last executing test programs: 31.838245701s ago: executing program 2 (id=858): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/consoles\x00', 0x0, 0x0) read$hiddev(r0, &(0x7f00000000c0)=""/192, 0xc0) openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x1) ioctl(r2, 0x9a, 0x0) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000040)=""/10, 0xa}], 0x1) 31.705625324s ago: executing program 2 (id=859): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)='\\', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)) r2 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_FORWARD(r2, 0x40084149, &(0x7f0000000300)=0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001240)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x602, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x93}, [{0x0, 0x3}, {}, {0x0, 0x0, 0x0, 0x0, 0x4757}, {}, {}, {}, {}, {}, {0x0, 0x4}, {}, {0x0, 0x10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffff7}, {0x800}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x1000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}, {}, {0x0, 0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {0x0, 0x0, 0x200}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x800000, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0xfff}, {}, {0x0, 0x0, 0x2}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x5}, {0xc}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {0x10000000}, {}, {}, {}, {}, {}, {0xc2, 0x0, 0x26, 0x9}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {0x2}, {}, {}, {}, {0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {0x1, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) r5 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r7, @ANYBLOB="08001b"], 0x34}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x4000, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000001200010003950000000000000a0900004001000000000000000000000000ffff"], 0x4c}}, 0x0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r10, &(0x7f00000002c0)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x1fe1, @multicast1}, {0xa000, 0x6558, 0x8}}}}}}, 0x2e) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r5, 0xc08c5332, &(0x7f0000000040)={0xbbe, 0x5, 0x0, 'queue0\x00', 0x2}) 28.691551992s ago: executing program 2 (id=890): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4c015) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000600), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000780)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010b00000000000000000c00000008000300", @ANYRES32=r3], 0x1c}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) (async, rerun: 32) r5 = socket(0x10, 0x3, 0x0) (rerun: 32) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="5400000010000100"/20, @ANYRES32=r7, @ANYBLOB="7240146c00000000340012800c0001006d6163766c616e00240002800800010010000000100009"], 0x54}}, 0x0) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r2, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x1c}}, 0x1) (async, rerun: 64) r8 = socket(0x10, 0x803, 0x0) (async, rerun: 64) r9 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000140)=0x638a, 0x4) (async) setsockopt$CAN_RAW_FD_FRAMES(r9, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000440)={'vcan0\x00', 0x0}) sendmsg$can_raw(r9, &(0x7f00000004c0)={&(0x7f0000000380)={0x1d, r10, 0x3}, 0x10, &(0x7f0000000080)={&(0x7f0000000300)=@canfd={{}, 0x0, 0x0, 0x0, 0x0, "621105b0ae0282d478b6b01305946c16afcea96765fbac1cd8aabe71d5522a79da5a1d57b5fc63320300f05aab6e543ac6e500"}, 0x48}, 0x1, 0x0, 0x0, 0x8081}, 0x0) (async) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffffffe}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x13}]}}}]}]}], {0x14}}, 0xd8}, 0x1, 0x0, 0x0, 0x8815}, 0x24000004) syz_emit_ethernet(0x4a, &(0x7f0000000140)=ANY=[@ANYBLOB="aae265ddaad30800eda92bf631835b6d1ccaac8a140600fe8000000000000000000000000000aafe8000000000000000000400000000aa000340018603d49cbeca4e3342613a603128db05fd05b8e3195fc7c30d1d89", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000580)='tracefs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@generic={&(0x7f0000000b00)='./file0\x00'}, 0x18) (async, rerun: 64) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) (rerun: 64) sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)={0x38, r12, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x8, 0x3, 0x0, 0x1, [{0x4}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) 27.768023001s ago: executing program 0 (id=894): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000001c0)="d80000001e0081054e81f782060000000000000006007c095dd2466518000e800a00142603600e12", 0x28}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b000701000000000ce2aa66027c00000400000014000180066ea6d07128"], 0x2c}}, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000180)=0xffff0018) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r3 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) connect$unix(r3, &(0x7f0000000400)=@file={0x1, './file0\x00'}, 0x6e) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01082abd7000fcffffff0b00000008000300", @ANYRES32=r5, @ANYBLOB="0a000600080211000001000030005080110001004abee339086ceef16f162471f4000000050009000100000005000200000000000800030008ac0f"], 0x58}, 0x1, 0x0, 0x0, 0x24008054}, 0x0) sendmsg$NL80211_CMD_FLUSH_PMKSA(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x28, r2, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x10000, 0x5}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000001c00)={'#! ', './file0', [{0x20, '#! '}, {0x20, '#! '}, {0x20, '*(mB\xb0F\xc9[9}-\'1:F\xf2L+\xedwU7\x1b\xcb\xed\xceR\xb6\x05\r>\xc7`r\x01\xad(\xe8\x86\xb4d\xae\xe7\xedU\xc3I\xa0\x89Z\v\x169T\xfc\xfb'}], 0xa, "2e7524d8ce7f784dc5ef1d9fbb7895a87a066e5efe145a4f2d0b9c6ef4d29306cceaea05a1314a5b98d2bcdd0bfeff6d438ab9badc8783b4"}, 0x84) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) getsockopt$inet_int(r6, 0x0, 0x33, 0x0, &(0x7f0000000080)) ioctl$SNDCTL_DSP_GETFMTS(r0, 0x8004500b, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$TCFLSH(r9, 0x400455c8, 0x9) ioctl$TIOCVHANGUP(r9, 0x5437, 0x0) ioctl$TIOCSTI(r9, 0x5412, &(0x7f00000001c0)) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x30, r11, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITE_GROUP={0x8}]]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) syz_emit_ethernet(0x8e, &(0x7f0000000080)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x80, 0x0, 0x0, 0x2, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x0, 0x0, 0x0, 0x8, 0x0, {0x19, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_addr={0x44, 0x3c, 0x0, 0x1, 0x0, [{@private=0xa010100}, {@broadcast, 0x1}, {@broadcast, 0x12f4}, {@private}, {@multicast1}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x1}}]}, @timestamp_prespec={0x44, 0x14, 0xb0, 0x3, 0x1, [{@loopback, 0x2}, {@loopback, 0x1ff}]}]}}}}}}}, 0x0) 17.988668486s ago: executing program 0 (id=895): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_usbip_server_init(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet(0x2, 0x2, 0x1) socket$can_bcm(0x1d, 0x2, 0x2) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r6, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r5]) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x4048aecb, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f00000002c0)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 17.19886962s ago: executing program 0 (id=896): prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x4) syz_emit_ethernet(0x6e, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6000104000380600fe880000000000000000000000000001fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="e4000000907800001312345f8cf949a01b519410f44cecac91ba1d02b2b653e0c9d32072c19dd6ca814b7d7b"], 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000080)=@urb_type_control={0x2, {}, 0xfffffff8, 0x45, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0xa0400000, 0x0, 0x0, 0x0, 0x20000, 0x0}) write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r2, &(0x7f0000004180)={0x2020}, 0x2020) r3 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r3, &(0x7f00000000c0)=@name, 0x10) 17.118773303s ago: executing program 0 (id=897): r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x11, 0xa, 0x0) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000380)={0x1d, 0x0, 0x1, {0x0, 0xf0}}, 0x18) write$vga_arbiter(0xffffffffffffffff, &(0x7f0000000000)=@unlock_all, 0x7) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r5, r6, 0x2, 0x2, 0x0, @void, @value}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r8) recvmsg$unix(r7, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r9, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) connect$l2tp6(r9, &(0x7f0000000180)={0xa, 0x0, 0x3000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8, 0x1}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r11, r10, 0x2, 0x0, 0x4000, @void, @value}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000140)={&(0x7f0000000000), 0x12, &(0x7f0000000080)={0x0}, 0x140}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) 15.747816425s ago: executing program 2 (id=898): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) (async, rerun: 32) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8) (rerun: 64) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async, rerun: 64) chdir(&(0x7f00000003c0)='./bus\x00') (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) (async) r2 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r2, 0x7, 0x0, 0x0, 0x0) socket$inet(0x2, 0x1, 0x8001) (async, rerun: 32) link(&(0x7f0000001240)='./file0\x00', 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={r2, 0x400, 0x0, 0x3}) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000180)=0x1, &(0x7f00000001c0)=0x4) 15.74549786s ago: executing program 0 (id=900): socket$l2tp6(0xa, 0x2, 0x73) 15.619386661s ago: executing program 2 (id=902): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) readahead(r0, 0x2, 0x8) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02030c65420002000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0x26, 0x0, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 15.618924685s ago: executing program 2 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = userfaultfd(0x801) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x18200, 0x0) r2 = userfaultfd(0x801) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x40000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r7], 0x7fffffffffe, 0x1, 0x1}) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000001140)) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$CDROMEJECT_SW(r8, 0x530f, 0x0) ioctl(r4, 0xdf0, &(0x7f0000000100)="2bdec881db701ab90c89b8a718fb44d6107bec940653e4bb265acdd0961a656422809f28629062dd3c4570a18e3c252b704763b467f6e071680d9a9d3c06d1e258ce5fc9e94ca0c94ca4245e9cb94d9ddc6fa68a80f5cb8d6d48159a3c27d3") ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r9 = socket$pppoe(0x18, 0x1, 0x0) shutdown(r9, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000f90a14000000060a0b040000000000000000020000011400000011000100000000000000003c000000000a"], 