last executing test programs: 5.891496594s ago: executing program 1 (id=2136): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tcx={@void, @value}}, 0x40) ioprio_set$uid(0x3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0) fcntl$setlease(r0, 0x400, 0x0) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='./file1\x00') r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast1, 0xfffffbff}, 0x1c) connect$inet6(r2, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r3, &(0x7f0000000cc0)={0x10000004}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x68}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000002940)={0xffffffffffffffff}) setsockopt$TIPC_MCAST_REPLICAST(r4, 0x10f, 0x86) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000040601020000000000000000000000000500010007000000f3b625b1a977b4d5ddcbd99ac6bee45b778f184ef28902608e6b1037a2366f3222c6f5014f00aad061706b0af45139e2c7c8a7e664640dde71fdcefc498adf699fed5c7763c3f6f9e8e244c8323b4ea36646d49bb25eb3e54acae52941996846cd111b2c87d342d9f6087a38f3ec3b0e3bde7813a80e3ad5685de0b41446"], 0x1c}}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0/../file0/../file0\x00', 0x0, 0x2e, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x0) 5.391660063s ago: executing program 0 (id=2137): socket$inet6_udplite(0xa, 0x2, 0x88) inotify_init1(0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x56, &(0x7f0000000000)={@local, @local, @val, {@ipv6={0x86dd, @generic={0x0, 0x6, "76cd8a", 0x18, 0x0, 0x0, @rand_addr=' \x01\x00', @dev, {[@hopopts={0x0, 0x2, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x47}}, @pad1, @padn={0x1, 0x1, [0x0]}]}]}}}}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00'}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x0) unshare(0x20010c00) socket$inet6(0xa, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r1, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0x15, &(0x7f0000000340)={r3, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe66, 0x0, 0x0, 0x0, 0x60, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x22, 0x8, 0x0, 0x0}}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, 0x0, 0x0) r5 = syz_open_dev$vbi(0x0, 0x1, 0x2) ioctl$SIOCX25SSUBSCRIP(r3, 0x89e1, &(0x7f0000000580)={'caif0\x00', 0x4, 0x668}) ioctl$VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000200)={0x5, @win={{0x10}, 0x0, 0x0, 0x0, 0x0, 0x0}}) openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) keyctl$instantiate(0xc, 0x0, 0x0, 0x0, r6) 5.382904424s ago: executing program 3 (id=2138): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8202, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000340), 0x208e24b) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x8101, 0x0) ioctl$SNDCTL_MIDI_INFO(r2, 0x4004510f, &(0x7f00000000c0)={"d8582add900600"}) mmap(&(0x7f00009dc000/0x3000)=nil, 0x3000, 0x3000007, 0x10010, r2, 0x0) preadv(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c442, 0x0) close(r3) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') fcntl$dupfd(r0, 0x406, r2) chdir(&(0x7f0000000140)='./file1\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r4, 0xffffffff80000800, 0xee01, &(0x7f0000000340)={0x400000000000, 0x8, 0xd90, 0xffffffffffffffff, 0x9, 0x1, 0x0, 0x0, 0xe1}) r5 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1810c0, 0x0) fchown(r5, 0xee01, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x1000, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, {0xa, 0x3, 0x0, @empty}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x2]}}, 0x5c) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @mcast2}}, 0x5c) r6 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r6, 0x29, 0xd4, &(0x7f00000005c0)=0xb, 0x4) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef0001000000002c"], 0x66) 4.633587501s ago: executing program 0 (id=2140): openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0x602001, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) syz_open_dev$vcsu(0x0, 0x0, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) close(r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r3, 0x4040534e, 0x0) sched_setscheduler(0x0, 0x0, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={0x0, {{0xa, 0x0, 0x1000, @mcast1}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$bt_BT_DEFER_SETUP(r5, 0x112, 0x7, 0x0, &(0x7f0000000480)) openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) io_setup(0x6, &(0x7f0000001380)=0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') io_submit(r6, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r7, 0x0}]) bpf$MAP_CREATE(0x0, &(0x7f0000000900)=@base={0x12, 0xff, 0x4, 0xfff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 4.535035144s ago: executing program 3 (id=2141): socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x3361, &(0x7f0000004280)={0x0, 0x61ed, 0x80a, 0x0, 0x3e6}, &(0x7f0000004300), &(0x7f0000001300)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000052c0)={0x0, 0x0, 0x2}, 0x1) io_uring_setup(0x1d29, &(0x7f0000001340)={0x0, 0xeaff, 0x0, 0x101, 0x3ce}) ioperm(0x0, 0x7, 0xfffffff7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) acct(&(0x7f0000000040)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = dup2(r2, r2) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r4, &(0x7f0000000380)='net/hci\x00') recvfrom$unix(r3, &(0x7f00000002c0)=""/177, 0xb1, 0x2002, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 4.356428574s ago: executing program 1 (id=2142): socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="18020000000200000000000000000000850000002700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r3}, 0x10) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1204"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$TUNSETOFFLOAD(r4, 0x4010744d, 0x20000000) 4.160463264s ago: executing program 1 (id=2144): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x3) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) readv(0xffffffffffffffff, &(0x7f0000001500)=[{&(0x7f0000001380)=""/97, 0x61}], 0x1) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) read$char_usb(0xffffffffffffffff, &(0x7f0000001840)=""/4090, 0xffa) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049e9) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000a00d"]) mknodat$null(r6, &(0x7f00000002c0)='./file0\x00', 0x1000, 0x103) write$FUSE_NOTIFY_RETRIEVE(r6, &(0x7f0000000080)={0x30, 0x5, 0x0, {0x0, 0x6, 0x5, 0x82}}, 0x30) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/dev\x00') read$FUSE(r7, &(0x7f0000000140)={0x2020}, 0x2020) mount(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) 3.702513237s ago: executing program 3 (id=2145): write$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0), 0x12) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000900)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r4 = dup(r3) ioctl$KVM_SET_VCPU_EVENTS(r4, 0x4400ae8f, &(0x7f0000000040)) r5 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x9, 0x6, 0x2, 0x8, 0xf0, 0xffffffffffffffff, 0x8000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) chdir(&(0x7f0000000080)='./file0\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="240000000104010200000180000000000000000008000540000000000500010001"], 0x24}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000000104715c1da1c773f3830000000000000500010002000000060006400006"], 0x24}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.68599417s ago: executing program 0 (id=2146): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f00000000c0)={0x1, &(0x7f0000000300)=[{0x6}]}) ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, &(0x7f0000000280)={'veth0_macvtap\x00'}) r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000002300), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) r2 = socket$kcm(0x10, 0x3, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00') lseek(r3, 0x4, 0x0) getdents(r3, 0x0, 0x48) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xfffffdf2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90324fc60350005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f00000000c0)='system.posix_acl_access\x00', &(0x7f0000000480)=ANY=[@ANYBLOB="020000000100000200000000040028700783d481ea180000000000802000000000000000"], 0x24, 0x0) socket$key(0xf, 0x3, 0x2) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3800000001140102000000080001000000110008000100000000000800010001000000080001"], 0x38}}, 0x0) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write(r5, &(0x7f0000000340), 0x11000) io_setup(0x3ff, &(0x7f0000000500)=0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) io_submit(r6, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r5, &(0x7f0000000080)="4e8fc3", 0x3}]) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/31, 0x1000}) poll(&(0x7f0000000400)=[{r0, 0x100}, {r3, 0x400}, {r1, 0x4000}, {r0}, {r1, 0x1}, {r2, 0x400}], 0x6, 0xcb5) 3.630926569s ago: executing program 2 (id=2147): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getpeername(r2, &(0x7f0000000280)=@l2tp={0x2, 0x0, @remote}, &(0x7f0000000140)=0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB="1806000000000000000000000000000018", @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f00000004c0)={0x0, 0x3, 0x30, 0x4, 0x2}, &(0x7f0000000540)=0x18) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$netlink(0x10, 0x3, 0x4) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.state\x00', 0x0, 0x0) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) sendmsg$RDMA_NLDEV_CMD_SET(r4, &(0x7f0000000340)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000214010000000000000000000500540006000000080001000000000008004400", @ANYRES32, @ANYBLOB="0900020073797a30000000001626671d9c763a4eee203d44ba7f982965988a76b6376e1a4ed7f42cbb8ba43205f2"], 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x24008010) sendmsg$NFT_BATCH(r5, 0x0, 0x841) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @erspan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x7fff}]}}}]}, 0x3c}}, 0x0) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x2, 0x0, 0x0) 3.502964044s ago: executing program 2 (id=2148): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x8a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd60", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5007000090780000080a00000082485d00000000001312ca0c734891a263a2cc1df715fb24b0951e1020000000000000000000000000001312"], 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0) ioctl$UI_SET_KEYBIT(r2, 0x40045565, 0xf2) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x40000000015, 0x5, 0x0) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e07000220"], 0xa) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x40, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'geneve1\x00'}]}, 0x40}}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r7, 0x40082103, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000900)='Z', 0x1}, {0x0}], 0x2}, 0x0) recvmmsg(r3, &(0x7f0000005680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f00000002c0)=""/120, 0x78}], 0x2, 0x0, 0x85eb67db9da01d6f}}], 0x1, 0x0, 0x0) 3.383870531s ago: executing program 2 (id=2149): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000840), r0) r2 = socket$inet(0x2, 0x0, 0x0) connect$inet(r2, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) syz_io_uring_setup(0x1911, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r5, 0x0) mkdirat(r5, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r6 = socket(0x18, 0x0, 0x2) getsockname$packet(r6, 0x0, &(0x7f0000000040)) renameat2(r5, 0x0, r5, &(0x7f00000002c0)='./file0/file0\x00', 0x0) r7 = memfd_create(&(0x7f0000000140)='\x00\xac=\x9d\xf2\xdb\xe6\xbf\xb4\x91\x1b\x80\x93\x81v\xc5o\xa4k\x012>\xa1\x9c\x86x\x1c\xb3\xd9L\xccc\xecR\xd6\xe8\xf1Y\x12\"p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x8c!\xb9ew\xce\xdd8$m\x1d\x8b:\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00Y\x8f\xc6S[\xceS\xa1b \x1d\x14\xfc\x89\xad\xa2\x83V\x93\xb8\vT\x02bS\xcdqE$1\xdbW\x9b<\xc8~\"\x1c\xf5\xa2~\x1e\xd4\'\xf0\xe2\xa4I&RB\xf5\xa5\xc8\x85R\x10\x15\x8d.\xb1_\xedMe!\x9bm\xdd\xd4\xc0E<\"\x8c\a6D6\x13\x10\x02IEWax\xf6C\xa4\xf4#\xa8\xb9\x86\xd210!pcb\xaa\x18\xda\xbb3W\x8b\x9e\xa5Ed9\xdb\xdap\xe5\xf0\xb1\xe7\x14\x00_#\xe1*D1\x92\xb6\xa4\xa0\xe7\a}>nL\xd24\xb3\xb3[\xd3\x7f]4\\\xda\f\x91z\x1c=\x87\x0f\xd2\x89\xf0\x1c\xad\xcf\xd5\x92\x9bc10ZK\x82\xe9\xddb5\xd8\x9e\x8eAO\xbe\xa7,\xa0RG\x96\xc9\x86x\xd1\x85\xee\xaa\xe3\xea\x02\xff\xa7\xf3\xe8\xd8\x11<\x17~r\xaf\x8cx}\xc0%\x06r\xe2', 0x7) fallocate(r7, 0x0, 0x0, 0x2000000c) symlinkat(&(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00') syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = getpid() process_vm_readv(r8, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x7, 0x4, 0x21, 0xc1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000001280), 0xb47, r9}, 0x38) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000000)=ANY=[@ANYBLOB="00bbdfd2934653bf5662c24d95a63e000000", @ANYRES16=r1, @ANYBLOB="010000000000000000002b000000"], 0x14}}, 0x0) 2.780372795s ago: executing program 3 (id=2150): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4102, &(0x7f0000001080)=0x1006) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000380)={0x1ff, 0x2, 0x2000, 0x2000, &(0x7f0000feb000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r4, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r6}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = getpid() process_vm_readv(r7, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r8, 0x800452d2, &(0x7f0000000100)) r9 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r9, 0x5412, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f0000000200)="650f09dc6a8166b81e018ee88fc978c7c966b822008ee8b8010000000f01d9f266f30f2295b97f0800000f32b9370200000f320f35", 0x35}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) process_mrelease(r1, 0x0) 2.564612342s ago: executing program 0 (id=2151): socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, 0x0) openat$vcsa(0xffffffffffffff9c, 0x0, 0x842, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xdc}}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) setsockopt$bt_BT_POWER(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(0xffffffffffffffff, 0x0, r1, 0x0, 0x10007, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000080)={'filter\x00'}, &(0x7f0000000100)=0x54) setsockopt$inet6_int(r2, 0x29, 0x42, 0x0, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000180)={0x38, 0x0, 0x8, 0x7, 0x6b, 0x2f, 0x1, 0x5, 0x6f8, 0x10000}, 0x0) recvmmsg(r2, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101201) ioctl$USBDEVFS_CLEAR_HALT(r3, 0x80045503, &(0x7f0000000340)={0x1, 0x1}) 2.497111831s ago: executing program 1 (id=2159): socket$nl_xfrm(0x10, 0x3, 0x6) getpid() r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x7, &(0x7f0000000240)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x5) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x0, 0x43) sendmsg(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000d00)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x0, 0x0, 0x0, 0x3}}, 0x118) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@dev}, {@in, 0x4d4, 0x32}, @in6=@mcast2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x1, 0x0, 0x0, @in6=@private1}}]}, 0x154}}, 0x0) 2.45409168s ago: executing program 2 (id=2152): openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x7) sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0xf, 0x3, 0x7, &(0x7f0000000340)) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x0, &(0x7f0000000000)='\a') r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000140)) r4 = io_uring_setup(0x497c, &(0x7f00000001c0)={0x0, 0xfffffffd}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x881, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x0, 0x6}, 'port0\x00', 0x0, 0x180449, 0x0, 0x2000000, 0x469d, 0x7, 0x0, 0x0, 0x2}) close_range(r4, 0xffffffffffffffff, 0x0) setuid(0x0) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x5}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) 2.093888988s ago: executing program 2 (id=2153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000240), 0x0, 0x0, 0x0) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x400c4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() r3 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x402000, 0x0) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0xfdef) process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000002, 0x10012, 0xffffffffffffffff, 0x0) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) ioctl$sock_bt_hci(r4, 0x800448d2, &(0x7f00000002c0)="5746852bb4148ce83ddaeea131138cd2") bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x48}, {0x80000006, 0x0, 0x0, 0x3}]}, 0x10) syz_emit_ethernet(0x46, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 1.598342478s ago: executing program 1 (id=2154): socket$nl_generic(0x10, 0x3, 0x10) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_io_uring_setup(0x3361, &(0x7f0000004280)={0x0, 0x61ed, 0x80a, 0x0, 0x3e6}, &(0x7f0000004300), &(0x7f0000001300)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r0, 0x17, &(0x7f00000052c0)={0x0, 0x0, 0x2}, 0x1) io_uring_setup(0x1d29, &(0x7f0000001340)={0x0, 0xeaff, 0x0, 0x101, 0x3ce}) ioperm(0x0, 0x7, 0xfffffff7) open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) fcntl$setsig(r1, 0xa, 0x21) fcntl$setlease(r1, 0x400, 0x0) acct(&(0x7f0000000040)='./file0\x00') close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = dup2(r2, r2) r4 = getpid() process_vm_readv(r4, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_open_procfs(r4, &(0x7f0000000380)='net/hci\x00') recvfrom$unix(r3, &(0x7f00000002c0)=""/177, 0xb1, 0x2002, &(0x7f0000000480)=@file={0x0, './file0\x00'}, 0x6e) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f0000000280)={0x4000001, 0x4}) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r5, 0xc02064b6, &(0x7f00000003c0)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r5, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, r7, 0x0, 0x40, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "b4bc323ef77d1f000071849800000000dfff00"}}) 1.342129069s ago: executing program 3 (id=2155): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) open(0x0, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff003, 0x81, 0x7f, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={0x0, 0x0, 0x20}, 0xc) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r2, &(0x7f0000000240)="0093ba7b3600", 0x6, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="180000002a000900000000000000000004b8fa2c82f5c6"], 0x18}, 0x1, 0x3000000}, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) socket$inet6(0xa, 0x3, 0x87) r4 = socket$key(0xf, 0x3, 0x2) recvmmsg(r4, &(0x7f0000000440), 0x6f5, 0x2000000022, &(0x7f0000000480)={0x77359400}) sendmsg$key(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r5 = syz_open_dev$dri(0x0, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) syz_open_dev$dri(&(0x7f00000008c0), 0x2, 0x66201) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0xffffffd6}) socket(0x11, 0x800000003, 0x0) 1.332188445s ago: executing program 0 (id=2156): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x4020801) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2000, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000040)='squashfs\x00', 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r2, 0x4b72, &(0x7f0000000100)={0x0, 0x0, 0xd, 0x1, 