes leftover after parsing attributes in process `syz.1.744'. [ 92.373207][ T8517] unsupported nlmsg_type 40 [ 92.739291][ T8551] netlink: 56 bytes leftover after parsing attributes in process `syz.1.757'. [ 92.810151][ T40] kauditd_printk_skb: 47 callbacks suppressed [ 92.810162][ T40] audit: type=1400 audit(92.713:600): avc: denied { mount } for pid=8560 comm="syz.1.761" name="/" dev="ramfs" ino=25612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.812741][ T8561] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 92.835035][ T40] audit: type=1400 audit(92.743:601): avc: denied { read } for pid=8560 comm="syz.1.761" lport=132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 92.851526][ T40] audit: type=1400 audit(92.753:602): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 92.871290][ T40] audit: type=1400 audit(92.773:603): avc: denied { map } for pid=8562 comm="syz.2.762" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 92.877676][ T40] audit: type=1400 audit(92.773:604): avc: denied { execute } for pid=8562 comm="syz.2.762" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 92.921028][ T8569] netlink: 20 bytes leftover after parsing attributes in process `syz.1.765'. [ 92.957367][ T40] audit: type=1400 audit(92.863:605): avc: denied { create } for pid=8571 comm="syz.2.766" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 92.962402][ T40] audit: type=1400 audit(92.863:606): avc: denied { associate } for pid=8571 comm="syz.2.766" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 92.968993][ T40] audit: type=1400 audit(92.873:607): avc: denied { bind } for pid=8573 comm="syz.1.767" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.033506][ T8577] dlm: Unknown command passed to DLM device : 255 [ 93.033506][ T8577] [ 93.037328][ T8577] netlink: 24 bytes leftover after parsing attributes in process `syz.1.768'. [ 93.066970][ T8582] i2c i2c-1: Invalid block write size 34 [ 93.147959][ T8588] Attempt to restore checkpoint with obsolete wellknown handles [ 93.150121][ T8583] tmpfs: Group quota block hardlimit too large. [ 93.216862][ T40] audit: type=1400 audit(93.123:608): avc: denied { bind } for pid=8595 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.222100][ T40] audit: type=1400 audit(93.123:609): avc: denied { write } for pid=8595 comm="syz.2.771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 93.249935][ T8596] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 93.357557][ T8604] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 93.417390][ T8610] validate_nla: 2 callbacks suppressed [ 93.417405][ T8610] netlink: 'syz.2.776': attribute type 4 has an invalid length. [ 93.581239][ T6204] Bluetooth: hci4: Frame reassembly failed (-84) [ 93.814882][ T1467] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 93.975358][ T8614] Bluetooth: hci4: Frame reassembly failed (-84) [ 93.980179][ T1467] usb 7-1: unable to get BOS descriptor or descriptor too short [ 93.985646][ T1467] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 93.987851][ T1467] usb 7-1: can't read configurations, error -71 [ 93.994099][ T8619] netlink: zone id is out of range [ 93.996888][ T8619] netlink: zone id is out of range [ 93.998678][ T8619] netlink: zone id is out of range [ 94.000388][ T8619] netlink: zone id is out of range [ 94.002153][ T8619] netlink: zone id is out of range [ 94.004033][ T8619] netlink: zone id is out of range [ 94.005523][ T8619] netlink: zone id is out of range [ 94.007131][ T833] usb 5-1: USB disconnect, device number 11 [ 94.007187][ T8619] netlink: zone id is out of range [ 94.045829][ T8623] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8623 comm=syz.0.781 [ 94.050458][ T8624] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8624 comm=syz.0.781 [ 94.102968][ T8626] hugetlbfs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 94.379441][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 94.674789][ T835] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 94.856104][ T835] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 94.858383][ T835] usb 6-1: config 0 has no interface number 0 [ 94.860160][ T835] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 94.863166][ T835] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 94.866169][ T835] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 94.869347][ T835] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 94.872347][ T835] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 94.875404][ T835] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 94.878934][ T835] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 94.881388][ T835] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.885308][ T835] usb 6-1: config 0 descriptor?? [ 94.887261][ T8659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.889277][ T8659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 94.893173][ T835] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 94.930077][ T8665] netlink: 14 bytes leftover after parsing attributes in process `syz.0.796'. [ 95.097181][ T833] usb 6-1: USB disconnect, device number 12 [ 95.097312][ C1] ldusb 6-1:0.55: usb_submit_urb failed (-19) [ 95.101841][ T833] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 95.221077][ T8670] veth1_to_batadv: entered promiscuous mode [ 95.223794][ T8670] macsec1: entered promiscuous mode [ 95.267983][ T8673] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=8673 comm=syz.0.799 [ 95.497725][ T8694] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 95.544809][ T833] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 95.572145][ T8697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 95.579532][ T8697] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 95.583200][ T8699] netlink: 24 bytes leftover after parsing attributes in process `syz.3.805'. [ 95.644626][ T8707] overlay: ./file0 is not a directory [ 95.645059][ T5961] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 95.690900][ T8713] NILFS (nbd0): device size too small [ 95.704773][ T833] usb 6-1: Using ep0 maxpacket: 8 [ 95.707576][ T833] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 95.709777][ T833] usb 6-1: config 0 has no interface number 0 [ 95.711493][ T833] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 95.714411][ T833] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 95.719291][ T833] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 95.722876][ T833] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 95.727921][ T833] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 95.731089][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.737108][ T833] usb 6-1: config 0 descriptor?? [ 95.741590][ T833] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 95.877682][ T8729] netlink: 108 bytes leftover after parsing attributes in process `syz.0.815'. [ 95.881471][ T8729] macvlan1: entered promiscuous mode [ 95.882982][ T8729] macvlan1: entered allmulticast mode [ 95.932124][ T8732] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8732 comm=syz.0.816 [ 96.208402][ T8738] bond1: entered promiscuous mode [ 96.210292][ T8738] bond1: entered allmulticast mode [ 96.212338][ T8738] 8021q: adding VLAN 0 to HW filter on device bond1 [ 96.718636][ T8767] overlayfs: failed to clone upperpath [ 96.835244][ T8777] xt_l2tp: invalid flags combination: c [ 96.980727][ T8804] veth0_to_bond: entered promiscuous mode [ 97.031865][ T5961] Bluetooth: hci1: unexpected event for opcode 0x202d [ 97.453251][ T835] usb 6-1: USB disconnect, device number 13 [ 97.465333][ T835] ldusb 6-1:0.55: LD USB Device #0 now disconnected [ 97.504817][ T57] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 