0x3c}}, 0x0) 15.558953161s ago: executing program 1 (id=904): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) eventfd(0x3) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x61, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.478276841s ago: executing program 0 (id=905): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x9, 0x2, 0x1, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) r1 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') getdents64(r1, &(0x7f0000001f00)=""/4111, 0x100f) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, {0x80, 0x73, 0x7, 0x87}}) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') stat(&(0x7f0000000080)='./file0/../file0\x00', 0x0) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) (async) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000013c0)={0x9, 0x2, 0x1, {0x5, @vbi={0xb5, 0x0, 0x3, 0x0, [0x0, 0x8000000], [0x8200, 0x1]}}}) (async) syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00') (async) getdents64(r1, &(0x7f0000001f00)=""/4111, 0x100f) (async) ioctl$VIDIOC_SUBDEV_G_SELECTION(r1, 0xc040563d, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x1, {0x80, 0x73, 0x7, 0x87}}) (async) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') (async) stat(&(0x7f0000000080)='./file0/../file0\x00', 0x0) (async) ioctl$VIDIOC_QBUF(r0, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x0, 0x10, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "001500"}, 0x0, 0x2, {}, 0x58603}) (async) 15.477584849s ago: executing program 3 (id=906): r0 = socket(0x2a, 0x80000, 0x0) (async) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mountinfo\x00') mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) (async) mount$fuse(0x20000000, &(0x7f0000000400)='./file0\x00', 0x0, 0x223216, 0x0) unshare(0x2a000400) read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x200040c}, 0x10) (async, rerun: 32) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x104) (async, rerun: 32) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='writeback_bdi_register\x00', r4}, 0x10) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='spi_message_done\x00', r5, 0x0, 0x9}, 0x18) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x5, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x7, 0x4, 0x100, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x28000600) r8 = syz_clone(0x80000080, 0x0, 0x0, 0x0, 0x0, 0x0) (async) syz_io_uring_setup(0x1d5c, &(0x7f00000002c0)={0x0, 0x2be6, 0x800, 0x1, 0xbb, 0x0, r2}, &(0x7f0000000180), &(0x7f0000000340)) r9 = syz_pidfd_open(r8, 0x0) setns(r9, 0x22000000) (async) write(r0, &(0x7f0000000000)="240000001e005f0214fffffffffffff80700000000000000000000000500080016000000", 0x24) 15.398899672s ago: executing program 1 (id=907): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='comm\x00') socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') (async) r2 = syz_open_procfs(0x0, &(0x7f0000000780)='task\x00') lseek(r2, 0x1, 0x3) preadv(r1, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) (async) read$FUSE(r2, &(0x7f00000007c0)={0x2020}, 0x2020) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x60, r3, 0xb21, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9047}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x10000}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7c5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x60}}, 0x0) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) (async) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000000), 0x141002, 0x0) write$ppp(r4, &(0x7f00000000c0)="83190f20", 0x4) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) (async) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "ff00f7000000000000000000af88008300"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TCSETSF(r6, 0x5404, &(0x7f0000000080)={0x0, 0x0, 0xfffffffc, 0x7, 0x14, "682341f2fd71a6a76177920ea7e60c0ac7a4a5"}) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r7, 0xffffffffffffffff, 0x0) (async) close_range(r7, 0xffffffffffffffff, 0x0) bind$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0xffffffff, @local}, 0x10) 15.398012385s ago: executing program 3 (id=908): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000000c0)="79608ec3004c410bfefe8e1bac435007d6a62b31a500bd46a4ca4c4326539d73c35ff53019e5784e1af71e", 0x2b}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f00000005c0)="985f", 0x2}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x11, 0x38, 0x0, 0x4d, 0xd7d, 0x0, 0x0, 0x10, 0x6}}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000200)={0x0}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000480)={{r1, 0x0, 0x100, 0x1000, 0xd748, 0x7, 0x8000000000000001, 0x80000000, 0x0, 0x1, 0x4, 0x2, 0xf2a, 0x9, 0x100000000}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]}) 15.397712105s ago: executing program 3 (id=909): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x32, &(0x7f0000000080), &(0x7f0000000000)=0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) r3 = socket$netlink(0x10, 0x3, 0x4) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) 15.33897614s ago: executing program 3 (id=910): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={0x17, r2, 0x1, 0x70bd24, 0x25dfdc00}, 0x14}}, 0x2000c050) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r3, 0x11, 0x66, &(0x7f0000000100)=0xc6, 0x4) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x7d) syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe3ffffffffffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0) r4 = openat$vim2m(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$vim2m_VIDIOC_G_FMT(r4, 0xc0d05604, &(0x7f0000000100)={0x1, @pix={0x3, 0x200, 0x34524742, 0x9, 0x5, 0x0, 0x4, 0x3, 0x1, 0x4, 0x2, 0x5}}) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0xd1a486b95d977236}, 0xc) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r6, {0x2, 0x0, @local}, 0x2}}, 0x26) r7 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r7, &(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @multicast2}, 0x2, 0xfffffffd}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x3, 0x20000000, 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x2ecf4c3cfa7a16df) 15.33859059s ago: executing program 3 (id=911): mkdir(&(0x7f00000022c0)='./file0\x00', 0x0) socket$inet(0x2, 0x3, 0x2) (async) socket$inet(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0800450000280000000000029068ffffffffe000000111009078e000000200000001ffffffff0000000000000000000000004e"], 0x0) write$FUSE_NOTIFY_STORE(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='/'], 0x2) r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000240), 0x400400, 0x0) ioctl$DRM_IOCTL_SET_UNIQUE(r0, 0x40106410, &(0x7f0000000280)={0x1000, &(0x7f0000000780)="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"}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x13) (async) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x13) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0x11) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04097400c900"], 0x7) openat$ndctl0(0xffffffffffffff9c, 0x0, 0x169101, 0x0) (async) r2 = openat$ndctl0(0xffffffffffffff9c, 0x0, 0x169101, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000200)={0x1, &(0x7f0000000180)=[{}]}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) munmap(&(0x7f0000003000/0x3000)=nil, 0x3000) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000100)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000140)={@my=0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002b80)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_FLAGS={0x6}]}}}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r2, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0xb70b23b4b534c4e7}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0xac, 0x0, 0x100, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_LOC_ID={0x5}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x5}]}, 0xac}, 0x1, 0x0, 0x0, 0x800}, 0x30000000) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) (async) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xb0000) ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r3, 0x7a4, &(0x7f0000000000)={{@host}, 0x20000000}) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x24000, 0x0) 15.248028899s ago: executing program 1 (id=912): ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_SYNC_FILE(0xffffffffffffffff, 0xc01064c1, &(0x7f0000000040)={r0}) r1 = userfaultfd(0x0) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}, 0x1}) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TCSBRKP(r2, 0x5425, 0xfff) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000000c0)) ioctl$TIOCGICOUNT(r2, 0x545d, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000100), 0x400200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000140)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r3, 0x3b88, &(0x7f0000000180)={0xc, r4}) r5 = syz_open_dev$vivid(&(0x7f00000001c0), 0x2, 0x2) ioctl$VIDIOC_QUERY_DV_TIMINGS(r5, 0x80845663, &(0x7f0000000200)={0x0, @reserved}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) ioctl$TUNGETDEVNETNS(r6, 0x54e3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000340)={0x5, 0x40, 0x1}) r7 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000380), 0x200500, 0x0) fsetxattr$trusted_overlay_upper(r3, &(0x7f00000003c0), &(0x7f0000000400)={0x0, 0xfb, 0x4a, 0x0, 0xb6, "86fdc9571ae53088a6eb900385797063", "ba965c0e88239e05d284cdd7cd1b4344382b57b43fdb5e50c59413259709553096a9d00b79da047c32e9a887f3dfd96c86b4aa8a48"}, 0x4a, 0x0) ioctl$TIOCGICOUNT(r6, 0x545d, 0x0) r8 = openat$nci(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$FS_IOC_GETFSSYSFSPATH(r8, 0x80811501, &(0x7f00000004c0)={0x80}) landlock_add_rule$LANDLOCK_RULE_NET_PORT(r6, 0x2, &(0x7f0000000580)={0x0, 0x7}, 0x0) lseek(r7, 0x8, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000005c0)={0x48, 0x5, r4}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) fcntl$setlease(r10, 0x400, 0x2) sendmsg$NL80211_CMD_DEL_PMK(r9, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x98, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x10, 0x9}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x98}, 0x1, 0x0, 0x0, 0x815}, 0x20000000) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x10, 0x12, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r6}}, {}, [@call={0x85, 0x0, 0x0, 0x79}, @map_val={0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0xcb5f}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000880)='syzkaller\x00', 0x6, 0x35, &(0x7f00000008c0)=""/53, 0x41000, 0x38, '\x00', 0x0, @fallback=0x2f, r6, 0x8, &(0x7f0000000900)={0x7, 0x2}, 0x8, 0x10, &(0x7f0000000940)={0x3, 0x8, 0x5, 0x5}, 0x10, 0x0, r6, 0x8, &(0x7f00000009c0)=[r6, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x4, 0x2, 0x5, 0x4}, {0x5, 0x2, 0x10, 0x9}, {0x5, 0x4, 0x5, 0x3}, {0x4, 0x5, 0xd, 0x2}, {0x3, 0x4, 0x7, 0x4}, {0x5, 0x5, 0x9, 0x5}, {0x2, 0x1, 0xd}, {0x0, 0x5, 0xe}], 0x10, 0x0, @void, @value}, 0x94) 15.167569092s ago: executing program 1 (id=913): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_DEL_TX_TS(r1, &(0x7f00000002c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4c00}, 