0x200, &(0x7f0000000cc0)="1ae19337aa151f36ae49bb3f8cb95c5bf840d4f1e55efaaf098d47a70eb36a7309000000000000000f4743f490c585108c1331c7749299a25a705f5096cb268cbc6070d680e1be250700000000000000472471ff550c0010000007f3c7b61abe4162256004ea8ca5e5b5f379c6eb3257eda08f7e6959090000004d13184d382747e035b4722525e00ade86b4c6d1e157c75d15c1f961ebc0a64d7f2a73f8979fcecacaa64f9b9069ebcc1d5b471edbc4f6c7f1b98ae74e909aa6f25b7fa77bf9cd4ed36d5c53dc519d11c3cc1c22a3b86cf3c645413f4afbcea0c99ded703699d2bb6a4a663b99b6069da5aaf64785a5887c31261d4b9e57ee07000000def6f255ca26108f11f02047d47f2d0fec30f7e92482f71496e184214a4e0c5fdc48b0af0c0478940016d8f0990a0e1090fd515380aae83c5eaeed338701574b64200a16ef2811fadcf1e0f49a514df529061e09ce45e3da03a03fe9b4a6bcfa7d04594e4f6d0714b5e14ea127ab37d64a5e0db630cd4f4a2e6c985a542ff20a9b2193f265f93a258a88dd6c9d6a926dd23d32425849c5d9210007660a617f22133b6cb5087f4c6057942aa18193172bd995fa70a1f949b196f2e2a3c175858575713be5ee3f7f4dcecc98123f9ded3afdebe13d79a7f7fcb2469ae0ac503111401612df7ee995f74fb97a63bf62d61f78c062f959119ab50c1f706a930121ebcd53ccb93d158186ed360750ca8e728150d988844b9a5cff46591ccaff416e5a8c25f9555da5ca6fdf75b86ea6171b046b856168f403b5253a5cc393430a09a4489a0895571e597ac8846f945ffb372a88d3a2b463dc961416c80c55773f917020751ed51cfd73c1e06fbadd156d56bedc117af95d242d6d07002ce34dccd6005e944afa92b22ec9a698469c6edc06caa2cfcd61912607d459b4c28ebea9745bcd4697d75c9601fd333d3cd797963a3c71b7cc5fdc756da8d97207936e5f53b53b732533c2722e03002293517966611602f297de6ff5408777b7a93c45cee3ee5c5601a4e94266b295ea7a86812a7ab8896ec5ea1b12643e1844b185734528399e62bceb8700cc6cd491e4a4430d0a3ba329a5a2fa170fd0b1cc4ba8cd35df2cd7344aa8a9f3432b96fb889c02f484f63520cc3466a3c2903d45f176931b2db18dba54991a9553cedb7f585786388d4042dbae1c95b769e3d4e036e8afea0a04c04f542b152ca1fd1f8efee60425c5a122fd1b90e98635284abd9f217d9e19cb2a64b354c9d79509cc47d7305114990148a7291cb0fe2d1c773a6664b66ae04aa62c534d072ae54c2ca0d5962cc58945d8924abfc4d5af922462507430d8f2c17479a6678b0b3700000000000000000000000600000000000000000000f80000000000000000000000000000000000000000005593e85f00"}) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) renameat2(0xffffffffffffffff, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r3, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r3, 0x0, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r4 = gettid() process_vm_writev(r4, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/217, 0xd9}], 0x1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) r5 = gettid() process_vm_writev(r5, &(0x7f0000000240)=[{&(0x7f00008f9f09)=""/247, 0xf7}, {&(0x7f0000000340)=""/121, 0x79}], 0x2, &(0x7f0000121000)=[{&(0x7f0000000500)=""/234, 0xea}], 0x1, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 977.242235ms ago: executing program 2 (id=2157): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r0, 0x2285, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) chdir(&(0x7f0000000400)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x4) r2 = fcntl$dupfd(r0, 0x0, r0) ioperm(0x0, 0x4, 0x2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, 0x3f7, 0x4, 0x70bd28, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1004}, 0x0) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'veth0_virt_wifi\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendfile(r3, r4, &(0x7f0000000100), 0x10001) write$sndseq(r2, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @quote}], 0x38) write$sndseq(r2, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0xfc, @time={0x1, 0x81}, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0xfffffff9, 0x1005}, {}, {}, @addr={0xa, 0xe}}, {0x9, 0x3f, 0x0, 0x0, @time={0x4, 0x2}, {0x10}, {}, @time}, {0x0, 0x0, 0x0, 0x10, @time={0xbf9e}, {}, {}, @queue={0xbe, {0x3, 0x8}}}, {0x0, 0x3, 0x0, 0xfe, @time, {0x0, 0x1f}, {}, @connect={{0x3}, {0x4, 0x3}}}], 0x8c) bind$bt_hci(r2, &(0x7f0000000140)={0x1f, 0x1, 0x3}, 0x6) ioctl$SG_GET_REQUEST_TABLE(r2, 0x2286, &(0x7f00000018c0)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000e8ffffff00000000000000008500000036000000850000000700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r5, 0x27, 0x0, 0x0, 0x0, 0x0, 0x8ff, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0xa6) 783.865936ms ago: executing program 0 (id=2158): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='GPL\x00', 0xfdfffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sched_setscheduler(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() setuid(0x0) mkdir(&(0x7f0000000600)='./file1\x00', 0x0) mount(&(0x7f0000000040)=@nullb, &(0x7f0000000a00)='./file1\x00', &(0x7f0000000000)='reiserfs\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000080), 0x200281) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3) 642.395479ms ago: executing program 1 (id=2160): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x3c, 0x39, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x05G'}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}, @nested={0x10, 0x5, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}]}]}, 0x3c}}, 0x24004804) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000002140)={0x2020}, 0xfffffffffffffea3) syz_fuse_handle_req(r1, &(0x7f0000008400)="92756f43b31ffe542788ef586b7c5a344424e3acac2590be6bbe37adface4a8f2e534ffe76a83a93f0b3680a72fddfde83f96d01982384e8d689219cb9669b14dbaa1b799f82ea1fc926126a4163618e16d4f94143a4e0f27c44fcef3920a0b3805ed4e78098d8689cc7791bd86648070718d238664332948d87866c8d2590fc0f017f9853abd9ed60b99f1aa6ae2dbd24ab6dbcebdb055246815ace147cc50fa3b2861148fcda374d5b203e51d72c45e4dde3e9ee9a47ffe458baf7bb49035135a8194aa1f0a83fa2abed56398f90daff679634619453f533f22583a6e0a4dc09e9de46684d5e0136e229510f3702cf3a4cd0065d3e5d3c419e38a80b070ca55010e082a9c510fd18cc0b26bb5e8e459e747befbc5c6b60ace80bf41417b7b78cf57e5b3984f0cdddc615c5e0000454d3f4a196fb6d18aa629cf0b0245f95ba958d86dc175616f8cd3ac473057dc3a5ff7107973326350107f4468e7ecd48d689b82c12d22ae5f1858302a1b4cfde8fd347a99ddcde40d1c49d9b5099fbccf09e782212be4b2ce36a2bc3c9ee794abffe72a5501e6c4f3f7f68b74761ffd6620609224a3bf11f655dadb5c8a5813b02fb46830e9ac6825f5d0e89910352eb3a58c0dd82d094f94dd2c85666f684a8f437bbd0e66b9f4d366117b67a054d212c4fbc287848cb0578391335d5d616b14d99a2e3df8e8a152d5de99bcefcaab5bb5cc71f3ddd66b379c104648e190e0b28a180d3aecc5423575d4ba7dbf31215c717da7b87dd454b6efcd36c91aaa631127f5bd88723d221752f102bc0c7ac6c5c7a1ad6747af40d01b6d39eab7b0e1292b44683c586386ad00acf60fb8f9bac551a6eb5bab7317b5d89f64db10bd9018dfa6d65d93862e851afbc30fd70fe5f0de322462045177231852ca80e4e78da4fea0c79ba354333026c8bc77d308a8d256a19ec45d2088c196691d3f9aac28ded36004a65ee1ce49ba9599ceee84534bb61d02d04a6732f1e27d72962f74b59f3522bf844c5022986d55934e48b8681b7f5b7532391448caeef00315d28320a46d8bd7813544e1e4bf994e14a519c2654ff20b42bdb69c262897e28eca528f0999840b00ed8256597d27cfc20d71d5f40d0bbca759f7594c6034aa1e16a84ed152fad0fdc1c303a7f61225712714f823afc5ea241d482d3585759623af8c97ca6a84a2033b3d7314ea0ef7ba9b288b362a294c92c8b9736829c16f61c5a1ee04aca965d71162292274595ea62c9c2918e8279c99f5d2830c617c58211fd7452330184b9428d5ec1d5cd75ddcc6de3326fdc70e891104b3b013c30ffccfaf3308d9671b01f6b080a930dac2052c6f39817a662121d90d40d6a1facfb50bec7d408030b6d0ae3e744f3bcc327c35dc43cf86b743db78ff2e593b19923235ed6467f299b08718fe1840c16a748935dff941150fb08b30573b37bf9af5c86cc8d9e229a832e4ef25ec91f71120f2b3e9062485976c280a2d172386029e2f2a4801197fca0a13514edacf5ddbac5a62e8bb13dd1572657a821a8739297f72e29239d1cdddf3e30cbe9af3141f2275ee4ae85d86ec888fe9a6751f252057e95b8beb055e276439581afee93cd44f1e92f70e5f725451d3ab662918ffbb1269509fbd511e95a00ec717f9d60d643864abd6ad1cc4dd7f933379a6078a86c2158db8076e7b660366fca7b1c46d09d2c8e67a6494bfb4c2c6750e76593895b5e2b2bc78093840c3c4a807826bc2750a96b4e1dd5b82b492bb2215518c92064d1763c37132604e52e73fac3f4511f791753aeecfbb19816e0da7a1bfbea9eeaa0f256eaedcb119a61f7d0ea0f5cd4969d45cb014800f2c888d5c2217cf0f69a7507779883b57352bb8883cc584891950d6e792537074f4fc4337aa19b9bf60e18edd939d289fb4a6b7aa6c66da20774e249ca4f779d3c910b1a9a8e4c38af6adecc87d5481d181fd66023ffff246f4e2556b218fe8110acebe20b1675f1de6f265b6d1d8514a53522396bf0e2f2b153c498e48b36d16f8b9bd56f45d7f5b9397d7f1339117a176d0bad0b68e800682416d3e18fe2197c7f8dc20600feb95cc6ba86ad47f113e159bd4389e30eab2874bd27eebc56020c4dab9973b13f3e82aa62a7e0a151d73de48cb811e32be63ffd303f5a6ea6f097ed763fbf36c430821e451146de79922348354ce285af0997bf3c66e6ef02942e24b8f1ccdd542f09cfe65c0da0094c0b5fd26bbc061538b41e5ed2cbb390ee29b10a4b7a696009e1b5b86c44c0a561a257c15415feaeb1433ea275ed6e4b228503fe71ee5942665164faaed6697112206be0fe7863aebd4bbe951d5dea1da294dba0793196385f4d5141c9d6c4b0fa22b2e200cfb70b52aca31655e71e5a576ccb8ccb5b1364748aa981edbb81a813b1aebc67be1f7619e7e197622d981280429f6ca5145c5b3b05e6bace9191e5c58fbf140f71f594cbfd4db0e9f6923f1758ff9474a61a720a5d4f09c622c3ce3f5d0d3a1d191111168108f41f12b16e9eaf3617c353715cd35260560cbfd0555d51ce5c40bbdb7c95ceaeadadb8902974de50b0863348183864f5ea682e678286a06a6f396af29a7c7fb33a3579e25835963612f3c0d4cf369d85959a0adeda94d35824050e6fba7f83f90867583f713d7783323c7010e94c9be331f860db395dbde6face5bfdb616fcefa9c6b01f6963daa840a31ff554a458c0c50cb5e09f91f54f63234589decaf45bbfbaef0dcbff4ae6e65ca26a530261c491ef8eb9a855a1d7463391c9b66be96cf24c3c321ee5a5bdc857f60b582683c6ae1e3775b62a9f19ff8fa51380ca8a2a3c6de79012f5727ba12025e7e6723a23a81e067ca6e54c7b38ff64880d235d21e7ee5258953dcbf9e2a962f006ca4ffe870859242c850cbae4222b3b72c4f86934379ba2ead1dcde906241b994d95c88355af5a9a30ace9c933a6942f341ad221dd825846a8fd44c03e2eaa9311c26e15a1bd7cbba961a22ef23d7ebba0e34cec5ef09b1ce72814a97e33bd29f3d9ec80a4f45d1d29486accf15c11f1a800bd84918e7626f678275d7c7acb02cc0e6e34bb766ba6b75c3ad14fca9352e09c3b69390c045cfc842ff9ade8ca693c07fadc7047a946e6e570c3afc5b501c964103397f5ddadc2d59a048348dd42f07cfe31bc9b5ae453f5086bb41bba4c8a3e518e30b0855184b053f923025dd72ce1bcbf41231978b34a8547c71d7313992165078903c61d312b0d9469413c9fd97ccdf0ea270fb6c47ec8861a1c8d909eeace761b5a06ba46e25785ff87f867777abb237c6c980687991f1ed0157d58492260c712cec34c1fc0962103955db4d5090b6e8409cf3c3c79d0e691cf4fbc0b2251a016dcd456969cd32e5429533bf0d6f8bda84c05f0e2040de8b53bfb8676eec4b76c3df6f46b1e43732035dda577e75f640777f6ae90fd2f1af42ba462dac732019c599bfef01acd6a0d4d1796bcb8f58519d6f9ad9a3206704a94d472516b988141f44ecd2e6f28a49aa0c449db87972fc995a97379914546ea43143ea2cf779a9cbe81f111fe89129db3610492164ab2598eca7e60d9a6963d8ba03a86729db86e420fd96d61b8fb11edc2b339b57a740074ae5b775eaf60cd85dc934e604bf2b4bd58ee01205b4df57ac20ff8db45a05982b579643882407050c005102a2e71f1e56dc76dbf5331112e83e48bfb5cf2a78a893190d78426175c162ffaa7278a43b9932318fc17fb8cb0dfac610b1ad235b91f9cb7623b155117e07f7b876a3c37627aa31eafed141cc0c5491c4f621a66b6d837a144d78719c46511c04a093cf65fce9fabe5bd6d499eceb63538ece3cf19053550a239bf978c08c879f9954485a4e3e0d5bedb84b407ced85c4dfc4d75af116815992c29f0bc927c4a990c38ae4fcc9feb90fec1b1b555e04d010423010855394d5ccfc8ed21164190cd8f83be5debb70290c3547f07e4dc42814f1e001798e6ceee2558b0c6ff8c1759f90269ee226131116332b99ac8dd104c92088e1f91ace3198c0f59bfb75c4e4a697660eed43a29c831a552de37fce6dce96fa51b6e2111f3071a4e94422d15e102e5f67da7ca6cae6bed7743ebffacb8a811a143605791d17232181a517e872f71262c3c73668f0ef83aad498f67fa26bae698cf78f24c2dbecd399a190e6b8d0684e929f2e8083765eb2c67793a1adbb89d36b58bfb197cdc5f3c894ac9d886e8f3b0936fabd233c09de8fab8099f72a74d908ba5c5e4d39790b0bf9e45b710f5587b7c937c76690c5c5fce621a53a9fd03b0a4ee6d8d1abbe2ed561820a77f12a08cad0755540ab6dd1604b7c30a8652995ab80b85e919011de9438a4637eb0291124ed4b745e782cff98510cb03be79c2a81351abf276584d75cdd96b9c97e73eb71000b3ab7c3c19c2cab4497298fcb3052b5d4503d05e7f310318be6f848547b1a4f4db82caee190801478be28065036aa4d91f290c1f396343e73a5fe8bb5ccf0a317177ed1f77acda1a4a49dccfcab8d1b5d79f015f788b6d5e9f8228a8bcdc0696e6b19f5edffbcd7e9509c87fbe1f726b93bf8c6d8d37428763e142560c46c9e894f7317859000c25abc4f3691ebcd020171e0d4911b5d97a238109aedeb00b2eb475c1e7b45175f8aa85193b5c0f43b434c15de01610c4d022646cd6e3637f349a434a77f571ac1c5d698452d1b991e267f78dca5e592ecd31ccafcad84e4e98d134b4adc525b81bd6843428883023a6ea407201738c8bf16b541ff7280274a34d4cf14819f2dbae167ca0cae8471c495e006b45194ad91c4516f21cbb10e0d26fd5d734cd7725df5b3fbe92955f4a9bb3b9b813aeeff79d6ed5db92def19d060a208c3ec8c42c110786f1e1496c50a7249b03fc792764366894a35320b99d0bef9fd0b6a246c36a357c6b985dc83a37a8d9b8b9ad643dea94860cbe763bb73cc8422b69d4d12332242c8954075fb7117a6679638073617abcdb4619855b2036af160647f66b3531645a3bf047ae290d6ae2249f114e7a8464278bae1486022bcc7c37390c8d9a0efb0e1cfa0da8ef7a5e072f99a47ecc75e4e442880375193db49bb82ba34901286ca473ed5b63e4048db4dc455e74b3fdd2e7898ca3f4c3a02d435cde6141eea645055123a7dcf0d22057f8d425701afc55859f5147954e719d58c7486b1e02ac16cb799b77632c66bb78e6e52e11017c1736424fa4d433f1e19b4c881d23f0b2a12d5fae3ae24339088088d9b496ad97bd9f6e20a8597d1452a0c72dcf43dbbda8f18166585c06d21fbffe5fe7b55f71c9b9f1b34a02bd05ca63c7c1b1bebbb9dd24fb10291b04c665d45154dd28b85d821ce7e613119128996785e1006a8dabc4899b10d2671107d5a0658ed363b9d4b39d02f8cc5e350fbf0a31048adecd1f9e2ca749bd86f195eb48e9b4605f050de03d642940d79184618f7f88a9a0a4683ad84d6134e395305bc1d4d9d17cc334b97653529d6682a87a5fac80a6d46d6e72fc22e58be7b8f8617b3372ef2622110ab1ec448717118b257acffe55d18c7855e9e8710ad977a6792b2315a189eb4468c68641e9b60c0dab7016ac1ad63cd8004b6eca8fc88b1e4263acc00499255c16b11487a0af858075f9c892dc8044c4146e5a5677c4a2cb24bde5e078985020d4ab1e4c87492e76b7e6f4bbd71d84bab1885c9702849e70cf728776b1a94c2a8fb8c7ca01b6111ef6f2032a290949bfe473fe215273b8b5b3ad540f187490f63077dccbca6f62f0a7a66717c596cdef412f2560b10685ede967b3ee68b8c951959aeb1d7564c3b9d806b2ce858381393a79916b78f7e90beadae30ffc0b2b614380f1c2cc551a44565209db3516be379ef566ab00c673fd8aaeeecdcf1168c1960e9a477b9e13757498a44ff089351d1f27abf9fd76816f924504647d1247715ca861ebe624172c322146d66eb2b247f8ecb3e1b5ddca89b287c57510cec40fcf89d802cf4368a861af320e01e34f7a6177d4bc549181b5e87ecdfe02f78c9a59a3bf91ebb6364023ec06410e7b4476ec4e3685bfa3bfe9ef9ecc12dcd899abe0f3c7f16b4686801c0c0a949aa26bed57df56f2bc54ef19af7fcbc7b0d691075f42a4a67acf980b568acb2342f42249f7c1ee3527c13182b096064ecd250887a942d26f637e1c4041b139659d2462a68680bb04387a3b399e396b9fe74de10356125fa47d0a20827370cbf36a79b6fffade91c439dd6cfff4bbe0dd3efefb61c491ee32f935d62307cba369ac8c20f6fe3d4857ce6d240ece5e4d149f0587155a8350fcc18efae2ff11cdbe15218a82499a1996df8b5462ee170b284321e76bbe5c3f4158387644d95f087c598e3d46fbe27f63fa784bda239512113424045a2c5dbc6bc3662ca730a86d13cf8f6fe2743224ca7b535caf6b4701a7dae9cfad3d7290104bbba15b6a064ae6e909a099f75fbe47c9e654d8e3b8dc0f3dbffe829e6c56f7a241e565136812a857f59ab565a9991c6b1d8abcc94c6b33bba314f6e5060e657e4647f969a551dd6c51dfca0ff5d9e4f401fedbc2c927eb1ed95ef25f4e5accba4999322ba1539499310dd5875433a22835cfd42fd77fd4680b7fe767d7aa5c33acde04a65bd3a663fcde4c80e9f2af498f13bf9abbaa1c1265edc691e94abdcc92270c05811cd2a8104eb18efbfec9e4ba9ae5cde211b9b93082ce034b6cd5fbe9cfbac4f7e2404ef159766124f73017cc3600f3c81cd78db25fc3459629eaf20dfdb062c7e502aa69412381d847a9d254d5befc451cda3606f0bc8ae62e0aee928f9ed0b21d705a8d31b899e16445ee064563d32f7b6bb5ad197023cf528d9b329ec67815c6ddf27d2a6ffa7328bb993407cde3d166159fd49fe469254b84c2916daea8df9d69bef019f1351b9bce193e30278835b82ea5f60dc0bdd7f7452b7a820ae7cd6dc29d7ac6a6c1b6411711a96338b1e769146b2a385d282bfaae61b041166efafab2d89a4567b9460cc22d752f8e9aacaaa0db7c84879f5359662d55df6570d4214740851c74574ced733807cbb54571110410892394c3dea07bd4154d0e5689d57c3360207dac951f96a358e9c466a5c5113f3a632e184f57f075edef4dcc9721b963beb95df09dedf848260cbc1ebfdc7408218eaba6d2c51928cd37c4c0c9f321fbb0994a56947cfd9643056db5dbea60a241f8f004c932bc8e645b2ec2eb9bc4e9e2f4156293234d05e70cb26b8a370b0206c756bda6defc11c5eb386640f535a4ffb714168defc6d82f40d8f5ba8768537ead5773c53bd779ca899a2dd31c9138569ff5107c2fb12b804375c3b3dc9b828bfd550328adf358f71e86a0c49fb119f5ef9e06c13855cbfc7d1a62ca2ea655ed912a6dc7bb8b18656e8923fc7a1702ab36947d79384d681c31923e98cf40209f776bc2b219a7ccd139e756a905aa351e6eaae90770c8a193f96cd5c66e4d77a357985556e14333716d80204a5c390e0d76f4081afe917f99ad8a0976b3342f51854b374b4baa9a7f22124d2b82749446e30d9795acb9c3c3a305a6d273ac528e8e9c95c37a78e765fdda55982c2961fbc85a14fc095a78b4654ee6dfc3298749a639ab9c8e155af3a77f8a409ce174532a492ef550a140f774d77d732b3b4ca5bc41fa4488ce5957ce219b032ae1f585273748d81b19edcf3e6cb9a93ec24e41c6b3c472f9baf3ca46cb8b9a91df18acebe7d83bd4473750c4f26806da2f95b9ea48b342460af729ab15e9f033eda67feec645f985d4b9489cf6ceec1b100d007bf46c74be53c7ea17296f9c5b5cbae736491213c93b513009ebdecfcd60d46d7b86c6e3b5e288f2ba5867c07936e7bd1b00de52191eb8630ff82ccafb27a59295164751811bf74eff1e5e2abdf3c93bc5dc9814be83b2562477935e2fa30db7ebb6ec380170cf10c1f98f8c5eb71c730c2b31b55a1dd1c12a64802ab95b63c529e0a96cec8f38680221d6089926d8309796c79994d63b67bfb62f66b4a502f30ed12be41e896e88bc45a160a526fbd5f002e677322f116ec5740d7563cd23ee853c008b84998e38fdf158556e28a532573956e7c00f91f08ca245c295a3d5e003a99ea727f61d12893b435d4c8f2f5cce00c6a3091e2a47f290c07168975c53d7529b71d10faf42d2bac9db8d53669cf59c709c25e9e40b5feaed4c37dde8b84c4961c00712326fb6aaa06e80d766b40b72480f3971def61d1d129676df2478e778d899ed317426ec33e496d1fdd2ec27128f8faee92828e13da72d6aee8330a7988ea1cc8b64ec4d8b20990864c16c52c4be6d00b304b87d97bffdd9c66a740b517223089d9f3f414abedc53c768dab9220b980e6c18d5f20ba8994cc8886d7bdee213442f456d79fce1b1eb48fbf600a666c8ade24d118e6328251cf7b57a6285c650e019850f392b1c29aec5c8fc489a3819d60d5de377d4c11b8ee5625b7c02c5d50d2af3397006f2e2a41a06f039229eef5878ed91f9f6be7e988924dbaeb8455f616275e8698d93fb536e2c839b203aa69bceceddbf9c53f8addba53d50ca0f7a4729a42ac6eb757f1b408ad4a0147546173e62f7621eb18a9e1681510cceb48e0a30ab7a1bf71d56742d5f034f2d725e7ea68a011dbb100fa6eefe4ee093873de366d34f4240ca027a25c5b979c9ac47dd1dcb6ed82c4aee09dcc23cf329a8644f89b5cf00e5683934b1837574e9b39b31b1009f276e15aa040959fdf100838ca3f5ab17e45036668d06044e3a13f3a0a6f68579e50d5b0164f900d7bcfcde78396cf30f0b1dff76dc397ab1a5a44b207eb1eaaf73b945c575029ae2dce20724991e6550155ded6a42672609f2439c5aab4882b2ffaf7da787b71d05d15516bd68c6f1a9d79b675395845f24ee853f877e72c14b6c6702f7b8775ca1bfabbbcf4019f7bccf07f1c211531dfc66a7a1df79e92a20dd1cbe1b22e1209e7e3ecb9d3c2450fc22a57bfe09bd735f61c361cdac2488ae0adc7885edc0712655daaf535e1de96ccbe7869d531d8bf3db512fbd17c772332a3f8cf1e052ee0202eb99a36a0f8d7219888acbb57090cdaf3b28e1e62e8fc2ec237bdf18592a7afe4d8390dcb5e7fcc31bf4f797e6f5710070902265cc2e8c459b7da1451046abd6c8c5b02c0be2d2f505a65376266563ac7b59ef3b4e2570a6cb0bd94d46ad861317c743ce1de12bfa2295a98cdded4414d87a1580b1e4675bbdf73a22cac4a1d8d456d089e0b60cbfd16158f073bd1dac481db49fa5d8801d0fb0844b4afec1bab4e61fa0f381fa667880a1cd8163953be7b591cc9dfd7f91902370b783ae8a0f3c7cbefa7d229a37c00f523529e159b11d2e240629b64af2d11404773e991207a722c320221ce23baed7cbe40a440c5680814b122cfba9092fe03478f85adcbdeacb76d6cbf2491eafae98327b278e267821a0e1cd06ef90cb0328e246c19d8c63b9332291a89bc9f989effc675c79a870ac024756c6f5a7e32babd69625d61487ae7399490b70dd0fade7d70ad9b0757300a2dde77abaff4f63a0303853589d44efa968e10d36561f04408ad0cc227fc6b2f904cead189a0fcca9b2e6cbde5498652e0b3bc9d8b7921474403718feb5cc750dc70f5a9b1a0ae2c642015b6a1a8ab0572182b4e39e0c869cbdc60c9465f5d564d18ba2f5b3bc3e05a458744077430c5ea031ee02dd8f0a65d7dd8d90dd9b8717f77d202239a5778719423fb2aec7ca86eb07c39de65a34b988d65377a7473e9145f16d79593e96903330bbf3a8024fc15519d9baa0fae2018786f4b1846fca355ff0fccf65cccad1896309a5ccf2056dd542c929850cc91cd655962360fe316557ab3fb378328f77a07d9da24447d3fa2020b382ed2e808ec9529a01273434c64b0b7c35a06a019e4ab51cdc9c0f266ab25b6984338a0ba910d1060283b636c5d7e8a3f969c1ee1c99b54bba7ff3679fbeecbb70349f076480a867cc4ee4cacaea39c80f642533599486d2ffb77b8c9109a9d25fa0b06e58eca764f7d56469eb9547036bbea9d5c3d35b4c1fbc3d39a372c2b7ad184965cad3819c8928f1588d00949949c0c4c93d30ac7f6665247c0108bd89dff3aafe780ac66febfacc8c6a3cc387d09da6de700487a80e2c8d56df94d7ebd3e1d9e06411a6c5f7eb6da41c6f52997b5ad47ba985261103fdf12eb4a2828b248f652ef00b6abccab2eb161b878b9dbc0aa911405b6f67adda83c16187748d7b524ffe6381f489f432d592e6171bd9ccb2cd52f977143f57fbf2ab0b823d449ae55f02440972334344cda01837b93afa4f46a2fdefe27e92764cf9596780846de2e3b1ea83e62ee43b1c05aee675e25363504addfaa68e7c53ed685413f5ba951f120d0a646e474872c81e5a887464c19f8460ae814ffff24cb51dd2dca28d597ab2ea60949f8dbbe67f263e722fdb51bce4e328a19f5ff1218e1f63b8da6d40dbd5490964499b2522ea323310634893ead661407966207a66ab13adfcf1a725ed14339c46011c0e0401f2386b47cd9f902fdf84bc85e74d3ae7cc544e4d65670a554a537712c6ee9f75191631d2a4c4da06fc38423b1d5b828d7201235b2974164f52aa16bee70ee509250752f4fdd6b9f8d021943df8320682a6f80ff0d67ab7a4ceea807bd5b3b7b6380b0c7f0caa67b0208ba71317f0355a3b755af0e2c007186389438615df80b7b25104a733fc90625b62682198733c0f1625dfaa08cf81e3df043094b7b5a098b3b36f803b5b0f10a057bf814ae3579932c0a5f208985bab3d817f975283b8838ae5cb709be72b58df7425e059fdbf4e0ee51b3da01fe0b44963c1196baee5ec5909ad80d9d1660f3edd90374952a0bf8b3bece2c2f944593f4de7de5e05ded096b8f4f05d65dfc2e806f78220d84b3db564fb12f4e5e8f5eab316591f004e9374cce8e787263bc3827affe6793c130b8621d3bbb2a86fd87f070ea21718281ee7aec4bb3bb71af4bf5721cecd139c4be8c9df4ec8dfb09a5cf1d86a25d39faa9f064a997c214f334e4410917fc3b4d67ada8d87a38c0f86b02bf653dddaeb5b75b300f8bcfd792858bef8ab23e063421939c59212964c9ed5dd56e215db58cef53d31a966bb8ce4ed56287fecb3a85ba435e0b41b20ba1164b9c9f2c49fa0f7b17a89e0ec47eefe992d63ee29c8c0a1ece2664fee8edadd43636a54c48519b4fcf55b0d9103602b92441a5f85cf8c5e406d0f5815f8f37309934bd78fbc2acf0a03b051b4528db4f7c09de7d0aabafca3736b8259c818ca338ca6754e0747717c2794d664a1cacc1e9c52764a308e6df73d975638630b74cce6c49b1bac16454e96852c4f9d8ed118e86d2f1c8dc33bccd4a07be128db5e80f5684ddcc1158e744411acde590f902f0987cfb750bb5bfeed53bff076868986b566d7701f48ddfcacbd325c8d930bcef26713bf60585d5c991e2a6cc33ccbc27f7ddfba18f998497c2eb378cc8f2cc07a1b4f141c5e0fb6f52e18242e505bcf6dd20e33a469d056a0b4fd5e72d0da9d0bcce1e2f9e9dc7d1c7b6cb0f3604287eca", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000, 