syzkaller login: [ 133.909339][ T49] audit: type=1400 audit(1611869120.640:41): avc: denied { map } for pid=11201 comm="bash" path="/bin/bash" dev="sda1" ino=1457 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 Warning: Permanently added '[localhost]:27700' (ECDSA) to the list of known hosts. [ 139.473400][ T49] audit: type=1400 audit(1611869126.200:42): avc: denied { map } for pid=11214 comm="syz-fuzzer" path="/syz-fuzzer" dev="sda1" ino=16526 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file permissive=1 2021/01/28 21:25:26 fuzzer started 2021/01/28 21:25:26 dialing manager at 10.0.2.10:43529 [ 140.370485][ T49] audit: type=1400 audit(1611869127.100:43): avc: denied { integrity } for pid=11231 comm="syz-executor" lockdown_reason="debugfs access" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 2021/01/28 21:25:27 syscalls: 3496 2021/01/28 21:25:27 code coverage: enabled 2021/01/28 21:25:27 comparison tracing: enabled 2021/01/28 21:25:27 extra coverage: enabled 2021/01/28 21:25:27 setuid sandbox: enabled 2021/01/28 21:25:27 namespace sandbox: enabled 2021/01/28 21:25:27 Android sandbox: /sys/fs/selinux/policy does not exist 2021/01/28 21:25:27 fault injection: enabled 2021/01/28 21:25:27 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/01/28 21:25:27 net packet injection: enabled 2021/01/28 21:25:27 net device setup: enabled 2021/01/28 21:25:27 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/01/28 21:25:27 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/01/28 21:25:27 USB emulation: enabled 2021/01/28 21:25:27 hci packet injection: enabled 2021/01/28 21:25:27 wifi device emulation: enabled 2021/01/28 21:25:27 fetching corpus: 0, signal 0/2000 (executing program) 2021/01/28 21:25:27 fetching corpus: 50, signal 40208/43853 (executing program) 2021/01/28 21:25:27 fetching corpus: 100, signal 55745/61063 (executing program) 2021/01/28 21:25:28 fetching corpus: 150, signal 67921/74785 (executing program) 2021/01/28 21:25:28 fetching corpus: 200, signal 83659/91842 (executing program) 2021/01/28 21:25:28 fetching corpus: 250, signal 95351/104912 (executing program) 2021/01/28 21:25:28 fetching corpus: 300, signal 102921/113839 (executing program) 2021/01/28 21:25:29 fetching corpus: 350, signal 109658/121906 (executing program) 2021/01/28 21:25:30 fetching corpus: 400, signal 115500/129048 (executing program) 2021/01/28 21:25:30 fetching corpus: 450, signal 121563/136362 (executing program) 2021/01/28 21:25:30 fetching corpus: 500, signal 128630/144569 (executing program) 2021/01/28 21:25:30 fetching corpus: 550, signal 132441/149605 (executing program) 2021/01/28 21:25:31 fetching corpus: 600, signal 136804/155198 (executing program) 2021/01/28 21:25:31 fetching corpus: 649, signal 139734/159353 (executing program) 2021/01/28 21:25:31 fetching corpus: 699, signal 143633/164411 (executing program) 2021/01/28 21:25:32 fetching corpus: 749, signal 146617/168572 (executing program) 2021/01/28 21:25:32 fetching corpus: 799, signal 150736/173749 (executing program) 2021/01/28 21:25:32 fetching corpus: 849, signal 153295/177485 (executing program) 2021/01/28 21:25:32 fetching corpus: 898, signal 156281/181541 (executing program) 2021/01/28 21:25:33 fetching corpus: 948, signal 159993/186272 (executing program) 2021/01/28 21:25:33 fetching corpus: 998, signal 164899/192067 (executing program) 2021/01/28 21:25:33 fetching corpus: 1048, signal 168310/196476 (executing program) 2021/01/28 21:25:33 fetching corpus: 1098, signal 170960/200187 (executing program) 2021/01/28 21:25:33 fetching corpus: 1147, signal 172998/203297 (executing program) 2021/01/28 21:25:34 fetching corpus: 1197, signal 175807/207052 (executing program) 2021/01/28 21:25:34 fetching corpus: 1247, signal 178201/210420 (executing program) 2021/01/28 21:25:34 fetching corpus: 1295, signal 181008/214173 (executing program) 2021/01/28 21:25:35 fetching corpus: 1345, signal 184050/218092 (executing program) 2021/01/28 21:25:36 fetching corpus: 1395, signal 186058/221034 (executing program) 2021/01/28 21:25:36 fetching corpus: 1445, signal 189141/224920 (executing program) 2021/01/28 21:25:36 fetching corpus: 1494, signal 191196/227891 (executing program) 2021/01/28 21:25:36 fetching corpus: 1544, signal 193458/231036 (executing program) 2021/01/28 21:25:37 fetching corpus: 1594, signal 195338/233831 (executing program) 2021/01/28 21:25:37 fetching corpus: 1644, signal 198478/237656 (executing program) 2021/01/28 21:25:37 fetching corpus: 1694, signal 201424/241345 (executing program) 2021/01/28 21:25:37 fetching corpus: 1744, signal 202689/243562 (executing program) 2021/01/28 21:25:38 fetching corpus: 1794, signal 204204/245977 (executing program) 2021/01/28 21:25:38 fetching corpus: 1844, signal 205769/248415 (executing program) 2021/01/28 21:25:38 fetching corpus: 1894, signal 208892/252075 (executing program) 2021/01/28 21:25:38 fetching corpus: 1944, signal 210807/254783 (executing program) 2021/01/28 21:25:38 fetching corpus: 1994, signal 212143/256956 (executing program) 2021/01/28 21:25:39 fetching corpus: 2044, signal 214214/259693 (executing program) 2021/01/28 21:25:39 fetching corpus: 2094, signal 215786/262041 (executing program) 2021/01/28 21:25:39 fetching corpus: 2144, signal 216989/264090 (executing program) 2021/01/28 21:25:39 fetching corpus: 2194, signal 218814/266646 (executing program) 2021/01/28 21:25:40 fetching corpus: 2244, signal 220300/268925 (executing program) 2021/01/28 21:25:40 fetching corpus: 2294, signal 222085/271440 (executing program) 2021/01/28 21:25:40 fetching corpus: 2344, signal 223507/273631 (executing program) 2021/01/28 21:25:41 fetching corpus: 2394, signal 225045/275876 (executing program) 2021/01/28 21:25:41 fetching corpus: 2444, signal 227378/278691 (executing program) 2021/01/28 21:25:41 fetching corpus: 2494, signal 229127/281088 (executing program) 2021/01/28 21:25:41 fetching corpus: 2544, signal 230747/283427 (executing program) 2021/01/28 21:25:42 fetching corpus: 2594, signal 232635/285866 (executing program) 2021/01/28 21:25:42 fetching corpus: 2644, signal 233777/287734 (executing program) 2021/01/28 21:25:42 fetching corpus: 2693, signal 235033/289713 (executing program) 2021/01/28 21:25:42 fetching corpus: 2742, signal 236555/291892 (executing program) 2021/01/28 21:25:42 fetching corpus: 2792, signal 237461/293560 (executing program) 2021/01/28 21:25:43 fetching corpus: 2842, signal 238836/295598 (executing program) 2021/01/28 21:25:43 fetching corpus: 2892, signal 240106/297568 (executing program) 2021/01/28 21:25:43 fetching corpus: 2942, signal 241395/299523 (executing program) 2021/01/28 21:25:44 fetching corpus: 2992, signal 242825/301590 (executing program) 2021/01/28 21:25:44 fetching corpus: 3042, signal 244068/303487 (executing program) 2021/01/28 21:25:44 fetching corpus: 3092, signal 245346/305387 (executing program) 2021/01/28 21:25:44 fetching corpus: 3141, signal 248111/308379 (executing program) 2021/01/28 21:25:45 fetching corpus: 3191, signal 249579/310417 (executing program) 2021/01/28 21:25:45 fetching corpus: 3241, signal 250894/312311 (executing program) 2021/01/28 21:25:45 fetching corpus: 3291, signal 252351/314339 (executing program) 2021/01/28 21:25:45 fetching corpus: 3340, signal 253527/316103 (executing program) 2021/01/28 21:25:46 fetching corpus: 3390, signal 255026/318105 (executing program) 2021/01/28 21:25:46 fetching corpus: 3440, signal 256417/320012 (executing program) 2021/01/28 21:25:46 fetching corpus: 3490, signal 257498/321707 (executing program) 2021/01/28 21:25:46 fetching corpus: 3540, signal 258379/323163 (executing program) 2021/01/28 21:25:47 fetching corpus: 3590, signal 259899/325106 (executing program) 2021/01/28 21:25:47 fetching corpus: 3640, signal 261165/326885 (executing program) 2021/01/28 21:25:47 fetching corpus: 3690, signal 262424/328656 (executing program) 2021/01/28 21:25:47 fetching corpus: 3740, signal 263330/330167 (executing program) 2021/01/28 21:25:48 fetching corpus: 3790, signal 264355/331735 (executing program) 2021/01/28 21:25:48 fetching corpus: 3840, signal 265573/333503 (executing program) 2021/01/28 21:25:48 fetching corpus: 3890, signal 266487/334947 (executing program) 2021/01/28 21:25:48 fetching corpus: 3940, signal 267608/336564 (executing program) 2021/01/28 21:25:48 fetching corpus: 3990, signal 269066/338427 (executing program) 2021/01/28 21:25:49 fetching corpus: 4040, signal 269874/339806 (executing program) 2021/01/28 21:25:49 fetching corpus: 4090, signal 270652/341191 (executing program) 2021/01/28 21:25:49 fetching corpus: 4140, signal 271758/342760 (executing program) 2021/01/28 21:25:49 fetching corpus: 4190, signal 272793/344250 (executing program) 2021/01/28 21:25:49 fetching corpus: 4240, signal 274837/346353 (executing program) 2021/01/28 21:25:50 fetching corpus: 4290, signal 275964/347869 (executing program) 2021/01/28 21:25:50 fetching corpus: 4340, signal 277354/349563 (executing program) 2021/01/28 21:25:50 fetching corpus: 4390, signal 278103/350773 (executing program) 2021/01/28 21:25:51 fetching corpus: 4440, signal 279223/352268 (executing program) 2021/01/28 21:25:51 fetching corpus: 4490, signal 280685/353969 (executing program) 2021/01/28 21:25:51 fetching corpus: 4540, signal 282005/355542 (executing program) 2021/01/28 21:25:51 fetching corpus: 4590, signal 282508/356627 (executing program) 2021/01/28 21:25:51 fetching corpus: 4640, signal 283252/357921 (executing program) 2021/01/28 21:25:52 fetching corpus: 4689, signal 284646/359559 (executing program) 2021/01/28 21:25:52 fetching corpus: 4739, signal 285330/360711 (executing program) 2021/01/28 21:25:52 fetching corpus: 4789, signal 286362/362067 (executing program) 2021/01/28 21:25:52 fetching corpus: 4839, signal 287539/363559 (executing program) 2021/01/28 21:25:52 fetching corpus: 4889, signal 288438/364900 (executing program) 2021/01/28 21:25:53 fetching corpus: 4939, signal 289920/366530 (executing program) 2021/01/28 21:25:53 fetching corpus: 4989, signal 291191/368019 (executing program) 2021/01/28 21:25:53 fetching corpus: 5039, signal 291715/369067 (executing program) 2021/01/28 21:25:53 fetching corpus: 5089, signal 292687/370387 (executing program) 2021/01/28 21:25:53 fetching corpus: 5138, signal 293616/371685 (executing program) 2021/01/28 21:25:54 fetching corpus: 5188, signal 294645/373003 (executing program) 2021/01/28 21:25:54 fetching corpus: 5238, signal 295676/374306 (executing program) 2021/01/28 21:25:54 fetching corpus: 5288, signal 296928/375758 (executing program) 2021/01/28 21:25:54 fetching corpus: 5338, signal 297765/376943 (executing program) 2021/01/28 21:25:54 fetching corpus: 5388, signal 298406/377983 (executing program) 2021/01/28 21:25:55 fetching corpus: 5438, signal 299067/379036 (executing program) 2021/01/28 21:25:55 fetching corpus: 5488, signal 299891/380213 (executing program) 2021/01/28 21:25:55 fetching corpus: 5538, signal 301159/381579 (executing program) 2021/01/28 21:25:55 fetching corpus: 5588, signal 301854/382684 (executing program) 2021/01/28 21:25:56 fetching corpus: 5638, signal 302912/383928 (executing program) 2021/01/28 21:25:56 fetching corpus: 5687, signal 303841/385116 (executing program) 2021/01/28 21:25:56 fetching corpus: 5737, signal 304696/386272 (executing program) 2021/01/28 21:25:56 fetching corpus: 5787, signal 305478/387395 (executing program) 2021/01/28 21:25:56 fetching corpus: 5837, signal 306655/388700 (executing program) 2021/01/28 21:25:57 fetching corpus: 5887, signal 307667/389902 (executing program) 2021/01/28 21:25:57 fetching corpus: 5937, signal 308608/391102 (executing program) 2021/01/28 21:25:57 fetching corpus: 5987, signal 309559/392238 (executing program) 2021/01/28 21:25:58 fetching corpus: 6037, signal 310179/393209 (executing program) 2021/01/28 21:25:58 fetching corpus: 6087, signal 310979/394293 (executing program) 2021/01/28 21:25:58 fetching corpus: 6136, signal 311522/395242 (executing program) 2021/01/28 21:25:59 fetching corpus: 6186, signal 312287/396309 (executing program) 2021/01/28 21:25:59 fetching corpus: 6236, signal 313059/397337 (executing program) 2021/01/28 21:25:59 fetching corpus: 6285, signal 314071/398432 (executing program) 2021/01/28 21:25:59 fetching corpus: 6335, signal 314784/399432 (executing program) 2021/01/28 21:26:00 fetching corpus: 6385, signal 315728/400531 (executing program) 2021/01/28 21:26:00 fetching corpus: 6435, signal 316664/401596 (executing program) 2021/01/28 21:26:00 fetching corpus: 6485, signal 317327/402532 (executing program) 2021/01/28 21:26:00 fetching corpus: 6535, signal 317853/403391 (executing program) 2021/01/28 21:26:01 fetching corpus: 6585, signal 318729/404424 (executing program) 2021/01/28 21:26:01 fetching corpus: 6635, signal 319221/405296 (executing program) 2021/01/28 21:26:01 fetching corpus: 6685, signal 320145/406325 (executing program) 2021/01/28 21:26:01 fetching corpus: 6735, signal 320959/407329 (executing program) 2021/01/28 21:26:01 fetching corpus: 6785, signal 321845/408319 (executing program) 2021/01/28 21:26:02 fetching corpus: 6835, signal 322547/409235 (executing program) 2021/01/28 21:26:02 fetching corpus: 6885, signal 323336/410185 (executing program) 2021/01/28 21:26:02 fetching corpus: 6935, signal 323851/411030 (executing program) 2021/01/28 21:26:03 fetching corpus: 6985, signal 324713/412019 (executing program) 2021/01/28 21:26:03 fetching corpus: 7035, signal 325506/412937 (executing program) 2021/01/28 21:26:03 fetching corpus: 7085, signal 326063/413740 (executing program) 2021/01/28 21:26:04 fetching corpus: 7135, signal 326972/414690 (executing program) 2021/01/28 21:26:04 fetching corpus: 7185, signal 328101/415744 (executing program) 2021/01/28 21:26:04 fetching corpus: 7235, signal 328831/416632 (executing program) 2021/01/28 21:26:05 fetching corpus: 7285, signal 329476/417474 (executing program) 2021/01/28 21:26:05 fetching corpus: 7335, signal 329930/418232 (executing program) 2021/01/28 21:26:06 fetching corpus: 7385, signal 330302/418940 (executing program) 2021/01/28 21:26:06 fetching corpus: 7435, signal 331722/420087 (executing program) 2021/01/28 21:26:06 fetching corpus: 7485, signal 332392/420903 (executing program) 2021/01/28 21:26:07 fetching corpus: 7535, signal 333122/421784 (executing program) 2021/01/28 21:26:07 fetching corpus: 7585, signal 333783/422621 (executing program) 2021/01/28 21:26:07 fetching corpus: 7635, signal 334385/423374 (executing program) 2021/01/28 21:26:07 fetching corpus: 7685, signal 335283/424241 (executing program) 2021/01/28 21:26:08 fetching corpus: 7735, signal 336010/425072 (executing program) 2021/01/28 21:26:08 fetching corpus: 7785, signal 336632/425818 (executing program) 2021/01/28 21:26:08 fetching corpus: 7835, signal 337088/426521 (executing program) 2021/01/28 21:26:09 fetching corpus: 7885, signal 337698/427300 (executing program) 2021/01/28 21:26:09 fetching corpus: 7935, signal 338252/428057 (executing program) 2021/01/28 21:26:09 fetching corpus: 7985, signal 338645/428715 (executing program) 2021/01/28 21:26:09 fetching corpus: 8035, signal 339598/429603 (executing program) 2021/01/28 21:26:10 fetching corpus: 8085, signal 340284/430368 (executing program) 2021/01/28 21:26:10 fetching corpus: 8135, signal 340907/431129 (executing program) 2021/01/28 21:26:10 fetching corpus: 8185, signal 341675/431949 (executing program) 2021/01/28 21:26:10 fetching corpus: 8235, signal 342352/432722 (executing program) 2021/01/28 21:26:11 fetching corpus: 8285, signal 342886/433403 (executing program) 2021/01/28 21:26:11 fetching corpus: 8335, signal 343357/434118 (executing program) 2021/01/28 21:26:11 fetching corpus: 8385, signal 343947/434806 (executing program) 2021/01/28 21:26:11 fetching corpus: 8435, signal 344484/435508 (executing program) 2021/01/28 21:26:11 fetching corpus: 8485, signal 345166/436269 (executing program) 2021/01/28 21:26:12 fetching corpus: 8535, signal 345738/436917 (executing program) 2021/01/28 21:26:12 fetching corpus: 8585, signal 346287/437596 (executing program) 2021/01/28 21:26:12 fetching corpus: 8635, signal 346786/438236 (executing program) 2021/01/28 21:26:12 fetching corpus: 8685, signal 347292/438876 (executing program) 2021/01/28 21:26:13 fetching corpus: 8735, signal 347735/439534 (executing program) 2021/01/28 21:26:13 fetching corpus: 8785, signal 348357/440211 (executing program) 2021/01/28 21:26:14 fetching corpus: 8834, signal 348857/440857 (executing program) 2021/01/28 21:26:14 fetching corpus: 8884, signal 349478/441535 (executing program) 2021/01/28 21:26:14 fetching corpus: 8934, signal 349926/442140 (executing program) 2021/01/28 21:26:14 fetching corpus: 8984, signal 350604/442818 (executing program) 2021/01/28 21:26:14 fetching corpus: 9034, signal 351027/443447 (executing program) 2021/01/28 21:26:15 fetching corpus: 9084, signal 351516/444061 (executing program) 2021/01/28 21:26:15 fetching corpus: 9134, signal 351991/444634 (executing program) 2021/01/28 21:26:15 fetching corpus: 9184, signal 352645/445274 (executing program) 2021/01/28 21:26:16 fetching corpus: 9234, signal 353151/445893 (executing program) 2021/01/28 21:26:16 fetching corpus: 9284, signal 353851/446511 (executing program) 2021/01/28 21:26:16 fetching corpus: 9334, signal 354587/447153 (executing program) 2021/01/28 21:26:16 fetching corpus: 9384, signal 355156/447765 (executing program) 2021/01/28 21:26:17 fetching corpus: 9434, signal 355639/448351 (executing program) 2021/01/28 21:26:17 fetching corpus: 9484, signal 356118/448966 (executing program) 2021/01/28 21:26:17 fetching corpus: 9534, signal 356719/449574 (executing program) 2021/01/28 21:26:17 fetching corpus: 9584, signal 357660/450248 (executing program) 2021/01/28 21:26:18 fetching corpus: 9634, signal 358029/450790 (executing program) 2021/01/28 21:26:18 fetching corpus: 9684, signal 358519/451343 (executing program) 2021/01/28 21:26:18 fetching corpus: 9733, signal 359073/451906 (executing program) 2021/01/28 21:26:18 fetching corpus: 9783, signal 359494/452444 (executing program) 2021/01/28 21:26:19 fetching corpus: 9833, signal 360403/453057 (executing program) 2021/01/28 21:26:19 fetching corpus: 9883, signal 361044/453633 (executing program) 2021/01/28 21:26:19 fetching corpus: 9933, signal 361440/454152 (executing program) 2021/01/28 21:26:19 fetching corpus: 9983, signal 361995/454694 (executing program) 2021/01/28 21:26:19 fetching corpus: 10033, signal 362355/455198 (executing program) 2021/01/28 21:26:20 fetching corpus: 10083, signal 362759/455730 (executing program) 2021/01/28 21:26:20 fetching corpus: 10133, signal 363346/456268 (executing program) 2021/01/28 21:26:20 fetching corpus: 10182, signal 363946/456844 (executing program) 2021/01/28 21:26:20 fetching corpus: 10232, signal 364679/457386 (executing program) 2021/01/28 21:26:21 fetching corpus: 10282, signal 365109/457881 (executing program) 2021/01/28 21:26:21 fetching corpus: 10332, signal 365619/458382 (executing program) 2021/01/28 21:26:21 fetching corpus: 10382, signal 366162/458896 (executing program) 2021/01/28 21:26:22 fetching corpus: 10432, signal 366622/459416 (executing program) 2021/01/28 21:26:22 fetching corpus: 10482, signal 367224/459934 (executing program) 2021/01/28 21:26:22 fetching corpus: 10532, signal 367568/460422 (executing program) 2021/01/28 21:26:22 fetching corpus: 10582, signal 368217/460891 (executing program) 2021/01/28 21:26:23 fetching corpus: 10632, signal 368618/461348 (executing program) 2021/01/28 21:26:23 fetching corpus: 10682, signal 369098/461855 (executing program) 2021/01/28 21:26:24 fetching corpus: 10732, signal 369701/462306 (executing program) 2021/01/28 21:26:24 fetching corpus: 10782, signal 370116/462763 (executing program) 2021/01/28 21:26:24 fetching corpus: 10832, signal 370750/463253 (executing program) 2021/01/28 21:26:25 fetching corpus: 10882, signal 371249/463728 (executing program) 2021/01/28 21:26:25 fetching corpus: 10932, signal 371696/464197 (executing program) 2021/01/28 21:26:25 fetching corpus: 10982, signal 372133/464632 (executing program) 2021/01/28 21:26:25 fetching corpus: 11032, signal 372620/465076 (executing program) 2021/01/28 21:26:25 fetching corpus: 11082, signal 373290/465559 (executing program) 2021/01/28 21:26:26 fetching corpus: 11132, signal 373928/466014 (executing program) 2021/01/28 21:26:26 fetching corpus: 11182, signal 374440/466435 (executing program) 2021/01/28 21:26:26 fetching corpus: 11232, signal 374856/466867 (executing program) 2021/01/28 21:26:27 fetching corpus: 11282, signal 375294/467293 (executing program) 2021/01/28 21:26:27 fetching corpus: 11332, signal 375727/467713 (executing program) 2021/01/28 21:26:27 fetching corpus: 11382, signal 376196/468106 (executing program) 2021/01/28 21:26:27 fetching corpus: 11432, signal 376659/468494 (executing program) 2021/01/28 21:26:27 fetching corpus: 11482, signal 377356/468895 (executing program) 2021/01/28 21:26:28 fetching corpus: 11531, signal 377972/469302 (executing program) 2021/01/28 21:26:28 fetching corpus: 11581, signal 378691/469728 (executing program) 2021/01/28 21:26:28 fetching corpus: 11631, signal 379094/470096 (executing program) 2021/01/28 21:26:28 fetching corpus: 11681, signal 379715/470491 (executing program) 2021/01/28 21:26:29 fetching corpus: 11731, signal 380184/470583 (executing program) 2021/01/28 21:26:29 fetching corpus: 11781, signal 380660/470583 (executing program) 2021/01/28 21:26:29 fetching corpus: 11831, signal 381293/470583 (executing program) 2021/01/28 21:26:29 fetching corpus: 11881, signal 381818/470583 (executing program) 2021/01/28 21:26:29 fetching corpus: 11931, signal 382303/470583 (executing program) 2021/01/28 21:26:30 fetching corpus: 11981, signal 382811/470583 (executing program) 2021/01/28 21:26:30 fetching corpus: 12031, signal 383220/470584 (executing program) 2021/01/28 21:26:30 fetching corpus: 12081, signal 383828/470584 (executing program) 2021/01/28 21:26:30 fetching corpus: 12131, signal 384230/470584 (executing program) 2021/01/28 21:26:30 fetching corpus: 12181, signal 384754/470584 (executing program) 2021/01/28 21:26:31 fetching corpus: 12231, signal 385369/470584 (executing program) 2021/01/28 21:26:31 fetching corpus: 12281, signal 385824/470584 (executing program) 2021/01/28 21:26:31 fetching corpus: 12331, signal 386339/470584 (executing program) 2021/01/28 21:26:32 fetching corpus: 12381, signal 386833/470584 (executing program) 2021/01/28 21:26:32 fetching corpus: 12431, signal 387219/470584 (executing program) 2021/01/28 21:26:32 fetching corpus: 12481, signal 387568/470584 (executing program) 2021/01/28 21:26:33 fetching corpus: 12531, signal 388065/470584 (executing program) 2021/01/28 21:26:33 fetching corpus: 12581, signal 388745/470584 (executing program) 2021/01/28 21:26:33 fetching corpus: 12631, signal 389352/470584 (executing program) 2021/01/28 21:26:33 fetching corpus: 12681, signal 389670/470584 (executing program) 2021/01/28 21:26:34 fetching corpus: 12731, signal 390207/470584 (executing program) 2021/01/28 21:26:34 fetching corpus: 12781, signal 390574/470584 (executing program) 2021/01/28 21:26:34 fetching corpus: 12831, signal 391247/470584 (executing program) 2021/01/28 21:26:34 fetching corpus: 12881, signal 391619/470584 (executing program) 2021/01/28 21:26:34 fetching corpus: 12931, signal 391931/470584 (executing program) 2021/01/28 21:26:34 fetching corpus: 12981, signal 392408/470584 (executing program) 2021/01/28 21:26:35 fetching corpus: 13031, signal 392870/470584 (executing program) 2021/01/28 21:26:35 fetching corpus: 13081, signal 393458/470584 (executing program) 2021/01/28 21:26:35 fetching corpus: 13131, signal 393936/470584 (executing program) 2021/01/28 21:26:36 fetching corpus: 13181, signal 394688/470584 (executing program) 2021/01/28 21:26:36 fetching corpus: 13230, signal 395474/470584 (executing program) 2021/01/28 21:26:36 fetching corpus: 13280, signal 395805/470584 (executing program) 2021/01/28 21:26:36 fetching corpus: 13330, signal 396204/470584 (executing program) 2021/01/28 21:26:37 fetching corpus: 13380, signal 396641/470584 (executing