0x4) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)='squashfs\x00', 0x0, 0x0) (async) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) (async) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(0xffffffffffffffff, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c81, 0xffffffffffffffb6) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 15.166981171s ago: executing program 3 (id=914): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x116c, &(0x7f0000000080)={0x0, 0x1ffffe, 0x10100, 0x0, 0x2001}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x4048850}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000080), 0x4) r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$msr(r8, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYRES16, @ANYRES32, @ANYRES32=r10, @ANYRES64=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x0) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) 15.166402387s ago: executing program 1 (id=915): r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = getuid() stat(&(0x7f00000023c0)='./file0\x00', &(0x7f0000002400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002600)={0x0, 0x0, 0x0}, &(0x7f0000002640)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002680)={0x0, 0x0}, &(0x7f00000026c0)=0xc) statx(0xffffffffffffffff, &(0x7f0000002700)='./file0\x00', 0x1000, 0x10, &(0x7f0000002740)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000002840)=[0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000002880)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000028c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0x0}}, './file0\x00'}) fstat(0xffffffffffffffff, &(0x7f0000002900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r17 = getegid() fstat(0xffffffffffffffff, &(0x7f0000002e80)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002f00)={0x0, 0x0, 0x0}, &(0x7f0000002f40)=0xc) syz_fuse_handle_req(r0, &(0x7f0000000040)="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", 0x2000, &(0x7f0000003080)={&(0x7f0000002040)={0x50, 0xffffffffffffffda, 0x2, {0x7, 0x29, 0xdb3d, 0x4, 0x1, 0x7, 0x9, 0xc}}, &(0x7f00000020c0)={0x18, 0xfffffffffffffffe, 0xc, {0xfffffffffffffff8}}, &(0x7f0000002100)={0x18, 0x0, 0x5, {0x7fff}}, &(0x7f0000002140)={0x18, 0x0, 0x56b6, {0x4}}, &(0x7f0000002180)={0x18, 0x0, 0x8, {0x693}}, &(0x7f00000021c0)={0x28, 0x0, 0xffffffff, {{0x4953, 0x7, 0x1}}}, &(0x7f0000002200)={0x60, 0x0, 0x5, {{0xffffffff, 0x7, 0xd, 0xffff, 0x80000000, 0x9, 0x10, 0xe}}}, &(0x7f0000002280)={0x18, 0x0, 0x81, {0x800}}, &(0x7f00000022c0)={0x14, 0xfffffffffffffff5, 0x5478, {'&-\\\x00'}}, &(0x7f0000002300)={0x20, 0x0, 0x32db, {0x0, 0x4}}, &(0x7f0000002340)={0x78, 0xfffffffffffffff5, 0x6, {0x0, 0x7, 0x0, {0x3, 0x2, 0x273, 0x1, 0xc, 0x22a3, 0x9, 0x2, 0x5, 0xa000, 0xf, r1, 0xffffffffffffffff, 0x7, 0x9}}}, &(0x7f0000002480)={0x90, 0xfffffffffffffffe, 0x7, {0x1, 0x3, 0x3, 0x80000000, 0x3, 0xe75, {0x2, 0xf59, 0x4, 0x2, 0x1, 0x1, 0x101, 0x6, 0x6, 0xa000, 0x4, 0x0, r2, 0x5, 0x6}}}, &(0x7f0000002540)={0xa8, 0x0, 0x4, [{0x1, 0x66}, {0x3, 0x2, 0xa, 0x3f8, '-:*]\xd4{{]\x98)'}, {0x3, 0x1, 0x0, 0x6}, {0x3, 0x0, 0x6, 0x1, '\'.H\',@'}, {0x2, 0x6, 0x7, 0x7fffffff, '^\x1a*^)\'.'}]}, &(0x7f0000002a00)={0x460, 0x0, 0x8, [{{0x0, 0x1, 0x2, 0x0, 0xebd1, 0x4, {0x2, 0xfffffffffffffffe, 0x8, 0x0, 0x7f, 0x1ac3c5a8, 0x8, 0x6, 0x2, 0x1000, 0x5, 0xee00, r4, 0x0, 0xffffffff}}, {0x4, 0x401, 0x2, 0x9, '\'['}}, {{0x3, 0x2, 0x9, 0x100000001, 0xfffffcc0, 0x101, {0x3, 0x7, 0xfffffffffffffffb, 0x1, 0x2, 0x2, 0x6, 0x1, 0x9, 0xa000, 0x0, r5, 0x0, 0x1, 0x6}}, {0x4, 0xfffffffffffff431, 0x0, 0x80000001}}, {{0x3, 0x2, 0xfff, 0x6, 0x40, 0x10001, {0x6, 0x7, 0x9, 0x2, 0xc, 0x1, 0x80, 0x800, 0x6, 0xc000, 0x7fff, r6, r8, 0x3, 0x400}}, {0x6, 0x0, 0xf, 0x9, ']*)%-%.()]-!)@]'}}, {{0x4, 0x3, 0xb10, 0xb5, 0x0, 0xa0, {0x1, 0x3, 0x8c8, 0x2, 0xbc82, 0x7d, 0x4, 0x73, 0x101, 0xa000, 0x2, 0xee00, r11, 0x1, 0x10000}}, {0x5, 0x7fffffffffffffff, 0x0, 0x7ff}}, {{0x6, 0x3, 0x49, 0x1cf3, 0xd, 0x8, {0x6, 0x3, 0x1, 0xf8, 0x5, 0x6e, 0x3, 0xe0000000, 0xfffffff9, 0x2000, 0xfffff800, 0xffffffffffffffff, r13, 0x8, 0x845}}, {0x5, 0xff, 0x4, 0x7, '-++,'}}, {{0x0, 0x1, 0x7f, 0xfffffffffffffff7, 0x9, 0xfffffffe, {0x6, 0x2, 0x70, 0x7104bfc6, 0x1, 0x3, 0x7fffffff, 0x3, 0x8, 0x6000, 0x400, 0xee01, r14, 0x8, 0xc01e}}, {0x5, 0x0, 0x6, 0x9, './}:,-'}}, {{0x2, 0x2, 0x328, 0x3, 0x7, 0xb07, {0x0, 0x8000, 0xa, 0xfffffffffffff323, 0x8, 0x4153, 0x40, 0x1, 0x0, 0xa000, 0xc0f, r15, r17, 0x101, 0x7f}}, {0x3, 0x4, 0x0, 0x7}}]}, &(0x7f0000002f80)={0xa0, 0x0, 0x1fffe000, {{0x1, 0x1, 0x3, 0x5, 0x3ff, 0x8, {0x2, 0x7, 0x8, 0x8001, 0x100, 0xe6e, 0x81, 0x6bf5, 0x3, 0x2000, 0x7fffffff, r18, r19, 0x25, 0x7}}, {0x0, 0x10}}}, &(0x7f0000003040)={0x20, 0x0, 0x6, {0x1, 0x4, 0x1, 0xe}}}) ioctl$VIDIOC_S_FREQUENCY(r9, 0x402c5639, &(0x7f0000003100)={0xa, 0x4, 0x5}) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xf) r20 = ioctl$KVM_CREATE_VCPU(r12, 0xae41, 0x0) ioctl$KVM_RUN(r20, 0xae80, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) get_robust_list(r3, &(0x7f0000003280)=&(0x7f0000003240)={&(0x7f0000003180)={&(0x7f0000003140)}, 0x0, &(0x7f0000003200)={&(0x7f00000031c0)}}, &(0x7f00000032c0)=0x18) lstat(&(0x7f0000003300)='./file0\x00', &(0x7f0000003340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000033c0)='./file0\x00', &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000003480)=[r16, r22, r23, r17, r2, r4]) setreuid(r21, r10) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0xb, &(0x7f00000034c0)=0xfffffe00, 0x4) r24 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r24, 0x4020ae46, &(0x7f0000003500)={0x1, 0x7, 0xffff1000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) setgroups(0x7, &(0x7f00000035c0)=[0x0, r17, r16, r19, r11, r22, r7]) 15.107459589s ago: executing program 1 (id=916): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/fib_trie\x00') r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) bind$alg(r2, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000980)) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x1}}}, 0x24}}, 0x0) fchdir(r1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000c000000080026000816"], 0x40}}, 0x0) r12 = dup(r7) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff900d00"]) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/time_for_children\x00') 75.280347ms ago: executing program 32 (id=916): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(r0, &(0x7f00000000c0)='net/fib_trie\x00') r2 = socket$alg(0x26, 0x5, 0x0) r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) bind$alg(r2, &(0x7f0000000800)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_int(r4, 0x29, 0x50, 0x0, &(0x7f0000000980)) r5 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@delqdisc={0x24, 0x25, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0x1}}}, 0x24}}, 0x0) fchdir(r1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000c215000008009f000c000000080026000816"], 0x40}}, 0x0) r12 = dup(r7) ioctl$KVM_SET_MSRS(r12, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000ebffff900d00"]) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f0000000340)='ns/time_for_children\x00') 49.102713ms ago: executing program 33 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = userfaultfd(0x801) openat$vsock(0xffffffffffffff9c, &(0x7f00000003c0), 0x18200, 0x0) r2 = userfaultfd(0x801) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x328, 0x0, 0x111, 0x4b4, 0x120, 0xd4feffff, 0x258, 0x20a, 0x278, 0x258, 0x278, 0x3, 0x0, {[{{@ipv6={@private0, @empty, [], [], 'syz_tun\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @local, [], [], 'netdevsim0\x00', 'veth1_to_bridge\x00'}, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x388) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r5, 0x401c2103, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2b, 0x0) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = syz_open_dev$dri(&(0x7f0000000040), 0x6, 0x40000) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r6, 0xc00864bf, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_SYNCOBJ_WAIT(r6, 0xc02864c3, &(0x7f0000000080)={&(0x7f0000000000)=[r7], 0x7fffffffffe, 0x1, 0x1}) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000001140)) r8 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000400), 0x40, 0x0) ioctl$CDROMEJECT_SW(r8, 0x530f, 0x0) ioctl(r4, 0xdf0, &(0x7f0000000100)="2bdec881db701ab90c89b8a718fb44d6107bec940653e4bb265acdd0961a656422809f28629062dd3c4570a18e3c252b704763b467f6e071680d9a9d3c06d1e258ce5fc9e94ca0c94ca4245e9cb94d9ddc6fa68a80f5cb8d6d48159a3c27d3") ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000600)) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000199000/0x800000)=nil, 0x800000}) r9 = socket$pppoe(0x18, 0x1, 0x0) shutdown(r9, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000f90a14000000060a0b040000000000000000020000011400000011000100000000000000003c000000000a"], 0x3c}}, 0x0) 0s ago: executing program 34 (id=914): r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x116c, &(0x7f0000000080)={0x0, 0x1ffffe, 0x10100, 0x0, 0x2001}, &(0x7f0000000180)=0x0, &(0x7f0000000200)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r2, 0x2ded, 0x4000, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRES16, @ANYRES16, @ANYBLOB="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"], 0x2d0}, 0x1, 0x0, 0x0, 0x4048850}, 0x40) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000ac0)=ANY=[@ANYRES32=r7, @ANYRES32=r6, @ANYBLOB='&\x00'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r7, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r5}, 0x20) setsockopt$inet6_tcp_int(r5, 0x6, 0x19, &(0x7f0000000080), 0x4) r8 = syz_open_dev$mouse(&(0x7f0000000000), 0x0, 0x8042) read$msr(r8, 0x0, 0x0) r9 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x822b01) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r11) sendmsg$NFC_CMD_DEV_UP(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r12, @ANYRES16, @ANYRES32, @ANYRES32=r10, @ANYRES64=r11], 0x1c}, 0x1, 0x0, 0x0, 0x4890}, 0x0) write$char_usb(r9, &(0x7f0000000040)="e2", 0x12d8) kernel console output (not intermixed with test programs): 10][ T6192] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 43.041151][ T6197] program syz.2.50 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 43.152509][ T39] kauditd_printk_skb: 123 callbacks suppressed [ 43.152519][ T39] audit: type=1400 audit(1732801747.334:238): avc: denied { write } for pid=6202 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 43.160985][ T39] audit: type=1400 audit(1732801747.334:239): avc: denied { connect } for pid=6202 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 43.202082][ T39] audit: type=1400 audit(1732801747.384:240): avc: denied { write } for pid=6202 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 43.518793][ T39] audit: type=1400 audit(1732801747.704:241): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 43.532423][ T39] audit: type=1400 audit(1732801747.714:242): avc: denied { append } for pid=6215 comm="syz.2.55" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 