97.550134][ T8835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.634994][ T57] usb 7-1: device descriptor read/64, error -71 [ 97.725667][ T8844] __nla_validate_parse: 2 callbacks suppressed [ 97.725678][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz.3.845'. [ 97.863080][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 97.863091][ T40] audit: type=1400 audit(97.763:629): avc: denied { shutdown } for pid=8851 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 97.864296][ T8852] SELinux: policydb magic number 0x7665642f does not match expected magic number 0xf97cff8c [ 97.865956][ T40] audit: type=1400 audit(97.763:630): avc: denied { load_policy } for pid=8851 comm="syz.0.848" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 97.872278][ T8852] SELinux: failed to load policy [ 97.884862][ T57] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 97.975959][ T40] audit: type=1400 audit(97.883:631): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 98.014903][ T57] usb 7-1: device descriptor read/64, error -71 [ 98.064637][ T5961] Bluetooth: hci2: Malformed LE Event: 0x02 [ 98.084231][ T8871] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 98.087692][ T8871] xt_CHECKSUM: unsupported CHECKSUM operation f4 [ 98.134864][ T57] usb usb7-port1: attempt power cycle [ 98.371930][ T8876] netlink: 'syz.0.854': attribute type 64 has an invalid length. [ 98.374277][ T8876] netlink: 'syz.0.854': attribute type 4 has an invalid length. [ 98.377174][ T8876] netlink: 152 bytes leftover after parsing attributes in process `syz.0.854'. [ 98.474851][ T57] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 98.495288][ T57] usb 7-1: device descriptor read/8, error -71 [ 98.734860][ T57] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 98.758456][ T57] usb 7-1: device descriptor read/8, error -71 [ 98.866936][ T57] usb usb7-port1: unable to enumerate USB device [ 98.933384][ T40] audit: type=1400 audit(98.833:632): avc: denied { setattr } for pid=8882 comm="syz.3.858" name="SMC" dev="sockfs" ino=24926 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 99.226599][ T8873] net_ratelimit: 396 callbacks suppressed [ 99.226625][ T8873] Set syz1 is full, maxelem 65536 reached [ 99.449632][ T5961] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 99.454629][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.0.864'. [ 99.815394][ T8928] netlink: 76 bytes leftover after parsing attributes in process `syz.0.872'. [ 99.878278][ T40] audit: type=1400 audit(99.783:633): avc: denied { ioctl } for pid=8937 comm="syz.1.875" path="socket:[24388]" dev="sockfs" ino=24388 ioctlcmd=0x943b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 100.145063][ T8947] netlink: zone id is out of range [ 100.165037][ T833] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 100.337342][ T833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.340443][ T833] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 100.343093][ T833] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 100.345735][ T833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.355064][ T833] usb 6-1: config 0 descriptor?? [ 100.361831][ T833] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 100.364077][ T833] dvb-usb: bulk message failed: -22 (3/0) [ 100.378183][ T833] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 100.382337][ T833] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 100.384457][ T833] usb 6-1: media controller created [ 100.387296][ T833] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 100.397496][ T833] dvb-usb: bulk message failed: -22 (6/0) [ 100.399268][ T833] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 100.403454][ T833] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input17 [ 100.408876][ T833] dvb-usb: schedule remote query interval to 150 msecs. [ 100.411119][ T833] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 100.459064][ T8973] netlink: 57 bytes leftover after parsing attributes in process `syz.2.885'. [ 100.465158][ T8973] IPv6: sit1: Disabled Multicast RS [ 100.467165][ T8973] sit1: entered allmulticast mode [ 100.561962][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 100.564644][ T8943] netlink: 8 bytes leftover after parsing attributes in process `syz.1.877'. [ 100.569665][ T833] dvb-usb: bulk message failed: -22 (1/0) [ 100.571474][ T833] dvb-usb: error while querying for an remote control event. [ 100.574494][ T8943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'. [ 100.574826][ T8944] netlink: 24 bytes leftover after parsing attributes in process `syz.1.877'. [ 100.601389][ T57] usb 6-1: USB disconnect, device number 14 [ 100.622652][ T57] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 100.716272][ T40] audit: type=1400 audit(100.623:634): avc: denied { write } for pid=8982 comm="syz.0.888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 100.816099][ T8993] netlink: 32 bytes leftover after parsing attributes in process `syz.2.890'. [ 100.858567][ T8986] 8021q: adding VLAN 0 to HW filter on device bond2 [ 100.861734][ T8986] bond0: (slave bond2): Enslaving as an active interface with an up link [ 101.127957][ T9001] program syz.1.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.132711][ T9002] program syz.1.892 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.184493][ T9005] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.187184][ T9005] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.189528][ T9005] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.191880][ T9005] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.195119][ T9005] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.197606][ T9005] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.200046][ T9005] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.202464][ T9005] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.205404][ T9005] geneve2: entered promiscuous mode [ 101.206897][ T9005] geneve2: entered allmulticast mode [ 101.214888][ T1467] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 101.217484][ T9006] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.220799][ T9006] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.223984][ T9006] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.226799][ T9006] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 101.230306][ T9006] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.233662][ T9006] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.237101][ T9006] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.240429][ T9006] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 101.243979][ T9006] geneve2: entered promiscuous mode [ 101.246127][ T9006] geneve2: entered allmulticast mode [ 101.323051][ T9008] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.356593][ T9011] netlink: 'syz.1.895': attribute type 1 has an invalid length. [ 101.367839][ T1467] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 101.370368][ T1467] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.372605][ T1467] usb 5-1: Product: syz [ 101.373787][ T1467] usb 5-1: Manufacturer: syz [ 101.375393][ T1467] usb 5-1: SerialNumber: syz [ 101.384913][ T1467] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 101.397263][ T40] audit: type=1400 audit(101.303:635): avc: denied { firmware_load } for pid=24 comm="kworker/2:0" path="/lib/firmware/ath9k_htc/htc_9271-1.4.0.fw" dev="sda1" ino=287 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 101.419508][ T24] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 101.769676][ T40] audit: type=1400 audit(101.673:636): avc: denied { validate_trans } for pid=9029 