program) 2021/01/28 21:26:37 fetching corpus: 13430, signal 397004/470584 (executing program) 2021/01/28 21:26:37 fetching corpus: 13480, signal 397314/470585 (executing program) 2021/01/28 21:26:37 fetching corpus: 13530, signal 397685/470585 (executing program) 2021/01/28 21:26:38 fetching corpus: 13580, signal 398261/470585 (executing program) 2021/01/28 21:26:38 fetching corpus: 13628, signal 398662/470585 (executing program) 2021/01/28 21:26:38 fetching corpus: 13678, signal 399258/470585 (executing program) 2021/01/28 21:26:38 fetching corpus: 13728, signal 399731/470585 (executing program) 2021/01/28 21:26:39 fetching corpus: 13778, signal 400046/470585 (executing program) 2021/01/28 21:26:40 fetching corpus: 13828, signal 400376/470585 (executing program) 2021/01/28 21:26:40 fetching corpus: 13878, signal 400723/470585 (executing program) 2021/01/28 21:26:40 fetching corpus: 13928, signal 401065/470585 (executing program) 2021/01/28 21:26:41 fetching corpus: 13978, signal 401403/470585 (executing program) 2021/01/28 21:26:41 fetching corpus: 14027, signal 401722/470585 (executing program) 2021/01/28 21:26:42 fetching corpus: 14077, signal 401998/470585 (executing program) 2021/01/28 21:26:42 fetching corpus: 14127, signal 402310/470585 (executing program) 2021/01/28 21:26:42 fetching corpus: 14177, signal 402695/470586 (executing program) 2021/01/28 21:26:42 fetching corpus: 14227, signal 403180/470586 (executing program) 2021/01/28 21:26:42 fetching corpus: 14277, signal 403452/470586 (executing program) 2021/01/28 21:26:43 fetching corpus: 14327, signal 404022/470586 (executing program) 2021/01/28 21:26:43 fetching corpus: 14376, signal 404432/470586 (executing program) 2021/01/28 21:26:43 fetching corpus: 14426, signal 404785/470586 (executing program) 2021/01/28 21:26:43 fetching corpus: 14476, signal 405146/470586 (executing program) 2021/01/28 21:26:44 fetching corpus: 14526, signal 405584/470586 (executing program) 2021/01/28 21:26:44 fetching corpus: 14576, signal 405874/470586 (executing program) 2021/01/28 21:26:44 fetching corpus: 14626, signal 406163/470586 (executing program) 2021/01/28 21:26:44 fetching corpus: 14676, signal 406523/470586 (executing program) 2021/01/28 21:26:44 fetching corpus: 14726, signal 406800/470586 (executing program) 2021/01/28 21:26:45 fetching corpus: 14776, signal 407154/470586 (executing program) 2021/01/28 21:26:45 fetching corpus: 14825, signal 407492/470586 (executing program) 2021/01/28 21:26:45 fetching corpus: 14875, signal 407916/470586 (executing program) 2021/01/28 21:26:46 fetching corpus: 14925, signal 408229/470586 (executing program) 2021/01/28 21:26:46 fetching corpus: 14975, signal 408586/470586 (executing program) 2021/01/28 21:26:46 fetching corpus: 15025, signal 408880/470586 (executing program) 2021/01/28 21:26:46 fetching corpus: 15075, signal 409181/470586 (executing program) 2021/01/28 21:26:46 fetching corpus: 15125, signal 410013/470586 (executing program) 2021/01/28 21:26:47 fetching corpus: 15175, signal 410406/470586 (executing program) 2021/01/28 21:26:47 fetching corpus: 15224, signal 410676/470586 (executing program) 2021/01/28 21:26:47 fetching corpus: 15274, signal 411098/470586 (executing program) 2021/01/28 21:26:47 fetching corpus: 15324, signal 411493/470586 (executing program) 2021/01/28 21:26:48 fetching corpus: 15374, signal 412012/470586 (executing program) 2021/01/28 21:26:48 fetching corpus: 15424, signal 412345/470588 (executing program) 2021/01/28 21:26:48 fetching corpus: 15474, signal 412726/470588 (executing program) 2021/01/28 21:26:48 fetching corpus: 15524, signal 413134/470588 (executing program) 2021/01/28 21:26:49 fetching corpus: 15574, signal 413490/470588 (executing program) 2021/01/28 21:26:49 fetching corpus: 15624, signal 413855/470588 (executing program) 2021/01/28 21:26:49 fetching corpus: 15674, signal 414119/470588 (executing program) 2021/01/28 21:26:49 fetching corpus: 15724, signal 414540/470588 (executing program) 2021/01/28 21:26:49 fetching corpus: 15774, signal 414847/470588 (executing program) 2021/01/28 21:26:50 fetching corpus: 15824, signal 415263/470588 (executing program) 2021/01/28 21:26:50 fetching corpus: 15874, signal 415842/470588 (executing program) 2021/01/28 21:26:50 fetching corpus: 15924, signal 416139/470588 (executing program) 2021/01/28 21:26:50 fetching corpus: 15974, signal 416521/470590 (executing program) 2021/01/28 21:26:50 fetching corpus: 16024, signal 416907/470590 (executing program) 2021/01/28 21:26:51 fetching corpus: 16074, signal 417286/470590 (executing program) 2021/01/28 21:26:51 fetching corpus: 16124, signal 417727/470590 (executing program) 2021/01/28 21:26:52 fetching corpus: 16174, signal 418092/470591 (executing program) 2021/01/28 21:26:52 fetching corpus: 16224, signal 418560/470591 (executing program) 2021/01/28 21:26:52 fetching corpus: 16274, signal 418888/470591 (executing program) 2021/01/28 21:26:52 fetching corpus: 16324, signal 419339/470591 (executing program) 2021/01/28 21:26:53 fetching corpus: 16373, signal 419673/470591 (executing program) 2021/01/28 21:26:53 fetching corpus: 16422, signal 420020/470591 (executing program) 2021/01/28 21:26:53 fetching corpus: 16472, signal 420423/470592 (executing program) 2021/01/28 21:26:53 fetching corpus: 16522, signal 421004/470592 (executing program) 2021/01/28 21:26:53 fetching corpus: 16572, signal 421211/470592 (executing program) 2021/01/28 21:26:54 fetching corpus: 16622, signal 421490/470592 (executing program) 2021/01/28 21:26:54 fetching corpus: 16672, signal 421738/470592 (executing program) 2021/01/28 21:26:54 fetching corpus: 16722, signal 422082/470592 (executing program) 2021/01/28 21:26:54 fetching corpus: 16772, signal 422429/470592 (executing program) 2021/01/28 21:26:55 fetching corpus: 16822, signal 422745/470592 (executing program) 2021/01/28 21:26:55 fetching corpus: 16872, signal 423351/470592 (executing program) 2021/01/28 21:26:55 fetching corpus: 16922, signal 423639/470592 (executing program) 2021/01/28 21:26:55 fetching corpus: 16972, signal 424038/470592 (executing program) 2021/01/28 21:26:55 fetching corpus: 17022, signal 424384/470592 (executing program) 2021/01/28 21:26:56 fetching corpus: 17072, signal 424687/470592 (executing program) 2021/01/28 21:26:57 fetching corpus: 17122, signal 425377/470592 (executing program) 2021/01/28 21:26:57 fetching corpus: 17172, signal 425579/470592 (executing program) 2021/01/28 21:26:57 fetching corpus: 17221, signal 425937/470592 (executing program) 2021/01/28 21:26:57 fetching corpus: 17271, signal 426306/470592 (executing program) 2021/01/28 21:26:58 fetching corpus: 17321, signal 426592/470592 (executing program) 2021/01/28 21:26:58 fetching corpus: 17371, signal 426972/470592 (executing program) 2021/01/28 21:26:58 fetching corpus: 17421, signal 427207/470592 (executing program) 2021/01/28 21:26:58 fetching corpus: 17471, signal 427467/470592 (executing program) 2021/01/28 21:26:59 fetching corpus: 17521, signal 427924/470592 (executing program) 2021/01/28 21:26:59 fetching corpus: 17571, signal 428626/470592 (executing program) 2021/01/28 21:26:59 fetching corpus: 17621, signal 428927/470592 (executing program) 2021/01/28 21:26:59 fetching corpus: 17671, signal 429201/470592 (executing program) 2021/01/28 21:27:00 fetching corpus: 17721, signal 429521/470592 (executing program) 2021/01/28 21:27:00 fetching corpus: 17771, signal 430281/470592 (executing program) 2021/01/28 21:27:00 fetching corpus: 17821, signal 430510/470592 (executing program) 2021/01/28 21:27:01 fetching corpus: 17871, signal 430881/470592 (executing program) 2021/01/28 21:27:01 fetching corpus: 17921, signal 431124/470592 (executing program) 2021/01/28 21:27:01 fetching corpus: 17971, signal 431382/470592 (executing program) 2021/01/28 21:27:01 fetching corpus: 18021, signal 431648/470592 (executing program) 2021/01/28 21:27:02 fetching corpus: 18071, signal 431928/470592 (executing program) 2021/01/28 21:27:02 fetching corpus: 18121, signal 432218/470592 (executing program) 2021/01/28 21:27:02 fetching corpus: 18171, signal 432499/470592 (executing program) 2021/01/28 21:27:02 fetching corpus: 18221, signal 432997/470592 (executing program) 2021/01/28 21:27:02 fetching corpus: 18271, signal 433365/470592 (executing program) 2021/01/28 21:27:03 fetching corpus: 18321, signal 433607/470592 (executing program) 2021/01/28 21:27:03 fetching corpus: 18371, signal 433917/470592 (executing program) 2021/01/28 21:27:03 fetching corpus: 18421, signal 434294/470592 (executing program) 2021/01/28 21:27:04 fetching corpus: 18471, signal 434609/470592 (executing program) 2021/01/28 21:27:04 fetching corpus: 18521, signal 434852/470592 (executing program) 2021/01/28 21:27:05 fetching corpus: 18571, signal 435121/470592 (executing program) 2021/01/28 21:27:05 fetching corpus: 18621, signal 435340/470592 (executing program) 2021/01/28 21:27:05 fetching corpus: 18671, signal 435549/470592 (executing program) 2021/01/28 21:27:05 fetching corpus: 18721, signal 435844/470592 (executing program) 2021/01/28 21:27:05 fetching corpus: 18771, signal 436254/470592 (executing program) 2021/01/28 21:27:06 fetching corpus: 18821, signal 436493/470592 (executing program) 2021/01/28 21:27:06 fetching corpus: 18871, signal 436777/470592 (executing program) 2021/01/28 21:27:06 fetching corpus: 18921, signal 437122/470592 (executing program) 2021/01/28 21:27:06 fetching corpus: 18971, signal 437401/470592 (executing program) 2021/01/28 21:27:07 fetching corpus: 19021, signal 437640/470592 (executing program) 2021/01/28 21:27:07 fetching corpus: 19071, signal 438037/470592 (executing program) 2021/01/28 21:27:07 fetching corpus: 19121, signal 438426/470592 (executing program) 2021/01/28 21:27:08 fetching corpus: 19171, signal 438859/470592 (executing program) 2021/01/28 21:27:08 fetching corpus: 19221, signal 439126/470592 (executing program) 2021/01/28 21:27:08 fetching corpus: 19270, signal 439428/470592 (executing program) 2021/01/28 21:27:08 fetching corpus: 19320, signal 439696/470592 (executing program) 2021/01/28 21:27:08 fetching corpus: 19370, signal 440093/470592 (executing program) 2021/01/28 21:27:09 fetching corpus: 19420, signal 440375/470592 (executing program) 2021/01/28 21:27:09 fetching corpus: 19470, signal 440625/470592 (executing program) 2021/01/28 21:27:09 fetching corpus: 19520, signal 440867/470592 (executing program) 2021/01/28 21:27:09 fetching corpus: 19570, signal 441174/470592 (executing program) 2021/01/28 21:27:10 fetching corpus: 19620, signal 441467/470592 (executing program) 2021/01/28 21:27:10 fetching corpus: 19670, signal 441705/470592 (executing program) 2021/01/28 21:27:10 fetching corpus: 19720, signal 442125/470592 (executing program) 2021/01/28 21:27:10 fetching corpus: 19770, signal 442456/470592 (executing program) 2021/01/28 21:27:11 fetching corpus: 19820, signal 442728/470592 (executing program) 2021/01/28 21:27:11 fetching corpus: 19870, signal 443062/470592 (executing program) 2021/01/28 21:27:11 fetching corpus: 19920, signal 443325/470592 (executing program) 2021/01/28 21:27:12 fetching corpus: 19970, signal 443697/470601 (executing program) 2021/01/28 21:27:12 fetching corpus: 20020, signal 443999/470601 (executing program) 2021/01/28 21:27:13 fetching corpus: 20070, signal 445017/470612 (executing program) 2021/01/28 21:27:13 fetching corpus: 20120, signal 445298/470612 (executing program) 2021/01/28 21:27:13 fetching corpus: 20170, signal 445534/470616 (executing program) 2021/01/28 21:27:13 fetching corpus: 20220, signal 445853/470616 (executing program) 2021/01/28 21:27:13 fetching corpus: 20270, signal 446130/470616 (executing program) 2021/01/28 21:27:14 fetching corpus: 20320, signal 446459/470616 (executing program) 2021/01/28 21:27:14 fetching corpus: 20370, signal 446829/470616 (executing program) 2021/01/28 21:27:14 fetching corpus: 20420, signal 447138/470616 (executing program) 2021/01/28 21:27:14 fetching corpus: 20470, signal 447358/470616 (executing program) 2021/01/28 21:27:15 fetching corpus: 20520, signal 447805/470616 (executing program) 2021/01/28 21:27:15 fetching corpus: 20570, signal 448062/470616 (executing program) 2021/01/28 21:27:15 fetching corpus: 20620, signal 448268/470616 (executing program) 2021/01/28 21:27:15 fetching corpus: 20669, signal 448609/470616 (executing program) 2021/01/28 21:27:16 fetching corpus: 20719, signal 448927/470616 (executing program) 2021/01/28 21:27:16 fetching corpus: 20769, signal 449148/470616 (executing program) 2021/01/28 21:27:16 fetching corpus: 20819, signal 449361/470616 (executing program) 2021/01/28 21:27:16 fetching corpus: 20869, signal 449624/470616 (executing program) 2021/01/28 21:27:16 fetching corpus: 20919, signal 449995/470616 (executing program) 2021/01/28 21:27:17 fetching corpus: 20969, signal 450252/470616 (executing program) 2021/01/28 21:27:17 fetching corpus: 21019, signal 450498/470616 (executing program) 2021/01/28 21:27:17 fetching corpus: 21069, signal 450804/470616 (executing program) 2021/01/28 21:27:17 fetching corpus: 21119, signal 451201/470616 (executing program) 2021/01/28 21:27:18 fetching corpus: 21169, signal 451540/470616 (executing program) 2021/01/28 21:27:18 fetching corpus: 21219, signal 452009/470625 (executing program) 2021/01/28 21:27:18 fetching corpus: 21269, signal 452265/470625 (executing program) 2021/01/28 21:27:19 fetching corpus: 21319, signal 452799/470625 (executing program) 2021/01/28 21:27:19 fetching corpus: 21369, signal 453100/470625 (executing program) 2021/01/28 21:27:19 fetching corpus: 21419, signal 453434/470625 (executing program) 2021/01/28 21:27:20 fetching corpus: 21469, signal 453715/470625 (executing program) 2021/01/28 21:27:20 fetching corpus: 21519, signal 453927/470625 (executing program) 2021/01/28 21:27:20 fetching corpus: 21569, signal 454090/470625 (executing program) 2021/01/28 21:27:20 fetching corpus: 21619, signal 454458/470625 (executing program) 2021/01/28 21:27:21 fetching corpus: 21669, signal 454679/470625 (executing program) 2021/01/28 21:27:21 fetching corpus: 21719, signal 455001/470625 (executing program) 2021/01/28 21:27:21 fetching corpus: 21769, signal 455225/470625 (executing program) 2021/01/28 21:27:21 fetching corpus: 21818, signal 455470/470625 (executing program) 2021/01/28 21:27:21 fetching corpus: 21868, signal 455733/470625 (executing program) 2021/01/28 21:27:22 fetching corpus: 21918, signal 455990/470625 (executing program) 2021/01/28 21:27:22 fetching corpus: 21968, signal 456224/470625 (executing program) 2021/01/28 21:27:22 fetching corpus: 22018, signal 456455/470625 (executing program) 2021/01/28 21:27:22 fetching corpus: 22068, signal 456636/470625 (executing program) 2021/01/28 21:27:23 fetching corpus: 22118, signal 456859/470625 (executing program) 2021/01/28 21:27:23 fetching corpus: 22168, signal 457121/470625 (executing program) 2021/01/28 21:27:23 fetching corpus: 22218, signal 457314/470625 (executing program) 2021/01/28 21:27:23 fetching corpus: 22268, signal 457614/470625 (executing program) 2021/01/28 21:27:24 fetching corpus: 22318, signal 457813/470625 (executing program) 2021/01/28 21:27:24 fetching corpus: 22368, signal 458116/470625 (executing program) 2021/01/28 21:27:24 fetching corpus: 22418, signal 458377/470625 (executing program) 2021/01/28 21:27:25 fetching corpus: 22468, signal 458637/470625 (executing program) 2021/01/28 21:27:25 fetching corpus: 22518, signal 458887/470625 (executing program) 2021/01/28 21:27:25 fetching corpus: 22568, signal 459260/470625 (executing program) 2021/01/28 21:27:25 fetching corpus: 22618, signal 459602/470625 (executing program) 2021/01/28 21:27:25 fetching corpus: 22668, signal 459896/470625 (executing program) 2021/01/28 21:27:25 fetching corpus: 22718, signal 460094/470625 (executing program) 2021/01/28 21:27:26 fetching corpus: 22768, signal 460423/470625 (executing program) 2021/01/28 21:27:26 fetching corpus: 22818, signal 460664/470625 (executing program) 2021/01/28 21:27:26 fetching corpus: 22868, signal 460936/470625 (executing program) 2021/01/28 21:27:26 fetching corpus: 22918, signal 461156/470625 (executing program) 2021/01/28 21:27:27 fetching corpus: 22968, signal 461511/470625 (executing program) 2021/01/28 21:27:27 fetching corpus: 23018, signal 462071/470625 (executing program) 2021/01/28 21:27:27 fetching corpus: 23068, signal 462352/470625 (executing program) 2021/01/28 21:27:27 fetching corpus: 23118, signal 462539/470625 (executing program) 2021/01/28 21:27:27 fetching corpus: 23168, signal 462831/470625 (executing program) 2021/01/28 21:27:28 fetching corpus: 23218, signal 463089/470625 (executing program) 2021/01/28 21:27:28 fetching corpus: 23268, signal 463349/470625 (executing program) 2021/01/28 21:27:28 fetching corpus: 23318, signal 463582/470625 (executing program) 2021/01/28 21:27:28 fetching corpus: 23368, signal 463854/470625 (executing program) 2021/01/28 21:27:29 fetching corpus: 23418, signal 464030/470625 (executing program) 2021/01/28 21:27:29 fetching corpus: 23468, signal 464246/470625 (executing program) 2021/01/28 21:27:29 fetching corpus: 23518, signal 464449/470625 (executing program) 2021/01/28 21:27:29 fetching corpus: 23568, signal 464768/470625 (executing program) 2021/01/28 21:27:30 fetching corpus: 23618, signal 465005/470625 (executing program) 2021/01/28 21:27:30 fetching corpus: 23668, signal 465234/470625 (executing program) 2021/01/28 21:27:30 fetching corpus: 23718, signal 465468/470626 (executing program) 2021/01/28 21:27:31 fetching corpus: 23767, signal 465648/470626 (executing program) 2021/01/28 21:27:31 fetching corpus: 23817, signal 465985/470626 (executing program) 2021/01/28 21:27:31 fetching corpus: 23867, signal 466258/470626 (executing program) 2021/01/28 21:27:32 fetching corpus: 23917, signal 466671/470626 (executing program) 2021/01/28 21:27:32 fetching corpus: 23967, signal 466897/470626 (executing program) 2021/01/28 21:27:32 fetching corpus: 24017, signal 467152/470626 (executing program) 2021/01/28 21:27:32 fetching corpus: 24067, signal 467379/470626 (executing program) 2021/01/28 21:27:33 fetching corpus: 24117, signal 467659/470626 (executing program) 2021/01/28 21:27:33 fetching corpus: 24167, signal 467962/470626 (executing program) 2021/01/28 21:27:33 fetching corpus: 24207, signal 468125/470626 (executing program) 2021/01/28 21:27:33 fetching corpus: 24207, signal 468125/470626 (executing program) 2021/01/28 21:27:37 starting 4 fuzzer processes 21:27:38 executing program 0: r0 = syz_open_dev$vim2m(&(0x7f0000001600)='/dev/video#\x00', 0x4, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @pix_mp={0x0, 0x0, 0x32315659}}) [ 271.678231][ T49] audit: type=1400 audit(1611869258.420:44): avc: denied { map } for pid=11234 comm="syz-executor.0" path="/sys/kernel/debug/kcov" dev="debugfs" ino=47 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:debugfs_t:s0 tclass=file permissive=1 21:27:38 executing program 1: socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @local}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/schedstat\x00', 0x0, 0x0) accept4$nfc_llcp(r4, &(0x7f0000002100), &(0x7f0000002180)=0x60, 0x800) read$FUSE(r4, &(0x7f00000000c0)={0x2020}, 0x2020) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {0x0}, {}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r4, 0xc010641d, &(0x7f00000005c0)={r5, &(0x7f00000004c0)=""/195}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, 0x0, 0x1, 0x0, 0x0, {0xf}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6}, {0x5}}]}, 0x54}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(0xffffffffffffffff, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002200)={0xb4, 0x0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x7aa}, {0x6, 0x16, 0x65}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xfc00}, {0x8, 0xb, 0x2}}, {{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1000}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x3ff}, {0x8, 0xb, 0x2}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4014005}, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000240)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x35, r1}) sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000440)={&(0x7f0000000680)=ANY=[@ANYBLOB="ae608fef65b743a26d53e3661ad816ae3aa6f7", @ANYRES16=0x0, @ANYBLOB="8f2e616dfd6d6d2d36d0", @ANYRES32=r1, @ANYBLOB="0800040000000000080008000200000008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000300000000000000080004007f000001"], 0x50}, 0x1, 0x0, 0x0, 0x20004000}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc, 0x1, 'macvlan\x00'}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x0) 21:27:39 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x63}}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 21:27:39 executing program 3: sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff000d000000020000000b000000ec0079c9130001", 0xfed3}], 0x1}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xff, &(0x7f0000000080)=[{&(0x7f0000000040)="2f0000001c0005c5ffffff080d0000000200001f01000000190102", 0x1cb}], 0x1}, 0x0) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x7ffffffff000, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) [ 273.060651][T11235] IPVS: ftp: loaded support on port[0] = 21 [ 273.269294][T11235] chnl_net:caif_netlink_parms(): no params data found [ 273.345538][T11235] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.355108][T11235] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.366267][T11235] device bridge_slave_0 entered promiscuous mode [ 273.378211][T11235] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.387268][T11235] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.397122][T11235] device bridge_slave_1 entered promiscuous mode [ 273.435550][T11235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.453277][T11235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.494112][T11237] IPVS: ftp: loaded support on port[0] = 21 [ 273.502250][T11235] team0: Port device team_slave_0 added [ 273.556626][T11235] team0: Port device team_slave_1 added [ 273.613620][T11235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.623824][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.660838][T11235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.686902][T11235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.703145][T11235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.757537][T11235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 273.830550][T11235] device hsr_slave_0 entered promiscuous mode [ 273.840631][T11235] device hsr_slave_1 entered promiscuous mode [ 273.915998][T11239] IPVS: ftp: loaded support on port[0] = 21 [ 273.991617][T11237] chnl_net:caif_netlink_parms(): no params data found [ 274.182374][T11237] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.194901][T11237] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.206552][T11237] device bridge_slave_0 entered promiscuous mode [ 274.235553][T11237] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.236144][T11245] IPVS: ftp: loaded support on port[0] = 21 [ 274.248315][T11237] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.270013][T11237] device bridge_slave_1 entered promiscuous mode [ 274.370001][T11237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.443071][T11237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.465239][ T49] audit: type=1400 audit(1611869261.200:45): avc: denied { create } for pid=11235 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 274.500801][ T49] audit: type=1400 audit(1611869261.200:46): avc: denied { write } for pid=11235 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 274.503663][T11235] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 274.531232][ T49] audit: type=1400 audit(1611869261.200:47): avc: denied { read } for pid=11235 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 274.590263][T11235] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 274.606478][T11237] team0: Port device team_slave_0 added [ 274.613576][T11239] chnl_net:caif_netlink_parms(): no params data found [ 274.647084][T11235] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 