last executing test programs: 1m19.946408876s ago: executing program 0 (id=748): mkdir(&(0x7f0000000180)='./file0\x00', 0x0) (async) creat(&(0x7f0000000080)='./file0/file1\x00', 0x90) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (rerun: 64) mkdir(&(0x7f0000000100)='./bus\x00', 0xe8) (async) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000040)='./file0/file1\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') unlink(&(0x7f0000000100)='./bus\x00') (async) lsetxattr$security_capability(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) (async, rerun: 32) rmdir(&(0x7f0000000000)='./file0\x00') (rerun: 32) 1m19.945585394s ago: executing program 0 (id=749): r0 = socket(0x10, 0x80002, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r3 = syz_io_uring_setup(0x66e, &(0x7f0000000240)={0x0, 0x0, 0x10100}, &(0x7f0000000380)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x0, @fd, 0x8001, 0x0, 0x0, 0x2}) io_uring_enter(r3, 0x567, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="38000000540001002abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES16=r2, @ANYBLOB="01030300f7"], 0x38}}, 0x4008cc0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) (async) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 1m19.896534136s ago: executing program 0 (id=750): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x4f) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) sendmmsg$alg(r1, 0x0, 0x0, 0x40800) recvmsg$qrtr(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000700)=""/195, 0xc3}], 0x1, 0x0, 0x0, 0x10000}, 0x38, 0x10020) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r3) prctl$PR_SET_PTRACER(0x59616d61, r3) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000001ec0)={0x1, &(0x7f0000001e80)=[{0x0, 0x1000}]}) (fail_nth: 8) 1m19.76662046s ago: executing program 0 (id=752): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x48) (async) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000580)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0xf5040, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2145499, 0x0) (async) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0) 1m19.766494536s ago: executing program 0 (id=753): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) socket(0x10, 0x803, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./bus\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (fail_nth: 27) 1m18.726817801s ago: executing program 0 (id=764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x1, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x9365}, {0xffffffffffffffff, 0x4241}, {r0}, {r0, 0x9702}, {r0, 0x2304}, {r0, 0x8605}, {r0, 0xa093}, {r0, 0x9446}, {r0, 0x31c}, {r0, 0xa011}], 0xa, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={[0x2a89]}, 0x8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x6) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0x7cf0, &(0x7f0000000440)={0x0, 0x15d2, 0x30101, 0x0, 0x22a}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r2, 0xffffffffffffffff, 0x0, 0xffffffffffffffea, 0xc}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x100, 0x7f, 0xffffffffffff1280}, 0x1}, 0x20, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a555"], 0x1c}}, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) 1m18.700879173s ago: executing program 32 (id=764): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000780)={0xa, 0x1, 0x80000000, @dev={0xfe, 0x80, '\x00', 0x26}, 0x2}, 0x1c) ppoll(&(0x7f0000000000)=[{r0, 0x9365}, {0xffffffffffffffff, 0x4241}, {r0}, {r0, 0x9702}, {r0, 0x2304}, {r0, 0x8605}, {r0, 0xa093}, {r0, 0x9446}, {r0, 0x31c}, {r0, 0xa011}], 0xa, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)={[0x2a89]}, 0x8) rseq(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x3}, 0x20, 0x0, 0x0) futex(0x0, 0xc, 0x1, 0x0, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x6) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r3 = syz_io_uring_setup(0x7cf0, &(0x7f0000000440)={0x0, 0x15d2, 0x30101, 0x0, 0x22a}, &(0x7f0000000100)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_WRITE={0x17, 0x0, 0x4007, @fd=r2, 0xffffffffffffffff, 0x0, 0xffffffffffffffea, 0xc}) io_uring_enter(r3, 0x7a98, 0x0, 0x0, 0x0, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x1, 0x100, 0x7f, 0xffffffffffff1280}, 0x1}, 0x20, 0x0, 0x0) r6 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a555"], 0x1c}}, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f00000000c0)=0x1, 0x4) 33.904372286s ago: executing program 1 (id=1509): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000001c0)="b80500009db9fa0000000f01d9660f78c4020a1bf7b805000000b90000c0fe0fae41d901000000b87f8b7f26670f300f30660fc775022e0fba600c980f320f3566b857000f00d0", 0x47}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000680)={0x74, 0x0, 0x11}) r3 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r3, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r4, 0x11b, 0x4, &(0x7f0000000040)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, &(0x7f0000001200)=[0x0], 0x1}, 0x58) 33.591301192s ago: executing program 1 (id=1513): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)='%(,c\xbe\xfbL:', 0x0) r1 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='%(,:', 0x0) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000040)={'veth1\x00', {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}) r3 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='memory.numa_stat\x00', 0x0, 0x0) 33.590825205s ago: executing program 1 (id=1514): syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="040e08ff7b0c2bc8"], 0xb) (async, rerun: 64) openat$audio1(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) (rerun: 64) rmdir(&(0x7f00000000c0)='./file0/file0/..\x00') (async, rerun: 64) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x200400e, 0x1a1940) (rerun: 64) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040)=0xffffffffffffffff) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000400000008000000010048239500f39000a65c5c0dd5e444000080000000", @ANYRES32=0x1, @ANYBLOB="cb0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="01000000030000000300"/28], 0x50) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) (async, rerun: 64) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, &(0x7f0000000000)='bridge0\x00') (rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa00080600010800"], 0x0) (async, rerun: 32) syz_open_dev$usbfs(&(0x7f00000001c0), 0xad1a, 0x101301) (rerun: 32) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom1\x00', 0x0, 0x0) poll(&(0x7f0000000100)=[{r1, 0x9142}, {r1, 0x1}, {r2, 0x4004}, {r1, 0xc020}, {r0, 0xac}, {r1, 0x4140}, {r0}, {r0, 0x206}, {0xffffffffffffffff, 0x4}, {r4, 0x1094}], 0xa, 0x4) r5 = socket(0x29, 0x2, 0x40) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000180)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) fcntl$setflags(r1, 0x2, 0x1) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x28, 0x3, 0x8, 0x401, 0x0, 0x0, {0x5, 0x0, 0x4}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80000) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x25, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @private=0xa010101}}, 0xfffe}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0x7c80, 0x0) 33.375668903s ago: executing program 1 (id=1518): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000780)={0x3f, 0x1, 0x80000000, @dev={0xfe, 0x80, '\x00', 0xa6}, 0x1}, 0x1c) 33.316070199s ago: executing program 1 (id=1521): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x800000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, &(0x7f0000001440)={{0x0, 0x0, 0x80, {0xffffffffffffffff, 0xf000, 0x3}}, "cb31455c9ea4288a70a2a6bb8068fd95dd041cf5b177a3bffe992dfbbdf959487337b92336ce1de32e7695c411c0bf9f852d2d71192f33001fd51f5b396a55cb98699a09d21648c4cb30d9e7e3e397c7a3c041c76c72385a46c48c5302848c3696facce956952c2a85822ddf20434ccee5806294ed563ff3a972cddf6ef16ddace933d8a5adea40cd3ad40c9873c29368838e815ff59723519154856b2d5cd9cd79a97dc2fa08dada1175817886e5f9e7aa3dca783a44c667a4806826570ec6acb57d65efc313a384e11fb633dee17ee600145f2cb3103384606140021be766fcb7fa029f0513bbb466177ca1068192550bbf4e6f5694aec747a16e27688a988fa595bca1761b8e88a7dbcaeaf9758b1faf880dd6f1b6eb4c7beb0582b4007f1a67db1352407adbe1456bfe98e94fd825b9419d74f63cdeb6c6976de1890d773f0c8088d2bd48a838cf5b87f5ddf926352960fb978874b0f175acfa55ddfe84de3fc9f75b58bf7a35f33d3c43ed5e3224e92751fa1b43f94f64b681163ef1360a3f3bb7403afc67a188b2104b45c5814aaa9e218552498bf85f4b221d9acc32a331f5f8c109cc9f335ff4e418ab30b54b91fc8211fcbaf64716afdc4b6d0417e04d5723e4675d282b36bef3a3a19e855029e7a9e8b86a6df19332b63e9d8a0f22d96ac230c67657a4e7f7afab91dc0ce751b68980e5a4f6d9d6d9b98802ba9d8576640eea61b8c308a1745df61560e56108bececa3016d93246fdc8b768634e8319b1ffde103c07378f8f4927baba05e992a4b5af0958a7e495e7ce53f7917451d15a963ca14f5cdc4563775688b6533a4b97e0f84b0a33c30077b20805c1f42cc7815efada97ad59ac486bc9e0ee386b49cb97b47fbf8f919f06c75a49636795054b5ebee3e91602c90d7f4db49220affe56d56b96e4f662b2bf36dae482ffc7ba21cbc55e21b73309d6b7aa5509defcb77c236e43b579c61eae5c8d8f8fa71ad876b96069f2e4352c8aaf16e299d21edf5434c0cd9b25cdc9210fb0de759b1dd3fc7fe4c7118bbde72a5617dff21f7a5036448fba7fe41aaee0c289cd076d757e47b0713b236f6f141ba0112c9312b3ec853aabafdf1eb2cbb517d2d7352725f557214d27d9a340af0128fc960a4ea64c933b0d8dd226b6e024471aaac8a7074b2a8695ab990fabba5bf315d246fbfe4260f1fffe54814e33b6235c5b4095437298858909bcbd40a8a286d1bedb06b7b1775bce0a5bca19b0a5c2fa8dbf7b155ae0a43c5086422e5bacb94047e150451f5996420b0d4a697f59decb49900b2b9c13aade536933e14d672c21a35cb68572c3de02f8edd941bff4b8674b91f7aebf35f056a8d388f67f8ef7cfaf6b28fe745831ef41def1839791647016932c70685752851327f1837d2f1e9d8f93443eefed2317119c8152ca451a5d3aeb253fb484283f52e5db9f61f059ad3c217a860ee0571d254483501b00699208c7fa5571cf58b9715c954115bc2db0af28361938bb95ced7370c8cbb6141ef62fdbf369dfc4eccd98ab9886d79a52cbf91a27dd0f4b29940492e860fb94654dea54fad6290570760e3b59a0cf2805372a880971dc61286370aaf167810455cce7654dc4325a41d9d1944abcdc4d81378f1e96a8f94cd95b886a01f086e379601504219d57d531ba34e1ba0905785fb629c61f6b940a652cdee9dbef12b7fcde087b92816db3386a5769049ba00788e31de4ddbb8b56de1fbe3a5e671728effda7cfd0b650cf5df2faf22670812efbbb548e47cbf36c64e05a7877820f08948ceedb35e12a4a143ee0101a7bf0a00a4062b50c39020669700adf739a6f75352a45fd1373d3e85c3867170373f0c7a794d8590f4c22ae62d438ec365b0f6a15cb2ffe0fc6f57185e1760761bd4370027c01dfad0502f00b6898115df3c530d0b0b4a64e623fd580b528a733e4c881cf5843a975a97f92a7833527887c79fa8eec82b9526a15c6c5f2972083ce8aec735810580ffa4ea2cef4823aee044dd70927f7c07bba18b930006aa86ae7399ac6b4c24bc9d6a6ab0c5b428d7255d4d983eadf97e10c1b00867da29ac981acb453073a37236e7ae808e7759b2e0cffc3ec43afb1e95cd090a7d4b9225a0e3cbebfe49b93846ab603891e2da7d85a04bf42d12d16a97c965bc4911d3ba7a9ca505794d8744fef00a436089de67aa8b480070230dfb002eb91edaff428d4908a87afae418dff7ca59aefe1ad8f6935f309fe7985c2310881659c60a66a5e50242497ba1cd5d2bd79496ccd23f9fd901afc6622829cb3701caa50f96e09e3b23bfa31819caab43e49ae1d922a1a1eb3682de026323d9215fcec42c54401a1af81450830a4b784ed1c7922734bf3632409147680dd3fabcef296353705bb5c0e650e12905a05db1e7923923a96ddc783fc1ed46e2010416c37d9d149ad73e808bd6e4464f62893024a8501803b6c88fc55c8bbc1da7cbf580b5a81fb7c61455ae399aaec303fba12e0f2b51ed5e8bd31db40e8bdbd00e7b1ddd364766c974d813d86fc88a27bf82bba60c62e5f0f6af6bda3390f8e72a2811baf3d6325e70d9a3b59cab1abe95290ecb87985567e1243504c038de9d4d100ea64ffff5208cd8d2474e646f7d81eed6d59b8b0859552b6fc088d874cde3e75ee30243dc9d88ed5b577851a5bd9e2a453287025777fcac19ac33e1c94b4ad272f1055b16b842a6bd6168fb45f1f74ed2467020df5431068a5f2cbeaa6ac1841308c7c9f752aa06927f91fdf18ef9d9e942367e5ecac0abf4d3b8fc7b80238c04799bde63168becc67c5531e843336fb16ab618d37f95a91937b824bf896b044146bc3a5e264a8f23ddd00729cd9aa56d9a9a24b7ab96ae021b193d8874d43ff4b723d86b7564e550378599c3e0c7a2b3d447ad76eb4cd699733d970a5ab218429a1af81df9c8013d6d16a6bcb019f6ace4461cdaa785d20ea027cfa53d521bb91ad2c04aaa6c0f268b14924803977633280c7b7beb14c88fae542b7a13e96253259e7296e37276da88891c14664340e84ae732edbd71e67047e476735b220ca231de31a380ece372db63dec3cb3ef5ac97ec41148febd2acb15cde1ee5e990ea0aaa95c2df39e2111dd1185d14a194e22d34fda8f54e99d3a73e5a231682c726d40816e048c1d059bf3bb9ee2b5f895365d95aa28f6adbf6e16469926b4d8ee7f04c7dbafaa444df5b88596c17874f0efe35e5ada1a69634f4b430f852d33b032f823c5deb54f47a7a4adb1adf56d5440b7a917580004c13e0b36c8e0a203a2be3f8fffd9efef3af19389a12c67859d4381ac0a02da18e25931b41216b731de25e1245482c84d45de1cddbce2109322a3428bff692012573fe9efd02109dbf35c5d3a287dec105cf3f1a2e5f0b1cc08c7b4759766d25d0f7b42c3ea8bf8101e61159a2ba7602e9c7947cf936ac39bf59b24084709fd61d704bbdba7d282aac778b7ec1dcaf984527c8112d56e75ab77ff8898d9816abc77b0e693880bffffffffffffff7fb5cb6967fb0ea8e14efce120947092c3b601002f07cad22e971418092481fcad36ecf0cfd6bc3864115b8507c13554584f1f6fee5ee07eb6a091638d8e7781c1c006166e0f987f9f4de535e9f3df1db8c9328e9a19a73c76059ab4edfe9eda7f16cc6b869229bafb179d194e20ccc6af1d8183b673de8138ddab9a0907278f6eaacc55bf59a450ebc10e0b88c82d9f0deca86ff771f46509250fde94e0c94256b77616d099862ddc9b341838d634a9dc4b55a88fcc6248901135f6aa76365433e7e534e0e5ae8eec2a63df62c3e244a40481189ff54122698c7e2da2c829b2eec9efc9894ee05be04ae6dd48406eaace17827e38bf38b414059aded0343e0711a8d864ff41a8d9ed40fb2aa1a3f4014f691cd0e8af62445a021820ff03afa8a192ee255862f306851df1de96ce36cafb6a60b7069db7aa96fd1ffb2fb01e6247f770304dffe4b1c8d0eeb336dd6806d6ab5d418953b1cae7cbbf53766b61e4aad5cfce8255b78af26f9bd11283a9c7d12cd63b82cd2b506fd4061d1e16fc7c713d80763c3b0aa0faadcd9b7d676101aad80e1ca00369297e1f714003ab8d0b545c335014a522a25a767950963ef821425b79b521076166d0df3ef358c7d60d99cc85463c186e8faf16af79785680382e4cc93f6594f8c4461e0988c08717640df24a5f357db22432fcae21702dc792d201212fb3791e0164bb3d433a8268ec96df73766fdba42965e00e619246cba5d96eb853a7c22c34d2fe5e5d3f3ccf9c627d069517b743cd07f6f7b444074bb9a50269f2e03309c58930e56a9583eb00c37fbcdd391972261f41756c10c8899fcd036e2017e088ef9e6ec31f795d55b3bba214c53c98fc9318e4ade0e7e6fd259aa277fed54c27e5210787a5f6937f56fdbe1da5113f059061ca590ddf536a55cb91ac6ed41cb9c0418b115b29f5e823c1b0ee7c2b3982087763545b34e2c945d587ebce69bbe299a7f52b674f351977370fc700474bc15d7e6ef98c14258ecf401a4f3bba1a9aa76c5ab0b8819fe6efe3fba1899909e5e48554299150ee272451b56142d12ae2bb4942db430239701d494917f2c939a6fb9d98d4751a6f2c4537ec870342d223343a9bd7b8d8c99aff8cbfa298395551185f35dec120228073a1e496a58b59d9ac5986249a7c6db9398395cbf341c08ee910700e2daa042dba1846fef59c72ce872bba2046a14fcf9a47a5686d62bfba76309a9865c26e5fa41dd872fc749fdc57953105ace4978f9eb788c8d061c853ad0313e51e732c5d7bc05e752443c8e99b8e81c688befdb5b14c3cc2f96eb8ce8290303e483992fcbece1ff278d0dc036ad437b6cbc695c7741ba4556e242146d40843c73deaf8fceba40e4a4acd739b3031848b17a210a1ff0dc1908b77030094543af52e1fe2a090c8f217428d02336303f7952c3ddefa7c81850676e7f4cc3d32c3937281fa5ab279c3fe39f92ba077dadb8c2c3df17cc511bd33c41cb161d24aea154f0f5902c94b56fe072d321a983668bd9f4838878e66ec44cb233d7d0ca908a794c844ff8b3ba4c57f6c5fc2f3a54db448b013f0c4998bbc6ed0409b3368391cb28c75f4a909fff90f308ff38c758ff7d8a2920bc221236d89b3b769e44e8ce649b32f5135a0217ba9036a8edddee97d7ba15f2c21fb7d3cae3eb6ef09dd03eed650489c83b5ba5dd9daf7a86cf0544fb8a58e46b860e3e42e10cd6f1c4f81179eb2c3ba611793a32abb4c0768db90e8bdd1694efaa9c2b45c89d203fdfb8b926b6a0d666d91b93065a83184fc2065961f2308056241b66f427c0f0aabc75852c90f0624cf036d537032ca8d73325d2ae2a79a7292c240c34584bb881fe5d468a051cbc0bde061f9eddfb758cd2dfba296eef549e5c4ede097111216a0ec60f90e8d6f5dd843c82e15f505f8c74e854ba9cd386249d552978eb8135a5f8c79c3ceb8dd580800000000000000d6cf3ff2f47c276c8169ab98336582a852c1535018fb2306aca6b8c9f9e38d64c66a722762b76c69d4ca6c14bd6992549e4eec17287fce194467f972d9200c3d1ac4fd4a8f2620e2e4281d28c099946ed90789ba122705326390d3e058ceed24044e542efb36416272eadf6304f30efa0b7bc1ae5be92fe50e591ee6f725726e917ec113506920beb2aa53b39f1d76b3150000000000000000000000000000000000000000000000000000000000000000000000000000002000", "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"}) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x84880) read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020) mkdir(&(0x7f0000002740)='./file0\x00', 0x0) lsetxattr$security_ima(&(0x7f0000002240)='./file0\x00', &(0x7f0000002280), &(0x7f00000030c0)=@v2={0x5, 0x1, 0x8, 0x1000}, 0x9, 0x1) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) recvmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f00000004c0)=""/159, 0x9f}, {&(0x7f0000000140)=""/61, 0x3d}, {&(0x7f0000000580)=""/117, 0x75}, {&(0x7f0000000640)=""/157, 0x9d}, {&(0x7f0000000700)=""/196, 0xc4}, {&(0x7f0000000800)=""/124, 0x7c}, {&(0x7f0000000880)=""/208, 0xd0}, {&(0x7f0000000980)=""/163, 0xa3}], 0x8}, 0x40012123) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) r5 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) r6 = socket(0x10, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@bridge_getlink={0x34, 0x12, 0x1, 0x0, 0x0, {}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg0\x00'}]}, 0x34}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r5, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r4, {0x1}}, './file0\x00'}) 32.373011898s ago: executing program 1 (id=1542): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000100080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket$kcm(0xa, 0x3, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r9) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000001c0)=r12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 17.365352539s ago: executing program 33 (id=1542): r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000fcdbdf25120000001800018014000200766574683000000000000000080000000800090000000100080007"], 0x3c}, 0x1, 0x0, 0x0, 0x400c000}, 0x2004c0a0) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) socket$kcm(0xa, 0x3, 0x73) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000}) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r7, 0xfffffffc) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), r9) r11 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r11, &(0x7f0000000000)={0x10, 0x0, 0x2ddfdbff, 0x2ffffffff}, 0xc) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f00000001c0)=r12) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000011c0)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) 4.500598939s ago: executing program 5 (id=1913): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000f40)=0x4) ioctl$DRM_IOCTL_MODE_GET_LEASE(0xffffffffffffffff, 0xc01064c8, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022d000100000000090400001503000000092140000001220f000905", @ANYRES32], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_usb_connect(0x2, 0x55f, &(0x7f0000000480)={{0x12, 0x1, 0x110, 0x3d, 0x8d, 0x1b, 0x20, 0x147a, 0xe042, 0xed6d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x54d, 0x1, 0x5, 0xdc, 0x90, 0x2, [{{0x9, 0x4, 0xf0, 0x9, 0xd, 0x4b, 0x1d, 0x41, 0xa, [@hid_hid={0x9, 0x21, 0x2, 0x0, 0x1, {0x22, 0xac}}], [{{0x9, 0x5, 0x7, 0x0, 0x10, 0x0, 0xde, 0x7, [@generic={0xf0, 0x30, "e7dcbc79e6e2ef11974d0c8344c6e5598cc1875db306899c21ad1a1a98711b1993727689274f6b31027a0acde552be763298d89a477d167eebae106a0416c8b99756fc75ad06e33ce430d6a8c03a564b7231e9af7e9a7250770457d3450e3a89f2bf82f4368bbe9eeef02ff6b91188365a64b5db0b4d0d361c1ffffb2c54343fc89b6ba2f9611abbf946ad983b237183f6f7a4e08cc9c57102d75dac2905bb5bd0c0788fd97b270881f1b1462852e73e6dcb1d28a15c7d1abff17715f7d228ba367e7089b5cd4f51dd4edd6b5f5b7343df2396deb5aa7dfce03aeb72151309f1fa0e7b2287ae4ceef1c1e3bc3e23"}]}}, {{0x9, 0x5, 0x80, 0x1, 0x8, 0x62, 0x9, 0x0, [@generic={0xf5, 0x1, "130456f5289bf2888c383cc7ae7ccec2c8bd40847e228b64b53cbb713b909998c7a00cdd6a7833f710a41929ad9265a9e77c26ea96f098346048dfc121370f748fa26c7e7be10c6f53e5d857168a24ebef345906dc05cdf8c46e5c9652daa3efc371c24752c4bce6a17ec21062c2b30c685c40d86e4e3b33f3ef998e0f1448862131dc6bcf3369c8d05ca6557e13ba9a9bc56eb68b6e1b2aeae998a854321a1aa0a5b1dbbdb105cf22178af817121a3584868dad6b5f55a7dffcd5580675a8a71a3caab41eca12271905c96c6a2f9a7a858d71cc8f21eb01870d9fff6b020f876ac0fa78f6ea42a21f3b29d2de66156aa0ff33"}]}}, {{0x9, 0x5, 0xe, 0x10, 0x20, 0x75, 0x54, 0x1, [@generic={0x4f, 0x12, "551e40b8467707eb14d94ee6d037ebc8bb13d94ad8921e5520bfa1933dfd2839e439b5c4a9a9adf98745b16495b9a8fdf4895b71917e15c8ee90b41aca32e4d812829ef5bef528891fe7903589"}]}}, {{0x9, 0x5, 0x9, 0x0, 0x20, 0x8, 0x6, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x7}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3ff, 0x8, 0x5, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x9, 0xdf2}]}}, {{0x9, 0x5, 0xdf97e8d2580c96a1, 0x8, 0x248, 0x80, 0x7d, 0x1, [@generic={0x60, 0x30, "9f60e6e703f9e89c88ca72236840a9833d0bfc7d4d6baf92e75385ee46ca02c7ffc72f5b55a1e17c4dabe8f327c5959aa3ab245a2ca2fb519654f5bb328d07c578a5ef053569c9ced11872d198c1a77740f3c586967fc7c36df3defe20bc"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0x8, 0xa2, 0xb6, [@generic={0x44, 0x31, "3fdf793c18b3edd5244ca7c505c35d17cd23f0486d7dc4df2ee51deacba7a482cb7ad009b05d52beee18cbd98a34daa05fa0a790fa5b6f5df86163c97ced9bec9e71"}, @generic={0x17, 0x24, "8f75fc3e0378811374b7158693827a4a4303830688"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x400, 0x3a, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x2}]}}, {{0x9, 0x5, 0x1, 0x10, 0x3ff, 0x7, 0x82, 0x36, [@generic={0x36, 0x21, "1fb309965275545e575f0f20301cf1ea4d8dfdd9a3f4f526349d8f3038a067fc20ab6bed0c4245afffd6111740267144b1512376"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0xb0, 0x916}]}}, {{0x9, 0x5, 0x2, 0x4, 0x10, 0x7, 