last executing test programs: 52.205932675s ago: executing program 0 (id=776): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 44.105907875s ago: executing program 0 (id=776): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 35.719106538s ago: executing program 0 (id=776): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 26.464332664s ago: executing program 0 (id=776): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 16.428977818s ago: executing program 0 (id=776): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 7.388030315s ago: executing program 1 (id=1074): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x20d6, 0xcb17, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x7, {[@global=@item_012={0x0, 0x1, 0x7}, @global=@item_4={0x3, 0x1, 0xa, "f4ac6cf7"}, @global=@item_012={0x0, 0x1, 0x9}]}}, 0x0}, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000300)={0x1, 0x1}) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x1) 5.989073071s ago: executing program 0 (id=776): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, 0x0, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$inet(r1, 0x0, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000bc0)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x2}]}}]}, 0x38}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, 0x0, 0x0, 0x0) 5.099820727s ago: executing program 1 (id=1090): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/route\x00') read$FUSE(r1, &(0x7f0000007700)={0x2020, 0x0, 0x0, 0x0}, 0x2020) setuid(r2) quotactl_fd$Q_QUOTAOFF(r0, 0xffffffff80000301, r2, 0x0) (async) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r3 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[], 0x54}}, 0x0) ioctl$EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)=""/95) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) (async) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x20, 0x1, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc}}]}, 0x20}}, 0x0) (async) creat(&(0x7f0000000040)='./file0\x00', 0x0) (async) r4 = fsopen(&(0x7f0000000040)='xfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xbav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) (async) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "7fa83dab0d3366512d5be841797d7df93815e60c650932d7ec32e239af37da22bb8a299a5f539d3c7f18a266d61654fead1f5509316491a77a08835ac6cae26a"}, 0x48, 0xfffffffffffffffd) keyctl$chown(0x4, r5, 0xffffffffffffffff, 0xee00) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018008d0000b3b5b56a031d531adecfad953d807c0000000c0000000cdd4000020000"], &(0x7f00000007c0)=""/235, 0x26, 0xeb, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) membarrier(0x40, 0x0) mount(&(0x7f0000000000)=@filename='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='nfs4\x00', 0x0, &(0x7f0000000100)='nfs4\x00') mount$nfs4(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='tcp']) 4.209250278s ago: executing program 1 (id=1097): r0 = socket$kcm(0x29, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cryptd(cbc-blowfish-asm)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c582", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$tipc(&(0x7f000001d640), r2) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) close(0x3) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'gre0\x00', 0x0, 0x7, 0x7, 0x9, 0x101, {{0xb, 0x4, 0x0, 0x17, 0x2c, 0x66, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x3e}, {[@noop, @ra={0x94, 0x4}, @timestamp={0x44, 0x10, 0x26, 0x0, 0x1, [0x4, 0x3, 0x7fffffff]}]}}}}}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x7, @vifc_lcl_addr=@rand_addr=0x64010101, @multicast1}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e0c200310"], 0xf) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, 0x0) 3.479091998s ago: executing program 1 (id=1101): socket(0x10, 0x2, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCFLSH(r0, 0x540b, 0x1) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = fsopen(&(0x7f00000003c0)='jfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x6, 0x9, &(0x7f0000000740), 0x4) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000fdffffff0a00000008000300", @ANYRES32=r6, @ANYBLOB="100050800507ca68fcc6f32681000600b8"], 0x2c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0xfd, 0x5, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x7801, 0x700, 0xffffffff}}) 2.430237916s ago: executing program 2 (id=1107): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000000)=0xb, 0x4) ioctl$SIOCGETVIFCNT(r0, 0x89e0, &(0x7f0000000040)={0x4}) 1.179956789s ago: executing program 3 (id=1110): r0 = socket(0x840000000002, 0xa, 0x100) connect$inet(r0, &(0x7f00000005c0)={0x2, 0x7fe, @remote}, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async) r4 = syz_open_dev$swradio(&(0x7f00000048c0), 0x0, 0x2) ioctl$VIDIOC_G_FREQUENCY(r4, 0xc02c5638, &(0x7f0000000140)={0x5, 0x4, 0x9}) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000f000000050030000000000008000300", @ANYRES32=r3], 0x2c}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x3, 0x5, 0x1000, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r6}, 0x10) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={&(0x7f00000007c0)='skb_copy_datagram_iovec\x00', r7}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r8, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) r10 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r12 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NET_DM_CMD_STOP(r11, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r12, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0xc8000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0xd, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000950000000000000018400000ffffffff000000000000000018100000", @ANYRES32, @ANYBLOB="20000000000000001850000000000000000000000000000018400000f8ffffff000000000000000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x25, r10, 0x8, 0x0, 0x0, 0x2, &(0x7f0000000940)={0x4}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) getpeername$packet(r0, 0x0, &(0x7f0000000040)) 819.633191ms ago: executing program 2 (id=1111): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x804040, 0x0) (async, rerun: 64) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x8) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) (rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400090500000000fddbdf25021f00cb", @ANYRES32=r2, @ANYBLOB="08000200ac1414aa09001000000000000800090006000000080009000900001008000100ac1414aa08000900"], 0x48}}, 0x0) (async, rerun: 32) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0x0) (rerun: 32) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r3, 0xc2604110, &(0x7f0000000280)={0x0, [[0x7ff], [0x400, 0x2, 0x0, 0x400000], [0xfff]], '\x00', [{0x0, 0x1, 0x1}]}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r1, @ANYBLOB="7f17f3a9144cdce05a4cd0b5ccb9e71f180323e0e44337d4feea6da131898f64f7d4188f8ed23df05bfaf67031fafc78978d7db5abdf4ab88b016dffdd9dec8ae0d4d7da3a21a530429470b558087eab36a1a74b002171111ebfc14b", @ANYRES8=r1, @ANYRES64=r2], 0x70}, 0x1, 0x0, 0x0, 0x8800}, 0x20000010) (async, rerun: 32) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) r4 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) r5 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) (async, rerun: 64) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (rerun: 64) getsockopt$bt_BT_SNDMTU(r6, 0x112, 0xc, 0x0, &(0x7f0000000140)) (async) ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000380)={0x80000000, 0x0, &(0x7f0000000500)=[{{}, {0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000300)={r7, &(0x7f0000000340)=[{}, {0x80000000}], &(0x7f0000000480)=[{{0x80000000}}]}) ioctl$MEDIA_IOC_ENUM_LINKS(r4, 0xc0287c02, &(0x7f0000000280)={r9, 0x0, &(0x7f0000000580)=[{{0x80000000, 0x0}}]}) (async) r12 = socket$rds(0x15, 0x5, 0x0) bind$rds(r12, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendmsg$rds(r12, &(0x7f0000001300)={&(0x7f0000000180)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@rdma_map={0x30, 0x114, 0x3, {{0x0}, 0x0, 0xc}}], 0x30}, 0x0) (async, rerun: 64) ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000400)={{r8, r11, 0x3}, {r10}}) (async, rerun: 64) chdir(&(0x7f00000000c0)='./bus\x00') r13 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r13, 0x24, 0x0, 0x1001f0) (async) munmap(&(0x7f0000001000/0x1000)=nil, 0x1000) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 819.155267ms ago: executing program 3 (id=1112): mkdir(&(0x7f00000000c0)='./control\x00', 0x0) (async) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x200842, 0x8) openat$incfs(r0, &(0x7f0000000080)='.pending_reads\x00', 0x4ac580, 0x6a) (async, rerun: 64) r1 = inotify_init1(0x0) (rerun: 64) inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa7000be0) 818.714931ms ago: executing program 1 (id=1113): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8) write$binfmt_elf64(r2, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/545], 0x221) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"}) r3 = syz_open_pts(r1, 0x0) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) dup3(r1, r3, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000000)={0x0, 0x8000, 0x0, 0x0, 0x11, '\x00\x00\x00\x00 #\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000880)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) 611.720371ms ago: executing program 2 (id=1114): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x20, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async) r1 = socket$packet(0x11, 0x3, 0x300) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) (async, rerun: 64) r3 = dup3(r1, r0, 0x0) (rerun: 64) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), r3) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}) (async) read$FUSE(r2, &(0x7f0000006840)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r2, &(0x7f00000042c0)="9ab1446569aa24b774753c9e994c09c24df9d42fa5a228e469b44cecf6f9f5ce5f77c93b1895aaac9cf34b37415f11fe22d6fa0162aa743b242e8fe0a8659e32fb543d7969d6513136a9f332a8074f8ee1e445277ddd5859eb5ac3321eb710be880a441031da9b31f791d54fb3c97cd8ee92b00cbf962be8eb5fd0b7cab207645f59cf87a8c41e2739dd8386b6bb84b627cbf5e09bac876ad4b215f0e510a853c5e8b9f7822b26771d72972290a1f9a6f0a46942be0d0eb7aa5145ff368863b14e9845926088f9f92d554e572926290dc6e6b574aea8c500fbe5697f881c0cec48282c6d07619248da0c3b9aa6f7c778525d1760051e4ba8ef31d3c8d3e1d4214ffa5261ce1fdbc12eba889968137f5c06fea233000296cf18df494b4e7b1bee7dc2f3751c37415d46f6d7ffb3d0f788f2100ee41266e6fba75b61af22e1d7b286507ff100cc34ed28d5a2c8be3231446874bbbde6f3c367ca802d64192ffcce1ea41b2cbc57f7500fc4f8f12fe02690c1c9785bbc35542b59d05600783cf4f4633b374101d8ed395303392b238d198f9f68c8ae928cbf3b558deec6d38ebaa526e749ac4e47dd5b838ec34f2820a1134252ae60159d4e030cf5e5d6f8de799a31e12ae57cfe5a1a3ded525c6e71271271d35a0056265362387a361f21ea0f4b6d46f6a83a8512687e43b31e11b1396d6e9e49cf42b693732e226b55d21a1203022f6be9f8ecccb68de3bf4ce99689514bd752f4e60bd2f8e376d7fae5b5fc8db0f53db8c52746671e361b9319419c1b3f3168b4797ebd2d118ee42dda4bc59dd0251236195c8cdafc0546354eeb28f4c7e71e8245a6ccaddfb858f61039c0ccf5acd924680aab38dd061fc7b123f24ac7f3d3c0cee43b61045bb1efea25af86088a0591f166e2f11ea4089860893b17ca5e3d99ec75131268e2e4e290c2bf15e4dde23284e4bdf6e549c096ce221d9c8a6c0fc78aa6a1c8b547c0e10738de2a1e8663e03ab0ce4594e244989f75b6672de1eee97ba7e6467a0da51c0e75d5866c405b03c4744d8d3fbb01eddba5a0361662269154c2f0e61a9433982eb904ff562896cbfa692eb1e6c644fcf6cbc103a76b712af706a47608d3e2f5d54d47d8e9906ab37ddf04004d32ce00200fc3c274666aeb618b27424d87b6a4b0262de4436b9e6f150bc798394c298b25a2c318fbe786185464057c0bcfcd1917230d78ee1a49eca12068fa676852c1099096c6cb98dfda27fedac41826516e42cc116f0cbb68f0f810418258dc5a65c0e1ada296176e17f8d762894c80542a79383cc1674a4f3d6520633ce80baba214c20628899f9ac826484c887713aed9c5caf13b40a598cb1e81f7b18dae39efc22dc99ff497e11f158edc2716ebe3bcd593691aa26523efc168e1394ab439c9a9270575ef34eeee9084b0a31b2d81d47c964ac61e600f75d9321d7474dde45bb8d0cc46510488ab68486d3ba6cc9c3ddb6f66f2e5d251ee285121e1645a2f5167fc5fb8ac4491c0d9d0423c7a8452efea2f5a30096a0fa47173f3a68500a5c755ea939c838d3be126a87ff6baa5a1fba638a5c64767d17f04201b935fcb1cb6afa175594f410f2ff773194c703e623876051e46bb0850a5016e65f8fa34b96bafdfe851a0756fe26fb63d52113c0935b0867f7dc8a94d887484b15e8f92b6a316a22c04a985cc94e432cd43f44001bcdbd48efcd463c402d3d181298e96db60fdb714b82e146567af5ae3fc0c3f9d241471b4d129f928d286f780facb1e84434610ab3379dfff0f64d57b4a1c2e96c98b693de952d26773d24e7a95eddbc450f79932d5332d27991c7bfbd3bc35bfeb9496fbebccb5e4c35c368e021dea643cb292d794d3d3bbcc960f989bef09763dc73d83cbf907485635265e81f87b712d958a66719230fc6466615a0e3bb998d48159e9e9c51959354a545966bcffa298c7673b4d32b991c886a997236642c0f104f6795feab9f48d0ffc74667f3f3e82473ac892ad25f4b13029b0b27fb1d86991ddc42bbc3fe584ed364e769f3bc72ed8749e7a654ec1a2ec7a01bd2d5caccdc6241a1b1ef2726db54d2c34ab47020b4c729b5994b43deb00ad959950e0051d2c0f27217397055e78f1dd3bd867a45e06c2134ae8981021aae881cc7b2049fe7c82d2127ec81d6430c8116355c8d0ab8b9291c688ed9b8dbb1ed6f1a99bb58a1be8d5737acbf9461b142c8982f52481195d35ef82aed4fa52385ea4ed00a739d01cad7af9f7c27d357748e24f28d22065ccb37300e8f5d8dae5ca79af7a50edc3e05184d1a2a6d59784d5ceeb1f1550a44ea03bee4dc5c27eb78f0032593c7d082e59211f83a8b91aa78bfb7e959328ee63af26a37b79ce5e5139eeebd12e28b2a26ad2fcbdca652524d036b324782d54247a48b9f8200b2d6d2c091c41366d677e3be6e136cec6c3080d608849135c6e3c7d695d2e226ae1ce999d730d7f79116ab85762e55a3e5a66a690ce0a4bb4fd1560c796e2797414b544ef78e29d55e4853fdbf3362085a65c46105f32c360a0a9867b984a5d0297fe0b06a45684ac801a8e66294cef6e5f3c48648884fbb2422fa00488df33a9a0ff1039c81f1939f2cd2f5fe8aa805af2d2332ac37244ed4a7b50265af8062752b0c16511e5f25e8aa2b60645675bc826557bb75474ca4787f6b584b2f83bc25192579104aa0baae79f396df0d31121f90db9acea9695ee0fe0c22df4db503ec8b2437b05f5d35a65722fa82eebd2aff4bcd3316a5cffc4b31913fd02f82130c77f320bf04bf8fa873d0e3f62122d6a5f87d3e908bedafed4a3cb6d9f73ff546f5a2b74a2493b1753e89b682352bb3166563518dcb190c7b3d9fd667c57978a670b192641a674dc92c2401d067b6767aa632ce32a401175c98200a52ab5d80dffa719746d0bff8a84bac4a56e0ab8124fc332b64ea662d01e1b73231a6638f01cf4d699448da228c16951149c8d3dab9a7e3be9a16c7d1ffb061818f8f9cb2b42739fae4a0d70c0701c8dceee785d36ef6413162de1917df01c693ef3e1f517e7fc46245209fee52f5c6a2f50ab3f56d67d1cd987282b24071d8ebb1bc5cd635957b2a7ad92d0650abd5bbc24b75885b6119592a3d715392718e52f9124c4ac95be3582abba4ac3a4049ee49fa8ceb9b59d4e1e2a069c9d482879fd8d27d5ac22ef870542453be22c2ec4ebf1472c19fbfb56aa0a3671297b020e3fe49d201a82a04420e90bda43691dacf92347bcbcae3742cc4abad4c8010c0afa15278795d4d76c482461ae78f30569e1dcf87b9b150d07a2bd81676ec6022422d490759ae1e861a6c4cd1f733bd772d60975a59356c385a4a390429f3d2131e7f616015261df6db3cc3ec261a53be10c4f197e71878984fee00e6d1069f79825194b7af434fb6bb86db18e11977f82928be35054543060cea94ebb4015d061f20f8454e056e7b6e4f9a1621ef2377d77659c20bf358c817519f1801be15ae3b5b42adfab367777a6789635a0dcdd1f2b97edecea0210768af67601d1b95a8850dddb6b1f4b0c2f52c835b0833d81966ad19e49ceb9dc9c729cd8334bc3ee5bb8c74186f5cc3e765b9fdd91d79baaab3d2ab64c15d655d1af7de9cf8d5d7c1baef24577843ce142331743b45b06104b6d0d4392e61ca8c07507ff5f831bbf720854db4debf64182aaebf899ba57626a48748fc2dcf016013d575595d24d383eef2da0ff0c9f6fe9c64b186cd4617e3f37635d7dacb58ec297f3ddb48ce4a5e00cc127267e18a1fdf209e098f2cb2e9c0630d15ec9b867b2b95ecf82ad2c0ba39df9c4d36d492bc9a55c4b767da966e4fd7f4d2fef5e91d0575177c05d240b50757031c76333d43bcc828ab2f0376e29d12d1261ce104a8ea488091326bc451c120c8c04d3e64835c893f55b312e248ad8fc1c32429d68e6b67bf45ab8a1cc3db22f9f01a2266b8349046d3d3e081eaa7f7020c73c0762d11a33b517b8f081da3c61ef63e1d40cd87d69c7ac7491fb61bb57c1fe2d218aff6d39b3e1fc847f0ed894e2f0b4d6a4ad03ba42e28bb1dfab645081f548e64ceb8ce15d2214bd66a14fe594aa447c3537eb493299fef0f9326236ea5dae44e23b34801fe06ee16c79545feaf2528421d6e7f9a256a7914d86bd053dc33c8c2043ba73714f5ff5f0507097a56c40b2190e77877d43be849ee2ac129e582930ced06d359eebb49eda4edb13819f91cecc449c9613d9659906179f8fefa34fecb7d21cdaf09a1ce8d094421da80796c97c02fc56171aaba53fd8a7f55de059044717df164f3571028f16995d51fc8829534cdf58dd134def1e43a34e4f5f372fa8e19d3b85881e99ecd45faa4fccfdb47e094ab06955f3960fac71294dd965f24a97cff36b9966cf1a4c3e96c3e14a3951dcc8a3e9371f7e1ae9df77ddb1a99172174adbee8ea57a0c9872a6d677c2875da88a6a7234bebf68a3cc0532a9809a4de4b4d419bff67b0ba825a7ae6e999087155378357ae67e2dd98697f1d10ffa4497dde6582571670456db995228b97d0ecb2fb30c2ba6c16038c40059815c56b35666cc1c5090f6c38e0f4c12abf79919951b85a2734d32dd12b239912d541f9163387a4aa0be0b7a12d9c6b56dbcf1e9aadcfd72e2664a84d6c5147c72bffe7c3560ccd8c447b748dcd26cc9ca2a85cded742a8dccdfd8e78c96e78d405a19faab9e57183b37583f94b3d416b2920c6b746427ed75c08dc3be02720c1edc4743229153c48f1239b222b9fe2e21c0ae28122bc44f9dc78a59f3485ac8057eb21f0857bcfea2d9ebbbcc197e7880d81515bb1cb7192d97c4258c09926d137e245977db40812b253f99a504bb68137d8d73ca4e7c808d50f1dcc600e6a6db90238ff44e075932fe668c066e6988a6a8b4a8485120c8e4d6511268a75d8f9b0f06689aac8cd621e90c62af1e59aa9efe928e9ea098661b408a2825c4f9aac1efd9d54d163a651054b9ab32719d2be3b176f6795ddad0f1310b9237181689f2f9dd34a41d4d4cd2d7569bf56e6a80bc24d90df3bdde0f9649e699f4ef70c4f3faf9553a231215416bba26c29f17861e0f265e9641b2307ed43d6fde23a378669f4ade874e54c20a5e902205dcaa79a3e8584a3f78a86e703451115a1717df882507c607297afac0a056a0f3509a57502fd2ffff6035d04b91f72f5e1a69ddafaf80f7b2f7a13f38c683988436585e6bc7fc2da328449675c234ec0acf5294ce06c72442beba15e65d6a3e1b5dc3c8f115e1005798383f79b0194f6b7d4b1b32371acbf22340af6e5ee3ea840f7ed451226daef3041fc194e051af2fb450022b394c774273b9575c974c324ecd7268435176ee28c54bb54c8e829232ca636f3bdef60ed460b5ff425936626dd16a3f436f08a863582a79f393378f60f6c8ecdd13d83073bfda2e9f8d0c74a841021cbb8c148e70bfc585627449cdd9fb3045db3ea08a96108b52ee8a4f5048a5d910355789f4bb85c1362955e267e719581c38a2648eaa0b516db6277d2ee3c6e1e1090df3f53a31b747d99887e337dadddab16a297d9e56797007a3d18ce333311c70bb1bf45bdae517ffc589419af643773bb30a1fbff7ecd4a8ae7456a608fe73547c2eda4f070d57dc70b65d867526c946a435ea581497da18646ce569eaf6ccf3474cd6e7aa3d6d4732836ff4167c9153757ce58a34864be6d479f7b4ea1d6480b9ac16c5bff346a74e74133234744df867e16b3d2f1f7db4b21b89019b520917ef863e60f52999d6946b9e09cb60054f49d8a255f02e4b62fff6e6adb9a167ea70a177d00b26f56e29b63138a2ebc30b956161a4ab25d5da1c207c3f762714f651341ae771e17d84fa1c86685f2fcb0a128c2e1208d1930e7ff0d8d55299154112af574b881be8b69cc1721d548ad4dc02632e184c47f9b394bf4a834e60fbead8c8bfbf5087f8454513b0b086ac97bbbb9aa342af9def758fe88f1e4570e65f93fd4a9868665d08fac0cf6ebde786995c433504ca01cdf83311aaae20cc76f819a4344a8ee4e26c1094cb00d2c8a67c733fffcd89e97534cacb08a64d75e8594fa31f0dcfcafb0d1bc184c7067fec6a48ddefd580d4d9a4128d8f70f6fc6562da683904766e982ecd0286064db6844