43.634611][ T39] audit: type=1400 audit(1732801747.814:243): avc: denied { create } for pid=6224 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.642998][ T39] audit: type=1400 audit(1732801747.814:244): avc: denied { connect } for pid=6224 comm="syz.2.58" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 43.649783][ T39] audit: type=1400 audit(1732801747.824:245): avc: denied { ioctl } for pid=6224 comm="syz.2.58" path="socket:[8999]" dev="sockfs" ino=8999 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 43.658156][ T39] audit: type=1400 audit(1732801747.844:246): avc: denied { sys_module } for pid=6224 comm="syz.2.58" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 43.678276][ T6193] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 43.681895][ T6193] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 43.685936][ T6193] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 43.719620][ T39] audit: type=1400 audit(1732801747.904:247): avc: denied { mounton } for pid=6221 comm="syz.0.56" path="/13/file0" dev="tmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 43.719735][ T6222] 9pnet_fd: p9_fd_create_unix (6222): problem connecting socket: ./file0: -111 [ 43.745229][ T6237] capability: warning: `syz.1.60' uses deprecated v2 capabilities in a way that may be insecure [ 43.805321][ T6248] capability: warning: `syz.1.60' uses 32-bit capabilities (legacy support in use) [ 43.813662][ T6247] xt_ipcomp: unknown flags 12 [ 43.833058][ T6247] mmap: syz.2.63 (6247) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 43.837970][ T6247] binder_alloc: binder_alloc_mmap_handler: 6246 20ffc000-20ffd000 already mapped failed -16 [ 43.838068][ T6253] netlink: 288 bytes leftover after parsing attributes in process `syz.0.65'. [ 43.845688][ T6253] unsupported nlmsg_type 40 [ 43.873923][ T6255] netlink: 'syz.0.66': attribute type 4 has an invalid length. [ 43.953072][ T6267] netlink: 44 bytes leftover after parsing attributes in process `syz.0.70'. [ 43.985028][ T6273] netlink: 'syz.0.72': attribute type 23 has an invalid length. [ 43.987824][ T6273] IPv6: NLM_F_CREATE should be specified when creating new route [ 44.229600][ T6296] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 44.437970][ T5947] Bluetooth: hci1: command tx timeout [ 44.438011][ T5305] Bluetooth: hci2: command tx timeout [ 44.438921][ T5950] Bluetooth: hci3: command tx timeout [ 44.440659][ T64] Bluetooth: hci0: command tx timeout [ 44.660916][ T6321] 9pnet: p9_errstr2errno: server reported unknown error @΂(QhQINd%CT535hR#m-`><}cG]kEd [ 44.696291][ T71] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 44.872401][ T71] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 44.875922][ T71] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 44.878916][ T71] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.885232][ T6310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 44.891913][ T71] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 45.089381][ T6310] fuse: Bad value for 'group_id' [ 45.090728][ T6310] fuse: Bad value for 'group_id' [ 45.131133][ T5976] usb 7-1: USB disconnect, device number 2 [ 45.306749][ T71] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 45.389562][ T6332] Bluetooth: hci4: Frame reassembly failed (-84) [ 45.392349][ T6091] Bluetooth: hci4: Frame reassembly failed (-84) [ 45.456957][ T71] usb 8-1: Using ep0 maxpacket: 8 [ 45.462414][ T71] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 45.465734][ T71] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 45.468487][ T71] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 45.471282][ T71] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 45.479380][ T71] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 45.481758][ T71] usb 8-1: New USB device strings: Mfr=0, Product=128, SerialNumber=0 [ 45.483982][ T71] usb 8-1: Product: syz [ 45.690150][ T71] usb 8-1: GET_CAPABILITIES returned 0 [ 45.691823][ T6329] netlink: 16 bytes leftover after parsing attributes in process `syz.3.88'. [ 45.692744][ T71] usbtmc 8-1:16.0: can't read capabilities [ 45.723863][ T832] usb 8-1: USB disconnect, device number 2 [ 45.760054][ T6338] program syz.2.91 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 45.948716][ T6347] program syz.3.95 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 46.049470][ T71] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 46.066688][ T5976] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 46.190880][ T6363] fuse: Bad value for 'user_id' [ 46.192306][ T6363] fuse: Bad value for 'user_id' [ 46.197444][ T5976] usb 6-1: device descriptor read/64, error -71 [ 46.200324][ T71] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 46.202982][ T71] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 46.205703][ T71] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 46.208794][ T71] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 46.211750][ T71] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 46.215913][ T71] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 46.224275][ T71] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 46.226555][ T71] usb 7-1: Product: syz [ 46.227710][ T71] usb 7-1: Manufacturer: syz [ 46.234347][ T71] cdc_wdm 7-1:1.0: skipping garbage [ 46.235768][ T71] cdc_wdm 7-1:1.0: skipping garbage [ 46.240470][ T71] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 46.242053][ T71] cdc_wdm 7-1:1.0: Unknown control protocol [ 46.251884][ T6365] netlink: 'syz.3.101': attribute type 5 has an invalid length. [ 46.438484][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 46.440413][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 46.442141][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 46.443828][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 46.445528][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 46.447780][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 46.449807][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 46.452006][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 46.454095][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 46.455867][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 46.457729][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 46.459328][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 46.461129][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 46.462765][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 46.464395][ T8] usb 7-1: USB disconnect, device number 3 [ 46.465871][ C0] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 46.465881][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 46.465888][ C0] cdc_wdm 7-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 46.472072][ T5976] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 46.516689][ T5305] Bluetooth: hci2: command tx timeout [ 46.517574][ T5947] Bluetooth: hci1: command tx timeout [ 46.518228][ T5305] Bluetooth: hci0: command tx timeout [ 46.519845][ T5947] Bluetooth: hci3: command tx timeout [ 46.536442][ T832] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 46.596644][ T5976] usb 6-1: device descriptor read/64, error -71 [ 46.706248][ T832] usb 8-1: Using ep0 maxpacket: 32 [ 46.708488][ T5976] usb usb6-port1: attempt power cycle [ 46.712187][ T832] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 46.714214][ T832] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 46.716335][ T832] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 46.718441][ T832] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 46.720691][ T832] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 46.722959][ T832] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 46.725971][ T832] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 46.728258][ T832] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.731730][ T832] usb 8-1: config 0 descriptor?? [ 46.935222][ T832] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 46.943858][ T832] usb 8-1: USB disconnect, device number 3 [ 46.949001][ T832] usblp0: removed [ 47.056244][ T5976] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 47.076982][ T5976] usb 6-1: device descriptor read/8, error -71 [ 47.316246][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 47.337463][ T5976] usb 6-1: device descriptor read/8, error -71 [ 47.396300][ T3226] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 47.396355][ T5947] Bluetooth: hci4: command 0xfc11 tx timeout [ 47.401462][ T64] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 47.446325][ T5976] usb usb6-port1: unable to enumerate USB device [ 47.566259][ T3226] usb 8-1: Using ep0 maxpacket: 32 [ 47.569341][ T3226] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 47.571539][ T3226] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 47.573795][ T3226] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 47.576369][ T3226] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 47.578897][ T3226] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 47.581353][ T3226] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 47.584680][ T3226] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 47.587118][ T3226] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.590256][ T3226] usb 8-1: config 0 descriptor?? [ 47.626233][ T5990] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 47.786294][ T5990] usb 7-1: Using ep0 maxpacket: 8 [ 47.791588][ T5990] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 47.794967][ T5990] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 47.798717][ T5990] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 47.802281][ T5990] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 47.806529][ T3226] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 47.811434][ T5990] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 47.815785][ T5990] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 47.818771][ T5990] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.025913][ T5990] usb 7-1: GET_CAPABILITIES returned 0 [ 48.027583][ T5990] usbtmc 7-1:16.0: can't read capabilities [ 48.235302][ T5990] usb 7-1: USB disconnect, device number 4 [ 48.378399][ T39] kauditd_printk_skb: 52 callbacks suppressed [ 48.378410][ T39] audit: type=1400 audit(1732801752.565:300): avc: denied { unmount } for pid=5951 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 48.397539][ T39] audit: type=1400 audit(1732801752.585:301): avc: denied { create } for pid=6383 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 48.409832][ T39] audit: type=1400 audit(1732801752.595:302): avc: denied { watch watch_reads } for pid=6383 comm="syz.0.106" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=2052 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 48.417465][ T39] audit: type=1400 audit(1732801752.595:303): avc: denied { map } for pid=6383 comm="syz.0.106" path="socket:[12433]" dev="sockfs" ino=12433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.423473][ T39] audit: type=1400 audit(1732801752.595:304): avc: denied { read } for pid=6383 comm="syz.0.106" path="socket:[12433]" dev="sockfs" ino=12433 