0xff, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0xa0, 0x5}]}}, {{0x9, 0x5, 0x80, 0x10, 0x8, 0x5, 0x8, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0x8}, @generic={0xa6, 0x7, "8386fe1e54dd17c5416f1f70abf75cf8c1e7a63c275c2b91963627a329b653b9fc5ba55d8715a47834326d17d90361a5e6d130e2fa9847a9628c5195fa40f14015bcb643501fda575d74740c112ba6153fff979dbd4a5d93d792df975d6dd3cac1b7c02bda166e83ffc151cc2629666ceec553b03cef161fa461e4bc34356030aa855982141c14bd73ddf3433976fc22c63d843d320d32d6b7ed30d55f74fb1534f3e4a8"}]}}, {{0x9, 0x5, 0xd, 0x0, 0x8, 0x7, 0x9, 0x81, [@generic={0x1e, 0x6, "3d35d661fa3044718c9f79c41e3fe3022e54fa89d9cb4c008e870e53"}, @generic={0xa3, 0x31, "63b414593c43fa3b69af195b9980188ab9076467ac487d9764383d7ca6753c48c43e4593a24f2da2a02058e7cef1cd722f990f27d14b1c81dc86fcd221909297002117b6837848414a2687e18cf82df5a137d0f01ae20f335a7babbb607813e517758b354498c33f74a2a0855a6f7a335e519968566969bf9f39c844ba71a90ddf647766c022d5bd991b8b736150ace335a8ed9c891bb09acb8102d9c358609d7a"}]}}, {{0x9, 0x5, 0x8, 0x0, 0x200, 0x3a, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x0, 0x5}]}}]}}]}}]}}, &(0x7f00000001c0)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x201, 0x95, 0x19, 0x2, 0x20, 0x84}, 0x3e, &(0x7f0000000100)={0x5, 0xf, 0x3e, 0x5, [@ext_cap={0x7, 0x10, 0x2, 0x0, 0x0, 0x9, 0x5}, @wireless={0xb, 0x10, 0x1, 0x8, 0x6d, 0x3, 0xcd, 0x7ff, 0x7}, @ptm_cap={0x3}, @ssp_cap={0x10, 0x10, 0xa, 0x38, 0x1, 0x40, 0xf000, 0xff01, [0xffc000]}, @ss_container_id={0x14, 0x10, 0x4, 0xff, "caca5f7ae115d3c4331e73c266805dd2"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x44f}}]}) syz_usb_control_io$rtl8150(r2, &(0x7f0000000300)={0x14, &(0x7f0000000200)={0x0, 0xf, 0x5b, {0x5b, 0x0, "5add6b159f872168305865301233192daf775b32dfdaae1f6d787b0156aa306ffea73f7cab0635b62e0a37d256ce7905ca4bb1e47fe36221eb61d1d3bd927a97a0eb443b9379970f2f6832ff644a2032c071d44f76f4784004"}}, &(0x7f00000002c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x42d}}}, &(0x7f0000000ac0)={0x2c, &(0x7f0000000380)={0x40, 0x18, 0x4e, "96f13126b8ac4d76038a2b343f0b1ecaad1c2962a5fda9f3a937c6528a1f4ee0eac4d0605a013bc152ac68aafb51269f6824545524dd32cfd121eff960716895871d6f5fb4961771c8cb5b27ec93"}, &(0x7f0000000400)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000a00)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000a40)={0xc0, 0x5, 0x6, "e55738757335"}, &(0x7f0000000a80)={0x40, 0x5, 0x3, "bf39e3"}}) r3 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x40200) syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000f80)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0x45e, 0x713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x7, 0x0, 0x8, [{{0x9, 0x4, 0x0, 0xed, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0x5, 0x6, 0x1, {0x22, 0x6a9}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x6, 0xd, 0xdd}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x3, 0x6e, 0x18}}]}}}]}}]}}, &(0x7f0000001300)={0xa, &(0x7f0000000fc0)={0xa, 0x6, 0x200, 0x40, 0xa7, 0x6, 0x8, 0xf}, 0x2a, &(0x7f0000001000)={0x5, 0xf, 0x2a, 0x4, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "6613800471eba2275d914815f31cde6b"}, @ext_cap={0x7, 0x10, 0x2, 0x12, 0xc, 0x4, 0x76}, @ext_cap={0x7, 0x10, 0x2, 0x4, 0x0, 0x8, 0x8}]}, 0x6, [{0x6c, &(0x7f0000001040)=@string={0x6c, 0x3, "b8619b2f6a0f2fee1e81ae329acaad9e3ac7f07730bba86c536b8815569ee57bb24ec1e33095bd77b23cf09a823ca7c27d0680f0fa6a66254edf02e2ca42bbda0f2b5ee679ea7a70767b7593b66dfc9bff561d355183b5b6db49306c5a6ba5f4736867315dd665348089"}}, {0x4, &(0x7f00000010c0)=@lang_id={0x4, 0x3, 0x437}}, {0x4, &(0x7f0000001100)=@lang_id={0x4, 0x3, 0x1c1b}}, {0x101, &(0x7f0000001140)=@string={0x101, 0x3, "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"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x3409}}, {0x4, &(0x7f00000012c0)=@lang_id={0x4, 0x3, 0x1009}}]}) pipe2(&(0x7f0000001380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x880) fcntl$setstatus(r4, 0x4, 0x2800) ioctl$HIDIOCGUSAGE(r3, 0x501c4814, &(0x7f00000000c0)={0x2, 0xffffffff}) syz_usb_control_io$cdc_ncm(r2, &(0x7f0000000bc0)={0x14, &(0x7f0000000b40)={0x40, 0x11, 0x35, {0x35, 0x0, "c409bdb78768b67dee5725decf8bdd78fa06d068a159384b61dcd2f9eb8a82ae4d8c0111c48849436ebfa741c0bbc8533e4e63"}}, &(0x7f0000000b80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000ec0)={0x44, &(0x7f0000000c00)={0x0, 0xe, 0xde, "3a73394e6d9b94fced6d63aa9716f2171274750fa6b859d09a071df1a486e86be8dd11af67f9a4a65f724c11bf30bdbbc87820e78597c2270d713272d02c16e788c33b26866c598846785d102bcd9ddb9cb73669401747805d4d0f37da0ab05c7d2b5aaa9d3a981251b7ef0f3c4b3723f6fc133ca1496b4945bc30fb09f0cc63036df168052237c6766f9e0663df1c057b0c1358c305647bba59937fedc42b30dc580db1fa955ff8e23fcef2d807fb326262dd1a7fc3724636718f342d666a8b338ed988e8c6f3c322f60749664a95e4d16bdcc931bde6f93c3dff924a6f"}, &(0x7f0000000d00)={0x0, 0xa, 0x1}, &(0x7f0000000d40)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d80)={0x20, 0x80, 0x1c, {0x3, 0x2, 0x7, 0x1, 0x1, 0x7, 0x3, 0x4, 0x6, 0x62cc, 0x6, 0x7ff}}, &(0x7f0000000dc0)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000e00)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000e40)={0x20, 0x87, 0x2, 0x100}, &(0x7f0000000e80)={0x20, 0x89, 0x2, 0x1}}) sendmsg$nl_generic(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0x301, 0x0, 0x1000000, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x1000c001}, 0x4000000) 2.712701497s ago: executing program 5 (id=1936): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001bbae4b4cdd91e5108000340000000020c000a8008000100688d33f2e314b57817c7e5902c5e3606acbc6af006673f"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) (async) sendmsg$BATADV_CMD_SET_MESH(r1, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x22}}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x7}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x8000}, 0x40090) (async) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000000d0a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001bbae4b4cdd91e5108000340000000020c000a8008000100688d33f2e314b57817c7e5902c5e3606acbc6af006673f"], 0x48}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) (async) 2.642866604s ago: executing program 5 (id=1940): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x4400046}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a700000008"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6}]}) ptrace(0x10, r3) ptrace$getsig(0x4202, r3, 0x3, 0x0) r4 = syz_io_uring_setup(0x466c, 0x0, &(0x7f00000000c0), 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, 0x0, 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) io_uring_enter(r4, 0x2d3e, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r4, 0x18, 0x0, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={0x0, r2}, 0x18) mount$afs(0x0, 0x0, &(0x7f0000002880), 0x0, &(0x7f0000000240)=ANY=[]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="3000000010000305000021000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a01000000000010001280080001006873720004000280"], 0x30}}, 0x44) r7 = socket(0x40000000015, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x5, &(0x7f0000019380)=""/102399, &(0x7f0000000000)=0x18fff) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000080)={'gretap0\x00', r8, 0x20, 0x1, 0x44, 0x3, {{0x10, 0x4, 0x2, 0x3f, 0x40, 0x67, 0x0, 0x6, 0x4, 0x0, @remote, @empty, {[@cipso={0x86, 0x2b, 0x3, [{0x0, 0xe, "70b9db759c46213c7de5f54c"}, {0x6, 0x8, "fe48dd7dc02c"}, {0x0, 0xf, "ae475ab636ae1143cc0f66c7c9"}]}]}}}}}) 1.788457784s ago: executing program 5 (id=1959): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x840, 0x71) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000080), 0x5, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000000)={0x11, 0x3, 0x0, "732283ef1acb5aa7abe50000000009be9000", 0x31384142}) sendmsg$NL80211_CMD_GET_WOWLAN(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000440)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103000000000000000005000000080001005d00000008000300", @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000085c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f000000bf80)={0x20, 0xa, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x810) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r6, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x65}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x200}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) ioctl$VIDIOC_G_EXT_CTRLS(r4, 0xc0205649, &(0x7f00000000c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x98f90e, 0xdfffbfff, '\x00', @p_u8=&(0x7f0000001080)=0x8}}) 1.75542962s ago: executing program 5 (id=1962): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x4}}, 0x9) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0), 0x2202, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000200)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x7fff}, r2}}, 0x30) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000000), 0x10, 0x0}, 0x0) 1.614447529s ago: executing program 5 (id=1965): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}, 0x2, 0x3}}, 0x2e) getsockopt(r2, 0x111, 0x2, 0x0, &(0x7f0000000080)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x2, 0x3, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x26}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r4 = socket(0x40000000015, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'bond_slave_0\x00', &(0x7f00000004c0)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2}}) r5 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) syz_usb_disconnect(r5) syz_usb_connect(0x6, 0x24, &(0x7f0000000740)=ANY=[], 0x0) r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x0, &(0x7f0000000480)) syz_usb_control_io$uac1(r6, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="200000006a00831300000000fcdbcf25000000000000000008000500d47021fb"], 0x20}}, 0x0) ioctl$EVIOCRMFF(r5, 0x550c, 0x0) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="100000000d14010028af7000187169df"], 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x0) r9 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/2:0:0:0\x00', 0x44c300, 0x0) ioctl$BSG_IO(r9, 0x2285, &(0x7f0000000280)={0x51, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xcd6, 0xbffff6df, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x9144e6a29fca871a, 0x0, 0x304}) 1.101169993s ago: executing program 2 (id=1978): r0 = socket$can_raw(0x1d, 0x3, 0x1) getsockname(r0, 0x0, &(0x7f00000000c0)) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000340)="b9cd14c222ee3c0cb001829a8681ed391da1", 0x12}], 0x1}}], 0x1, 0x20008000) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "f1a0f9fff90500b4", "881aae83544dfa6412f91b9057e3f415", "9dca43b6", "9ecb592c6ee49fbd"}, 0x28) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xfff1, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000980)=@delchain={0x34, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xfff3, 0xffff}, {0x0, 0x1b}}, [@filter_kind_options=@f_flower={{0x9}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7f, 0x8628}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@delqdisc={0x24, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xd, 0x2}, {0x9, 0xfff1}, {0xa, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000880)={0x0, @private, @multicast2}, &(0x7f00000008c0)=0xc) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000900)={&(0x7f0000000ac0)={0x24c, 0x0, 0x8, 0x70bd27, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}]}, @HEADER={0x4}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x24c}, 0x1, 0x0, 0x0, 0x80c1}, 0x4000001) capset(&(0x7f0000000100)={0x19980330}, &(0x7f0000000140)={0x4, 0x13, 0x6, 0x81, 0xfffffffb, 0x209}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0xf, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) ioctl$TIOCGPTPEER(r9, 0x932, 0x5) openat$cgroup_ro(r9, &(0x7f00000002c0)='cpuacct.usage_all\x00', 0x0, 0x0) chroot(&(0x7f00000001c0)='./file0\x00') r10 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r10, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000003c0)="c1090a000000000000001d1e", 0xc}], 0x1}, 0x0) 471.186553ms ago: executing program 3 (id=1986): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = memfd_create(0x0, 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 470.695301ms ago: executing program 3 (id=1987): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0/../file0'}, 0x14) dup3(0xffffffffffffffff, r1, 0x0) sendfile(r0, r1, &(0x7f0000000100)=0x10, 0x10001) 388.8029ms ago: executing program 3 (id=1988): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x3, 0xffffffffd2819082, 0x0, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x2, 0x3}}, 0x50) 379.35671ms ago: executing program 3 (id=1990): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000480)=0x1, 0x4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000040), 0x208e24b) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000000)) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x2, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x0, 0x40000000}, {0x8, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x40, 0x6}, {0x3fe, 0x9, 0x0, 0xfd, 0x3, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) ioctl$KVM_RUN(r3, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300f23e872fee0f01c40f01c5b9800000c00f3226670f577c000f30b80e0000000f23d80f21f80f23f8c9b9490300000f60b932c00a000000f30f06002fb90d090000b800680000ba000000000f30", 0x51}], 0x1, 0x3e, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 218.150207ms ago: executing program 2 (id=1994): r0 = socket$netlink(0x10, 0x3, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000029000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup2(r1, r2) connect$unix(r3, &(0x7f0000000100)=@abs, 0x6e) r4 = gettid() process_vm_readv(r4, &(0x7f0000000000)=[{&(0x7f0000000300)=""/196, 0xc4}, {&(0x7f0000000400)=""/241, 0xf1}, {&(0x7f0000000080)=""/104, 0x68}], 0x3, &(0x7f0000000100)=[{&(0x7f0000000200)=""/158, 0x9e}, {&(0x7f0000000500)=""/101, 0x65}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000072000103000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010012000000d4367a55cc8b1a76ed90728477effbe8fcccf3e190d6c1721ecc217945de55ea4db0f58bc15675c00cbec3c4017eaacaa5a660a97979fed4ea57658bd4c9508da7e8532384c8c5a1176cc997dc639dc4b0390dd311ebd29dd21f817942493569bfdd8f"], 0x20}, 0x1, 0xf00}, 0x0) 217.731452ms ago: executing program 4 (id=1995): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 64) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000140), 0x200800, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) (async, rerun: 64) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000900)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_off}]}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) (async) r2 = epoll_create(0x7fffffff) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0x2}) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0xfffffe3f, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8923, &(0x7f0000000140)={'wg2\x00', @local}) 216.87096ms ago: executing program 2 (id=1996): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, 0x0) 216.104127ms ago: executing program 4 (id=1997): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="480000003c0207010000000000000000019b00001800fc80140008800e0031002a27262d2e2b2a7b3e000002800400158008000500090000000d00"/72], 0x48}, 0x1, 0x0, 0x0, 0x4c094}, 0x4040) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'syztnl0\x00', 0x0, 0x4, 0x5f, 0x6, 0x1000, 0x40, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0x81, 0x4}}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)=@ll={0x11, 0x18, r1, 0x1, 0x40, 0x6, @broadcast}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)="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", 0x1000}, {&(0x7f00000001c0)="84d7caa901dee8583002dfbbba7ebb14ea16aaab0ba9d10d69d86d32f0d05d8f0ab20e2aeb507b0ad89a00cf3310ef22fda78382d0f9d8cb07", 0x39}, {&(0x7f0000000200)="64eb88ee2444e61fd35832e24ea33caf766ef2f5aab4bb54977435c3f64d4b47fdf7b48ca470ea8073648b3fa99c052316e67191d49028a9ff44", 0x3a}, {&(0x7f0000000240)="421fc5dbc68ce919cc4cb2bd21702e7c6d52cfe91bc1150cb0e686f18a7e166dfca2da08b6f62b5ccb2b9717dd55dc35f7e0b04b5fa8c6555ea97537ca8f2d3a48f96a74abb892df139f2205718ae4faa146eef9c088dffdd1dac2ec6c80eb4320e1cebdfd2a531501b4a119156ca728994efd0498ec11aa7d09e6a82bb29a5fe019aec92548a89cb1a09787f778f3f1968442022c70d0e5a027a1e0c35d9b4392ee912c3887966ff2e2050d15f225413eb3db192b488f76be60", 0xba}], 0x4, &(0x7f0000001400)=[{0xb8, 0x103, 0x8, "df2f8cd7809fcfeaee55049e48c20af11ca86e7fa6c80959442ea961adab04123d5d1557f1a7a8e12291b347d8b67c4fbb9a0474cc126b4487da3008c256db56709c1ecf6db141625dbd8795adc3a583bf110f1fcc9fe3de920eb6e26d5b2c26f8fe38c517ae67671482a3fc3a3f15ab9dd449feb8c40c3a02cdea2d85c655572f425040f62eebf19c14ad082101e50d48139f767f94e987e2dd589026f92ff35ee85e372354fe"}, {0xa0, 0x112, 0x8, "4bcf84b6f3b81d9cef25a06438ee5c6b963e621c75b438a0b7a533c15406f6870bb0c146e86bb547a85202d0b8f568f4fa79410c4d7da6b523f840b3e36973b919c103e2c11dd33fc53347035d7c0be89d524bb911ae6659cd0fa4111d2aa047c33b926a7d181bbcb8c5bb6fbcfb8ec8e751705e8e20395b24e963e069bfee28e8092001c3b411ba90c4a4173546"}, {0xc0, 0x108, 0x89, "6419b279d8fef41feec9457d49cebcf7eb8035b1cac8a630e377fe813281cebd2d506151d7dab352d03a4c725db560c9a1f3eecbb91c8855bd624403b5d607f10014f6582ae858eb5084266ca533bcda89cfadeafeda94c55c98efc266f534ac41abe70f3ba4456f50c1a26a6bb86f90e44be0f99209b9e3e6610bcfee147ca070000cff44bb150c752daca3ee819a211adf7ae6e60a262db632d1cd66578d974cc35897f23acebd65ae"}, {0x90, 0x114, 0xfffffffc, "746ebada184f69456c8dc237e0f06f2789f183fb776bac0e47727cd9ca5ac6c752e75bc38ae27109b241fac8e7e08ce02ff0883133bc2a63cb4ab6159c68002fe00bee1636f3e8f54f6d6bddcf60c5bc456199fe40a3f8de4a99c7f6a4105a59078acc9f8e982f6b9fd25b40ae8a27ce723626d6ab8157c6612b306bd95574"}, {0x30, 0x102, 0x7f7, "fc22cfce898a900710b457ef4dc8c606275902c689ca62ba52874c7530aa10e9"}, {0xe8, 0x107, 0x7ff, "0d073add0b86fe29097fee5b6bca24608b966753b79baa6d45d1bbffaa253755642e860c5502a3189d3f032fa2421bc4872ef9a99dac4a1c59af43af1ebd45f24cf5db9805e1baac490577a32cda83731bc5cb43f271ced16c0535922d2670ce4ddabec753a0702ba44cc5eca63e2dd1514dd202a9a1abf598b9b10444ca80dd4981dba831947fb162df87c48a69f906dbb948a20fd1d753c627bb83b56f3b4c6bad5a98ad5310ef0a52ac593ed914ceb0a11c431d361ca6b4eb23648ecbfca919f0b6c4a78465ccbab3ea4a8e10d599439d783e100c072c"}, {0x1010, 0x1e, 0x0, "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"}, {0x28, 0x20b, 0x8, "ee0920084b89d42b5536388ac5c8fcb1c661d8e03d2c"}, {0x38, 0x111, 0x7, "6cbaffffb64c5bad548c930ece9499e25b22bc1921514cdbae14695f5aebcc4156962e86be"}, {0x1010, 0x104, 0x7fff, "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"}], 0x2440}, 0x20004000) 160.923962ms ago: executing program 2 (id=1998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x2, 0x70bd29, 0x25dfdbfd}, 0x14}}, 0x20000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x5, &(0x7f0000000140)=[{0x6, 0x1, 0x2, 0x1}, {0x4af, 0x75, 0x86, 0x800}, {0x8, 0x4, 0x9, 0x3}, {0x3, 0x6, 0x6, 0xc}, {0x2, 0x2, 0xc, 0x2}]}) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VHOST_VDPA_SET_GROUP_ASID(r3, 0x4008af7c, &(0x7f0000000200)={0x1, 0x8}) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000240)={r3, 0x8000000000000000, 0x624, 0xc65}) socket(0x2b, 0x1, 0x8) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_SET_PIT(r4, 0x8048ae66, &(0x7f0000000280)={[{0x10001, 0x7, 0x7, 0x0, 0xf1, 0x0, 0x7, 0x5, 0x17, 0x6d, 0x1, 0x9, 0x4}, {0x5, 0x6, 0xf, 0x2, 0x8c, 0x8, 0x0, 0x2, 0x90, 0x7, 0xd, 0x7, 0x2}, {0xcbd, 0x40, 0x2d, 0x0, 0x9, 0xc0, 0xb8, 0x9, 0x3, 0x8, 0x40, 0xe, 0x8}], 0x1}) preadv(r5, &(0x7f0000000400)=[{&(0x7f0000000300)=""/237, 0xed}], 0x1, 0x3, 0x6c4d) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, &(0x7f0000000440)=0x4, 0x7, 0x2) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r4, 0x40044104, &(0x7f0000000480)=0x7ff) ioctl$mixer_OSS_GETVERSION(r4, 0x80044d76, &(0x7f00000004c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000580)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r6, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x28, r7, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x600000, 0x1c}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x840) r9 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000680)={'wlan1\x00'}) ioctl$SOUND_MIXER_WRITE_VOLUME(r4, 0xc0044d05, &(0x7f00000006c0)=0x35) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000700)={'pimreg0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) ioctl$SG_BLKSECTGET(r4, 0x1267, &(0x7f0000000740)) write$P9_RSYMLINK(r4, &(0x7f0000000780)={0x14, 0x11, 0x2, {0x80, 0x3, 0x2}}, 0x14) ioctl$KVM_RUN(r4, 0xae80, 0x0) r10 = openat$incfs(r4, &(0x7f00000007c0)='.pending_reads\x00', 0x20000, 0x100) ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000800)={0x9, 0x0, [{0x610, 0x0, 0x5}, {0xc001103a, 0x0, 0x697}, {0x2d5}, {0xa10}, {0x11e, 0x0, 0xff}, {0x291, 0x0, 0x6}, {0x1eb, 0x0, 0xffff}, {0xbde, 0x0, 0xe67a}, {0x22e, 0x0, 0x4}]}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r4, 0xc018937c, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r11, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x58, r7, 0x10, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xa}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x12}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2b}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x4}], @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4048) ioctl$AUTOFS_IOC_ASKUMOUNT(0xffffffffffffffff, 