131bb7962a0a497f7b97fefad88a0b128bdf8cca774b1c32cb4af259bfebccda036e7e4ea8962838dbb5c04ffab0a2f1481848a27f06171645daf5246a2e563f3ed60097a9d7023d6ba5c8a58d39f733b12baf0863d82c427460f51cf9e3f77281a42221725b7bb75c2116ab31f704661f090d3eeddd2aa6efc619946b4933c398b635fd04ba3758294965c568997e1ef44b0562804e6c64558f6cfa87662a988c321a856ead51c848528a4954f9ff1948d517d67bc11db66801648848bfb7ee12296428bc3ffec863e9c77ff31ee386197679adab2a0e93bbe0c66ffe9c4b09b636f6216faa373aa8271678cc57ad46898222df7e2d8b14a5b70130596c0430997c4c04d9b5187fd9bb26b71fd19aacc8e08a3239f0eebca7b2873062a19f327a4a282012ebf9898a5ab6310b8623c864d4dada3ded00ad201ce8f3973f90396f5edc1ba466e16247fe6b0ee98acfd53792cc0fea33647b841596655b8d9efbc14b50fe0b588e4c41e2cbd0a700529e7ca91122d3d1b26e52bf44a0c9fe37cdbc352357f13b2adc68e78a00f6dc88a8e6ea54bd0b2c8276f9e1bfebc8655a1f47b72c25ffa97f4463630cc21428ca3bb381a6d3171d28bb946f746f820247bf3f7bb69caaeb5c47026ca9997e586e657a9e1569312bb443299ef4cfeacc9aaf4fc3aaa4a77a21579234d2aab6fd0234398ae07ca7c57ac6d6a51e025744b1430abce27f7f9b0d0e45c051e34d20db95cadcc0e4e327dbd979166b33e39a3951d0b8dd62c0d1542b69583cfc07b127243cac4b052cb29ccb3592972698fa4cd84633d222d78b8741d5f903f8636d95cddfe2ef13829df9ce32705edfda51ded2f0ef38f60a33a2e00373107eef56a01acb5e05d849279b5987343c8bbc73ea660ceaf7c9b90c0a8e1412ff3f517cef8fe604d7a26e085170a76e1bf43f5d1bb77ee771fe841d59fe2cc2874d25bf991b4af6bf9ffe1bfbf3a5587006b60bab5bdfd5a3192e82d474ecab0ab656967856c84cba9469c5823c1d1bf104d2a21c071bb08b2a137883dd9c8f545d6958db8efa45263ae303de76e70f2f6a10e1858e6654004f2a099dc31950ee730c465e0a1822935e309d41650fba489aa3050eedbf3f058d24d1f04fc340966e42d72052d84a66789ccf75000c3fc83b8842badd6b22ddaaaf53ed34e25c1b638e3630d66a7903405052902cf8e7395d54679e2f4a2bf7c8c89b0dc38969376ea164fe97b37b1172e6e8f05a929aa373108e891a64e38e18b432a115a44d754811e03c4f4ae7c525a6b9b92aab0d16967ee1a64eeeb2207c094f6aa96f126d058eff22435a4ae76c31f888ee13b327d2cab4ab5a56abf4cae88c583dd67129271708aa17f4f10886ead0e12734314bd4a49e64349beba4abdf94a1fb23a72cf7e16b5af2f1706d9646a5ff7dbf5c7b1cb2c3781346167b15d4625841d9f3d14392db1d39101d37175c42c522229db0708544058d75cebf3e399cd443d1b943c6f3017a898bd49836a8d92519deb810712aed76602682ef0df2be270734eeda7f289a76f4684baf75702a1ac3da005e62b83f794b934cf882db5d50e5ed4aca868e300d690c0b10daf0a47486e9f49d1b08eac6cf5090ddd2443b1459b2df86ab3447b2b5c6afe8aadb410de6a84b640e326eb882832d1a9cb12e0b8f13aef579f404af8631cdd5a30a031dad19cdf247575dd223229330f19fe4d88c51242217397acf66b86c743de283d5df7212fce59af17eb702eccab192f56f054a33709d41841e4a39638e02b4210559593f9b5c44fd22d9da637ef1a3a0a41c40469990dc4beec30a05b67931c0560d9a59fa875f3e26fd1eb32655aa30c7a1cd3d541716fdaacdda206328f3cbc8f16fc2be26690f18963a16febbaf2cb6c199330579ca067c60b54cbdd211c1350e066448fb50ae28ed58788ac98f0ded3414c8735ab90639916e26ab29102cc2609035e56d9b9d2dbc98118835bcf0e437c77052efe2293d9f19b7197aa1b94b10997b0b1efdef251de8945a97fec885f032c3bee2447335230b866d7aef515b04664d0c59e18233f9a229969e3e17d69716413ca3bc55f5959e340627ea803f7b26f4a74295b295344a3685287093998a1ce75b1ed5d730c9aec812617b4c200a0250c9ef8ef7d2fcfc59ef97422eca746bc6451a5b77307d14c1cfa0ea2c8eb7cf7819644577a6456efec0af058a0e3c8ec371019009462bfe174a11368b57fbe3090208a57b2236b97edc32cda5c6fc988cbaaf91c4020a06a7ad45519eaa761e045fc84d3219b287206282347a031ef1e7b7dbc67de738fa8f9fe71c44201fd1d548f8aebe93bf502d64d4b5f470a419e3fcd87f0616b9813048311ed20ac2efd7f18dcd6889542208b50c28c8c0700f73fa33a964e38d699819cab2098c6ff081266721cdced87ff41948c84037485f30d38a99eeeb3ff4c3049742a29eb09bb35c358e732546267c165a62fee9e25abdafdb8a48785bd432d160797e7a41d580f59d7d8e59b3e6b954d39f86db33b8f7cabde43e8e04cac1fcf9aa6fdbe4326e0d9c782d9a630055b36f85c2b8efebf18f42ef14ee5eb1d33ca322db69704f8bb90bf30eb05908b8d8ed169580923f53a6539cc3b55baa47718053d2ff103c23d90f9cb49ddc7d759950f605bafabcb7953c042c0523b84da994529a87ad68fc6f0709fd7af5fc20e53a17d3f5fd4d25fc5ff6598c6ddfc34668a08ee5e066d81a65e7979c50c08febf76dc5a3a405f551bb8449d94ea0dfdad6dd6dd6d6e4486f4ae1d2523c05f46198d8af4da12873ebdf7d6b5f2d0f1b2d29759ab0d78e34ae6f17b7ab83518cf8b18836ea5630ee934e5ecc123f0d3fe6b803ae1f735d65dcadcaaf6660e02ecad0290f6ead0594733a10b2b1654a44244424fa8b3180b551ac401828203e61603b017106e2256f01b9f26db33897167d9defb54ddfe49334150574493895370bad46cc658667aa9a8ed333c86f112b2a542936af92e2f933254b6fb0b1a599eec3bf2e476ae6714e2486dd31b29e4d26838d84bd7a62c62beab3ba71642278ecaf2e50d70670d9fdff105019791d36321bc57fdfd8f65f2ea1cb188035ecabf6140e777b7e6d2177ac29e9a1a2f87dd54d96184bb1a855bd9efdadfc606f13621f40e07cd8be9c2435c8c90b4ccba5eb7ddcf8cf1f76617c9a9e011abf4a63ffe31df63ecacb8b1d2d653e613cb399ce079392f9ca2e226c60b6e8103447c24c1f80d42e1ee747997602ae3ccff8f9f98ce9b56f6f3e3c0ba507df8b2169539cfc946c42da72644feb9b3b582ce332f8b2eda02192958194903d17b3e9b4bd60d08cd9a7989d946ece6d8dc01d6b66a7851bb11e4b075d38081d3ce7bf1875fec9daf47a589abdb72763c9747b83a28389238b0279c8e41db6521130420851acac463664a97be2190aff921923475f2c1f8a87d1169229e5f10dd0a92221e61358b156020f2c9ca2cb6580743a8d5e3c59e6fd97a7a246211450c7c62f1891cedb434102f8794d81c1caf2c1b4ae18b7c4b9c88de5c51da33e3343cef76da0d00341c2e60c4562c162e41a7efa8290cc9061f3d6a592d5f104c5018f31bcaf912bdd37370fbf8fedf0aa9026c1142299197d67ab026756927b5864ea42c45a82c23c275697d31a1b7900670c9a3c967d12974543c11f20c367a336bea9b9ebe480f9c806528138dff35c5f56b1199b75748e9c5cf50e6a32397dc3eeb04c3636c0848a5e13df8a9758bacea231f34cba13b466360b0dec69f74f8bf9a2dcf3dd94fa3a7d27e8caae00240559d75875ef9c619416593ca0072e7f38caae5a530c62dbe00e38c12cb8b924d63fca4d5c3a4c8f50e8f4f86fc1fe2b163219c46c21eb783e587e18e07ab7e1927a646c4f154c5000cb65ce9528457c3c66f43d9ab7d61580df0ecfb31cb38e4cbcdc3dafcca57311abec6b74048c8b74505ba678a4db07ed7243c70a821aee66a487bf91fd273418f8ef657d1eeb9ea6f095d47641e9f9fa30599e8b9c6b4453a1a5e8afd86fcafb46dd095fa4a98a2b26470e2c799b08c6000f5c3c4e28961463724377f37813f3922484fda986eb7c93ae8365baf648acbb344ca7e044d7ba93e7ba35c31085f3f99c5fdb2f9f2845f00b8590395e8ff730b86f5dd7f52297b8ecd5d5a6bb452bcd12b98d6adb27e7ef0e84b9567c66093ca3edab7e64ac4f56360501d81823ea2b1595f934c5f61c8558304c16154109a983a2af8725c7af91b5bc57e555768aa8115236a6ccc921d472b608eb6b82c4ba3747d79027d7856fae5369aa325df6a76138a5b41a94377eeeb251087e0b8510d8890e3f7a0cffaeddb9d2c29bc89f952489f82ee2e2b485cd297e6d30683701623cf73ee9ee606baeae9c3afba287eff57731b9cfaf034b1f56c8b31a32a1078c4fcab298c3f925a8e7cacceb9edf7ba2e54d31033a25462021e4a3c0bf5af341b462ee4417024da7c12c7f385de3af129aef1338a9c1fd68323d07ff47ec8bcca66b44300624d02c9202a2d093c3c85fd922b57b3bd14162c8ca5690734b7e4e4b8980b73a8e9908a9fa3dd508b30e3b1e1fd4ec388affa27c4bc26ca2820e0a902d51ff94984e8894fa5fca7b8704b7600ca6d6b1b1527ea999fcdf8fe3b290ec0036cad222f92cf8a5a54d0fa91de6e74ef61f60a233c9f15fdc86226c3f688de15ed8f0c3f1bc3afcad87cee47a19384afc6a804f197339ebce4aca211dbe0504a000755d18f20c4ecacd4123acdff7653cbb26456499495662508c8186afb883f5481c6bdf88cf137e263bde9d62f054573e0d1454cc119c95d4d9011332bd77682f79debcf5c21f0be7e9a83a58cec34e7cfb17a8122e030669228e4d3d9e274a678c5b77e6180aacc2fa8eb9952c5b04de6b2c7bee591badab96a3c3248c275b5b8faf5394eacc427a840570033be5006c33ce2d2c6e54f08681c3f74ad2fe54bca6dc62a9d84f6c58509c1e5dd5cfcc7a358493d428de48dfc1bc3f74154801c97e6aae38445045320b4cf66c1e56eb6ea2c1218de65f120b463c5cfb9255b3a25eb6e848cbd977f0605d71c561c2a754f5761c31f84101ee8178782cc8cf70b41a2204c5cb2f3134d572327fe4bbc1792249dfcf0ae7ba5d81fb5ae4a7978d044085f3b7f2e398c05733e2bf456cae898f8b5a81e9c79179bb5ca716713fce643dabe21eaee4386e646e25ad3adc5a4ad40f9bd6743f5f742efb1a674ffdbd2ced56c646ae590eb8f10283b47f57e6f96ad76adebecb24df74020b096fdee3c8d780d563a915f73c8b0246b861cd3a8580d5cf75798e8cf1c5875724661a39277e7165fe48ed8d5e6a20d68239f626fe8ea434a4e6e03ea434ec68c4b92a0fc2af15a135d6cbaeeca39a0c1896dab33daac", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r4}, 0x50) socket$inet(0x2, 0x6, 0x2) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2000, 0x0, r5, 0x0, 0x440}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) (async, rerun: 64) socket$pppl2tp(0x18, 0x1, 0x1) (rerun: 64) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) (async) pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) (rerun: 32) 611.445204ms ago: executing program 3 (id=1115): r0 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x0) fallocate(r0, 0x10, 0x0, 0x1000f8) sendfile(r0, r0, 0x0, 0x100000008) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_cmd={0x1c, 0x4, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x3}}) 519.478759ms ago: executing program 1 (id=1116): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = dup(r1) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x1290c2, 0x20) syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0) ftruncate(r3, 0x200004) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x5327) syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r2) sendfile(r2, r3, 0x0, 0x80001d00c0d7) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x54, 0x3, 0x3, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xe32}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xca}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x101}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffd, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2e}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1fc00000}}]}, 0x54}}, 0x2a0480d0) 437.2274ms ago: executing program 3 (id=1117): r0 = syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000050000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@any, 0x5}, 0x400, "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"}, 0x418, 0x1}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x13, 0x0, 0x0) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000240)={"89334957", 0x0, 0x0, 0x0, 0x0, 0x0, "ddc65fbb23fea261896b699c0a0a8c", "0dabf5d6", "84ec4500", "b8ea9c27", ["1a475e1f925abfe0d25668c9", "3d5d1dc2d1c96ef8089fab7e", "1b2b6b9ccc0ef9bc0fafac7e", "e7d52b69c3304927cdfc24fb"]}) syz_open_dev$cec(&(0x7f00000002c0), 0x0, 0x101) (async) ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000000)=0x31) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0, 0x1}) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000280)={@local}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x200000000000011, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000050000000000007400", @ANYRES32=r5, @ANYBLOB="0000000000000000240012800b000100627269646765000014000280060027000000000005002d"], 0x44}}, 0x0) (async) ioctl$IOCTL_VMCI_DATAGRAM_SEND(r1, 0x7ab, &(0x7f00000001c0)={&(0x7f0000000780)={{@my=0x0, 0x4}, {@any, 0x5}, 0x400, "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"}, 0x418, 0x1}) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$inet_int(r6, 0x0, 0x13, 0x0, 0x0) (async) ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f0000000240)={"89334957", 0x0, 0x0, 0x0, 0x0, 0x0, "ddc65fbb23fea261896b699c0a0a8c", "0dabf5d6", "84ec4500", "b8ea9c27", ["1a475e1f925abfe0d25668c9", "3d5d1dc2d1c96ef8089fab7e", "1b2b6b9ccc0ef9bc0fafac7e", "e7d52b69c3304927cdfc24fb"]}) (async) 436.268689ms ago: executing program 2 (id=1118): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004780)=ANY=[@ANYBLOB="3c00000014000905fdfffffffbffffff02000000", @ANYRES32=r2, @ANYBLOB="08000200ac14140f08000b00e000"], 0x3c}}, 0x0) 309.728163ms ago: executing program 2 (id=1119): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="028217f88d1f2c677269643d00020000d2b64d04a7cb9fa914e205be8847e5be314504cde6ac9a27795c78414639851febcb547874f4d95478b6c395f5e8b29e5ff9e5332020fb9f3cfbfe7832c110af1f614001bd4d42dc6fc276fd47c68f165afaff3c4e65c843bbc09bc703d9c6fe13c75b10252390a7bd299d3b8e32310aa62fc7460978d710234eee13fdced1338d387c712ea1f568390ea9532964e1a5029e2b55e0f16e6ecee83e802ebb025ddca72f31012274fc3fb6f1759d7ef8c7296ab87dc23aa230d154e3", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x40000c0) r3 = epoll_create1(0x0) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r5, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) bind$alg(r4, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000200)="ad56b6cc0400aeb995298992ea5400c2", 0x10) close_range(r3, 0xffffffffffffffff, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) syz_open_dev$tty1(0xc, 0x4, 0x1) pselect6(0x40, &(0x7f00000001c0)={0x0, 0xfffffffffffffffe}, 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000005e40)="17000000020001000003d68c5ee17688a2003208020300ecff3f0200000300000a000000009afc5ad9485bbb6a880000d6c8db0000dba67e060180000a0000f10607bdff59100ac45761407a681f009cee4a5acb3da400001fb700674f19b44e09f9315033bf79ac2dff060115003901000000000000ea000000000000000009ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e000"/184, 0xb8) 253.015318ms ago: executing program 3 (id=1120): prctl$PR_SET_THP_DISABLE(0x41, 0x1) prctl$PR_SET_THP_DISABLE(0x41, 0x1) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) write$qrtrtun(r0, &(0x7f0000003bc0)="9d8d64", 0x3) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r0, 0x20, &(0x7f0000000240)={&(0x7f0000000180)=""/127, 0x7f, 0x0, &(0x7f0000000100)=""/64, 0x40}}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0xe1515f8735398fb, @val=@tracing={r3, 0x1ff}}, 0x20) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r6 = dup3(r5, r4, 0x0) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x1002, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r7, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000440)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @ptr={0x70742a85, 0x1, &(0x7f0000000280)=""/110, 0x6e, 0x1, 0x2b}, @flat=@binder={0x73622a85, 0x0, 0x800}}, &(0x7f0000000200)={0x0, 0x18, 0x40}}}], 0x0, 0x0, 0x0}) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x40010, r0, 0x80000000) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x11) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd27, 0x25dfdc00, {0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x5}, 0x0) socket(0x28, 0x0, 0x2) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 89.810787ms ago: executing program 3 (id=1121): mlockall(0x5) (async) mlockall(0x5) setrlimit(0xf, &(0x7f0000000040)={0x5, 0x7}) signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) (async) r0 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) read(r0, &(0x7f00000002c0)=""/199, 0xc7) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) timer_create(0x3, 0x0, &(0x7f0000044000)) (async) timer_create(0x3, 0x0, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) (async) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x3, 0x0, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) (async) timer_settime(r1, 0x0, &(0x7f0000000280)={{}, {0x0, 0x989680}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$inet(0x2, 0x4, 0x7) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) (async) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={0x1c, r7, 0x1, 0x70bd2c, 0x0, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r5}]}, 0x1c}}, 0x24048014) write$nci(r4, &(0x7f00000007c0)=@NCI_OP_RF_DISCOVER_RSP={0x1, 0x1, 0x2, 0x3, 0x1, 0x1}, 0x4) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r3, 0x1, 0x5, &(0x7f0000000000), 0x4) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) munlockall() mlockall(0x4) 0s ago: executing program 2 (id=1122): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100), 0x802, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000002180)={&(0x7f0000002100)={0x20, 0x140a, 0x1, 0x0, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_LQPN={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x800) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, &(0x7f0000000080)={0x10, 0x0, "858fcbb46f77e619d63033378de1ffe5"}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="48000000100001047fff00"/20, @ANYRES32=r4, @ANYBLOB="000000000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=r4], 0x48}}, 0x0) kernel console output (not intermixed with test programs): atadv_slave_0 [ 133.597656][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.600143][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.602725][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.607935][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.619313][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.622156][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.625895][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.630620][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.641833][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.645007][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.648493][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.651450][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.654005][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.656814][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.659454][ T8445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.662154][ T8445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.666078][ T8445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.680705][ T8445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.684150][ T8445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.687400][ T8445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.690526][ T8445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.814011][ T64] Bluetooth: hci0: command tx timeout [ 133.841744][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.845964][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.874420][ T25] usb 8-1: new low-speed USB device number 37 using dummy_hcd [ 133.882113][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.886338][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.034489][ T25] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 134.037407][ T25] usb 8-1: config 0 has no interface number 0 [ 134.039610][ T25] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 134.043325][ T25] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 134.047235][ T25] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 134.051046][ T25] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 134.053917][ T25] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 134.057472][ T25] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.062029][ T25] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 134.065481][ T25] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.073977][ T25] usb 8-1: config 0 descriptor?? [ 134.084638][ T8601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 134.089328][ T8601] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 134.100560][ T25] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 134.314848][ T834] usb 8-1: USB disconnect, device number 37 [ 134.319068][ T834] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 134.666129][ T8606] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.670391][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 135.016638][ T5977] usb 7-1: USB disconnect, device number 28 [ 135.154422][ T8610] FAULT_INJECTION: forcing a failure. [ 135.154422][ T8610] name failslab, interval 1, probability 0, space 0, times 0 [ 135.158992][ T8610] CPU: 3 UID: 0 PID: 8610 Comm: syz.2.868 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 135.162794][ T8610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 135.166728][ T8610] Call Trace: [ 135.168000][ T8610] [ 135.169099][ T8610] dump_stack_lvl+0x16c/0x1f0 [ 135.170840][ T8610] should_fail_ex+0x497/0x5b0 [ 135.172615][ T8610] ? fs_reclaim_acquire+0xae/0x150 [ 135.174509][ T8610] should_failslab+0xc2/0x120 [ 135.176258][ T8610] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 135.178251][ T8610] ? vm_area_dup+0x53/0x2f0 [ 135.179947][ T8610] vm_area_dup+0x53/0x2f0 [ 135.181562][ T8610] copy_process+0x7941/0x8df0 [ 135.183501][ T8610] ? __pfx_copy_process+0x10/0x10 [ 135.185362][ T8610] ? get_pid_task+0xfc/0x250 [ 135.187081][ T8610] ? trace_lock_acquire+0x14e/0x1f0 [ 135.189080][ T8610] ? find_held_lock+0x2d/0x110 [ 135.190865][ T8610] kernel_clone+0xfd/0x960 [ 135.192544][ T8610] ? __pfx_kernel_clone+0x10/0x10 [ 135.194364][ T8610] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 135.196813][ T8610] __do_sys_clone+0xba/0x100 [ 135.198553][ T8610] ? __pfx___do_sys_clone+0x10/0x10 [ 135.200521][ T8610] do_syscall_64+0xcd/0x250 [ 135.202231][ T8610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 135.204431][ T8610] RIP: 0033:0x7faca6785d19 [ 135.206103][ T8610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 135.213113][ T8610] RSP: 002b:00007faca7573fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 135.216179][ T8610] RAX: ffffffffffffffda RBX: 00007faca6975fa0 RCX: 00007faca6785d19 [ 135.218931][ T8610] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 135.221684][ T8610] RBP: 00007faca7574090 R08: 0000000000000000 R09: 0000000000000000 [ 135.224433][ T8610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 135.227223][ T8610] R13: 0000000000000000 R14: 00007faca6975fa0 R15: 00007fff79fa2148 [ 135.229335][ T8610] [ 135.249945][ T8618] netlink: 260 bytes leftover after parsing attributes in process `syz.3.869'. [ 135.414643][ T5950] Bluetooth: hci2: command tx timeout [ 135.483461][ T45] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.650906][ T5942] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.654249][ T5942] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.658365][ T5942] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.660582][ T5942] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.662572][ T5942] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 135.665897][ T5942] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.993987][ T5977] usb 7-1: new low-speed USB device number 29 using dummy_hcd [ 136.084105][ T8631] chnl_net:caif_netlink_parms(): no params data found [ 136.140084][ T45] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.151891][ T5977] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 136.154252][ T5977] usb 7-1: config 0 has no interface number 0 [ 136.155741][ T5977] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 136.158342][ T5977] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 136.160966][ T5977] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 136.176577][ T5977] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 136.179341][ T5977] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 136.181986][ T5977] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 136.197253][ T5977] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 136.199502][ T5977] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.208334][ T5977] usb 7-1: config 0 descriptor?? [ 136.214291][ T8638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.219929][ T8638] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 136.224855][ T8631] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.226675][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.228438][ T5977] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 136.230467][ T8631] bridge_slave_0: entered allmulticast mode [ 136.232403][ T8631] bridge_slave_0: entered promiscuous mode [ 136.240399][ T8631] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.242238][ T8631] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.244126][ T8631] bridge_slave_1: entered allmulticast mode [ 136.246126][ T8631] bridge_slave_1: entered promiscuous mode [ 136.288052][ T8631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.297564][ T8631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.337031][ T8631] team0: Port device team_slave_0 added [ 136.341738][ T8631] team0: Port device team_slave_1 added [ 136.372037][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 136.373736][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.380426][ T8631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 136.404023][ T45] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.409836][ T8631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 136.412309][ T8631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 136.421895][ T8631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 136.441192][ T5978] usb 7-1: USB disconnect, device number 29 [ 136.446418][ T5978] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 136.492956][ T45] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.520807][ T8631] hsr_slave_0: entered promiscuous mode [ 136.522981][ T8631] hsr_slave_1: entered promiscuous mode [ 136.529323][ T8631] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 136.531297][ T8631] Cannot create hsr debugfs directory [ 136.634425][ T45] bridge_slave_1: left allmulticast mode [ 136.635907][ T45] bridge_slave_1: left promiscuous mode [ 136.637437][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.640753][ T45] bridge_slave_0: left allmulticast mode [ 136.642189][ T45] bridge_slave_0: left promiscuous mode [ 136.643684][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.695341][ T5950] Bluetooth: hci0: command 0xfc11 tx timeout [ 136.695544][ T64] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 136.857079][ T39] kauditd_printk_skb: 491 callbacks suppressed [ 136.857093][ T39] audit: type=1400 audit(1734286772.432:9401): avc: denied { write } for pid=8650 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 136.864560][ T39] audit: type=1400 audit(1734286772.432:9402): avc: denied { create } for pid=8650 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.864565][ T5977] IPVS: starting estimator thread 0... [ 136.864579][ T39] audit: type=1400 audit(1734286772.432:9403): avc: denied { setopt } for pid=8650 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 136.875755][ T39] audit: type=1400 audit(1734286772.442:9404): avc: denied { write } for pid=8650 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 136.880515][ T39] audit: type=1400 audit(1734286772.442:9405): avc: denied { read } for pid=8650 comm="syz.3.876" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.886922][ T39] audit: type=1400 audit(1734286772.442:9406): avc: denied { read open } for pid=8650 comm="syz.3.876" path="net:[4026532890]" dev="nsfs" ino=4026532890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 136.892903][ T39] audit: type=1400 audit(1734286772.452:9407): avc: denied { create } for pid=8650 comm="syz.3.876" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 136.954927][ T39] audit: type=1400 audit(1734286772.532:9408): avc: denied { ioctl } for pid=8653 comm="syz.1.877" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 136.993892][ T39] audit: type=1400 audit(1734286772.562:9409): avc: denied { read write } for pid=5943 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 136.993908][ T8655] IPVS: using max 38 ests per chain, 91200 per kthread [ 137.001858][ T39] audit: type=1400 audit(1734286772.562:9410): avc: denied { read write open } for pid=5943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 137.081963][ T8657] netlink: 260 bytes leftover after parsing attributes in process `syz.3.878'. [ 137.104065][ T57] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 137.136805][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.141179][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.160081][ T45] bond0 (unregistering): Released all slaves [ 137.280475][ T57] usb 6-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 137.283165][ T57] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 137.294498][ T57] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 137.296971][ T57] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.304995][ T57] usb 6-1: config 0 descriptor?? [ 137.318523][ T57] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 137.472279][ T8663] FAULT_INJECTION: forcing a failure. [ 137.472279][ T8663] name failslab, interval 1, probability 0, space 0, times 0 [ 137.497902][ T8663] CPU: 2 UID: 0 PID: 8663 Comm: syz.3.880 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 137.500768][ T8663] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 137.503585][ T8663] Call Trace: [ 137.504485][ T8663] [ 137.505281][ T8663] dump_stack_lvl+0x16c/0x1f0 [ 137.506557][ T8663] should_fail_ex+0x497/0x5b0 [ 137.507870][ T8663] ? fs_reclaim_acquire+0xae/0x150 [ 137.509259][ T8663] should_failslab+0xc2/0x120 [ 137.510649][ T8663] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 137.512154][ T8663] ? vm_area_dup+0x53/0x2f0 [ 137.513364][ T8663] vm_area_dup+0x53/0x2f0 [ 137.514517][ T8663] copy_process+0x7941/0x8df0 [ 137.515797][ T8663] ? __pfx_copy_process+0x10/0x10 [ 137.517138][ T8663] ? get_pid_task+0xfc/0x250 [ 137.518361][ T8663] ? trace_lock_acquire+0x14e/0x1f0 [ 137.519772][ T8663] ? find_held_lock+0x2d/0x110 [ 137.521105][ T8663] kernel_clone+0xfd/0x960 [ 137.522308][ T8663] ? __pfx_kernel_clone+0x10/0x10 [ 137.523665][ T8663] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 137.525246][ T8663] __do_sys_clone+0xba/0x100 [ 137.526491][ T8663] ? __pfx___do_sys_clone+0x10/0x10 [ 137.527839][ T8663] do_syscall_64+0xcd/0x250 [ 137.529005][ T8663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.530540][ T8663] RIP: 0033:0x7fb312f85d19 [ 137.531719][ T8663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.536768][ T8663] RSP: 002b:00007fb313e46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 137.538947][ T8663] RAX: ffffffffffffffda RBX: 00007fb313175fa0 RCX: 00007fb312f85d19 [ 137.541061][ T8663] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 137.543102][ T8663] RBP: 00007fb313e47090 R08: 0000000000000000 R09: 0000000000000000 [ 137.545184][ T8663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 137.547344][ T8663] R13: 0000000000000000 R14: 00007fb313175fa0 R15: 00007ffc72a7fb48 [ 137.549467][ T8663] [ 137.733884][ T64] Bluetooth: hci4: command tx timeout [ 137.762781][ T45] hsr_slave_0: left promiscuous mode [ 137.781435][ T45] hsr_slave_1: left promiscuous mode [ 137.791601][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.793592][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.800934][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.802888][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.832228][ T45] veth1_macvtap: left promiscuous mode [ 137.833721][ T45] veth0_macvtap: left promiscuous mode [ 137.835507][ T45] veth1_vlan: left promiscuous mode [ 137.836934][ T45] veth0_vlan: left promiscuous mode [ 138.373990][ T6048] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 138.544069][ T6048] usb 8-1: Using ep0 maxpacket: 32 [ 138.575416][ T6048] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 138.578212][ T6048] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 138.583701][ T6048] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 138.592828][ T6048] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 138.603871][ T6048] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 138.609180][ T6048] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 138.613449][ T6048] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 138.616770][ T6048] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.623290][ T6048] usb 8-1: config 0 descriptor?? [ 138.902057][ T6048] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 38 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 138.909326][ T6048] usb 8-1: USB disconnect, device number 38 [ 138.915478][ T6048] usblp0: removed [ 139.211139][ T45] team0 (unregistering): Port device team_slave_1 removed [ 139.313045][ T45] team0 (unregistering): Port device team_slave_0 removed [ 139.813914][ T64] Bluetooth: hci4: command tx timeout [ 139.842921][ T5977] usb 6-1: USB disconnect, device number 28 [ 139.915473][ T834] usb 8-1: new low-speed USB device number 39 using dummy_hcd [ 140.096914][ T834] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 140.099188][ T834] usb 8-1: config 0 has no interface number 0 [ 140.104545][ T834] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 140.107557][ T834] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 140.110368][ T834] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 140.113455][ T834] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 140.117013][ T8631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.127110][ T834] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 140.129994][ T834] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 140.133115][ T8631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.133425][ T834] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 140.141680][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.163681][ T834] usb 8-1: config 0 descriptor?? [ 140.164339][ T8631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.171654][ T8631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 140.187230][ T8695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.190850][ T8695] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 140.202913][ T834] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 140.382760][ T8631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.421579][ T8631] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.431398][ T5977] usb 8-1: USB disconnect, device number 39 [ 140.435988][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.437876][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.442005][ T5977] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 140.450320][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.452219][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.876557][ T8715] netlink: 260 bytes leftover after parsing attributes in process `syz.1.894'. [ 141.068948][ T8716] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 141.153242][ T8723] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0' [ 141.179531][ T8721] FAULT_INJECTION: forcing a failure. [ 141.179531][ T8721] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 141.183053][ T8721] CPU: 1 UID: 0 PID: 8721 Comm: syz.1.897 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 141.186056][ T8721] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 141.188800][ T8721] Call Trace: [ 141.189658][ T8721] [ 141.190440][ T8721] dump_stack_lvl+0x16c/0x1f0 [ 141.191713][ T8721] should_fail_ex+0x497/0x5b0 [ 141.192948][ T8721] ? fs_reclaim_acquire+0xae/0x150 [ 141.194333][ T8721] should_fail_alloc_page+0xe7/0x130 [ 141.195729][ T8721] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 141.197331][ T8721] __alloc_pages_noprof+0x190/0x25b0 [ 141.198748][ T8721] ? __pfx_register_lock_class+0x10/0x10 [ 141.200468][ T8721] ? hlock_class+0x4e/0x130 [ 141.201706][ T8721] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 141.203233][ T8721] ? hlock_class+0x4e/0x130 [ 141.204461][ T8721] ? __pfx___lock_acquire+0x10/0x10 [ 141.205856][ T8721] ? kvm_arch_guest_memory_reclaimed+0xd/0x20 [ 141.207471][ T8721] ? __pfx_mark_lock+0x10/0x10 [ 141.208753][ T8721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.210332][ T8721] ? policy_nodemask+0xea/0x4e0 [ 141.211651][ T8721] alloc_pages_mpol_noprof+0x2c9/0x610 [ 141.213103][ T8721] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 141.214725][ T8721] ? do_raw_spin_lock+0x12d/0x2c0 [ 141.216097][ T8721] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 141.217545][ T8721] ? lock_acquire+0x2f/0xb0 [ 141.218756][ T8721] ? __pud_alloc+0x1ed/0x640 [ 141.220001][ T8721] __pmd_alloc+0x3f/0x860 [ 141.221178][ T8721] huge_pte_alloc+0x292/0x3a0 [ 141.222430][ T8721] copy_hugetlb_page_range+0x4fa/0x3400 [ 141.223907][ T8721] ? mark_lock+0xb5/0xc60 [ 141.225057][ T8721] ? __pfx_copy_hugetlb_page_range+0x10/0x10 [ 141.226655][ T8721] ? register_lock_class+0xb1/0x1240 [ 141.228084][ T8721] ? __pfx_register_lock_class+0x10/0x10 [ 141.229573][ T8721] ? hlock_class+0x4e/0x130 [ 141.230790][ T8721] copy_page_range+0x2e06/0x57d0 [ 141.232119][ T8721] ? __pfx___lock_acquire+0x10/0x10 [ 141.233499][ T8721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 141.235062][ T8721] ? __pfx_copy_page_range+0x10/0x10 [ 141.236458][ T8721] ? find_held_lock+0x2d/0x110 [ 141.237746][ T8721] ? copy_process+0x7e2a/0x8df0 [ 141.239048][ T8721] ? __pfx_lock_release+0x10/0x10 [ 141.240387][ T8721] ? lock_acquire+0x2f/0xb0 [ 141.241603][ T8721] ? copy_process+0x7dc5/0x8df0 [ 141.242914][ T8721] ? down_write+0x14e/0x200 [ 141.244147][ T8721] ? up_write+0x1b2/0x520 [ 141.245306][ T8721] copy_process+0x7e77/0x8df0 [ 141.246604][ T8721] ? __pfx_copy_process+0x10/0x10 [ 141.247969][ T8721] ? get_pid_task+0xfc/0x250 [ 141.249199][ T8721] ? trace_lock_acquire+0x14e/0x1f0 [ 141.250583][ T8721] ? find_held_lock+0x2d/0x110 [ 141.251869][ T8721] kernel_clone+0xfd/0x960 [ 141.253060][ T8721] ? __pfx_kernel_clone+0x10/0x10 [ 141.254385][ T8721] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 141.255983][ T8721] __do_sys_clone+0xba/0x100 [ 141.257232][ T8721] ? __pfx___do_sys_clone+0x10/0x10 [ 141.258625][ T8721] do_syscall_64+0xcd/0x250 [ 141.259850][ T8721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.261410][ T8721] RIP: 0033:0x7f0e6f985d19 [ 141.262593][ T8721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.267670][ T8721] RSP: 002b:00007f0e70884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 141.269869][ T8721] RAX: ffffffffffffffda RBX: 00007f0e6fb75fa0 RCX: 00007f0e6f985d19 [ 141.271970][ T8721] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 141.274058][ T8721] RBP: 00007f0e70885090 