274.662603][T11237] team0: Port device team_slave_1 added [ 274.694463][T11235] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 274.769281][T11237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.781191][T11237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.825301][T11237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.846907][T11237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 274.857464][T11237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.904616][T11237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.024864][T11237] device hsr_slave_0 entered promiscuous mode [ 275.037515][ T3877] Bluetooth: hci0: command 0x0409 tx timeout [ 275.049570][T11237] device hsr_slave_1 entered promiscuous mode [ 275.059741][T11237] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.072816][T11237] Cannot create hsr debugfs directory [ 275.080795][T11239] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.090614][T11239] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.106066][T11239] device bridge_slave_0 entered promiscuous mode [ 275.129890][T11239] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.139755][T11239] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.150359][T11239] device bridge_slave_1 entered promiscuous mode [ 275.250686][T11239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.263242][T11245] chnl_net:caif_netlink_parms(): no params data found [ 275.293804][T11239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.368547][T11239] team0: Port device team_slave_0 added [ 275.386931][T11239] team0: Port device team_slave_1 added [ 275.468420][T11239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.468433][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.468459][T11239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.473396][T11239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.504578][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 275.524666][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.602308][T11239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.692138][T11245] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.711174][T11245] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.725554][T11245] device bridge_slave_0 entered promiscuous mode [ 275.756238][T11239] device hsr_slave_0 entered promiscuous mode [ 275.799098][T11239] device hsr_slave_1 entered promiscuous mode [ 275.813376][T11239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.825005][T11239] Cannot create hsr debugfs directory [ 275.857470][T11245] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.867499][T11245] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.882244][T11245] device bridge_slave_1 entered promiscuous mode [ 275.915304][ T3344] Bluetooth: hci2: command 0x0409 tx timeout [ 275.980402][T11245] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.015868][T11245] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.072119][T11245] team0: Port device team_slave_0 added [ 276.088349][T11245] team0: Port device team_slave_1 added [ 276.161958][T11245] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.172532][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.210822][T11245] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.227363][T11245] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.234921][ T3344] Bluetooth: hci3: command 0x0409 tx timeout [ 276.236860][T11245] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.273394][T11245] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.295971][T11237] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.358651][T11237] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.378722][T11245] device hsr_slave_0 entered promiscuous mode [ 276.389028][T11245] device hsr_slave_1 entered promiscuous mode [ 276.404720][T11245] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.415962][T11245] Cannot create hsr debugfs directory [ 276.441426][T11237] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.491344][T11237] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.546125][T11235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.615249][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 276.626256][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 276.661475][T11235] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.722549][T11239] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 276.744224][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 276.757149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 276.770441][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.781336][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.795703][T11239] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 276.815351][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 276.829829][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 276.842571][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 276.854072][ T2941] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.863533][ T2941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.895133][T11239] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 276.910253][T11239] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 276.930435][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 276.975678][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 276.999756][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.012775][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.024232][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.067298][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.077857][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.088059][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.101508][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.114912][ T20] Bluetooth: hci0: command 0x041b tx timeout [ 277.117545][T11245] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 277.148042][T11245] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 277.162191][T11245] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 277.181849][T11245] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 277.201749][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 277.216020][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 277.238831][T11235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.289595][T11237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.350948][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 277.363668][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 277.376295][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 277.388997][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 277.413297][T11237] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.441607][T11235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.478129][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 277.492606][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 277.504783][ T3344] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.513786][ T3344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.551698][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 277.563436][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 277.577428][T11269] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 277.591076][T11269] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.599897][T11269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.611158][T11269] Bluetooth: hci1: command 0x041b tx timeout [ 277.637958][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 277.666320][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 277.714775][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 277.737202][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 277.761636][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 277.777465][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 277.811892][T11239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.837767][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 277.848129][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 277.860158][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 277.907992][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 277.926289][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 277.953535][T11237] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 277.971900][T11237] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 277.986439][ T20] Bluetooth: hci2: command 0x041b tx timeout [ 278.009678][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.021816][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.033522][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.046897][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.060524][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 278.074777][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 278.087823][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 278.099604][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 278.123065][T11239] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.146811][T11235] device veth0_vlan entered promiscuous mode [ 278.168677][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.183858][ T2941] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.196622][ T2941] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.207009][ T2941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.235826][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.249826][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.263006][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.274073][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.282904][T11270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.298482][T11235] device veth1_vlan entered promiscuous mode [ 278.306106][ T3344] Bluetooth: hci3: command 0x041b tx timeout [ 278.322302][T11245] 8021q: adding VLAN 0 to HW filter on device bond0 [ 278.344508][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 278.357698][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 278.370936][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 278.396584][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 278.407661][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.435448][ T3344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.464812][T11235] device veth0_macvtap entered promiscuous mode [ 278.489293][T11237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 278.505541][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 278.516682][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 278.526577][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 278.535513][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 278.544713][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 278.561553][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 278.583101][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 278.592748][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 278.605576][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 278.620309][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 278.637253][T11245] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.650638][T11235] device veth1_macvtap entered promiscuous mode [ 278.687804][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 278.700682][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 278.713975][ T3877] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.724695][ T3877] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.739308][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 278.753192][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 278.766270][ T3877] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 278.818418][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 278.828765][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 278.841594][T11270] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.851124][T11270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.862086][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 278.873980][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 278.884595][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 278.898021][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 278.909562][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 278.926739][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 278.944521][T11239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 278.961479][T11235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.994159][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 279.007344][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 279.020778][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 279.031776][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 279.043008][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 279.061058][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 279.080340][T11235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.096142][T11235] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.108272][T11235] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.120655][T11235] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.132401][T11235] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.146868][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 279.157150][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 279.167305][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 279.184897][ T20] Bluetooth: hci0: command 0x040f tx timeout [ 279.219772][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.231808][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.243921][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.255071][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 279.270559][T11237] device veth0_vlan entered promiscuous mode [ 279.304970][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 279.315186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 279.325573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.334823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.393126][T11237] device veth1_vlan entered promiscuous mode [ 279.407950][T11239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.421320][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 279.435818][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 279.448381][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 279.462998][T11245] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 279.528978][T11262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.548037][T11262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.566950][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 279.579987][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 279.625151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 279.638172][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 279.664605][ T3344] Bluetooth: hci1: command 0x040f tx timeout [ 279.678904][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 279.690609][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 279.702252][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 279.713486][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 279.729430][T11245] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.754132][T11262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 279.757714][T11237] device veth0_macvtap entered promiscuous mode [ 279.764247][T11262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.799257][T11237] device veth1_macvtap entered promiscuous mode [ 279.819330][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 279.831410][T11270] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 279.848299][ T49] audit: type=1400 audit(1611869266.580:48): avc: denied { associate } for pid=11235 comm="syz-executor.0" name="syz0" scontext=unconfined_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=filesystem permissive=1 [ 279.874852][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 279.897318][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 279.919813][T11237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 279.933170][T11237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.950716][T11237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.960580][T11239] device veth0_vlan entered promiscuous mode [ 279.978041][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 279.989245][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.001000][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.013337][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.031395][T11235] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 280.031742][T11237] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.060693][T11237] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.075235][T11272] Bluetooth: hci2: command 0x040f tx timeout [ 280.076007][T11237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.105057][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 280.119196][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 280.132380][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 280.146412][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 280.166611][T11239] device veth1_vlan entered promiscuous mode [ 280.179113][T11237] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.192703][T11237] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.205971][T11237] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.220228][T11237] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.289288][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 280.309714][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.322599][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 280.335291][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready 21:27:47 executing program 0: mq_timedreceive(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x77359400}) [ 280.348479][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 280.360158][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 280.373902][T11245] device veth0_vlan entered promiscuous mode [ 280.386028][ T20] Bluetooth: hci3: command 0x040f tx timeout 21:27:47 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40049409, &(0x7f000000d080)) [ 280.458660][T11245] device veth1_vlan entered promiscuous mode [ 280.487963][T11274] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.500155][T11274] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.517223][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready 21:27:47 executing program 0: r0 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) lseek(r0, 0x0, 0x4) [ 280.532312][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 280.553800][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 280.567471][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.581363][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 21:27:47 executing program 0: socketpair(0x11, 0x0, 0x0, &(0x7f0000000540)) [ 280.621200][T11239] device veth0_macvtap entered promiscuous mode [ 280.642493][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready 21:27:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, 0xfffffffffffffffd}, 0x0) [ 280.688278][T11239] device veth1_macvtap entered promiscuous mode [ 280.701926][T11262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.711737][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 280.712894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 280.726267][T11262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.748454][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 280.768148][T11245] device veth0_macvtap entered promiscuous mode [ 280.786871][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.804221][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.821354][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 280.838714][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.852887][T11239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.869295][T11245] device veth1_macvtap entered promiscuous mode [ 280.889339][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 280.900181][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 280.910329][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 280.921699][T11258] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 280.941544][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.958685][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.973614][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 280.989635][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.007523][T11239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.030999][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.044938][T11272] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.073298][T11239] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.085721][T11239] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.097462][T11239] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.108750][T11239] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.130675][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.147225][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.162749][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.179133][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.197487][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 281.217514][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.233334][T11245] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.252392][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 281.264035][T11273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 281.266149][ T20] Bluetooth: hci0: command 0x0419 tx timeout [ 281.341641][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.363047][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.380891][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.395952][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.410186][T11245] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 281.426262][T11245] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.442027][T11245] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.462934][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 281.475306][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 281.533592][T11245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.544683][T11245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.556422][T11245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.570128][T11245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 21:27:48 executing program 0: syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') [ 281.636581][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.648682][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.663292][ T25] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.735203][T11251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.747814][T11251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.759951][T11272] Bluetooth: hci1: command 0x0419 tx timeout [ 281.778504][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.805899][ T2954] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.821959][ T2954] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.844298][T11259] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 281.866246][T11251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.878338][T11251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.889804][T11271] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 281.932450][T11302] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 21:27:48 executing program 1: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000003bc0)='wireguard\x00') socketpair(0x0, 0x80000, 0x0, &(0x7f0000003fc0)) [ 282.155128][T11272] Bluetooth: hci2: command 0x0419 tx timeout 21:27:48 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/sysvipc/shm\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/223, 0xdf}], 0x1, 0x3, 0x0) 21:27:48 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x63}}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 21:27:48 executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000002900)='nl80211\x00') 