0x80049370, &(0x7f0000000a80)) 160.570196ms ago: executing program 4 (id=1999): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB]) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) write$FUSE_INIT(r0, &(0x7f0000002300)={0x50, 0x0, 0x0, {0x7, 0x9, 0x3, 0xffffffffd2819082, 0x0, 0x0, 0x100, 0xfffffffe, 0x0, 0x0, 0x2, 0x3}}, 0x50) 159.769896ms ago: executing program 2 (id=2000): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x90080, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0xb2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x81, @local}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x9, @loopback, 0x400}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000190001050000000000000000fc000000000000000000000000000000e000000200000000000000000000000000000000000000000a00000016000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYRES32=0x0, @ANYBLOB="04800000"], 0xc4}}, 0x0) shutdown(r2, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="0107000000000000000052"], 0x14}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$EXT4_IOC_CLEAR_ES_CACHE(0xffffffffffffffff, 0x6628) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) syz_clone3(&(0x7f0000001240)={0x2d000000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 111.014269ms ago: executing program 4 (id=2001): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000180)={0x0, 0x300, &(0x7f0000000240)=[{&(0x7f0000000380)="5c00000012006bab9e3fe3d86e6c1d000014a10d00000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dffefffffffffffffff60a64c9f4080003fe060100000400020015b53631", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x44010) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)={0x3c, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_IP_SADDR={0x17, 0x18, @broadcast}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaa8}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x77}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20008080}, 0x30) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) syz_emit_vhci(&(0x7f0000000340)=@HCI_SCODATA_PKT={0x3, {0xc9, 0x1f}, "32ee57e653525e3e1f2e7b84020eefeb1540852e599fe7d25bdaa7cc609566"}, 0x23) pipe(&(0x7f00000001c0)={0xffffffffffffffff}) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0x80, 0x6) r8 = socket$alg(0x26, 0x5, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r8, 0x0, 0x482, &(0x7f0000000200)=""/206, &(0x7f0000000300)=0xce) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000080), &(0x7f00000000c0)=r6}, 0x20) ioctl$FBIOPUTCMAP(r5, 0x4605, &(0x7f0000000500)={0x2, 0x5, &(0x7f0000000400)=[0xb, 0x8, 0x3, 0x8, 0x6], &(0x7f0000000440)=[0x3, 0x4], &(0x7f0000000480)=[0x22, 0x2, 0x8, 0xfff, 0x7, 0x3, 0x5, 0x7], &(0x7f00000004c0)=[0x8000, 0x3]}) 110.82029ms ago: executing program 3 (id=2002): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f0000000100)="8ac742e55187f04b462a6be9add79b573455e54c025135aa0716904bc9279d92e32f", 0x22) write$P9_RMKDIR(r0, &(0x7f0000000240)={0x14, 0x49, 0x2, {0x40, 0x3, 0x1}}, 0x14) write$char_usb(r0, &(0x7f0000000300)="84db897d77a2dd916d4187e6ffb76fe9a18f85d4fc76b6962d604451b8ee263b3be6b1beec145238ebd3022f858d7d6dcb58c81b0287c0ae07b395202b9f746a3460d8a4310e112d3b3394ccfe832d563a6bc7c1e8258ba5034a9ca75043c97c20fb81b05a634ce5cec85c03da8521de6c7154fdbf754ddda817fbb7a033248634ae23e1c4b6f713dc76e602bf80aa64ea41e71f0e352e606c3479553506b7fbe5e1eea26489bb2060ab5e572a41060ab29b6ecd528dbc9b8c", 0xb9) write$char_usb(r0, &(0x7f0000002600)="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", 0xfec) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0xfff], 0x0, 0x0, 0x1}}, 0x40) 60.772878ms ago: executing program 4 (id=2003): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x4, &(0x7f0000000480)=@framed={{}, [@exit]}, &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r0, 0x0, 0x58, 0xfe, &(0x7f0000000780)="1f782d4b7f4773adcb1451bee56b281e9fa3fa00d71646c63b57a445f195e11f1119773882be6f0b21ea041e236e38be15dcabbb6312e5d02c64b8c6fc202447ec44eb4af07c280e85b6aaa95e5c50055d422bf2617f4aa1", &(0x7f0000000800)=""/254, 0x7fffffff, 0x0, 0xf3, 0x16, &(0x7f0000000900)="adde4291abc52be3632e6b6d787ad43e615be8ed27405e883ad29646c26b0ebbf4374cd536d611d1184ffcd98acaa962c09e93efe6fdd1dbd5a9cd6cab69c112906ce968609ffadccb55d5479857da2e085fce5c0910d060242a5f164e82e203478b6e9d0188313d2466ed4522c5dcc55508eefa3c0efc809dc26f736cf76f4e05aaee6050db5590a6b3d79c01defe5d640d8e28448ec37fc56816d08398228d109e06fb79fec60c91f1c75e4dd00a87674666551bbee24742515be1da9e5accd464a3a72e74022f1f74d410cc3e45ce9bdc553a29471bd3c875e95a66f64dfbb1ab928a6bdff9f3cb4334fc99292659224b20", &(0x7f0000000580)="c6e6042850c14ffcc04d07116eeaf0ecadfb1c997142", 0x7, 0x0, 0x37102228}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000008000000000000000300000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000004249e5108000000439c060011000000859bf0fffcffffffbf91000000000000b7020000000000008500000085000000b700000000000015fa2559f4152cbd8d"], &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000180)=[{0x3, 0x5, 0x1, 0x7}, {0x2, 0x1, 0xb, 0xc}, {0x3, 0x2, 0xd, 0xc}, {0x4, 0x5, 0x9, 0x8}, {0x0, 0x1, 0xd, 0xa}, {0x5, 0x1, 0x5, 0xc}, {0x3, 0x3, 0x3, 0x3}, {0x3, 0x1, 0x3, 0xa}]}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000700)={r1, 0x0, 0xb7, 0x84, &(0x7f00000002c0)="92d61a97ff755009b7ad20e5937ff5de87ef15676faa19d2c44866dd3d726e9989df08eb310380f612ccf4efbaf70a69c84fb8d3a14dbe2fb448034dff901f696f65204812bb74f52a5fa5b6e6b693f1a9a212472cac43ee5aa46f09ab34250bf7a407564586e8f825cd78d9d4e551fabddf9d8574ec125817f79c53e0ba6d8738e7c49a5dd723dbe2767001ef86ae36476ae835332e6106f229b329d10ed1d12c6966116a5be4c10e7aa7bbd7f5b191591cc71fe16ef2", &(0x7f00000004c0)=""/132, 0x9, 0x0, 0xd2, 0x4, &(0x7f0000000600)="d48d8d606739ab8bd9823e2fad2d2c56625a96cb1e2530cfa9517b22a7e07050f6487fa59bb2943b044714d8523ce16dd85ba3c8a8900f3c5bc9f4704a9f7e2114afefa04f24bafd869caa3ab85086a7a750cb8d89d5d06d5069263d8a05ef6d54304d93bbd78f241f51e35e6cfdcaafcfed87f4d483ee108085e9963ff3884931fc6c935aa61bc73fcfb89ee460d7c3aa923674222cb50e85daf985f5b77146807d7c268bc4f26cb90950fd7531152e60a433551abf4b5a0c1e92c0409a71e6c04e993fa2278ca5806d1a4957a22b4ca055", &(0x7f0000000380)="b16caf1e", 0x4}, 0x50) 60.637254ms ago: executing program 4 (id=2004): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) (async) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x3f) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) (rerun: 64) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000009c0)=ANY=[@ANYBLOB="38010000", @ANYRES16=r5, @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r6, @ANYBLOB="0c009900000000003e000000140004006e69637666300000000000000000000008000500060000000c001780040005000400040014000400766c616e30000000000000000000000005005300000000000a00180003030303030300000a00e80008021100000000001c0017"], 0x138}}, 0x0) (async) madvise(&(0x7f00007a8000/0x3000)=nil, 0x3000, 0x9) 990.73µs ago: executing program 3 (id=2005): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="0000000000004a641c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff0000000001000000000000d7", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800a000100767863616e0000000400028008000a00", @ANYRES32=r2, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000030000000003000000000000000052bcef7daddcb5700b2e14fec8cf88fb6653fc8d30840308363994a70a4158a6a7b75dc98ad40b75477a799c63894a2dd503be4717110b316f139964c90b5a85087b84cde171", @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r8, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r8, @ANYBLOB], 0x4c}}, 0x0) 0s ago: executing program 2 (id=2006): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006402000000008001340"], 0x64}}, 0x24002800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x44, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FILS_CACHE_ID={0x6, 0xfd, 0x1}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMK={0x14, 0xfe, "ae8d8877a41136c21165cc1ad50a1680"}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008005}, 0x4) r4 = syz_io_uring_setup(0x64b7, &(0x7f0000002600)={0x0, 0xffffff7c, 0x13580, 0x3, 0x35c}, &(0x7f0000000100)=0x0, &(0x7f0000000580)=0x0) r7 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r8 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r8, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r7, &(0x7f0000000600)="ca391cb1e0881b450a25", 0xa) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r9, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x7], 0x0, 0x0, 0x1}}, 0x40) syz_io_uring_submit(r5, r6, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r4, 0x54, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 146.056069][T10089] No control pipe specified [ 146.312540][T10103] MINIX-fs: blocksize too small for device [ 146.344548][T10106] netlink: 'syz.4.1246': attribute type 1 has an invalid length. [ 146.356469][T10106] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.459439][T10113] kvm: pic: single mode not supported [ 146.459450][T10113] kvm: pic: level sensitive irq not supported [ 146.529537][T10120] comedi: valid board names for 8255 driver are: [ 146.535559][ T839] usb 7-1: USB disconnect, device number 6 [ 146.537056][T10120] 8255 [ 146.538659][T10120] comedi: valid board names for vmk80xx driver are: [ 146.541090][T10120] vmk80xx [ 146.542457][T10120] comedi: valid board names for usbduxsigma driver are: [ 146.545751][T10120] usbduxsigma [ 146.546843][T10120] comedi: valid board names for usbduxfast driver are: [ 146.549260][T10120] usbduxfast [ 146.550483][T10120] comedi: valid board names for usbdux driver are: [ 146.552654][T10120] usbdux [ 146.553762][T10120] comedi: valid board names for ni6501 driver are: [ 146.556470][T10120] ni6501 [ 146.557499][T10120] comedi: valid board names for dt9812 driver are: [ 146.559644][T10120] dt9812 [ 146.560610][T10120] comedi: valid board names for ni_labpc_cs driver are: [ 146.562878][T10120] ni_labpc_cs [ 146.564100][T10120] comedi: valid board names for ni_daq_700 driver are: [ 146.566389][T10120] ni_daq_700 [ 146.567538][T10120] comedi: valid board names for labpc_pci driver are: [ 146.569705][T10120] labpc_pci [ 146.570815][T10120] comedi: valid board names for adl_pci9118 driver are: [ 146.573052][T10120] pci9118dg [ 146.574103][T10120] pci9118hg [ 146.576381][T10120] pci9118hr [ 146.577471][T10120] comedi: valid board names for 8255_pci driver are: [ 146.579612][T10120] 8255_pci [ 146.580625][T10120] comedi: valid board names for s526 driver are: [ 146.582670][T10120] s526 [ 146.583565][T10120] comedi: valid board names for multiq3 driver are: [ 146.586323][T10120] multiq3 [ 146.587362][T10120] comedi: valid board names for pcmuio driver are: [ 146.589823][T10120] pcmuio48 [ 146.591202][T10120] pcmuio96 [ 146.592578][T10120] comedi: valid board names for pcmmio driver are: [ 146.595449][T10120] pcmmio [ 146.596769][T10120] comedi: valid board names for pcmda12 driver are: [ 146.599464][T10120] pcmda12 [ 146.600779][T10120] comedi: valid board names for pcmad driver are: [ 146.603373][T10120] pcmad12 [ 146.604783][T10120] pcmad16 [ 146.606112][T10120] comedi: valid board names for ni_labpc driver are: [ 146.608739][T10120] lab-pc-1200 [ 146.610033][T10120] lab-pc-1200ai [ 146.611552][T10120] lab-pc+ [ 146.612946][T10120] comedi: valid board names for atmio16 driver are: [ 146.615863][T10120] atmio16 [ 146.617173][T10120] atmio16d [ 146.618424][T10120] comedi: valid board names for ni_at_ao driver are: [ 146.620657][T10120] at-ao-6 [ 146.621989][T10120] at-ao-10 [ 146.623345][T10120] comedi: valid board names for ni_at_a2150 driver are: [ 146.626290][T10120] ni_at_a2150 [ 146.627532][T10120] comedi: valid board names for adq12b driver are: [ 146.630098][T10120] adq12b [ 146.631084][T10120] comedi: valid board names for mpc624 driver are: [ 146.633530][T10120] mpc624 [ 146.635199][T10120] comedi: valid board names for c6xdigio driver are: [ 146.638004][T10120] c6xdigio [ 146.639375][T10120] comedi: valid board names for aio_iiro_16 driver are: [ 146.641727][T10120] aio_iiro_16 [ 146.643179][T10120] comedi: valid board names for aio_aio12_8 driver are: [ 146.646419][T10120] aio_aio12_8 [ 146.647881][T10120] aio_ai12_8 [ 146.649313][T10120] aio_ao12_4 [ 146.650780][T10120] comedi: valid board names for fl512 driver are: [ 146.653425][T10120] fl512 [ 146.654957][T10120] comedi: valid board names for dmm32at driver are: [ 146.657620][T10120] dmm32at [ 146.658606][T10120] comedi: valid board names for dt282x driver are: [ 146.660618][T10120] dt2821 [ 146.661577][T10120] dt2821-f [ 146.662652][T10120] dt2821-g [ 146.663850][T10120] dt2823 [ 146.665647][T10120] dt2824-pgh [ 146.667027][T10120] dt2824-pgl [ 146.668362][T10120] dt2825 [ 146.669591][T10120] dt2827 [ 146.670842][T10120] dt2828 [ 146.672089][T10120] dt2829 [ 146.673331][T10120] dt21-ez [ 146.674815][T10120] dt23-ez [ 146.676118][T10120] dt24-ez [ 146.677423][T10120] dt24-ez-pgl [ 146.678848][T10120] comedi: valid board names for dt2817 driver are: [ 146.681560][T10120] dt2817 [ 146.682529][T10120] comedi: valid board names for dt2815 driver are: [ 146.684799][T10120] dt2815 [ 146.685832][T10120] comedi: valid board names for dt2814 driver are: [ 146.687864][T10120] dt2814 [ 146.688810][T10120] comedi: valid board names for dt2811 driver are: [ 146.690851][T10120] dt2811-pgh [ 146.691916][T10120] dt2811-pgl [ 146.693000][T10120] comedi: valid board names for dt2801 driver are: [ 146.695125][T10120] dt2801 [ 146.696102][T10120] comedi: valid board names for das6402 driver are: [ 146.698141][T10120] das6402-12 [ 146.699228][T10120] das6402-16 [ 146.700294][T10120] comedi: valid board names for das1800 driver are: [ 146.702357][T10120] das-1701st [ 146.703424][T10120] das-1701st-da [ 146.704852][T10120] das-1702st [ 146.706191][T10120] das-1702st-da [ 146.707618][T10120] das-1702hr [ 146.708946][T10120] das-1702hr-da [ 146.710382][T10120] das-1701ao [ 146.711719][T10120] das-1702ao [ 146.713045][T10120] das-1801st [ 146.714345][T10120] das-1801st-da [ 146.715782][T10120] das-1802st [ 146.717103][T10120] das-1802st-da [ 146.718536][T10120] das-1802hr [ 146.719879][T10120] das-1802hr-da [ 146.721302][T10120] das-1801hc [ 146.722645][T10120] das-1802hc [ 146.723968][T10120] das-1801ao [ 146.725394][T10120] das-1802ao [ 146.726715][T10120] comedi: valid board names for das800 driver are: [ 146.729240][T10120] das-800 [ 146.730484][T10120] cio-das800 [ 146.731817][T10120] das-801 [ 146.733055][T10120] cio-das801 [ 146.734449][T10120] das-802 [ 146.735665][T10120] cio-das802 [ 146.736993][T10120] cio-das802/16 [ 146.738430][T10120] comedi: valid board names for isa-das08 driver are: [ 146.741069][T10120] isa-das08 [ 146.742380][T10120] das08-pgm [ 146.743673][T10120] das08-pgh [ 146.745042][T10120] das08-pgl [ 146.746341][T10120] das08-aoh [ 146.747647][T10120] das08-aol [ 146.748931][T10120] das08-aom [ 146.750238][T10120] das08/jr-ao [ 146.751587][T10120] das08jr-16-ao [ 146.753004][T10120] pc104-das08 [ 146.754464][T10120] das08jr/16 [ 146.755775][T10120] comedi: valid board names for das16m1 driver are: [ 146.758324][T10120] das16m1 [ 146.759570][T10120] comedi: valid board names for dac02 driver are: [ 146.762066][T10120] dac02 [ 146.763217][T10120] comedi: valid board names for rti802 driver are: [ 146.765885][T10120] rti802 [ 146.767041][T10120] comedi: valid board names for rti800 driver are: [ 146.769592][T10120] rti800 [ 146.770773][T10120] rti815 [ 146.772295][T10120] comedi: valid board names for pcm3724 driver are: [ 146.775138][T10120] pcm3724 [ 146.776380][T10120] comedi: valid board names for pcl818 driver are: [ 146.778757][T10120] pcl818l [ 146.780072][T10120] pcl818h [ 146.781376][T10120] pcl818hd [ 146.782381][T10120] pcl818hg [ 146.783412][T10120] pcl818 [ 146.784571][T10120] pcl718 [ 146.785862][T10120] pcm3718 [ 146.787180][T10120] comedi: valid board names for pcl816 driver are: [ 146.789865][T10120] pcl816 [ 146.791121][T10120] pcl814b [ 146.792437][T10120] comedi: valid board names for pcl812 driver are: [ 146.795297][T10120] pcl812 [ 146.796558][T10120] pcl812pg [ 146.797954][T10120] acl8112pg [ 146.799341][T10120] acl8112dg [ 146.800758][T10120] acl8112hg [ 146.802167][T10120] a821pgl [ 146.803487][T10120] a821pglnda [ 146.804875][T10120] a821pgh [ 146.806021][T10120] a822pgl [ 146.807342][T10120] a822pgh [ 146.808344][T10120] a823pgl [ 146.809373][T10120] a823pgh [ 146.810360][T10120] pcl813 [ 146.811299][T10120] pcl813b [ 146.812288][T10120] acl8113 [ 146.813282][T10120] iso813 [ 146.814310][T10120] acl8216 [ 146.815299][T10120] a826pg [ 146.816245][T10120] comedi: valid board names for pcl730 driver are: [ 146.818311][T10120] pcl730 [ 146.819571][T10120] iso730 [ 146.820829][T10120] acl7130 [ 146.822167][T10120] pcm3730 [ 146.823256][T10120] pcl725 [ 146.824208][T10120] p8r8dio [ 146.825296][T10120] acl7225b [ 146.826330][T10120] p16r16dio [ 146.827385][T10120] pcl733 [ 146.828338][T10120] pcl734 [ 146.829289][T10120] opmm-1616-xt [ 146.830403][T10120] pearl-mm-p [ 146.831460][T10120] ir104-pbf [ 146.832492][T10120] comedi: valid board names for pcl726 driver are: [ 146.834664][T10120] pcl726 [ 146.835604][T10120] pcl727 [ 146.836538][T10120] pcl728 [ 146.837613][T10120] acl6126 [ 146.838891][T10120] acl6128 [ 146.839972][T10120] comedi: valid board names for pcl724 driver are: [ 146.841829][T10120] pcl724 [ 146.842778][T10120] pcl722 [ 146.843673][T10120] pcl731 [ 146.844643][T10120] acl7122 [ 146.845587][T10120] acl7124 [ 146.846534][T10120] pet48dio [ 146.847459][T10120] pcmio48 [ 146.848431][T10120] onyx-mm-dio [ 146.849514][T10120] comedi: valid board names for pcl711 driver are: [ 146.851522][T10120] pcl711 [ 146.852483][T10120] pcl711b [ 146.853492][T10120] acl8112hg [ 146.854626][T10120] acl8112dg [ 146.855588][T10120] comedi: valid board names for amplc_pc263 driver are: [ 146.857511][T10120] pc263 [ 146.858431][T10120] comedi: valid board names for amplc_pc236 driver are: [ 146.860587][T10120] pc36at [ 146.861533][T10120] comedi: valid board names for amplc_dio200 driver are: [ 146.863721][T10120] pc212e [ 146.864792][T10120] pc214e [ 146.866037][T10120] pc215e [ 146.867244][T10120] pc218e [ 146.868178][T10120] pc272e [ 146.869114][T10120] comedi: valid board names for comedi_parport driver are: [ 146.871321][T10120] comedi_parport [ 146.872475][T10120] comedi: valid board names for comedi_test driver are: [ 146.874695][T10120] comedi_test [ 146.875775][T10120] comedi: valid board names for comedi_bond driver are: [ 146.877907][T10120] comedi_bond [ 146.900795][ T40] kauditd_printk_skb: 12 callbacks suppressed [ 146.900806][ T40] audit: type=1400 audit(1757584835.659:33075): avc: denied { validate_trans } for pid=10127 comm="syz.1.1254" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 147.263278][T10156] netlink: 'syz.3.1261': attribute type 83 has an invalid length. [ 147.263291][T10155] netlink: 'syz.3.1261': attribute type 83 has an invalid length. [ 147.380532][T10163] fuse: Unknown parameter '' [ 147.497283][T10175] overlayfs: workdir and upperdir must reside under the same mount [ 147.726508][T10191] kvm: pic: single mode not supported [ 147.726519][T10191] kvm: pic: level sensitive irq not supported [ 147.861972][T10201] fuse: Unknown parameter 'ÿ' [ 147.887989][T10203] tmpfs: Unknown parameter 'workdir' [ 147.964312][T10135] comedi comedi0: reset error (fatal) [ 148.029764][T10206] __nla_validate_parse: 16 callbacks suppressed [ 148.029775][T10206] netlink: 292 bytes leftover after parsing attributes in process `syz.4.1280'. [ 148.066850][T10225] program syz.1.1284 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.069494][T10229] cgroup2: Unknown parameter 'memory_re SžÛ~' [ 148.069832][ T40] audit: type=1400 audit(1757584836.829:33076): avc: denied { create } for pid=10226 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.078076][ T40] audit: type=1400 audit(1757584836.829:33077): avc: denied { setopt } for pid=10226 comm="syz.4.1285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 148.101123][T10232] fuse: Unknown parameter 'W<Ù¨3àÑ0Ó|lV/0ä‘âP0x0000000000000003' [ 148.118778][T10236] tmpfs: Unknown parameter 'workdir' [ 148.265779][ T40] audit: type=1400 audit(1757584837.029:33078): avc: denied { map } for pid=10251 comm="syz.4.1295" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.338721][ T40] audit: type=1400 audit(1757584837.099:33079): avc: denied { create } for pid=10251 comm="syz.4.