R08: 0000000000000000 R09: 0000000000000000 [ 141.276146][ T8721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 141.278235][ T8721] R13: 0000000000000000 R14: 00007f0e6fb75fa0 R15: 00007ffd0414c088 [ 141.280322][ T8721] [ 141.314702][ T8729] net_ratelimit: 10 callbacks suppressed [ 141.314713][ T8729] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 141.871708][ T8752] 8021q: VLANs not supported on ipvlan1 [ 141.875778][ T39] kauditd_printk_skb: 1003 callbacks suppressed [ 141.875788][ T39] audit: type=1400 audit(1734286777.452:10414): avc: denied { read write } for pid=5943 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.886414][ T39] audit: type=1400 audit(1734286777.452:10415): avc: denied { read write open } for pid=5943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.903851][ T39] audit: type=1400 audit(1734286777.452:10416): avc: denied { ioctl } for pid=5943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 141.903897][ T64] Bluetooth: hci4: command tx timeout [ 141.912594][ T39] audit: type=1400 audit(1734286777.472:10417): avc: denied { read } for pid=5333 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 141.933825][ T39] audit: type=1400 audit(1734286777.482:10418): avc: denied { search } for pid=5333 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 141.940832][ T39] audit: type=1400 audit(1734286777.482:10419): avc: denied { append } for pid=5333 comm="syslogd" name="messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.963825][ T39] audit: type=1400 audit(1734286777.482:10420): avc: denied { append open } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.969678][ T39] audit: type=1400 audit(1734286777.482:10421): avc: denied { getattr } for pid=5333 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=8 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 141.972170][ T8750] netlink: 16 bytes leftover after parsing attributes in process `syz.2.901'. [ 141.983832][ T39] audit: type=1400 audit(1734286777.532:10422): avc: denied { read write } for pid=8753 comm="syz.3.904" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 141.991166][ T39] audit: type=1400 audit(1734286777.532:10423): avc: denied { read write open } for pid=8753 comm="syz.3.904" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 142.125678][ T8631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.204028][ T834] usb 8-1: new low-speed USB device number 40 using dummy_hcd [ 142.209741][ T8631] veth0_vlan: entered promiscuous mode [ 142.258939][ T8631] veth1_vlan: entered promiscuous mode [ 142.329840][ T8631] veth0_macvtap: entered promiscuous mode [ 142.353971][ T8631] veth1_macvtap: entered promiscuous mode [ 142.382051][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.384869][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.387386][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.390033][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.391527][ T834] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 142.392588][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.399317][ T834] usb 8-1: config 0 has no interface number 0 [ 142.400919][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.401594][ T834] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.407969][ T834] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 142.408558][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.410977][ T834] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 142.413652][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.421756][ T834] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 142.425139][ T8631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.425698][ T834] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 142.430433][ T834] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.433305][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.434603][ T834] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 142.440076][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.443199][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.445813][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.446280][ T834] usb 8-1: config 0 descriptor?? [ 142.448477][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.448485][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.459833][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.460745][ T8754] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.462331][ T8631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.468812][ T8754] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 142.471702][ T8631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.474831][ T8631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.484021][ T834] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 142.486702][ T8631] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.489037][ T8631] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.491272][ T8631] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.493532][ T8631] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.569039][ T8757] loop6: detected capacity change from 0 to 524287999 [ 142.580026][ C3] blk_print_req_error: 158 callbacks suppressed [ 142.580036][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 142.588026][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.590384][ C3] buffer_io_error: 100 callbacks suppressed [ 142.590391][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.600277][ C3] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.602767][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.607449][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.609798][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.611874][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.616405][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.618786][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.627032][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.629405][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.633874][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.636959][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.639306][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.646140][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.649064][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.653743][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.656156][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.660024][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 142.662375][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.665605][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 142.672750][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.678788][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.692705][ T834] usb 8-1: USB disconnect, device number 40 [ 142.698180][ T834] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 143.007803][ T68] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 143.136738][ T8769] FAULT_INJECTION: forcing a failure. [ 143.136738][ T8769] name failslab, interval 1, probability 0, space 0, times 0 [ 143.140089][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: syz.1.908 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 143.143672][ T8769] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 143.146515][ T8769] Call Trace: [ 143.147437][ T8769] [ 143.148452][ T8769] dump_stack_lvl+0x16c/0x1f0 [ 143.150116][ T8769] should_fail_ex+0x497/0x5b0 [ 143.151521][ T8769] ? fs_reclaim_acquire+0xae/0x150 [ 143.153279][ T8769] should_failslab+0xc2/0x120 [ 143.154171][ T68] usb 7-1: Using ep0 maxpacket: 32 [ 143.154890][ T8769] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 143.158677][ T8769] ? percpu_counter_add_batch+0xb5/0x1e0 [ 143.160607][ T8769] ? vm_area_dup+0x53/0x2f0 [ 143.162170][ T8769] vm_area_dup+0x53/0x2f0 [ 143.163669][ T8769] copy_process+0x7941/0x8df0 [ 143.165318][ T8769] ? __pfx_copy_process+0x10/0x10 [ 143.167056][ T8769] ? get_pid_task+0xfc/0x250 [ 143.168655][ T8769] ? trace_lock_acquire+0x14e/0x1f0 [ 143.170446][ T8769] ? find_held_lock+0x2d/0x110 [ 143.172108][ T8769] kernel_clone+0xfd/0x960 [ 143.173660][ T8769] ? __pfx_kernel_clone+0x10/0x10 [ 143.175412][ T8769] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 143.177481][ T8769] __do_sys_clone+0xba/0x100 [ 143.179057][ T8769] ? __pfx___do_sys_clone+0x10/0x10 [ 143.180876][ T8769] do_syscall_64+0xcd/0x250 [ 143.182453][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 143.184491][ T8769] RIP: 0033:0x7f0e6f985d19 [ 143.186021][ T8769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 143.192628][ T8769] RSP: 002b:00007f0e70884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 143.195461][ T8769] RAX: ffffffffffffffda RBX: 00007f0e6fb75fa0 RCX: 00007f0e6f985d19 [ 143.198176][ T8769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 143.200883][ T8769] RBP: 00007f0e70885090 R08: 0000000000000000 R09: 0000000000000000 [ 143.203612][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 143.206321][ T8769] R13: 0000000000000000 R14: 00007f0e6fb75fa0 R15: 00007ffd0414c088 [ 143.209061][ T8769] [ 143.277490][ T68] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 143.280504][ T68] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 143.283568][ T68] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 143.287042][ T68] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 143.290385][ T68] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 143.293823][ T68] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 143.298205][ T68] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 143.301340][ T68] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.315761][ T68] usb 7-1: config 0 descriptor?? [ 143.376641][ T8772] netlink: 260 bytes leftover after parsing attributes in process `syz.3.909'. [ 143.575273][ T68] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 30 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 143.581714][ T68] usb 7-1: USB disconnect, device number 30 [ 143.585473][ T68] usblp0: removed [ 143.713242][ T8781] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 143.886144][ T1143] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.909642][ T8789] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8789 comm=syz.3.915 [ 143.914072][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'. [ 143.925167][ T8789] 8021q: adding VLAN 0 to HW filter on device bond1 [ 143.968611][ T8788] vlan2: entered promiscuous mode [ 143.970022][ T8788] vlan2: entered allmulticast mode [ 143.971923][ T8788] bond1: entered allmulticast mode [ 143.973289][ T8788] bond1: entered promiscuous mode [ 143.996161][ T8788] bond1: left allmulticast mode [ 143.997572][ T8788] bond1: left promiscuous mode [ 144.032362][ T1143] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.174879][ T1143] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.410270][ T8800] netlink: 260 bytes leftover after parsing attributes in process `syz.3.918'. [ 144.430382][ T8798] binder_alloc: binder_alloc_mmap_handler: 8796 20ffe000-20fff000 already mapped failed -16 [ 144.432037][ T8801] binder: BINDER_SET_CONTEXT_MGR already set [ 144.436433][ T8801] binder: 8796:8801 ioctl 4018620d 20000040 returned -16 [ 144.443614][ T8798] binder_alloc: 8796: binder_alloc_buf, no vma [ 144.450354][ T8799] xt_hashlimit: size too large, truncated to 1048576 [ 144.498096][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 144.501289][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 144.506306][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 144.508666][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 144.511033][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 144.513058][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 144.538964][ T1143] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.563979][ T68] usb 7-1: new low-speed USB device number 31 using dummy_hcd [ 144.734872][ T68] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 144.737034][ T68] usb 7-1: config 0 has no interface number 0 [ 144.738659][ T68] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 144.761734][ T68] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 144.774827][ T68] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 144.778063][ T68] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 144.780885][ T68] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 144.783625][ T68] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 144.787481][ T1143] bridge_slave_1: left allmulticast mode [ 144.791212][ T1143] bridge_slave_1: left promiscuous mode [ 144.803836][ T68] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 144.806192][ T68] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.815955][ T1143] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.820684][ T68] usb 7-1: config 0 descriptor?? [ 144.833497][ T1143] bridge_slave_0: left allmulticast mode [ 144.835174][ T1143] bridge_slave_0: left promiscuous mode [ 144.836740][ T1143] bridge0: port 1(bridge_slave_0) entered disabled state [ 144.838467][ T8795] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.845558][ T8795] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 144.927750][ T68] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 145.085079][ T68] usb 7-1: USB disconnect, device number 31 [ 145.138983][ T68] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 145.332144][ T1143] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.337659][ T1143] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.342772][ T1143] bond0 (unregistering): Released all slaves [ 145.442712][ T8817] pim6reg1: entered promiscuous mode [ 145.453236][ T8817] pim6reg1: entered allmulticast mode [ 145.734361][ T8802] chnl_net:caif_netlink_parms(): no params data found [ 145.825980][ T8827] netlink: 'syz.1.926': attribute type 3 has an invalid length. [ 145.828051][ T8827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.926'. [ 145.829531][ T8826] dlm: plock device version mismatch: kernel (1.2.0), user (0.0.0) [ 145.946332][ T8836] netlink: 260 bytes leftover after parsing attributes in process `syz.1.929'. [ 145.950758][ T1143] hsr_slave_0: left promiscuous mode [ 145.963001][ T1143] hsr_slave_1: left promiscuous mode [ 145.975799][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.977711][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.981903][ T1143] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.990531][ T1143] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.016232][ T1143] veth1_macvtap: left promiscuous mode [ 146.018896][ T1143] veth0_macvtap: left promiscuous mode [ 146.022240][ T1143] veth1_vlan: left promiscuous mode [ 146.022295][ T1143] veth0_vlan: left promiscuous mode [ 146.042664][ T8840] tty tty2: ldisc open failed (-12), clearing slot 1 [ 146.064087][ T57] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 146.213834][ T57] usb 8-1: Using ep0 maxpacket: 32 [ 146.235117][ T57] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 146.237353][ T57] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 146.239670][ T57] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 146.254047][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 146.256318][ T57] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 146.268411][ T57] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 146.271863][ T57] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 146.282649][ T57] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.314592][ T57] usb 8-1: config 0 descriptor?? [ 146.536315][ T64] Bluetooth: hci0: command tx timeout [ 146.554970][ T57] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 41 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 146.767614][ T5997] usb 8-1: USB disconnect, device number 41 [ 146.773443][ T5997] usblp0: removed [ 146.942192][ T39] kauditd_printk_skb: 722 callbacks suppressed [ 146.942202][ T39] audit: type=1400 audit(1734286782.512:11146): avc: denied { search } for pid=8844 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.951669][ T39] audit: type=1400 audit(1734286782.522:11147): avc: denied { search } for pid=8844 comm="rm" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.960072][ T39] audit: type=1400 audit(1734286782.522:11148): avc: denied { search } for pid=8844 comm="rm" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.967009][ T39] audit: type=1400 audit(1734286782.522:11149): avc: denied { getattr } for pid=8844 comm="rm" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=5472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 146.975560][ T39] audit: type=1400 audit(1734286782.522:11150): avc: denied { search } for pid=8844 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.982502][ T39] audit: type=1400 audit(1734286782.522:11151): avc: denied { search } for pid=8844 comm="rm" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.990284][ T39] audit: type=1400 audit(1734286782.522:11152): avc: denied { search } for pid=8844 comm="rm" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 146.999179][ T39] audit: type=1400 audit(1734286782.532:11153): avc: denied { write search } for pid=8844 comm="rm" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.008117][ T39] audit: type=1400 audit(1734286782.532:11154): avc: denied { remove_name search } for pid=8844 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=5472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 147.016996][ T39] audit: type=1400 audit(1734286782.532:11155): avc: denied { unlink } for pid=8844 comm="rm" name="resolv.conf.eth2.link" dev="tmpfs" ino=5472 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 147.097274][ T1143] team0 (unregistering): Port device team_slave_1 removed [ 147.191158][ T1143] team0 (unregistering): Port device team_slave_0 removed [ 147.693605][ T8802] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.695979][ T8802] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.698683][ T8802] bridge_slave_0: entered allmulticast mode [ 147.701537][ T8802] bridge_slave_0: entered promiscuous mode [ 147.707555][ T8802] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.709505][ T8802] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.711903][ T8802] bridge_slave_1: entered allmulticast mode [ 147.714916][ T8802] bridge_slave_1: entered promiscuous mode [ 147.723078][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz.2.928'. [ 147.818095][ T8802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 147.823751][ T8802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 147.921779][ T8802] team0: Port device team_slave_0 added [ 147.927132][ T8802] team0: Port device team_slave_1 added [ 147.989682][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 147.991522][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.008782][ T8802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 148.015938][ T8802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 148.017779][ T8802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 148.024625][ T8802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 148.075180][ T8802] hsr_slave_0: entered promiscuous mode [ 148.078444][ T8802] hsr_slave_1: entered promiscuous mode [ 148.082032][ T8802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 148.086865][ T8802] Cannot create hsr debugfs directory [ 148.134050][ T833] usb 8-1: new low-speed USB device number 42 using dummy_hcd [ 148.298332][ T833] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 148.300585][ T833] usb 8-1: config 0 has no interface number 0 [ 148.302219][ T833] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 148.316190][ T833] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 148.319072][ T833] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 148.322173][ T833] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 148.330052][ T833] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 148.332968][ T833] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 148.343491][ T833] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 148.347503][ T833] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.356244][ T833] usb 8-1: config 0 descriptor?? [ 148.376570][ T8853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.379757][ T8853] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 148.393953][ T833] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 148.596522][ T833] usb 8-1: USB disconnect, device number 42 [ 148.603737][ T833] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 148.618112][ T64] Bluetooth: hci0: command tx timeout [ 148.804648][ T8884] cgroup: noprefix used incorrectly [ 148.860440][ T8802] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 148.869190][ T8802] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 148.881880][ T8802] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 148.897015][ T8802] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 149.073553][ T8802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.140437][ T8802] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.165605][ T1177] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.167510][ T1177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.178642][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.180547][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 149.307752][ T6038] libceph: connect (1)[c::]:6789 error -101 [ 149.309676][ T6038] libceph: mon0 (1)[c::]:6789 connect error [ 149.314210][ T8893] ceph: No mds server is up or the cluster is laggy [ 149.851451][ T8913] FAULT_INJECTION: forcing a failure. [ 149.851451][ T8913] name failslab, interval 1, probability 0, space 0, times 0 [ 149.884142][ T8913] CPU: 3 UID: 0 PID: 8913 Comm: syz.3.947 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 149.886864][ T8913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 149.889409][ T8913] Call Trace: [ 149.890292][ T8913] [ 149.891024][ T8913] dump_stack_lvl+0x16c/0x1f0 [ 149.892193][ T8913] should_fail_ex+0x497/0x5b0 [ 149.893345][ T8913] ? fs_reclaim_acquire+0xae/0x150 [ 149.894636][ T8913] should_failslab+0xc2/0x120 [ 149.895862][ T8913] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 149.897213][ T8913] ? vm_area_dup+0x53/0x2f0 [ 149.898365][ T8913] vm_area_dup+0x53/0x2f0 [ 149.899479][ T8913] copy_process+0x7941/0x8df0 [ 149.900627][ T8913] ? __pfx_copy_process+0x10/0x10 [ 149.901937][ T8913] ? get_pid_task+0xfc/0x250 [ 149.903160][ T8913] ? trace_lock_acquire+0x14e/0x1f0 [ 149.904551][ T8913] ? find_held_lock+0x2d/0x110 [ 149.905839][ T8913] kernel_clone+0xfd/0x960 [ 149.907025][ T8913] ? __pfx_kernel_clone+0x10/0x10 [ 149.908334][ T8913] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 149.909851][ T8913] __do_sys_clone+0xba/0x100 [ 149.911019][ T8913] ? __pfx___do_sys_clone+0x10/0x10 [ 149.912404][ T8913] do_syscall_64+0xcd/0x250 [ 149.913611][ T8913] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.915168][ T8913] RIP: 0033:0x7fb312f85d19 [ 149.916359][ T8913] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 149.921606][ T8913] RSP: 002b:00007fb313e46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 149.923787][ T8913] RAX: ffffffffffffffda RBX: 00007fb313175fa0 RCX: 00007fb312f85d19 [ 149.925773][ T8913] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.927798][ T8913] RBP: 00007fb313e47090 R08: 0000000000000000 R09: 0000000000000000 [ 149.929739][ T8913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 149.931821][ T8913] R13: 0000000000000000 R14: 00007fb313175fa0 R15: 00007ffc72a7fb48 [ 149.933907][ T8913] [ 149.934773][ C3] vkms_vblank_simulate: vblank timer overrun [ 150.593819][ T5996] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 150.693859][ T64] Bluetooth: hci0: command tx timeout [ 150.744164][ T5996] usb 8-1: Using ep0 maxpacket: 8 [ 150.752967][ T5996] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 150.755350][ T5996] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 150.756276][ T8802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.762582][ T5996] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 150.765436][ T5996] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 150.769020][ T5996] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 150.774615][ T5996] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.779367][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 150.836562][ T8802] veth0_vlan: entered promiscuous mode [ 150.852656][ T8802] veth1_vlan: entered promiscuous mode [ 150.901072][ T8802] veth0_macvtap: entered promiscuous mode [ 150.911258][ T8802] veth1_macvtap: entered promiscuous mode [ 150.935587][ T8802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.938303][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.940824][ T8802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.943487][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.946118][ T8802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.948806][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.951321][ T8802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.954072][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.957151][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.972393][ T8802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.975413][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.977897][ T8802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.980571][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.983082][ T8802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.986189][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.988727][ T8802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.991420][ T8802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.994640][ T8802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.002249][ T5996] usb 8-1: usb_control_msg returned -32 [ 151.004414][ T5996] usbtmc 8-1:16.0: can't read capabilities [ 151.004862][ T8802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.008834][ T8802] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.011076][ T8802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.013353][ T8802] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.110366][ T8904] udevd[8904]: inotify_add_watch(7, /dev/pmem0p13, 10) failed: No such file or directory [ 151.122293][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.133795][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.172013][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.175468][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.548431][ T8942] netlink: 12 bytes leftover after parsing attributes in process `syz.3.948'. [ 151.594311][ T8944] netlink: 16 bytes leftover after parsing attributes in process `syz.2.951'. [ 151.596843][ T8944] netlink: 92 bytes leftover after parsing attributes in process `syz.2.951'. [ 151.846835][ C0] vxcan0: j1939_tp_txtimer: 0xffff888051e62400: tx aborted with unknown reason: -2 [ 151.850588][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888051e61800: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 151.855692][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888051e62400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 151.963370][ T39] kauditd_printk_skb: 1081 callbacks suppressed [ 151.963380][ T39] audit: type=1400 audit(1734286787.532:12237): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.971715][ T39] audit: type=1400 audit(1734286787.542:12238): avc: denied { read write open } for pid=5947 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 151.982899][ T39] audit: type=1400 audit(1734286787.542:12239): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.020600][ T39] audit: type=1400 audit(1734286787.592:12240): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.032189][ T39] audit: type=1400 audit(1734286787.592:12241): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.041274][ T39] audit: type=1400 audit(1734286787.592:12242): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 152.050488][ T39] audit: type=1400 audit(1734286787.622:12243): avc: denied { search } for pid=8950 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.059751][ T39] audit: type=1400 audit(1734286787.622:12244): avc: denied { read } for pid=8950 comm="cmp" name="resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.067834][ T39] audit: type=1400 audit(1734286787.622:12245): avc: denied { read open } for pid=8950 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 152.075985][ T39] audit: type=1400 audit(1734286787.632:12246): avc: denied { search } for pid=8950 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 152.078393][ T8955] netlink: 260 bytes leftover after parsing attributes in process `syz.1.953'. [ 152.139017][ T8957] binder: BINDER_SET_CONTEXT_MGR already set [ 152.140669][ T8957] binder: 8954:8957 ioctl 4018620d 20000040 returned -16 [ 152.227643][ T8961] netlink: 8 bytes leftover after parsing attributes in process `syz.1.955'. [ 152.489504][ T8964] FAULT_INJECTION: forcing a failure. [ 152.489504][ T8964] name failslab, interval 1, probability 0, space 0, times 0 [ 152.492800][ T8964] CPU: 1 UID: 0 PID: 8964 Comm: syz.1.956 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 152.495580][ T8964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 152.498406][ T8964] Call Trace: [ 152.499327][ T8964] [ 152.500121][ T8964] dump_stack_lvl+0x16c/0x1f0 [ 152.501379][ T8964] should_fail_ex+0x497/0x5b0 [ 152.502634][ T8964] ? fs_reclaim_acquire+0xae/0x150 [ 152.504006][ T8964] should_failslab+0xc2/0x120 [ 152.505267][ T8964] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 152.506701][ T8964] ? vm_area_dup+0x53/0x2f0 [ 152.507946][ T8964] vm_area_dup+0x53/0x2f0 [ 152.509093][ T8964] copy_process+0x7941/0x8df0 [ 152.510360][ T8964] ? __pfx_copy_process+0x10/0x10 [ 152.511697][ T8964] ? get_pid_task+0xfc/0x250 [ 152.512923][ T8964] ? trace_lock_acquire+0x14e/0x1f0 [ 152.514303][ T8964] ? find_held_lock+0x2d/0x110 [ 152.515601][ T8964] kernel_clone+0xfd/0x960 [ 152.516794][ T8964] ? __pfx_kernel_clone+0x10/0x10 [ 152.518151][ T8964] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 152.519762][ T8964] __do_sys_clone+0xba/0x100 [ 152.521007][ T8964] ? __pfx___do_sys_clone+0x10/0x10 [ 152.522398][ T8964] do_syscall_64+0xcd/0x250 [ 152.523622][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.525189][ T8964] RIP: 0033:0x7f0e6f985d19 [ 152.526395][ T8964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.531474][ T8964] RSP: 002b:00007f0e70884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 152.533668][ T8964] RAX: ffffffffffffffda RBX: 00007f0e6fb75fa0 RCX: 00007f0e6f985d19 [ 152.535738][ T8964] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 152.537784][ T8964] RBP: 00007f0e70885090 R08: 0000000000000000 R09: 0000000000000000 [ 152.539833][ T8964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 152.541878][ T8964] R13: 0000000000000000 R14: 00007f0e6fb75fa0 R15: 00007ffd0414c088 [ 152.543891][ T8964] [ 153.018921][ T8990] netlink: 260 bytes leftover after parsing attributes in process `syz.1.964'. [ 153.089407][ T1177] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.226635][ T8993] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 153.241524][ T5977] usb 8-1: USB disconnect, device number 43 [ 153.820543][ T1177] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.922232][ T9002] FAULT_INJECTION: forcing a failure. [ 153.922232][ T9002] name failslab, interval 1, probability 0, space 0, times 0 [ 153.925780][ T9002] CPU: 0 UID: 0 PID: 9002 Comm: syz.3.968 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 153.928599][ T9002] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.931465][ T9002] Call Trace: [ 153.932372][ T9002] [ 153.933180][ T9002] dump_stack_lvl+0x16c/0x1f0 [ 153.934454][ T9002] should_fail_ex+0x497/0x5b0 [ 153.935742][ T9002] ? fs_reclaim_acquire+0xae/0x150 [ 153.937149][ T9002] should_failslab+0xc2/0x120 [ 153.938426][ T9002] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 153.939867][ T9002] ? vm_area_dup+0x21/0x2f0 [ 153.941106][ T9002] vm_area_dup+0x21/0x2f0 [ 153.942284][ T9002] copy_process+0x7941/0x8df0 [ 153.943576][ T9002] ? __pfx_copy_process+0x10/0x10 [ 153.944937][ T9002] ? get_pid_task+0xfc/0x250 [ 153.946206][ T9002] ? trace_lock_acquire+0x14e/0x1f0 [ 153.947624][ T9002] ? find_held_lock+0x2d/0x110 [ 153.948923][ T9002] kernel_clone+0xfd/0x960 [ 153.950134][ T9002] ? __pfx_kernel_clone+0x10/0x10 [ 153.951532][ T9002] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 153.953149][ T9002] __do_sys_clone+0xba/0x100 [ 153.953328][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.954402][ T9002] ? __pfx___do_sys_clone+0x10/0x10 [ 153.954429][ T9002] do_syscall_64+0xcd/0x250 [ 153.954444][ T9002] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.958782][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.959014][ T9002] RIP: 0033:0x7fb312f85d19 [ 153.963657][ T9002] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.968799][ T9002] RSP: 002b:00007fb313e46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 153.971032][ T9002] RAX: ffffffffffffffda RBX: 00007fb313175fa0 RCX: 00007fb312f85d19 [ 153.973151][ T9002] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 153.975265][ T9002] RBP: 00007fb313e47090 R08: 0000000000000000 R09: 0000000000000000 [ 153.977407][ T9002] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 153.979487][ T9002] R13: 0000000000000000 R14: 00007fb313175fa0 R15: 00007ffc72a7fb48 [ 153.981593][ T9002] [ 153.982728][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.994091][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.994925][ T1177] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.996313][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 154.002214][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.073392][ T1177] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.364317][ T9015] fuse: Bad value for 'user_id' [ 154.365614][ T9015] fuse: Bad value for 'user_id' [ 154.499509][ T1177] bridge_slave_1: left allmulticast mode [ 154.501549][ T1177] bridge_slave_1: left promiscuous mode [ 154.503724][ T1177] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.538962][ T1177] bridge_slave_0: left allmulticast mode [ 154.540496][ T1177] bridge_slave_0: left promiscuous mode [ 154.542031][ T1177] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.058357][ T9047] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 155.068757][ T9047] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem [ 155.102569][ T9047] syz.2.979: attempt to access beyond end of device [ 155.102569][ T9047] nbd2: rw=6144, sector=128, nr_sectors = 8 limit=0 [ 155.107925][ T9047] gfs2: error -5 reading superblock [ 155.160712][ T1177] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.168742][ T1177] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.188173][ T1177] bond0 (unregistering): Released all slaves [ 155.225063][ T9004] chnl_net:caif_netlink_parms(): no params data found [ 155.306052][ T9049] FAULT_INJECTION: forcing a failure. [ 155.306052][ T9049] name failslab, interval 1, probability 0, space 0, times 0 [ 155.310090][ T9049] CPU: 3 UID: 0 PID: 9049 Comm: syz.1.981 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 155.312971][ T9049] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 155.315717][ T9049] Call Trace: [ 155.316593][ T9049] [ 155.317395][ T9049] dump_stack_lvl+0x16c/0x1f0 [ 155.318632][ T9049] should_fail_ex+0x497/0x5b0 [ 155.320085][ T9049] ? fs_reclaim_acquire+0xae/0x150 [ 155.321458][ T9049] should_failslab+0xc2/0x120 [ 155.322701][ T9049] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 155.324127][ T9049] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.325556][ T9049] ? __pmd_alloc+0xc3/0x860 [ 155.326757][ T9049] __pmd_alloc+0xc3/0x860 [ 155.327905][ T9049] copy_page_range+0x3d91/0x57d0 [ 155.329212][ T9049] ? mas_destroy+0x5ba/0x9e0 [ 155.330452][ T9049] ? __pfx_copy_page_range+0x10/0x10 [ 155.331850][ T9049] ? mas_store+0x941/0x10d0 [ 155.333055][ T9049] ? __pfx_mas_store+0x10/0x10 [ 155.334319][ T9049] ? lock_acquire+0x2f/0xb0 [ 155.335524][ T9049] ? copy_process+0x7b7f/0x8df0 [ 155.336813][ T9049] ? up_write+0x1b2/0x520 [ 155.337983][ T9049] copy_process+0x7e77/0x8df0 [ 155.339244][ T9049] ? __pfx_copy_process+0x10/0x10 [ 155.340689][ T9049] ? get_pid_task+0xfc/0x250 [ 155.341903][ T9049] ? trace_lock_acquire+0x14e/0x1f0 [ 155.343288][ T9049] ? find_held_lock+0x2d/0x110 [ 155.344541][ T9049] kernel_clone+0xfd/0x960 [ 155.345741][ T9049] ? __pfx_kernel_clone+0x10/0x10 [ 155.347473][ T9049] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 155.349088][ T9049] __do_sys_clone+0xba/0x100 [ 155.350321][ T9049] ? __pfx___do_sys_clone+0x10/0x10 [ 155.351719][ T9049] do_syscall_64+0xcd/0x250 [ 155.352931][ T9049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.354491][ T9049] RIP: 0033:0x7f0e6f985d19 [ 155.355682][ T9049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.360625][ T9049] RSP: 002b:00007f0e70884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 155.362750][ T9049] RAX: ffffffffffffffda RBX: 00007f0e6fb75fa0 RCX: 00007f0e6f985d19 [ 155.364746][ T9049] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 155.366779][ T9049] RBP: 00007f0e70885090 R08: 0000000000000000 R09: 0000000000000000 [ 155.368841][ T9049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 155.370831][ T9049] R13: 0000000000000000 R14: 00007f0e6fb75fa0 R15: 00007ffd0414c088 [ 155.372832][ T9049] [ 155.660843][ T9004] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.662738][ T9004] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.675929][ T9004] bridge_slave_0: entered allmulticast mode [ 155.677971][ T9004] bridge_slave_0: entered promiscuous mode [ 155.695048][ T9004] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.696869][ T9004] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.698768][ T9004] bridge_slave_1: entered allmulticast mode [ 155.700797][ T9004] bridge_slave_1: entered promiscuous mode [ 155.821306][ T9065] netlink: 68 bytes leftover after parsing attributes in process `syz.1.984'. [ 155.832602][ T9067] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.860909][ T9065] netlink: 68 bytes leftover after parsing attributes in process `syz.1.984'. [ 155.863887][ T9067] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 1th superblock [ 155.866479][ T9067] F2FS-fs (nullb0): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 155.868532][ T9067] F2FS-fs (nullb0): Can't find valid F2FS filesystem in 2th superblock [ 155.905219][ T9065] netlink: 68 bytes leftover after parsing attributes in process `syz.1.984'. [ 155.991649][ T9004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.001175][ T9004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.055045][ T5950] Bluetooth: hci0: command tx timeout [ 156.059866][ T9004] team0: Port device team_slave_0 added [ 156.066815][ T9004] team0: Port device team_slave_1 added [ 156.247121][ T1177] hsr_slave_0: left promiscuous mode [ 156.250824][ T1177] hsr_slave_1: left promiscuous mode [ 156.261388][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.263468][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.270800][ T1177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.272833][ T1177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.302076][ T1177] veth1_macvtap: left promiscuous mode [ 156.303665][ T1177] veth0_macvtap: left promiscuous mode [ 156.308476][ T1177] veth1_vlan: left promiscuous mode [ 156.309988][ T1177] veth0_vlan: left promiscuous mode [ 156.323882][ T5996] usb 8-1: new low-speed USB device number 44 using dummy_hcd [ 156.480265][ T5996] usb 8-1: config 0 has an invalid interface number: 55 but max is 0 [ 156.482415][ T5996] usb 8-1: config 0 has no interface number 0 [ 156.484000][ T5996] usb 8-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 156.486484][ T5996] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 156.489097][ T5996] usb 8-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 156.491808][ T5996] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 156.494395][ T5996] usb 8-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 156.496754][ T5996] usb 8-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 156.499702][ T5996] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 156.501793][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.507657][ T5996] usb 8-1: config 0 descriptor?? [ 156.515794][ T9071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.518607][ T9071] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 156.525723][ T5996] ldusb 8-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 156.740594][ T5996] usb 8-1: USB disconnect, device number 44 [ 156.746957][ T5996] ldusb 8-1:0.55: LD USB Device #0 now disconnected [ 156.977191][ T39] kauditd_printk_skb: 1427 callbacks suppressed [ 156.977203][ T39] audit: type=1400 audit(1734286792.552:13674): avc: denied { write } for pid=9079 comm="syz.1.989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 157.008725][ T39] audit: type=1400 audit(1734286792.592:13675): avc: denied { search } for pid=9081 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.020795][ T39] audit: type=1400 audit(1734286792.592:13676): avc: denied { read } for pid=9081 comm="cmp" name="resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.035032][ T39] audit: type=1400 audit(1734286792.592:13677): avc: denied { read open } for pid=9081 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.041079][ T39] audit: type=1400 audit(1734286792.592:13678): avc: denied { search } for pid=9081 comm="cmp" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.053344][ T39] audit: type=1400 audit(1734286792.592:13679): avc: denied { search } for pid=9081 comm="cmp" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.060073][ T39] audit: type=1400 audit(1734286792.592:13680): avc: denied { search } for pid=9081 comm="cmp" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 157.069173][ T39] audit: type=1400 audit(1734286792.592:13681): avc: denied { read } for pid=9081 comm="cmp" name="resolv.conf.eth2.link" dev="tmpfs" ino=5689 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.075338][ T39] audit: type=1400 audit(1734286792.592:13682): avc: denied { read open } for pid=9081 comm="cmp" path="/run/dhcpcd/hook-state/resolv.conf.eth2.link" dev="tmpfs" ino=5689 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.083877][ T39] audit: type=1400 audit(1734286792.602:13683): avc: denied { getattr } for pid=9081 comm="cmp" path="/tmp/resolv.conf" dev="tmpfs" ino=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 157.343962][ T1177] team0 (unregistering): Port device team_slave_1 removed [ 157.457901][ T1177] team0 (unregistering): Port device team_slave_0 removed [ 158.048676][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.051010][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.063360][ T9004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.110595][ T9004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.112994][ T9004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.121619][ T9004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.133887][ T5950] Bluetooth: hci0: command tx timeout [ 158.245829][ T9004] hsr_slave_0: entered promiscuous mode [ 158.256409][ T9004] hsr_slave_1: entered promiscuous mode [ 158.259161][ T9004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.261121][ T9004] Cannot create hsr debugfs directory [ 158.932077][ T9124] netlink: 'syz.1.1001': attribute type 39 has an invalid length. [ 158.934074][ T5997] usb 7-1: new low-speed USB device number 32 using dummy_hcd [ 159.045230][ T9125] __nla_validate_parse: 31 callbacks suppressed [ 159.045247][ T9125] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1000'. [ 159.098787][ T5997] usb 7-1: config 0 has an invalid interface number: 55 but max is 0 [ 159.100822][ T5997] usb 7-1: config 0 has no interface number 0 [ 159.102393][ T5997] usb 7-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 159.110010][ T5997] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 159.112758][ T5997] usb 7-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 159.117417][ T5997] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 159.120236][ T5997] usb 7-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 159.122865][ T5997] usb 7-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 159.131542][ T5997] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 159.135974][ T5997] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.141389][ T5997] usb 7-1: config 0 descriptor?? [ 159.147799][ T9114] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.150765][ T9114] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 159.164579][ T5997] ldusb 7-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 159.213436][ T9121] 9pnet: Could not find request transport: virtio¸ [ 159.356384][ T9004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.382847][ T9004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.386023][ T6038] usb 7-1: USB disconnect, device number 32 [ 159.391207][ T6038] ldusb 7-1:0.55: LD USB Device #0 now disconnected [ 159.412464][ T9004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.439657][ T9004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.487013][ T9133] Process accounting resumed [ 159.549692][ T9133] Process accounting resumed [ 159.653647][ T9004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.687525][ T9004] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.700522][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.702408][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.725154][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.727338][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 159.792383][ C2] vxcan0: j1939_tp_txtimer: 0xffff888044fd4400: tx aborted with unknown reason: -2 [ 159.795016][ C2] vxcan0: j1939_xtp_rx_abort_one: 0xffff888044fd4c00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 159.799793][ C2] vxcan0: j1939_xtp_rx_abort_one: 0xffff888044fd4400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 159.802705][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1004'. [ 160.052775][ T9144] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1537 sclass=netlink_route_socket pid=9144 comm=syz.2.1006 [ 160.063244][ T9144] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1006'. [ 160.080915][ T9144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.093938][ T9144] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.095853][ T9144] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 160.098972][ T9144] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 160.213941][ T64] Bluetooth: hci0: command tx timeout [ 160.370373][ T9153] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 160.377303][ T9150] FAULT_INJECTION: forcing a failure. [ 160.377303][ T9150] name failslab, interval 1, probability 0, space 0, times 0 [ 160.380708][ T9150] CPU: 2 UID: 0 PID: 9150 Comm: syz.1.1007 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 160.383502][ T9150] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.386324][ T9150] Call Trace: [ 160.387295][ T9150] [ 160.388086][ T9150] dump_stack_lvl+0x16c/0x1f0 [ 160.389329][ T9150] should_fail_ex+0x497/0x5b0 [ 160.390607][ T9150] ? fs_reclaim_acquire+0xae/0x150 [ 160.391984][ T9150] should_failslab+0xc2/0x120 [ 160.393230][ T9150] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 160.394642][ T9150] ? ptlock_alloc+0x1f/0x70 [ 160.395851][ T9150] ptlock_alloc+0x1f/0x70 [ 160.397013][ T9150] pte_alloc_one+0x74/0x390 [ 160.398221][ T9150] __pte_alloc+0x6e/0x3b0 [ 160.399380][ T9150] ? __pfx___pte_alloc+0x10/0x10 [ 160.400700][ T9150] ? _raw_spin_unlock+0x28/0x50 [ 160.401993][ T9150] ? __pmd_alloc+0x380/0x860 [ 160.403225][ T9150] copy_page_range+0x382f/0x57d0 [ 160.404545][ T9150] ? mas_destroy+0x5ba/0x9e0 [ 160.405794][ T9150] ? __pfx_copy_page_range+0x10/0x10 [ 160.407216][ T9150] ? mas_store+0x941/0x10d0 [ 160.408433][ T9150] ? __pfx_mas_store+0x10/0x10 [ 160.409705][ T9150] ? lock_acquire+0x2f/0xb0 [ 160.410912][ T9150] ? copy_process+0x7b7f/0x8df0 [ 160.412218][ T9150] ? up_write+0x1b2/0x520 [ 160.413367][ T9150] copy_process+0x7e77/0x8df0 [ 160.414615][ T9150] ? __pfx_copy_process+0x10/0x10 [ 160.415927][ T9150] ? get_pid_task+0xfc/0x250 [ 160.417131][ T9150] ? trace_lock_acquire+0x14e/0x1f0 [ 160.418516][ T9150] ? find_held_lock+0x2d/0x110 [ 160.419801][ T9150] kernel_clone+0xfd/0x960 [ 160.420986][ T9150] ? __pfx_kernel_clone+0x10/0x10 [ 160.422321][ T9150] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 160.423904][ T9150] __do_sys_clone+0xba/0x100 [ 160.425129][ T9150] ? __pfx___do_sys_clone+0x10/0x10 [ 160.426521][ T9150] do_syscall_64+0xcd/0x250 [ 160.427741][ T9150] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.429305][ T9150] RIP: 0033:0x7f0e6f985d19 [ 160.430485][ T9150] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.435484][ T9150] RSP: 002b:00007f0e70884fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 160.437679][ T9150] RAX: ffffffffffffffda RBX: 00007f0e6fb75fa0 RCX: 00007f0e6f985d19 [ 160.439755][ T9150] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 160.441820][ T9150] RBP: 00007f0e70885090 R08: 0000000000000000 R09: 0000000000000000 [ 160.443885][ T9150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 160.445963][ T9150] R13: 0000000000000000 R14: 00007f0e6fb75fa0 R15: 00007ffd0414c088 [ 160.448049][ T9150] [ 160.969764][ T9173] trusted_key: encrypted_key: hex blob is missing [ 160.982100][ T9173] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 161.107392][ T9004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.229032][ T9004] veth0_vlan: entered promiscuous mode [ 161.235527][ T9179] binder: BINDER_SET_CONTEXT_MGR already set [ 161.237630][ T9179] binder: 9176:9179 ioctl 4018620d 200001c0 returned -16 [ 161.258502][ T9179] binder: 9176:9179 ioctl 810c5701 20000800 returned -22 [ 161.268167][ T9004] veth1_vlan: entered promiscuous mode [ 161.279901][ T9179] trusted_key: syz.1.1014 sent an empty control message without MSG_MORE. [ 161.330555][ T9004] veth0_macvtap: entered promiscuous mode [ 161.351977][ T9004] veth1_macvtap: entered promiscuous mode [ 161.400456][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.403154][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.406297][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.408970][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.411441][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.414212][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.416705][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 161.419738][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.422869][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.433036][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.435936][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.438457][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.441104][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.443581][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.446358][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.448875][ T9004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.451509][ T9004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.454674][ T9004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.468773][ T9004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.471022][ T9004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.473255][ T9004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.481123][ T9004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.600286][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.602148][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.709601][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.711684][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.818265][ T9192] NILFS (nullb0): couldn't find nilfs on the device [ 161.824008][ T64] Bluetooth: hci3: command 0x0406 tx timeout [ 161.991815][ T39] kauditd_printk_skb: 1261 callbacks suppressed [ 161.991826][ T39] audit: type=1400 audit(1734286797.562:14945): avc: denied { read write } for pid=9197 comm="syz.1.1019" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.003854][ T39] audit: type=1400 audit(1734286797.562:14946): avc: denied { mount } for pid=9198 comm="syz.3.1020" name="/" dev="overlay" ino=1450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 162.011549][ T39] audit: type=1400 audit(1734286797.582:14947): avc: denied { read write open } for pid=9197 comm="syz.1.1019" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.017732][ T39] audit: type=1400 audit(1734286797.582:14948): avc: denied { ioctl } for pid=9197 comm="syz.1.1019" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 162.023581][ T39] audit: type=1400 audit(1734286797.582:14949): avc: denied { prog_load } for pid=9197 comm="syz.1.1019" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.030210][ T39] audit: type=1400 audit(1734286797.582:14950): avc: denied { bpf } for pid=9197 comm="syz.1.1019" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.035608][ T39] audit: type=1400 audit(1734286797.602:14951): avc: denied { create } for pid=9197 comm="syz.1.1019" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 162.153664][ T39] audit: type=1400 audit(1734286797.722:14952): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.173882][ T39] audit: type=1400 audit(1734286797.722:14953): avc: denied { read write open } for pid=5947 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.179740][ T39] audit: type=1400 audit(1734286797.722:14954): avc: denied { ioctl } for pid=5947 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 162.492670][ T9220] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 162.587357][ T9225] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 162.589192][ T9225] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 162.593041][ T9225] vhci_hcd vhci_hcd.0: Device attached [ 162.597161][ T9226] vhci_hcd: unknown pdu 2 [ 162.601236][ T69] vhci_hcd: stop threads [ 162.602765][ T69] vhci_hcd: release socket [ 162.609149][ T69] vhci_hcd: disconnect device [ 163.185972][ T69] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.738362][ T69] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.981930][ T9240] FAULT_INJECTION: forcing a failure. [ 163.981930][ T9240] name failslab, interval 1, probability 0, space 0, times 0 [ 163.987879][ T9240] CPU: 0 UID: 0 PID: 9240 Comm: syz.3.1029 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 163.990632][ T9240] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 163.993295][ T9240] Call Trace: [ 163.994186][ T9240] [ 163.994959][ T9240] dump_stack_lvl+0x16c/0x1f0 [ 163.996190][ T9240] should_fail_ex+0x497/0x5b0 [ 163.997460][ T9240] ? fs_reclaim_acquire+0xae/0x150 [ 163.998826][ T9240] should_failslab+0xc2/0x120 [ 164.000105][ T9240] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 164.001559][ T9240] ? percpu_counter_add_batch+0xb5/0x1e0 [ 164.003034][ T9240] ? vm_area_dup+0x21/0x2f0 [ 164.004212][ T9240] vm_area_dup+0x21/0x2f0 [ 164.005322][ T9240] copy_process+0x7941/0x8df0 [ 164.006488][ T9240] ? __pfx_copy_process+0x10/0x10 [ 164.007883][ T9240] ? get_pid_task+0xfc/0x250 [ 164.009103][ T9240] ? trace_lock_acquire+0x14e/0x1f0 [ 164.010431][ T9240] ? find_held_lock+0x2d/0x110 [ 164.011716][ T9240] kernel_clone+0xfd/0x960 [ 164.012904][ T9240] ? __pfx_kernel_clone+0x10/0x10 [ 164.014253][ T9240] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 164.015900][ T9240] __do_sys_clone+0xba/0x100 [ 164.017126][ T9240] ? __pfx___do_sys_clone+0x10/0x10 [ 164.018498][ T9240] do_syscall_64+0xcd/0x250 [ 164.019745][ T9240] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 164.021380][ T9240] RIP: 0033:0x7fb312f85d19 [ 164.022560][ T9240] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 164.027682][ T9240] RSP: 002b:00007fb313e46fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 164.029872][ T9240] RAX: ffffffffffffffda RBX: 00007fb313175fa0 RCX: 00007fb312f85d19 [ 164.031959][ T9240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 164.034112][ T9240] RBP: 00007fb313e47090 R08: 0000000000000000 R09: 0000000000000000 [ 164.036234][ T9240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 164.038370][ T9240] R13: 0000000000000000 R14: 00007fb313175fa0 R15: 00007ffc72a7fb48 [ 164.040517][ T9240] [ 164.073682][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 164.077515][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 164.080001][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 164.083029][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 164.093468][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 164.097418][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 164.116845][ T69] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.192622][ T69] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.514131][ T69] bridge_slave_1: left allmulticast mode [ 164.516031][ T69] bridge_slave_1: left promiscuous mode [ 164.518031][ T69] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.552909][ T9267] 9p: Unknown access argument 18446744073709551615: -34 [ 164.598238][ T69] bridge_slave_0: left allmulticast mode [ 164.601155][ T69] bridge_slave_0: left promiscuous mode [ 164.602666][ T69] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.824364][ T6048] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 164.994220][ T6048] usb 7-1: Using ep0 maxpacket: 8 [ 165.023274][ T6048] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 165.033277][ T6048] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 165.043392][ T6048] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 165.068391][ T6048] usb 7-1: config 0 descriptor?? [ 165.317810][ T6048] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 165.367477][ T35] usb 7-1: USB disconnect, device number 33 [ 165.445678][ T69] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.484417][ T69] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.497352][ T69] bond0 (unregistering): Released all slaves [ 165.518781][ T9246] chnl_net:caif_netlink_parms(): no params data found [ 165.908130][ T9246] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.914755][ T9246] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.917480][ T9246] bridge_slave_0: entered allmulticast mode [ 165.920903][ T9246] bridge_slave_0: entered promiscuous mode [ 165.932575][ T9246] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.936705][ T9246] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.939484][ T9246] bridge_slave_1: entered allmulticast mode [ 165.942583][ T9246] bridge_slave_1: entered promiscuous mode [ 166.109621][ T9246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.129542][ T9246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.134162][ T5950] Bluetooth: hci0: command tx timeout [ 166.240793][ T69] hsr_slave_0: left promiscuous mode [ 166.247140][ T69] hsr_slave_1: left promiscuous mode [ 166.252756][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.254939][ T69] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.275007][ T69] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.277541][ T69] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.320265][ T69] veth1_macvtap: left promiscuous mode [ 166.321761][ T69] veth0_macvtap: left promiscuous mode [ 166.323245][ T69] veth1_vlan: left promiscuous mode [ 166.338034][ T69] veth0_vlan: left promiscuous mode [ 166.377794][ T9316] Falling back ldisc for ttyprintk. [ 166.450962][ T9322] input: syz0 as /devices/virtual/input/input14 [ 166.736340][ T9329] Failed to enqueue queue_pair DETACH event datagram for context (ID=0x0) [ 166.997015][ T39] kauditd_printk_skb: 612 callbacks suppressed [ 166.997024][ T39] audit: type=1400 audit(1734286802.572:15567): avc: denied { search } for pid=9330 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.017472][ T39] audit: type=1400 audit(1734286802.582:15568): avc: denied { search } for pid=9330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.032217][ T39] audit: type=1400 audit(1734286802.582:15569): avc: denied { read } for pid=9330 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.049884][ T39] audit: type=1400 audit(1734286802.582:15570): avc: denied { read open } for pid=9330 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.070285][ T39] audit: type=1400 audit(1734286802.582:15571): avc: denied { getattr } for pid=9330 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.088586][ T39] audit: type=1400 audit(1734286802.592:15572): avc: denied { search } for pid=9330 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.102205][ T39] audit: type=1400 audit(1734286802.602:15573): avc: denied { search } for pid=9330 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.117600][ T39] audit: type=1400 audit(1734286802.602:15574): avc: denied { search } for pid=9330 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.129391][ T39] audit: type=1400 audit(1734286802.602:15575): avc: denied { search } for pid=9330 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.141982][ T39] audit: type=1400 audit(1734286802.602:15576): avc: denied { search } for pid=9330 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 167.561877][ T9334] netlink: 172 bytes leftover after parsing attributes in process `syz.3.1051'. [ 167.856379][ T9337] overlay: filesystem on ./file1 not supported as upperdir [ 167.989535][ T69] team0 (unregistering): Port device team_slave_1 removed [ 168.071100][ T69] team0 (unregistering): Port device team_slave_0 removed [ 168.213863][ T5950] Bluetooth: hci0: command tx timeout [ 168.628138][ T9246] team0: Port device team_slave_0 added [ 168.690293][ T9246] team0: Port device team_slave_1 added [ 168.736827][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.738689][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.759638][ T9246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.771302][ T9246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.773504][ T9246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.790659][ T9246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.987100][ T9246] hsr_slave_0: entered promiscuous mode [ 168.992935][ T9246] hsr_slave_1: entered promiscuous mode [ 169.007465][ T9246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.009498][ T9246] Cannot create hsr debugfs directory [ 169.045064][ T9347] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9347 comm=syz.2.1054 [ 169.265712][ T9357] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1058'. [ 169.817239][ T9246] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.827222][ T9246] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.836175][ T9374] usb usb7: usbfs: process 9374 (syz.3.1063) did not claim interface 0 before use [ 169.845195][ T9246] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.852814][ T9246] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.906511][ T9374] Bluetooth: MGMT ver 1.23 [ 170.090704][ T9246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.123403][ T9246] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.136974][ T1140] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.138861][ T1140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.153268][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.155160][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.304128][ T5942] Bluetooth: hci0: command tx timeout [ 170.375385][ T5942] Bluetooth: hci2: command 0x0406 tx timeout [ 170.375402][ T5945] Bluetooth: hci1: command 0x0406 tx timeout [ 170.395546][ T9387] /dev/sr0: Can't open blockdev [ 170.504039][ T6038] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 170.644722][ T9396] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1069'. [ 170.647132][ T9396] netlink: 92 bytes leftover after parsing attributes in process `syz.3.1069'. [ 170.649938][ T9396] vlan0: entered allmulticast mode [ 170.651277][ T9396] veth0_vlan: entered allmulticast mode [ 170.670627][ T6038] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 34, using maximum allowed: 30 [ 170.675293][ T6038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 170.678162][ T6038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 170.692656][ T6038] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 34 [ 170.703826][ T6038] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 170.704347][ T9397] input: syz0 as /devices/virtual/input/input15 [ 170.706195][ T6038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.723144][ T6038] usb 6-1: config 0 descriptor?? [ 170.913841][ T9] usb 8-1: new low-speed USB device number 45 using dummy_hcd [ 170.987595][ T9389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1067'. [ 171.088263][ T9] usb 8-1: unable to get BOS descriptor or descriptor too short [ 171.119109][ T9] usb 8-1: config 1 has an invalid interface number: 222 but max is 0 [ 171.121280][ T9] usb 8-1: config 1 has no interface number 0 [ 171.136877][ T9] usb 8-1: config 1 interface 222 altsetting 7 endpoint 0xD has invalid maxpacket 1024, setting to 8 [ 171.139609][ T9] usb 8-1: config 1 interface 222 has no altsetting 0 [ 171.194356][ T9] usb 8-1: string descriptor 0 read error: -22 [ 171.196088][ T9] usb 8-1: New USB device found, idVendor=19d2, idProduct=1057, bcdDevice= 9.6c [ 171.198402][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.225079][ T9396] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 171.236082][ T9] option 8-1:1.222: GSM modem (1-port) converter detected [ 171.438284][ T9] usb 8-1: USB disconnect, device number 45 [ 171.440767][ T9] option 8-1:1.222: device disconnected [ 171.537730][ T6038] usbhid 6-1:0.0: can't add hid device: -71 [ 171.539463][ T6038] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 171.553938][ T6038] usb 6-1: USB disconnect, device number 29 [ 171.780683][ T9246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.855276][ T9246] veth0_vlan: entered promiscuous mode [ 171.872724][ T9246] veth1_vlan: entered promiscuous mode [ 171.924635][ T9246] veth0_macvtap: entered promiscuous mode [ 171.934282][ T9246] veth1_macvtap: entered promiscuous mode [ 171.962460][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.965220][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.967817][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.970479][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.972973][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.976143][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.978693][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.981365][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.984499][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.006407][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.009137][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.011605][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.011801][ T39] kauditd_printk_skb: 944 callbacks suppressed [ 172.011810][ T39] audit: type=1400 audit(1734286807.582:16521): avc: denied { read write } for pid=5943 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.014645][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.023513][ T39] audit: type=1400 audit(1734286807.592:16522): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.024733][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.033574][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.038602][ T39] audit: type=1400 audit(1734286807.602:16523): avc: denied { read write open } for pid=5943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.043820][ T9246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.045911][ T39] audit: type=1400 audit(1734286807.602:16524): avc: denied { ioctl } for pid=5943 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.047871][ T9246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.048724][ T9246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.054552][ T39] audit: type=1400 audit(1734286807.612:16525): avc: denied { read write open } for pid=5935 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.057636][ T39] audit: type=1400 audit(1734286807.632:16526): avc: denied { ioctl } for pid=5935 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.072707][ T9246] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.075675][ T9246] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.078569][ T9246] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.081460][ T9246] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.112920][ T39] audit: type=1400 audit(1734286807.682:16527): avc: denied { read write } for pid=5947 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.123122][ T39] audit: type=1400 audit(1734286807.692:16528): avc: denied { read write open } for pid=5947 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.134915][ T39] audit: type=1400 audit(1734286807.709:16529): avc: denied { bpf } for pid=9410 comm="syz.3.1072" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 172.140173][ T39] audit: type=1400 audit(1734286807.709:16530): avc: denied { create } for pid=9410 comm="syz.3.1072" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 172.215487][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.217539][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.266840][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.268939][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.329231][ T9422] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1075'. [ 172.374097][ T64] Bluetooth: hci0: command tx timeout [ 172.534105][ T6038] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 172.783511][ T6038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 172.786777][ T6038] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 172.789295][ T6038] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 172.792561][ T6038] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 172.795548][ T6038] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 172.804658][ T6038] usb 6-1: config 0 descriptor?? [ 173.117538][ T9452] netlink: 260 bytes leftover after parsing attributes in process `syz.2.1085'. [ 173.236069][ T6038] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0009/input/input16 [ 173.320847][ T6038] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0009/input/input17 [ 173.343466][ T6038] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0009/input/input18 [ 173.358088][ T6038] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/0003:20D6:CB17.0009/input/input19 [ 173.393994][ T6038] hid-udraw 0003:20D6:CB17.0009: hidraw1: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0 [ 173.667211][ T25] usb 6-1: USB disconnect, device number 30 [ 173.805123][ T1140] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.831490][ T9468] netlink: 830 bytes leftover after parsing attributes in process `syz.2.1089'. [ 173.944806][ T1140] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.335074][ T1140] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.425452][ T9474] overlayfs: conflicting options: metacopy=on,redirect_dir=follow [ 174.511430][ T5950] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.544686][ T5950] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.549289][ T5950] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.552830][ T5950] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.560802][ T5950] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.562910][ T5950] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.578176][ T1140] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.588124][ T9474] hsr0: entered promiscuous mode [ 174.591154][ T9474] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 174.743921][ T6048] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 174.784007][ T1140] bridge_slave_1: left allmulticast mode [ 174.785595][ T1140] bridge_slave_1: left promiscuous mode [ 174.787641][ T1140] bridge0: port 2(bridge_slave_1) entered disabled state [ 174.791961][ T1140] bridge_slave_0: left allmulticast mode [ 174.793473][ T1140] bridge_slave_0: left promiscuous mode [ 174.801313][ T1140] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.811782][ T9483] tmpfs: Cannot change global quota limit on remount [ 174.915423][ T6048] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 174.918206][ T6048] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.945205][ T6048] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 174.948240][ T6048] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 174.950908][ T6048] usb 6-1: Manufacturer: syz [ 174.962045][ T6048] usb 6-1: config 0 descriptor?? [ 174.978063][ T9489] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1094'. [ 175.150432][ T9495] ebt_among: dst integrity fail: 101 [ 175.303922][ T6048] rc_core: IR keymap rc-hauppauge not found [ 175.305940][ T6048] Registered IR keymap rc-empty [ 175.308287][ T6048] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0 [ 175.312000][ T6048] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 175.376131][ T6048] usb 6-1: USB disconnect, device number 31 [ 175.426162][ T1140] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.432682][ T1140] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.442495][ T1140] bond0 (unregistering): Released all slaves [ 175.501913][ T64] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 175.877185][ T9517] netlink: 'syz.2.1099': attribute type 17 has an invalid length. [ 176.257292][ T1140] hsr_slave_0: left promiscuous mode [ 176.261258][ T1140] hsr_slave_1: left promiscuous mode [ 176.277706][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.279696][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.304189][ T1140] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.306155][ T1140] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.349082][ T1140] veth1_macvtap: left promiscuous mode [ 176.350563][ T1140] veth0_macvtap: left promiscuous mode [ 176.352044][ T1140] veth1_vlan: left promiscuous mode [ 176.353418][ T1140] veth0_vlan: left promiscuous mode [ 176.624062][ T64] Bluetooth: hci0: command tx timeout [ 176.627775][ T9542] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1103'. [ 