comm="syz.2.899" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 101.855860][ T5961] Bluetooth: hci1: unexpected event for opcode 0x2042 [ 102.066796][ T1467] usb 5-1: USB disconnect, device number 12 [ 102.613443][ T9055] tmpfs: Bad value for 'mpol' [ 102.684846][ T24] usb 5-1: Service connection timeout for: 256 [ 102.686562][ T24] ath9k_htc 5-1:1.0: ath9k_htc: Unable to initialize HTC services [ 102.689667][ T24] ath9k_htc: Failed to initialize the device [ 102.692374][ T1467] usb 5-1: ath9k_htc: USB layer deinitialized [ 102.999825][ T9076] __nla_validate_parse: 5 callbacks suppressed [ 102.999836][ T9076] netlink: 12 bytes leftover after parsing attributes in process `syz.2.913'. [ 103.278256][ T9081] sctp: [Deprecated]: syz.2.915 (pid 9081) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.278256][ T9081] Use struct sctp_sack_info instead [ 103.285085][ T40] audit: type=1400 audit(103.193:637): avc: denied { accept } for pid=9080 comm="syz.2.915" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 103.381300][ T9094] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 103.441939][ T9100] loop2: detected capacity change from 0 to 524287999 [ 103.486285][ T5961] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 103.488789][ T5961] Bluetooth: hci2: Injecting HCI hardware error event [ 103.495552][ T5959] Bluetooth: hci2: hardware error 0x00 [ 103.544264][ T9109] trusted_key: encrypted_key: keyword '[:]:/default' not recognized [ 103.659392][ T9114] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 103.661609][ T9114] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 103.664399][ T9114] vhci_hcd vhci_hcd.0: Device attached [ 103.666310][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 103.667524][ T9115] vhci_hcd: connection closed [ 103.669702][ T6189] vhci_hcd: stop threads [ 103.672322][ T6189] vhci_hcd: release socket [ 103.673489][ T6189] vhci_hcd: disconnect device [ 103.689575][ T9112] GUP no longer grows the stack in syz.0.925 (9112): 200000004000-20000000a000 (200000002000) [ 103.692725][ T9112] CPU: 0 UID: 0 PID: 9112 Comm: syz.0.925 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 103.692740][ T9112] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.692747][ T9112] Call Trace: [ 103.692751][ T9112] [ 103.692756][ T9112] dump_stack_lvl+0x16c/0x1f0 [ 103.692797][ T9112] gup_vma_lookup+0x1d2/0x220 [ 103.692815][ T9112] __get_user_pages+0x234/0x36f0 [ 103.692837][ T9112] ? __pfx___get_user_pages+0x10/0x10 [ 103.692859][ T9112] get_user_pages_remote+0x258/0xb20 [ 103.692877][ T9112] ? __pfx_mtree_load+0x10/0x10 [ 103.692892][ T9112] ? __pfx_get_user_pages_remote+0x10/0x10 [ 103.692913][ T9112] __access_remote_vm+0x233/0x9d0 [ 103.692930][ T9112] ? __pfx___access_remote_vm+0x10/0x10 [ 103.692947][ T9112] proc_pid_cmdline_read+0x4de/0x900 [ 103.692966][ T9112] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 103.692984][ T9112] ? rw_verify_area+0xcf/0x680 [ 103.692999][ T9112] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 103.693016][ T9112] vfs_readv+0x6bc/0x8a0 [ 103.693035][ T9112] ? __pfx_vfs_readv+0x10/0x10 [ 103.693056][ T9112] ? _copy_to_user+0x48/0xd0 [ 103.693093][ T9112] ? __fget_files+0x20e/0x3c0 [ 103.693114][ T9112] ? do_preadv+0x1af/0x270 [ 103.693129][ T9112] do_preadv+0x1af/0x270 [ 103.693145][ T9112] ? __pfx_do_preadv+0x10/0x10 [ 103.693159][ T9112] ? rcu_is_watching+0x12/0xc0 [ 103.693176][ T9112] do_syscall_64+0xcd/0x260 [ 103.693191][ T9112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.693203][ T9112] RIP: 0033:0x7f4ef678d169 [ 103.693212][ T9112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.693222][ T9112] RSP: 002b:00007f4ef45f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 103.693233][ T9112] RAX: ffffffffffffffda RBX: 00007f4ef69a5fa0 RCX: 00007f4ef678d169 [ 103.693239][ T9112] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000005 [ 103.693246][ T9112] RBP: 00007f4ef680e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.693252][ T9112] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000000 [ 103.693258][ T9112] R13: 0000000000000000 R14: 00007f4ef69a5fa0 R15: 00007ffcf7519998 [ 103.693271][ T9112] [ 103.756611][ T9112] sg_write: data in/out 489/14 bytes for SCSI command 0x0-- guessing data in; [ 103.756611][ T9112] program syz.0.925 not setting count and/or reply_len properly [ 103.874796][ T40] audit: type=1326 audit(103.773:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef678d169 code=0x7ffc0000 [ 103.880750][ T40] audit: type=1326 audit(103.773:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef678d169 code=0x7ffc0000 [ 103.895468][ T40] audit: type=1326 audit(103.783:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4ef678d169 code=0x7ffc0000 [ 103.902250][ T40] audit: type=1326 audit(103.783:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef678d169 code=0x7ffc0000 [ 103.909638][ T40] audit: type=1326 audit(103.783:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4ef678d169 code=0x7ffc0000 [ 103.915893][ T40] audit: type=1326 audit(103.783:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef678d169 code=0x7ffc0000 [ 103.921773][ T40] audit: type=1326 audit(103.783:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f4ef678d169 code=0x7ffc0000 [ 103.929450][ T40] audit: type=1326 audit(103.783:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000 [ 103.938343][ T40] audit: type=1326 audit(103.783:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9134 comm="syz.0.932" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ef678d169 code=0x7ffc0000 [ 103.965392][ T9143] netlink: 4 bytes leftover after parsing attributes in process `syz.1.936'. [ 103.967999][ T9143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5131 sclass=netlink_route_socket pid=9143 comm=syz.1.936 [ 104.013388][ T9156] netlink: 'syz.0.940': attribute type 10 has an invalid length. [ 104.016863][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.019059][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.025575][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.028035][ T9156] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.031054][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.033056][ T9156] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.037437][ T9156] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.163796][ T9163] kAFS: No cell specified [ 104.228227][ T9171] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=9171 comm=syz.3.941 [ 104.291358][ T9182] netlink: 12 bytes leftover after parsing attributes in process `syz.3.952'. [ 104.354913][ T1335] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 104.411666][ T9198] tmpfs: Bad value for 'mpol' [ 104.518016][ T1335] usb 6-1: Using ep0 maxpacket: 32 [ 104.520717][ T1335] usb 6-1: config 0 has an invalid interface number: 151 but max is 0 [ 104.523054][ T1335] usb 6-1: config 0 has no interface number 0 [ 104.523751][ T9206] tmpfs: Unknown parameter 'usrquota_block_hardlimiu' [ 104.527868][ T1335] usb 6-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 104.530450][ T1335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.532703][ T1335] usb 6-1: Product: syz [ 104.533876][ T1335] usb 6-1: Manufacturer: syz [ 104.535578][ T1335] usb 6-1: SerialNumber: syz [ 104.540059][ T1335] usb 6-1: config 0 descriptor?? [ 104.641695][ T9212] gfs2: gfs2 mount does not exist [ 104.946883][ T9161] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 104.950205][ T9161] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 104.955458][ T9161] tmpfs: Group quota block hardlimit too large. [ 104.974556][ T1335] usb 6-1: USB disconnect, device number 15 [ 105.147132][ T6117] udevd[6117]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 105.351983][ T9237] netlink: 52 bytes leftover after parsing attributes in process `syz.0.971'. [ 105.404906][ T5961] Bluetooth: hci3: command 0x0419 tx timeout [ 105.538650][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.3.974'. [ 105.574934][ T5959] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 105.638006][ T9256] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4) [ 105.639789][ T9256] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 105.642100][ T9256] vhci_hcd vhci_hcd.0: Device attached [ 105.644269][ T9257] vhci_hcd: connection closed [ 105.645911][ T6207] vhci_hcd: stop threads [ 105.648445][ T6207] vhci_hcd: release socket [ 105.649645][ T6207] vhci_hcd: disconnect device [ 105.744834][ T9280] futex_wake_op: syz.2.984 tries to shift op by -1; fix this program [ 105.929492][ T9295] netfs: Couldn't get user pages (rc=-14) [ 106.084420][ T9299] netlink: 'syz.2.992': attribute type 2 has an invalid length. [ 106.087783][ T9299] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 106.090222][ T9299] netlink: 'syz.2.992': attribute type 1 has an invalid length. [ 106.179685][ T9309] netlink: 44 bytes leftover after parsing attributes in process `syz.1.994'. [ 106.182335][ T9309] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9309 comm=syz.1.994 [ 106.260294][ T9319] netlink: 172 bytes leftover after parsing attributes in process `syz.3.998'. [ 106.358274][ T9331] pim6reg: entered allmulticast mode [ 106.548809][ T9351] netlink: 'syz.1.1009': attribute type 4 has an invalid length. [ 106.551003][ T9351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1009'. [ 106.554049][ T9351] NCSI netlink: No device for ifindex 6906736 [ 106.564838][ T6017] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 106.575599][ T9351] netlink: 'syz.1.1009': attribute type 1 has an invalid length. [ 106.577774][ T9351] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1009'. [ 106.734893][ T6017] usb 7-1: Using ep0 maxpacket: 8 [ 106.737654][ T6017] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 106.739923][ T6017] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 106.742726][ T6017] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 106.745642][ T6017] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 106.748524][ T6017] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 106.754786][ T6017] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 106.758968][ T6017] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.761702][ T6017] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.763159][ T9360] tmpfs: Bad value for 'mpol' [ 106.766840][ T6017] usbtmc 7-1:16.0: probe with driver usbtmc failed with error -22 [ 106.971160][ T6017] usb 7-1: USB disconnect, device number 15 [ 107.378852][ T9376] team0 (unregistering): Port device team_slave_0 removed [ 107.385946][ T9376] team0 (unregistering): Port device team_slave_1 removed [ 107.471271][ T9382] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58480 sclass=netlink_route_socket pid=9382 comm=syz.3.1021 [ 107.814682][ T9412] overlayfs: failed to clone upperpath [ 107.915946][ T9425] overlayfs: failed to clone upperpath [ 108.294388][ T9441] netlink: 'syz.1.1036': attribute type 10 has an invalid length. [ 108.298532][ T9441] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 108.332418][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 108.332430][ T40] audit: type=1400 audit(108.233:663): avc: denied { map } for pid=9440 comm="syz.1.1036" path="socket:[27807]" dev="sockfs" ino=27807 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 108.444277][ T9451] input: syz0 as /devices/virtual/input/input21 [ 108.450881][ T40] audit: type=1400 audit(108.353:664): avc: denied { remount } for pid=9450 comm="syz.1.1038" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 108.694940][ T24] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 108.845952][ T24] usb 6-1: Using ep0 maxpacket: 32 [ 108.851466][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 108.856983][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 108.860754][ T24] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 108.869179][ T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 108.872733][ T24] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 108.876539][ T24] usb 6-1: Product: syz [ 108.878369][ T24] usb 6-1: Manufacturer: syz [ 108.880224][ T24] usb 6-1: SerialNumber: syz [ 108.889466][ T24] input: appletouch as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:1.0/input/input22 [ 108.995725][ T40] audit: type=1400 audit(108.903:665): avc: denied { watch } for pid=9461 comm="syz.3.1042" path="/266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 109.007386][ T40] audit: type=1400 audit(108.903:666): avc: denied { watch_sb } for pid=9461 comm="syz.3.1042" path="/266/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 109.091835][ T5988] usb 6-1: USB disconnect, device number 16 [ 109.100972][ T5988] appletouch 6-1:1.0: input: appletouch disconnected [ 109.129588][ T9475] fuse: Unknown parameter 'f' [ 109.177429][ T9477] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1015 sclass=netlink_route_socket pid=9477 comm=syz.3.1048 [ 109.272237][ T40] audit: type=1326 audit(109.173:667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235758d169 code=0x7ffc0000 [ 109.279906][ T40] audit: type=1326 audit(109.173:668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235758d169 code=0x7ffc0000 [ 109.286078][ T40] audit: type=1326 audit(109.173:669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f235758d169 code=0x7ffc0000 [ 109.292378][ T40] audit: type=1326 audit(109.173:670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235758d169 code=0x7ffc0000 [ 109.298645][ T40] audit: type=1326 audit(109.173:671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f235758d169 code=0x7ffc0000 [ 109.304694][ T40] audit: type=1326 audit(109.173:672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9482 comm="syz.3.1050" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f235758d169 code=0x7ffc0000 [ 109.352566][ T9500] __nla_validate_parse: 5 callbacks suppressed [ 109.352576][ T9500] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1054'. [ 109.357917][ T9500] netlink: 'syz.3.1054': attribute type 10 has an invalid length. [ 109.360334][ T9500] netlink: 'syz.3.1054': attribute type 10 has an invalid length. [ 109.424885][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1057'. [ 109.466566][ T9530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1062'. [ 109.573765][ T9552] trusted_key: encrypted_key: master key parameter '' is invalid [ 109.664513][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 109.667294][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1076'. [ 109.739793][ T9581] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1078'. [ 109.805006][ T9582] overlayfs: conflicting options: userxattr,metacopy=on [ 109.954044][ T9596] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1082'. [ 110.894775][ T833] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 111.077402][ T833] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 111.080728][ T833] usb 6-1: can't read configurations, error -22 [ 111.224767][ T833] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 111.240676][ T9637] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1096'. [ 111.386615][ T833] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 111.388943][ T833] usb 6-1: can't read configurations, error -22 [ 111.390942][ T833] usb usb6-port1: attempt power cycle [ 111.507253][ T9664] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1099'. [ 