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 148.371075][ T40] audit: type=1400 audit(1757584837.129:33080): avc: denied { execute } for pid=10263 comm="syz.3.1298" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 148.380537][ T40] audit: type=1400 audit(1757584837.149:33081): avc: denied { execute } for pid=10263 comm="syz.3.1298" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 148.414876][T10262] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1296'. [ 148.416273][T10268] overlayfs: workdir and upperdir must reside under the same mount [ 148.446086][T10255] dlm: no locking on control device [ 148.577746][T10282] ip6gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 148.618607][T10285] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 148.620852][T10285] overlayfs: failed to set xattr on upper [ 148.622622][T10285] overlayfs: ...falling back to redirect_dir=nofollow. [ 148.625074][T10285] overlayfs: ...falling back to index=off. [ 148.627051][T10285] overlayfs: ...falling back to uuid=null. [ 148.629435][T10285] overlayfs: conflicting lowerdir path [ 148.644442][ T29] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 148.656891][T10290] netlink: 'syz.1.1307': attribute type 11 has an invalid length. [ 148.687215][T10297] overlayfs: workdir and upperdir must reside under the same mount [ 148.690043][T10298] dummy0: entered allmulticast mode [ 148.774041][T10307] Unsupported ieee802154 address type: 0 [ 148.779948][ T839] IPVS: starting estimator thread 0... [ 148.804571][T10311] validate_nla: 1 callbacks suppressed [ 148.804586][T10311] netlink: 'syz.3.1315': attribute type 8 has an invalid length. [ 148.814399][ T29] usb 9-1: Using ep0 maxpacket: 16 [ 148.818469][ T29] usb 9-1: unable to get BOS descriptor or descriptor too short [ 148.822527][ T29] usb 9-1: config 1 interface 0 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 1024 [ 148.829130][ T29] usb 9-1: config 1 interface 0 has no altsetting 0 [ 148.833767][ T29] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 148.837898][ T29] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.841182][ T29] usb 9-1: Product: syz [ 148.842892][ T29] usb 9-1: Manufacturer: syz [ 148.845252][ T29] usb 9-1: SerialNumber: syz [ 148.848459][T10266] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 148.874428][T10309] IPVS: using max 46 ests per chain, 110400 per kthread [ 149.058036][ T29] usb 9-1: USB disconnect, device number 5 [ 149.079899][T10324] tmpfs: Unknown parameter 'workdir' [ 149.106550][ T40] audit: type=1400 audit(1757584837.869:33082): avc: denied { setopt } for pid=10325 comm="syz.3.1320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 149.550352][T10341] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 149.558596][T10341] CIFS: Unable to determine destination address [ 149.832210][ T40] audit: type=1400 audit(1757584838.589:33083): avc: denied { lock } for pid=10364 comm="syz.2.1330" path="/dev/input/event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 149.867243][T10367] block device autoloading is deprecated and will be removed. [ 150.116885][T10384] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1337'. [ 150.539702][ T40] audit: type=1400 audit(1757584839.299:33084): avc: denied { ioctl } for pid=10406 comm="syz.4.1343" path="socket:[35077]" dev="sockfs" ino=35077 ioctlcmd=0x530e scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 151.124593][T10445] overlayfs: workdir and upperdir must reside under the same mount [ 151.357661][T10452] No control pipe specified [ 151.359466][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1351'. [ 151.362876][ T63] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 151.690790][T10473] overlayfs: workdir and upperdir must reside under the same mount [ 151.738828][T10479] sch_tbf: burst 824 is lower than device lo mtu (65550) ! [ 151.967506][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 151.967516][ T40] audit: type=1400 audit(1757584840.729:33089): avc: denied { ioctl } for pid=10482 comm="syz.3.1369" path="socket:[36870]" dev="sockfs" ino=36870 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 152.324414][ T53] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 152.347599][ T40] audit: type=1400 audit(1757584841.109:33090): avc: denied { connect } for pid=10497 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 152.395659][ T40] audit: type=1400 audit(1757584841.159:33091): avc: denied { write } for pid=10501 comm="syz.4.1367" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 152.474459][ T53] usb 8-1: Using ep0 maxpacket: 8 [ 152.477189][ T53] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 152.480666][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 152.483376][ T53] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 152.486357][ T53] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 152.490419][ T53] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 152.493216][ T53] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.701455][ T53] usb 8-1: GET_CAPABILITIES returned 0 [ 152.703196][ T53] usbtmc 8-1:16.0: can't read capabilities [ 152.729159][ T53] usb 8-1: USB disconnect, device number 9 [ 152.748194][T10529] fuse: Bad value for 'group_id' [ 152.749905][T10529] fuse: Bad value for 'group_id' [ 152.787507][T10531] /dev/nullb0: Can't open blockdev [ 152.792001][T10531] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 152.798988][T10531] syz_tun: entered promiscuous mode [ 152.801196][T10531] batadv_slave_0: entered promiscuous mode [ 152.806106][T10531] program syz.3.1376 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.001043][T10548] kvm: pic: single mode not supported [ 153.001062][T10548] kvm: pic: level sensitive irq not supported [ 153.024414][T10553] geneve2: entered allmulticast mode [ 153.099504][ T40] audit: type=1400 audit(1757584841.859:33092): avc: denied { node_bind } for pid=10558 comm="syz.3.1385" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 153.362932][ T40] audit: type=1400 audit(1757584842.119:33093): avc: denied { append } for pid=10570 comm="syz.4.1389" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 153.674419][ T141] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 153.824323][ T141] usb 9-1: device descriptor read/64, error -71 [ 153.898714][T10589] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1395'. [ 153.919431][T10589] batadv_slave_1: entered promiscuous mode [ 153.977181][T10588] batadv_slave_1: left promiscuous mode [ 153.999211][ T40] audit: type=1400 audit(1757584842.759:33094): avc: denied { create } for pid=10591 comm="syz.3.1396" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 153.999253][T10592] o2cb: This node has not been configured. [ 154.010295][T10592] o2cb: Cluster check failed. Fix errors before retrying. [ 154.013248][T10592] (syz.3.1396,10592,2):user_dlm_register:674 ERROR: status = -22 [ 154.017608][T10592] (syz.3.1396,10592,3):dlmfs_mkdir:437 ERROR: Error -22 could not register domain "file0" [ 154.018067][ T63] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 154.094395][ T141] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 154.125246][T10600] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 154.125246][T10600] The task syz.3.1396 (10600) triggered the difference, watch for misbehavior. [ 154.234399][ T141] usb 9-1: device descriptor read/64, error -71 [ 154.354670][ T141] usb usb9-port1: attempt power cycle [ 154.495194][T10614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1403'. [ 154.629977][T10617] kvm: pic: single mode not supported [ 154.629989][T10617] kvm: pic: level sensitive irq not supported [ 154.696074][ T141] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 154.715332][ T141] usb 9-1: device descriptor read/8, error -71 [ 154.954783][ T141] usb 9-1: new high-speed USB device number 9 using dummy_hcd [ 154.974820][ T141] usb 9-1: device descriptor read/8, error -71 [ 155.010992][T10629] usb usb8: usbfs: process 10629 (syz.3.1407) did not claim interface 0 before use [ 155.059450][ T63] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 155.068250][ T63] Bluetooth: hci2: unexpected event for opcode 0x2023 [ 155.086849][ T141] usb usb9-port1: unable to enumerate USB device [ 155.100919][T10642] team_slave_0: entered promiscuous mode [ 155.103932][T10642] team_slave_1: entered promiscuous mode [ 155.108752][T10642] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 155.216271][ T40] audit: type=1400 audit(1757584843.979:33095): avc: denied { ioctl } for pid=10649 comm="syz.2.1414" path="socket:[37150]" dev="sockfs" ino=37150 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 155.220814][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 155.228323][T10652] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1414'. [ 155.233729][ T63] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 155.280154][ T40] audit: type=1326 audit(1757584844.039:33096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 155.287539][ T40] audit: type=1326 audit(1757584844.039:33097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 155.296139][ T40] audit: type=1326 audit(1757584844.039:33098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 155.553790][ T63] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 155.962614][T10682] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1426'. [ 156.478959][T10692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1429'. [ 156.485420][T10692] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 156.697419][T10701] /dev/sr0: Can't open blockdev [ 156.803484][T10706] libceph: resolve ' [ 156.803484][T10706] -&õÌ×fÍY¹Ç²a×ïÅ2iˆ [ 156.803484][T10706] .ÖúÕ?Çý&*»§&' (ret=-3): failed [ 156.874443][ T6008] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 156.975669][ T40] kauditd_printk_skb: 18319 callbacks suppressed [ 156.975683][ T40] audit: type=1326 audit(1757584845.729:51418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 156.987059][ T40] audit: type=1326 audit(1757584845.739:51419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 156.996136][ T40] audit: type=1326 audit(1757584845.739:51420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 157.005766][ T40] audit: type=1326 audit(1757584845.739:51421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 157.015067][ T40] audit: type=1326 audit(1757584845.739:51422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 157.022525][ T40] audit: type=1326 audit(1757584845.739:51423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 157.031283][ T40] audit: type=1326 audit(1757584845.739:51424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 157.040536][ T40] audit: type=1326 audit(1757584845.739:51425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 157.049524][ T40] audit: type=1326 audit(1757584845.739:51426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 157.057583][ T40] audit: type=1326 audit(1757584845.739:51427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10655 comm="syz.2.1416" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca8cb8eba9 code=0x7ff00000 [ 157.065901][ T6008] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 157.070395][ T6008] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 157.073200][ T6008] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.075775][ T6008] usb 9-1: Product: syz [ 157.077093][ T6008] usb 9-1: Manufacturer: syz [ 157.078558][ T6008] usb 9-1: SerialNumber: syz [ 157.081520][ T6008] usb 9-1: config 0 descriptor?? [ 157.491644][ T141] usb 9-1: USB disconnect, device number 10 [ 157.948511][T10720] kvm: kvm [10719]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x11e) = 0xfffffc18 [ 157.951750][T10720] kvm: kvm [10719]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x11e) = 0xfffffc18 [ 158.035343][T10728] random: crng reseeded on system resumption [ 158.101852][T10720] kvm: kvm [10719]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x186) = 0xfffffc18 [ 158.105087][T10720] kvm: kvm [10719]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x186) = 0xfffffc18 [ 158.108434][T10720] kvm: kvm [10719]: vcpu2, guest rIP: 0x912c Unhandled WRMSR(0x187) = 0xfffffc18 [ 158.111712][T10720] kvm: kvm [10719]: vcpu2, guest rIP: 0x912f Unhandled WRMSR(0x187) = 0xfffffc18 [ 158.286046][T10745] netlink: 'syz.3.1444': attribute type 1 has an invalid length. [ 158.442845][T10757] kvm: pic: single mode not supported [ 158.442857][T10757] kvm: pic: level sensitive irq not supported [ 158.464480][ T53] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 158.510432][ T63] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 158.634359][ T53] usb 9-1: Using ep0 maxpacket: 8 [ 158.641801][ T53] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 158.645069][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 158.654341][ T53] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 158.657408][ T53] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 158.662254][ T53] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 158.674334][ T53] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.884068][ T53] usb 9-1: GET_CAPABILITIES returned 0 [ 158.886466][ T53] usbtmc 9-1:16.0: can't read capabilities [ 159.021098][T10768] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 159.026113][T10768] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1450'. [ 159.090099][T10741] usb 9-1: usbtmc_ioctl_clear_in_halt returned -32 [ 159.094258][ T53] usb 9-1: USB disconnect, device number 11 [ 159.108920][ T63] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 159.275463][ T63] Bluetooth: hci1: unexpected event for opcode 0x1408 [ 159.303900][T10797] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1462'. [ 159.328539][T10799] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1463'. [ 159.373403][T10806] FAULT_INJECTION: forcing a failure. [ 159.373403][T10806] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 159.378755][T10806] CPU: 0 UID: 0 PID: 10806 Comm: syz.3.1465 Not tainted syzkaller #0 PREEMPT(full) [ 159.378779][T10806] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 159.378790][T10806] Call Trace: [ 159.378797][T10806] [ 159.378804][T10806] dump_stack_lvl+0x16c/0x1f0 [ 159.378833][T10806] should_fail_ex+0x512/0x640 [ 159.378861][T10806] _copy_from_user+0x2e/0xd0 [ 159.378888][T10806] copy_msghdr_from_user+0x98/0x160 [ 159.378918][T10806] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 159.378946][T10806] ? __lock_acquire+0x62e/0x1ce0 [ 159.378978][T10806] ___sys_recvmsg+0xdb/0x1a0 [ 159.379000][T10806] ? __pfx____sys_recvmsg+0x10/0x10 [ 159.379024][T10806] ? find_held_lock+0x2b/0x80 [ 159.379061][T10806] do_recvmmsg+0x2fe/0x750 [ 159.379087][T10806] ? __pfx_do_recvmmsg+0x10/0x10 [ 159.379114][T10806] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 159.379146][T10806] ? __fget_files+0x20e/0x3c0 [ 159.379172][T10806] __x64_sys_recvmmsg+0x22a/0x280 [ 159.379197][T10806] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 159.379227][T10806] do_syscall_64+0xcd/0x4c0 [ 159.379252][T10806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.379270][T10806] RIP: 0033:0x7f1683b8eba9 [ 159.379285][T10806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 159.379303][T10806] RSP: 002b:00007f16849bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 159.379321][T10806] RAX: ffffffffffffffda RBX: 00007f1683dd5fa0 RCX: 00007f1683b8eba9 [ 159.379332][T10806] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 159.379342][T10806] RBP: 00007f16849bb090 R08: 0000000000000000 R09: 0000000000000000 [ 159.379352][T10806] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 159.379363][T10806] R13: 00007f1683dd6038 R14: 00007f1683dd5fa0 R15: 00007ffc5fab1b78 [ 159.379386][T10806] [ 159.481845][T10809] netlink: 'syz.2.1466': attribute type 1 has an invalid length. [ 159.484545][T10809] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1466'. [ 159.487414][T10809] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1466'. [ 159.764451][T10838] kvm: pic: single mode not supported [ 159.764463][T10838] kvm: pic: level sensitive irq not supported [ 159.779696][T10839] ksmbd: Unknown IPC event: 1, ignore. [ 159.784252][ T63] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 160.288460][T10854] FAULT_INJECTION: forcing a failure. [ 160.288460][T10854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.292685][T10854] CPU: 1 UID: 0 PID: 10854 Comm: syz.3.1479 Not tainted syzkaller #0 PREEMPT(full) [ 160.292700][T10854] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.292706][T10854] Call Trace: [ 160.292710][T10854] [ 160.292715][T10854] dump_stack_lvl+0x16c/0x1f0 [ 160.292733][T10854] should_fail_ex+0x512/0x640 [ 160.292749][T10854] _copy_to_user+0x32/0xd0 [ 160.292766][T10854] csum_and_copy_to_iter+0x299/0x1e00 [ 160.292780][T10854] ? __skb_wait_for_more_packets+0x1a3/0x5e0 [ 160.292792][T10854] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 160.292803][T10854] ? do_raw_spin_lock+0x12c/0x2b0 [ 160.292815][T10854] ? find_held_lock+0x2b/0x80 [ 160.292828][T10854] ? __skb_recv_udp+0x720/0x940 [ 160.292842][T10854] ? rcu_is_watching+0x12/0xc0 [ 160.292861][T10854] __skb_datagram_iter+0x7f9/0x900 [ 160.292871][T10854] ? __skb_recv_udp+0x3a9/0x940 [ 160.292882][T10854] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 160.292893][T10854] ? do_csum+0x26f/0x2d0 [ 160.292904][T10854] skb_copy_and_csum_datagram_msg+0x239/0x3a0 [ 160.292916][T10854] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 160.292929][T10854] ? avc_has_perm+0x144/0x1f0 [ 160.292942][T10854] udpv6_recvmsg+0x322/0x1880 [ 160.292962][T10854] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 160.292976][T10854] ? __pfx_sock_has_perm+0x10/0x10 [ 160.292993][T10854] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 160.293007][T10854] inet6_recvmsg+0x444/0x6a0 [ 160.293023][T10854] ? __pfx_inet6_recvmsg+0x10/0x10 [ 160.293041][T10854] ? __pfx_inet6_recvmsg+0x10/0x10 [ 160.293057][T10854] sock_recvmsg+0xfe/0x250 [ 160.293073][T10854] ____sys_recvmsg+0x218/0x6b0 [ 160.293091][T10854] ? __pfx_____sys_recvmsg+0x10/0x10 [ 160.293111][T10854] ? __lock_acquire+0x62e/0x1ce0 [ 160.293129][T10854] ___sys_recvmsg+0x114/0x1a0 [ 160.293143][T10854] ? __pfx____sys_recvmsg+0x10/0x10 [ 160.293157][T10854] ? find_held_lock+0x2b/0x80 [ 160.293178][T10854] do_recvmmsg+0x2fe/0x750 [ 160.293192][T10854] ? __pfx_do_recvmmsg+0x10/0x10 [ 160.293208][T10854] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 160.293251][T10854] ? __fget_files+0x20e/0x3c0 [ 160.293269][T10854] __x64_sys_recvmmsg+0x22a/0x280 [ 160.293283][T10854] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 160.293301][T10854] do_syscall_64+0xcd/0x4c0 [ 160.293316][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.293327][T10854] RIP: 0033:0x7f1683b8eba9 [ 160.293336][T10854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.293347][T10854] RSP: 002b:00007f16849bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 160.293356][T10854] RAX: ffffffffffffffda RBX: 00007f1683dd5fa0 RCX: 00007f1683b8eba9 [ 160.293363][T10854] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 160.293369][T10854] RBP: 00007f16849bb090 R08: 0000000000000000 R09: 0000000000000000 [ 160.293375][T10854] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 160.293380][T10854] R13: 00007f1683dd6038 R14: 00007f1683dd5fa0 R15: 00007ffc5fab1b78 [ 160.293393][T10854] [ 160.421009][T10862] program syz.3.1481 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 160.621012][T10878] FAULT_INJECTION: forcing a failure. [ 160.621012][T10878] name failslab, interval 1, probability 0, space 0, times 0 [ 160.626129][T10878] CPU: 0 UID: 0 PID: 10878 Comm: syz.3.1487 Not tainted syzkaller #0 PREEMPT(full) [ 160.626143][T10878] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.626149][T10878] Call Trace: [ 160.626153][T10878] [ 160.626157][T10878] dump_stack_lvl+0x16c/0x1f0 [ 160.626189][T10878] should_fail_ex+0x512/0x640 [ 160.626206][T10878] ? fs_reclaim_acquire+0xae/0x150 [ 160.626221][T10878] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 160.626237][T10878] should_failslab+0xc2/0x120 [ 160.626249][T10878] __kmalloc_noprof+0xd2/0x510 [ 160.626263][T10878] tomoyo_realpath_from_path+0xc2/0x6e0 [ 160.626280][T10878] ? tomoyo_profile+0x47/0x60 [ 160.626291][T10878] tomoyo_path_number_perm+0x245/0x580 [ 160.626304][T10878] ? tomoyo_path_number_perm+0x237/0x580 [ 160.626319][T10878] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 160.626333][T10878] ? find_held_lock+0x2b/0x80 [ 160.626358][T10878] ? find_held_lock+0x2b/0x80 [ 160.626370][T10878] ? hook_file_ioctl_common+0x145/0x410 [ 160.626383][T10878] ? __fget_files+0x20e/0x3c0 [ 160.626398][T10878] security_file_ioctl+0x9b/0x240 [ 160.626414][T10878] __x64_sys_ioctl+0xb7/0x210 [ 160.626431][T10878] do_syscall_64+0xcd/0x4c0 [ 160.626449][T10878] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.626460][T10878] RIP: 0033:0x7f1683b8eba9 [ 160.626469][T10878] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.626479][T10878] RSP: 002b:00007f16849bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 160.626492][T10878] RAX: ffffffffffffffda RBX: 00007f1683dd5fa0 RCX: 00007f1683b8eba9 [ 160.626498][T10878] RDX: 0000200000001480 RSI: 000000004048aec9 RDI: 0000000000000004 [ 160.626504][T10878] RBP: 00007f16849bb090 R08: 0000000000000000 R09: 0000000000000000 [ 160.626510][T10878] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 160.626516][T10878] R13: 00007f1683dd6038 R14: 00007f1683dd5fa0 R15: 00007ffc5fab1b78 [ 160.626529][T10878] [ 160.626533][T10878] ERROR: Out of memory at tomoyo_realpath_from_path. [ 160.719160][T10885] ALSA: mixer_oss: invalid index 100000 [ 160.721199][T10885] ALSA: mixer_oss: invalid OSS volume '' [ 160.804312][T10889] FAULT_INJECTION: forcing a failure. [ 160.804312][T10889] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 160.814342][T10889] CPU: 3 UID: 0 PID: 10889 Comm: syz.1.1490 Not tainted syzkaller #0 PREEMPT(full) [ 160.814357][T10889] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 160.814363][T10889] Call Trace: [ 160.814367][T10889] [ 160.814372][T10889] dump_stack_lvl+0x16c/0x1f0 [ 160.814389][T10889] should_fail_ex+0x512/0x640 [ 