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 48.430007][ T39] audit: type=1400 audit(1732801752.595:305): avc: denied { read } for pid=6383 comm="syz.0.106" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.435952][ T39] audit: type=1400 audit(1732801752.595:306): avc: denied { open } for pid=6383 comm="syz.0.106" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 48.442266][ T39] audit: type=1400 audit(1732801752.595:307): avc: denied { create } for pid=6383 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 48.485014][ T39] audit: type=1400 audit(1732801752.665:308): avc: denied { listen } for pid=6385 comm="syz.0.107" path=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 48.630277][ T39] audit: type=1400 audit(1732801752.815:309): avc: denied { create } for pid=6389 comm="syz.0.108" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 48.848219][ T6409] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1005 sclass=netlink_tcpdiag_socket pid=6409 comm=syz.2.114 [ 48.855748][ T6409] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 49.218845][ T64] Bluetooth: hci1: Unable to find connection for big 0x01 [ 49.232026][ T5947] Bluetooth: hci1: Unable to find connection for big 0x01 [ 49.244150][ T30] usb 8-1: USB disconnect, device number 4 [ 49.248981][ T30] usblp0: removed [ 49.436320][ T6006] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 49.587337][ T6006] usb 7-1: config 0 has no interfaces? [ 49.591779][ T6006] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 49.594185][ T6006] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.596622][ T6006] usb 7-1: Product: syz [ 49.597841][ T6006] usb 7-1: Manufacturer: syz [ 49.599068][ T6006] usb 7-1: SerialNumber: syz [ 49.602022][ T6006] usb 7-1: config 0 descriptor?? [ 49.696029][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 49.738334][ T6453] netlink: 16 bytes leftover after parsing attributes in process `syz.0.126'. [ 49.742373][ T6451] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 49.807600][ T6420] MTD: Couldn't look up ' ': -2 [ 49.811269][ T6006] usb 7-1: USB disconnect, device number 5 [ 49.846032][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 49.849099][ T30] usb 8-1: config index 0 descriptor too short (expected 5924, got 36) [ 49.851360][ T30] usb 8-1: config 250 has an invalid interface number: 228 but max is -1 [ 49.853588][ T30] usb 8-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 49.857950][ T30] usb 8-1: config 250 has no interface number 0 [ 49.859720][ T30] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 49.862755][ T30] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 49.865466][ T30] usb 8-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid maxpacket 30768, setting to 1024 [ 49.868870][ T30] usb 8-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 1024 [ 49.871711][ T30] usb 8-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 49.875355][ T30] usb 8-1: config 250 interface 228 has no altsetting 0 [ 49.879406][ T30] usb 8-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 49.881836][ T30] usb 8-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 49.884037][ T30] usb 8-1: Product: syz [ 49.885139][ T30] usb 8-1: SerialNumber: syz [ 49.888954][ T30] hub 8-1:250.228: bad descriptor, ignoring hub [ 49.890666][ T30] hub 8-1:250.228: probe with driver hub failed with error -5 [ 50.098005][ T30] usblp 8-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 50.117168][ T30] usb 8-1: USB disconnect, device number 5 [ 50.119716][ T30] usblp0: removed [ 50.184337][ T6465] netlink: 8 bytes leftover after parsing attributes in process `syz.3.129'. [ 50.214706][ T6468] ======================================================= [ 50.214706][ T6468] WARNING: The mand mount option has been deprecated and [ 50.214706][ T6468] and is ignored by this kernel. Remove the mand [ 50.214706][ T6468] option from the mount to silence this warning. [ 50.214706][ T6468] ======================================================= [ 50.224412][ T6468] hugetlbfs: Unknown parameter 'sizZ' [ 50.227354][ T6468] netlink: 'syz.3.130': attribute type 5 has an invalid length. [ 50.254491][ T6470] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.259010][ T6470] bond0: (slave rose0): Enslaving as an active interface with an up link [ 50.261980][ T6471] bond0: (slave rose0): Releasing backup interface [ 50.294982][ T6477] geneve2: entered promiscuous mode [ 50.296908][ T6477] geneve2: entered allmulticast mode [ 50.483143][ T6495] netlink: 40 bytes leftover after parsing attributes in process `syz.2.134'. [ 50.556057][ T30] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 50.691687][ T6495] syz.2.134 uses obsolete (PF_INET,SOCK_PACKET) [ 50.715978][ T30] usb 8-1: Using ep0 maxpacket: 8 [ 50.718509][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 50.720857][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 50.722817][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 50.725214][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 50.728599][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 50.732536][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 50.735404][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 50.738854][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 50.741177][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 50.743191][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 50.745589][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 50.748754][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 50.751670][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 50.754516][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 50.758811][ T30] usb 8-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 50.761023][ T30] usb 8-1: config 246 descriptor has 1 excess byte, ignoring [ 50.762931][ T30] usb 8-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 50.765317][ T30] usb 8-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 50.768424][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 255, changing to 11 [ 50.771337][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 50.774304][ T30] usb 8-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 50.779109][ T30] usb 8-1: string descriptor 0 read error: -22 [ 50.780784][ T30] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 50.783135][ T30] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.788364][ T30] adutux 8-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 51.246676][ T64] Bluetooth: hci1: command tx timeout [ 51.313575][ T6006] IPVS: starting estimator thread 0... [ 51.316989][ T6509] binder: 6508:6509 ioctl c0306201 200001c0 returned -22 [ 51.324829][ T6511] QAT: Device 1 not found [ 51.405972][ T6512] IPVS: using max 37 ests per chain, 88800 per kthread [ 51.779458][ T6546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 51.783116][ T6546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 51.908551][ T6552] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 51.911199][ T6552] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 51.915144][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.149'. [ 52.006031][ T5988] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 52.108744][ T6573] input: syz0 as /devices/virtual/input/input6 [ 52.121822][ T6573] fuse: Bad value for 'user_id' [ 52.123184][ T6573] fuse: Bad value for 'user_id' [ 52.136211][ T6574] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2305 sclass=netlink_route_socket pid=6574 comm=syz.2.155 [ 52.167990][ T5988] usb 6-1: Using ep0 maxpacket: 8 [ 52.171690][ T5988] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 52.174544][ T5988] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.177686][ T5988] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 52.180222][ T5988] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 52.182763][ T5988] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 52.185933][ T5988] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 52.189853][ T5988] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 52.192257][ T5988] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.194374][ T5988] usb 6-1: Product: syz [ 52.195538][ T5988] usb 6-1: Manufacturer: syz [ 52.200154][ T5988] usb 6-1: SerialNumber: syz [ 52.405424][ T5988] cdc_ncm 6-1:1.0: bind() failure [ 52.408368][ T5988] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 52.410165][ T5988] cdc_ncm 6-1:1.1: bind() failure [ 52.412674][ T5988] usb 6-1: USB disconnect, device number 6 [ 52.987797][ T6605] mkiss: ax0: crc mode is auto. [ 53.000397][ T832] usb 8-1: USB disconnect, device number 6 [ 53.122288][ T6621] netlink: 'syz.0.172': attribute type 1 has an invalid length. [ 53.125170][ T6621] netlink: 236 bytes leftover after parsing attributes in process `syz.0.172'. [ 53.131213][ T6621] tipc: Started in network mode [ 53.132534][ T6621] tipc: Node identity 7f000001, cluster identity 4711 [ 53.134748][ T6621] tipc: Enabled bearer , priority 10 [ 53.172328][ T6636] exFAT-fs (loop0): mounting with "discard" option, but the device does not support discard [ 53.173638][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.175624][ T6636] syz.0.175: attempt to access beyond end of device [ 53.175624][ T6636] loop0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 53.178606][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.182355][ T6636] exFAT-fs (loop0): unable to read boot sector [ 53.183989][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.185550][ T6636] exFAT-fs (loop0): failed to read boot sector [ 53.190289][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.190564][ T6636] exFAT-fs (loop0): failed to recognize exfat type [ 53.194295][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.197387][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.200112][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.202598][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.202801][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.204850][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.208735][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.211651][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.214350][ T6634] ptrace attach of "/syz-executor exec"[6637] was attempted by "/syz-executor exec"[6634] [ 53.219439][ T6638] macvlan2: entered allmulticast mode [ 53.221015][ T6638] bridge0: entered allmulticast mode [ 53.223368][ T6638] macvlan2: left allmulticast mode [ 53.223755][ T6645] overlayfs: failed to resolve './file1': -2 [ 53.224801][ T6638] bridge0: left allmulticast mode [ 53.316257][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.324794][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.326863][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.328980][ T6638] macvlan2: entered allmulticast mode [ 53.330482][ T6638] bridge0: entered allmulticast mode [ 53.333074][ T6638] macvlan2: left allmulticast mode [ 53.334483][ T6638] bridge0: left allmulticast mode [ 53.392943][ T39] kauditd_printk_skb: 227 callbacks suppressed [ 53.392957][ T39] audit: type=1400 