21:27:48 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={&(0x7f0000000340), 0xc, 0x0}, 0x0) 21:27:49 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x63}}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 21:27:49 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 21:27:49 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) ioctl$NBD_SET_TIMEOUT(r0, 0xab09, 0x1) 21:27:49 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x0) [ 282.472054][T11272] Bluetooth: hci3: command 0x0419 tx timeout 21:27:49 executing program 3: connect$can_bcm(0xffffffffffffffff, 0x0, 0x0) 21:27:49 executing program 2: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x88880, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev}, 0x1c) sendto$inet6(r0, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_mtu(r0, 0x29, 0x17, &(0x7f0000000040)=0x3, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000000)={@dev={0xfe, 0x80, [], 0x63}}, 0x14) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000000), 0x4) 21:27:49 executing program 0: syz_open_dev$char_raw(&(0x7f0000000300)='/dev/raw/raw#\x00', 0x1, 0x202000) 21:27:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 21:27:49 executing program 3: capget(&(0x7f00000001c0)={0x20071026}, &(0x7f0000000200)) [ 282.716849][T11349] capability: warning: `syz-executor.3' uses deprecated v2 capabilities in a way that may be insecure 21:27:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000001e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 21:27:49 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x404241, 0x0) ioctl$LOOP_CTL_ADD(r1, 0x4c80, 0xb) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000080)=@ipx, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/28, 0x1c}, {&(0x7f0000000140)=""/136, 0x88}, {&(0x7f0000000200)=""/105, 0x69}, {&(0x7f0000000280)=""/246, 0xf6}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000003c0)=""/86, 0x56}, {&(0x7f0000000440)=""/216, 0xd8}, {&(0x7f0000000540)=""/160, 0xa0}, {&(0x7f0000000600)=""/185, 0xb9}], 0x9, &(0x7f0000000780)=""/199, 0xc7}, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 21:27:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={0x0}}, 0x0) 21:27:49 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) [ 282.933561][T11359] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 282.976660][ T49] audit: type=1400 audit(1611869269.710:49): avc: denied { create } for pid=11360 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 282.998978][T11359] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 21:27:49 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 21:27:49 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0) [ 283.030268][ T49] audit: type=1400 audit(1611869269.710:50): avc: denied { write } for pid=11360 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 21:27:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000001e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 21:27:49 executing program 3: syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x0, 0x26c01) [ 283.185823][T11374] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 21:27:49 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000001e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 21:27:49 executing program 2: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x550481, 0x0) 21:27:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) [ 283.370387][T11387] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 21:27:50 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="290000002000190f00003fffffffda060200000001e80001dd0000040d000600ea1100000005000000", 0x29}], 0x1) 21:27:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001a00)='/proc/partitions\x00', 0x0, 0x0) preadv(r2, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)=""/223, 0xdf}], 0x1, 0x3, 0x0) 21:27:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}]}) 21:27:50 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) [ 283.679945][T11397] netlink: 'syz-executor.0': attribute type 6 has an invalid length. 21:27:50 executing program 2: capget(&(0x7f00000001c0), &(0x7f0000000200)) 21:27:50 executing program 0: syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, 0x0, 0x0) [ 283.835589][T11402] loop3: detected capacity change from 6 to 0 [ 283.857796][T11402] FAT-fs (loop3): bogus number of FAT sectors [ 283.871210][T11402] FAT-fs (loop3): Can't find a valid FAT filesystem 21:27:50 executing program 1: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x7) 21:27:50 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDGETENTCNT(r0, 0x80045200, &(0x7f0000000000)) 21:27:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}]}) 21:27:50 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000003bc0)='wireguard\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000003fc0)) 21:27:50 executing program 1: syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) 21:27:50 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000080)={0x9c, 0x41, "6596b0ac5593470358cb7b6b831f72a36aa008b47bdddb874f6986a46fa004c8785cc698c2e3c29c89d5e33c2662a2b1a0cdec21e2cbc163782891646465ea721e"}) [ 284.083972][T11426] loop3: detected capacity change from 6 to 0 [ 284.098144][T11426] FAT-fs (loop3): bogus number of FAT sectors [ 284.106249][T11426] FAT-fs (loop3): Can't find a valid FAT filesystem 21:27:50 executing program 2: getitimer(0x0, &(0x7f00000005c0)) 21:27:50 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000003bc0)='wireguard\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000003fc0)) 21:27:50 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x40400d1) 21:27:50 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}]}) 21:27:51 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f0000000000)={0x5}) 21:27:51 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000003bc0)='wireguard\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000003fc0)) 21:27:51 executing program 1: capget(0x0, &(0x7f0000000200)) 21:27:51 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={0x0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00)='nl80211\x00') socket$nl_generic(0x10, 0x3, 0x10) 21:27:51 executing program 1: syz_genetlink_get_family_id$nbd(&(0x7f0000000240)='nbd\x00') [ 284.355762][T11449] loop3: detected capacity change from 6 to 0 [ 284.383483][T11449] FAT-fs (loop3): bogus number of FAT sectors 21:27:51 executing program 0: syz_genetlink_get_family_id$wireguard(&(0x7f0000003bc0)='wireguard\x00') socketpair(0x0, 0x0, 0x0, &(0x7f0000003fc0)) [ 284.413763][T11449] FAT-fs (loop3): Can't find a valid FAT filesystem 21:27:51 executing program 1: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000002580), 0x10) 21:27:51 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@fat=@codepage={'codepage', 0x3d, '1250'}}]}) 21:27:51 executing program 2: capget(&(0x7f00000001c0), 0x0) 21:27:51 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x208000) 21:27:51 executing program 0: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vfio/vfio\x00', 0x1, 0x0) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='s', 0x1}], 0x1) 21:27:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_NAT_DST={0x4}, @CTA_TIMEOUT={0x8}]}, 0x20}}, 0x0) 21:27:51 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) [ 284.644818][T11481] loop3: detected capacity change from 6 to 0 21:27:51 executing program 0: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) [ 284.667411][T11481] FAT-fs (loop3): bogus number of FAT sectors [ 284.677115][T11481] FAT-fs (loop3): Can't find a valid FAT filesystem 21:27:51 executing program 1: syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x3ff, 0x182000) 21:27:51 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000300)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400028001000240000004f8", 0x16}, {0x0, 0x0, 0x600}], 0x0, &(0x7f0000000040)={[{@fat=@tz_utc='tz=UTC'}]}) 21:27:51 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x208000) 21:27:51 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={0x0, 0x10c4}}, 0x0) 21:27:51 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r0, 0x40082102, 0x0) [ 284.934870][T11504] loop1: detected capacity change from 6 to 0 21:27:51 executing program 2: getitimer(0x2, &(0x7f00000005c0)) [ 284.955236][T11504] FAT-fs (loop1): bogus number of FAT sectors [ 284.965286][T11504] FAT-fs (loop1): Can't find a valid FAT filesystem 21:27:51 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, 0x0, 0x0) 21:27:51 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d00)={0x14}, 0x14}}, 0x0) 21:27:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000b40)={0x28, 0x0, 0xb05, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) [ 285.040270][T11504] loop1: detected capacity change from 6 to 0 [ 285.060525][T11504] FAT-fs (loop1): bogus number of FAT sectors [ 285.070851][T11504] FAT-fs (loop1): Can't find a valid FAT filesystem 21:27:51 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x74, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x60, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x0, 0x8000]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x3}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 21:27:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_FLUSH(r0, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={0x0}}, 0x0) 21:27:51 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x113040, 0x0) 21:27:52 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={0x0}}, 0x0) 21:27:52 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) 21:27:52 executing program 2: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd/3\x00') 21:27:52 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 21:27:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) 21:27:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00') r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS3\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x7ffff005) 21:27:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) 21:27:52 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)=0x1) 21:27:52 executing program 2: r0 = getpgrp(0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) 21:27:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x0) 21:27:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) 21:27:52 executing program 2: syz_genetlink_get_family_id$devlink(&(0x7f0000000000)='devlink\x00') 21:27:52 executing program 2: sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) [ 285.881465][ T49] audit: type=1400 audit(1611869272.620:51): avc: denied { open } for pid=11570 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 21:27:52 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0xb) [ 285.939407][ T49] audit: type=1400 audit(1611869272.620:52): avc: denied { perfmon } for pid=11570 comm="syz-executor.0" capability=38 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 21:27:52 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc}, [@NFQA_CT={0x40, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) [ 285.979582][ T49] audit: type=1400 audit(1611869272.620:53): avc: denied { kernel } for pid=11570 comm="syz-executor.0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=perf_event permissive=1 [ 286.021761][ T49] audit: type=1400 audit(1611869272.620:54): avc: denied { confidentiality } for pid=11570 comm="syz-executor.0" lockdown_reason="unsafe use of perf" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=lockdown permissive=1 21:27:52 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) 21:27:52 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x0) 21:27:52 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x0) 21:27:52 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x100000000000000, 0xd0800) 21:27:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x0) 21:27:53 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x840) 21:27:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x0) 21:27:53 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc}, [@NFQA_CT={0x40, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:53 executing program 1: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x80042) 21:27:53 executing program 2: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x0) 21:27:53 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1263, 0x0) 21:27:53 executing program 1: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x54, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0xc, 0x16, 0x1, 0x0, [0xffff, 0x8000]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 21:27:53 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc}, [@NFQA_CT={0x40, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:53 executing program 2: syz_open_dev$vcsn(&(0x7f0000000180)='/dev/vcs#\x00', 0x0, 0x420400) 21:27:53 executing program 0: getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000003a80)) socketpair(0x0, 0x0, 0x0, &(0x7f0000003fc0)) 21:27:53 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r1 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r1) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x54, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc}, [@NFQA_CT={0x40, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x4}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_NAT_DST={0x14, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={0x0}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0}}, 0x0) 21:27:53 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x58, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={0x24, 0x2, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_NAT_DST={0x8, 0xd, 0x0, 0x1, [@CTA_NAT_PROTO={0x4}]}, @CTA_TIMEOUT={0x8}]}, 0x24}}, 0x0) 21:27:53 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) 21:27:53 executing program 3: socketpair(0xf, 0x0, 0x0, &(0x7f0000001880)) 21:27:53 executing program 3: socketpair(0x1, 0x0, 0x0, &(0x7f0000000bc0)) 21:27:53 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7fffffff) 21:27:53 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x58, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:53 executing program 3: socketpair(0x1, 0x0, 0x200, &(0x7f0000000bc0)) 21:27:53 executing program 0: sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000780)='TIPCv2\x00') syz_genetlink_get_family_id$ethtool(0x0) 21:27:53 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x58, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:53 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)=0x7fffffff) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 21:27:53 executing program 0: syz_genetlink_get_family_id$nl80211(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 21:27:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={0x0, 0x10c4}}, 0x0) 21:27:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x6c, 0x1, 0x3, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFQA_CT={0x58, 0xb, 0x0, 0x1, [@CTA_LABELS_MASK={0x8, 0x17, [0x0]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'netbios-ns\x00'}}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0xffff, 0x4, 0x8000]}, @CTA_NAT_DST={0x28, 0xd, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @private=0xa010102}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @private2}, @CTA_NAT_V4_MAXIP={0x8, 0x2, @multicast1}]}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:54 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)) 21:27:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001400)={&(0x7f0000000300)=ANY=[], 0x10c4}}, 0x0) 21:27:54 executing program 2: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, 0x0) 21:27:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000002900)='nl80211\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002940)={'wlan1\x00'}) [ 287.458372][ T49] audit: type=1400 audit(1611869274.190:55): avc: denied { ioctl } for pid=11693 comm="syz-executor.1" path="socket:[44135]" dev="sockfs" ino=44135 ioctlcmd=0x8933 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 21:27:54 executing program 2: socketpair(0x0, 0x0, 0x0, &(0x7f0000003fc0)) 21:27:54 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000300)=ANY=[], 0x10c4}}, 0x0) 21:27:54 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) 21:27:54 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x201, 0x0) 21:27:54 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)) 21:27:54 executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) recvmsg$can_raw(r0, &(0x7f00000007c0)={&(0x7f0000000000)=@can, 0x80, &(0x7f0000000640)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9}, 0x0) 21:27:54 executing program 1: syz_open_dev$char_raw(&(0x7f000000d0c0)='/dev/raw/raw#\x00', 0x1, 0x0) 21:27:54 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000440)={&(0x7f0000000380), 0xc, &(0x7f0000000400)={0x0}}, 0x0) 21:27:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:54 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001e40)={0x14}, 0x14}}, 0x0) 21:27:54 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) 21:27:54 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)) 21:27:54 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:55 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:55 executing program 3: openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x2040, 0x0) 21:27:55 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x80, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, 0x0) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000040)) 21:27:55 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x8002, 0x0) 21:27:55 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000a00)='/dev/loop-control\x00', 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, 0x0) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f000000d080)) ioctl$RNDCLEARPOOL(r0, 0x5206, &(0x7f0000000040)) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 21:27:55 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x3, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_PROTOCOL, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x0, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL]}, 0xfffffffffffffd87}}, 0x0) 21:27:55 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) 21:27:55 executing program 3: openat$urandom(0xffffffffffffff9c, &(0x7f000000d040)='/dev/urandom\x00', 0x0, 0x0) 21:27:55 executing program 3: openat$urandom(0xffffffffffffff9c, 0x0, 0x430300, 0x0) 21:27:55 executing program 0: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x1, 0x400, 0x0) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) 21:27:55 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) read$char_usb(r0, &(0x7f0000000080)=""/137, 0x89) 21:27:55 executing program 1: syz_emit_ethernet(0xf, &(0x7f0000000100)={@empty, @empty, @void, {@generic={0x0, "04"}}}, 0x0) 21:27:55 executing program 1: setpriority(0x0, 0x0, 0x6e) 21:27:55 executing program 0: syz_read_part_table(0x0, 0x4, &(0x7f0000000500)=[{&(0x7f0000000000)="53b572272eae4f7cb67791d667af4a8300ed6480e6bba421c01cb00f9dce32ddf4b03216f07f874f298241980d8489638cf7ef5b9793ed16e6b260e65eb0652580a9e1f396c1befc3372f2410f2285cf585797293702d6c769c921708d5a89cadd60a127cde2d80b592af62f5624c323575d85", 0x73, 0x4}, {&(0x7f0000000080)="c7d19d16c3173e46032b1919578346cf1aa3de7e834088606cade8e103adc503b2c15a04b298bb1e686a54cf2604dc9bc6db028f9bc8a3f3388472a65a10a65b7eb8775290d886a8ebb683ca97329fdc59a8e572f5fe372cc1eb71e87dda4c763d1f", 0x62, 0x3f}, {&(0x7f00000001c0)="8d", 0x1, 0x300000000000000}, {&(0x7f0000000680)="1f", 0x1, 0x80000000}]) [ 288.886370][T11777] loop0: detected capacity change from 264192 to 0 21:27:56 executing program 3: capget(&(0x7f00000001c0)={0x20071026}, 0x0) 21:27:56 executing program 1: mlock2(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x0) 21:27:56 executing program 0: syz_read_part_table(0x0, 0x4, &(0x7f0000000500)=[{&(0x7f0000000000)="53b572272eae4f7cb67791d667af4a8300ed6480e6bba421c01cb00f9dce32ddf4b03216f07f874f298241980d8489638cf7ef5b9793ed16e6b260e65eb0652580a9e1f396c1befc3372f2410f2285cf585797293702d6c769c921708d5a89cadd60a127cde2d80b592af62f5624c323575d85", 0x73, 0x4}, {&(0x7f0000000080)="c7d19d16c3173e46032b1919578346cf1aa3de7e834088606cade8e103adc503b2c15a04b298bb1e686a54cf2604dc9bc6db028f9bc8a3f3388472a65a10a65b7eb8775290d886a8ebb683ca97329fdc59a8e572f5fe372cc1eb71e87dda4c763d1f", 0x62, 0x3f}, {&(0x7f00000001c0)="8d", 0x1, 0x300000000000000}, {&(0x7f0000000680)="1f", 0x1, 0x80000000}]) 21:27:56 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) [ 289.610333][T11784] loop0: detected capacity change from 264192 to 0 21:27:56 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x169c82, 0x0) write$tcp_congestion(r0, 0x0, 0x0) 21:27:56 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000000000)=0x1, 0x9, 0x0) 21:27:56 executing program 1: mount$9p_virtio(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x8, 0x0) 21:27:56 executing program 3: set_mempolicy(0x0, &(0x7f0000000000)=0x6, 0xb0) 21:27:56 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r1, 0x2, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, 0x0]) 21:27:56 executing program 0: syz_read_part_table(0x0, 0x4, &(0x7f0000000500)=[{&(0x7f0000000000)="53b572272eae4f7cb67791d667af4a8300ed6480e6bba421c01cb00f9dce32ddf4b03216f07f874f298241980d8489638cf7ef5b9793ed16e6b260e65eb0652580a9e1f396c1befc3372f2410f2285cf585797293702d6c769c921708d5a89cadd60a127cde2d80b592af62f5624c323575d85", 0x73, 0x4}, {&(0x7f0000000080)="c7d19d16c3173e46032b1919578346cf1aa3de7e834088606cade8e103adc503b2c15a04b298bb1e686a54cf2604dc9bc6db028f9bc8a3f3388472a65a10a65b7eb8775290d886a8ebb683ca97329fdc59a8e572f5fe372cc1eb71e87dda4c763d1f", 0x62, 0x3f}, {&(0x7f00000001c0)="8d", 0x1, 0x300000000000000}, {&(0x7f0000000680)="1f", 0x1, 0x80000000}]) [ 289.789045][T11804] loop0: detected capacity change from 264192 to 0 21:27:57 executing program 3: mbind(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x0, 0x0) 21:27:57 executing program 1: mlock2(&(0x7f0000000000/0x12000)=nil, 0x12000, 0x0) 21:27:57 executing program 0: syz_read_part_table(0x0, 0x4, &(0x7f0000000500)=[{&(0x7f0000000000)="53b572272eae4f7cb67791d667af4a8300ed6480e6bba421c01cb00f9dce32ddf4b03216f07f874f298241980d8489638cf7ef5b9793ed16e6b260e65eb0652580a9e1f396c1befc3372f2410f2285cf585797293702d6c769c921708d5a89cadd60a127cde2d80b592af62f5624c323575d85", 0x73, 0x4}, {&(0x7f0000000080)="c7d19d16c3173e46032b1919578346cf1aa3de7e834088606cade8e103adc503b2c15a04b298bb1e686a54cf2604dc9bc6db028f9bc8a3f3388472a65a10a65b7eb8775290d886a8ebb683ca97329fdc59a8e572f5fe372cc1eb71e87dda4c763d1f", 0x62, 0x3f}, {&(0x7f00000001c0)="8d", 0x1, 0x300000000000000}, {&(0x7f0000000680)="1f", 0x1, 0x80000000}]) 21:27:57 executing program 2: openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080)='/dev/fuse\x00', 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100)='fuse\x00', 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) lseek(r2, 0x0, 0x4) [ 290.526438][T11812] loop0: detected capacity change from 264192 to 0 21:27:57 executing program 3: r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x101142, 0x0) utimensat(r0, 0x0, 0x0, 0x0) 21:27:57 executing program 1: mincore(&(0x7f0000003000/0x5000)=nil, 0x5000, &(0x7f0000000040)=""/47) 21:27:57 executing program 1: mbind(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4002, &(0x7f0000000000)=0x1, 0xc03, 0x0) msync(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0) 21:27:57 executing program 3: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x0, 0x0) utimensat(r0, 0x0, &(0x7f0000000100)={{}, {0x0, 0x2710}}, 0x0) 21:27:57 executing program 0: io_setup(0x0, &(0x7f0000000040)=0x0) io_getevents(r0, 0x1, 0x1, &(0x7f0000000140)=[{}], &(0x7f0000000080)) 21:27:57 executing program 1: setresgid(0x0, 0xee00, 0xffffffffffffffff) 21:27:57 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80) 21:27:58 executing program 0: shmget(0x2, 0x4000, 0xf7296230bccbe981, &(0x7f0000005000/0x4000)=nil) 21:27:58 executing program 1: pselect6(0x34, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0) 21:27:58 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000140)) 21:27:58 executing program 0: shmget(0x3, 0x4000, 