160.814405][T10889] _copy_to_user+0x32/0xd0 [ 160.814421][T10889] csum_and_copy_to_iter+0x299/0x1e00 [ 160.814435][T10889] ? __skb_wait_for_more_packets+0x1a3/0x5e0 [ 160.814447][T10889] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 160.814458][T10889] ? do_raw_spin_lock+0x12c/0x2b0 [ 160.814470][T10889] ? find_held_lock+0x2b/0x80 [ 160.814483][T10889] ? __skb_recv_udp+0x720/0x940 [ 160.814496][T10889] ? rcu_is_watching+0x12/0xc0 [ 160.814511][T10889] __skb_datagram_iter+0x609/0x900 [ 160.814521][T10889] ? __pfx_csum_and_copy_to_iter+0x10/0x10 [ 160.814535][T10889] skb_copy_and_csum_datagram_msg+0x239/0x3a0 [ 160.814547][T10889] ? __pfx_skb_copy_and_csum_datagram_msg+0x10/0x10 [ 160.814559][T10889] ? avc_has_perm+0x144/0x1f0 [ 160.814572][T10889] udpv6_recvmsg+0x322/0x1880 [ 160.814591][T10889] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 160.814605][T10889] ? __pfx_sock_has_perm+0x10/0x10 [ 160.814622][T10889] ? __pfx_udpv6_recvmsg+0x10/0x10 [ 160.814636][T10889] inet6_recvmsg+0x444/0x6a0 [ 160.814652][T10889] ? __pfx_inet6_recvmsg+0x10/0x10 [ 160.814670][T10889] ? __pfx_inet6_recvmsg+0x10/0x10 [ 160.814687][T10889] sock_recvmsg+0xfe/0x250 [ 160.814703][T10889] ____sys_recvmsg+0x218/0x6b0 [ 160.814720][T10889] ? __pfx_____sys_recvmsg+0x10/0x10 [ 160.814740][T10889] ? __lock_acquire+0x62e/0x1ce0 [ 160.814759][T10889] ___sys_recvmsg+0x114/0x1a0 [ 160.814771][T10889] ? __pfx____sys_recvmsg+0x10/0x10 [ 160.814785][T10889] ? find_held_lock+0x2b/0x80 [ 160.814805][T10889] do_recvmmsg+0x2fe/0x750 [ 160.814820][T10889] ? __pfx_do_recvmmsg+0x10/0x10 [ 160.814835][T10889] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 160.814853][T10889] ? __fget_files+0x20e/0x3c0 [ 160.814872][T10889] __x64_sys_recvmmsg+0x22a/0x280 [ 160.814886][T10889] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 160.814903][T10889] do_syscall_64+0xcd/0x4c0 [ 160.814918][T10889] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.814929][T10889] RIP: 0033:0x7f71d2b8eba9 [ 160.814937][T10889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.814947][T10889] RSP: 002b:00007f71d39fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 160.814957][T10889] RAX: ffffffffffffffda RBX: 00007f71d2dd5fa0 RCX: 00007f71d2b8eba9 [ 160.814963][T10889] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 0000000000000003 [ 160.814969][T10889] RBP: 00007f71d39fb090 R08: 0000000000000000 R09: 0000000000000000 [ 160.814974][T10889] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 160.814980][T10889] R13: 00007f71d2dd6038 R14: 00007f71d2dd5fa0 R15: 00007fff13b9d228 [ 160.814992][T10889] [ 161.021043][T10904] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1496'. [ 161.063572][T10909] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1498'. [ 161.066705][T10909] 0ªX¹¦À: renamed from caif0 [ 161.069978][T10909] 0ªX¹¦À: entered allmulticast mode [ 161.071639][T10909] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 161.224472][ T141] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 161.334707][T10918] FAULT_INJECTION: forcing a failure. [ 161.334707][T10918] name failslab, interval 1, probability 0, space 0, times 0 [ 161.339480][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.3.1502 Not tainted syzkaller #0 PREEMPT(full) [ 161.339495][T10918] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 161.339501][T10918] Call Trace: [ 161.339505][T10918] [ 161.339509][T10918] dump_stack_lvl+0x16c/0x1f0 [ 161.339528][T10918] should_fail_ex+0x512/0x640 [ 161.339543][T10918] ? fs_reclaim_acquire+0xae/0x150 [ 161.339558][T10918] ? tomoyo_encode2+0x100/0x3e0 [ 161.339573][T10918] should_failslab+0xc2/0x120 [ 161.339585][T10918] __kmalloc_noprof+0xd2/0x510 [ 161.339599][T10918] tomoyo_encode2+0x100/0x3e0 [ 161.339617][T10918] tomoyo_encode+0x29/0x50 [ 161.339633][T10918] tomoyo_realpath_from_path+0x18f/0x6e0 [ 161.339650][T10918] ? tomoyo_profile+0x47/0x60 [ 161.339662][T10918] tomoyo_path_number_perm+0x245/0x580 [ 161.339675][T10918] ? tomoyo_path_number_perm+0x237/0x580 [ 161.339689][T10918] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 161.339704][T10918] ? find_held_lock+0x2b/0x80 [ 161.339728][T10918] ? find_held_lock+0x2b/0x80 [ 161.339740][T10918] ? hook_file_ioctl_common+0x145/0x410 [ 161.339754][T10918] ? __fget_files+0x20e/0x3c0 [ 161.339768][T10918] security_file_ioctl+0x9b/0x240 [ 161.339784][T10918] __x64_sys_ioctl+0xb7/0x210 [ 161.339801][T10918] do_syscall_64+0xcd/0x4c0 [ 161.339815][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.339827][T10918] RIP: 0033:0x7f1683b8eba9 [ 161.339835][T10918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.339845][T10918] RSP: 002b:00007f16849bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 161.339854][T10918] RAX: ffffffffffffffda RBX: 00007f1683dd5fa0 RCX: 00007f1683b8eba9 [ 161.339861][T10918] RDX: 0000200000001480 RSI: 000000004048aec9 RDI: 0000000000000004 [ 161.339871][T10918] RBP: 00007f16849bb090 R08: 0000000000000000 R09: 0000000000000000 [ 161.339877][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.339882][T10918] R13: 00007f1683dd6038 R14: 00007f1683dd5fa0 R15: 00007ffc5fab1b78 [ 161.339895][T10918] [ 161.339905][T10918] ERROR: Out of memory at tomoyo_realpath_from_path. [ 161.384375][ T141] usb 9-1: Using ep0 maxpacket: 32 [ 161.432050][ T141] usb 9-1: config index 0 descriptor too short (expected 35577, got 27) [ 161.435830][ T141] usb 9-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 161.439405][ T141] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 161.442438][ T141] usb 9-1: config 1 has no interface number 0 [ 161.444923][ T141] usb 9-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 161.448276][ T141] usb 9-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 161.452490][ T141] usb 9-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 161.455849][ T141] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.467855][ T141] snd_usb_pod 9-1:1.1: Line 6 Pocket POD found [ 161.506463][T10920] overlayfs: workdir and upperdir must reside under the same mount [ 161.873339][ C2] vcan0: j1939_tp_rxtimer: 0xffff888027044c00: rx timeout, send abort [ 161.873381][ T141] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now attached [ 161.880737][ C2] vcan0: j1939_xtp_rx_abort_one: 0xffff888027044c00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session. [ 161.997297][ T40] kauditd_printk_skb: 12060 callbacks suppressed [ 161.997309][ T40] audit: type=1400 audit(1757584850.759:63488): avc: denied { bpf } for pid=10929 comm="syz.2.1506" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.021510][ T40] audit: type=1400 audit(1757584850.779:63489): avc: denied { create } for pid=10931 comm="syz.2.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 162.027648][ T40] audit: type=1400 audit(1757584850.779:63490): avc: denied { write } for pid=10931 comm="syz.2.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 162.073290][ T40] audit: type=1400 audit(1757584850.829:63491): avc: denied { ioctl } for pid=10899 comm="syz.4.1494" path="socket:[38240]" dev="sockfs" ino=38240 ioctlcmd=0xae09 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.076085][ T839] usb 9-1: USB disconnect, device number 12 [ 162.081744][ T40] audit: type=1400 audit(1757584850.829:63492): avc: denied { write } for pid=10899 comm="syz.4.1494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 162.089755][ T40] audit: type=1400 audit(1757584850.839:63493): avc: denied { mounton } for pid=10931 comm="syz.2.1507" path="/proc/1060/task/1061/net" dev="proc" ino=37382 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 162.090116][ T839] snd_usb_pod 9-1:1.1: Line 6 Pocket POD now disconnected [ 162.098367][ T40] audit: type=1400 audit(1757584850.839:63494): avc: denied { name_bind } for pid=10931 comm="syz.2.1507" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 162.134358][ T40] audit: type=1400 audit(1757584850.889:63495): avc: denied { prog_load } for pid=10931 comm="syz.2.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.140726][ T40] audit: type=1400 audit(1757584850.899:63496): avc: denied { perfmon } for pid=10931 comm="syz.2.1507" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 162.148861][ T40] audit: type=1400 audit(1757584850.899:63497): avc: denied { prog_run } for pid=10931 comm="syz.2.1507" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 162.649425][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.652375][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.655652][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.657825][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.660705][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.662926][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.665192][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.667352][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.670144][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.672283][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.673509][T10960] bridge0: port 1(syz_tun) entered blocking state [ 162.674530][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.674574][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.674610][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.674645][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.674685][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.679453][T10960] bridge0: port 1(syz_tun) entered disabled state [ 162.680059][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.682835][T10960] syz_tun: entered allmulticast mode [ 162.686070][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.689858][T10960] syz_tun: entered promiscuous mode [ 162.690145][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.694188][T10960] bridge0: port 1(syz_tun) entered blocking state [ 162.694970][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.697322][T10960] bridge0: port 1(syz_tun) entered forwarding state [ 162.699474][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.713653][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.716470][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.719139][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.721860][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.724681][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.727358][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.730043][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.732785][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.735564][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.738315][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.741008][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.743766][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.746616][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.749292][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.751971][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.755046][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.757800][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.760862][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.763898][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.767110][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.770234][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.773253][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.776846][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.779790][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.782554][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.784965][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.787140][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.789696][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.792736][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.796207][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.799215][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.802122][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.805645][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.808747][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.811589][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.822574][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.825539][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.827806][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.830040][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.832142][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.834185][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.837330][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.839550][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.841765][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.843897][ T63] Bluetooth: hci1: unexpected event for opcode 0x0c7b [ 162.917916][T10978] netlink: 'syz.1.1521': attribute type 10 has an invalid length. [ 162.918062][T10978] tipc: Resetting bearer [ 162.924128][T10978] team0: Cannot enslave team device to itself [ 162.942987][T10982] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 162.969115][T10986] FAULT_INJECTION: forcing a failure. [ 162.969115][T10986] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.975088][T10986] CPU: 2 UID: 0 PID: 10986 Comm: syz.2.1525 Not tainted syzkaller #0 PREEMPT(full) [ 162.975110][T10986] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 162.975121][T10986] Call Trace: [ 162.975126][T10986] [ 162.975133][T10986] dump_stack_lvl+0x16c/0x1f0 [ 162.975178][T10986] should_fail_ex+0x512/0x640 [ 162.975209][T10986] _copy_to_user+0x32/0xd0 [ 162.975237][T10986] simple_read_from_buffer+0xcb/0x170 [ 162.975257][T10986] proc_fail_nth_read+0x197/0x240 [ 162.975281][T10986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.975303][T10986] ? rw_verify_area+0xcf/0x6c0 [ 162.975329][T10986] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 162.975350][T10986] vfs_read+0x1e1/0xcf0 [ 162.975371][T10986] ? __pfx___mutex_lock+0x10/0x10 [ 162.975400][T10986] ? __pfx_vfs_read+0x10/0x10 [ 162.975423][T10986] ? __fget_files+0x20e/0x3c0 [ 162.975450][T10986] ksys_read+0x12a/0x250 [ 162.975467][T10986] ? __pfx_ksys_read+0x10/0x10 [ 162.975485][T10986] ? fput+0x9b/0xd0 [ 162.975511][T10986] do_syscall_64+0xcd/0x4c0 [ 162.975536][T10986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.975555][T10986] RIP: 0033:0x7fca8cb8d5bc [ 162.975569][T10986] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 162.975585][T10986] RSP: 002b:00007fca8d9a4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 162.975602][T10986] RAX: ffffffffffffffda RBX: 00007fca8cdd5fa0 RCX: 00007fca8cb8d5bc [ 162.975612][T10986] RDX: 000000000000000f RSI: 00007fca8d9a40a0 RDI: 0000000000000005 [ 162.975622][T10986] RBP: 00007fca8d9a4090 R08: 0000000000000000 R09: 0000000000000000 [ 162.975632][T10986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.975641][T10986] R13: 00007fca8cdd6038 R14: 00007fca8cdd5fa0 R15: 00007ffdf6aaa358 [ 162.975670][T10986] [ 163.063072][T10990] overlayfs: conflicting options: userxattr,metacopy=on [ 163.257235][T10998] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 163.488685][T11023] zonefs (nbd2) ERROR: Not a zoned block device [ 164.597876][T11051] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 164.656600][T11062] kvm: pic: single mode not supported [ 164.656613][T11062] kvm: pic: level sensitive irq not supported [ 165.359055][T11079] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.914844][T11104] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1558'. [ 165.936133][T11106] overlayfs: workdir and upperdir must reside under the same mount [ 166.146307][T11113] kvm: pic: single mode not supported [ 166.146320][T11113] kvm: pic: level sensitive irq not supported [ 166.255937][T11111] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1563'. [ 166.344275][T11130] overlayfs: workdir and upperdir must reside under the same mount [ 166.671363][T11151] "syz.4.1576" (11151) uses obsolete ecb(arc4) skcipher [ 166.929370][ T839] usb 9-1: new full-speed USB device number 13 using dummy_hcd [ 167.053572][ T40] kauditd_printk_skb: 251 callbacks suppressed [ 167.053581][ T40] audit: type=1400 audit(1758109399.815:63749): avc: denied { remount } for pid=11152 comm="syz.3.1577" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 167.080504][ T839] usb 9-1: not running at top speed; connect to a high speed hub [ 167.083794][ T839] usb 9-1: config 1 interface 0 altsetting 18 endpoint 0x1 has invalid maxpacket 1024, setting to 64 [ 167.087153][ T839] usb 9-1: config 1 interface 0 altsetting 18 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 167.091226][ T839] usb 9-1: config 1 interface 0 has no altsetting 0 [ 167.094921][ T839] usb 9-1: New USB device found, idVendor=03f0, idProduct=0004, bcdDevice= 0.40 [ 167.097667][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.100235][ T839] usb 9-1: Product: 쭲舞ﯤ氞辸뵾ᅯᔕÆÑ­ã²î—¢ï¬žÄ¢æ½¹å‡±ä©¼áŽ¶á…Šá€”ãƒ¤æ ·ë¢Šä®å™ªì˜Œâ»®ã¥€é’šá¨™éš»å§ˆâ¥£çµ—뛫ȣ驇퉂㊂ပ삗藧⟤é˜ï­šâº›í‘†äµ›æ°‚暮ء䤼濄矎燱蠨劋뱲嬢ሿ껞 [ 167.106593][ T839] usb 9-1: Manufacturer: 뇂꥜漈줰代竦䘓硫䉃㥕ä¶è ë”°ã¼ïŸã¶²ê©œï³å®‹é±Ñﲯá«è°¹â™µê¤®×¼æ‘”î–©ë•¡é³…à®­Ì탥é­ê¡¯ãºƒä«­ìº½ì¦¼à¼½ä¿¹è‹œáªê‰ŽâŠ°ï‹—é¢¼á¾€ä¯¸æê§“ꎒç½è™¯î‚£ëµ˜ë¿¡áœ¹êªŠî®”툠渧㹃䜢푭㳰ꊑ疾쭃瘨放쾙镓㩖ë„ä¨ºì¾¡è³¢ã…™ë¯æ°ºÉ‡ä”™ä³•텙鹥ᚉ欟꩔ [ 167.115317][ T839] usb 9-1: SerialNumber: ã·Ÿã½á†§å”°Â‰à¦¯ä‚«ë”…鴱ɦ텗è®ê±á•žæ¤´å–œä …鄲鰙쎀ᑓ븱馊⧠纈焪瀰挫ೌ彩鎱ゾᓩ䨛ꡩ蘚둩룷詞⤢䛱졖냖ꢠ믖æ²à¿¦ë…§î™¦áž¹âžà¨‡ç®â½Ÿê³›å·¡×°ç¸ˆç½€å±•賙✺äˆèœ±ç…²éŒ‘픣膶櫎뙠嗌昇ﭵⴥ딂䨇跂飋ᦋ倹⬅≗㶄署肯㡖譎㊕祮땅훸凶巸 [ 167.126806][T11151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.129581][T11151] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 167.145763][ T40] audit: type=1400 audit(1758109399.905:63750): avc: denied { read write } for pid=5971 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.154384][ T40] audit: type=1400 audit(1758109399.905:63751): avc: denied { open } for pid=5971 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.162857][ T40] audit: type=1400 audit(1758109399.905:63752): avc: denied { ioctl } for pid=5971 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 167.211699][ T40] audit: type=1400 audit(1758109399.975:63753): avc: denied { read } for pid=11154 comm="syz.3.1578" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.216700][T11155] binder: 11154:11155 ioctl c018620c 200000000000 returned -1 [ 167.218908][ T40] audit: type=1400 audit(1758109399.975:63754): avc: denied { open } for pid=11154 comm="syz.3.1578" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.229369][ T40] audit: type=1400 audit(1758109399.975:63755): avc: denied { ioctl } for pid=11154 comm="syz.3.1578" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 167.256696][ T40] audit: type=1400 audit(1758109400.015:63756): avc: denied { mount } for pid=11159 comm="syz.3.1579" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 167.368026][T11164] overlayfs: workdir and upperdir must reside under the same mount [ 167.388716][ T40] audit: type=1400 audit(1758109400.145:63757): avc: denied { read write } for pid=11161 comm="syz.2.1580" name="vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.396510][ T40] audit: type=1400 audit(1758109400.145:63758): avc: denied { open } for pid=11161 comm="syz.2.1580" path="/dev/vbi8" dev="devtmpfs" ino=1029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 167.649179][ T63] Bluetooth: hci0: command tx timeout [ 168.161435][T11162] 9pnet_fd: p9_fd_create_tcp (11162): problem connecting socket to 127.0.0.1 [ 168.238090][T11180] kvm: pic: single mode not supported [ 168.238108][T11180] kvm: pic: level sensitive irq not supported [ 169.132116][T11197] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 169.140160][T11197] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 169.681805][ T839] usb 9-1: USB disconnect, device number 13 [ 169.700043][T11209] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1595'. [ 169.840187][T11219] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 169.885767][T11223] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1599'. [ 169.923632][T11223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11223 comm=syz.3.1599 [ 169.932483][T11221] syz.4.1600 (11221) used greatest stack depth: 19576 bytes left [ 169.954931][T11228] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1601'. [ 170.278822][T11255] bond0: entered allmulticast mode [ 170.281352][T11255] bond_slave_0: entered allmulticast mode [ 170.283731][T11255] bond_slave_1: entered allmulticast mode [ 170.311932][T11257] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1613'. [ 170.345334][T11257] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1613'. [ 170.384588][T11257] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1613'. [ 170.398492][T11263] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1614'. [ 170.399961][T11257] workqueue: Failed to create a rescuer kthread for wq "phy5": -EINTR [ 170.404640][T11263] netlink: 'syz.3.1614': attribute type 1 has an invalid length. [ 170.448650][ T63] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 170.452606][ T63] Bluetooth: Wrong link type (-22) [ 170.454783][ T63] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 170.457022][ T63] Bluetooth: Wrong link type (-22) [ 170.459385][ T63] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 170.462033][ T63] Bluetooth: Wrong link type (-22) [ 170.464985][ T63] Bluetooth: hci0: link tx timeout [ 170.465371][T11269] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1614'. [ 170.467678][ T63] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 170.672941][T11288] CIFS mount error: No usable UNC path provided in device string! [ 170.672941][T11288] [ 170.676401][T11288] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 171.501403][T11320] kvm: pic: single mode not supported [ 171.501421][T11320] kvm: pic: level sensitive irq not supported [ 172.106042][ T40] kauditd_printk_skb: 242 callbacks suppressed [ 172.106055][ T40] audit: type=1400 audit(1758109404.865:64001): avc: denied { read write } for pid=11348 comm="syz.2.1637" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.110564][T11349] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11349 comm=syz.2.1637 [ 172.125511][ T40] audit: type=1400 audit(1758109404.865:64002): avc: denied { open } for pid=11348 comm="syz.2.1637" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.135151][ T40] audit: type=1400 audit(1758109404.865:64003): avc: denied { ioctl } for pid=11348 comm="syz.2.1637" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 172.144239][T11353] tmpfs: Unknown parameter 'usrquotlimit' [ 172.145858][ T40] audit: type=1400 audit(1758109404.885:64004): avc: denied { read write } for pid=5973 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.157429][ T40] audit: type=1400 audit(1758109404.885:64005): avc: denied { open } for pid=5973 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.167180][ T40] audit: type=1400 audit(1758109404.885:64006): avc: denied { ioctl } for pid=5973 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 172.177588][ T40] audit: type=1400 audit(1758109404.915:64007): avc: denied { create } for pid=11352 comm="syz.2.