0x0, 0x0, 0x0, 0x801}}}, 0x0, 0x0, 0x0, 0x0}) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xfffe, 0x2}, 0x6) iopl(0x3) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo\x00') fchdir(r3) bind$alg(0xffffffffffffffff, &(0x7f0000000800)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) writev(r3, &(0x7f0000000c40)=[{&(0x7f0000000440)="4e6b9d00ca9d97d9b66e3b27e211ff71d66b8321e3b730af4d527f3e4be3f19fe7e3691c1494d633d68cb15e95789cc4c3512950757385d5f52c860026da962272db1776e4499c52667c312a535d91c2356243c7fbbd357ad8b0d62a129b2cdc8fa81721e010be9f", 0x68}, {&(0x7f00000004c0)="146698d57449dc667bfc9752ea2ddd65d8f01dc50106ccfea5d5698c4f742ae3816fc0a13bca6b49acb56820d029bc17beb424bb93586f46811a5c8a46fd17e53ebaec2a18c57b90345c4450de30001ec4a9e6f86da184768f9430c088ffb381d4cfca671899ed5355d27b8f43a873cee46ff4085330bd48c9", 0x79}, {&(0x7f0000000580)="f220e4433faafe507c0aff20502d9049c764a4dadd8ec8cf86c4573bcd6084d5b2ae174425cf826c54c1fa837b2f6c2a45263406af3016bbce9fc08f821ea38ca8291db3982c58394a0b926363ee38fb31d833021320122a7b5093d6da8d352c1b70d24e3b73100da620421003f2148e505dc8b756cc4eb99cb19f9148be2688f0731e16", 0x84}, {&(0x7f0000000640)="54ab39c791f83d72dbdb8edf4b6d707c24cb4349ad303bffba5fd42b38d0abd779089b05102b6e5eac8308e08f7bc6a2a3fd5413eeb43778ce9290fd202cbf636763e0868bc5e17c72113baa8e9b23f6cd400566a9e5e5170bbe007e1be58bd32edbe9c063f65c84acd483f237067362c4140dc6209b033bdab2ef0cff26b11470e6ad221bee8516e645eab6e7d810d5c32fb391f38672c0014b5c0686ff8a1f198fea1c083d2149bdbf6f6f2ee4318e31665af399688b6c030bda13c71e7e35c431f0b846b94575eeaad29d5b00"/220, 0xdc}, {&(0x7f0000000880)="50c278ced0d221be7fd414ffdaee63cf4944e332d2a0a67c8fd951a186192cc95123aec838a0b7225549facc8b94fb609e2fba286a6e6705bc5430a1004c058ca0ac9f42ce688476086b6ef384915d348ae20ec6d14f6653354975143727d4115a8633ed91464fca4909e75c79ebac2f2ff2717ff67024f819095cfb46cde22783388c9c9e497a053706698be910b68081143d1dd9e0090f", 0x98}, {&(0x7f0000000980)="b0894600301c443fcc078ca35ec1fcdb13bba8d0f42b5963959975db89dbda877eb8594360bfeba060b79ef1f62cbf5706c97c86413befd897e7d6beb50e767839e2ad9ad786cf0a9e32a69331832b4300bde63c9d05deb64dcf12a6d40086a8364943851fc36f58babe5baffd72187f23c1539ae83a4d8bce5da001ee2c63a3136d18b71cfd3318a9f6b9a324db4142c0046d41300350d7d4427be186a73dcb8df323caf737d37fd9057652397d057290ed8883db2cb6939e9bb5f258c7e206153814ef1531ca0f792508e48374da070ddbf9ca2e44791c9440de3b7af42f548859dcd6333879488baaa8240c95bbdf2f6a4442f1b8332d984b396032f0", 0xfe}, {&(0x7f00000001c0)="b86090833a1ae6d27cd08b3add044222a757870624be9462e3124ba3dddde2", 0x1f}, {&(0x7f0000000a80)="84bab48f50bf1a45495f7c12e79c5bd49e083fbe87a49c9250e0022be5081a3962336357dd5eaecd1ba96bf64e890ea6dc4e687a557c5e34f1ef37092bce1fd77526ba0e1bd7968cd216442f6bdac47aaadf125dd7e326c26689113a37fd5985848aa08107d1434c4bd38b88b888debeda30eace053a67768eb823b62fa6904db12563d5f07d51d15433282d57f857444779c06f7336fc5bbf4d05089a6ef08cb83e039725fba4570a23f9c72e0ca1d9c18f57ff3293f02d735377f96c644166dbd8f415c883e77527b08e2c57289ab3630921cac09855f3b10b680fa78b5e9937b470afa351906442", 0xe9}, {&(0x7f00000002c0)="39ec473c981c20d86460d8b4d7f5c6c615f9a3286cc423fd9f9d712536cf20ec2e23380af690a493b6f1039660bf67e5d988e1f878e3", 0x36}, {&(0x7f0000000e00)="f1713e859cbd6280dd35beecf15455573bd8cd0891506aa6d8d00fd7f893a7465d090193b3ebe4131de677efcca1801da3b44c7116adf0cbae233308da6acbb3be8f8218b8934868400079dfc6c07a7919eea802015a4903c29b35789561fff56c38e0faa711e467b6ed8cccebb7031922c090f8a655bad164a03cdc640ae9182a3292ab583265842b5bc18b75f38b8f658309ae4782a5e30f485934205527a847163077e9bc9cf07afa3ca05be4c39970dc21b8a53e48e54a7cc30b1eb5cf59a00322fa6387eb3ead13025816150272f785784a6fe4bdc918c5d7ec4abc34670fc55848bfe24d6011c182a9726bf4ac797107e3536d0c0e2359d04034152845e3fe55ee7414f152650870bb4b0e51ffb659e7ece4a82ca45ad1d30a7290d5b1041891064597c4a83bc1bd870264fcaf7db2", 0x132}], 0xa) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x60, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x28, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_BC_QUEUE_LEN={0x8}, @IFLA_MACVLAN_MACADDR_MODE={0x8}, @IFLA_MACVLAN_MACADDR={0x5, 0x4, @remote}]}}}, @IFLA_EVENT={0x8}]}, 0x60}}, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) recvmsg(0xffffffffffffffff, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYRES32=r3], 0xd) r5 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c000100000400090400bf900b64ea00090587033b"], 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r6, &(0x7f0000000080)='l', 0x1) write$char_usb(r6, &(0x7f0000000140)="1b", 0x1) syz_usb_disconnect(r5) 0s ago: executing program 3 (id=2161): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000670000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000000)=@req3={0x10000, 0x100000001, 0x10000, 0x1, 0x3}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000004b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4400c004) read$FUSE(0xffffffffffffffff, &(0x7f0000001fc0)={0x2020}, 0x2020) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000880)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$IPVS_CMD_DEL_DEST(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(0xffffffffffffffff, &(0x7f0000001200)={0x1d, r6, 0x0, {0x0, 0x0, 0x1}}, 0x18) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) kernel console output (not intermixed with test programs): zkaller1: entered allmulticast mode [ 484.476992][T10492] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1207'. [ 485.102339][ T5359] Bluetooth: hci5: command tx timeout [ 485.219537][T10508] ipt_REJECT: TCP_RESET invalid for non-tcp [ 485.281623][T10504] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 486.298665][ T40] audit: type=1800 audit(1726720143.699:2815): pid=10529 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1216" name="bus" dev="overlay" ino=40 res=0 errno=0 [ 487.181871][ T5359] Bluetooth: hci5: command tx timeout [ 488.082734][ T5405] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 488.261860][ T5405] usb 6-1: Using ep0 maxpacket: 8 [ 488.283972][ T5405] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 488.288156][ T5405] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 488.305417][ T5405] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 488.309855][ T5405] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 488.316309][ T5405] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 488.319766][ T5405] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 488.562451][T10559] ipt_REJECT: TCP_RESET invalid for non-tcp [ 488.586096][ T5405] usb 6-1: GET_CAPABILITIES returned 0 [ 488.588377][ T5405] usbtmc 6-1:16.0: can't read capabilities [ 488.665507][T10559] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 488.841340][ T8] usb 6-1: USB disconnect, device number 19 [ 489.177429][T10567] block nbd2: shutting down sockets [ 489.271972][ T5359] Bluetooth: hci5: command tx timeout [ 489.737624][ T40] audit: type=1800 audit(1726720147.139:2816): pid=10578 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1233" name="bus" dev="overlay" ino=455 res=0 errno=0 [ 490.615474][ T5359] Bluetooth: hci0: unexpected event for opcode 0xf850 [ 491.922363][ T5345] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 492.093842][ T5345] usb 7-1: config index 0 descriptor too short (expected 146, got 18) [ 492.100727][ T5345] usb 7-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 492.103440][ T5345] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 492.105524][ T5345] usb 7-1: Product: syz [ 492.106669][ T5345] usb 7-1: Manufacturer: syz [ 492.108126][ T5345] usb 7-1: SerialNumber: syz [ 492.110929][ T5345] usb 7-1: config 0 descriptor?? [ 493.423587][ T5359] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 493.429098][ T5359] Bluetooth: hci5: Injecting HCI hardware error event [ 493.433974][ T5359] Bluetooth: hci5: hardware error 0x00 [ 494.560205][ T5345] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 494.564908][ T5345] asix 7-1:0.0: probe with driver asix failed with error -71 [ 494.568853][ T5345] usb 7-1: USB disconnect, device number 20 [ 494.660477][ T5360] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 494.672662][ T5360] Bluetooth: hci0: Injecting HCI hardware error event [ 494.678609][ T5344] Bluetooth: hci0: hardware error 0x00 [ 494.733543][T10616] ipt_REJECT: TCP_RESET invalid for non-tcp [ 494.825890][T10616] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 495.511884][ T5359] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 495.634339][T10634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1244'. [ 495.857408][ T40] audit: type=1800 audit(1726785918.268:2817): pid=10631 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1245" name="bus" dev="overlay" ino=620 res=0 errno=0 [ 496.811929][ T5344] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 497.668229][T10659] block nbd1: shutting down sockets [ 497.912239][T10667] ipt_REJECT: TCP_RESET invalid for non-tcp [ 498.157821][T10672] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 500.479170][T10707] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1260'. [ 502.806484][T10735] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1268'. [ 502.809688][T10735] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1268'. [ 503.160518][T10741] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(10) [ 503.162447][T10741] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 503.165668][T10741] vhci_hcd vhci_hcd.0: Device attached [ 503.216213][T10742] vhci_hcd: connection closed [ 503.218752][ T39] vhci_hcd: stop threads [ 503.221164][ T39] vhci_hcd: release socket [ 503.224598][ T39] vhci_hcd: disconnect device [ 504.821959][T10765] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1273'. [ 505.197126][ T40] audit: type=1800 audit(1726851692.603:2818): pid=10770 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.1278" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 505.269341][ T40] audit: type=1400 audit(1726851692.673:2819): avc: denied { accept } for pid=10773 comm="syz.2.1279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 505.271056][T10777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1279'. [ 505.762450][T10781] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1281'. [ 506.901279][T10804] netlink: 'syz.3.1286': attribute type 9 has an invalid length. [ 506.909993][T10804] netlink: 209836 bytes leftover after parsing attributes in process `syz.3.1286'. [ 506.995367][T10807] netlink: 'syz.2.1287': attribute type 1 has an invalid length. [ 506.997501][T10807] netlink: 9348 bytes leftover after parsing attributes in process `syz.2.1287'. [ 507.000134][T10807] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1287'. [ 507.117891][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.227763][T10832] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1290'. [ 512.152286][ T5345] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 512.210349][T10872] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 512.298003][T10872] netem: incorrect gi model size [ 512.300274][T10872] netem: change failed [ 512.302185][ T5345] usb 6-1: Using ep0 maxpacket: 8 [ 512.307114][ T5345] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 512.309164][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 512.313687][ T5345] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 512.316948][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 512.319842][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 512.330699][ T5345] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 512.332756][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 512.341757][ T5345] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 512.344886][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 512.358567][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 512.364708][ T5345] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 512.370719][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 512.381803][ T5345] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 512.389751][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 512.401876][ T5345] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 512.410434][ T5345] usb 6-1: string descriptor 0 read error: -22 [ 512.413709][ T5345] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 512.416265][ T5345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.423793][ T5345] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 512.651097][ T5345] usb 6-1: USB disconnect, device number 20 [ 512.742005][T10875] team_slave_0: entered promiscuous mode [ 512.744240][T10875] team_slave_1: entered promiscuous mode [ 512.929236][T10882] netlink: 830 bytes leftover after parsing attributes in process `syz.3.1305'. [ 514.345721][T10902] mac80211_hwsim hwsim35 wlan1: entered allmulticast mode [ 514.374151][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 514.387989][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 516.129318][T10929] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1315'. [ 516.136633][T10929] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1315'. [ 516.434834][T10940] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(10) [ 516.436966][T10940] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 516.440881][T10940] vhci_hcd vhci_hcd.0: Device attached [ 516.711886][ T4762] usb 16-1: SetAddress Request (2) to port 0 [ 516.715047][ T4762] usb 16-1: new SuperSpeed USB device number 2 using vhci_hcd [ 516.771137][T10941] vhci_hcd: connection reset by peer [ 516.774019][ T8641] vhci_hcd: stop threads [ 516.775376][ T8641] vhci_hcd: release socket [ 516.777621][ T8641] vhci_hcd: disconnect device [ 518.332231][T10960] netlink: 'syz.2.1326': attribute type 9 has an invalid length. [ 518.334321][T10960] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.1326'. [ 521.709133][T11012] ipt_REJECT: TCP_RESET invalid for non-tcp [ 521.751909][ T4762] usb 16-1: device descriptor read/8, error -110 [ 521.913794][T11019] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 522.167929][ T4762] usb usb16-port1: attempt power cycle [ 522.607573][T11028] netlink: 830 bytes leftover after parsing attributes in process `syz.1.1338'. [ 522.743056][ T4762] usb usb16-port1: unable to enumerate USB device [ 525.575091][T11066] MTD: Attempt to mount non-MTD device "/dev/nbd2" [ 525.581253][T11066] cramfs: wrong magic [ 528.574645][T11098] kvm: kvm [11097]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 528.578369][T11098] kvm: kvm [11097]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 528.592337][T11098] kvm_intel: kvm [11097]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x1 [ 528.626172][T11098] kvm_intel: kvm [11097]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x1d9) = 0x1 [ 530.663140][T11131] kvm: kvm [11130]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x0 [ 530.672231][T11131] kvm: kvm [11130]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0x11e) = 0x1 [ 533.244755][T11162] ieee802154 phy1 wpan1: encryption failed: -22 [ 533.988296][T11173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1378'. [ 533.991385][T11173] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1378'. [ 534.008718][T11172] nbd: nbd1 already in use [ 534.125769][T11175] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1386'. [ 534.236373][T11174] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(10) [ 534.238578][T11174] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 534.241531][T11174] vhci_hcd vhci_hcd.0: Device attached [ 534.289404][T11178] vhci_hcd: connection closed [ 534.289680][ T9796] vhci_hcd: stop threads [ 534.292249][ T9796] vhci_hcd: release socket [ 534.293477][ T9796] vhci_hcd: disconnect device [ 538.754494][T11243] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1392'. [ 540.775401][T11276] input: syz1 as /devices/virtual/input/input35 [ 541.411998][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.414148][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.416193][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.422027][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.424844][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.432379][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.434552][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.436696][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.440442][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.442606][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.444676][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.446787][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.448876][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.453914][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.461832][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.464346][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.467196][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.469168][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.471169][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.477405][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.480695][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.483616][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.486216][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.488977][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.491540][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.512047][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.515908][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.526550][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.529113][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.531916][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.534615][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.537248][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.539883][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.552905][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.555505][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.558094][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.560675][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.571956][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.574689][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.577330][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.579965][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.587486][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.590160][ T831] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 541.601016][ T831] hid-generic 0000:0000:0000.0004: hidraw1: HID v0.00 Device [syz0] on syz0 [ 541.612126][ T1290] hid-generic 0000:0000:0000.0005: item fetching failed at offset 0/1 [ 541.617908][ T1290] hid-generic 0000:0000:0000.0005: probe with driver hid-generic failed with error -22 [ 545.313445][T11319] input: syz1 as /devices/virtual/input/input37 [ 