0xf7296230bccbe981, &(0x7f0000005000/0x4000)=nil) 21:27:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}, 0x0) 21:27:58 executing program 2: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r3, 0x2, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x3, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) 21:27:58 executing program 1: open$dir(&(0x7f0000000080)='./file0\x00', 0x101142, 0x0) 21:27:58 executing program 0: timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000180)) timer_delete(0x0) [ 291.548160][T11848] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:27:58 executing program 1: mbind(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x4002, &(0x7f0000000000)=0x1, 0x400, 0x0) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0) 21:27:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}, 0x0) 21:27:58 executing program 0: pselect6(0xfffffffffffffe28, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0) 21:27:58 executing program 1: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x9, &(0x7f0000000080)=0x0) io_submit(r2, 0x2, &(0x7f0000000680)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1}]) 21:27:58 executing program 2: prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='-*#{@\x00') 21:27:58 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) io_setup(0x3f, &(0x7f0000000240)=0x0) io_submit(r1, 0x2, &(0x7f0000000440)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x3}]) [ 291.665567][T11860] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:27:58 executing program 2: pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) 21:27:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}, 0x0) [ 291.741039][ T49] audit: type=1400 audit(1611869278.470:56): avc: denied { map } for pid=11871 comm="syz-executor.2" path="pipe:[44459]" dev="pipefs" ino=44459 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=fifo_file permissive=1 21:27:58 executing program 2: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, 0x0) [ 291.760777][T11874] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:27:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='stat\x00') setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, 0x0, 0x0) 21:27:58 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22}, 0x10) listen(r0, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4}]}}}}}}}, 0x0) 21:27:58 executing program 1: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, 0x0, 0x0) 21:27:58 executing program 0: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETFILTER(r0, 0x801054db, 0x0) [ 291.906225][T11883] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 21:27:58 executing program 0: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$inet(r0, 0x0, 0x0) 21:27:58 executing program 2: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) accept4$packet(r0, 0x0, 0x0, 0x0) 21:27:58 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x658) 21:27:58 executing program 0: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) 21:27:58 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/net/tun\x00', 0x20100, 0x0) 21:27:58 executing program 2: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_drop_memb(r0, 0x107, 0x2, 0x0, 0x0) 21:27:58 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 21:27:58 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x24280, 0x0) 21:27:58 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x8040, 0x0) 21:27:58 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='oom_score_adj\x00') write$tcp_mem(r0, 0x0, 0x0) 21:27:58 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) 21:27:58 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/urandom\x00', 0x288900, 0x0) 21:27:58 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, 0x0, 0x0) 21:27:58 executing program 0: pipe2(0x0, 0x4800) 21:27:58 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) 21:27:58 executing program 3: shmat(0x0, &(0x7f0000ff8000/0x6000)=nil, 0x0) 21:27:58 executing program 0: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bind$netlink(r0, 0x0, 0x0) 21:27:58 executing program 2: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 21:27:58 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$RNDADDENTROPY(r0, 0x40085203, 0x0) 21:27:58 executing program 3: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp6\x00') ioctl$RNDCLEARPOOL(r0, 0x5206, 0x0) 21:27:58 executing program 0: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$cgroup_devices(r0, 0x0, 0x0) 21:27:59 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, 0x0, 0x0) 21:27:59 executing program 2: openat$random(0xffffffffffffff9c, &(0x7f0000000580)='/dev/urandom\x00', 0x2080, 0x0) 21:27:59 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 21:27:59 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETOWNER(r0, 0x400454cc, 0x0) 21:27:59 executing program 2: pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, 0x0, 0x0) 21:27:59 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 21:27:59 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) 21:27:59 executing program 0: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, 0x0, 0x0) 21:27:59 executing program 2: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, 0x0, 0x0) 21:27:59 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$netlink(r0, 0x0, 0x0) 21:27:59 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, 0x0, 0x0) 21:27:59 executing program 2: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 21:27:59 executing program 0: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) 21:27:59 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCGARP(r0, 0x8954, 0x0) 21:27:59 executing program 0: pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 21:27:59 executing program 2: socketpair(0x0, 0x40006, 0x0, 0x0) 21:27:59 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x0, 0x0, 0x0) 21:27:59 executing program 3: pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, 0x0) 21:27:59 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/ptype\x00') setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) 21:27:59 executing program 0: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, 0x0) 21:27:59 executing program 2: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, 0x0, 0x0) 21:27:59 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$inet_buf(r0, 0x0, 0x0, 0x0, 0x0) 21:27:59 executing program 3: pipe2(&(0x7f0000000680), 0x80000) 21:27:59 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x123000, 0x0) 21:27:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp\x00') setsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 21:27:59 executing program 0: openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x262ec0, 0x0) 21:27:59 executing program 1: pipe2(&(0x7f0000000a80)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x43, 0x0, 0x0) 21:27:59 executing program 0: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp\x00') 21:27:59 executing program 3: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, 0x0, 0x0) 21:27:59 executing program 2: eventfd(0x0) pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_submit(0x0, 0x1, &(0x7f0000001980)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0}]) 21:27:59 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) setsockopt$inet_mreq(r0, 0x0, 0x0, 0x0, 0x0) 21:27:59 executing program 0: pipe2(&(0x7f0000000180), 0x800) 21:27:59 executing program 3: pipe2(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) 21:27:59 executing program 2: socketpair(0x1, 0x0, 0xffff, 0x0) 21:27:59 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000006ec0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 21:27:59 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, 0x0, 0x0) 21:27:59 executing program 0: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SIZE(r0, 0x1277, 0x0) 21:27:59 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/tcp\x00') setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) 21:27:59 executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x38000, 0x0) 21:27:59 executing program 1: shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000340)=""/4096) 21:27:59 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f00000000c0)={'syztnl1\x00', 0x0}) 21:27:59 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt(r0, 0x1, 0x5, 0x0, &(0x7f0000000000)) 21:27:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4040810) 21:27:59 executing program 1: poll(0x0, 0x0, 0xe5) clone(0x2000411cf7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) syz_mount_image$fuse(0x0, &(0x7f0000002cc0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(&(0x7f0000000040)=ANY=[], &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000180)=""/4096, 0x1000) getdents64(r0, 0x0, 0x0) 21:27:59 executing program 3: rt_sigprocmask(0x0, &(0x7f0000000100)={[0xfffffffffffe]}, 0x0, 0x8) clone(0x20204780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000001fc1)='\x00\xac=\x9d\xd2\xdb\xe6\xbf\xb4\b\xedcJ\x8e\x84\xd4N\x12\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\xc1\x0f', 0x0) write(r0, &(0x7f0000000140)='/', 0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) r1 = gettid() rt_sigqueueinfo(r1, 0xa, &(0x7f0000000040)) ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0), 0x8) 21:27:59 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, 0x0, &(0x7f0000000040)=0xffffffffffffff21) 21:27:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x10) [ 292.998655][ T49] audit: type=1400 audit(1611869279.730:57): avc: denied { map } for pid=12035 comm="syz-executor.3" path=2F6D656D66643A202864656C6574656429 dev="tmpfs" ino=2061 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:tmpfs_t:s0 tclass=file permissive=1 21:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000000)={0x2, 'sit0\x00'}) 21:27:59 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) inotify_rm_watch(r0, 0x0) 21:27:59 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_AP(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0xffffffca}}, 0x0) 21:27:59 executing program 2: r0 = socket(0x11, 0x2, 0x0) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) 21:28:00 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'lo\x00'}) 21:28:00 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x0, 0x0, 0x0) 21:28:00 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, 0x0) 21:28:00 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 21:28:00 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0x6, &(0x7f0000000000)=""/143, &(0x7f00000000c0)=0x8f) 21:28:00 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x4000800, 0x0, 0x0) 21:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, 0x0, 0x0, 0x4004080) 21:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x14) 21:28:00 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 21:28:00 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000080)='devices.allow\x00', 0x2, 0x0) 21:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={0x0}}, 0x20000800) 21:28:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x800) 21:28:00 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x20000000) 21:28:00 executing program 2: syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x341200) 21:28:00 executing program 1: r0 = socket(0x1, 0x5, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 21:28:00 executing program 0: r0 = socket$unix(0x1, 0x2, 0x0) r1 = dup(r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:28:00 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) 21:28:00 executing program 0: r0 = syz_open_dev$loop(&(0x7f00000001c0)='/dev/loop#\x00', 0x0, 0x0) fstat(r0, &(0x7f00000004c0)) 21:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000003080), 0x0, 0x40002101, 0x0) 21:28:00 executing program 1: pipe2(&(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) openat$cgroup_type(r0, &(0x7f0000000000)='cgroup.type\x00', 0x2, 0x0) 21:28:00 executing program 3: pipe2$9p(&(0x7f0000000540), 0x800) 21:28:00 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4000000) 21:28:00 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x40000) 21:28:00 executing program 3: r0 = socket(0x10, 0x2, 0x2) sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 21:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000007c0)={0x0}}, 0x2044080) 21:28:00 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'gre0\x00', 0x0}) 21:28:00 executing program 1: r0 = socket(0x10, 0x2, 0x2) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) 21:28:00 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$TCSETXF(r0, 0x5434, 0x0) 21:28:00 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={0x0}}, 0x4000800) 21:28:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, 0x0, 0x0) 21:28:01 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) recvmsg(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x100f0) 21:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x24000010) 21:28:01 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000f00)='/dev/vcsa#\x00', 0x200, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, 0x0, 0x0) 21:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000180)={0x0, 0xe69, &(0x7f0000000140)={0x0, 0xffffffffffffff8a}}, 0x0) 21:28:01 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x3f, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, 0x0) 21:28:01 executing program 3: r0 = socket(0x11, 0xa, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) 21:28:01 executing program 2: syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x0, 0x529600) 21:28:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, 0x0, 0x0) 21:28:01 executing program 2: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000ac0)={{0x2, 0x0, 0xee00, 0xee01, 0xffffffffffffffff}}) 21:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x20000800) 21:28:01 executing program 0: r0 = socket(0x1, 0x5, 0x0) sendmsg$TIPC_CMD_SET_NETID(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20000000) 21:28:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={0x0}}, 0x800) 21:28:01 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000000)) 21:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={0x0}}, 0x40080) 21:28:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40) 21:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) 21:28:01 executing program 3: openat$null(0xffffffffffffff9c, &(0x7f0000001580)='/dev/null\x00', 0x2a0000, 0x0) 21:28:01 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r0, 0x0, 0x0) 21:28:01 executing program 1: openat$vcsa(0xffffffffffffff9c, &(0x7f0000006340)='/dev/vcsa\x00', 0x80800, 0x0) 21:28:01 executing program 0: openat$autofs(0xffffffffffffff9c, 0x0, 0x400200, 0x0) 21:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x2000c000) 21:28:01 executing program 1: open$dir(&(0x7f0000000000)='./file0\x00', 0x100c0, 0x0) 21:28:01 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0xa2440, 0xc7) 21:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x80) 21:28:01 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000840)={0x0, @l2tp={0x2, 0x0, @dev}, @isdn, @in={0x2, 0x0, @multicast1}}) 21:28:01 executing program 1: r0 = socket(0x1, 0x5, 0x0) r1 = dup(r0) bind$unix(r1, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e) 21:28:01 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x4000004) 21:28:01 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x602c3, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) 21:28:01 executing program 2: r0 = getpgid(0x0) prlimit64(r0, 0x1, 0x0, &(0x7f0000000000)) 21:28:01 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 21:28:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETVNETBE(r0, 0x400454de, 0x0) 21:28:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x4008080) 21:28:01 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNDETACHFILTER(r0, 0x401054d6, 0x0) [ 294.790945][ T49] audit: type=1400 audit(1611869281.520:58): avc: denied { getrlimit } for pid=12191 comm="syz-executor.2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=process permissive=1 21:28:01 executing program 0: getresuid(&(0x7f0000000000)=0x0, &(0x7f00000002c0), &(0x7f0000000080)) setfsuid(r0) 21:28:01 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, 0x0, 0x0) 21:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x854) 21:28:01 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x3f, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, 0x0) 21:28:01 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0x602c3, 0x1c1) 21:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, 0x0, &(0x7f00000001c0)) 21:28:01 executing program 0: openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x82, 0x0) 21:28:01 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000880)) 21:28:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x40040) [ 294.992755][ T49] audit: type=1400 audit(1611869281.720:59): avc: denied { getopt } for pid=12214 comm="syz-executor.3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 21:28:01 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={0x0}}, 0x4) 21:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r0, 0x1, 0x0, 0x0, 0x0) 21:28:01 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, 0x0) 21:28:01 executing program 3: r0 = openat$incfs(0xffffffffffffff9c, &(0x7f00000011c0)='.log\x00', 0x12d41, 0x0) write$binfmt_script(r0, 0x0, 0x0) 21:28:01 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x0) 21:28:01 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000001500), 0x0, 0x4894) 21:28:01 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x10) 21:28:01 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 21:28:01 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40804) 21:28:01 executing program 0: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)) 21:28:01 executing program 1: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, 0x0) 21:28:01 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={0x0}}, 0x8000) 21:28:01 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x0, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x0, 0x0, 0x0) 21:28:01 executing program 0: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'veth1_to_batadv\x00'}) 21:28:01 executing program 2: openat$vcsa(0xffffffffffffff9c, &(0x7f0000002e00)='/dev/vcsa\x00', 0x8000, 0x0) 21:28:02 executing program 1: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={0x0}}, 0x0) 21:28:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) recvmmsg(r0, 0x0, 0x0, 0x40000021, &(0x7f0000000180)={0x0, 0x3938700}) 21:28:02 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x48) 21:28:02 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000006500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x100, 0x0) 21:28:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) fstat(r0, &(0x7f0000005640)) 21:28:02 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_int(r0, 0x29, 0x0, 0x0, 0x0) 21:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) 21:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4) 21:28:02 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 21:28:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SOCK_DESTROY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={0x0}}, 0x0) 21:28:02 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000000)='.pending_reads\x00', 0x408c0, 0xbb) 21:28:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, 0x0, 0x0, 0x24000000) 21:28:02 executing program 0: sendmsg$NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, 0x0, 0x8c7d3b5a9ffb4e90) 21:28:02 executing program 2: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) 21:28:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000100)=0xc) sched_setaffinity(r1, 0x8, &(0x7f00000000c0)=0x9) 21:28:02 executing program 3: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) 21:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4) 21:28:02 executing program 2: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) 21:28:02 executing program 3: r0 = socket(0x2, 0xa, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000003700)) 21:28:02 executing program 2: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) 21:28:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, 0x0) 21:28:02 executing program 1: r0 = socket$inet(0x2, 0x3, 0x8a) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000040)) [ 295.609768][T12298] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) 21:28:02 executing program 2: pipe2$9p(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RWSTAT(r0, 0x0, 0x0) 21:28:02 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000100)='eO', 0x2, 0x0, &(0x7f00000000c0)={0x2, 0x0, @private}, 0x10) 21:28:02 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fstat(r0, 0x0) 21:28:02 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, 0x0, 0x0) 21:28:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x4014) 21:28:02 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$TIOCGDEV(r0, 0x80045432, 0x0) 21:28:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x48051) 21:28:02 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000003540)={0x0, @nfc, @tipc=@id, @vsock={0x28, 0x0, 0x0, @hyper}}) 21:28:02 executing program 0: r0 = socket(0xa, 0x2, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) 21:28:02 executing program 1: r0 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r0, 0x0, &(0x7f0000000180)) 21:28:02 executing program 3: sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0xd814bf4c9d3f7138) 21:28:02 executing program 0: r0 = epoll_create(0x1) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)) 21:28:02 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x0, 0x0) ftruncate(r0, 0x0) 21:28:02 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) 21:28:02 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKSECTGET(r0, 0x1267, 0x0) 21:28:02 executing program 2: r0 = socket$inet(0x2, 0x3, 0x100) getsockopt$inet_mreqn(r0, 0x0, 0x20, 0x0, &(0x7f0000000340)) 21:28:02 executing program 0: openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x2440, 0x2) 21:28:02 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x40) 21:28:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={0x0}}, 0x4) 21:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x40) 21:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x40) 21:28:02 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, &(0x7f00000020c0), 0x0, 0x4, 0x0, 0x0) 21:28:02 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000100)='eO', 0x2, 0x0, &(0x7f00000000c0)={0x2, 0x0, @private=0xa010100}, 0x10) 21:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40) 21:28:02 executing program 3: ftruncate(0xffffffffffffffff, 0x0) 21:28:02 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) read$char_usb(r0, 0x0, 0x0) 21:28:02 executing program 1: shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffc000/0x1000)=nil) 21:28:02 executing program 0: prlimit64(0x0, 0xd, &(0x7f0000000040), &(0x7f0000000080)) 21:28:02 executing program 3: ioctl$BLKGETSIZE(0xffffffffffffffff, 0x1260, 0x0) 21:28:02 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x3f, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, 0x0) 21:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x800) 21:28:02 executing program 1: r0 = socket(0x10, 0x2, 0x2) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) 21:28:02 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) fcntl$lock(r0, 0x0, 0x0) 21:28:02 executing program 1: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00') fstat(r0, &(0x7f0000000040)) 21:28:02 executing program 2: pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLOCK(r0, 0x0, 0x0) 21:28:02 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4004) 21:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x44880) 21:28:02 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x602c3, 0x0) futimesat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={{}, {0x0, 0x2710}}) 21:28:02 executing program 2: r0 = socket(0x10, 0x2, 0x0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}}, 0x240040d4) 21:28:02 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, 