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.185964][ T40] audit: type=1400 audit(1758109404.915:64008): avc: denied { getopt } for pid=11352 comm="syz.2.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 172.193859][ T40] audit: type=1400 audit(1758109404.915:64009): avc: denied { write } for pid=11352 comm="syz.2.1638" name="fib_trie" dev="proc" ino=4026533209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 172.203000][ T40] audit: type=1400 audit(1758109404.915:64010): avc: denied { map_create } for pid=11352 comm="syz.2.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 172.321845][T11373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1640'. [ 172.325608][T11373] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.328772][T11373] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.332730][T11373] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.335917][T11373] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.340792][T11373] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 172.343129][T11373] batman_adv: batadv0: Removing interface: ipvlan2 [ 172.462438][T11379] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 172.465896][T11379] block device autoloading is deprecated and will be removed. [ 172.532200][ T5327] Bluetooth: hci0: command 0x0406 tx timeout [ 172.578610][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 172.633608][T11398] netlink: 'syz.4.1650': attribute type 7 has an invalid length. [ 172.636764][T11398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1650'. [ 172.666099][T11398] bridge1: port 1(bond2) entered blocking state [ 172.669911][T11398] bridge1: port 1(bond2) entered disabled state [ 172.672510][T11398] bond2: entered allmulticast mode [ 172.950520][T11430] loop6: detected capacity change from 0 to 63 [ 172.955273][T11430] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.958424][T11430] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.962752][ T8306] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.966871][T11430] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.970150][ T8306] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.974204][T11430] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.976560][T11430] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.980297][ T8306] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.984135][ T8306] Buffer I/O error on dev loop6, logical block 0, async page read [ 172.986619][T11421] Buffer I/O error on dev loop6, logical block 0, async page read [ 173.649298][ T839] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 173.812557][ T839] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 173.815827][ T839] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.819288][ T839] usb 7-1: Product: syz [ 173.820844][ T839] usb 7-1: Manufacturer: syz [ 173.822710][ T839] usb 7-1: SerialNumber: syz [ 173.830500][ T839] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 173.853713][ T6008] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 174.198380][T11473] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 174.266458][ T53] usb 7-1: USB disconnect, device number 7 [ 174.929321][ T6008] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 174.933071][ T6008] ath9k_htc: Failed to initialize the device [ 174.935660][ T53] usb 7-1: ath9k_htc: USB layer deinitialized [ 175.251214][ T53] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 175.307537][ T63] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 175.343987][T11494] netlink: 'syz.3.1678': attribute type 64 has an invalid length. [ 175.346405][T11494] netlink: 'syz.3.1678': attribute type 4 has an invalid length. [ 175.348797][T11494] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1678'. [ 175.409190][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 175.412494][ T53] usb 7-1: config 0 has an invalid interface number: 247 but max is 0 [ 175.415176][ T53] usb 7-1: config 0 has no interface number 0 [ 175.418554][ T53] usb 7-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b [ 175.421534][ T53] usb 7-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0 [ 175.424251][ T53] usb 7-1: Product: syz [ 175.425675][ T53] usb 7-1: Manufacturer: syz [ 175.429650][ T53] usb 7-1: config 0 descriptor?? [ 175.570366][T11505] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1682'. [ 175.697039][T11511] /dev/sg0: Can't lookup blockdev [ 176.694064][ T141] usb 7-1: USB disconnect, device number 8 [ 176.929397][ T5327] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 176.931577][ T5327] Bluetooth: Wrong link type (-22) [ 176.933212][ T5327] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 176.935193][ T5327] Bluetooth: Wrong link type (-22) [ 176.936749][ T5327] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 176.938759][ T5327] Bluetooth: Wrong link type (-22) [ 177.189958][ T40] kauditd_printk_skb: 204 callbacks suppressed [ 177.189971][ T40] audit: type=1400 audit(1758109409.955:64215): avc: denied { read } for pid=11544 comm="syz.3.1696" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 177.201338][ T40] audit: type=1400 audit(1758109409.955:64216): avc: denied { open } for pid=11544 comm="syz.3.1696" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 177.210122][ T40] audit: type=1400 audit(1758109409.955:64217): avc: denied { ioctl } for pid=11544 comm="syz.3.1696" path="/dev/input/event0" dev="devtmpfs" ino=941 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 177.243744][ T40] audit: type=1400 audit(1758109410.005:64218): avc: denied { ioctl } for pid=11549 comm="syz.2.1697" path="/dev/video2" dev="devtmpfs" ino=957 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 177.253345][ T40] audit: type=1400 audit(1758109410.015:64219): avc: denied { write } for pid=11549 comm="syz.2.1697" name="config" dev="proc" ino=4026533399 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 177.332619][ T40] audit: type=1400 audit(1758109410.095:64220): avc: denied { create } for pid=11553 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.340207][ T40] audit: type=1400 audit(1758109410.095:64221): avc: denied { setopt } for pid=11553 comm="syz.4.1699" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 177.340825][T11554] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 177.340837][T11555] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 177.343113][T11555] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 177.346287][ T40] audit: type=1400 audit(1758109410.095:64222): avc: denied { name_bind } for pid=11553 comm="syz.4.1699" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 177.361771][ T40] audit: type=1400 audit(1758109410.095:64223): avc: denied { name_bind } for pid=11553 comm="syz.4.1699" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 177.368331][ T40] audit: type=1400 audit(1758109410.095:64224): avc: denied { node_bind } for pid=11553 comm="syz.4.1699" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 177.388278][T11554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.470386][T11554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.562503][T11554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.621438][T11554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.649288][ T5327] Bluetooth: hci0: command 0x0406 tx timeout [ 177.716013][ T8015] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.727080][ T8015] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.738115][ T8015] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.750367][ T8015] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.836358][T11561] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11561 comm=syz.4.1700 [ 178.078837][T11566] netlink: 'syz.3.1702': attribute type 29 has an invalid length. [ 178.082387][T11566] netlink: 'syz.3.1702': attribute type 29 has an invalid length. [ 178.085445][T11566] netlink: 500 bytes leftover after parsing attributes in process `syz.3.1702'. [ 178.091995][T11566] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1702'. [ 178.095348][ T63] Bluetooth: hci2: unexpected event for opcode 0x1408 [ 178.201948][T11572] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1257 sclass=netlink_route_socket pid=11572 comm=syz.2.1705 [ 178.341494][T11585] kvm: pic: single mode not supported [ 178.341506][T11585] kvm: pic: level sensitive irq not supported [ 178.945245][T11596] netlink: 1752 bytes leftover after parsing attributes in process `syz.3.1711'. [ 179.020654][ T5327] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 179.024216][ T5327] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 179.028207][ T5327] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 179.032696][ T5327] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 179.036130][ T5327] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 179.165007][T11597] chnl_net:caif_netlink_parms(): no params data found [ 179.256109][T11597] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.258135][T11597] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.260365][T11597] bridge_slave_0: entered allmulticast mode [ 179.263628][T11597] bridge_slave_0: entered promiscuous mode [ 179.268271][T11597] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.271248][T11597] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.273558][T11597] bridge_slave_1: entered allmulticast mode [ 179.276133][T11597] bridge_slave_1: entered promiscuous mode [ 179.321394][T11597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.328013][ T8610] bridge0: port 1(syz_tun) entered disabled state [ 179.339028][ T8610] syz_tun (unregistering): left allmulticast mode [ 179.342701][ T8610] syz_tun (unregistering): left promiscuous mode [ 179.344748][ T8610] bridge0: port 1(syz_tun) entered disabled state [ 179.352299][T11597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.385628][T11597] team0: Port device team_slave_0 added [ 179.389363][T11597] team0: Port device team_slave_1 added [ 179.422693][T11597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.424993][T11597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.433829][T11597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.438224][T11597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.441558][T11597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.450502][T11597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 179.480732][T11615] usb usb5: usbfs: process 11615 (syz.2.1715) did not claim interface 0 before use [ 179.513063][T11597] hsr_slave_0: entered promiscuous mode [ 179.515660][T11597] hsr_slave_1: entered promiscuous mode [ 179.519996][T11597] debugfs: 'hsr0' already exists in 'hsr' [ 179.522427][T11597] Cannot create hsr debugfs directory [ 179.616950][ T8011] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.622650][ T8011] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.693888][T11597] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 179.698169][T11597] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 179.704766][T11597] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 179.710366][T11597] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 179.757898][ T8011] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.761339][ T8011] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.780246][T11597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.790613][T11597] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.796030][ T8013] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.798326][ T8013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.805813][ T8014] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.808810][ T8014] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.817441][T11649] tmpfs: Unknown parameter 'ghardlimit' [ 179.833937][ T8011] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.838014][ T8011] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.904556][ T8011] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 179.908380][ T8011] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.969669][T11597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.290668][ T8011] bond0 (unregistering): Released all slaves [ 180.358540][ T8011] bond1 (unregistering): Released all slaves [ 180.435386][ T8011] bond2 (unregistering): Released all slaves [ 180.511264][ T8011] bond3 (unregistering): Released all slaves [ 180.600311][ T8011] tipc: Disabling bearer [ 180.622857][ T8011] tipc: Left network mode [ 180.633072][T11597] veth0_vlan: entered promiscuous mode [ 180.639008][T11597] veth1_vlan: entered promiscuous mode [ 180.651432][ T5327] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 180.680357][T11597] veth0_macvtap: entered promiscuous mode [ 180.694069][T11683] overlayfs: missing 'lowerdir' [ 180.700149][T11597] veth1_macvtap: entered promiscuous mode [ 180.714001][T11597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.724603][T11597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.735386][ T8010] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.738390][ T8010] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.746268][ T8010] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.750796][ T8010] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.809016][T11693] binder: 11692:11693 ioctl c0306201 200000000540 returned -22 [ 180.812984][T11693] binder: 11692:11693 ioctl c0306201 200000000640 returned -22 [ 180.831547][ T8012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.834829][ T8012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.854103][ T8012] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 180.857046][ T8012] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.969019][T11705] tipc: Started in network mode [ 180.973396][T11705] tipc: Node identity 722f25e6578a, cluster identity 4711 [ 180.976333][T11705] tipc: Enabled bearer , priority 0 [ 180.980066][T11705] syzkaller0: entered promiscuous mode [ 180.982424][T11705] syzkaller0: entered allmulticast mode [ 180.990328][T11705] syzkaller0: mtu less than device minimum [ 181.008290][T11703] tipc: Resetting bearer [ 181.025694][T11703] tipc: Disabling bearer [ 181.035960][ T8011] hsr_slave_0: left promiscuous mode [ 181.038317][ T8011] hsr_slave_1: left promiscuous mode [ 181.052490][ T8011] veth1_macvtap: left promiscuous mode [ 181.054580][ T8011] veth0_macvtap: left promiscuous mode [ 181.056473][ T8011] veth1_vlan: left promiscuous mode [ 181.089141][ T5327] Bluetooth: hci4: command tx timeout [ 181.089951][T11712] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1735'. [ 181.097681][ T8011] pim6reg13 (unregistering): left allmulticast mode [ 181.113185][ T8011] pimreg3 (unregistering): left allmulticast mode [ 181.192805][T11725] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=11725 comm=syz.5.1735 [ 181.680853][T11734] tmpfs: Bad value for 'usrquota_block_hardlimit' [ 181.729706][ T5327] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 182.221804][T11732] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 182.225807][T11738] bond0: left allmulticast mode [ 182.227420][T11738] bond_slave_0: left allmulticast mode [ 182.229434][T11738] bond_slave_1: left allmulticast mode [ 182.259176][ T40] kauditd_printk_skb: 252 callbacks suppressed [ 182.259192][ T40] audit: type=1400 audit(1758109415.005:64477): avc: denied { egress } for pid=8012 comm="kworker/u32:16" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:netif_t tclass=netif permissive=1 [ 182.284813][ T5327] Bluetooth: hci0: unexpected event for opcode 0x1408 [ 182.293476][ T40] audit: type=1400 audit(1758109415.005:64478): avc: denied { sendto } for pid=8012 comm="kworker/u32:16" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::16 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 182.302020][ T40] audit: type=1400 audit(1758109415.015:64479): avc: denied { search } for pid=5679 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.310489][ T40] audit: type=1400 audit(1758109415.015:64480): avc: denied { search } for pid=5679 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.318977][ T40] audit: type=1400 audit(1758109415.015:64481): avc: denied { search } for pid=5679 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 182.330387][ T40] audit: type=1400 audit(1758109415.015:64482): avc: denied { sendto } for pid=8012 comm="kworker/u32:16" saddr=fe80::a8aa:aaff:feaa:aa1b daddr=ff02::2 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 182.338134][ T40] audit: type=1400 audit(1758109415.015:64483): avc: denied { read write } for pid=5973 comm="syz-executor" name="loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.345794][ T40] audit: type=1400 audit(1758109415.015:64484): avc: denied { open } for pid=5973 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.356229][ T40] audit: type=1400 audit(1758109415.015:64485): avc: denied { ioctl } for pid=5973 comm="syz-executor" path="/dev/loop2" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 182.367274][ T40] audit: type=1400 audit(1758109415.035:64486): avc: denied { create } for pid=11743 comm="syz.4.1746" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 182.401816][T11756] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11756 comm=syz.4.1749 [ 182.437565][ T5327] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 182.619205][ T60] usb 8-1: new low-speed USB device number 10 using dummy_hcd [ 182.800897][ T60] usb 8-1: config index 0 descriptor too short (expected 1307, got 27) [ 182.804204][ T60] usb 8-1: config 0 has an invalid interface number: 0 but max is -1 [ 182.807430][ T60] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 182.811563][ T60] usb 8-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 182.815942][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 182.820277][ T60] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 182.824234][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 182.841919][ T60] usb 8-1: string descriptor 0 read error: -22 [ 182.844622][ T60] usb 8-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 182.848521][ T60] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 182.860941][ T60] usb 8-1: config 0 descriptor?? [ 182.865274][ T60] hub 8-1:0.0: bad descriptor, ignoring hub [ 182.867728][ T60] hub 8-1:0.0: probe with driver hub failed with error -5 [ 182.877137][ T60] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input10 [ 182.889223][ T141] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 182.893609][T11784] veth0: entered promiscuous mode [ 182.901320][T11783] veth0: left promiscuous mode [ 183.045887][ T141] usb 9-1: New USB device found, idVendor=0fe9, idProduct=db55, bcdDevice=69.fb [ 183.048683][ T141] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=201 [ 183.054862][ T141] usb 9-1: Product: syz [ 183.056620][ T141] usb 9-1: Manufacturer: syz [ 183.058536][ T141] usb 9-1: SerialNumber: syz [ 183.068425][ T141] usb 9-1: config 0 descriptor?? [ 183.073288][ T141] dvb-usb: found a 'DigitalNow DVB-T Dual USB' in warm state. [ 183.076239][ T141] dvb-usb: bulk message failed: -22 (2/0) [ 183.091660][ T141] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 183.095250][ T141] dvbdev: DVB: registering new adapter (DigitalNow DVB-T Dual USB) [ 183.098725][T11802] kvm: pic: single mode not supported [ 183.098832][T11802] kvm: pic: level sensitive irq not supported [ 183.098862][ T141] usb 9-1: media controller created [ 183.127605][ T141] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 183.138059][ T60] usb 8-1: USB disconnect, device number 10 [ 183.179479][ T5327] Bluetooth: hci4: command tx timeout [ 183.274780][T11780] dvb-usb: bulk message failed: -22 (4/0) [ 