177.017104][ T39] kauditd_printk_skb: 1313 callbacks suppressed [ 177.017115][ T39] audit: type=1400 audit(1734287072.596:17844): avc: denied { search } for pid=9526 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.028124][ T39] audit: type=1400 audit(1734287072.606:17845): avc: denied { search } for pid=9526 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.042577][ T39] audit: type=1400 audit(1734287072.616:17846): avc: denied { search } for pid=9526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.058302][ T39] audit: type=1400 audit(1734287072.616:17847): avc: denied { append } for pid=9526 comm="dhcpcd-run-hook" name="resolv.conf.eth2.dhcp" dev="tmpfs" ino=6163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.069650][ T39] audit: type=1400 audit(1734287072.616:17848): avc: denied { append open } for pid=9526 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth2.dhcp" dev="tmpfs" ino=6163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.080268][ T39] audit: type=1400 audit(1734287072.616:17849): avc: denied { search } for pid=9526 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.090235][ T39] audit: type=1400 audit(1734287072.616:17850): avc: denied { search } for pid=9526 comm="dhcpcd-run-hook" name="dhcpcd" dev="tmpfs" ino=1763 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.098344][ T39] audit: type=1400 audit(1734287072.616:17851): avc: denied { search } for pid=9526 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1767 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 177.108983][ T39] audit: type=1400 audit(1734287072.626:17852): avc: denied { append } for pid=9526 comm="dhcpcd-run-hook" name="resolv.conf.eth2.dhcp" dev="tmpfs" ino=6163 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 177.117155][ T39] audit: type=1400 audit(1734287072.626:17853): avc: denied { read write } for pid=5935 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 177.770738][ T1140] team0 (unregistering): Port device team_slave_1 removed [ 177.873924][ T1140] team0 (unregistering): Port device team_slave_0 removed [ 178.371967][ T9573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1110'. [ 178.612144][ T9529] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1101'. [ 178.616316][ T9479] chnl_net:caif_netlink_parms(): no params data found [ 178.619874][ T9556] netdevsim netdevsim2 netdevsim2: left allmulticast mode [ 178.699441][ T64] Bluetooth: hci0: command tx timeout [ 178.774234][ T9479] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.776031][ T9479] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.777865][ T9479] bridge_slave_0: entered allmulticast mode [ 178.779899][ T9479] bridge_slave_0: entered promiscuous mode [ 178.786638][ T9479] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.794060][ T9479] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.795930][ T9479] bridge_slave_1: entered allmulticast mode [ 178.797869][ T9479] bridge_slave_1: entered promiscuous mode [ 178.912570][ T9479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.922824][ T9479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.000351][ T9479] team0: Port device team_slave_0 added [ 179.007141][ T9479] team0: Port device team_slave_1 added [ 179.050903][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.052725][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.067903][ T9479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.076748][ T9479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.078597][ T9479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.085225][ T9479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.109593][ T9604] netlink: 'syz.2.1118': attribute type 11 has an invalid length. [ 179.111869][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1118'. [ 179.170714][ T9479] hsr_slave_0: entered promiscuous mode [ 179.175240][ T9479] hsr_slave_1: entered promiscuous mode [ 179.178293][ T9479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 179.180311][ T9479] Cannot create hsr debugfs directory [ 179.300812][ T9610] fuse: Bad value for 'user_id' [ 179.302123][ T9610] fuse: Bad value for 'user_id' [ 179.323862][ T832] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 179.516376][ T832] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 179.519232][ T832] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 179.521718][ T832] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 179.528760][ T9618] ------------[ cut here ]------------ [ 179.530454][ T9618] WARNING: CPU: 3 PID: 9618 at kernel/signal.c:2014 posixtimer_send_sigqueue+0xaf7/0x1020 [ 179.533008][ T9618] Modules linked in: [ 179.534147][ T9618] CPU: 3 UID: 0 PID: 9618 Comm: syz.3.1121 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 179.538579][ T9618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.542498][ T9618] RIP: 0010:posixtimer_send_sigqueue+0xaf7/0x1020 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 179.544643][ T9618] Code: 89 44 24 08 e8 aa 43 3b 00 8b 44 24 08 85 c0 0f 85 f1 fa ff ff e8 59 41 3b 00 e8 74 22 ad ff e9 e2 fa ff ff e8 4a 41 3b 00 90 <0f> 0b 90 e9 d4 fa ff ff e8 3c 41 3b 00 e9 f8 f6 ff ff 4c 89 e7 e8 [ 179.548126][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.549875][ T9618] RSP: 0018:ffffc900030b7bd8 EFLAGS: 00010093 [ 179.553520][ T9618] RAX: 0000000000000000 RBX: ffff88804df06780 RCX: ffffffff815ebd07 [ 179.555609][ T9618] RDX: ffff8880264e0000 RSI: ffffffff815ec236 RDI: 0000000000000005 [ 179.557642][ T9618] RBP: ffff8880264e0000 R08: 0000000000000005 R09: 0000000000000000 [ 179.559703][ T9618] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88804df06824 [ 179.561732][ T9618] R13: 1ffff92000616f80 R14: ffff88804df06858 R15: ffff88804df06840 [ 179.563769][ T9618] FS: 00007fb313e056c0(0000) GS:ffff88806a900000(0000) knlGS:0000000000000000 [ 179.565469][ T9600] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 179.566058][ T9618] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 179.569631][ T9618] CR2: 00007fb313e04f98 CR3: 000000005cc62000 CR4: 0000000000352ef0 [ 179.571703][ T9618] Call Trace: [ 179.572594][ T9618] [ 179.573371][ T9618] ? __warn+0xea/0x3c0 [ 179.574443][ T9618] ? posixtimer_send_sigqueue+0xaf7/0x1020 [ 179.576002][ T9618] ? report_bug+0x3c0/0x580 [ 179.577217][ T9618] ? handle_bug+0x54/0xa0 [ 179.578351][ T9618] ? exc_invalid_op+0x17/0x50 [ 179.579620][ T9618] ? asm_exc_invalid_op+0x1a/0x20 [ 179.580928][ T9618] ? posixtimer_send_sigqueue+0x5c7/0x1020 [ 179.582427][ T9618] ? posixtimer_send_sigqueue+0xaf6/0x1020 [ 179.583945][ T9618] ? posixtimer_send_sigqueue+0xaf7/0x1020 [ 179.585529][ T9618] ? posixtimer_send_sigqueue+0xaf6/0x1020 [ 179.587121][ T9618] ? cpu_clock_sample+0xc9/0x140 [ 179.588413][ T9618] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 179.590004][ T9618] posix_cpu_timer_set+0x9e1/0xd30 [ 179.591345][ T9618] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 179.592796][ T9618] ? __lock_timer+0x1a9/0x4c0 [ 179.594016][ T9618] do_timer_settime+0x26c/0x400 [ 179.595292][ T9618] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 179.596773][ T9618] ? __pfx_do_timer_settime+0x10/0x10 [ 179.598160][ T9618] ? find_held_lock+0x59/0x110 [ 179.599433][ T9618] ? find_held_lock+0x2d/0x110 [ 179.600678][ T9618] __x64_sys_timer_settime+0x26a/0x2c0 [ 179.602077][ T9618] ? __pfx_lock_release+0x10/0x10 [ 179.603390][ T9618] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 179.604378][ T832] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 179.604962][ T9618] ? lock_acquire+0x2f/0xb0 [ 179.608001][ T9618] ? do_user_addr_fault+0x83d/0x13f0 [ 179.609385][ T9618] do_syscall_64+0xcd/0x250 [ 179.610572][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.612105][ T9618] RIP: 0033:0x7fb312f85d19 [ 179.613265][ T9618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.618332][ T9618] RSP: 002b:00007fb313e05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 179.620537][ T9618] RAX: ffffffffffffffda RBX: 00007fb313176160 RCX: 00007fb312f85d19 [ 179.622559][ T9618] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 179.624595][ T9618] RBP: 00007fb313001a20 R08: 0000000000000000 R09: 0000000000000000 [ 179.626640][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.628691][ T9618] R13: 0000000000000001 R14: 00007fb313176160 R15: 00007ffc72a7fb48 [ 179.630953][ T9618] [ 179.631798][ T9618] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 179.633754][ T9618] CPU: 3 UID: 0 PID: 9618 Comm: syz.3.1121 Not tainted 6.13.0-rc2-syzkaller-00362-g2d8308bf5b67 #0 [ 179.636549][ T9618] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 179.639354][ T9618] Call Trace: [ 179.640237][ T9618] [ 179.641003][ T9618] dump_stack_lvl+0x3d/0x1f0 [ 179.642181][ T9618] panic+0x71d/0x800 [ 179.643222][ T9618] ? __pfx_panic+0x10/0x10 [ 179.644429][ T9618] ? show_trace_log_lvl+0x29d/0x3d0 [ 179.645822][ T9618] ? check_panic_on_warn+0x1f/0xb0 [ 179.647176][ T9618] ? posixtimer_send_sigqueue+0xaf7/0x1020 [ 179.648743][ T9618] check_panic_on_warn+0xab/0xb0 [ 179.650054][ T9618] __warn+0xf6/0x3c0 [ 179.651186][ T9618] ? posixtimer_send_sigqueue+0xaf7/0x1020 [ 179.652723][ T9618] report_bug+0x3c0/0x580 [ 179.653912][ T9618] handle_bug+0x54/0xa0 [ 179.655028][ T9618] exc_invalid_op+0x17/0x50 [ 179.656214][ T9618] asm_exc_invalid_op+0x1a/0x20 [ 179.657483][ T9618] RIP: 0010:posixtimer_send_sigqueue+0xaf7/0x1020 [ 179.659119][ T9618] Code: 89 44 24 08 e8 aa 43 3b 00 8b 44 24 08 85 c0 0f 85 f1 fa ff ff e8 59 41 3b 00 e8 74 22 ad ff e9 e2 fa ff ff e8 4a 41 3b 00 90 <0f> 0b 90 e9 d4 fa ff ff e8 3c 41 3b 00 e9 f8 f6 ff ff 4c 89 e7 e8 [ 179.663994][ T9618] RSP: 0018:ffffc900030b7bd8 EFLAGS: 00010093 [ 179.665522][ T9618] RAX: 0000000000000000 RBX: ffff88804df06780 RCX: ffffffff815ebd07 [ 179.667515][ T9618] RDX: ffff8880264e0000 RSI: ffffffff815ec236 RDI: 0000000000000005 [ 179.669541][ T9618] RBP: ffff8880264e0000 R08: 0000000000000005 R09: 0000000000000000 [ 179.671592][ T9618] R10: 0000000000000000 R11: 0000000000000003 R12: ffff88804df06824 [ 179.673630][ T9618] R13: 1ffff92000616f80 R14: ffff88804df06858 R15: ffff88804df06840 [ 179.675725][ T9618] ? posixtimer_send_sigqueue+0x5c7/0x1020 [ 179.677237][ T9618] ? posixtimer_send_sigqueue+0xaf6/0x1020 [ 179.678758][ T9618] ? posixtimer_send_sigqueue+0xaf6/0x1020 [ 179.680252][ T9618] ? cpu_clock_sample+0xc9/0x140 [ 179.681508][ T9618] ? __pfx_posixtimer_send_sigqueue+0x10/0x10 [ 179.683048][ T9618] posix_cpu_timer_set+0x9e1/0xd30 [ 179.684377][ T9618] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 179.685857][ T9618] ? __lock_timer+0x1a9/0x4c0 [ 179.687128][ T9618] do_timer_settime+0x26c/0x400 [ 179.688395][ T9618] ? __pfx_posix_cpu_timer_set+0x10/0x10 [ 179.689829][ T9618] ? __pfx_do_timer_settime+0x10/0x10 [ 179.691176][ T9618] ? find_held_lock+0x59/0x110 [ 179.692386][ T9618] ? find_held_lock+0x2d/0x110 [ 179.693598][ T9618] __x64_sys_timer_settime+0x26a/0x2c0 [ 179.694969][ T9618] ? __pfx_lock_release+0x10/0x10 [ 179.696310][ T9618] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 179.697881][ T9618] ? lock_acquire+0x2f/0xb0 [ 179.699092][ T9618] ? do_user_addr_fault+0x83d/0x13f0 [ 179.700470][ T9618] do_syscall_64+0xcd/0x250 [ 179.701647][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.703135][ T9618] RIP: 0033:0x7fb312f85d19 [ 179.704302][ T9618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.709268][ T9618] RSP: 002b:00007fb313e05038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 179.711430][ T9618] RAX: ffffffffffffffda RBX: 00007fb313176160 RCX: 00007fb312f85d19 [ 179.713466][ T9618] RDX: 0000000020000340 RSI: 0000000000000001 RDI: 0000000000000000 [ 179.715544][ T9618] RBP: 00007fb313001a20 R08: 0000000000000000 R09: 0000000000000000 [ 179.717589][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.719650][ T9618] R13: 0000000000000001 R14: 00007fb313176160 R15: 00007ffc72a7fb48 [ 179.721695][ T9618] [ 180.786828][ T9618] Shutting down cpus with NMI [ 180.788758][ T9618] Kernel Offset: disabled [ 180.790003][ T9618] Rebooting in 86400 seconds.. VM DIAGNOSIS: 18:20:15 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000001 RBX=ffff88806a637f68 RCX=ffffffff84551ea6 RDX=0000000000000000 RSI=ffffffff8bd1e7e0 RDI=ffffffff8da76be0 RBP=0000000000000000 RSP=ffffc900264ff7e0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000002 R12=00000000000001ee R13=0000000000000001 R14=dffffc0000000000 R15=0000000000000206 RIP=ffffffff817f8e42 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007feff68b4500 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faca6948838 CR3=000000003225c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffed5d0e400 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3036353120656820 20544d2065686920 646c696f63000020 2e656362616d7020 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3036352020655320 20204d2061676320 3036353120000020 20544d2061676320 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d64637e7e6f592a 246f69646b677865 6c786f7a2a6f627e 2a7e696b7a67632a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c786f7a2a6f627e 2a7e696b7a67632a 6e667f65690a0024 676f666865787a2a ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=1ffff92000958eff RCX=000000006a0dfd38 RDX=0000000000000001 RSI=ffffffff8b6cdb60 RDI=ffffffff8bd1e860 RBP=0000000000000000 RSP=ffffc90004ac77e8 R8 =0000000000000000 R9 =fffffbfff2dc9d98 R10=ffffffff96e4ecc7 R11=0000000000000001 R12=0000000000000000 R13=ffffffff8e1bb500 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b292e27 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555611cf500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fff44e49cc8 CR3=00000000239ba000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000080001 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff44e4a410 00007fff44e4a410 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff44e4c540 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555612553af 0000555561255250 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555561254eb6 0000555561254940 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 67617265766f4361 7274784500637072 2076636572206f74 2064656c69616600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 42445740534a4344 57515d4500465557 0553464057054a51 054140494c444300 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000687465760001 0009801200280000 0000000000004808 05b0030100000808 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100100000040100 000408060601549c 0008006003001000 5003001000400302 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1000300301901000 0190030100000808 0605f80300000000 0001001480020018 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000068746576 0001000980120028 0000000000000000 480805b003010000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08080605a8030000 0000000000000000 ff7f040100100000 0048280805800305 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88802b85b627 RCX=ffffffff84607dbd RDX=ffff888031894880 RSI=0000000000000027 RDI=0000000000000004 RBP=0000000000000074 RSP=ffffc9000c71f6f8 R8 =0000000000000004 R9 =0000000000000027 R10=0000000000000027 R11=0000000000000001 R12=0000000000000027 R13=ffff8880508baffd R14=0000000000000027 R15=dffffc0000000000 RIP=ffffffff84607f44 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fc9c0896280 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007faca67e4950 CR3=000000002347c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000004080 Opmask01=0000000000080410 Opmask02=000000000fffffff Opmask03=1040000404420020 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373737373737373 7373737373737373 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffff00 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffff00 ffffffffffffffff ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73001605121f0073 431e161e035c1810 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1c1f115c435d4316 10120300161e121d ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f646e756f732f00 682e6c6974752f64 65726168732f6372 732f2e2e2f2e2e00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 32706f6f6c2f6b63 6f6c622f6c617574 7269762f73656369 7665642f7379732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000000a1 000000302f716d00 32706f6f6c2f6b63 6f6c622f6c617574 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000001 000055747fe332c0 0000000000000211 0000000030346c6c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 627d7f33777e0c13 1c14111d49770310 051b49550c54081e 4d355d580c6e4054 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7f7d7f7f7f7f7f7f 7f777f7f7f7f7f77 7f7f7f7d7f7e7a7f 6f7f7f7d7f7f7777 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 264c383a3a264f38 3a3a264e383a3a26 49383a3a2648383a 3a2633380a007d6c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c4133312c343331 2c3032312c303030 2c3033316b2c332c 310030302d303030 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c2c30312c34332c 2c302c31002c3030 2c302c2c2c2c2c2c 2c0030302c303000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 info registers vcpu 3 CPU#3 RAX=0000000000000001 RBX=1ffff92000616eed RCX=ffffffff8176a9e9 RDX=fffffbfff20be58b RSI=0000000000000008 RDI=ffffffff905f2c50 RBP=0000000000000003 RSP=ffffc900030b7750 R8 =0000000000000000 R9 =fffffbfff20be58a R10=ffffffff905f2c57 R11=0000000000000004 R12=ffffffff8e1a90b8 R13=0000000000000000 R14=ffffffff8ccc8d00 R15=ffffc900030b7968 RIP=ffffffff817f8dc0 RFL=00000047 [---Z-PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb313e056c0 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb313e04f98 CR3=000000005cc62000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3130029b2 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3130029bf ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3130029b9 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb3130029cd ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb313002a53 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb313002b31 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb31314b488 00007fb31314b480 00007fb31314b478 00007fb31314b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb313cad100 00007fb31314b440 00007fb31314b458 00007fb31314b4a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fb31314b498 00007fb31314b490 00007fb31314b488 00007fb31314b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 45425f434900414e 41445f444c005242 494c444449005f44 4c00574f4e5f444e ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000004644 4c0057444c004441 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000