0x0, 0x0, 0x40002101, 0x0) 21:28:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x8981, 0x0) 21:28:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0xfffffffffffffe6d}}, 0x0) 21:28:03 executing program 3: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) fcntl$setflags(r0, 0x2, 0x0) 21:28:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0xc0) 21:28:03 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000002280)={0x0, 0x0, &(0x7f0000002240)={0x0}}, 0x20004000) 21:28:03 executing program 2: open$dir(&(0x7f0000000080)='./file0\x00', 0x80443, 0x8) 21:28:03 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, 0x0, 0x0, 0x4000) 21:28:03 executing program 0: r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 21:28:03 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x20044000) 21:28:03 executing program 2: openat$incfs(0xffffffffffffff9c, &(0x7f0000003540)='.pending_reads\x00', 0xc0342, 0x10) 21:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x4000) 21:28:03 executing program 0: memfd_create(&(0x7f0000000080)='[}\x00', 0x1) 21:28:03 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) mkdirat$cgroup(r0, &(0x7f0000000040)='syz0\x00', 0x1ff) 21:28:03 executing program 3: pipe(&(0x7f0000000200)={0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, 0x0) 21:28:03 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r0, &(0x7f0000002ac0), 0x555, 0x0) 21:28:03 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x240800, 0x0) 21:28:03 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) 21:28:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x80) 21:28:03 executing program 1: sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, 0x0, 0x0) 21:28:03 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x8041) 21:28:03 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000000080)={0x6, 'veth0_virt_wifi\x00'}) 21:28:03 executing program 2: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 21:28:04 executing program 0: r0 = shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ff7000/0x4000)=nil) shmctl$SHM_INFO(r0, 0xe, &(0x7f0000000480)=""/102382) 21:28:04 executing program 3: openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.pending_reads\x00', 0x12541, 0x1e4) 21:28:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x8094) 21:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000040) 21:28:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0xc094) 21:28:04 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r0, &(0x7f0000008300), 0x0, 0x4000) 21:28:04 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x40054) 21:28:04 executing program 0: openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400, 0x0) 21:28:04 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000002c40)) 21:28:04 executing program 2: r0 = msgget(0x1, 0x0) msgctl$IPC_STAT(r0, 0x2, &(0x7f0000000000)=""/127) 21:28:04 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}}, 0x200088c0) 21:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={0x0}}, 0x4090) 21:28:04 executing program 1: r0 = getpid() ioprio_set$pid(0x1, r0, 0x6000) 21:28:04 executing program 2: sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, 0x0, 0x2592ffa1e23b8350) 21:28:04 executing program 0: socket$inet6(0xa, 0x1, 0xfffffffe) 21:28:04 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$packet(r0, &(0x7f00000020c0), 0x0, 0x800, &(0x7f0000002180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) 21:28:04 executing program 3: r0 = socket$inet(0x2, 0xa, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:28:04 executing program 0: open$dir(&(0x7f0000000040)='./file0\x00', 0xea774e935990de2, 0x174e3e8e037c6a8f) 21:28:04 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) getsockname$inet6(r0, 0x0, 0x0) 21:28:04 executing program 3: syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x43, 0x40000) 21:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x10) 21:28:04 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x3f, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r0, 0x89f4, 0x0) 21:28:04 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, 0x0) 21:28:04 executing program 3: open$dir(&(0x7f0000000080)='./file0\x00', 0x2a041, 0x0) 21:28:04 executing program 2: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x10) 21:28:04 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg2\x00'}) 21:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000089) 21:28:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x20040042) 21:28:04 executing program 0: r0 = socket(0x11, 0xa, 0x0) setsockopt$packet_buf(r0, 0x107, 0x0, 0x0, 0x0) 21:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_LEAVE_MESH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xa0) 21:28:04 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, 0x0) 21:28:04 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 21:28:04 executing program 1: openat$incfs(0xffffffffffffff9c, &(0x7f0000000040)='.pending_reads\x00', 0x10041, 0x5) 21:28:04 executing program 3: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x40400, 0x0) 21:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) 21:28:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = dup(r0) sendmsg$NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) 21:28:04 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x1) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0) 21:28:04 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) 21:28:04 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8982, &(0x7f0000001bc0)={0x6, 'vxcan1\x00'}) 21:28:04 executing program 0: openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x41, 0x0) 21:28:04 executing program 1: setrlimit(0x6, &(0x7f00000000c0)) 21:28:04 executing program 2: r0 = socket(0x10, 0x2, 0x2) sendmsg$TIPC_CMD_SET_LINK_TOL(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) 21:28:04 executing program 0: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={0x0}}, 0x4800) 21:28:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, 0x0, 0x1de) 21:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0xc040080) 21:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x20004010) 21:28:04 executing program 1: openat$autofs(0xffffffffffffff9c, &(0x7f0000001400)='/dev/autofs\x00', 0x40000, 0x0) 21:28:04 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4008800) 21:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_POOL_SET(r0, &(0x7f0000000080)={0x0, 0xffffffffffffffc2, &(0x7f0000000000)={0x0}}, 0x20044810) 21:28:04 executing program 3: sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, 0x0, 0x794bd432fb2085f1) 21:28:04 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x4040054) 21:28:04 executing program 0: r0 = socket(0x2, 0x3, 0x2) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 21:28:04 executing program 2: pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300), &(0x7f0000000380)={0x0}) 21:28:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 21:28:04 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) 21:28:04 executing program 1: open$dir(&(0x7f0000000040)='./file0\x00', 0x161040, 0x0) lsetxattr$security_selinux(&(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x7) 21:28:04 executing program 0: r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x2, r0) 21:28:04 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x4000) 21:28:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$CHAR_RAW_DISCARD(r0, 0x1277, 0x0) 21:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x840) 21:28:05 executing program 2: r0 = socket(0x10, 0x2, 0x2) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) 21:28:05 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r0, 0x0, 0x0) 21:28:05 executing program 1: sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0xa9c969d38c46e1e9) 21:28:05 executing program 3: r0 = socket$inet(0x2, 0x3, 0x8a) setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000080), 0x4) 21:28:05 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x0) ioctl$CHAR_RAW_REPORTZONE(r0, 0xc0101282, 0x0) 21:28:05 executing program 0: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(r0, 0xf505, 0x0) 21:28:05 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000) 21:28:05 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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") 21:28:05 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_PORT_SET(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xfffffe6f, &(0x7f0000000040)={&(0x7f0000000180)={0x6c, 0x0, 0x0, 0x0, 0x0, {}, [{{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}, {{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}}, {0x6}}]}, 0x6c}}, 0x0) 21:28:05 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1e03, 0x0) 21:28:05 executing program 0: r0 = socket(0x10, 0x2, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 21:28:05 executing program 2: syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x0, 0x42000) 21:28:05 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, 0x0) 21:28:05 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, 0x0, 0x0) 21:28:05 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1e03, 0x0) 21:28:05 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1e03, 0x0) 21:28:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000010) 21:28:05 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, 0x0) 21:28:05 executing program 2: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) write$P9_RLOCK(r0, 0x0, 0x0) 21:28:05 executing program 3: mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 21:28:05 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x1e03, 0x0) 21:28:05 executing program 2: semctl$SEM_STAT(0x0, 0x4, 0x12, &(0x7f00000000c0)=""/196) 21:28:05 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0xc000) 21:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x40000) 21:28:05 executing program 1: syz_open_dev$vcsn(&(0x7f00000000c0)='/dev/vcs#\x00', 0x0, 0x104c0) 21:28:05 executing program 0: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) 21:28:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000040)) 21:28:05 executing program 2: openat$zero(0xffffffffffffff9c, &(0x7f00000050c0)='/dev/zero\x00', 0x60000, 0x0) 21:28:05 executing program 0: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BLKGETSIZE(r0, 0x1260, &(0x7f0000000140)) 21:28:05 executing program 1: socket$inet(0x2, 0x3, 0x9) 21:28:05 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x0, 0x0) ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x0) 21:28:05 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fstatfs(r0, &(0x7f0000000080)=""/6) 21:28:05 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000840)='/dev/vcsa#\x00', 0x3f, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, 0x0) 21:28:05 executing program 3: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmsg$NLBL_UNLABEL_C_STATICLIST(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 21:28:05 executing program 0: setrlimit(0x1, &(0x7f0000000040)) 21:28:05 executing program 1: socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendto$packet(r0, &(0x7f0000000180)='3', 0x1, 0x4000000, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) 21:28:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000006680)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10100, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 21:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x40004) 21:28:05 executing program 0: sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x0) 21:28:05 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, 0x0) 21:28:05 executing program 2: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r0, 0x0, 0x0) 21:28:05 executing program 0: symlinkat(&(0x7f0000000080)='./file0\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00') open$dir(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 21:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x22000002) 21:28:05 executing program 1: syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0}) 21:28:05 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x4000) 21:28:05 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x40) 21:28:05 executing program 0: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x0, 0x0) ioctl$BLKSECDISCARD(r0, 0x127d, 0x0) 21:28:05 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_buf(r0, 0x29, 0x15, 0x0, 0x0) 21:28:05 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x81, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 21:28:05 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 21:28:05 executing program 3: syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 299.354631][T11269] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 299.364929][T11272] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 299.365369][ T7] usb 8-1: new high-speed USB device number 2 using dummy_hcd 21:28:06 executing program 1: syz_open_dev$hidraw(&(0x7f00000004c0)='/dev/hidraw#\x00', 0x0, 0x0) qemu-system-x86_64: warning: guest updated active QH [ 299.624684][ T7] usb 8-1: Using ep0 maxpacket: 16 [ 299.654548][T11269] usb 7-1: Using ep0 maxpacket: 8 [ 299.664658][T11272] usb 5-1: Using ep0 maxpacket: 8 21:28:06 executing program 1: syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x8000, 0x0) 21:28:06 executing program 1: syz_open_dev$hiddev(&(0x7f0000000040)='/dev/usb/hiddev#\x00', 0x0, 0x0) [ 299.758871][ T7] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping 21:28:06 executing program 1: syz_usb_ep_read(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$hiddev(0x0, 0x0, 0x0) ioctl$EVIOCGBITKEY(0xffffffffffffffff, 0x80404521, 0x0) syz_usb_connect$uac1(0x0, 0x71, &(0x7f00000038c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}}}}]}}, 0x0) [ 299.773688][ T7] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 299.790154][ T7] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 299.815505][T11269] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.830357][T11269] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.843951][T11269] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 299.857901][T11269] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 299.870552][T11269] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 299.882661][T11272] usb 5-1: unable to get BOS descriptor or descriptor too short [ 299.892632][T11269] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 299.966224][T11272] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 299.968580][ T7] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 299.982556][T11272] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 299.996819][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.996849][ T7] usb 8-1: Product: syz [ 299.996864][ T7] usb 8-1: Manufacturer: syz [ 300.008935][T11272] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 300.021653][ T7] usb 8-1: SerialNumber: syz [ 300.026876][T11272] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 300.026903][T11272] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 300.076700][T11272] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 300.084478][T11270] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 300.125783][T11269] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.140552][T11269] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.152565][T11269] usb 7-1: Product: syz [ 300.159416][T11269] usb 7-1: Manufacturer: syz [ 300.166558][T11269] usb 7-1: SerialNumber: syz [ 300.354769][T11270] usb 6-1: Using ep0 maxpacket: 16 [ 300.354786][T11272] usb 5-1: string descriptor 0 read error: -22 [ 300.373629][T11272] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 300.385502][ T7] usb 8-1: 0:2 : does not exist [ 300.386890][T11272] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.416071][ T7] usb 8-1: USB disconnect, device number 2 [ 300.426250][T12681] udc-core: couldn't find an available UDC or it's busy [ 300.436872][T12681] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 300.534820][T11269] cdc_ncm 7-1:1.0: bind() failure [ 300.563337][T11269] cdc_ncm 7-1:1.1: bind() failure [ 300.564933][T11270] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 300.587926][T11270] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 300.595375][T11269] usb 7-1: USB disconnect, device number 2 [ 300.600188][T11270] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 300.724799][T11272] cdc_ncm 5-1:1.0: bind() failure [ 300.735686][T11272] cdc_ncm 5-1:1.1: bind() failure [ 300.746838][T11272] usb 5-1: USB disconnect, device number 2 [ 300.814806][T11270] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 300.829888][T11270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.841114][T11270] usb 6-1: Product: syz [ 300.847805][T11270] usb 6-1: Manufacturer: syz [ 300.855293][T11270] usb 6-1: SerialNumber: syz [ 301.065206][ T30] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 301.208277][T11270] usb 6-1: 0:2 : does not exist [ 301.228297][T11270] usb 6-1: USB disconnect, device number 2 [ 301.284506][ T25] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 301.324580][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 301.455125][ T30] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 301.468632][ T30] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 301.475064][T11269] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 301.481652][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 301.545149][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 301.675480][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 301.694613][ T30] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 301.699606][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 301.709587][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.724770][T11269] usb 5-1: Using ep0 maxpacket: 8 [ 301.725930][ T25] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 301.737946][ T30] usb 8-1: Product: syz [ 301.737965][ T30] usb 8-1: Manufacturer: syz [ 301.737974][ T30] usb 8-1: SerialNumber: syz [ 301.781196][ T25] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 301.796143][ T25] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 301.811707][ T25] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 301.904635][T11269] usb 5-1: unable to get BOS descriptor or descriptor too short [ 301.924521][T11270] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 301.996621][T11269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:28:08 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_disconnect(r0) [ 302.012275][T11269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 302.027999][T11269] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 302.034668][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.039806][T11269] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 302.053066][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.067607][T11269] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 302.078957][ T25] usb 7-1: Product: syz [ 302.079331][ T30] usb 8-1: 0:2 : does not exist [ 302.087278][ T30] usb 8-1: USB disconnect, device number 3 21:28:08 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x81, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) 21:28:08 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 302.118981][ T25] usb 7-1: Manufacturer: syz [ 302.127261][ T25] usb 7-1: SerialNumber: syz [ 302.135923][T11269] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 302.164741][ T25] usb 7-1: can't set config #1, error -71 [ 302.190092][T11270] usb 6-1: Using ep0 maxpacket: 16 [ 302.197738][T11269] usb 5-1: string descriptor 0 read error: -71 [ 302.207838][T11269] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 302.212474][ T25] usb 7-1: USB disconnect, device number 3 [ 302.223763][T11269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.265170][T11269] usb 5-1: can't set config #1, error -71 [ 302.275672][T11269] usb 5-1: USB disconnect, device number 3 [ 302.354766][T11270] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 302.368145][T11270] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 302.383995][T11270] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 302.557211][T11270] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 302.572425][T11270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.582995][T11270] usb 6-1: Product: syz [ 302.588790][T11270] usb 6-1: Manufacturer: syz [ 302.594892][T11270] usb 6-1: SerialNumber: syz [ 302.625471][ T30] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 302.627910][ T25] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 302.644614][T11269] usb 5-1: new high-speed USB device number 4 using dummy_hcd 21:28:09 executing program 1: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 302.894479][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 302.894549][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 302.914844][T11269] usb 5-1: Using ep0 maxpacket: 8 [ 302.915217][T11270] usb 6-1: 0:2 : does not exist [ 302.956145][T11270] usb 6-1: USB disconnect, device number 3 [ 303.035430][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.050418][ T30] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.062721][ T30] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.064966][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.075717][ T30] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.095436][T11269] usb 5-1: unable to get BOS descriptor or descriptor too short [ 303.097888][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.097944][ T25] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.097980][ T25] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.114288][ T30] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.114518][ T30] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 303.126163][ T25] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.204875][T11269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.211435][ T25] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 303.229105][T11269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.229157][T11269] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.229173][T11269] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.229190][T11269] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.229205][T11269] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 303.324826][T11270] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 303.344712][ T30] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.357616][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.370528][ T30] usb 8-1: Product: syz [ 303.378029][ T30] usb 8-1: Manufacturer: syz [ 303.385981][ T30] usb 8-1: SerialNumber: syz [ 303.475293][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.489462][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.501601][ T25] usb 7-1: Product: syz [ 303.507154][ T25] usb 7-1: Manufacturer: syz [ 303.513517][ T25] usb 7-1: SerialNumber: syz [ 303.534905][T11269] usb 5-1: string descriptor 0 read error: -22 [ 303.543219][T11269] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 303.557050][T11269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.575072][T11270] usb 6-1: Using ep0 maxpacket: 8 [ 303.675186][ T30] cdc_ncm 8-1:1.0: bind() failure [ 303.691489][ T30] cdc_ncm 8-1:1.1: bind() failure [ 303.705693][ T30] usb 8-1: USB disconnect, device number 4 [ 303.755159][T11270] usb 6-1: unable to get BOS descriptor or descriptor too short [ 303.792088][T12707] udc-core: couldn't find an available UDC or it's busy [ 303.805635][T12707] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 303.864665][T11270] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.876431][ T25] cdc_ncm 7-1:1.0: bind() failure [ 303.878321][T11270] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.884606][T11269] cdc_ncm 5-1:1.0: bind() failure [ 303.887421][T11269] cdc_ncm 5-1:1.1: bind() failure [ 303.892148][ T25] cdc_ncm 7-1:1.1: bind() failure [ 303.897555][T11270] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 303.897576][T11270] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 303.897593][T11270] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 