111.645505][ T9689] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 111.649727][ T9689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1101'. [ 111.734804][ T833] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 111.758040][ T833] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 111.760411][ T833] usb 6-1: can't read configurations, error -22 [ 111.904790][ T833] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 111.927997][ T833] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 111.930296][ T833] usb 6-1: can't read configurations, error -22 [ 111.932316][ T833] usb usb6-port1: unable to enumerate USB device [ 112.074777][ T833] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 112.265817][ T833] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 112.268141][ T833] usb 6-1: can't read configurations, error -22 [ 112.404801][ T833] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 112.557101][ T833] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 112.560274][ T833] usb 6-1: can't read configurations, error -22 [ 112.563118][ T833] usb usb6-port1: attempt power cycle [ 112.904817][ T833] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 112.934386][ T833] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 112.937036][ T833] usb 6-1: can't read configurations, error -22 [ 112.958276][ T9725] netdevsim netdevsim0: loading /lib/firmware// failed with error -22 [ 112.960700][ T9725] netdevsim netdevsim0: Direct firmware load for / failed with error -22 [ 112.965061][ T9725] netdevsim netdevsim0: Falling back to sysfs fallback for: / [ 113.064858][ T833] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 113.086781][ T833] usb 6-1: config index 0 descriptor too short (expected 9, got 0) [ 113.089065][ T833] usb 6-1: can't read configurations, error -22 [ 113.091025][ T833] usb usb6-port1: unable to enumerate USB device [ 113.276497][ T9732] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 113.281504][ T9718] Set syz1 is full, maxelem 65536 reached [ 113.413120][ T5959] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 113.449884][ T9753] tipc: Cannot configure node identity twice [ 113.554675][ T9758] Debayer A: ================= START STATUS ================= [ 113.557349][ T9758] Debayer A: Debayer Mean Window Size: 3 [ 113.559067][ T9758] Debayer A: ================== END STATUS ================== [ 113.768429][ T9776] tmpfs: Unknown parameter 'nM8rX:' [ 113.861895][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 113.861905][ T40] audit: type=1400 audit(113.763:685): avc: denied { setopt } for pid=9788 comm="syz.0.1135" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 113.898237][ T40] audit: type=1400 audit(113.803:686): avc: denied { ioctl } for pid=9795 comm="syz.1.1137" path="socket:[28341]" dev="sockfs" ino=28341 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 113.919596][ T5959] Bluetooth: hci1: Unexpected advertising set terminated event [ 113.953450][ T40] audit: type=1400 audit(113.853:687): avc: denied { bind } for pid=9802 comm="syz.1.1140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 113.996205][ T9807] Context (ID=0x1) not attached to queue pair (handle=0x0:0x2) [ 114.174816][ T1467] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 114.261069][ T40] audit: type=1400 audit(114.163:688): avc: denied { checkpoint_restore } for pid=9832 comm="syz.0.1149" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 114.281387][ T40] audit: type=1400 audit(114.183:689): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 114.325821][ T1467] usb 7-1: Using ep0 maxpacket: 32 [ 114.328922][ T1467] usb 7-1: config 0 has an invalid interface number: 151 but max is 0 [ 114.331252][ T1467] usb 7-1: config 0 has no interface number 0 [ 114.335622][ T1467] usb 7-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 114.343346][ T1467] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.347170][ T1467] usb 7-1: Product: syz [ 114.348438][ T1467] usb 7-1: Manufacturer: syz [ 114.349784][ T1467] usb 7-1: SerialNumber: syz [ 114.352460][ T1467] usb 7-1: config 0 descriptor?? [ 114.394434][ T9853] __nla_validate_parse: 7 callbacks suppressed [ 114.394444][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1155'. [ 114.435036][ T40] audit: type=1400 audit(114.333:690): avc: denied { getopt } for pid=9857 comm="syz.0.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 114.759083][ T9799] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.764458][ T9799] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.797773][ T9877] wg2: entered promiscuous mode [ 114.799430][ T9877] wg2: entered allmulticast mode [ 114.949724][ T1467] usb 7-1: USB disconnect, device number 16 [ 115.085091][ T1335] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 115.115661][ T6117] udevd[6117]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 115.235064][ T1335] usb 5-1: Using ep0 maxpacket: 32 [ 115.237870][ T1335] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 115.240490][ T1335] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.244031][ T1335] usb 5-1: config 0 descriptor?? [ 115.248355][ T1335] as10x_usb: device has been detected [ 115.250194][ T1335] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 115.259914][ T1335] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 115.270195][ T1335] as10x_usb: error during firmware upload part1 [ 115.272292][ T1335] Registered device nBox DVB-T Dongle [ 115.538836][ T833] usb 5-1: USB disconnect, device number 13 [ 115.556558][ T833] Unregistered device nBox DVB-T Dongle [ 115.557262][ T833] as10x_usb: device has been disconnected [ 115.596821][ T5959] Bluetooth: hci1: unexpected event for opcode 0x0c47 [ 115.642557][ T40] audit: type=1400 audit(115.543:691): avc: denied { write } for pid=9904 comm="syz.2.1174" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 115.649266][ T40] audit: type=1400 audit(115.543:692): avc: denied { write } for pid=9904 comm="syz.2.1174" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 115.667824][ T9907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1175'. [ 115.906272][ T9912] netlink: 'syz.1.1177': attribute type 39 has an invalid length. [ 116.305246][ T1335] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 116.455107][ T1335] usb 5-1: Using ep0 maxpacket: 32 [ 116.463173][ T1335] usb 5-1: config 1 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 116.467621][ T1335] usb 5-1: config 1 interface 0 has no altsetting 0 [ 116.471366][ T1335] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.40 [ 116.473975][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.476860][ T1335] usb 5-1: Product: င [ 116.478061][ T1335] usb 5-1: Manufacturer: 房ꫮ࡬גּ뙪贏꾑从薧젋花펱‭䖒噉씮耵⎞宽⺤蟑繓ᆴ䇢꽪涊ޙ㚆囎Ⱦ鏃讶ₜ킄锘튇쬷㲌䏄ﻯጿҩ㩹縉쳀彆楲먎跗汎殟ᯛ墅肕댺ⴲ桰候⼴误റ✷㑮纄亍ꢼԞ硎⡹辷渚脘ⶶ罸㞊隕ឋ䟅鈍ి╁⼃옝씗载໫핝 [ 116.489080][ T1335] usb 5-1: SerialNumber: ᰱ⩊뎺㒋㌐홏흀좦潕牨ש튲湥蹜녭簭∾磸;볲茑窧踈櫑ᷝ䶷鉭䃜偕묘ヅ좦꒿۶໬ᷕ㏎顂坄겏મ릾듐\ꖖꋼぇ鏴凃㌐䷽旨䍏⍥탐ᆝ༣嫻잺લ揘퐁 [ 116.504775][ T833] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 116.507164][ T9946] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1186'. [ 116.547067][ T9643] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 116.559968][ T9949] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 116.621715][ T9954] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 116.657337][ T833] usb 6-1: config 1 interface 0 altsetting 253 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 116.661200][ T833] usb 6-1: config 1 interface 0 has no altsetting 0 [ 116.665267][ T833] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 116.667836][ T833] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.670069][ T833] usb 6-1: Product: syz [ 116.671298][ T833] usb 6-1: Manufacturer: syz [ 116.672634][ T833] usb 6-1: SerialNumber: syz [ 116.676691][ T9923] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 116.886142][ T833] usb 6-1: USB disconnect, device number 25 [ 116.915362][ T1335] usbhid 5-1:1.0: can't add hid device: -71 [ 116.917097][ T1335] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 116.925406][ T1335] usb 5-1: USB disconnect, device number 14 [ 117.458353][ T9961] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1191'. [ 117.462136][ T9961] fuse: Bad value for 'user_id' [ 117.463568][ T9961] fuse: Bad value for 'user_id' [ 117.612081][ T40] audit: type=1400 audit(117.513:693): avc: denied { append } for pid=9994 comm="syz.1.1202" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 117.765099][ T5959] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 117.803484][T10029] @: renamed from bond_slave_0 [ 117.810375][T10026] program syz.0.1210 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 117.849837][T10033] netlink: 'syz.0.1212': attribute type 13 has an invalid length. [ 117.892227][T10033] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.894333][T10033] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.939024][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.943057][T10042] 9p: Unknown access argument 18446744073709551615: -34 [ 117.946182][T10033] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.990961][T10033] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.993430][T10033] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.996153][T10033] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.998620][T10033] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.334812][ T7544] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 118.506386][ T7544] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 118.509475][ T7544] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 118.512012][ T7544] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.516412][ T7544] usb 5-1: config 0 descriptor?? [ 118.722629][ T7544] usbhid 5-1:0.0: can't add hid device: -71 [ 118.724401][ T7544] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 118.729235][ T7544] usb 5-1: USB disconnect, device number 15 [ 118.831539][T10060] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1219'. [ 119.155159][ T24] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 119.314868][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 119.318270][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 119.322572][ T24] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40 [ 119.326553][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.331017][ T24] usb 5-1: config 0 descriptor?? [ 119.335028][ T24] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 119.339075][ T24] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 119.556030][ C2] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 119.646233][ T5959] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 119.649440][ T5959] Bluetooth: hci1: Injecting HCI hardware error event [ 119.657306][ T5961] Bluetooth: hci1: hardware error 0x00 [ 119.848672][T10080] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1223'. [ 119.888638][ C2] ldusb 5-1:0.0: Ring buffer overflow, 8 bytes dropped [ 119.901770][T10088] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1225'. [ 119.953538][T10091] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 119.961646][ T40] audit: type=1326 audit(119.863:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10093 comm="syz.2.1227" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f485ed8d169 code=0x0 [ 119.990691][ T40] audit: type=1400 audit(119.893:695): avc: denied { mount } for pid=10095 comm="syz.1.1228" name="/" dev="hugetlbfs" ino=30460 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 120.000767][ T40] audit: type=1400 audit(119.903:696): avc: denied { unmount } for pid=5945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 120.046301][T10104] serio: Serial port ptm0 [ 120.121462][ T40] audit: type=1400 audit(120.023:697): avc: denied { ioctl } for pid=10116 comm="syz.1.1233" path="socket:[31971]" dev="sockfs" ino=31971 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 120.146199][ T40] audit: type=1400 audit(120.053:698): avc: denied { watch_sb } for pid=10118 comm="syz.1.1234" path="/324" dev="tmpfs" ino=1752 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 120.193861][T10122] fuse: Invalid rootmode [ 120.276961][ T833] hid-generic 00EC:0003:0000.0006: unknown main item tag 0x0 [ 120.279069][ T833] hid-generic 00EC:0003:0000.0006: unknown main item tag 0x0 [ 120.297002][ T833] hid-generic 00EC:0003:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz1 [ 120.417412][T10136] /dev/sr0: Can't open blockdev [ 120.907414][T10154] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1242'. [ 121.001558][ T40] audit: type=1400 audit(120.903:699): avc: denied { ioctl } for pid=10163 comm="syz.2.1246" path="/dev/btrfs-control" dev="devtmpfs" ino=1337 ioctlcmd=0x89f0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 121.010647][ T40] audit: type=1400 audit(120.913:700): avc: denied { read } for pid=10163 comm="syz.2.1246" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.021370][ T40] audit: type=1400 audit(120.913:701): avc: denied { ioctl } for pid=10163 comm="syz.2.1246" path="socket:[30561]" dev="sockfs" ino=30561 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 121.053315][ T40] audit: type=1400 audit(120.953:702): avc: denied { create } for pid=10169 comm="syz.2.1247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 121.059284][T10170] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=10170 comm=syz.2.1247 [ 121.099288][ T24] usb 5-1: USB disconnect, device number 16 [ 121.102238][ T24] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 121.157045][ T1335] hid (null): report_id 1113988454 is invalid [ 121.159021][ T1335] hid (null): unknown global tag 0xc [ 121.161209][ T1335] hid (null): unknown global tag 0xc [ 121.163861][ T1335] hid-generic 0002:0001:0005.0007: unknown main item tag 0x7 [ 121.166860][ T1335] hid-generic 0002:0001:0005.0007: collection stack underflow [ 121.169005][ T1335] hid-generic 0002:0001:0005.0007: item 0 4 0 12 parsing failed [ 121.171821][ T1335] hid-generic 0002:0001:0005.0007: probe with driver hid-generic failed with error -22 [ 121.217657][ T40] audit: type=1326 audit(121.123:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10184 comm="syz.1.1252" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffa5238d169 code=0x0 [ 121.240411][T10196] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1256'. [ 121.273750][T10206] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1258'. [ 121.278844][ C2] ata1: illegal qc_active transition (00000000->01000000) [ 121.307998][T10212] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1259'. [ 121.386450][T10222] hfs: can't find a HFS filesystem on dev sr0 [ 121.607948][ T1109] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 121.610890][ T1109] ata1.00: configured for UDMA/100 [ 121.734961][ T5961] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 121.831613][T10242] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1268'. [ 121.887574][T10249] netlink: 825 bytes leftover after parsing attributes in process `syz.2.1270'. [ 121.890125][T10249] netlink: 130144 bytes leftover after parsing attributes in process `syz.2.1270'. [ 121.893408][T10249] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1270'. [ 122.106975][T10257] 9pnet_fd: p9_fd_create_unix (10257): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 122.229066][T10269] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 122.229618][T10265] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.782297][T10250] [ 122.783049][T10250] ====================================================== [ 122.784996][T10250] WARNING: possible circular locking dependency detected [ 122.787477][T10250] 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 Not tainted [ 122.791168][T10250] ------------------------------------------------------ [ 122.793929][T10250] syz.2.1271/10250 is trying to acquire lock: [ 122.796106][T10250] ffff888056740dd8 (sk_lock-AF_SMC){+.