545.545683][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.547674][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.549666][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.551630][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.555285][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.557229][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.559172][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.561813][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.565492][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.571385][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.575543][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.577628][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.579565][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.586201][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.588242][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.590198][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.595850][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.598797][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.605944][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.608459][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.611870][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.613813][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.615782][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.618871][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.621558][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.623827][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.625824][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.627888][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.629805][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.641788][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.644078][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.647711][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.649654][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.651616][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.657729][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.660480][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.664678][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.666645][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.668633][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.670607][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.674254][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.681353][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.684734][ T5405] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 545.690470][ T5405] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz0] on syz0 [ 545.746238][ T5345] hid-generic 0000:0000:0000.0007: item fetching failed at offset 0/1 [ 545.748946][ T5345] hid-generic 0000:0000:0000.0007: probe with driver hid-generic failed with error -22 [ 547.100144][T11354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1421'. [ 551.301940][ T5385] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 551.451820][ T5385] usb 7-1: Using ep0 maxpacket: 8 [ 551.459508][ T5385] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 551.463541][ T5385] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 551.466921][ T5385] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 551.470407][ T5385] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 551.475005][ T5385] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 551.478136][ T5385] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.715366][ T5385] usb 7-1: GET_CAPABILITIES returned 0 [ 551.716921][ T5385] usbtmc 7-1:16.0: can't read capabilities [ 551.936919][ T9135] usb 7-1: USB disconnect, device number 21 [ 552.812624][T11412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1434'. [ 554.349530][T11446] usb usb8: usbfs: process 11446 (syz.0.1441) did not claim interface 0 before use [ 557.701829][ T4762] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 557.871759][ T4762] usb 7-1: Using ep0 maxpacket: 16 [ 557.875414][ T4762] usb 7-1: config 1 descriptor has 1 excess byte, ignoring [ 557.877527][ T4762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 557.880380][ T4762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 557.882996][ T4762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 255, changing to 7 [ 557.887231][ T4762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 59391, setting to 1024 [ 557.896183][ T4762] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 557.901853][ T4762] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 557.911831][ T4762] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 557.937811][ T4762] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 557.940217][ T4762] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 557.942523][ T4762] usb 7-1: SerialNumber: syz [ 557.947281][ T4762] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 558.282883][T11475] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(6) [ 558.285594][T11475] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 558.300173][T11475] vhci_hcd vhci_hcd.0: Device attached [ 558.355619][T11476] vhci_hcd: connection closed [ 558.356198][ T1109] vhci_hcd: stop threads [ 558.358918][ T1109] vhci_hcd: release socket [ 558.360270][ T1109] vhci_hcd: disconnect device [ 558.388172][T11479] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 558.762986][ T40] audit: type=1400 audit(1726851746.173:2820): avc: denied { view } for pid=11484 comm="syz.0.1454" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 560.373137][ T5345] usb 7-1: USB disconnect, device number 22 [ 560.856164][T11507] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1460'. [ 560.859050][T11507] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1460'. [ 561.885029][T11510] usb usb8: usbfs: process 11510 (syz.2.1459) did not claim interface 0 before use [ 562.028883][T11518] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(12) [ 562.031039][T11518] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 562.034010][T11518] vhci_hcd vhci_hcd.0: Device attached [ 562.194143][T11521] vhci_hcd: connection closed [ 562.194670][ T1109] vhci_hcd: stop threads [ 562.197828][ T1109] vhci_hcd: release socket [ 562.199596][ T1109] vhci_hcd: disconnect device [ 564.589311][T11552] input: syz1 as /devices/virtual/input/input40 [ 566.680301][T11556] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1471'. [ 566.881353][T11568] MTD: Attempt to mount non-MTD device "/dev/nbd3" [ 566.886837][T11568] cramfs: wrong magic [ 567.355834][ T57] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 567.694863][ T57] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 567.697237][ T57] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 567.699966][ T57] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 567.702703][ T57] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 567.708555][ T57] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 567.711442][ T57] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 567.714292][ T57] usb 7-1: Product: syz [ 567.715784][ T57] usb 7-1: Manufacturer: syz [ 567.744616][ T57] cdc_wdm 7-1:1.0: skipping garbage [ 567.746337][ T57] cdc_wdm 7-1:1.0: skipping garbage [ 567.756688][ T57] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 567.758444][ T57] cdc_wdm 7-1:1.0: Unknown control protocol [ 568.469634][ T35] usb 7-1: USB disconnect, device number 23 [ 568.582313][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.954807][T11589] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 570.533345][ T40] audit: type=1400 audit(1726851757.733:2821): avc: denied { connect } for pid=11599 comm="syz.2.1480" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 571.176516][T11613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 571.180231][T11613] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 571.982378][ T5344] Bluetooth: hci2: command 0x0405 tx timeout [ 572.161852][ T35] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 572.328880][ T35] usb 6-1: config index 0 descriptor too short (expected 146, got 18) [ 572.347954][ T35] usb 6-1: New USB device found, idVendor=066b, idProduct=20f9, bcdDevice=ff.94 [ 572.351532][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.354663][ T35] usb 6-1: Product: syz [ 572.356225][ T35] usb 6-1: Manufacturer: syz [ 572.358192][ T35] usb 6-1: SerialNumber: syz [ 572.371851][ T35] usb 6-1: config 0 descriptor?? [ 572.434416][T11637] binder: 11633:11637 ioctl 4018620d 0 returned -22 [ 572.450909][T11637] PKCS7: Unknown OID: [4] 0.0 [ 572.453923][T11637] PKCS7: Only support pkcs7_signedData type [ 572.969936][T11651] can: request_module (can-proto-4) failed. [ 573.010991][T11653] IPVS: Error connecting to the multicast addr [ 573.971847][ T5345] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 574.131825][ T5345] usb 5-1: Using ep0 maxpacket: 32 [ 574.684487][ T35] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 574.695383][ T35] asix 6-1:0.0: probe with driver asix failed with error -71 [ 574.707557][ T35] usb 6-1: USB disconnect, device number 21 [ 575.515429][ T5345] usb 5-1: unable to get BOS descriptor or descriptor too short [ 575.540128][ T5345] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 575.542989][ T5345] usb 5-1: can't read configurations, error -71 [ 575.998634][ T1102] bridge_slave_1: left allmulticast mode [ 576.004139][ T1102] bridge_slave_1: left promiscuous mode [ 576.009939][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.016598][ T1102] bridge_slave_0: left allmulticast mode [ 576.018470][ T1102] bridge_slave_0: left promiscuous mode [ 576.020477][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.326720][ T1102] dvmrp0 (unregistering): left allmulticast mode [ 576.376447][T11682] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 576.379923][T11682] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 576.723863][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 576.758256][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 576.781118][ T1102] bond0 (unregistering): Released all slaves [ 577.289591][ T1102] hsr_slave_0: left promiscuous mode [ 577.292419][ T1102] hsr_slave_1: left promiscuous mode [ 577.295643][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 577.298280][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 577.301048][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 577.303964][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 577.349373][ T1102] veth1_macvtap: left promiscuous mode [ 577.351936][ T1102] veth0_macvtap: left promiscuous mode [ 577.354539][ T1102] veth1_vlan: left promiscuous mode [ 577.356013][ T1102] veth0_vlan: left promiscuous mode [ 577.410163][ T1102] infiniband syz2: set down [ 579.469350][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 579.473124][ T64] smc: removing ib device syz2 [ 579.655894][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 580.782304][T11700] IPVS: Error connecting to the multicast addr [ 580.987689][T11716] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1501'. [ 580.987732][ T40] audit: type=1400 audit(1726851768.393:2822): avc: denied { nlmsg_read } for pid=11715 comm="syz.3.1501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 580.994713][T11716] ax25_connect(): syz.3.1501 uses autobind, please contact jreuter@yaina.de [ 581.271434][T11720] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 581.970953][ T40] audit: type=1400 audit(1726851769.363:2823): avc: denied { create } for pid=11734 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 581.976953][ T40] audit: type=1400 audit(1726851769.363:2824): avc: denied { setopt } for pid=11734 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 582.381874][ T40] audit: type=1400 audit(1726851769.683:2825): avc: denied { nlmsg_write } for pid=11739 comm="syz.3.1509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 583.073629][T11743] [U]  [ 583.079777][ T40] audit: type=1400 audit(1726851770.483:2826): avc: denied { append } for pid=11742 comm="syz.2.1510" name="vsock" dev="devtmpfs" ino=1148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 584.096846][T11757] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 584.100733][T11757] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 584.321153][T11754] IPVS: Error connecting to the multicast addr [ 584.669489][T11768] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 584.752945][ T40] audit: type=1800 audit(1726851772.163:2827): pid=11763 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.1516" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 585.755318][T11784] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 586.741564][T11797] input: syz1 as /devices/virtual/input/input41 [ 589.319670][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'. [ 590.162919][ T40] audit: type=1800 audit(1726851777.543:2828): pid=11833 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1532" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0 [ 591.163761][T11849] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1536'. [ 592.916287][T11869] [U]  [ 592.991883][T11874] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1544'. [ 593.066344][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.364714][ T830] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 593.511997][ T830] usb 6-1: Using ep0 maxpacket: 8 [ 593.527078][ T830] usb 6-1: New USB device found, idVendor=12d1, idProduct=fae2, bcdDevice=70.8b [ 593.530227][ T830] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 593.533405][ T830] usb 6-1: Product: syz [ 593.534884][ T830] usb 6-1: Manufacturer: syz [ 593.536510][ T830] usb 6-1: SerialNumber: syz [ 593.540877][ T830] usb 6-1: config 0 descriptor?? [ 593.554437][ T830] option 6-1:0.0: GSM modem (1-port) converter detected [ 594.014690][T11884] input: syz1 as /devices/virtual/input/input42 [ 594.724745][ T830] usb 6-1: USB disconnect, device number 22 [ 594.727381][ T830] option 6-1:0.0: device disconnected [ 594.814044][ T40] audit: type=1800 audit(1726851782.223:2829): pid=11892 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.2.1547" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 596.898606][T11918] [U]  [ 597.375677][T11929] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1555'. [ 597.543259][ T4762] IPVS: starting estimator thread 0... [ 597.642368][T11930] IPVS: using max 37 ests per chain, 88800 per kthread [ 598.562840][T11940] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1559'. [ 598.571093][T11940] futex_wake_op: syz.1.1559 tries to shift op by -1; fix this program [ 598.591855][ T40] audit: type=1400 audit(1726851785.993:2830): avc: denied { setopt } for pid=11933 comm="syz.1.1559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 599.666539][ T40] audit: type=1400 audit(1726851787.073:2831): avc: denied { call } for pid=11947 comm="syz.2.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 599.721929][ T4762] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 599.871801][ T4762] usb 6-1: Using ep0 maxpacket: 8 [ 599.876940][ T4762] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 599.879897][ T4762] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 599.882896][ T4762] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 599.885621][ T4762] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 599.889221][ T4762] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 599.891854][ T4762] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 600.127505][ T4762] usb 6-1: GET_CAPABILITIES returned 0 [ 600.130181][ T4762] usbtmc 6-1:16.0: can't read capabilities [ 600.526433][ T4762] usb 6-1: USB disconnect, device number 23 [ 601.605331][ T40] audit: type=1400 audit(1726851789.013:2832): avc: denied { ioctl } for pid=11973 comm="syz.0.1568" path="socket:[39730]" dev="sockfs" ino=39730 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 602.252756][ T40] audit: type=1400 audit(1726851789.663:2833): avc: denied { setopt } for pid=11989 comm="syz.1.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 602.406600][ T40] audit: type=1400 audit(1726851789.813:2834): avc: denied { setcurrent } for pid=11993 comm="syz.2.1571" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 602.417366][ T40] audit: type=1401 audit(1726851789.823:2835): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 602.535113][T12000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1571'. [ 603.464291][ T40] audit: type=1400 audit(1726851790.863:2836): avc: denied { setattr } for pid=12008 comm="syz.0.1573" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 603.935007][T12014] binder: 12013:12014 ioctl 4018620d 0 returned -22 [ 603.939786][T12014] PKCS7: Unknown OID: [4] 0.0 [ 603.941329][T12014] PKCS7: Only support pkcs7_signedData type [ 604.699070][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 604.704994][T12027] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1575'. [ 605.295787][T12033] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 606.494380][T12048] 9pnet: Unknown protocol version 9p2000.ڴ>;1gˏӟ?u [ 606.503004][T12048] cgroup: Unknown subsys name 'euid>00000000000000000000' [ 608.233130][T12069] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1589'. [ 609.554949][T12099] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1596'. [ 609.618980][T12102] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 610.758977][T12124] syz.2.1601: attempt to access beyond end of device [ 610.758977][T12124] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 610.765538][T12124] SQUASHFS error: Failed to read block 0x0: -5 [ 610.768208][T12124] unable to read squashfs_super_block [ 612.217325][T12158] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1608'. [ 612.222317][T12158] futex_wake_op: syz.0.1608 tries to shift op by -1; fix this program [ 612.668941][T12166] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1609'. [ 615.569454][T12197] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 617.149263][T12212] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1619'. [ 617.156783][T12212] futex_wake_op: syz.3.1619 tries to shift op by -1; fix this program [ 618.880940][T12237] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1623'. [ 619.439861][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 619.452115][ T30] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0 [ 619.465796][ T30] hid-generic 0000:0000:0000.0008: hidraw1: HID v0.00 Device [syz0] on syz1 [ 619.573769][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 619.575863][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 620.132666][ T5359] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.147124][ T5359] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.152153][ T5359] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 620.160754][ T5359] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 620.167229][ T5359] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 620.171373][ T5359] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 620.345785][T12259] chnl_net:caif_netlink_parms(): no params data found [ 620.502378][T12259] bridge0: port 1(bridge_slave_0) entered blocking state [ 620.504923][T12259] bridge0: port 1(bridge_slave_0) entered disabled state [ 620.507439][T12259] bridge_slave_0: entered allmulticast mode [ 620.510297][T12259] bridge_slave_0: entered promiscuous mode [ 620.514013][T12259] bridge0: port 2(bridge_slave_1) entered blocking state [ 620.516493][T12259] bridge0: port 2(bridge_slave_1) entered disabled state [ 620.518985][T12259] bridge_slave_1: entered allmulticast mode [ 620.521826][T12259] bridge_slave_1: entered promiscuous mode [ 620.562995][T12259] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 620.568741][T12259] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 620.647082][T12259] team0: Port device team_slave_0 added [ 620.650677][T12259] team0: Port device team_slave_1 added [ 620.703536][T12259] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 620.705426][T12259] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.713380][T12259] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 620.719175][T12259] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 620.721031][T12259] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 620.727785][T12259] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.810374][T12259] hsr_slave_0: entered promiscuous mode [ 620.812891][T12259] hsr_slave_1: entered promiscuous mode [ 620.814931][T12259] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 620.816893][T12259] Cannot create hsr debugfs directory [ 620.951841][T12259] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.094674][T12259] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.233898][T12276] syz.3.1632: attempt to access beyond end of device [ 621.233898][T12276] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 621.238577][T12276] SQUASHFS error: Failed to read block 0x0: -5 [ 621.240724][T12276] unable to read squashfs_super_block [ 621.251212][T12259] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.330479][T12259] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.515941][T12259] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 621.521901][T12259] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 621.529748][T12259] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 621.540225][T12259] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 621.650992][T12259] 8021q: adding VLAN 0 to HW filter on device bond0 [ 621.667691][T12259] 8021q: adding VLAN 0 to HW filter on device team0 [ 621.678772][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.681762][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 621.699117][ T9796] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.701783][ T9796] bridge0: port 2(bridge_slave_1) entered forwarding state [ 622.223180][ T5344] Bluetooth: hci2: command tx timeout [ 622.317925][T12259] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 622.458601][T12259] veth0_vlan: entered promiscuous mode [ 622.479864][T12259] veth1_vlan: entered promiscuous mode [ 622.566327][T12259] veth0_macvtap: entered promiscuous mode [ 622.573210][T12259] veth1_macvtap: entered promiscuous mode [ 622.588749][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.594088][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.598049][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.602305][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.606670][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.610480][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.613877][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.617211][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.620267][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 622.625297][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.630310][T12259] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 622.639092][T12297] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1637'. [ 622.640080][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.645861][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.649218][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.653059][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.656204][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.659684][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.663563][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.667015][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.670206][T12259] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 622.673543][T12259] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 622.678165][T12259] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 622.710195][T12259] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.713568][T12259] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.718048][T12259] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.720331][T12259] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 622.792896][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.794994][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.834479][ T9796] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 622.836714][ T9796] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 622.861940][ T30] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 623.034880][ T30] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 623.041549][ T30] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 623.045542][ T30] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 623.049363][ T30] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 623.066387][T12295] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 623.076882][ T30] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 623.165817][T12302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1631'. [ 623.620151][ T30] usb 5-1: USB disconnect, device number 17 [ 624.314007][ T5344] Bluetooth: hci2: command tx timeout [ 624.364747][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 624.367941][T12319] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1645'. [ 625.368376][T12334] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 625.440608][T12333] mkiss: ax0: crc mode is auto. [ 625.582822][ T40] audit: type=1400 audit(1726851812.993:2837): avc: denied { map } for pid=12338 comm="syz.3.1650" path="socket:[44245]" dev="sockfs" ino=44245 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 626.032167][T12334] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.124936][ T40] audit: type=1400 audit(1726851813.523:2838): avc: denied { setopt } for pid=12345 comm="syz.0.1652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 626.146675][T12334] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.157602][T12347] netlink: 'syz.0.1652': attribute type 10 has an invalid length. [ 626.175654][T12347] team0: Device ipvlan1 failed to register rx_handler [ 626.247004][T12334] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 626.393510][ T5344] Bluetooth: hci2: command tx timeout [ 626.434915][T12334] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.455598][T12334] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.474951][T12334] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 626.491760][T12334] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 628.019137][T12367] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 628.492725][ T5344] Bluetooth: hci2: command tx timeout [ 628.751968][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 628.758881][ T57] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 628.783740][ T57] hid-generic 0000:0000:0000.0009: hidraw1: HID v0.00 Device [syz0] on syz1 [ 629.396183][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 629.399423][T12397] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1672'. [ 629.990042][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.427481][T12406] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.535740][T12406] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.686363][T12406] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.810596][T12406] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 630.938390][T12406] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.947785][T12406] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.960162][T12406] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 630.970254][T12406] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 631.603906][T12419] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 631.715371][T12427] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1681'. [ 632.332930][ T1290] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0 [ 632.346338][ T1290] hid-generic 0000:0000:0000.000A: hidraw1: HID v0.00 Device [syz0] on syz1 [ 634.920558][T12458] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.079797][T12458] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.171415][T12458] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.306992][T12458] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 635.471340][T12458] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.484776][T12458] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.505501][T12458] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.522326][T12458] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.824033][T12468] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 637.550726][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 637.560454][T12497] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1689'. [ 637.702138][T12500] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1691'. [ 637.803760][T12503] netlink: 'syz.3.1691': attribute type 4 has an invalid length. [ 638.054248][T12512] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.113221][T12516] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 638.188042][T12512] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.271401][T12512] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.363944][T12512] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.536473][T12512] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.556268][T12512] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.570120][T12512] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 638.578431][T12512] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 639.734398][T12536] syz.3.1701: attempt to access beyond end of device [ 639.734398][T12536] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 639.738094][T12536] SQUASHFS error: Failed to read block 0x0: -5 [ 639.739921][T12536] unable to read squashfs_super_block [ 640.569669][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 640.573598][T12542] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1703'. [ 641.737618][T12559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1708'. [ 642.862705][ T40] audit: type=1326 audit(1726851830.273:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12570 comm="syz.1.1711" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0482b7def9 code=0x0 [ 643.314371][T12580] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1714'. [ 643.319224][T12580] futex_wake_op: syz.2.1714 tries to shift op by -1; fix this program [ 644.112013][ T8] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 644.262519][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 644.268571][ T8] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 644.271973][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 644.275246][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 644.278035][ T8] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 644.283892][ T8] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 644.331379][T12594] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1718'. [ 644.362378][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 644.365491][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 644.368289][ T8] usb 5-1: Product: syz [ 644.369767][ T8] usb 5-1: Manufacturer: syz [ 644.371478][ T8] usb 5-1: SerialNumber: syz [ 644.572743][ T40] audit: type=1400 audit(1726851831.983:2840): avc: denied { bind } for pid=12595 comm="syz.3.1719" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 644.659918][ T8] cdc_ncm 5-1:1.0: bind() failure [ 644.671873][ T8] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 644.676913][ T8] cdc_ncm 5-1:1.1: bind() failure [ 644.685199][ T8] usb 5-1: USB disconnect, device number 18 [ 645.237678][T12601] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.336808][T12601] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.589682][T12601] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.673815][T12601] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 645.770657][T12601] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.780702][T12601] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.795596][T12601] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 645.803487][T12601] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 646.776359][T12620] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 646.905684][T12621] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 647.251673][T12628] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1727'. [ 647.261171][T12628] futex_wake_op: syz.2.1727 tries to shift op by -1; fix this program [ 647.292628][ T30] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 647.479546][ T30] usb 6-1: New USB device found, idVendor=05ac, idProduct=0290, bcdDevice=dc.1b [ 647.484213][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 647.509598][ T30] usb 6-1: config 0 descriptor?? [ 647.542374][ T30] input: bcm5974 as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/input/input43 [ 649.263435][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.290286][T12649] bridge_slave_1: left allmulticast mode [ 649.292717][T12649] bridge_slave_1: left promiscuous mode [ 649.298739][T12649] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.304173][T12649] bridge_slave_0: left allmulticast mode [ 649.307124][T12649] bridge_slave_0: left promiscuous mode [ 649.308845][T12649] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.802964][ T57] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 649.806536][ T57] hid-generic 0000:0000:0000.000B: hidraw1: HID v0.00 Device [syz0] on syz1 [ 649.820456][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 650.012222][T12657] syz.3.1734: attempt to access beyond end of device [ 650.012222][T12657] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 650.017864][T12657] SQUASHFS error: Failed to read block 0x0: -5 [ 650.020117][T12657] unable to read squashfs_super_block [ 650.333500][ T40] audit: type=1400 audit(1726851837.733:2841): avc: denied { bind } for pid=12661 comm="syz.2.1735" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 650.356891][ T1290] usb 6-1: USB disconnect, device number 24 [ 650.525807][T12670] Invalid option length (1031570) for dns_resolver key [ 650.654012][T12675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1738'. [ 650.658731][T12675] futex_wake_op: syz.0.1738 tries to shift op by -1; fix this program [ 651.182051][T12677] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1739'. [ 651.571918][ T1290] usb 7-1: new low-speed USB device number 24 using dummy_hcd [ 651.728526][ T1290] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 651.733212][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 651.737023][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 651.740675][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 651.751022][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 651.761135][ T1290] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 651.784234][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 651.788158][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 651.792074][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 651.796457][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 651.806281][ T1290] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 651.810673][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 651.815131][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 651.818982][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 651.823855][ T1290] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 651.838986][ T1290] usb 7-1: string descriptor 0 read error: -22 [ 651.843112][ T1290] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 651.846780][ T1290] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.891314][ T1290] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 652.394269][ T30] usb 7-1: USB disconnect, device number 24 [ 655.071060][T12719] syz.3.1747: attempt to access beyond end of device [ 655.071060][T12719] nbd3: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 655.077910][T12719] EXT4-fs (nbd3): unable to read superblock [ 655.339301][T12728] overlayfs: failed to resolve './file0': -2 [ 655.435076][T12726] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 655.539333][T12735] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1751'. [ 655.596879][T12733] futex_wake_op: syz.0.1751 tries to shift op by -1; fix this program [ 655.704021][T12726] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.030410][T12726] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.323917][T12726] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 656.605671][T12726] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.676859][T12726] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.695268][T12726] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 656.713685][T12726] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 657.146318][T12757] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.340876][T12757] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.350722][T12758] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1756'. [ 657.423233][T12764] syz.2.1757: attempt to access beyond end of device [ 657.423233][T12764] nbd2: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 657.432054][T12764] SQUASHFS error: Failed to read block 0x0: -5 [ 657.436857][T12764] unable to read squashfs_super_block [ 657.490639][T12757] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 657.590716][T12757] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 660.696304][T12757] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.705575][T12757] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.715536][T12757] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 660.727342][T12757] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 661.295805][T12795] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 661.298931][T12795] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 661.711931][ T6640] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 661.953155][ T6640] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 661.956617][ T6640] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.962887][ T6640] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 661.966465][ T6640] usb 7-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 661.971020][ T6640] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 661.979212][ T6640] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 661.983268][ T6640] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 661.986214][ T6640] usb 7-1: Product: syz [ 661.987765][ T6640] usb 7-1: Manufacturer: syz [ 661.995578][ T6640] cdc_wdm 7-1:1.0: skipping garbage [ 661.997581][ T6640] cdc_wdm 7-1:1.0: skipping garbage [ 662.000914][ T6640] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 662.003868][ T6640] cdc_wdm 7-1:1.0: Unknown control protocol [ 662.215615][T12842] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1768'. [ 662.263742][T12845] EXT4-fs (sda1): resizing filesystem from 262144 to 2 blocks [ 662.265744][T12845] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 662.327960][T12842] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 662.452976][ T6640] usb 7-1: USB disconnect, device number 25 [ 663.117631][T12864] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 663.534429][ T40] audit: type=1400 audit(1726851850.943:2842): avc: denied { read } for pid=12866 comm="syz.2.1776" name="btrfs-control" dev="devtmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 663.545626][ T40] audit: type=1400 audit(1726851850.943:2843): avc: denied { open } for pid=12866 comm="syz.2.1776" path="/dev/btrfs-control" dev="devtmpfs" ino=1151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 663.645006][T12873] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.748745][T12873] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.806912][T12873] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 663.919615][T12873] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 664.130890][ T40] audit: type=1400 audit(1726851851.533:2844): avc: denied { nlmsg_write } for pid=12878 comm="syz.2.1779" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 664.445738][T12886] netlink: 'syz.0.1781': attribute type 5 has an invalid length. [ 665.132206][T12873] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.153180][T12873] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.170540][T12873] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.180020][T12873] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 665.623721][T12911] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 665.623721][T12911] The task syz.1.1785 (12911) triggered the difference, watch for misbehavior. [ 666.763916][ T40] audit: type=1400 audit(1726851854.173:2845): avc: denied { ioctl } for pid=12934 comm="syz.0.1791" path="/dev/input/mice" dev="devtmpfs" ino=862 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 667.325484][T12943] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.514188][T12949] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 