303.897608][T11270] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 303.911853][ T25] usb 7-1: USB disconnect, device number 4 [ 303.927350][T11269] usb 5-1: USB disconnect, device number 4 [ 304.168109][T11270] usb 6-1: string descriptor 0 read error: -22 [ 304.178869][T11270] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 304.192820][T11270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 21:28:11 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 21:28:11 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x81, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 304.505501][T11270] cdc_ncm 6-1:1.0: bind() failure [ 304.515563][T11270] cdc_ncm 6-1:1.1: bind() failure [ 304.525520][T11270] usb 6-1: USB disconnect, device number 4 [ 304.634836][ T7] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 304.664729][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 304.678124][ T3877] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 304.884740][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 304.934583][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 304.941681][ T3877] usb 7-1: Using ep0 maxpacket: 8 21:28:11 executing program 1: syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000001240)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x70, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {}, {{0x9, 0x5, 0x3, 0x2, 0x0, 0x0, 0x0, 0xff}}}}}]}}]}}, 0x0) ioctl$EVIOCSKEYCODE(0xffffffffffffffff, 0x40084504, 0x0) [ 305.016759][ T7] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.036872][ T7] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.053633][ T7] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.070367][ T7] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 305.084776][ T3877] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.087651][ T7] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.100508][ T3877] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.116939][ T7] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 305.130285][ T25] usb 5-1: unable to get BOS descriptor or descriptor too short [ 305.158663][ T3877] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.171714][ T3877] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 21:28:11 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_disconnect(r0) [ 305.184038][ T3877] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.197154][ T3877] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 305.225533][ T7] usb 8-1: string descriptor 0 read error: -71 [ 305.233416][ T7] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.234634][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 305.245398][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.259237][ T25] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 305.282169][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 305.284857][ T7] usb 8-1: can't set config #1, error -71 [ 305.294379][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 305.294405][ T25] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 305.294420][ T25] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 305.303851][ T7] usb 8-1: USB disconnect, device number 5 [ 305.399047][ T3877] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.414642][ T3877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.427877][ T3877] usb 7-1: Product: syz [ 305.434738][ T3877] usb 7-1: Manufacturer: syz [ 305.441588][ T3877] usb 7-1: SerialNumber: syz [ 305.444493][T11270] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 305.615459][ T25] usb 5-1: string descriptor 0 read error: -22 [ 305.626682][ T25] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 305.639884][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.708764][T12723] udc-core: couldn't find an available UDC or it's busy [ 305.718683][T12723] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 305.734743][ T7] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 305.755725][ T3877] cdc_ncm 7-1:1.0: bind() failure [ 305.770536][ T3877] cdc_ncm 7-1:1.1: bind() failure [ 305.779765][ T3877] usb 7-1: USB disconnect, device number 5 [ 305.894794][T11270] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 305.944903][ T25] cdc_ncm 5-1:1.0: bind() failure [ 305.958083][ T25] cdc_ncm 5-1:1.1: bind() failure [ 305.968401][ T25] usb 5-1: USB disconnect, device number 5 [ 306.054626][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 306.097150][T11270] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.112418][T11270] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.126406][T11270] usb 6-1: Product: syz [ 306.134021][T11270] usb 6-1: Manufacturer: syz [ 306.142755][T11270] usb 6-1: SerialNumber: syz [ 306.184615][ T7] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.204807][T11270] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 306.215971][ T7] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 306.229220][ T7] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 21:28:13 executing program 2: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_disconnect(r0) [ 306.243901][ T7] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 306.266013][ T7] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 306.287185][ T7] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 306.407167][T11272] usb 6-1: USB disconnect, device number 5 21:28:13 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 306.466902][ T7] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 306.478404][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.489471][ T7] usb 8-1: Product: syz [ 306.494832][ T7] usb 8-1: Manufacturer: syz [ 306.500607][ T7] usb 8-1: SerialNumber: syz [ 306.594814][ T25] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 306.734923][ T3877] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 306.824653][ T7] cdc_ncm 8-1:1.0: bind() failure [ 306.837526][ T7] cdc_ncm 8-1:1.1: bind() failure [ 306.846825][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 306.849648][ T7] usb 8-1: USB disconnect, device number 6 [ 306.974998][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 306.992009][ T3877] usb 5-1: Using ep0 maxpacket: 8 [ 307.000010][ T25] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.016860][ T25] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.032660][ T25] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 307.049096][ T25] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.063890][ T25] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 307.174657][ T3344] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 307.174861][ T3877] usb 5-1: unable to get BOS descriptor or descriptor too short [ 307.234625][ T25] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.245948][ T25] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.255705][ T25] usb 7-1: Product: syz [ 307.261065][ T25] usb 7-1: Manufacturer: syz [ 307.267600][ T25] usb 7-1: SerialNumber: syz [ 307.284575][ T3877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 307.300605][ T3877] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 307.316191][ T3877] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 307.328019][ T3877] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 307.342808][ T3877] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 307.357654][ T3877] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 21:28:14 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_disconnect(r0) [ 307.554665][ T25] cdc_ncm 7-1:1.0: bind() failure [ 307.564190][ T25] cdc_ncm 7-1:1.1: bind() failure [ 307.574756][ T25] usb 7-1: USB disconnect, device number 6 [ 307.604809][ T3344] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 307.605421][ T3877] usb 5-1: string descriptor 0 read error: -22 [ 307.636466][ T3877] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.651631][ T3877] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.796009][ T3344] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 307.811942][ T3344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.824546][ T3344] usb 6-1: Product: syz [ 307.824999][ T37] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 307.830511][ T3344] usb 6-1: Manufacturer: syz [ 307.847704][ T3344] usb 6-1: SerialNumber: syz [ 307.897385][ T3344] cdc_ether: probe of 6-1:1.0 failed with error -22 [ 307.954831][ T3877] cdc_ncm 5-1:1.0: bind() failure [ 307.965350][ T3877] cdc_ncm 5-1:1.1: bind() failure [ 307.975164][ T3877] usb 5-1: USB disconnect, device number 6 [ 308.074626][ T37] usb 8-1: Using ep0 maxpacket: 8 [ 308.098551][ T3344] usb 6-1: USB disconnect, device number 6 21:28:14 executing program 1: syz_usb_connect$uac1(0x2, 0xa9, &(0x7f0000000180)={{0x12, 0x1, 0x140, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x97, 0x3, 0x1, 0x71, 0x20, 0x1, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x0, 0xf7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x81, 0x0, {0x7, 0x25, 0x1, 0x80, 0x7f, 0x1ff}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0x0, 0x2, 0xc8, 0x4, "15dbf1"}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x4, 0x5, 0x2, "be9419759da2"}, @format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x178, 0x8, 0x9}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0x7, 0x380, 0x1, "dd1358abdc"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x81, 0x5}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x73, 0x7f, 0x4, {0x7, 0x25, 0x1, 0x2, 0x5, 0xfff7}}}}}}}]}}, &(0x7f0000000700)={0xa, &(0x7f0000000240)={0xa, 0x6, 0x310, 0x1, 0x7f, 0x3, 0x20, 0x8}, 0xa4, &(0x7f0000000280)={0x5, 0xf, 0xa4, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x5, 0x0, 0xb7, 0x5}, @generic={0x76, 0x10, 0xa, "0327b80e6e5e367e55d9460aa2620fe404ed95104ff641f3db63fcbc63a597033021b1c88763f9d33021b2a0c76ac45e6577c92526c583102601919697040e798528fb24e05e124b51aa1c1219673cbdefdd9a88df810751c28c7be512f4ed89726bcb9b7fd3c293c4463851aae5adbcda7ea9"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x19, 0x5, 0x0, 0x6, 0xca}, @ss_container_id={0x14, 0x10, 0x4, 0x0, "b48b46e6f9bd1a30234813690cbbe447"}]}, 0x9, [{0x78, &(0x7f0000000340)=@string={0x78, 0x3, "9c8c90e25e919d3030e632fedc6654fd641ea35b4b06629fb11e47555f56af83d4be3db3b5fc3ef821e5f1db46e122f0ddca31db763492cd7ded864a9c13d7a344c7022212a69dc985825e7e0f7633f07e771e47c3decfc4437589c894203ad901bed72da47862f50c670ceae842095307fe44bda103"}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x408}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x403}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x380a}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1c45}}, {0xe2, &(0x7f0000000540)=@string={0xe2, 0x3, "58d89b8beba68a19a1f72a139cf909634fe8ff9bf692dee5c8ade5745014e56d911ba34cfd2ced3649c280a3497f1bab485f968a1c1a344af687474051ae48304f9fc41e1b775efa5fdb683525f26898092d8cd799ba2e0fd6839e522cace659ec2b100d1cba1275217d8aca2427bf2596e2a50c0ef98aaab95ef7c97b87d027da945463c05ec9e33cc7b27221b77ce2e0b8217be0b73f9dd67dad408b366f1673539703a21ef7c60343575829676ad4e16339fe25cf188899e6f2effebb263d29e9d4d05a64c7b54637f6d2a4cd21472eb4859e971842527554bbc878984144"}}, {0xa6, &(0x7f0000000640)=@string={0xa6, 0x3, "5b66dfd8351f020ed05a4d9de0db22f1c0ebca98f32167ab363d826627e28d6885624d2ceeb604373ec326f44e198e664fa3477c468e2d44bdaad1ebb2e2d3cb17457fad327243d9c8dd0b93569fb373ffbd83cd4ed0fa28717b3f8ba772e1dcc63747635dc3052f2f48d010d0a616e1a7f2440d54c8f2a790bd0417ddf01f9be0f27fb9bb315a2cab5624d6f748544c914cfe057705255ad7a278aaac3b092b7dfe0aff"}}]}) r0 = syz_open_dev$evdev(&(0x7f0000000a40)='/dev/input/event#\x00', 0x0, 0x200000) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000000)=0x9) r1 = syz_open_dev$evdev(&(0x7f00000007c0)='/dev/input/event#\x00', 0x1, 0x0) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000800)=""/253) syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x200, 0x200c0) [ 308.194876][ T37] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.210080][ T37] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.223704][ T37] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 308.238208][ T37] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 21:28:15 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x7f, 0x0, {0x7, 0x25, 0x1, 0x0, 0x5}}}}}}}]}}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) [ 308.253054][ T37] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 308.270026][ T37] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 308.435920][ T37] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 21:28:15 executing program 0: r0 = syz_open_dev$hidraw(&(0x7f00000004c0)='/dev/hidraw#\x00', 0x0, 0x0) read$hidraw(r0, 0x0, 0x0) [ 308.453457][ T37] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.469325][ T37] usb 8-1: Product: syz [ 308.479413][ T37] usb 8-1: Manufacturer: syz [ 308.488324][ T37] usb 8-1: SerialNumber: syz [ 308.534643][ T3344] usb 6-1: new full-speed USB device number 7 using dummy_hcd qemu-system-x86_64: warning: guest updated active QH [ 308.584752][ T7] usb 7-1: new high-speed USB device number 7 using dummy_hcd 21:28:15 executing program 0: syz_usb_connect$cdc_ncm(0x0, 0x73, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x61, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}, [@call_mgmt={0x5}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x0, 0x0, 0x3f}}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 308.775479][ T37] cdc_ncm 8-1:1.0: bind() failure [ 308.788629][ T37] cdc_ncm 8-1:1.1: bind() failure [ 308.797824][ T37] usb 8-1: USB disconnect, device number 7 [ 308.865112][ T7] usb 7-1: Using ep0 maxpacket: 16 [ 308.944802][ T3344] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 308.959428][ T3344] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 308.972979][ T3344] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 308.984960][T11269] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 309.004684][ T7] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 309.017581][ T7] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 309.030786][ T7] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 309.166618][ T3344] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.181411][ T3344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.193865][ T3344] usb 6-1: Product: Ѓ [ 309.199731][ T3344] usb 6-1: Manufacturer: Ј [ 309.206674][ T3344] usb 6-1: SerialNumber: Б [ 309.245145][T11269] usb 5-1: Using ep0 maxpacket: 8 [ 309.325020][ T7] usb 7-1: string descriptor 0 read error: -22 [ 309.336036][ T7] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 309.348615][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.365443][T11269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 309.382550][T11269] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 309.399232][T11269] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 309.414504][T11269] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 309.420838][ T7] usb 7-1: 0:2 : does not exist [ 309.430560][T11269] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 309.430593][T11269] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 21:28:16 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_disconnect(r0) [ 309.575021][ T3344] usb 6-1: 0:2 : does not exist [ 309.584834][T11269] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 309.600360][T11269] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.615780][T11269] usb 5-1: Product: syz [ 309.618357][ T30] usb 7-1: USB disconnect, device number 7 [ 309.625593][ T3344] usb 6-1: USB disconnect, device number 7 [ 309.638664][T11269] usb 5-1: Manufacturer: syz [ 309.646307][T11269] usb 5-1: SerialNumber: syz [ 309.806697][ T7] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 309.898727][T12760] udc-core: couldn't find an available UDC or it's busy [ 309.909561][T12760] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 309.954857][T11269] cdc_ncm 5-1:1.0: bind() failure [ 309.965826][T11269] cdc_ncm 5-1:1.1: bind() failure [ 309.981026][T11269] usb 5-1: USB disconnect, device number 7 [ 310.085026][ T7] usb 8-1: Using ep0 maxpacket: 8 [ 310.234941][ T7] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.244930][ T30] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 310.253728][ T7] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.253786][ T7] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 310.253811][ T7] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 310.253840][ T7] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 310.253884][ T7] usb 8-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 310.404633][ T3344] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 310.424981][ T7] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 310.439900][ T7] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.455208][ T7] usb 8-1: Product: syz [ 310.461818][ T7] usb 8-1: Manufacturer: syz [ 310.471459][ T7] usb 8-1: SerialNumber: syz [ 310.684666][ T3344] usb 7-1: Using ep0 maxpacket: 16 [ 310.704999][ T37] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 310.734679][ T30] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 310.751442][ T30] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 310.769795][ T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.784609][ T7] cdc_ncm 8-1:1.0: bind() failure [ 310.800035][ T7] cdc_ncm 8-1:1.1: bind() failure [ 310.806771][ T3344] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 310.812195][ T7] usb 8-1: USB disconnect, device number 8 [ 310.822884][ T3344] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 310.844633][ T3344] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 310.956254][ T30] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 310.970965][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.984482][ T30] usb 6-1: Product: Ѓ [ 310.984788][ T37] usb 5-1: Using ep0 maxpacket: 8 [ 310.990650][ T30] usb 6-1: Manufacturer: Ј [ 311.004784][ T30] usb 6-1: SerialNumber: Б [ 311.095454][ T3344] usb 7-1: string descriptor 0 read error: -22 [ 311.105960][ T3344] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 311.118783][ T3344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.135933][ T37] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 21:28:17 executing program 1: syz_usb_connect$uac1(0x0, 0x7a, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x68, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x2, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x73, 0x7f, 0x4, {0x7, 0x25, 0x1, 0x2, 0x0, 0xfff7}}}}}}}]}}, 0x0) [ 311.153430][ T37] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 311.166664][ T37] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 311.179478][ T3344] usb 7-1: 0:2 : does not exist [ 311.181703][ T37] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 311.203824][ T37] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 311.218993][ T37] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 311.264724][ T30] usb 6-1: 0:2 : does not exist [ 311.288503][ T30] usb 6-1: USB disconnect, device number 8 [ 311.320233][ T3344] usb 7-1: USB disconnect, device number 8 21:28:18 executing program 2: syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000180)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x7f, 0x0, {0x7}}}}}}}]}}, 0x0) [ 311.405567][ T37] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 311.420551][ T37] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.434820][ T37] usb 5-1: Product: syz [ 311.441781][ T37] usb 5-1: Manufacturer: syz 21:28:18 executing program 3: syz_usb_disconnect(0xffffffffffffffff) [ 311.451291][ T37] usb 5-1: SerialNumber: syz [ 311.654603][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd 21:28:18 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) [ 311.745223][ T37] cdc_ncm 5-1:1.0: bind() failure [ 311.755090][ T37] cdc_ncm 5-1:1.1: bind() failure [ 311.765927][ T37] usb 5-1: USB disconnect, device number 8 [ 311.784608][ T3344] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 311.944818][ T30] usb 6-1: Using ep0 maxpacket: 16 [ 312.054612][ T3344] usb 7-1: Using ep0 maxpacket: 16 [ 312.065379][ T30] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 312.086623][ T30] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 312.099971][ T30] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.205142][ T3344] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping 21:28:18 executing program 3: syz_usb_disconnect(0xffffffffffffffff) [ 312.239395][ T3344] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 312.259149][ T3344] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 312.265439][ T30] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.288315][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.302312][ T30] usb 6-1: Product: syz [ 312.310571][ T30] usb 6-1: Manufacturer: syz [ 312.319010][ T30] usb 6-1: SerialNumber: syz [ 312.444775][ T3344] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.460306][ T3344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 312.472785][ T3344] usb 7-1: Product: syz [ 312.479713][ T3344] usb 7-1: Manufacturer: syz [ 312.486800][ T3344] usb 7-1: SerialNumber: syz 21:28:19 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) [ 312.645889][ T30] usb 6-1: 0:2 : does not exist [ 312.665003][ T30] usb 6-1: USB disconnect, device number 9 [ 312.734380][ C0] hrtimer: interrupt took 59194 ns [ 312.814726][ T3344] usb 7-1: 0:2 : does not exist [ 312.851081][ T3344] usb 7-1: USB disconnect, device number 9 21:28:19 executing program 3: syz_usb_disconnect(0xffffffffffffffff) [ 313.354615][ T7] usb 6-1: new high-speed USB device number 10 using dummy_hcd 21:28:20 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) [ 313.534554][ T3344] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 313.614517][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 313.744770][ T7] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 313.761364][ T7] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 313.779641][ T7] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.804541][ T3344] usb 7-1: Using ep0 maxpacket: 16 [ 313.925361][ T3344] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 313.942892][ T3344] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 313.960974][ T3344] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 314.004840][ T7] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.019258][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.032378][ T7] usb 6-1: Product: syz [ 314.039436][ T7] usb 6-1: Manufacturer: syz [ 314.047290][ T7] usb 6-1: SerialNumber: syz [ 314.169009][ T3344] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 314.189330][ T3344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.202904][ T3344] usb 7-1: Product: syz [ 314.209509][ T3344] usb 7-1: Manufacturer: syz [ 314.217278][ T3344] usb 7-1: SerialNumber: syz 21:28:21 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) [ 314.354780][ T7] usb 6-1: 0:2 : does not exist [ 314.370946][ T7] usb 6-1: USB disconnect, device number 10 21:28:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname(r0, 0x0, &(0x7f0000000000)) 21:28:21 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000080)={@loopback={0x0, 0x3fc}, 0x0, r1}) 21:28:21 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r1, &(0x7f0000000400)=ANY=[], 0x15cb3c6c) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000300)={0x0, 0x0}, 0x8) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r3, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x4}, 0x1c) splice(r0, 0x0, r3, 0x0, 0x30005, 0x0) 21:28:21 executing program 1: r0 = gettid() r1 = gettid() kcmp$KCMP_EPOLL_TFD(r0, r1, 0x5, 0xffffffffffffffff, 0x0) 21:28:21 executing program 2: syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000001880)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0) [ 314.495358][ T3344] usb 7-1: 0:2 : does not exist 21:28:21 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xd}, 0x40) [ 314.535256][ T3344] usb 7-1: USB disconnect, device number 10 21:28:21 executing program 1: r0 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x1600bd80, 0x0, &(0x7f0000000840)) [ 314.539252][ T49] audit: type=1400 audit(1611869301.270:60): avc: denied { map_create } for pid=12818 