183.277929][T11780] cxusb: i2c read failed [ 183.285409][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 183.288461][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 183.295711][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1755'. [ 183.296756][ T8011] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.298454][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1755'. [ 183.302325][ T8011] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.306593][ T8011] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.309756][ T8011] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 183.314369][ T141] cxusb: set interface failed [ 183.315885][ T141] dvb-usb: bulk message failed: -22 (1/0) [ 183.338775][ T141] DVB: Unable to find symbol mt352_attach() [ 183.342670][ T141] dvb-usb: bulk message failed: -22 (5/0) [ 183.345424][ T141] zl10353_read_register: readreg error (reg=127, ret==-121) [ 183.348438][ T141] dvb-usb: no frontend was attached by 'DigitalNow DVB-T Dual USB' [ 183.409729][ T141] rc_core: IR keymap rc-dvico-mce not found [ 183.412261][ T141] Registered IR keymap rc-empty [ 183.417325][ T141] rc rc0: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0 [ 183.423645][ T141] input: DigitalNow DVB-T Dual USB as /devices/platform/dummy_hcd.4/usb9/9-1/rc/rc0/input11 [ 183.431578][ T141] dvb-usb: schedule remote query interval to 100 msecs. [ 183.434519][ T141] dvb-usb: DigitalNow DVB-T Dual USB successfully initialized and connected. [ 183.441742][ T141] usb 9-1: USB disconnect, device number 14 [ 183.495428][ T141] dvb-usb: DigitalNow DVB-T Dual USB successfully deinitialized and disconnected. [ 183.851259][T11827] binder: 11826:11827 ioctl c0306201 200000000540 returned -22 [ 183.854209][T11827] binder: 11826:11827 ioctl c0306201 200000000640 returned -22 [ 183.987903][T11829] loop3: detected capacity change from 0 to 7 [ 183.992962][T11829] Dev loop3: unable to read RDB block 7 [ 183.995039][T11829] loop3: unable to read partition table [ 183.996890][T11829] loop3: partition table beyond EOD, truncated [ 183.999798][T11829] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 184.040572][T11846] vivid-003: ================= START STATUS ================= [ 184.043028][T11846] vivid-003: Radio HW Seek Mode: Bounded [ 184.046895][T11846] vivid-003: Radio Programmable HW Seek: false [ 184.048881][T11846] vivid-003: RDS Rx I/O Mode: Block I/O [ 184.050892][T11846] vivid-003: Generate RBDS Instead of RDS: false [ 184.052857][T11846] vivid-003: RDS Reception: true [ 184.054354][T11846] vivid-003: RDS Program Type: 0 inactive [ 184.056142][T11846] vivid-003: RDS PS Name: inactive [ 184.058220][T11846] vivid-003: RDS Radio Text: inactive [ 184.060890][T11846] vivid-003: RDS Traffic Announcement: false inactive [ 184.064044][T11846] vivid-003: RDS Traffic Program: false inactive [ 184.066905][T11846] vivid-003: RDS Music: false inactive [ 184.070014][T11846] vivid-003: ================== END STATUS ================== [ 184.072702][ T53] libceph: connect (1)[c::]:6789 error -101 [ 184.077182][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 184.097849][T11854] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 184.151384][T11860] tmpfs: Bad value for 'huge' [ 184.154751][T11862] binder: 11861:11862 ioctl c0306201 200000000540 returned -22 [ 184.157366][T11862] binder: 11861:11862 ioctl c0306201 200000000640 returned -22 [ 184.212941][T11871] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1777'. [ 184.216160][T11872] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1777'. [ 184.230886][T11871] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11871 comm=syz.5.1777 [ 184.349835][ T53] libceph: connect (1)[c::]:6789 error -101 [ 184.352469][ T53] libceph: mon0 (1)[c::]:6789 connect error [ 184.466147][T11894] binder: 11893:11894 ioctl c0306201 200000000640 returned -22 [ 184.491115][T11898] netlink: 'syz.2.1786': attribute type 1 has an invalid length. [ 184.508046][T11898] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 184.519850][T11898] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 184.557712][T11910] macvlan4: entered promiscuous mode [ 184.560053][T11910] macvlan4: entered allmulticast mode [ 184.562171][T11910] bond2: entered promiscuous mode [ 184.564191][T11910] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 184.569577][T11910] bond2: left promiscuous mode [ 184.729143][T11934] program syz.2.1798 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 184.745681][T11931] can: request_module (can-proto-0) failed. [ 184.749991][T11931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11931 comm=syz.3.1797 [ 184.755868][T11931] netlink: 'syz.3.1797': attribute type 1 has an invalid length. [ 184.764799][T11939] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 184.768170][T11939] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 184.788526][T11931] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64528 sclass=netlink_route_socket pid=11931 comm=syz.3.1797 [ 184.842072][T11945] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1801'. [ 184.846137][T11945] netem: unknown loss type 12 [ 184.848604][T11945] netem: change failed [ 184.851738][T11945] netlink: 'syz.2.1801': attribute type 7 has an invalid length. [ 184.860555][ T840] libceph: connect (1)[c::]:6789 error -101 [ 184.863035][ T840] libceph: mon0 (1)[c::]:6789 connect error [ 184.871554][T11848] ceph: No mds server is up or the cluster is laggy [ 184.920586][ T5327] Bluetooth: hci0: unexpected event for opcode 0x2003 [ 185.000694][T11956] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1805'. [ 185.023139][ T8013] Bluetooth: hci1: Frame reassembly failed (-84) [ 185.029579][ T24] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 185.182094][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64 [ 185.186509][ T24] usb 8-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 185.192930][ T24] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 185.196839][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 185.200220][ T24] usb 8-1: Product: syz [ 185.203008][ T24] usb 8-1: Manufacturer: syz [ 185.204750][ T24] usb 8-1: SerialNumber: syz [ 185.319922][T11979] vimc link validate: Scaler:src:16x16 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 185.473352][ T24] cdc_ncm 8-1:1.0: bind() failure [ 185.479213][ T24] cdc_ncm 8-1:1.1: CDC Union missing and no IAD found [ 185.481963][ T24] cdc_ncm 8-1:1.1: bind() failure [ 185.491267][ T24] usb 8-1: USB disconnect, device number 11 [ 185.670047][T11993] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1817'. [ 186.033128][T12013] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1821'. [ 186.068585][T12019] program syz.3.1823 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 186.529689][ T63] Bluetooth: hci4: command tx timeout [ 186.654140][T12044] netlink: 'syz.3.1831': attribute type 6 has an invalid length. [ 187.089171][ T5327] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 187.280339][ T40] kauditd_printk_skb: 433 callbacks suppressed [ 187.280349][ T40] audit: type=1400 audit(1758109420.045:64920): avc: denied { read write } for pid=12087 comm="syz.5.1844" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 187.291434][ T40] audit: type=1400 audit(1758109420.045:64921): avc: denied { open } for pid=12087 comm="syz.5.1844" path="/dev/video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 187.301923][ T40] audit: type=1400 audit(1758109420.045:64922): avc: denied { ioctl } for pid=12087 comm="syz.5.1844" path="/dev/video7" dev="devtmpfs" ino=974 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 187.310590][ T40] audit: type=1400 audit(1758109420.045:64923): avc: denied { mount } for pid=12087 comm="syz.5.1844" name="/" dev="9p" ino=35913823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 187.320684][ T40] audit: type=1400 audit(1758109420.055:64924): avc: denied { unmount } for pid=11597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 187.396833][ T40] audit: type=1400 audit(1758109420.155:64925): avc: denied { read } for pid=12091 comm="syz.5.1846" name="card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.406252][ T40] audit: type=1400 audit(1758109420.155:64926): avc: denied { open } for pid=12091 comm="syz.5.1846" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.419376][ T40] audit: type=1400 audit(1758109420.165:64927): avc: denied { ioctl } for pid=12091 comm="syz.5.1846" path="/dev/dri/card0" dev="devtmpfs" ino=635 ioctlcmd=0x64b2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.428124][ T40] audit: type=1400 audit(1758109420.165:64928): avc: denied { map } for pid=12091 comm="syz.5.1846" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.436325][ T40] audit: type=1400 audit(1758109420.165:64929): avc: denied { execute } for pid=12091 comm="syz.5.1846" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 187.513146][T12097] @0Ù: renamed from bond_slave_1 (while UP) [ 187.778940][T12114] kvm: pic: single mode not supported [ 187.778958][T12114] kvm: pic: level sensitive irq not supported [ 187.893107][T12127] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.899268][T12127] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.903394][T12127] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.906485][T12127] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.070853][T12139] SELinux: policydb magic number 0x4b07fa81 does not match expected magic number 0xf97cff8c [ 188.074078][T12139] SELinux: failed to load policy [ 188.225070][T12150] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 188.231926][T12150] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 188.235091][T12150] overlayfs: failed to set xattr on upper [ 188.237513][T12150] overlayfs: ...falling back to redirect_dir=nofollow. [ 188.241759][T12150] overlayfs: ...falling back to metacopy=off. [ 188.243813][T12150] overlayfs: ...falling back to index=off. [ 188.245743][T12150] overlayfs: ...falling back to uuid=null. [ 188.342354][T12162] FAULT_INJECTION: forcing a failure. [ 188.342354][T12162] name failslab, interval 1, probability 0, space 0, times 0 [ 188.347758][T12162] CPU: 3 UID: 0 PID: 12162 Comm: syz.4.1871 Not tainted syzkaller #0 PREEMPT(full) [ 188.347782][T12162] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 188.347794][T12162] Call Trace: [ 188.347800][T12162] [ 188.347807][T12162] dump_stack_lvl+0x16c/0x1f0 [ 188.347853][T12162] should_fail_ex+0x512/0x640 [ 188.347879][T12162] ? __kmalloc_noprof+0xbf/0x510 [ 188.347898][T12162] ? lsm_blob_alloc+0x68/0x90 [ 188.347914][T12162] should_failslab+0xc2/0x120 [ 188.347933][T12162] __kmalloc_noprof+0xd2/0x510 [ 188.347956][T12162] lsm_blob_alloc+0x68/0x90 [ 188.347974][T12162] security_prepare_creds+0x30/0x270 [ 188.347991][T12162] prepare_creds+0x56f/0x7d0 [ 188.348012][T12162] copy_creds+0xa7/0xa50 [ 188.348032][T12162] copy_process+0xff6/0x7690 [ 188.348063][T12162] ? __pfx_copy_process+0x10/0x10 [ 188.348093][T12162] ? _copy_from_user+0x59/0xd0 [ 188.348120][T12162] kernel_clone+0xfc/0x930 [ 188.348140][T12162] ? get_pid_task+0xfc/0x250 [ 188.348157][T12162] ? __pfx_kernel_clone+0x10/0x10 [ 188.348191][T12162] __do_sys_clone3+0x212/0x290 [ 188.348215][T12162] ? __pfx___do_sys_clone3+0x10/0x10 [ 188.348251][T12162] ? __fget_files+0x20e/0x3c0 [ 188.348288][T12162] do_syscall_64+0xcd/0x4c0 [ 188.348315][T12162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.348332][T12162] RIP: 0033:0x7f5d5958eba9 [ 188.348343][T12162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.348360][T12162] RSP: 002b:00007f5d5a372f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 188.348378][T12162] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5d5958eba9 [ 188.348387][T12162] RDX: 00007f5d5a372f20 RSI: 0000000000000058 RDI: 00007f5d5a372f20 [ 188.348397][T12162] RBP: 00007f5d5a373090 R08: 0000000000000000 R09: 0000000000000058 [ 188.348408][T12162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.348418][T12162] R13: 00007f5d597d6038 R14: 00007f5d597d5fa0 R15: 00007fff35bb8a98 [ 188.348441][T12162] [ 188.451266][T12158] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 188.456184][T12158] bond0 (unregistering): (slave c@0Ù): Releasing backup interface [ 188.460676][T12158] bond0 (unregistering): Released all slaves [ 188.563830][T12184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.650177][T12201] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 188.652365][T12201] overlayfs: failed to set xattr on upper [ 188.654150][T12201] overlayfs: ...falling back to redirect_dir=nofollow. [ 188.656370][T12201] overlayfs: ...falling back to index=off. [ 188.658303][T12201] overlayfs: ...falling back to uuid=null. [ 188.665861][T12201] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 188.702339][T12211] __nla_validate_parse: 5 callbacks suppressed [ 188.702355][T12211] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1883'. [ 188.798348][T12214] netlink: 'syz.3.1882': attribute type 10 has an invalid length. [ 188.819985][T12214] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 189.134725][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1888'. [ 189.138839][T12232] binder: 12231:12232 ioctl c0306201 200000000640 returned -22 [ 189.194138][T12236] kvm: pic: single mode not supported [ 189.194171][T12236] kvm: pic: level sensitive irq not supported [ 189.409142][ T29] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 189.514091][T12208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.579376][ T29] usb 9-1: Using ep0 maxpacket: 32 [ 189.583012][ T29] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 189.585590][ T29] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 189.589135][ T29] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 189.592590][ T29] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 189.596617][ T29] usb 9-1: config 0 interface 0 has no altsetting 0 [ 189.600469][ T29] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 189.603274][ T29] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 189.605834][ T29] usb 9-1: Product: syz [ 189.607190][ T29] usb 9-1: Manufacturer: syz [ 189.608661][ T29] usb 9-1: SerialNumber: syz [ 189.614045][ T29] usb 9-1: config 0 descriptor?? [ 189.620259][ T29] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 189.625133][ T29] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 189.878668][T12235] ldusb 9-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71 [ 189.879031][ T10] usb 9-1: USB disconnect, device number 15 [ 189.879122][ C0] ldusb 9-1:0.0: usb_submit_urb failed (-19) [ 189.887878][ T10] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 190.132357][T12247] program syz.5.1894 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.136268][T12247] ata1.00: invalid service action 31 [ 190.290058][ T63] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 190.293298][ T63] Bluetooth: Wrong link type (-22) [ 190.295662][ T63] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 190.297978][ T63] Bluetooth: Wrong link type (-22) [ 190.299919][ T63] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 190.302349][ T63] Bluetooth: Wrong link type (-22) [ 190.339524][ T10] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 190.405419][T12268] FAULT_INJECTION: forcing a failure. [ 190.405419][T12268] name failslab, interval 1, probability 0, space 0, times 0 [ 190.409665][T12268] CPU: 0 UID: 0 PID: 12268 Comm: syz.5.1902 Not tainted syzkaller #0 PREEMPT(full) [ 190.409680][T12268] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 190.409687][T12268] Call Trace: [ 190.409690][T12268] [ 190.409695][T12268] dump_stack_lvl+0x16c/0x1f0 [ 190.409713][T12268] should_fail_ex+0x512/0x640 [ 190.409727][T12268] ? __kvmalloc_node_noprof+0x124/0x620 [ 190.409739][T12268] should_failslab+0xc2/0x120 [ 190.409751][T12268] __kvmalloc_node_noprof+0x137/0x620 [ 190.409762][T12268] ? alloc_fdtable+0x10b/0x2d0 [ 190.409775][T12268] ? alloc_fdtable+0x10b/0x2d0 [ 190.409784][T12268] alloc_fdtable+0x10b/0x2d0 [ 190.409795][T12268] dup_fd+0x83b/0xb90 [ 190.409810][T12268] copy_process+0x230c/0x7690 [ 190.409831][T12268] ? __pfx_copy_process+0x10/0x10 [ 190.409848][T12268] ? _copy_from_user+0x59/0xd0 [ 190.409865][T12268] kernel_clone+0xfc/0x930 [ 190.409879][T12268] ? get_pid_task+0xfc/0x250 [ 190.409889][T12268] ? __pfx_kernel_clone+0x10/0x10 [ 190.409911][T12268] __do_sys_clone3+0x212/0x290 [ 190.409925][T12268] ? __pfx___do_sys_clone3+0x10/0x10 [ 190.409945][T12268] ? __fget_files+0x20e/0x3c0 [ 190.409965][T12268] do_syscall_64+0xcd/0x4c0 [ 190.409980][T12268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.409991][T12268] RIP: 0033:0x7fda7938eba9 [ 190.409999][T12268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.410008][T12268] RSP: 002b:00007fda7a24ff08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 190.410019][T12268] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fda7938eba9 [ 190.410025][T12268] RDX: 00007fda7a24ff20 RSI: 0000000000000058 RDI: 00007fda7a24ff20 [ 190.410031][T12268] RBP: 00007fda7a250090 R08: 0000000000000000 R09: 0000000000000058 [ 190.410037][T12268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 190.410043][T12268] R13: 00007fda795d6038 R14: 00007fda795d5fa0 R15: 00007ffd8ee06d08 [ 190.410055][T12268] [ 190.500980][ T10] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 190.503931][ T10] usb 9-1: config 1 has no interface number 0 [ 190.506340][ T10] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 8 [ 190.509904][ T10] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0xC has invalid maxpacket 64 [ 190.513277][ T10] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0xA has an invalid bInterval 77, changing to 10 [ 190.518773][ T10] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 190.523907][ T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.526856][ T10] usb 9-1: Product: syz [ 190.528345][ T10] usb 9-1: Manufacturer: syz [ 190.530244][ T10] usb 9-1: SerialNumber: syz [ 190.535522][T12235] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.538317][T12235] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 190.543159][ T10] usb 9-1: Error in usbnet_get_endpoints (-22) [ 190.615421][T12272] kvm: pic: single mode not supported [ 190.615441][T12272] kvm: pic: level sensitive irq not supported [ 191.181221][T12281] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1907'. [ 191.186306][T12281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1907'. [ 191.190035][T12281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1907'. [ 191.509269][ T839] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 191.521664][T12292] block nbd5: Unsupported socket: shutdown callout must be supported. [ 191.619702][ T63] Bluetooth: Unknown BR/EDR signaling command 0x0d [ 191.622330][ T63] Bluetooth: Wrong link type (-22) [ 191.624405][ T63] Bluetooth: Unknown BR/EDR signaling command 0x10 [ 191.626942][ T63] Bluetooth: Wrong link type (-22) [ 191.629002][ T63] Bluetooth: Unknown BR/EDR signaling command 0x11 [ 191.633164][ T63] Bluetooth: Wrong link type (-22) [ 191.659414][ T839] usb 8-1: Using ep0 maxpacket: 16 [ 191.662952][ T839] usb 8-1: config 0 has no interfaces? [ 191.666834][ T839] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 191.670440][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.673502][ T839] usb 8-1: Product: syz [ 191.675147][ T839] usb 8-1: Manufacturer: syz [ 191.677041][ T839] usb 8-1: SerialNumber: syz [ 191.682084][ T839] usb 8-1: config 0 descriptor?? [ 191.949401][ T29] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 191.962170][ T141] usb 8-1: USB disconnect, device number 12 [ 191.988644][T12305] FAULT_INJECTION: forcing a failure. [ 191.988644][T12305] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 191.995011][T12305] CPU: 3 UID: 0 PID: 12305 Comm: syz.3.1914 Not tainted syzkaller #0 PREEMPT(full) [ 191.995034][T12305] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 191.995045][T12305] Call Trace: [ 191.995051][T12305] [ 191.995058][T12305] dump_stack_lvl+0x16c/0x1f0 [ 191.995086][T12305] should_fail_ex+0x512/0x640 [ 191.995114][T12305] _copy_from_user+0x2e/0xd0 [ 191.995140][T12305] copy_msghdr_from_user+0x98/0x160 [ 191.995164][T12305] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 191.995197][T12305] ___sys_sendmsg+0xfe/0x1d0 [ 191.995220][T12305] ? __pfx____sys_sendmsg+0x10/0x10 [ 191.995271][T12305] __sys_sendmsg+0x16d/0x220 [ 191.995294][T12305] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.995331][T12305] do_syscall_64+0xcd/0x4c0 [ 191.995356][T12305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.995382][T12305] RIP: 0033:0x7f1683b8eba9 [ 191.995397][T12305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.995413][T12305] RSP: 002b:00007f16849bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.995429][T12305] RAX: ffffffffffffffda RBX: 00007f1683dd5fa0 RCX: 00007f1683b8eba9 [ 191.995441][T12305] RDX: 0000000000000004 RSI: 0000200000000380 RDI: 0000000000000004 [ 191.995451][T12305] RBP: 00007f16849bb090 R08: 0000000000000000 R09: 0000000000000000 [ 191.995462][T12305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.995471][T12305] R13: 00007f1683dd6038 R14: 00007f1683dd5fa0 R15: 00007ffc5fab1b78 [ 191.995494][T12305] [ 192.152267][ T29] usb 10-1: config index 0 descriptor too short (expected 45, got 36) [ 192.156119][ T29] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 192.164658][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 192.170314][ T29] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 192.175505][ T29] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 192.182309][ T29] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 192.185977][ T29] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.196877][ T29] usb 10-1: config 0 descriptor?? [ 192.201361][T12299] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 192.271304][ T54] usb 9-1: USB disconnect, device number 16 [ 192.322268][ T40] kauditd_printk_skb: 233 callbacks suppressed [ 192.322279][ T40] audit: type=1400 audit(1758109425.085:65163): avc: denied { create } for pid=12319 comm="syz.3.