667.596328][T12950] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.721182][T12950] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.795596][T12950] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 667.924758][T12950] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.039871][T12950] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.052579][T12950] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.064952][T12950] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.082824][T12950] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 668.744434][ T1290] usb 5-1: new low-speed USB device number 19 using dummy_hcd [ 668.895303][ T1290] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 668.899783][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 668.903733][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 668.907498][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 668.913072][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 668.919418][ T1290] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 668.924608][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 668.928015][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 668.931034][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 668.934011][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 668.938480][ T1290] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 668.940570][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 668.943457][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 668.946122][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 668.949161][ T1290] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 668.959895][ T1290] usb 5-1: string descriptor 0 read error: -22 [ 668.961759][ T1290] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 668.964183][ T1290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.978117][ T1290] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 669.219051][ T30] usb 5-1: USB disconnect, device number 19 [ 669.561929][T12969] input: syz1 as /devices/virtual/input/input44 [ 670.696422][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.699938][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 670.703315][T12984] bridge0: left promiscuous mode [ 670.704840][T12984] bridge0: left allmulticast mode [ 670.742476][T12984] bridge_slave_1: left allmulticast mode [ 670.743964][T12984] bridge_slave_1: left promiscuous mode [ 670.747317][T12984] bridge0: port 2(bridge_slave_1) entered disabled state [ 670.755979][T12984] bridge_slave_0: left allmulticast mode [ 670.757686][T12984] bridge_slave_0: left promiscuous mode [ 670.759347][T12984] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.299913][T12996] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.379913][T12996] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.385086][T12999] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 671.419100][ T40] audit: type=1400 audit(1726851858.823:2846): avc: denied { append } for pid=12998 comm="syz.0.1809" name="rtc0" dev="devtmpfs" ino=867 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 671.435296][T12996] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.538557][T12996] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 671.726797][T12996] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.748172][T12996] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.770476][T12996] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 671.790427][T12996] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 673.139594][ T9135] hid-generic 0000:0000:0000.000C: unknown main item tag 0x0 [ 673.147179][ T9135] hid-generic 0000:0000:0000.000C: hidraw1: HID v0.00 Device [syz0] on syz1 [ 673.161523][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 673.801944][ T5405] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 673.836654][T13039] input: syz1 as /devices/virtual/input/input45 [ 673.869266][T13035] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.871398][T13035] bridge0: port 1(bridge_slave_0) entered disabled state [ 673.875990][T13035] bridge0: left promiscuous mode [ 673.877421][T13035] bridge0: left allmulticast mode [ 673.904101][T13035] bridge_slave_1: left allmulticast mode [ 673.908231][T13035] bridge_slave_1: left promiscuous mode [ 673.910503][T13035] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.922498][T13035] bridge_slave_0: left allmulticast mode [ 673.926205][T13035] bridge_slave_0: left promiscuous mode [ 673.928027][T13035] bridge0: port 1(bridge_slave_0) entered disabled state [ 674.029187][ T5405] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 674.032753][ T5405] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 674.042038][ T5405] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 674.050297][ T5405] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 674.062115][ T5405] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 674.078496][ T5405] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 674.087885][ T5405] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 674.091011][ T5405] usb 6-1: Product: syz [ 674.092843][ T5405] usb 6-1: Manufacturer: syz [ 674.102578][ T5405] cdc_wdm 6-1:1.0: skipping garbage [ 674.108467][ T5405] cdc_wdm 6-1:1.0: skipping garbage [ 674.114591][ T5405] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 674.116181][ T5405] cdc_wdm 6-1:1.0: Unknown control protocol [ 674.572870][ T5405] usb 6-1: USB disconnect, device number 25 [ 674.746727][T13050] kvm: pic: non byte read [ 674.748800][T13050] kvm: pic: non byte read [ 674.750825][T13050] kvm: pic: non byte read [ 674.754088][T13050] kvm: pic: non byte read [ 674.756190][T13050] kvm: pic: non byte read [ 674.758063][T13050] kvm: pic: level sensitive irq not supported [ 674.758325][T13050] kvm: pic: non byte read [ 674.762140][T13050] kvm: pic: non byte read [ 674.764095][T13050] kvm: pic: non byte read [ 675.694405][ T9135] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 675.709962][ T9135] hid-generic 0000:0000:0000.000D: hidraw1: HID v0.00 Device [syz0] on syz1 [ 675.739075][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 676.295132][T13081] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 676.665990][T13092] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 677.072275][ T40] audit: type=1400 audit(1726851864.483:2847): avc: denied { name_bind } for pid=13098 comm="syz.3.1833" src=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 685.645315][ T5359] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 685.653237][ T5359] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 685.657675][ T5359] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 685.662896][ T5359] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 685.665841][ T5359] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 685.668910][ T5359] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 685.732046][ T1290] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 685.832585][T13111] chnl_net:caif_netlink_parms(): no params data found [ 685.909012][ T1290] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 685.922459][ T1290] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.925895][ T1290] usb 6-1: Product: syz [ 685.927429][ T1290] usb 6-1: Manufacturer: syz [ 685.930268][ T1290] usb 6-1: SerialNumber: syz [ 685.939518][ T1290] usb 6-1: config 0 descriptor?? [ 686.020689][T13111] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.024367][T13111] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.027166][T13111] bridge_slave_0: entered allmulticast mode [ 686.030233][T13111] bridge_slave_0: entered promiscuous mode [ 686.036595][T13111] bridge0: port 2(bridge_slave_1) entered blocking state [ 686.039790][T13111] bridge0: port 2(bridge_slave_1) entered disabled state [ 686.043031][T13111] bridge_slave_1: entered allmulticast mode [ 686.047039][T13111] bridge_slave_1: entered promiscuous mode [ 686.114512][T13111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 686.121200][T13111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 686.206375][T13111] team0: Port device team_slave_0 added [ 686.210238][T13111] team0: Port device team_slave_1 added [ 686.249078][T13111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 686.250966][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.258379][T13111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 686.263457][T13111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 686.265287][T13111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 686.272674][T13111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 686.341132][T13111] hsr_slave_0: entered promiscuous mode [ 686.346614][T13111] hsr_slave_1: entered promiscuous mode [ 686.349274][T13111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 686.352588][T13111] Cannot create hsr debugfs directory [ 686.354397][ T1290] usb 6-1: Firmware version (0.0) predates our first public release. [ 686.357424][ T1290] usb 6-1: Please update to version 0.2 or newer [ 686.433754][ T1290] usb 6-1: USB disconnect, device number 26 [ 686.537839][T13111] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.673567][T13111] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.810029][T13111] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 686.867086][T13111] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 687.098386][T13111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 687.103825][T13111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 687.116343][T13111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 687.130440][T13111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 687.322141][T13111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.337123][T13111] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.358846][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.361193][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.380717][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.383551][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.619511][T13111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.655838][T13111] veth0_vlan: entered promiscuous mode [ 687.664068][T13111] veth1_vlan: entered promiscuous mode [ 687.689980][T13111] veth0_macvtap: entered promiscuous mode [ 687.694464][T13111] veth1_macvtap: entered promiscuous mode [ 687.713436][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.716158][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.718916][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.722668][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.725379][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.728178][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.730785][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.733538][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.736062][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.738979][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.742272][ T5344] Bluetooth: hci6: command tx timeout [ 687.745153][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 687.748544][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.753376][T13111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.781284][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.786683][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.789981][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.795082][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.798505][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.813310][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.816790][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.820433][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.823490][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.827020][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.829697][T13111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 687.833738][T13111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 687.837583][T13111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 687.847656][T13111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.849901][T13111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.852915][T13111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.855300][T13111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 687.943337][ T9796] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.945872][ T9796] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.995373][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.997856][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.019848][ T40] audit: type=1400 audit(1726851875.423:2848): avc: denied { write } for pid=13144 comm="syz.2.1843" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 688.036217][ T40] audit: type=1400 audit(1726851875.423:2849): avc: denied { open } for pid=13144 comm="syz.2.1843" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 688.048565][ T40] audit: type=1400 audit(1726851875.443:2850): avc: denied { read } for pid=13144 comm="syz.2.1843" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 688.145262][T13152] overlayfs: missing 'workdir' [ 688.953840][ T35] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 689.117088][ T35] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 689.121329][ T35] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.126161][ T35] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 689.142325][ T35] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 689.151103][ T35] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 689.166679][ T35] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 689.169272][ T35] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 689.171259][ T35] usb 5-1: Product: syz [ 689.173213][ T35] usb 5-1: Manufacturer: syz [ 689.185775][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 689.191350][ T35] cdc_wdm 5-1:1.0: skipping garbage [ 689.199699][ T35] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 689.201490][ T35] cdc_wdm 5-1:1.0: Unknown control protocol [ 689.670737][ T830] usb 5-1: USB disconnect, device number 20 [ 689.847735][T13178] usb usb8: usbfs: process 13178 (syz.3.1850) did not claim interface 0 before use [ 690.105668][ T5344] Bluetooth: hci6: command tx timeout [ 691.439264][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 692.098509][T13206] netlink: 'syz.2.1857': attribute type 5 has an invalid length. [ 692.126198][T13206] : entered promiscuous mode [ 692.144367][ T5344] Bluetooth: hci6: command tx timeout [ 692.201148][T13206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1857'. [ 692.272603][T13212] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1864'. [ 692.422436][ T10] usb 6-1: new low-speed USB device number 27 using dummy_hcd [ 692.482422][ T8] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 692.611576][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 692.616043][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 692.619609][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 692.631292][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 692.635388][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 692.707567][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 692.709051][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 692.763937][T13216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1859'. [ 692.767800][ T8] usb 7-1: config index 0 descriptor too short (expected 156, got 27) [ 692.769941][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 692.777001][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 692.779381][ T8] usb 7-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 692.782684][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 692.785576][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 692.790374][ T8] usb 7-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 692.791048][ T10] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 692.795598][ T8] usb 7-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 692.799075][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 692.803185][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt [ 692.807817][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 692.811386][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 692.812770][ T40] audit: type=1400 audit(1726851880.223:2851): avc: denied { read } for pid=13214 comm="syz.0.1859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 692.832001][ T8] usb 7-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 692.835779][ T10] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 692.838443][ T8] usb 7-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 692.840776][ T8] usb 7-1: Product: syz [ 692.846219][ T8] usb 7-1: Manufacturer: syz [ 692.847717][ T8] usb 7-1: SerialNumber: syz [ 692.862474][ T10] usb 6-1: string descriptor 0 read error: -22 [ 692.870350][ T8] usb 7-1: config 0 descriptor?? [ 692.872255][ T10] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 692.874589][ T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 692.883329][ T8] ldusb 7-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 692.897922][ T8] ldusb 7-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 692.905433][ T40] audit: type=1400 audit(1726851880.313:2852): avc: denied { write } for pid=13214 comm="syz.0.1859" name="card2" dev="devtmpfs" ino=641 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 692.912212][ T10] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 693.089469][T11527] usb 7-1: USB disconnect, device number 26 [ 693.092317][T11527] ldusb 7-1:0.0: LD USB Device #0 now disconnected [ 693.154188][ T30] usb 6-1: USB disconnect, device number 27 [ 693.263231][ T5344] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 693.266651][ T5344] Bluetooth: hci2: Injecting HCI hardware error event [ 693.271149][ T5344] Bluetooth: hci2: hardware error 0x00 [ 693.695864][ T40] audit: type=1400 audit(1726851881.103:2853): avc: denied { mount } for pid=13228 comm="syz.0.1862" name="/" dev="bdev" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bdev_t tclass=filesystem permissive=1 [ 694.221865][ T5359] Bluetooth: hci6: command tx timeout [ 695.362360][ T5344] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 695.428812][T13263] binder: 13261:13263 ioctl c0306201 0 returned -14 [ 695.441963][T13263] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 695.444501][T13263] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1869'. [ 695.864701][T13269] overlayfs: failed to resolve './file0': -2 [ 697.568785][ T40] audit: type=1400 audit(1726851884.973:2854): avc: denied { bind } for pid=13288 comm="syz.3.