+.}-{0:0}, at: smc_shutdown+0x65/0x7f0 [ 122.799122][T10250] [ 122.799122][T10250] but task is already holding lock: [ 122.801346][T10250] ffff8880440b8870 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x16f/0x280 [ 122.804591][T10250] [ 122.804591][T10250] which lock already depends on the new lock. [ 122.804591][T10250] [ 122.807546][T10250] [ 122.807546][T10250] the existing dependency chain (in reverse order) is: [ 122.810022][T10250] [ 122.810022][T10250] -> #6 (&nsock->tx_lock){+.+.}-{4:4}: [ 122.812193][T10250] __mutex_lock+0x199/0xb90 [ 122.813688][T10250] sock_shutdown+0x16f/0x280 [ 122.815224][T10250] nbd_config_put+0x1e6/0x750 [ 122.816758][T10250] nbd_release+0xb7/0x190 [ 122.818152][T10250] blkdev_put_whole+0xad/0xf0 [ 122.819648][T10250] bdev_release+0x47e/0x6d0 [ 122.821062][T10250] blkdev_release+0x15/0x20 [ 122.822493][T10250] __fput+0x3ff/0xb70 [ 122.823810][T10250] task_work_run+0x14d/0x240 [ 122.825248][T10250] syscall_exit_to_user_mode+0x27b/0x2a0 [ 122.827001][T10250] do_syscall_64+0xda/0x260 [ 122.828429][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.830229][T10250] [ 122.830229][T10250] -> #5 (&nbd->config_lock){+.+.}-{4:4}: [ 122.832425][T10250] __mutex_lock+0x199/0xb90 [ 122.833852][T10250] refcount_dec_and_mutex_lock+0x51/0xc0 [ 122.835640][T10250] nbd_config_put+0x31/0x750 [ 122.837100][T10250] nbd_release+0xb7/0x190 [ 122.838476][T10250] blkdev_put_whole+0xad/0xf0 [ 122.839966][T10250] bdev_release+0x47e/0x6d0 [ 122.841385][T10250] blkdev_release+0x15/0x20 [ 122.842925][T10250] __fput+0x3ff/0xb70 [ 122.844586][T10250] fput_close_sync+0x15e/0x1e0 [ 122.846480][T10250] __x64_sys_close+0x8b/0x120 [ 122.848368][T10250] do_syscall_64+0xcd/0x260 [ 122.850179][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.852463][T10250] [ 122.852463][T10250] -> #4 (&disk->open_mutex){+.+.}-{4:4}: [ 122.855273][T10250] __mutex_lock+0x199/0xb90 [ 122.857082][T10250] bdev_open+0x41a/0xe40 [ 122.858817][T10250] bdev_file_open_by_dev+0x17d/0x210 [ 122.860908][T10250] disk_scan_partitions+0x1ed/0x320 [ 122.862943][T10250] add_disk_fwnode+0x1060/0x13a0 [ 122.864893][T10250] pmem_attach_disk+0x981/0x1350 [ 122.866851][T10250] nd_pmem_probe+0x1a9/0x1f0 [ 122.868673][T10250] nvdimm_bus_probe+0x169/0x5d0 [ 122.870610][T10250] really_probe+0x23e/0xa90 [ 122.872418][T10250] __driver_probe_device+0x1de/0x440 [ 122.874514][T10250] driver_probe_device+0x4c/0x1b0 [ 122.876520][T10250] __driver_attach+0x283/0x580 [ 122.878407][T10250] bus_for_each_dev+0x13b/0x1d0 [ 122.880320][T10250] bus_add_driver+0x2e9/0x690 [ 122.882179][T10250] driver_register+0x15c/0x4b0 [ 122.884106][T10250] __nd_driver_register+0x103/0x1a0 [ 122.886129][T10250] do_one_initcall+0x120/0x6e0 [ 122.888058][T10250] kernel_init_freeable+0x5c2/0x900 [ 122.889898][T10250] kernel_init+0x1c/0x2b0 [ 122.891276][T10250] ret_from_fork+0x45/0x80 [ 122.892672][T10250] ret_from_fork_asm+0x1a/0x30 [ 122.894162][T10250] [ 122.894162][T10250] -> #3 (&nvdimm_namespace_key){+.+.}-{4:4}: [ 122.896414][T10250] __mutex_lock+0x199/0xb90 [ 122.898121][T10250] uevent_show+0x187/0x3b0 [ 122.899750][T10250] dev_attr_show+0x53/0xe0 [ 122.901143][T10250] sysfs_kf_seq_show+0x213/0x3e0 [ 122.902689][T10250] seq_read_iter+0x506/0x12c0 [ 122.904468][T10250] kernfs_fop_read_iter+0x40f/0x5a0 [ 122.906527][T10250] vfs_read+0x8c8/0xc70 [ 122.908245][T10250] ksys_read+0x12a/0x240 [ 122.909967][T10250] do_syscall_64+0xcd/0x260 [ 122.911772][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.914055][T10250] [ 122.914055][T10250] -> #2 (kn->active#5){++++}-{0:0}: [ 122.916702][T10250] kernfs_drain+0x4af/0x570 [ 122.918488][T10250] __kernfs_remove+0x271/0x890 [ 122.920402][T10250] kernfs_remove_by_name_ns+0x68/0x110 [ 122.922540][T10250] device_del+0x381/0x9f0 [ 122.924312][T10250] unregister_netdevice_many_notify+0x17eb/0x25a0 [ 122.926799][T10250] unregister_netdevice_queue+0x305/0x3f0 [ 122.929016][T10250] unregister_netdev+0x1f/0x60 [ 122.930942][T10250] slip_close+0x165/0x1c0 [ 122.932689][T10250] tty_ldisc_close+0x111/0x1a0 [ 122.934587][T10250] tty_ldisc_kill+0x8e/0x150 [ 122.936430][T10250] tty_ldisc_release+0x109/0x2e0 [ 122.938379][T10250] tty_release_struct+0x23/0xe0 [ 122.940316][T10250] tty_release+0xe2d/0x1430 [ 122.942121][T10250] __fput+0x3ff/0xb70 [ 122.943779][T10250] task_work_run+0x14d/0x240 [ 122.945606][T10250] syscall_exit_to_user_mode+0x27b/0x2a0 [ 122.947813][T10250] do_syscall_64+0xda/0x260 [ 122.949521][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.951302][T10250] [ 122.951302][T10250] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 122.953383][T10250] __mutex_lock+0x199/0xb90 [ 122.954808][T10250] smc_vlan_by_tcpsk+0x251/0x620 [ 122.956322][T10250] __smc_connect+0x44b/0x4880 [ 122.957775][T10250] smc_connect+0x2fc/0x760 [ 122.959178][T10250] __sys_connect_file+0x13e/0x1a0 [ 122.960713][T10250] __sys_connect+0x14d/0x170 [ 122.962421][T10250] __x64_sys_connect+0x72/0xb0 [ 122.964329][T10250] do_syscall_64+0xcd/0x260 [ 122.966126][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.968422][T10250] [ 122.968422][T10250] -> #0 (sk_lock-AF_SMC){+.+.}-{0:0}: [ 122.971116][T10250] __lock_acquire+0x1173/0x1ba0 [ 122.973024][T10250] lock_acquire+0x179/0x350 [ 122.974843][T10250] lock_sock_nested+0x41/0xf0 [ 122.976698][T10250] smc_shutdown+0x65/0x7f0 [ 122.978134][T10250] nbd_mark_nsock_dead+0xae/0x5d0 [ 122.979697][T10250] sock_shutdown+0x17c/0x280 [ 122.981126][T10250] nbd_config_put+0x1e6/0x750 [ 122.982610][T10250] nbd_release+0xb7/0x190 [ 122.983978][T10250] blkdev_put_whole+0xad/0xf0 [ 122.985419][T10250] bdev_release+0x47e/0x6d0 [ 122.986832][T10250] blkdev_release+0x15/0x20 [ 122.988224][T10250] __fput+0x3ff/0xb70 [ 122.989512][T10250] task_work_run+0x14d/0x240 [ 122.990954][T10250] syscall_exit_to_user_mode+0x27b/0x2a0 [ 122.992665][T10250] do_syscall_64+0xda/0x260 [ 122.994075][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.995867][T10250] [ 122.995867][T10250] other info that might help us debug this: [ 122.995867][T10250] [ 122.998672][T10250] Chain exists of: [ 122.998672][T10250] sk_lock-AF_SMC --> &nbd->config_lock --> &nsock->tx_lock [ 122.998672][T10250] [ 123.002269][T10250] Possible unsafe locking scenario: [ 123.002269][T10250] [ 123.004335][T10250] CPU0 CPU1 [ 123.005833][T10250] ---- ---- [ 123.007336][T10250] lock(&nsock->tx_lock); [ 123.008599][T10250] lock(&nbd->config_lock); [ 123.010590][T10250] lock(&nsock->tx_lock); [ 123.012512][T10250] lock(sk_lock-AF_SMC); [ 123.013732][T10250] [ 123.013732][T10250] *** DEADLOCK *** [ 123.013732][T10250] [ 123.015967][T10250] 3 locks held by syz.2.1271/10250: [ 123.017425][T10250] #0: ffff88802678b358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_release+0x15a/0x6d0 [ 123.020097][T10250] #1: ffff888107078998 (&nbd->config_lock){+.+.}-{4:4}, at: refcount_dec_and_mutex_lock+0x51/0xc0 [ 123.022925][T10250] #2: ffff8880440b8870 (&nsock->tx_lock){+.+.