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.358766][ T40] audit: type=1400 audit(1758109425.095:65164): avc: denied { write } for pid=12319 comm="syz.3.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.380073][ T40] audit: type=1400 audit(1758109425.095:65165): avc: denied { read } for pid=12319 comm="syz.3.1918" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 192.387441][ T40] audit: type=1400 audit(1758109425.095:65166): avc: denied { read write } for pid=12319 comm="syz.3.1918" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.404794][T12318] can0: slcan on ttyS3. [ 192.408229][ T40] audit: type=1400 audit(1758109425.095:65167): avc: denied { open } for pid=12319 comm="syz.3.1918" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.419142][ T40] audit: type=1400 audit(1758109425.095:65168): avc: denied { ioctl } for pid=12319 comm="syz.3.1918" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x4110 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 192.427773][ T40] audit: type=1400 audit(1758109425.095:65169): avc: denied { create } for pid=12317 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 192.436266][ T40] audit: type=1400 audit(1758109425.105:65170): avc: denied { create } for pid=12317 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.445145][ T40] audit: type=1400 audit(1758109425.105:65171): avc: denied { bind } for pid=12317 comm="syz.4.1919" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 192.451769][ T40] audit: type=1400 audit(1758109425.125:65172): avc: denied { remove_name } for pid=12321 comm="rm" name="resolv.conf.cfttyS3.link" dev="tmpfs" ino=6775 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 192.490712][T12318] can0 (unregistered): slcan off ttyS3. [ 192.533104][T12332] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1921'. [ 192.564888][ T63] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 192.616094][ T29] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xd [ 192.632674][ T29] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 192.738014][T12346] /dev/nullb0: Can't open blockdev [ 192.784228][T12348] FAULT_INJECTION: forcing a failure. [ 192.784228][T12348] name failslab, interval 1, probability 0, space 0, times 0 [ 192.788192][T12348] CPU: 1 UID: 0 PID: 12348 Comm: syz.4.1928 Not tainted syzkaller #0 PREEMPT(full) [ 192.788206][T12348] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 192.788212][T12348] Call Trace: [ 192.788216][T12348] [ 192.788220][T12348] dump_stack_lvl+0x16c/0x1f0 [ 192.788238][T12348] should_fail_ex+0x512/0x640 [ 192.788252][T12348] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 192.788265][T12348] should_failslab+0xc2/0x120 [ 192.788277][T12348] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 192.788287][T12348] ? copy_process+0x400f/0x7690 [ 192.788304][T12348] copy_process+0x400f/0x7690 [ 192.788323][T12348] ? __pfx_copy_process+0x10/0x10 [ 192.788344][T12348] ? _copy_from_user+0x59/0xd0 [ 192.788361][T12348] kernel_clone+0xfc/0x930 [ 192.788374][T12348] ? get_pid_task+0xfc/0x250 [ 192.788384][T12348] ? __pfx_kernel_clone+0x10/0x10 [ 192.788405][T12348] __do_sys_clone3+0x212/0x290 [ 192.788419][T12348] ? __pfx___do_sys_clone3+0x10/0x10 [ 192.788447][T12348] ? __fget_files+0x20e/0x3c0 [ 192.788478][T12348] do_syscall_64+0xcd/0x4c0 [ 192.788495][T12348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.788506][T12348] RIP: 0033:0x7f5d5958eba9 [ 192.788514][T12348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.788524][T12348] RSP: 002b:00007f5d5a372f08 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 192.788533][T12348] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f5d5958eba9 [ 192.788540][T12348] RDX: 00007f5d5a372f20 RSI: 0000000000000058 RDI: 00007f5d5a372f20 [ 192.788546][T12348] RBP: 00007f5d5a373090 R08: 0000000000000000 R09: 0000000000000058 [ 192.788551][T12348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 192.788557][T12348] R13: 00007f5d597d6038 R14: 00007f5d597d5fa0 R15: 00007fff35bb8a98 [ 192.788569][T12348] [ 192.814765][T12299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 192.815898][ C1] vkms_vblank_simulate: vblank timer overrun [ 192.868303][T12299] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 192.923892][T12350] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1929'. [ 192.943998][ T141] usb 10-1: USB disconnect, device number 2 [ 192.985335][T12353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1930'. [ 192.991179][T12353] QAT: Invalid ioctl -2144835806 [ 193.351495][T12365] dvmrp8: left allmulticast mode [ 193.499350][T12374] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1936'. [ 193.527447][T12380] binder: 12378:12380 ioctl c0306201 0 returned -14 [ 193.574488][T12383] kvm: pic: single mode not supported [ 193.574500][T12383] kvm: pic: level sensitive irq not supported [ 193.745161][T12405] mac80211_hwsim hwsim13 : renamed from wlan1 (while UP) [ 193.837061][T12414] can0: slcan on ttyS3. [ 194.301908][T12454] @0Ù: renamed from bond_slave_1 (while UP) [ 194.380334][T12460] fuse: Bad value for 'fd' [ 194.439210][T12464] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1959'. [ 194.447656][T12469] 9p: Unknown Cache mode or invalid value fs [ 194.493752][T12402] overlayfs: statfs failed on './file0' [ 194.500940][T12477] NILFS (nbd4): device size too small [ 194.510073][T12477] tipc: New replicast peer: 255.255.255.255 [ 194.512858][T12477] tipc: Enabled bearer , priority 10 [ 194.517139][T12480] 9p: Unknown Cache mode or invalid value fs [ 194.837421][T12506] bond3: entered promiscuous mode [ 194.850455][T12511] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1971'. [ 194.904692][ T63] Bluetooth: hci3: ACL packet for unknown connection handle 200 [ 194.951921][T12517] kvm: pic: single mode not supported [ 194.951942][T12517] kvm: pic: level sensitive irq not supported [ 195.129547][ T24] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 195.280884][ T24] usb 10-1: Using ep0 maxpacket: 32 [ 195.285610][ T24] usb 10-1: config index 0 descriptor too short (expected 35577, got 27) [ 195.290600][ T24] usb 10-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 195.294426][ T24] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 195.298727][ T24] usb 10-1: config 1 has no interface number 0 [ 195.301722][ T24] usb 10-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 195.306159][ T24] usb 10-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 195.314672][T12543] /dev/nullb0: Can't open blockdev [ 195.317408][ T24] usb 10-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 195.321943][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 195.338452][ T24] snd_usb_pod 10-1:1.1: Line 6 Pocket POD found [ 195.451019][T12554] block nbd3: Attempted send on invalid socket [ 195.454397][T12554] I/O error, dev nbd3, sector 2 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 195.459201][T12554] EXT4-fs (nbd3): unable to read superblock [ 195.498470][T12557] program syz.3.1984 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 195.504381][T12557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1984'. [ 195.508880][T12557] netlink: 'syz.3.1984': attribute type 10 has an invalid length. [ 195.515169][T12557] team0: Device ipvlan1 failed to register rx_handler [ 195.519505][ T6029] tipc: Node number set to 3342593313 [ 195.737717][ T24] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now attached [ 195.912096][T12579] xfrm1: entered allmulticast mode [ 195.942775][ T53] usb 10-1: USB disconnect, device number 3 [ 195.945551][ T53] snd_usb_pod 10-1:1.1: Line 6 Pocket POD now disconnected [ 195.988683][T12589] overlayfs: failed to resolve './file1': -2 [ 196.121805][T12602] netlink: 'syz.4.2001': attribute type 24 has an invalid length. [ 196.125120][ T63] Bluetooth: hci0: SCO packet for unknown connection handle 201 [ 196.183078][T12610] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888000000000 pfn:0x2f6d6 [ 196.189019][T12610] memcg:ffff8881000aa700 [ 196.190450][T12610] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 196.192991][T12610] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 196.195592][T12610] raw: ffff888000000000 0000000000000000 00000001ffffffff ffff8881000aa700 [ 196.198537][T12610] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 196.201992][T12610] page_owner tracks the page as allocated [ 196.204389][T12610] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 12610, tgid 12608 (syz.4.2004), ts 196183065136, free_ts 194066516969 [ 196.211304][T12610] post_alloc_hook+0x1c0/0x230 [ 196.213542][T12610] get_page_from_freelist+0x132b/0x38e0 [ 196.216404][T12610] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 196.218443][T12610] alloc_pages_mpol+0x1fb/0x550 [ 196.219387][T12614] netlink: 'syz.3.2005': attribute type 1 has an invalid length. [ 196.220091][T12610] folio_alloc_noprof+0x20/0x2d0 [ 196.225171][T12610] filemap_alloc_folio_noprof+0x3a1/0x470 [ 196.227033][T12610] page_cache_ra_order+0x4e1/0xd70 [ 196.228714][T12610] filemap_fault+0x152e/0x2930 [ 196.230433][T12610] __do_fault+0x10d/0x490 [ 196.231843][T12610] do_pte_missing+0xf50/0x3ba0 [ 196.233430][T12610] __handle_mm_fault+0x152a/0x2a50 [ 196.236644][T12610] handle_mm_fault+0x589/0xd10 [ 196.238300][T12610] __get_user_pages+0x551/0x34a0 [ 196.241029][T12610] populate_vma_page_range+0x267/0x3f0 [ 196.242996][T12610] __mm_populate+0x1d8/0x380 [ 196.244467][T12610] vm_mmap_pgoff+0x37f/0x470 [ 196.245943][T12610] page last free pid 12437 tgid 12436 stack trace: [ 196.248765][T12610] __free_frozen_pages+0x7d5/0x10f0 [ 196.251357][T12610] vfree+0x1fd/0xb50 [ 196.253279][T12610] snd_dma_free_pages+0x54/0x70 [ 196.255672][T12610] snd_pcm_lib_free_pages+0x172/0x390 [ 196.258265][T12610] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 196.260396][T12614] bond6: (slave vxcan1): The slave device specified does not support setting the MAC address [ 196.261210][T12610] snd_pcm_release_substream+0x5b/0x70 [ 196.267313][T12614] bond6: (slave vxcan1): Error -95 calling set_mac_address [ 196.267741][T12610] snd_pcm_oss_release+0x135/0x310 [ 196.273008][T12610] __fput+0x3ff/0xb70 [ 196.274700][T12610] task_work_run+0x150/0x240 [ 196.276625][T12610] exit_to_user_mode_loop+0xeb/0x110 [ 196.278773][T12610] do_syscall_64+0x3f6/0x4c0 [ 196.281227][T12610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.284456][T12610] ------------[ cut here ]------------ [ 196.286771][T12610] kernel BUG at mm/filemap.c:867! [ 196.288946][T12610] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 196.292357][T12610] CPU: 1 UID: 0 PID: 12610 Comm: syz.4.2004 Not tainted syzkaller #0 PREEMPT(full) [ 196.297480][T12610] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 196.301891][T12610] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 196.304459][T12610] Code: 77 c8 ff 48 c7 c6 20 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 e5 77 c8 ff 48 c7 c6 80 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 ce 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 77 c8 ff 48 [ 196.312635][T12610] RSP: 0018:ffffc90003617460 EFLAGS: 00010293 [ 196.315178][T12610] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 196.318517][T12610] RDX: ffff888025728000 RSI: ffffffff81f316fa RDI: ffff888025728444 [ 196.321810][T12610] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 196.325097][T12610] R10: ffffffff90ab6d97 R11: 0000000000000003 R12: 0000000000000002 [ 196.328529][T12610] R13: ffffea0000bdb580 R14: 0000000000000000 R15: 000000000002c928 [ 196.331949][T12610] FS: 00007f5d5a3526c0(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000 [ 196.335665][T12610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.338442][T12610] CR2: 0000555591914808 CR3: 0000000026548000 CR4: 0000000000352ef0 [ 196.341775][T12610] Call Trace: [ 196.343201][T12610] [ 196.344466][T12610] ? rcu_is_watching+0x12/0xc0 [ 196.346493][T12610] ? __pfx___filemap_add_folio+0x10/0x10 [ 196.348847][T12610] filemap_add_folio+0x10e/0x220 [ 196.349395][T12620] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2005'. [ 196.350932][T12610] ? __pfx_filemap_add_folio+0x10/0x10 [ 196.350955][T12610] ? css_rstat_updated+0x1c2/0x510 [ 196.350980][T12610] page_cache_ra_order+0x5a7/0xd70 [ 196.361273][T12610] filemap_fault+0x152e/0x2930 [ 196.363380][T12610] ? __pfx_filemap_fault+0x10/0x10 [ 196.365596][T12610] ? __pfx_filemap_map_pages+0x10/0x10 [ 196.367875][T12610] __do_fault+0x10d/0x490 [ 196.369739][T12610] ? __pfx_filemap_map_pages+0x10/0x10 [ 196.371989][T12610] do_pte_missing+0xf50/0x3ba0 [ 196.374032][T12610] ? mtree_range_walk+0x718/0xc00 [ 196.376152][T12610] ? find_held_lock+0x2b/0x80 [ 196.378142][T12610] __handle_mm_fault+0x152a/0x2a50 [ 196.380375][T12610] ? __pfx___handle_mm_fault+0x10/0x10 [ 196.382765][T12610] handle_mm_fault+0x589/0xd10 [ 196.384848][T12610] __get_user_pages+0x551/0x34a0 [ 196.386940][T12610] ? __pfx___get_user_pages+0x10/0x10 [ 196.389202][T12610] populate_vma_page_range+0x267/0x3f0 [ 196.391501][T12610] ? __pfx_populate_vma_page_range+0x10/0x10 [ 196.394040][T12610] ? __pfx_find_vma_intersection+0x10/0x10 [ 196.396482][T12610] __mm_populate+0x1d8/0x380 [ 196.398469][T12610] ? __pfx___mm_populate+0x10/0x10 [ 196.400645][T12610] ? up_write+0x1b2/0x520 [ 196.402490][T12610] vm_mmap_pgoff+0x37f/0x470 [ 196.404454][T12610] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 196.406651][T12610] ? __fget_files+0x20e/0x3c0 [ 196.408667][T12610] ksys_mmap_pgoff+0x32c/0x5c0 [ 196.410732][T12610] __x64_sys_mmap+0x125/0x190 [ 196.412820][T12610] do_syscall_64+0xcd/0x4c0 [ 196.414799][T12610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.417301][T12610] RIP: 0033:0x7f5d5958eba9 [ 196.419199][T12610] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.427252][T12610] RSP: 002b:00007f5d5a352038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 196.430835][T12610] RAX: ffffffffffffffda RBX: 00007f5d597d6090 RCX: 00007f5d5958eba9 [ 196.434038][T12610] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 196.437231][T12610] RBP: 00007f5d59611e19 R08: 0000000000000004 R09: 000000002c93a000 [ 196.440512][T12610] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 196.444039][T12610] R13: 00007f5d597d6128 R14: 00007f5d597d6090 R15: 00007fff35bb8a98 [ 196.447476][T12610] [ 196.448762][T12610] Modules linked in: [ 196.450640][ C1] vkms_vblank_simulate: vblank timer overrun [ 196.453897][T12610] ---[ end trace 0000000000000000 ]--- [ 196.457016][T12610] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 196.459393][T12618] gretap2: entered promiscuous mode [ 196.459812][T12610] Code: 77 c8 ff 48 c7 c6 20 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 e5 77 c8 ff 48 c7 c6 80 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 ce 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 c0 77 c8 ff 48 [ 196.463122][T12618] bond6: (slave gretap2): making interface the new active one [ 196.470349][T12610] RSP: 0018:ffffc90003617460 EFLAGS: 00010293 [ 196.472565][T12618] bond6: (slave gretap2): Enslaving as an active interface with an up link [ 196.474676][T12610] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 196.474689][T12610] RDX: ffff888025728000 RSI: ffffffff81f316fa RDI: ffff888025728444 [ 196.474702][T12610] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 196.490721][T12610] R10: ffffffff90ab6d97 R11: 0000000000000003 R12: 0000000000000002 [ 196.494054][T12610] R13: ffffea0000bdb580 R14: 0000000000000000 R15: 000000000002c928 [ 196.497248][T12610] FS: 00007f5d5a3526c0(0000) GS:ffff8880d67b5000(0000) knlGS:0000000000000000 [ 196.501329][T12610] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.504193][T12610] CR2: 0000555591914808 CR3: 0000000026548000 CR4: 0000000000352ef0 [ 196.507450][T12610] Kernel panic - not syncing: Fatal exception [ 196.510725][T12610] Kernel Offset: disabled [ 196.512572][T12610] Rebooting in 86400 seconds.. VM DIAGNOSIS: 10:01:25 Registers: info registers vcpu 0 CPU#0 RAX=000000000015b1f4 RBX=0000000000000000 RCX=ffffffff8b946c29 RDX=ffffed100d486656 RSI=ffffffff8c162c80 RDI=ffffffff81913111 RBP=fffffbfff1c52ef8 RSP=ffffffff8e207e08 R8 =0000000000000000 R9 =ffffed100d486655 R10=ffff88806a4332ab R11=0000000000000000 R12=0000000000000000 R13=ffffffff8e2977c0 R14=ffffffff90ab6d90 R15=0000000000000000 RIP=ffffffff8b94578f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3dad2d CR3=000000000011c000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ee07090 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ee07216 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd8ee07216 00007ffd8ee0721c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda79412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda79412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda79412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda79412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda79412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fda79412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85647c75 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90003616d88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552031203a555043 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b115060 R15=ffffffff85647c10 RIP=ffffffff85647c9f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f5d5a3526c0 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000555591914808 CR3=0000000026548000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf6aaa6e0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf6aaa866 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffdf6aaa866 00007ffdf6aaa86c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca8cc12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca8cc12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca8cc12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca8cc12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca8cc12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fca8cc12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000119a44 RBX=0000000000000002 RCX=ffffffff8b946c29 RDX=ffffed100d4c6656 RSI=ffffffff8c162c80 RDI=ffffffff81913111 RBP=ffffed1003bd7910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6655 R10=ffff88806a6332ab R11=0000000000000000 R12=0000000000000002 R13=ffff88801debc880 R14=ffffffff90ab6d90 R15=0000000000000000 RIP=ffffffff8b94578f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5d5a351f98 CR3=0000000026548000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=000000000000003f Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000800000007 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff35bb8fa6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff35bb8fa6 00007fff35bb8fac ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d59612e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d59612e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d59612e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d59612e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d59612ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5d59612fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c76 0004001400040004 000500048017000c 0000000600050008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 17001c0000000000 11020800e8000a00 0003030303030300 1800000700080006 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5300050000000000 000000000000306e 616c760004001400 0400040005000480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000115ffc RBX=0000000000000003 RCX=ffffffff8b946c29 RDX=ffffed100d4e6656 RSI=ffffffff8c162c80 RDI=ffffffff81913111 RBP=ffffed1003bda000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000000 R12=0000000000000003 R13=ffff88801ded0000 R14=ffffffff90ab6d90 R15=0000000000000000 RIP=ffffffff8b94578f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c47df8c CR3=0000000035bae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=00000000000032e7 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=00000000e8000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5fab1f00 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5fab2086 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc5fab2086 00007ffc5fab208c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1683c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1683c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1683c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1683c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1683c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1683c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000