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 697.591955][ T10] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 697.803034][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 697.805453][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 697.808171][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 697.811119][ T10] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xF7, changing to 0x87 [ 697.814378][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 697.821383][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 697.824506][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 697.826770][ T10] usb 5-1: Product: syz [ 697.828134][ T10] usb 5-1: Manufacturer: syz [ 697.841596][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 697.843178][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 697.850045][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 697.851874][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 698.338923][ T10] usb 5-1: USB disconnect, device number 21 [ 698.358637][T13295] netlink: 'syz.1.1880': attribute type 3 has an invalid length. [ 698.512390][ T5385] IPVS: starting estimator thread 0... [ 698.602153][T13302] IPVS: using max 37 ests per chain, 88800 per kthread [ 700.081819][ T5405] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 700.233768][ T5405] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 700.236219][ T5405] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.242777][ T5405] usb 5-1: config 0 descriptor?? [ 700.245728][ T5405] cp210x 5-1:0.0: cp210x converter detected [ 700.291547][T13330] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1888'. [ 700.300338][T13330] : entered promiscuous mode [ 700.569129][T13335] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1890'. [ 700.577097][T13335] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1890'. [ 700.581463][ T40] audit: type=1400 audit(1726851887.983:2855): avc: denied { bind } for pid=13334 comm="syz.1.1890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 700.669694][T13323] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1887'. [ 700.697560][ T5405] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 700.886879][ T5405] cp210x 5-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 700.903211][ T5405] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 700.962424][ T5405] usb 5-1: cp210x converter now attached to ttyUSB0 [ 700.980553][ T5405] usb 5-1: USB disconnect, device number 22 [ 701.023202][T13348] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 701.090038][ T5405] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 701.134414][ T5405] cp210x 5-1:0.0: device disconnected [ 701.399273][ T40] audit: type=1400 audit(1726851888.803:2856): avc: denied { mount } for pid=13352 comm="syz.2.1895" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 702.350142][T13367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1899'. [ 702.823775][T13376] fuse: Bad value for 'fd' [ 703.549313][ T40] audit: type=1400 audit(1726851890.953:2857): avc: denied { write } for pid=13385 comm="syz.0.1904" lport=42847 faddr=::ffff:10.1.1.1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 703.642276][T13379] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 703.644675][T13379] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 703.649600][T13379] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 703.768868][T13392] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1905'. [ 703.820062][T13395] fuse: Unknown parameter '0x0000000000000009' [ 704.456778][ T40] audit: type=1400 audit(1726851891.863:2858): avc: denied { read } for pid=13396 comm="syz.3.1907" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 704.465128][ T40] audit: type=1400 audit(1726851891.873:2859): avc: denied { open } for pid=13396 comm="syz.3.1907" path="/dev/autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 705.103986][ T5344] Bluetooth: hci6: command 0x0405 tx timeout [ 705.211853][ T40] audit: type=1326 audit(1726851892.513:2860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13406 comm="syz.0.1910" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f337117def9 code=0x0 [ 705.254164][ T40] audit: type=1400 audit(1726851892.663:2861): avc: denied { read } for pid=13406 comm="syz.0.1910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 705.403457][T13414] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1911'. [ 705.454710][T13416] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 705.457450][T13416] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 707.181823][ T5344] Bluetooth: hci6: command 0x0405 tx timeout [ 708.343264][T13465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1921'. [ 708.365389][T13467] x_tables: duplicate underflow at hook 2 [ 708.842917][ T40] audit: type=1400 audit(1726851896.253:2862): avc: denied { getopt } for pid=13470 comm="syz.1.1924" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 709.140302][T13466] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 709.471371][T13482] netlink: 'syz.0.1926': attribute type 7 has an invalid length. [ 709.566560][T13482] serio: Serial port ttynull [ 709.622242][T13506] binder: 13489:13506 ioctl c0306201 0 returned -14 [ 710.622170][ T5344] Bluetooth: hci6: command 0x0405 tx timeout [ 711.698967][ T40] audit: type=1326 audit(1726851899.103:2863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13530 comm="syz.2.1935" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a88d7def9 code=0x0 [ 711.847006][T13535] syz_tun: entered promiscuous mode [ 711.850447][T13535] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1935'. [ 711.855295][T13535] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1935'. [ 712.530279][T13530] syz_tun: left promiscuous mode [ 712.712322][ T5359] Bluetooth: hci6: command 0x0405 tx timeout [ 712.963994][ T5359] Bluetooth: hci6: unexpected event for opcode 0x0c1b [ 713.290886][T13553] 9pnet_fd: Insufficient options for proto=fd [ 713.784561][ T40] audit: type=1400 audit(1726851901.193:2864): avc: denied { bind } for pid=13565 comm="syz.1.1946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 713.799975][ T1290] IPVS: starting estimator thread 0... [ 713.911898][T13569] IPVS: using max 36 ests per chain, 86400 per kthread [ 715.231903][ T5405] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 715.411840][ T5405] usb 7-1: Using ep0 maxpacket: 8 [ 715.415912][ T5405] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 715.419766][ T5405] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 715.423633][ T5405] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 715.427279][ T5405] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 715.432029][ T5405] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 715.435716][ T5405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 715.591352][ T40] audit: type=1326 audit(1726851902.993:2865): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13596 comm="syz.0.1953" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f337117def9 code=0x0 [ 715.657815][ T5405] usb 7-1: usb_control_msg returned -32 [ 715.660882][ T5405] usbtmc 7-1:16.0: can't read capabilities [ 715.680775][ T5405] usb 7-1: USB disconnect, device number 27 [ 717.045811][T13620] Bluetooth: MGMT ver 1.23 [ 717.835374][ T40] audit: type=1400 audit(1726851905.243:2866): avc: denied { create } for pid=13629 comm="syz.0.1960" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 717.948559][ T40] audit: type=1400 audit(1726851905.353:2867): avc: denied { read } for pid=13640 comm="syz.1.1962" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 718.262007][ T5406] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 718.468003][ T5406] usb 6-1: Using ep0 maxpacket: 32 [ 718.491094][ T5406] usb 6-1: config 0 has no interfaces? [ 718.492793][ T5406] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 718.495543][ T5406] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.521280][ T5406] usb 6-1: config 0 descriptor?? [ 719.839067][T13664] netlink: 'syz.3.1966': attribute type 4 has an invalid length. [ 720.837432][T13681] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1971'. [ 720.889087][ T40] audit: type=1400 audit(1726851908.293:2868): avc: denied { ioctl } for pid=13682 comm="syz.0.1972" path="socket:[50887]" dev="sockfs" ino=50887 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 720.929759][ T8] usb 6-1: USB disconnect, device number 28 [ 721.899769][T13701] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1976'. [ 722.751827][ T5405] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 722.921856][ T5405] usb 5-1: Using ep0 maxpacket: 8 [ 722.926845][ T5405] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 722.929926][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 722.935492][ T5405] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 722.939601][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 722.958611][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 722.972561][ T5405] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 722.976955][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 722.981192][ T5405] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 722.986372][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 722.990269][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 722.996476][ T5405] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 723.068361][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 723.072453][ T5405] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 723.076797][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 723.080986][ T5405] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 723.089431][ T5405] usb 5-1: string descriptor 0 read error: -22 [ 723.091861][ T5405] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 723.094363][ T5405] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.107759][ T5405] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 723.116582][T13719] misc userio: Can't change port type on an already running userio instance [ 723.301429][ T40] audit: type=1400 audit(1726851910.703:2869): avc: denied { bind } for pid=13718 comm="syz.2.1980" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 723.338714][ T5405] usb 5-1: USB disconnect, device number 23 [ 723.549458][T13711] overlayfs: failed to resolve './file1': -2 [ 724.435608][T13738] team_slave_0: entered allmulticast mode [ 724.778628][ T40] audit: type=1400 audit(1726851912.183:2870): avc: denied { connect } for pid=13746 comm="syz.1.1987" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 725.020978][ T40] audit: type=1400 audit(1726851912.423:2871): avc: denied { execmem } for pid=13753 comm="syz.1.1989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 725.589348][ T40] audit: type=1400 audit(1726851912.993:2872): avc: denied { map } for pid=13758 comm="syz.2.1990" path="pipe:[53096]" dev="pipefs" ino=53096 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 726.868528][ T40] audit: type=1326 audit(1726851914.273:2873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 726.897520][ T40] audit: type=1326 audit(1726851914.273:2874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 726.921973][ T40] audit: type=1326 audit(1726851914.283:2875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 726.932315][ T40] audit: type=1326 audit(1726851914.283:2876): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 726.941530][ T40] audit: type=1326 audit(1726851914.283:2877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 726.949200][ T40] audit: type=1326 audit(1726851914.283:2878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 726.958470][ T40] audit: type=1326 audit(1726851914.283:2879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 726.967750][ T40] audit: type=1326 audit(1726851914.293:2880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 726.983376][ T40] audit: type=1326 audit(1726851914.293:2881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 727.012775][ T40] audit: type=1326 audit(1726851914.293:2882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13773 comm="syz.1.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0482b7def9 code=0x7ffc0000 [ 728.375529][T13808] syz.3.1998 (13808): drop_caches: 2 [ 728.491054][T13809] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 728.896113][T13820] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2005'. [ 729.359699][T13824] dvmrp0: entered allmulticast mode [ 729.905190][T13831] program syz.1.2007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 729.985728][T13831] bond0: entered promiscuous mode [ 729.988325][T13831] bond_slave_0: entered promiscuous mode [ 729.994426][T13831] bond_slave_1: entered promiscuous mode [ 730.620558][T13837] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 730.923064][T13865] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13865 comm=syz.0.2018 [ 731.701587][T13885] input: syz0 as /devices/virtual/input/input53 [ 731.907358][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 731.907377][ T40] audit: type=1400 audit(1726851919.313:2943): avc: denied { unmount } for pid=9182 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 731.967464][T13894] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2024'. [ 732.301924][ T5359] Bluetooth: hci6: command 0x0405 tx timeout [ 732.812020][T13911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.844777][T13911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 732.859673][T13911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 733.184301][T13915] block nbd3: shutting down sockets [ 733.511968][ T40] audit: type=1400 audit(1726851920.913:2944): avc: denied { accept } for pid=13918 comm="syz.1.2032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 733.804880][T13928] netlink: 'syz.0.2033': attribute type 4 has an invalid length. [ 733.820797][T13928] netlink: 'syz.0.2033': attribute type 4 has an invalid length. [ 734.173226][T13930] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2034'. [ 734.333174][ T40] audit: type=1400 audit(1726851921.663:2945): avc: denied { append } for pid=13932 comm="syz.0.2035" name="cgroup.controllers" dev="9p" ino=42081083 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 734.377824][T13936] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 734.703077][ T40] audit: type=1400 audit(1726851922.113:2946): avc: denied { unmount } for pid=13934 comm="syz.2.2037" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 735.326176][ T40] audit: type=1326 audit(1726851922.733:2947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13945 comm="syz.2.2040" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5a88d7def9 code=0x0 [ 735.801196][T13956] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2042'. [ 735.815715][ T40] audit: type=1400 audit(1726851923.223:2948): avc: denied { listen } for pid=13955 comm="syz.1.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 736.133204][ T40] audit: type=1400 audit(1726851923.533:2949): avc: denied { map } for pid=13960 comm="syz.1.2044" path="socket:[55349]" dev="sockfs" ino=55349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 736.669497][T13971] Process accounting resumed [ 736.951890][ T6640] usb 7-1: new full-speed USB device number 28 using dummy_hcd [ 737.115764][ T6640] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 737.122057][ T6640] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 737.126105][ T6640] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 65535, setting to 64 [ 737.130089][ T6640] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 737.142561][ T6640] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.153287][T13976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 737.156301][T13976] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 737.169299][ T6640] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 737.377207][ T40] audit: type=1400 audit(1726851924.783:2950): avc: denied { create } for pid=13975 comm="syz.2.2047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 737.383034][ T5385] usb 7-1: USB disconnect, device number 28 [ 737.976160][T13997] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2053'. [ 738.049972][T13997] binder: BINDER_SET_CONTEXT_MGR already set [ 738.055494][T13997] binder: 13996:13997 ioctl 4018620d 200001c0 returned -16 [ 738.312446][T11527] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 738.484057][T11527] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 738.486920][T11527] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 738.497788][T11527] usb 7-1: New USB device found, idVendor=44b7, idProduct=0000, bcdDevice= 0.00 [ 738.500956][T11527] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 738.503750][T11527] usb 7-1: SerialNumber: syz [ 738.545109][T14002] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.2054'. [ 738.776732][T11527] usb 7-1: USB disconnect, device number 29 [ 739.638888][T14027] input: syz1 as /devices/virtual/input/input55 [ 739.860887][T14035] pim6reg1: entered promiscuous mode [ 739.863639][T14035] pim6reg1: entered allmulticast mode [ 740.543702][ T40] audit: type=1400 audit(1726851927.953:2951): avc: denied { ioctl } for pid=14043 comm="syz.3.2066" path="socket:[55487]" dev="sockfs" ino=55487 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 740.620917][ T40] audit: type=1400 audit(1726851928.023:2952): avc: denied { getopt } for pid=14049 comm="syz.2.2067" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 740.935550][T14062] binder: 14059:14062 ioctl c0306201 0 returned -14 [ 741.665735][T14072] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2071'. [ 742.014694][T14074] ALSA: mixer_oss: invalid OSS volume '' [ 742.016728][T14074] ALSA: mixer_oss: invalid OSS volume 'oʎUQmr5!A,(R' [ 742.019040][T14074] ALSA: mixer_oss: invalid OSS volume 's^YUIxj13멊x8s!bFK.' [ 742.022798][T14074] ALSA: mixer_oss: invalid OSS volume 'n"}R-UԓMQ6"gaDΨ' [ 742.027296][T14074] ALSA: mixer_oss: invalid OSS volume '{Ԕ46BAܢ' [ 742.031374][T14074] ALSA: mixer_oss: invalid OSS volume '' [ 742.034385][T14074] ALSA: mixer_oss: invalid OSS volume '>$RX*_>5Z5h#oF' [ 742.037524][T14074] ALSA: mixer_oss: invalid OSS volume 'l怑~qp݄MB' [ 742.040482][T14074] ALSA: mixer_oss: invalid OSS volume 'rJū;3l^PV:Eʡ+Ai' [ 742.047339][T14074] ALSA: mixer_oss: invalid OSS volume '@m}%LLuCӄ۵I[lu' [ 742.050464][T14074] ALSA: mixer_oss: invalid OSS volume '18χ2^r%]*.).' [ 742.054240][T14074] ALSA: mixer_oss: invalid OSS volume '!?tF},og^@̰j' [ 742.056638][T14074] ALSA: mixer_oss: invalid OSS volume 'T-zr;^Pyz*\ ' [ 742.059313][T14074] ALSA: mixer_oss: invalid OSS volume '&TK !wJr>lG' [ 742.065813][T14074] ALSA: mixer_oss: invalid OSS volume 'Q@' [ 742.068029][T14074] ALSA: mixer_oss: invalid OSS volume 'I w5PLt[s8mB]S3' [ 742.070256][T14074] ALSA: mixer_oss: invalid OSS volume '}^Z`Ȇ-rlc`D&' [ 742.073287][T14074] ALSA: mixer_oss: invalid OSS volume '؏Ł3ÄΓ.n[Sn<m^]ei' [ 742.076088][T14074] ALSA: mixer_oss: invalid OSS volume ' p{<' [ 742.282024][ T40] audit: type=1400 audit(1726851929.683:2953): avc: denied { write } for pid=14083 comm="syz.2.2076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 742.301859][T14088] sctp: [Deprecated]: syz.2.2076 (pid 14088) Use of struct sctp_assoc_value in delayed_ack socket option. [ 742.301859][T14088] Use struct sctp_sack_info instead [ 742.312415][T14087] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 742.622492][ T5405] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 743.072236][ T5405] usb 7-1: Using ep0 maxpacket: 32 [ 743.116837][T14095] syz.3.2079: attempt to access beyond end of device [ 743.116837][T14095] nbd3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 743.122271][T14095] SQUASHFS error: Failed to read block 0x0: -5 [ 743.124744][T14095] unable to read squashfs_super_block [ 743.151908][ T5405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 743.154900][ T5405] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 743.158204][ T5405] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 743.161344][ T5405] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 743.195700][ T5405] usb 7-1: config 0 descriptor?? [ 744.356868][T14118] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 744.618360][ T40] audit: type=1400 audit(1726851932.023:2954): avc: denied { bind } for pid=14121 comm="syz.0.