}-{4:4}, at: sock_shutdown+0x16f/0x280 [ 123.025554][T10250] [ 123.025554][T10250] stack backtrace: [ 123.027215][T10250] CPU: 2 UID: 0 PID: 10250 Comm: syz.2.1271 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) [ 123.027229][T10250] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 123.027236][T10250] Call Trace: [ 123.027240][T10250] [ 123.027245][T10250] dump_stack_lvl+0x116/0x1f0 [ 123.027261][T10250] print_circular_bug+0x275/0x350 [ 123.027278][T10250] check_noncircular+0x14c/0x170 [ 123.027296][T10250] __lock_acquire+0x1173/0x1ba0 [ 123.027307][T10250] lock_acquire+0x179/0x350 [ 123.027317][T10250] ? smc_shutdown+0x65/0x7f0 [ 123.027328][T10250] ? __pfx___mutex_lock+0x10/0x10 [ 123.027343][T10250] lock_sock_nested+0x41/0xf0 [ 123.027355][T10250] ? smc_shutdown+0x65/0x7f0 [ 123.027365][T10250] smc_shutdown+0x65/0x7f0 [ 123.027376][T10250] nbd_mark_nsock_dead+0xae/0x5d0 [ 123.027389][T10250] sock_shutdown+0x17c/0x280 [ 123.027405][T10250] nbd_config_put+0x1e6/0x750 [ 123.027418][T10250] ? find_held_lock+0x2b/0x80 [ 123.027430][T10250] ? blkdev_put_whole+0xc4/0xf0 [ 123.027440][T10250] nbd_release+0xb7/0x190 [ 123.027453][T10250] ? __pfx_nbd_release+0x10/0x10 [ 123.027466][T10250] blkdev_put_whole+0xad/0xf0 [ 123.027475][T10250] bdev_release+0x47e/0x6d0 [ 123.027486][T10250] ? __pfx_blkdev_release+0x10/0x10 [ 123.027496][T10250] blkdev_release+0x15/0x20 [ 123.027507][T10250] __fput+0x3ff/0xb70 [ 123.027521][T10250] task_work_run+0x14d/0x240 [ 123.027533][T10250] ? __pfx_task_work_run+0x10/0x10 [ 123.027545][T10250] ? __pfx___do_sys_close_range+0x10/0x10 [ 123.027556][T10250] ? rcu_is_watching+0x12/0xc0 [ 123.027570][T10250] syscall_exit_to_user_mode+0x27b/0x2a0 [ 123.027585][T10250] do_syscall_64+0xda/0x260 [ 123.027599][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.027609][T10250] RIP: 0033:0x7f485ed8d169 [ 123.027618][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.027628][T10250] RSP: 002b:00007fff9c86a748 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 123.027638][T10250] RAX: 0000000000000000 RBX: 00007f485efa7ba0 RCX: 00007f485ed8d169 [ 123.027644][T10250] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 123.027650][T10250] RBP: 00007f485efa7ba0 R08: 0000000000000154 R09: 000000149c86aa3f [ 123.027656][T10250] R10: 00007f485efa7ac0 R11: 0000000000000246 R12: 000000000001df3b [ 123.027662][T10250] R13: 00007f485efa6160 R14: ffffffffffffffff R15: 00007fff9c86a860 [ 123.027672][T10250] [ 124.946598][T10250] block nbd2: shutting down sockets VM DIAGNOSIS: 22:51:07 Registers: info registers vcpu 0 CPU#0 RAX=000000000011280c RBX=0000000000000000 RCX=ffffffff8b723439 RDX=ffffed100d4865be RSI=ffffffff8bf46500 RDI=ffffffff8191a841 RBP=fffffbfff1c12ee8 RSP=ffffffff8e007e10 R8 =0000000000000000 R9 =ffffed100d4865bd R10=ffff88806a432deb R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e097740 R14=ffffffff90865310 R15=0000000000000000 RIP=ffffffff8b721ccf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f4ef45d4f98 CR3=0000000054840000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000000000d8 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5257c488 00007ffa5257c480 00007ffa5257c478 00007ffa5257c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa530dd100 00007ffa5257c440 00007ffa5257c458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5257c498 00007ffa5257c490 00007ffa5257c488 00007ffa5257c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff9129b382 RDX=0000000000000008 RSI=0000000000000001 RDI=ffffc90003947040 RBP=ffffc90003947288 RSP=ffffc90003946fd0 R8 =0000000000000001 R9 =0000000000000000 R10=ffffc90003947040 R11=0000000000012a91 R12=ffffc90003947090 R13=ffffc90003947040 R14=ffffc900039472b8 R15=ffffc90003947074 RIP=ffffffff8169eedd RFL=00000287 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6ab3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00001ffffffffb80 CR3=000000000e182000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 6b20657479622d32 3320646e61707865 ZMM17=70d02ef3675b3ea9 88969b518b46a5f8 70d02ef3675b3ea9 88969b518b46a5f8 70d02ef3675b3ea9 88969b518b46a5f8 70d02ef3675b3ea9 88969b518b46a5f8 ZMM18=8aaad84fdc42e5dd 7f2c6ab2304a0986 8aaad84fdc42e5dd 7f2c6ab2304a0986 8aaad84fdc42e5dd 7f2c6ab2304a0986 8aaad84fdc42e5dd 7f2c6ab2304a0986 ZMM19=4e06000000000000 000000000000001e 4e06000000000000 000000000000001d 4e06000000000000 000000000000001c 4e06000000000000 000000000000001b ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=88969b5188969b51 88969b5188969b51 88969b5188969b51 88969b5188969b51 88969b5188969b51 88969b5188969b51 88969b5188969b51 88969b5188969b51 ZMM22=675b3ea9675b3ea9 675b3ea9675b3ea9 675b3ea9675b3ea9 675b3ea9675b3ea9 675b3ea9675b3ea9 675b3ea9675b3ea9 675b3ea9675b3ea9 675b3ea9675b3ea9 ZMM23=70d02ef370d02ef3 70d02ef370d02ef3 70d02ef370d02ef3 70d02ef370d02ef3 70d02ef370d02ef3 70d02ef370d02ef3 70d02ef370d02ef3 70d02ef370d02ef3 ZMM24=304a0986304a0986 304a0986304a0986 304a0986304a0986 304a0986304a0986 304a0986304a0986 304a0986304a0986 304a0986304a0986 304a0986304a0986 ZMM25=7f2c6ab27f2c6ab2 7f2c6ab27f2c6ab2 7f2c6ab27f2c6ab2 7f2c6ab27f2c6ab2 7f2c6ab27f2c6ab2 7f2c6ab27f2c6ab2 7f2c6ab27f2c6ab2 7f2c6ab27f2c6ab2 ZMM26=dc42e5dddc42e5dd dc42e5dddc42e5dd dc42e5dddc42e5dd dc42e5dddc42e5dd dc42e5dddc42e5dd dc42e5dddc42e5dd dc42e5dddc42e5dd dc42e5dddc42e5dd ZMM27=8aaad84f8aaad84f 8aaad84f8aaad84f 8aaad84f8aaad84f 8aaad84f8aaad84f 8aaad84f8aaad84f 8aaad84f8aaad84f 8aaad84f8aaad84f 8aaad84f8aaad84f ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4e0600004e060000 4e0600004e060000 4e0600004e060000 4e0600004e060000 4e0600004e060000 4e0600004e060000 4e0600004e060000 4e0600004e060000 info registers vcpu 2 CPU#2 RAX=000000000000000a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff854e0fc5 RDI=ffffffff9ae254e0 RBP=ffffffff9ae254a0 RSP=ffffc900060274f8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=732d302e34312e36 R12=0000000000000000 R13=000000000000000a R14=ffffffff9ae254a0 R15=ffffffff854e0f60 RIP=ffffffff854e0fef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555586f57500 ffffffff 00c00000 GS =0000 ffff8880d6bb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcf7518fc0 CR3=0000000056528000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=00000000000000d8 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5257c488 00007ffa5257c480 00007ffa5257c478 00007ffa5257c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa530dd100 00007ffa5257c440 00007ffa5257c458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5257c498 00007ffa5257c490 00007ffa5257c488 00007ffa5257c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000000 RBX=0000000000000001 RCX=ffffffff81af4cd1 RDX=ffff888026a80000 RSI=ffffffff81af4cbf RDI=0000000000000005 RBP=ffffc9000685f990 RSP=ffffc9000685f8c0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=ffff88806a63ada0 R12=1ffff92000d0bf1c R13=0000000000000000 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff81af4cc1 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6cb3000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055558bb8d808 CR3=0000000054840000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f282 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f28f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f289 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f29d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f323 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5240f401 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5257c488 00007ffa5257c480 00007ffa5257c478 00007ffa5257c450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa530dd100 00007ffa5257c440 00007ffa5257c458 0004000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffa5257c498 00007ffa5257c490 00007ffa5257c488 00007ffa5257c480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000