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 314.905110][ T3344] usb 7-1: new high-speed USB device number 11 using dummy_hcd 21:28:21 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) 21:28:21 executing program 1: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket(0x0, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000440)=ANY=[@ANYBLOB="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"/792], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x304, 0x10, &(0x7f0000000000), 0xfffffea2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x2000a0, 0xe, 0x0, &(0x7f0000000400)="3d6ee2e04b91ab10f30f9b0186dd", 0x0, 0x4000}, 0x28) [ 315.080341][ T49] audit: type=1400 audit(1611869301.810:61): avc: denied { prog_load } for pid=12825 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 315.112886][ T49] audit: type=1400 audit(1611869301.810:62): avc: denied { bpf } for pid=12825 comm="syz-executor.1" capability=39 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 [ 315.160678][ T49] audit: type=1400 audit(1611869301.890:63): avc: denied { prog_run } for pid=12825 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 [ 315.194418][ T3344] usb 7-1: Using ep0 maxpacket: 8 21:28:21 executing program 1: syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', 0x0, 0x0, 0x3) 21:28:22 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmsg$sock(r0, &(0x7f0000002f40)={&(0x7f0000002cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, 0x0}, 0x0) [ 315.334777][ T3344] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.362492][ T3344] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.385467][ T3344] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 21:28:22 executing program 1: syz_mount_image$iso9660(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$romfs(0x0, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) [ 315.406387][ T3344] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 315.426396][ T3344] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 315.442577][ T3344] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 315.635615][ T3344] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 315.647898][ T3344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.658033][ T3344] usb 7-1: Product: syz [ 315.663247][ T3344] usb 7-1: Manufacturer: syz [ 315.668710][ T3344] usb 7-1: SerialNumber: syz [ 315.940827][T12817] udc-core: couldn't find an available UDC or it's busy [ 315.950935][T12817] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 315.985023][ T3344] cdc_ncm 7-1:1.0: bind() failure [ 315.998250][ T3344] cdc_ncm 7-1:1.1: bind() failure [ 316.008329][ T3344] usb 7-1: USB disconnect, device number 11 [ 316.734566][T11270] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 316.994834][T11270] usb 7-1: Using ep0 maxpacket: 8 [ 317.115131][T11270] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 317.129428][T11270] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 317.146099][T11270] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 317.160608][T11270] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 317.177568][T11270] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 317.192213][T11270] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 317.385443][T11270] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 317.405319][T11270] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 317.422079][T11270] usb 7-1: Product: syz [ 317.430160][T11270] usb 7-1: Manufacturer: syz [ 317.436985][T11270] usb 7-1: SerialNumber: syz 21:28:24 executing program 2: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xda00) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000fc0)={0x0, 0x70, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x2f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xc0, &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0), 0x0, 0x0, 0x0, &(0x7f0000000700)={0xa, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=0x8}}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 21:28:24 executing program 0: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000780)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x00_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% ', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ptrace(0x10, r1) fcntl$getown(0xffffffffffffffff, 0x9) r2 = gettid() tkill(r2, 0x1000000000016) 21:28:24 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, 0x0, 0x3}, 0x40) 21:28:24 executing program 3: r0 = syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(r0) [ 317.555858][T11270] cdc_ncm 7-1:1.0: bind() failure 21:28:24 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000009, 0x11, r0, 0x0) syz_io_uring_submit(r1, 0x0, 0x0, 0x0) [ 317.565837][T11270] cdc_ncm 7-1:1.1: bind() failure [ 317.602394][T11270] usb 7-1: USB disconnect, device number 12 21:28:24 executing program 2: syz_mount_image$iso9660(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) r0 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) renameat(r0, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffffff, 0x0) [ 317.633827][ T49] audit: type=1400 audit(1611869304.360:64): avc: denied { map } for pid=12857 comm="syz-executor.1" path="socket:[48426]" dev="sockfs" ino=48426 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=tcp_socket permissive=1 21:28:24 executing program 2: r0 = syz_io_uring_setup(0x4792, &(0x7f00000004c0), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000540)) io_uring_enter(r0, 0x0, 0x8285, 0x1, &(0x7f0000000580), 0x8) 21:28:24 executing program 1: syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x4, &(0x7f0000000200)=[{&(0x7f0000010000)="200000008000000006000000660000000f000000000000000100000001000000004000000040000020000000d3f4655fd4f4655f0100ffff53ef010001000000d3f4655f000000000000000001000000000000000b0000000002", 0x5a, 0x400}, {&(0x7f0000010300)="02000000030000000400000066000f", 0xf, 0x800}, {&(0x7f0000010400)="ffffff03000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff", 0x802, 0x1000}, {&(0x7f0000011500)="ed41000000080000d3f4655fd3f4655fd3f4655f000000000000040004", 0x1d, 0x2200}], 0x0, &(0x7f0000000080)=ANY=[]) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2081, &(0x7f0000003b00)) perf_event_open(&(0x7f0000001500)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0/../file0\x00', 0x419302, 0x0) setuid(0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$keyring(0x0, &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000180)=@chain={'key_or_keyring:', 0x0, ':chain\x00'}) add_key$fscrypt_v1(&(0x7f0000000980)='logon\x00', &(0x7f00000009c0)={'fscrypt:', @desc1='0000111122223333'}, &(0x7f0000000a00)={0x0, "41f8521a353f4f68ad306dc2cb8600d93b0572e5ee2093cc8d550409e2c7676611510ecc364a4bdcd68d4bca90240a3d152a57c2b2cad34b5bd507447ac391a4", 0x29}, 0x48, 0x0) pwritev(r0, &(0x7f00000006c0)=[{&(0x7f0000000780)="c3", 0x47ffffe}], 0x1, 0x400fa7f, 0x0) [ 317.733090][T12876] ------------[ cut here ]------------ [ 317.734534][T12876] WARNING: CPU: 0 PID: 12876 at include/linux/cpumask.h:137 try_to_wake_up+0xe11/0x14a0 [ 317.734534][T12876] Modules linked in: [ 317.734534][T12876] CPU: 0 PID: 12876 Comm: io_wq_manager Not tainted 5.11.0-rc5-syzkaller #0 21:28:24 executing program 0: clone(0x200, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = memfd_create(&(0x7f0000000780)='\x97&\x89\\\xd0\xe7\xca\x16ZO\x94:\xe1\x01\xe5`iq@Nse;\xa8Fpj\x0e\x04!\xd5\xc5YBz\x94\xaf\x13\xe9\xd2\x0f\xc2G\x86\x06\x00\xf1/V\x8cvS\xa6K&u\x9dX\xcc\r\x12\x11\x99\xe7\xce\xaeA\xb8-E\xa1\xf8\xe4~IS\xc1\x04\xf78\xf1\'\xdfv\x90\xbc\xd1\xda\x88j\x16\xeb>\x8c\xa1\x03\xf3\xaf\xfd\xf4&a?\xcaG\n\x02j\x9b}\xc6G\x86\xb2\xdeY\x17yX $\xfcU\x9d\x02\x00\x00\x00\x00\x00\x00\x00_\x7f\xf4tW.\x81\n\xf3\v\x8d\x12pa\x91\x9b\x8cxd\x06\xa7k\n\x86\xc3\xb6\x910\xf2\x03\x00\xaf\xe1jd\xda\x1f\x8bVrd\xa4\xb34\xfcUj\x1ad:#\x96\xf9\xd3\x1c]ImZlU=.\x18)\xcf\x1am\xd5\xe0\xdb\xdc\xd7\x8e\xe0\xa3\x82\xec\x9b\xfb\xc9\x81\x9c\xdc\xb7\x0f\xdd\xd3\xd7\xbe\x89\x7f3\x1d\x1c@\x8eu\x85\xces\x89\x95&3FX\xb1\xaf\xa6\x96\xa2\x13\x1f-\b\xcf1J\xd9\x13Q\x94R/\xdf\x1e\x9e\xe57\xda{\xe1D\x00\x00\x00\x00H\xe6\x0f\xe0]\xef\x8b\xcdk\xfe\xf6\xcc+rp\xd5\b~\xf6\xa2\x87\xed<\xc2bO\x88\x03n% ', 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setown(r0, 0x8, 0xffffffffffffffff) execveat(r0, &(0x7f0000000500)='\x00', 0x0, 0x0, 0x1000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0) clone(0x802102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() execveat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) ptrace(0x10, r1) fcntl$getown(0xffffffffffffffff, 0x9) r2 = gettid() tkill(r2, 0x1000000000016) [ 317.734534][T12876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 317.734534][T12876] RIP: 0010:try_to_wake_up+0xe11/0x14a0 [ 317.734534][T12876] Code: 00 00 48 81 c7 78 ae 03 8d e8 9b 6c 66 00 48 8b 44 24 10 48 0f a3 05 f6 d1 b4 0b 49 c7 c4 00 4d 03 00 0f 92 c0 e9 bb fd ff ff <0f> 0b e9 7f f5 ff ff 48 8d bd d8 01 00 00 48 b8 00 00 00 00 00 fc [ 317.834923][T12876] RSP: 0018:ffffc900013e7d48 EFLAGS: 00010002 [ 317.834923][T12876] RAX: dffffc0000000000 RBX: 1ffff9200027cfaf RCX: 0000000000000000 [ 317.876338][T12876] RDX: 1ffff1100de684c6 RSI: ffffffff83beb29b RDI: 0000000000000003 [ 317.876338][T12876] RBP: ffff88806f342280 R08: 0000000000000040 R09: ffffffff8d03ae8f [ 317.876338][T12876] R10: ffffffff83beb258 R11: 0000000000000000 R12: ffff88806f342638 [ 317.876338][T12876] R13: 0000000000000206 R14: ffff88806f342b28 R15: 0000000000000008 [ 317.876338][T12876] FS: 0000000000000000(0000) GS:ffff88802ca00000(0000) knlGS:0000000000000000 [ 317.876338][T12876] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 317.876338][T12876] CR2: 00007fe614605000 CR3: 0000000064e0d000 CR4: 0000000000150ef0 [ 317.876338][T12876] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 317.876338][T12876] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 317.876338][T12876] Call Trace: [ 317.876338][T12876] ? lock_downgrade+0x6d0/0x6d0 [ 317.876338][T12876] ? do_raw_spin_lock+0x120/0x2b0 [ 317.876338][T12876] ? migrate_swap_stop+0x9f0/0x9f0 [ 317.876338][T12876] ? rwlock_bug.part.0+0x90/0x90 [ 317.876338][T12876] ? _raw_spin_unlock_irq+0x1f/0x40 [ 317.876338][T12876] create_io_worker+0x590/0x8d0 [ 317.876338][T12876] io_wq_manager+0x16b/0xb80 [ 317.876338][T12876] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 317.876338][T12876] ? lockdep_hardirqs_on+0x79/0x100 [ 317.876338][T12876] ? io_wq_cpu_online+0x250/0x250 [ 317.876338][T12876] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 317.876338][T12876] ? __kthread_parkme+0x13f/0x1e0 [ 317.876338][T12876] ? io_wq_cpu_online+0x250/0x250 [ 317.876338][T12876] kthread+0x3b1/0x4a0 [ 317.876338][T12876] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 317.876338][T12876] ret_from_fork+0x1f/0x30 [ 317.876338][T12876] Kernel panic - not syncing: panic_on_warn set ... [ 317.876338][T12876] CPU: 0 PID: 12876 Comm: io_wq_manager Not tainted 5.11.0-rc5-syzkaller #0 [ 317.876338][T12876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 317.876338][T12876] Call Trace: [ 317.876338][T12876] dump_stack+0x107/0x163 [ 317.876338][T12876] panic+0x306/0x73d [ 317.876338][T12876] ? __warn_printk+0xf3/0xf3 [ 317.876338][T12876] ? __warn.cold+0x1a/0x44 [ 317.876338][T12876] ? try_to_wake_up+0xe11/0x14a0 [ 317.876338][T12876] __warn.cold+0x35/0x44 [ 317.876338][T12876] ? try_to_wake_up+0xe11/0x14a0 [ 317.876338][T12876] report_bug+0x1bd/0x210 [ 317.876338][T12876] handle_bug+0x3c/0x60 [ 317.876338][T12876] exc_invalid_op+0x14/0x40 [ 317.876338][T12876] asm_exc_invalid_op+0x12/0x20 [ 317.876338][T12876] RIP: 0010:try_to_wake_up+0xe11/0x14a0 [ 317.876338][T12876] Code: 00 00 48 81 c7 78 ae 03 8d e8 9b 6c 66 00 48 8b 44 24 10 48 0f a3 05 f6 d1 b4 0b 49 c7 c4 00 4d 03 00 0f 92 c0 e9 bb fd ff ff <0f> 0b e9 7f f5 ff ff 48 8d bd d8 01 00 00 48 b8 00 00 00 00 00 fc [ 317.876338][T12876] RSP: 0018:ffffc900013e7d48 EFLAGS: 00010002 [ 317.876338][T12876] RAX: dffffc0000000000 RBX: 1ffff9200027cfaf RCX: 0000000000000000 [ 317.876338][T12876] RDX: 1ffff1100de684c6 RSI: ffffffff83beb29b RDI: 0000000000000003 [ 317.876338][T12876] RBP: ffff88806f342280 R08: 0000000000000040 R09: ffffffff8d03ae8f [ 317.876338][T12876] R10: ffffffff83beb258 R11: 0000000000000000 R12: ffff88806f342638 [ 317.876338][T12876] R13: 0000000000000206 R14: ffff88806f342b28 R15: 0000000000000008 [ 317.876338][T12876] ? find_first_bit+0x48/0xb0 [ 317.876338][T12876] ? find_first_bit+0x8b/0xb0 [ 317.876338][T12876] ? try_to_wake_up+0x9d7/0x14a0 [ 317.876338][T12876] ? lock_downgrade+0x6d0/0x6d0 [ 317.876338][T12876] ? do_raw_spin_lock+0x120/0x2b0 [ 317.876338][T12876] ? migrate_swap_stop+0x9f0/0x9f0 [ 317.876338][T12876] ? rwlock_bug.part.0+0x90/0x90 [ 317.876338][T12876] ? _raw_spin_unlock_irq+0x1f/0x40 [ 317.876338][T12876] create_io_worker+0x590/0x8d0 [ 317.876338][T12876] io_wq_manager+0x16b/0xb80 [ 317.876338][T12876] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 317.876338][T12876] ? lockdep_hardirqs_on+0x79/0x100 [ 317.876338][T12876] ? io_wq_cpu_online+0x250/0x250 [ 317.876338][T12876] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 317.876338][T12876] ? __kthread_parkme+0x13f/0x1e0 [ 317.876338][T12876] ? io_wq_cpu_online+0x250/0x250 [ 317.876338][T12876] kthread+0x3b1/0x4a0 [ 317.876338][T12876] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 317.876338][T12876] ret_from_fork+0x1f/0x30 [ 317.876338][T12876] [ 317.876338][T12876] ====================================================== [ 317.876338][T12876] WARNING: possible circular locking dependency detected [ 317.876338][T12876] 5.11.0-rc5-syzkaller #0 Not tainted [ 317.876338][T12876] ------------------------------------------------------ [ 317.876338][T12876] io_wq_manager/12876 is trying to acquire lock: [ 317.876338][T12876] ffffffff8b363058 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0xe/0x60 [ 317.876338][T12876] [ 317.876338][T12876] but task is already holding lock: [ 317.876338][T12876] ffff88806f342b40 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x98/0x14a0 [ 317.876338][T12876] [ 317.876338][T12876] which lock already depends on the new lock. [ 317.876338][T12876] [ 317.876338][T12876] [ 317.876338][T12876] the existing dependency chain (in reverse order) is: [ 317.876338][T12876] [ 317.876338][T12876] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 317.876338][T12876] _raw_spin_lock_irqsave+0x39/0x50 [ 317.876338][T12876] try_to_wake_up+0x98/0x14a0 [ 317.876338][T12876] up+0x75/0xb0 [ 317.876338][T12876] __up_console_sem+0x4a/0x80 [ 317.876338][T12876] console_unlock+0x591/0xbb0 [ 317.876338][T12876] vga_remove_vgacon.cold+0x99/0x9e [ 317.876338][T12876] virtio_gpu_probe.cold+0x113/0x1e5 [ 317.876338][T12876] virtio_dev_probe+0x445/0x6f0 [ 317.876338][T12876] really_probe+0x291/0xe60 [ 317.876338][T12876] driver_probe_device+0x26b/0x3d0 [ 317.876338][T12876] device_driver_attach+0x228/0x290 [ 317.876338][T12876] __driver_attach+0x15b/0x2f0 [ 317.876338][T12876] bus_for_each_dev+0x147/0x1d0 [ 317.876338][T12876] bus_add_driver+0x3a9/0x630 [ 317.876338][T12876] driver_register+0x220/0x3a0 [ 317.876338][T12876] do_one_initcall+0x103/0x650 [ 317.876338][T12876] kernel_init_freeable+0x605/0x689 [ 317.876338][T12876] kernel_init+0xd/0x1b8 [ 317.876338][T12876] ret_from_fork+0x1f/0x30 [ 317.876338][T12876] [ 317.876338][T12876] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 317.876338][T12876] __lock_acquire+0x2b26/0x54f0 [ 317.876338][T12876] lock_acquire+0x1a8/0x720 [ 317.876338][T12876] _raw_spin_lock_irqsave+0x39/0x50 [ 317.876338][T12876] down_trylock+0xe/0x60 [ 317.876338][T12876] __down_trylock_console_sem+0x3e/0xd0 [ 317.876338][T12876] vprintk_emit+0x137/0x490 [ 317.876338][T12876] vprintk_func+0x8d/0x1e0 [ 317.876338][T12876] printk+0xba/0xed [ 317.876338][T12876] report_bug.cold+0x72/0xab [ 317.876338][T12876] handle_bug+0x3c/0x60 [ 317.876338][T12876] exc_invalid_op+0x14/0x40 [ 317.876338][T12876] asm_exc_invalid_op+0x12/0x20 [ 317.876338][T12876] try_to_wake_up+0xe11/0x14a0 [ 317.876338][T12876] create_io_worker+0x590/0x8d0 [ 317.876338][T12876] io_wq_manager+0x16b/0xb80 [ 317.876338][T12876] kthread+0x3b1/0x4a0 [ 317.876338][T12876] ret_from_fork+0x1f/0x30 [ 317.876338][T12876] [ 317.876338][T12876] other info that might help us debug this: [ 317.876338][T12876] [ 317.876338][T12876] Possible unsafe locking scenario: [ 317.876338][T12876] [ 317.876338][T12876] CPU0 CPU1 [ 317.876338][T12876] ---- ---- [ 317.876338][T12876] lock(&p->pi_lock); [ 317.876338][T12876] lock((console_sem).lock); [ 317.876338][T12876] lock(&p->pi_lock); [ 317.876338][T12876] lock((console_sem).lock); [ 317.876338][T12876] [ 317.876338][T12876] *** DEADLOCK *** [ 317.876338][T12876] [ 317.876338][T12876] 1 lock held by io_wq_manager/12876: [ 317.876338][T12876] #0: ffff88806f342b40 (&p->pi_lock){-.-.}-{2:2}, at: try_to_wake_up+0x98/0x14a0 [ 317.876338][T12876] [ 317.876338][T12876] stack backtrace: [ 317.876338][T12876] CPU: 0 PID: 12876 Comm: io_wq_manager Not tainted 5.11.0-rc5-syzkaller #0 [ 317.876338][T12876] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS rel-1.12.0-59-gc9ba5276e321-prebuilt.qemu.org 04/01/2014 [ 317.876338][T12876] Call Trace: [ 317.876338][T12876] dump_stack+0x107/0x163 [ 317.876338][T12876] check_noncircular+0x25f/0x2e0 [ 317.876338][T12876] ? print_circular_bug+0x480/0x480 [ 317.876338][T12876] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 317.876338][T12876] ? space_used+0x1a3/0x2a0 [ 317.876338][T12876] ? format_decode+0x230/0xad0 [ 317.876338][T12876] ? lockdep_lock+0xc6/0x200 [ 317.876338][T12876] ? call_rcu_zapped+0xb0/0xb0 [ 317.876338][T12876] __lock_acquire+0x2b26/0x54f0 [ 317.876338][T12876] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 317.876338][T12876] lock_acquire+0x1a8/0x720 [ 317.876338][T12876] ? down_trylock+0xe/0x60 [ 317.876338][T12876] ? lock_release+0x710/0x710 [ 317.876338][T12876] ? vprintk_func+0x8d/0x1e0 [ 317.876338][T12876] _raw_spin_lock_irqsave+0x39/0x50 [ 317.876338][T12876] ? down_trylock+0xe/0x60 [ 317.876338][T12876] down_trylock+0xe/0x60 [ 317.876338][T12876] ? vprintk_func+0x8d/0x1e0 [ 317.876338][T12876] __down_trylock_console_sem+0x3e/0xd0 [ 317.876338][T12876] vprintk_emit+0x137/0x490 [ 317.876338][T12876] vprintk_func+0x8d/0x1e0 [ 317.876338][T12876] printk+0xba/0xed [ 317.876338][T12876] ? record_print_text.cold+0x16/0x16 [ 317.876338][T12876] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 317.876338][T12876] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 317.876338][T12876] ? report_bug.cold+0x66/0xab [ 317.876338][T12876] ? try_to_wake_up+0xe11/0x14a0 [ 317.876338][T12876] report_bug.cold+0x72/0xab [ 317.876338][T12876] handle_bug+0x3c/0x60 [ 317.876338][T12876] exc_invalid_op+0x14/0x40 [ 317.876338][T12876] asm_exc_invalid_op+0x12/0x20 [ 317.876338][T12876] RIP: 0010:try_to_wake_up+0xe11/0x14a0 [ 317.876338][T12876] Code: 00 00 48 81 c7 78 ae 03 8d e8 9b 6c 66 00 48 8b 44 24 10 48 0f a3 05 f6 d1 b4 0b 49 c7 c4 00 4d 03 00 0f 92 c0 e9 bb fd ff ff <0f> 0b e9 7f f5 ff ff 48 8d bd d8 01 00 00 48 b8 00 00 00 00 00 fc [ 317.876338][T12876] RSP: 0018:ffffc900013e7d48 EFLAGS: 00010002 [ 317.876338][T12876] RAX: dffffc0000000000 RBX: 1ffff9200027cfaf RCX: 0000000000000000 [ 317.876338][T12876] RDX: 1ffff1100de684c6 RSI: ffffffff83beb29b RDI: 0000000000000003 [ 317.876338][T12876] RBP: ffff88806f342280 R08: 0000000000000040 R09: ffffffff8d03ae8f [ 317.876338][T12876] R10: ffffffff83beb258 R11: 0000000000000000 R12: ffff88806f342638 [ 317.876338][T12876] R13: 0000000000000206 R14: ffff88806f342b28 R15: 0000000000000008 [ 317.876338][T12876] ? find_first_bit+0x48/0xb0 [ 317.876338][T12876] ? find_first_bit+0x8b/0xb0 [ 317.876338][T12876] ? try_to_wake_up+0x9d7/0x14a0 [ 317.876338][T12876] ? lock_downgrade+0x6d0/0x6d0 [ 317.876338][T12876] ? do_raw_spin_lock+0x120/0x2b0 [ 317.876338][T12876] ? migrate_swap_stop+0x9f0/0x9f0 [ 317.876338][T12876] ? rwlock_bug.part.0+0x90/0x90 [ 317.876338][T12876] ? _raw_spin_unlock_irq+0x1f/0x40 [ 317.876338][T12876] create_io_worker+0x590/0x8d0 [ 317.876338][T12876] io_wq_manager+0x16b/0xb80 [ 317.876338][T12876] ? _raw_spin_unlock_irqrestore+0x42/0x50 [ 317.876338][T12876] ? lockdep_hardirqs_on+0x79/0x100 [ 317.876338][T12876] ? io_wq_cpu_online+0x250/0x250 [ 317.876338][T12876] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 317.876338][T12876] ? __kthread_parkme+0x13f/0x1e0 [ 317.876338][T12876] ? io_wq_cpu_online+0x250/0x250 [ 317.876338][T12876] kthread+0x3b1/0x4a0 [ 317.876338][T12876] ? kthread_create_worker_on_cpu+0xf0/0xf0 [ 317.876338][T12876] ret_from_fork+0x1f/0x30 [ 317.876338][T12876] Kernel Offset: disabled [ 317.876338][T12876] Rebooting in 86400 seconds.. VM DIAGNOSIS: 21:28:25 Registers: info registers vcpu 0 RAX=000000000000006c RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84184bf1 RDI=ffffffff8fc82800 RBP=ffffffff8fc827c0 RSP=ffffc900013e7710 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff84184be2 R11=000000000000001f R12=0000000000000000 R13=000000000000006c R14=ffffffff8fc827c0 R15=dffffc0000000000 RIP=ffffffff84184c1a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe614605000 CR3=0000000064e0d000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=ffffc9002033d000 RBX=ffff88806e4102c0 RCX=0000000000000000 RDX=ffffc90020402000 RSI=0000000000000004 RDI=ffffc90001447e30 RBP=ffff88801d211108 RSP=ffffc90001447ec0 R8 =0000000000040000 R9 =ffffc90020202000 R10=fffff52000288fc6 R11=0000000000006364 R12=ffff88801d211100 R13=0000000000000002 R14=0000000000000000 R15=0000000000000293 RIP=ffffffff8172cd98 RFL=00010087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f7fab4c6700 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000003e000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000003c000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000000075c000 CR3=00000000700bd000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000007369680000000000736980 XMM02=00000000007369600000000000736968 XMM03=00000000007369800000000000736960 XMM04=695f7a79730070757465735f676e6972 XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=000000c00ea2eaf8 RBX=0000000083db2acf RCX=000000c00ea2eb00 RDX=0000000000000000 RSI=0000000000917ee0 RDI=0000000000000038 RBP=000000c01a1a9be0 RSP=000000c01a1a9bc8 R8 =0000000000000000 R9 =0000000000000004 R10=000000c01a297871 R11=0000000000000003 R12=ffffffffffffffff R13=0000000000000001 R14=0000000000000021 R15=ffffffffffffffff RIP=0000000000410387 RFL=00010293 [--S-A-C] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 000000c0002e8410 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000079000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000077000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000000c01a297e68 CR3=000000001ce75000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=82e15b1c1acba9e83a35f5e5fedf15e9 XMM01=000000c01a29d0a8000000c01a29d070 XMM02=000000c01a29d118000000c01a29d0e0 XMM03=000000c01a29d188000000c01a29d150 XMM04=60e501e13a944f5a16cae7d05c892697 XMM05=495d1cd3f996233a641a6a55fc34b3a4 XMM06=d7dcdbe0d56d1acf29182e3d556c5a6d XMM07=d7d3dd0fb7dc9c81c9fb9bec82a3e08e XMM08=3326958973ce85758e401c1d337f89be XMM09=13d94a31cf082d1f13a296a6afb15846 XMM10=00000044e17bda37e59e1edf2f529451 XMM11=70722bccf6fe6bcd8bef5de00fe64800 XMM12=20256e03884f62c23ced87a2f67e08d5 XMM13=31643361303432303961636234643836 XMM14=35623433646163326232633735613235 XMM15=22346131393363613734343730356462 info registers vcpu 3 RAX=00000000b9b6cfb2 RBX=00000000e49a08cf RCX=0000000000000002 RDX=0000000089f6a382 RSI=0000000000000d40 RDI=000000005f0ab32d RBP=ffffc90000947728 RSP=ffffc900009476b8 R8 =000000003536d850 R9 =ffffffff8d03ae8f R10=0000000000000000 R11=0000000000000001 R12=0000000000000010 R13=0000000000000010 R14=ffff88806d6c2560 R15=00000000000a08cf RIP=ffffffff83d79d29 RFL=00010286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000001d7d940 ffffffff 00c00000 GS =0000 ffff88802cd00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000b4000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000b2000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffe22f2cfd8 CR3=00000000487f0000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000