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 745.337853][ T5405] usbhid 7-1:0.0: can't add hid device: -71 [ 745.344772][ T5405] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 745.351655][ T40] audit: type=1326 audit(1726851932.753:2955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14135 comm="syz.0.2087" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f337117def9 code=0x0 [ 745.360016][ T5405] usb 7-1: USB disconnect, device number 30 [ 745.765662][T14146] zonefs (nullb0) ERROR: Not a zoned block device [ 745.784983][T14146] nftables ruleset with unbound set [ 746.188792][T14155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 746.662815][T14164] netlink: 'syz.3.2094': attribute type 2 has an invalid length. [ 746.665342][T14164] netlink: 'syz.3.2094': attribute type 1 has an invalid length. [ 747.047339][T14172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2097'. [ 747.053502][T14172] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 747.065510][T14172] CIFS mount error: No usable UNC path provided in device string! [ 747.065510][T14172] [ 747.068836][T14172] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 749.001826][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 749.018331][T14203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2105'. [ 749.024849][T14203] netlink: 9 bytes leftover after parsing attributes in process `syz.1.2105'. [ 749.031354][T14203] gretap0: entered promiscuous mode [ 749.052765][T14203] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2105'. [ 749.056806][T14203] 0XD: renamed from gretap0 [ 749.063740][T14203] 0XD: left promiscuous mode [ 749.065597][T14203] 0XD: entered allmulticast mode [ 749.070079][T14203] A link change request failed with some changes committed already. Interface 30XD may have been left with an inconsistent configuration, please check. [ 749.151812][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 749.156278][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 749.159737][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 749.164002][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 749.167779][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 749.172798][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 749.176134][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.219214][ T40] audit: type=1326 audit(1726851936.623:2956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14204 comm="syz.3.2106" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1bd457def9 code=0x0 [ 749.441410][ T10] usb 7-1: GET_CAPABILITIES returned 0 [ 749.447400][ T10] usbtmc 7-1:16.0: can't read capabilities [ 749.663028][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.666259][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.669692][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.673042][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.685860][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.689200][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.692341][ C3] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.697396][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.701797][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.705452][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.716418][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.719943][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.723364][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.729593][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.733370][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.736626][ C2] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 749.745497][T11571] usb 7-1: USB disconnect, device number 31 [ 750.502456][T11527] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 750.652358][T11527] usb 5-1: Using ep0 maxpacket: 8 [ 750.656481][T11527] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 750.659286][T11527] usb 5-1: config 0 has no interface number 0 [ 750.661493][T11527] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 750.692581][T11527] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 750.695875][T11527] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 750.700488][T11527] usb 5-1: config 0 descriptor?? [ 750.721592][T11527] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 750.938288][T11527] usb 5-1: USB disconnect, device number 24 [ 750.944444][T11527] iowarrior 5-1:0.1: I/O-Warror #0 now disconnected [ 752.865356][ T1382] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.942440][T14266] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 753.463141][T14273] Process accounting resumed [ 754.034373][T14301] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=14301 comm=syz.2.2135 [ 755.219372][T14317] can: request_module (can-proto-4) failed. [ 756.312951][T14330] Process accounting resumed [ 756.468354][T14346] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.2146'. [ 757.938608][T14374] usb usb8: usbfs: process 14374 (syz.0.2151) did not claim interface 0 before use [ 757.949226][ T40] audit: type=1400 audit(1726851945.353:2957): avc: denied { nlmsg_write } for pid=14365 comm="syz.1.2159" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 758.840362][T14388] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2155'. [ 759.169254][T14382] Process accounting resumed [ 759.417154][T14399] netlink: 'syz.1.2160': attribute type 5 has an invalid length. [ 759.454824][T14399] : entered promiscuous mode [ 759.500096][T14399] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2160'. [ 759.583960][T14401] REISERFS warning (device nullb0): sh-2021 reiserfs_fill_super: can not find reiserfs on nullb0 [ 760.189712][T14394] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x881 pfn:0x3beb0 [ 760.194800][T14394] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 760.197378][T14394] raw: 00fff00000000000 ffffea0000f05f48 ffffea0000efac48 0000000000000000 [ 760.200518][T14394] raw: 0000000000000881 0000000000000000 00000000ffffffff 0000000000000000 [ 760.220673][T14394] page dumped because: VM_BUG_ON_FOLIO(((unsigned int) folio_ref_count(folio) + 127u <= 127u)) [ 760.224475][T14394] page_owner tracks the page as freed [ 760.227045][T14394] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 14397, tgid 14396 (syz.0.2158), ts 759378148501, free_ts 760129025324 [ 760.233571][T14394] post_alloc_hook+0x2d1/0x350 [ 760.235313][T14394] get_page_from_freelist+0x1351/0x2e50 [ 760.237293][T14394] __alloc_pages_noprof+0x22b/0x2460 [ 760.240017][T14394] alloc_pages_mpol_noprof+0x275/0x610 [ 760.242037][T14394] folio_alloc_mpol_noprof+0x36/0xd0 [ 760.244050][T14394] shmem_alloc_folio+0x135/0x160 [ 760.245861][T14394] shmem_alloc_and_add_folio+0x19c/0xce0 [ 760.247848][T14394] shmem_get_folio_gfp+0xa62/0x15e0 [ 760.249699][T14394] shmem_fault+0x1ff/0xae0 [ 760.251299][T14394] __do_fault+0x10a/0x490 [ 760.252933][T14394] __handle_mm_fault+0x3d94/0x5650 [ 760.254945][T14394] handle_mm_fault+0x498/0xa60 [ 760.256728][T14394] __get_user_pages+0x475/0x15c0 [ 760.258589][T14394] populate_vma_page_range+0x27f/0x3a0 [ 760.260583][T14394] __mm_populate+0x1d6/0x380 [ 760.262332][T14394] vm_mmap_pgoff+0x293/0x360 [ 760.264015][T14394] page last free pid 14401 tgid 14396 stack trace: [ 760.266469][T14394] free_unref_folios+0x9e9/0x1390 [ 760.268249][T14394] folios_put_refs+0x560/0x760 [ 760.269996][T14394] shmem_undo_range+0x5a1/0x1160 [ 760.272027][T14394] shmem_evict_inode+0x3a3/0xba0 [ 760.273899][T14394] evict+0x409/0x970 [ 760.275468][T14394] iput.part.0+0x5cf/0x820 [ 760.277304][T14394] iput+0x62/0x80 [ 760.278631][T14394] dentry_unlink_inode+0x29c/0x480 [ 760.280506][T14394] __dentry_kill+0x1d0/0x600 [ 760.282182][T14394] dput.part.0+0x4b1/0x9b0 [ 760.283788][T14394] dput+0x1f/0x30 [ 760.285172][T14394] __fput+0x513/0xb60 [ 760.286653][T14394] task_work_run+0x14e/0x250 [ 760.288562][T14394] do_exit+0xaa3/0x2bb0 [ 760.290125][T14394] do_group_exit+0xd3/0x2a0 [ 760.291880][T14394] get_signal+0x25fb/0x2770 [ 760.293927][T14394] ------------[ cut here ]------------ [ 760.295895][T14394] kernel BUG at include/linux/mm.h:1460! [ 760.298001][T14394] Oops: invalid opcode: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 760.301294][T14394] CPU: 0 UID: 0 PID: 14394 Comm: syz.2.2157 Not tainted 6.11.0-syzkaller-03917-ga940d9a43e62 #0 [ 760.305990][T14394] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 760.309999][T14394] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 760.312691][T14394] Code: b0 8b 48 89 df e8 c2 b0 48 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 82 2f 04 fd 48 c7 c6 00 ba b0 8b 4c 89 e7 e8 a3 b0 48 fd 90 <0f> 0b e8 6b 2f 04 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 760.319436][T14394] RSP: 0018:ffffc90005c86fc8 EFLAGS: 00010293 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 760.321600][T14394] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 760.324586][T14394] RDX: ffff88804cd74880 RSI: ffffffff848814ed RDI: ffff88804cd74cc4 [ 760.327346][T14394] RBP: ffffea0000efac34 R08: 0000000000000001 R09: fffffbfff2d3a913 [ 760.330004][T14394] R10: ffffffff969d489f R11: 1ffffffff1bb8bf1 R12: ffffea0000efac00 [ 760.332788][T14394] R13: ffff888023b98000 R14: 0000000000001000 R15: 0000000000001000 [ 760.335582][T14394] FS: 0000555590320500(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 760.338686][T14394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.341019][T14394] CR2: 0000001b308c4ff8 CR3: 000000004a02a000 CR4: 0000000000350ef0 [ 760.343783][T14394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 760.346545][T14394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 760.349283][T14394] Call Trace: [ 760.350512][T14394] [ 760.351583][T14394] ? show_regs+0x8c/0xa0 [ 760.353170][T14394] ? die+0x36/0xa0 [ 760.354569][T14394] ? do_trap+0x232/0x430 [ 760.356094][T14394] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 760.358235][T14394] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 760.360432][T14394] ? do_error_trap+0xf4/0x230 [ 760.362230][T14394] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 760.364566][T14394] ? handle_invalid_op+0x34/0x40 [ 760.366424][T14394] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 760.368556][T14394] ? exc_invalid_op+0x2e/0x50 [ 760.370235][T14394] ? asm_exc_invalid_op+0x1a/0x20 [ 760.371769][T14394] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 760.373752][T14394] ? __iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 760.376145][T14394] ? __iov_iter_get_pages_alloc+0x1d1d/0x2240 [ 760.378344][T14394] ? __pfx___iov_iter_get_pages_alloc+0x10/0x10 [ 760.380543][T14394] ? radix_tree_node_alloc.constprop.0+0x1b8/0x350 [ 760.382808][T14394] ? delete_node+0x207/0x8e0 [ 760.384485][T14394] iov_iter_get_pages_alloc2+0x53/0xf0 [ 760.386394][T14394] p9_get_mapped_pages.part.0.constprop.0+0x4ca/0x7d0 [ 760.388770][T14394] ? __pfx_p9_get_mapped_pages.part.0.constprop.0+0x10/0x10 [ 760.391329][T14394] ? __pfx_p9pdu_vwritef+0x10/0x10 [ 760.393150][T14394] p9_virtio_zc_request+0x1be/0x1390 [ 760.395015][T14394] ? p9pdu_writef+0xc4/0x100 [ 760.396665][T14394] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 760.398709][T14394] ? __pfx_p9_tag_alloc+0x10/0x10 [ 760.400522][T14394] ? rcu_is_watching+0x12/0xc0 [ 760.402260][T14394] ? trace_9p_protocol_dump+0x192/0x220 [ 760.404355][T14394] ? rcu_is_watching+0x12/0xc0 [ 760.406176][T14394] ? p9_client_prepare_req+0x111/0x4d0 [ 760.408095][T14394] ? __pfx_p9_client_prepare_req+0x10/0x10 [ 760.410164][T14394] ? hlock_class+0x4e/0x130 [ 760.411768][T14394] ? __pfx_mark_lock+0x10/0x10 [ 760.413472][T14394] p9_client_zc_rpc.constprop.0+0x29a/0x880 [ 760.415544][T14394] ? __pfx_p9_client_zc_rpc.constprop.0+0x10/0x10 [ 760.417797][T14394] ? __pfx___lock_acquire+0x10/0x10 [ 760.419610][T14394] ? hlock_class+0x4e/0x130 [ 760.421236][T14394] ? mark_lock+0xb5/0xc60 [ 760.422756][T14394] ? __pfx_mark_lock+0x10/0x10 [ 760.424456][T14394] ? __pfx_p9_virtio_zc_request+0x10/0x10 [ 760.426437][T14394] p9_client_write+0x447/0x680 [ 760.428161][T14394] ? __pfx_p9_client_write+0x10/0x10 [ 760.430038][T14394] ? mark_held_locks+0x9f/0xe0 [ 760.431724][T14394] v9fs_issue_write+0xe2/0x180 [ 760.433421][T14394] ? __pfx_v9fs_issue_write+0x10/0x10 [ 760.435294][T14394] ? rcu_is_watching+0x12/0xc0 [ 760.436996][T14394] ? trace_netfs_sreq+0x193/0x220 [ 760.438751][T14394] netfs_do_issue_write+0x92/0x110 [ 760.440562][T14394] netfs_advance_write+0x384/0xbd0 [ 760.442341][T14394] ? netfs_buffer_append_folio+0x569/0x750 [ 760.444385][T14394] netfs_write_folio+0xc44/0x18f0 [ 760.446164][T14394] netfs_writepages+0x2ba/0xb90 [ 760.447878][T14394] ? __pfx_netfs_writepages+0x10/0x10 [ 760.449689][T14394] ? do_raw_spin_lock+0x12d/0x2c0 [ 760.451453][T14394] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 760.453321][T14394] ? __module_address+0x55/0x3c0 [ 760.455048][T14394] ? __pfx_netfs_writepages+0x10/0x10 [ 760.456937][T14394] do_writepages+0x1a3/0x7f0 [ 760.458485][T14394] ? __pfx_do_writepages+0x10/0x10 [ 760.460388][T14394] ? __pfx_lock_acquire+0x10/0x10 [ 760.462232][T14394] ? do_raw_spin_lock+0x12d/0x2c0 [ 760.463875][T14394] ? do_raw_spin_unlock+0x172/0x230 [ 760.465784][T14394] ? _raw_spin_unlock+0x28/0x50 [ 760.467422][T14394] ? wbc_attach_and_unlock_inode+0x597/0x940 [ 760.469543][T14394] filemap_fdatawrite_wbc+0x148/0x1c0 [ 760.471414][T14394] __filemap_fdatawrite_range+0xba/0x100 [ 760.473399][T14394] ? __pfx___filemap_fdatawrite_range+0x10/0x10 [ 760.475523][T14394] v9fs_dir_release+0x429/0x590 [ 760.477140][T14394] ? __pfx_v9fs_dir_release+0x10/0x10 [ 760.479121][T14394] ? __pfx_v9fs_dir_release+0x10/0x10 [ 760.481145][T14394] __fput+0x3f6/0xb60 [ 760.482637][T14394] ? _raw_spin_unlock_irq+0x23/0x50 [ 760.484586][T14394] task_work_run+0x14e/0x250 [ 760.486258][T14394] ? __pfx_task_work_run+0x10/0x10 [ 760.488039][T14394] ? __do_sys_rt_sigreturn+0x167/0x230 [ 760.489937][T14394] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 760.491956][T14394] syscall_exit_to_user_mode+0x27b/0x2a0 [ 760.493909][T14394] do_syscall_64+0xda/0x250 [ 760.495498][T14394] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 760.497559][T14394] RIP: 0033:0x7f5a88d7def9 [ 760.499117][T14394] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 760.505753][T14394] RSP: 002b:00007ffed470ab58 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 760.508634][T14394] RAX: 0000000000000000 RBX: 00000000000b949f RCX: 00007f5a88d7def9 [ 760.511348][T14394] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 760.514214][T14394] RBP: 00007f5a88f37a80 R08: 0000000000000001 R09: 00007ffed470ae4f [ 760.517008][T14394] R10: 00007f5a88c00000 R11: 0000000000000246 R12: 00000000000b9932 [ 760.519799][T14394] R13: 00007ffed470ac60 R14: 0000000000000032 R15: ffffffffffffffff [ 760.522834][T14394] [ 760.523994][T14394] Modules linked in: [ 760.526387][T14394] ---[ end trace 0000000000000000 ]--- [ 760.540935][T14394] RIP: 0010:__iov_iter_get_pages_alloc+0x1d1e/0x2240 [ 760.543347][T14394] Code: b0 8b 48 89 df e8 c2 b0 48 fd 90 0f 0b 49 89 c5 e9 99 f6 ff ff e8 82 2f 04 fd 48 c7 c6 00 ba b0 8b 4c 89 e7 e8 a3 b0 48 fd 90 <0f> 0b e8 6b 2f 04 fd 4c 8b 64 24 48 49 83 ec 01 e9 94 fd ff ff 4c [ 760.548701][T14394] RSP: 0018:ffffc90005c86fc8 EFLAGS: 00010293 [ 760.550855][T14394] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 0000000000000000 [ 760.561802][T14394] RDX: ffff88804cd74880 RSI: ffffffff848814ed RDI: ffff88804cd74cc4 [ 760.564283][T14394] RBP: ffffea0000efac34 R08: 0000000000000001 R09: fffffbfff2d3a913 [ 760.566454][T14394] R10: ffffffff969d489f R11: 1ffffffff1bb8bf1 R12: ffffea0000efac00 [ 760.568651][T14394] R13: ffff888023b98000 R14: 0000000000001000 R15: 0000000000001000 [ 760.570831][T14394] FS: 0000555590320500(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 760.573415][T14394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 760.575320][T14394] CR2: 0000001b308c4ff8 CR3: 000000004a02a000 CR4: 0000000000350ef0 [ 760.577695][T14394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 760.580166][T14394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 760.584029][T14394] Kernel panic - not syncing: Fatal exception [ 760.586675][T14394] Kernel Offset: disabled [ 760.588320][T14394] Rebooting in 86400 seconds.. VM DIAGNOSIS: 16:01:27 Registers: info registers vcpu 0 CPU#0 RAX=000000000000004e RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8504e205 RDI=ffffffff9a68fb00 RBP=ffffffff9a68fac0 RSP=ffffc90005c86920 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=6e69203a73706f4f R12=0000000000000000 R13=000000000000004e R14=ffffffff8504e1a0 R15=0000000000000000 RIP=ffffffff8504e22f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555590320500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b308c4ff8 CR3=000000004a02a000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020000 Opmask01=0000000000000000 Opmask02=00000000fffffffe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed470ad90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a88df199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a88df19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a88df19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a88df19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a88df1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5a88df1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000002 RCX=ffffffff84904c89 RDX=ffff88802a452440 RSI=0000000000000020 RDI=0000000000000001 RBP=ffffffff8bb1c5a0 RSP=ffffc900045bf398 R8 =0000000000000001 R9 =0000000000000020 R10=0000000000000040 R11=dffffc0000000000 R12=0000000000000040 R13=0000000000000001 R14=0000000000000003 R15=0000000000000003 RIP=ffffffff818c456b RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc113aa4d00 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000055898241f000 CR3=000000002692e000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=197a440c197a440c 197a440c197a440c 197a440c197a440c 197a440c197a440c 197a440c197a440c 197a440c197a440c 197a440c197a440c 197a440c197a440c ZMM22=d76eaabfd76eaabf d76eaabfd76eaabf d76eaabfd76eaabf d76eaabfd76eaabf d76eaabfd76eaabf d76eaabfd76eaabf d76eaabfd76eaabf d76eaabfd76eaabf ZMM23=c7fdbdb2c7fdbdb2 c7fdbdb2c7fdbdb2 c7fdbdb2c7fdbdb2 c7fdbdb2c7fdbdb2 c7fdbdb2c7fdbdb2 c7fdbdb2c7fdbdb2 c7fdbdb2c7fdbdb2 c7fdbdb2c7fdbdb2 ZMM24=b3afcd98b3afcd98 b3afcd98b3afcd98 b3afcd98b3afcd98 b3afcd98b3afcd98 b3afcd98b3afcd98 b3afcd98b3afcd98 b3afcd98b3afcd98 b3afcd98b3afcd98 ZMM25=fd030addfd030add fd030addfd030add fd030addfd030add fd030addfd030add fd030addfd030add fd030addfd030add fd030addfd030add fd030addfd030add ZMM26=79aae9e979aae9e9 79aae9e979aae9e9 79aae9e979aae9e9 79aae9e979aae9e9 79aae9e979aae9e9 79aae9e979aae9e9 79aae9e979aae9e9 79aae9e979aae9e9 ZMM27=f5f1e64ff5f1e64f f5f1e64ff5f1e64f f5f1e64ff5f1e64f f5f1e64ff5f1e64f f5f1e64ff5f1e64f f5f1e64ff5f1e64f f5f1e64ff5f1e64f f5f1e64ff5f1e64f ZMM28=000000f0000000ef 000000ee000000ed 000000ec000000eb 000000ea000000e9 000000e8000000e7 000000e6000000e5 000000e4000000e3 000000e2000000e1 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=a2390000a2390000 a2390000a2390000 a2390000a2390000 a2390000a2390000 a2390000a2390000 a2390000a2390000 a2390000a2390000 a2390000a2390000 info registers vcpu 2 CPU#2 RAX=0000000000000002 RBX=0000000000050fbe RCX=ffffffff81f67644 RDX=ffff888011c9a440 RSI=0000000000000000 RDI=0000000000000007 RBP=0000000000000000 RSP=ffffc9000450f3d0 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=dffffc0000000000 R12=ffff88801bf00000 R13=0000000000000000 R14=0000000000000001 R15=1ffff920008a1e8c RIP=ffffffff818c446c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f1bd54086c0 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000002087a000 CR3=000000005c0c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020000 Opmask01=0000000000000000 Opmask02=00000000fffffffe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd09daddd0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000db93ac RBX=0000000000000003 RCX=ffffffff8b19c989 RDX=ffffed100d526fda RSI=ffffffff8bb11b20 RDI=ffffffff8163c5bc RBP=ffffed1003adb488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fd9 R10=ffff88806a937ecb R11=0000000000000001 R12=0000000000000003 R13=ffff88801d6da440 R14=ffffffff901dab18 R15=0000000000000000 RIP=ffffffff8b19dd6f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b313faff8 CR3=000000005c0c6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=0000000000000fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813082df ffffffff813082df ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff813082df ffffffff813082df ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 ffffffff813082df ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f199a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f19a7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f19a1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f19b5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f1a3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1bd45f1b19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff820504af ffffffff8205047c ffffffff8205045f ffffffff820502e1 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8205093c ffffffff820508ab ffffffff00040008 0000000f0010000c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff8205052f ffffffff820504af ffffffff8205047c ffffffff8205045f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000