audit(1732801757.575:537): avc: denied { accept } for pid=6656 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 53.402099][ T39] audit: type=1400 audit(1732801757.585:538): avc: denied { write } for pid=6656 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 53.408807][ T39] audit: type=1400 audit(1732801757.585:539): avc: denied { ioctl } for pid=6656 comm="syz.2.183" path="socket:[11625]" dev="sockfs" ino=11625 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 53.417058][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.423259][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.425022][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.427624][ T6638] macvlan2: entered allmulticast mode [ 53.429439][ T6638] bridge0: entered allmulticast mode [ 53.431242][ T39] audit: type=1400 audit(1732801757.615:540): avc: denied { create } for pid=6658 comm="syz.2.184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.438344][ T6638] macvlan2: left allmulticast mode [ 53.440112][ T6638] bridge0: left allmulticast mode [ 53.442223][ T39] audit: type=1400 audit(1732801757.615:541): avc: denied { ioctl } for pid=6658 comm="syz.2.184" path="socket:[14707]" dev="sockfs" ino=14707 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 53.453502][ T39] audit: type=1400 audit(1732801757.625:542): avc: denied { write } for pid=5349 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.460588][ T39] audit: type=1400 audit(1732801757.625:543): avc: denied { remove_name } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.467734][ T39] audit: type=1400 audit(1732801757.625:544): avc: denied { rename } for pid=5349 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.473326][ T39] audit: type=1400 audit(1732801757.625:545): avc: denied { add_name } for pid=5349 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.479286][ T39] audit: type=1400 audit(1732801757.625:546): avc: denied { unlink } for pid=5349 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.538308][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.547342][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.549950][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.552494][ T6638] macvlan2: entered allmulticast mode [ 53.554493][ T6638] bridge0: entered allmulticast mode [ 53.558782][ T6638] macvlan2: left allmulticast mode [ 53.560750][ T6638] bridge0: left allmulticast mode [ 53.617933][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.626526][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.628935][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.629050][ T6678] sctp: [Deprecated]: syz.3.190 (pid 6678) Use of int in max_burst socket option. [ 53.629050][ T6678] Use struct sctp_assoc_value instead [ 53.630713][ T6638] macvlan2: entered allmulticast mode [ 53.636564][ T6638] bridge0: entered allmulticast mode [ 53.639012][ T6638] macvlan2: left allmulticast mode [ 53.640972][ T6638] bridge0: left allmulticast mode [ 53.686801][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.692608][ T6681] QAT: failed to copy from user. [ 53.692738][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.696924][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.699464][ T6638] macvlan2: entered allmulticast mode [ 53.701560][ T6638] bridge0: entered allmulticast mode [ 53.704688][ T6638] macvlan2: left allmulticast mode [ 53.706823][ T6638] bridge0: left allmulticast mode [ 53.776590][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.782960][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.784806][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.786972][ T6638] macvlan2: entered allmulticast mode [ 53.788416][ T6638] bridge0: entered allmulticast mode [ 53.790566][ T6638] macvlan2: left allmulticast mode [ 53.791992][ T6638] bridge0: left allmulticast mode [ 53.876752][ T6638] netlink: 8 bytes leftover after parsing attributes in process `syz.1.176'. [ 53.883893][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.889487][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.892468][ T6638] macvlan2: entered allmulticast mode [ 53.894400][ T6638] bridge0: entered allmulticast mode [ 53.897144][ T6638] macvlan2: left allmulticast mode [ 53.898914][ T6638] bridge0: left allmulticast mode [ 53.950309][ T6638] bridge0: port 3(macvlan2) entered blocking state [ 53.952612][ T6638] bridge0: port 3(macvlan2) entered disabled state [ 53.954755][ T6638] macvlan2: entered allmulticast mode [ 53.956664][ T6638] bridge0: entered allmulticast mode [ 53.958551][ T6697] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6697 comm=syz.3.196 [ 53.962112][ T6697] netlink: 'syz.3.196': attribute type 1 has an invalid length. [ 53.962281][ T6638] macvlan2: left allmulticast mode [ 53.965784][ T6638] bridge0: left allmulticast mode [ 53.993413][ T6697] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.083194][ T6708] kAFS: unable to lookup cell '/,cL' [ 54.122919][ T6711] syz.2.200: attempt to access beyond end of device [ 54.122919][ T6711] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 54.126498][ T6711] gfs2: error -5 reading superblock [ 54.208587][ T6713] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 54.258057][ T35] tipc: Node number set to 2130706433 [ 54.438452][ T64] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 54.441048][ T64] Bluetooth: hci3: Injecting HCI hardware error event [ 54.444381][ T64] Bluetooth: hci3: hardware error 0x00 [ 54.727131][ T6776] : entered promiscuous mode [ 54.740756][ T6781] binder: BINDER_SET_CONTEXT_MGR already set [ 54.741165][ T6780] binder_alloc: binder_alloc_mmap_handler: 6778 20ffd000-20ffe000 already mapped failed -16 [ 54.742637][ T6781] binder: 6778:6781 ioctl 4018620d 200001c0 returned -16 [ 54.745768][ T6780] binder_alloc: binder_alloc_mmap_handler: 6778 20ffd000-20ffe000 already mapped failed -16 [ 54.800342][ T6786] xt_TCPMSS: Only works on TCP SYN packets [ 54.890001][ T6792] process 'syz.3.224' launched '/dev/fd/3' with NULL argv: empty string added [ 54.905719][ T6006] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 54.934032][ T6796] MPI: mpi too large (16392 bits) [ 55.045812][ T6006] usb 6-1: device descriptor read/64, error -71 [ 55.149775][ T6820] 9pnet_virtio: no channels available for device syz [ 55.150613][ T6818] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 55.213874][ T6829] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 55.215916][ T6829] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 55.220586][ T6829] vhci_hcd vhci_hcd.0: Device attached [ 55.244357][ T6832] vhci_hcd: connection closed [ 55.248562][ T6091] vhci_hcd: stop threads [ 55.251862][ T6091] vhci_hcd: release socket [ 55.253081][ T6091] vhci_hcd: disconnect device [ 55.297397][ T6006] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 55.381769][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.384241][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.388324][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.391056][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.393111][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.395028][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.397830][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.399891][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.402780][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.404775][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.407400][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.409384][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.411562][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.415066][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.417449][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.419449][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.421422][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.423682][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.425855][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.426841][ T6006] usb 6-1: device descriptor read/64, error -71 [ 55.427996][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.431541][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.433527][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.435496][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.437761][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.439887][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.442300][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.444316][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.447326][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.449463][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.451421][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.453434][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.455384][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.457815][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.459814][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.461792][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.463776][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.467082][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.469069][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.471216][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.473263][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.475256][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.478047][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.480019][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.482054][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.484069][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.487659][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.489620][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.491612][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.493532][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.495491][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.498230][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.500175][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.502383][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.504353][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.507250][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.509341][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.511399][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.513271][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.515155][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.518031][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.520126][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.522267][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.524307][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.527215][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.529445][ T6855] VFS: could not find a valid V7 on nullb0. [ 55.536090][ T6006] usb usb6-port1: attempt power cycle [ 55.626224][ T6880] block device autoloading is deprecated and will be removed. [ 55.689965][ T6886] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6886 comm=syz.0.247 [ 55.690004][ T6887] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=6887 comm=syz.0.247 [ 55.850113][ T6893] kvm: emulating exchange as write [ 55.876101][ T6006] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 55.897419][ T6006] usb 6-1: device descriptor read/8, error -71 [ 55.965752][ T6903] support for the xor transformation has been removed. [ 56.026247][ T6905] support for the xor transformation has been removed. [ 56.155783][ T6006] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 56.186078][ T6006] usb 6-1: device descriptor read/8, error -71 [ 56.217296][ T6925] loop4: detected capacity change from 0 to 524287999 [ 56.295867][ T6006] usb usb6-port1: unable to enumerate USB device [ 56.335694][ T3226] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 56.496226][ T3226] usb 8-1: Using ep0 maxpacket: 32 [ 56.499031][ T3226] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.502419][ T3226] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 56.505680][ T3226] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 56.509371][ T3226] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 56.512389][ T3226] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.516217][ T3226] usb 8-1: config 0 descriptor?? [ 56.516261][ T64] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 56.778123][ T6960] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 56.822388][ T6962] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 56.985661][ T6006] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 57.086490][ T6966] loop8: detected capacity change from 0 to 7 [ 57.090675][ T6966] Dev loop8: unable to read RDB block 7 [ 57.092655][ T6966] loop8: unable to read partition table [ 57.094271][ T6966] loop8: partition table beyond EOD, truncated [ 57.096041][ T6966] loop_reread_partitions: partition scan of loop8 (被xڬdƤݡ [ 57.096041][ T6966] ) failed (rc=-5) [ 57.130564][ T3226] usbhid 8-1:0.0: can't add hid device: -71 [ 57.132974][ T3226] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 57.136619][ T3226] usb 8-1: USB disconnect, device number 7 [ 57.163827][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 57.170995][ T6006] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 57.173151][ T6006] usb 5-1: config 179 has no interface number 0 [ 57.174850][ T6006] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 57.177970][ T6006] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 57.180866][ T6006] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 51, changing to 9 [ 57.184062][ T6006] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8292, setting to 1024 [ 57.186908][ T6006] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 57.190421][ T6006] usb 5-1: config 179 interface 65 has no altsetting 0 [ 57.192228][ T6006] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 57.194572][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.199272][ T6958] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 57.209296][ T6006] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input7 [ 57.247900][ T5352] input input7: unable to receive magic message: -110 [ 57.254664][ T5352] input input7: unable to receive magic message: -32 [ 57.259862][ T5352] input input7: unable to receive magic message: -32 [ 57.264073][ T5352] input input7: unable to receive magic message: -32 [ 57.278471][ T5352] input input7: unable to receive magic message: -32 [ 57.289211][ T5352] input input7: unable to receive magic message: -32 [ 57.403813][ T6958] input input7: unable to receive magic message: -32 [ 57.508843][ T5976] usb 5-1: USB disconnect, device number 2 [ 57.508909][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 57.512873][ T5976] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 57.727099][ T6971] __nla_validate_parse: 36 callbacks suppressed [ 57.727111][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.270'. [ 57.733421][ T6975] netlink: 8 bytes leftover after parsing attributes in process `syz.2.271'. [ 57.809630][ T6987] netlink: 'syz.2.274': attribute type 15 has an invalid length. [ 57.811781][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.2.274'. [ 57.877824][ T6989] overlay: Bad value for 'workdir' [ 57.879623][ T6989] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 57.879623][ T6989] The task syz.2.274 (6989) triggered the difference, watch for misbehavior. [ 58.264411][ T7020] netlink: 'syz.0.284': attribute type 9 has an invalid length. [ 58.269084][ T7020] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 58.376450][ T7017] xt_hashlimit: size too large, truncated to 1048576 [ 58.376511][ T7033] xt_hashlimit: size too large, truncated to 1048576 [ 58.403081][ T39] kauditd_printk_skb: 119 callbacks suppressed [ 58.403094][ T39] audit: type=1400 audit(1732801762.585:666): avc: denied { write } for pid=7040 comm="syz.0.287" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 58.681866][ T39] audit: type=1400 audit(1732801762.865:667): avc: denied { open } for pid=7059 comm="syz.2.293" path="/dev/ptyq9" dev="devtmpfs" ino=136 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 58.699656][ T39] audit: type=1400 audit(1732801762.885:668): avc: denied { connect } for pid=7059 comm="syz.2.293" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 58.711284][ T39] audit: type=1400 audit(1732801762.885:669): avc: denied { ioctl } for pid=7059 comm="syz.2.293" path="/dev/ptyq9" dev="devtmpfs" ino=136 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 58.793089][ T39] audit: type=1400 audit(1732801762.975:670): avc: denied { setopt } for pid=7069 comm="syz.2.294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 58.800376][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 58.802740][ T7070] netlink: 12 bytes leftover after parsing attributes in process `syz.2.294'. [ 58.828560][ T7070] netlink: 8 bytes leftover after parsing attributes in process `syz.2.294'. [ 58.866060][ T39] audit: type=1400 audit(1732801763.055:671): avc: denied { unmount } for pid=5954 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 59.016111][ T39] audit: type=1400 audit(1732801763.205:672): avc: denied { bind } for pid=7087 comm="syz.3.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.023695][ T39] audit: type=1400 audit(1732801763.205:673): avc: denied { write } for pid=7087 comm="syz.3.301" path="socket:[12212]" dev="sockfs" ino=12212 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 59.026733][ T7089] netlink: 36 bytes leftover after parsing attributes in process `syz.3.301'. [ 59.057898][ T39] audit: type=1400 audit(1732801763.245:674): avc: denied { write } for pid=7090 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 59.147243][ T7094] CIFS: iocharset name too long [ 59.361279][ T39] audit: type=1400 audit(1732801763.545:675): avc: denied { accept } for pid=7109 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 59.364652][ T7112] tun0: tun_chr_ioctl cmd 1074025672 [ 59.368233][ T7112] tun0: ignored: set checksum enabled [ 59.465550][ T7116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7116 comm=syz.3.309 [ 59.477791][ T7116] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=7116 comm=syz.3.309 [ 59.568240][ T7123] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 60.411489][ T7172] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 60.414874][ T7174] netlink: 340 bytes leftover after parsing attributes in process `syz.3.321'. [ 60.456522][ T7176] batman_adv: batadv0: Adding interface: gretap1 [ 60.458207][ T7176] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.464994][ T7176] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 60.491602][ T7176] ip6t_srh: unknown srh invflags 7863 [ 60.513035][ T7185] syz.2.327: attempt to access beyond end of device [ 60.513035][ T7185] loop2: rw=0, sector=6, nr_sectors = 2 limit=0 [ 60.519094][ T7185] ADFS-fs (loop2): error: unable to read block 3, try 0 [ 60.789710][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.2.332'. [ 60.865479][ T3226] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 60.995448][ T3226] usb 8-1: device descriptor read/64, error -71 [ 61.013699][ T7212] /dev/sg0: Can't lookup blockdev [ 61.142901][ T7215] Attempt to restore checkpoint with obsolete wellknown handles [ 61.235980][ T3226] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 61.375400][ T3226] usb 8-1: device descriptor read/64, error -71 [ 61.475498][ T5988] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 61.485590][ T3226] usb usb8-port1: attempt power cycle [ 61.615407][ T5988] usb 7-1: device descriptor read/64, error -71 [ 61.825484][ T3226] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 61.847545][ T3226] usb 8-1: device descriptor read/8, error -71 [ 61.875375][ T5988] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 62.005365][ T5988] usb 7-1: device descriptor read/64, error -71 [ 62.096418][ T3226] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 62.116102][ T3226] usb 8-1: device descriptor read/8, error -71 [ 62.125976][ T5988] usb usb7-port1: attempt power cycle [ 62.225666][ T3226] usb usb8-port1: unable to enumerate USB device [ 62.465328][ T5988] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 62.485818][ T5988] usb 7-1: device descriptor read/8, error -71 [ 62.745331][ T5988] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 62.761583][ T7253] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 62.764335][ T7253] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 62.765715][ T5988] usb 7-1: device descriptor read/8, error -71 [ 62.768216][ T7253] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 62.771029][ T7253] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 62.875531][ T5988] usb usb7-port1: unable to enumerate USB device [ 63.425306][ T832] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 63.575260][ T832] usb 6-1: Using ep0 maxpacket: 32 [ 63.578460][ T832] usb 6-1: config 4 has an invalid interface number: 8 but max is 0 [ 63.580703][ T832] usb 6-1: config 4 has no interface number 0 [ 63.582537][ T832] usb 6-1: config 4 interface 8 has no altsetting 0 [ 63.587369][ T832] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice=60.65 [ 63.589793][ T832] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 63.592096][ T832] usb 6-1: Product: syz [ 63.593506][ T832] usb 6-1: Manufacturer: syz [ 63.594769][ T832] usb 6-1: SerialNumber: syz [ 63.784635][ T39] kauditd_printk_skb: 28 callbacks suppressed [ 63.784646][ T39] audit: type=1400 audit(1732801767.965:704): avc: denied { write } for pid=7309 comm="syz.3.371" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 63.787750][ T7310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.371'. [ 63.803242][ T832] opticon 6-1:4.8: opticon converter detected [ 63.808350][ T832] usb 6-1: opticon converter now attached to ttyUSB0 [ 63.812992][ T832] usb 6-1: USB disconnect, device number 11 [ 63.819021][ T832] opticon ttyUSB0: opticon converter now disconnected from ttyUSB0 [ 63.821301][ T832] opticon 6-1:4.8: device disconnected [ 63.840538][ T39] audit: type=1400 audit(1732801768.025:705): avc: denied { write } for pid=7311 comm="syz.3.372" name="ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.847049][ T39] audit: type=1400 audit(1732801768.025:706): avc: denied { open } for pid=7311 comm="syz.3.372" path="/dev/ppp" dev="devtmpfs" ino=730 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.853323][ T39] audit: type=1400 audit(1732801768.025:707): avc: denied { ioctl } for pid=7311 comm="syz.3.372" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x7438 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 63.868328][ T7316] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 63.905544][ T39] audit: type=1400 audit(1732801768.085:708): avc: denied { setattr } for pid=7317 comm="syz.3.374" name="ttynull" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 63.957598][ T71] IPVS: starting estimator thread 0... [ 64.045412][ T7325] IPVS: using max 37 ests per chain, 88800 per kthread [ 64.079298][ T39] audit: type=1400 audit(1732801768.265:709): avc: denied { getopt } for pid=7331 comm="syz.3.376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 64.177629][ T7336] syz.0.377: attempt to access beyond end of device [ 64.177629][ T7336] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 64.181207][ T7336] (syz.0.377,7336,3):ocfs2_get_sector:1769 ERROR: status = -5 [ 64.183941][ T7336] (syz.0.377,7336,3):ocfs2_sb_probe:749 ERROR: status = -5 [ 64.187380][ T7336] (syz.0.377,7336,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 64.189705][ T7336] (syz.0.377,7336,3):ocfs2_fill_super:1178 ERROR: status = -5 [ 64.264216][ T7346] overlayfs: failed to resolve './file0': -2 [ 64.320743][ T7350] __report_access: 56 callbacks suppressed [ 64.320755][ T7350] ptrace attach of "/syz-executor exec"[5954] was attempted by "/syz-executor exec"[7350] [ 64.328191][ T7350] veth1_to_batadv: entered promiscuous mode [ 64.330092][ T7350] macsec1: entered promiscuous mode [ 64.381897][ T39] audit: type=1400 audit(1732801768.565:710): avc: denied { getopt } for pid=7355 comm="syz.2.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.394302][ T7356] fuse: Unknown parameter ' ' [ 64.432187][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.386'. [ 64.436910][ T7360] wg2: entered promiscuous mode [ 64.437679][ T39] audit: type=1400 audit(1732801768.625:711): avc: denied { read } for pid=7362 comm="syz.1.388" path="socket:[17947]" dev="sockfs" ino=17947 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 64.438225][ T7360] wg2: entered allmulticast mode [ 64.452282][ T7363] binder: Binderfs stats mode cannot be changed during a remount [ 64.452283][ T39] audit: type=1400 audit(1732801768.635:712): avc: denied { remount } for pid=7362 comm="syz.1.388" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 64.481883][ T7366] netlink: 'syz.0.389': attribute type 9 has an invalid length. [ 64.553371][ T39] audit: type=1400 audit(1732801768.735:713): avc: denied { write } for pid=7368 comm="syz.1.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 64.563751][ T7372] evm: overlay not supported [ 64.617276][ T7369] /dev/sr0: Can't open blockdev [ 64.876666][ T6006] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 64.881713][ T7397] 9p: Unknown access argument 18446744073709551615: -34 [ 65.025159][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 65.027878][ T6006] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 65.030950][ T6006] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 65.033519][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.038153][ T6006] usb 5-1: config 0 descriptor?? [ 65.060793][ T7404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 65.065241][ T7404] netlink: 36 bytes leftover after parsing attributes in process `syz.3.401'. [ 65.195172][ T3226] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 65.249923][ T6006] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 65.338841][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 65.341681][ T7416] netlink: 8 bytes leftover after parsing attributes in process `syz.2.406'. [ 65.365298][ T3226] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 65.368257][ T3226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 65.377999][ T3226] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 65.381168][ T3226] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.384572][ T3226] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.387938][ T3226] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.392520][ T3226] usb 6-1: config 0 descriptor?? [ 65.395767][ T7400] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 65.432253][ T7429] bridge1: entered promiscuous mode [ 65.433690][ T7429] bridge1: entered allmulticast mode [ 65.702812][ T71] usb 5-1: USB disconnect, device number 3 [ 65.706314][ T71] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 66.019968][ T3226] usbhid 6-1:0.0: can't add hid device: -71 [ 66.021652][ T3226] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 66.025854][ T3226] usb 6-1: USB disconnect, device number 12 [ 66.028671][ T7465] syzkaller0: entered promiscuous mode [ 66.030138][ T7465] syzkaller0: entered allmulticast mode [ 66.045838][ T35] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 66.204865][ T35] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 66.207293][ T35] usb 8-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 66.209942][ T35] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 66.212275][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 66.215396][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 66.220047][ T35] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 66.222435][ T35] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 66.224586][ T35] usb 8-1: Product: syz [ 66.226765][ T35] usb 8-1: Manufacturer: syz [ 66.231822][ T35] cdc_wdm 8-1:1.0: skipping garbage [ 66.233209][ T35] cdc_wdm 8-1:1.0: skipping garbage [ 66.238180][ T35] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 66.239755][ T35] cdc_wdm 8-1:1.0: Unknown control protocol [ 66.368097][ T7470] netlink: 'syz.0.421': attribute type 1 has an invalid length. [ 66.433216][ T7458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.437571][ T7458] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.446869][ T5976] usb 8-1: USB disconnect, device number 12 [ 66.607726][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.169907][ T7472] netlink: 20 bytes leftover after parsing attributes in process `syz.1.422'. [ 67.316923][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 67.372256][ T7505] netlink: 'syz.0.429': attribute type 4 has an invalid length. [ 67.384743][ T7505] netlink: 'syz.0.429': attribute type 4 has an invalid length. [ 67.391742][ T7505] syz.0.429 (7505) used greatest stack depth: 20928 bytes left [ 67.958976][ T7541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7541 comm=syz.3.440 [ 67.962856][ T7542] netlink: 'syz.3.440': attribute type 1 has an invalid length. [ 67.983774][ T7542] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.992139][ T7541] bond2: (slave ip6gretap1): making interface the new active one [ 67.994856][ T7541] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 69.206985][ T7563] netlink: 32 bytes leftover after parsing attributes in process `syz.2.446'. [ 69.214568][ T7563] netlink: 'syz.2.446': attribute type 10 has an invalid length. [ 69.224093][ T7563] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.227321][ T7563] bond0: (slave team0): Enslaving as an active interface with an up link [ 69.232657][ T7563] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 69.233998][ T7564] __ib_cache_gid_add: unable to add gid fe80:0000:0000:0000:9c1c:a5ff:fe70:1038 error=-28 [ 69.283055][ T7563] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.446'. [ 69.286413][ T7564] infiniband syz1: set active [ 69.289150][ T7564] infiniband syz1: added team_slave_0 [ 69.307155][ T7564] RDS/IB: syz1: added [ 69.308551][ T7564] smc: adding ib device syz1 with port count 1 [ 69.310252][ T7564] smc: ib device syz1 port 1 has pnetid [ 69.337345][ T39] kauditd_printk_skb: 33 callbacks suppressed [ 69.337358][ T39] audit: type=1400 audit(1732801773.526:747): avc: denied { bind } for pid=7562 comm="syz.2.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 69.796063][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 69.798158][ T7528] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 70.610544][ T7528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.620998][ T7528] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 70.627947][ T7528] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 70.630128][ T7528] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.633037][ T7528] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 70.637833][ T7528] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 70.640063][ T7528] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.643595][ T7528] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 70.694235][ T39] audit: type=1400 audit(1732801774.876:748): avc: denied { read } for pid=7567 comm="syz.1.447" name="fb1" dev="devtmpfs" ino=640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 70.699262][ T6104] Bluetooth: hci4: Frame reassembly failed (-84) [ 70.709290][ T39] audit: type=1400 audit(1732801774.896:749): avc: denied { read } for pid=7567 comm="syz.1.447" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 70.720530][ T39] audit: type=1400 audit(1732801774.906:750): avc: denied { listen } for pid=7570 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 70.735323][ T39] audit: type=1400 audit(1732801774.926:751): avc: denied { accept } for pid=7570 comm="syz.2.449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 70.817600][ T7580] xt_socket: unknown flags 0x8 [ 71.045025][ T6006] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 71.076049][ T71] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 71.079000][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.080997][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.204960][ T6006] usb 5-1: Using ep0 maxpacket: 8 [ 71.208364][ T6006] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 71.212135][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 71.215864][ T6006] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 71.218637][ T6006] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 71.221632][ T6006] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 71.225607][ T6006] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 71.228780][ T6006] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.233857][ T6006] usbtmc 5-1:16.0: probe with driver usbtmc failed with error -22 [ 71.244827][ T71] usb 7-1: Using ep0 maxpacket: 16 [ 71.249985][ T71] usb 7-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 71.253094][ T71] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.255491][ T71] usb 7-1: Product: syz [ 71.257080][ T71] usb 7-1: Manufacturer: syz [ 71.258412][ T71] usb 7-1: SerialNumber: syz [ 71.261951][ T71] r8152-cfgselector 7-1: Unknown version 0x0000 [ 71.263511][ T71] r8152-cfgselector 7-1: config 0 descriptor?? [ 71.469195][ T71] r8152-cfgselector 7-1: Unknown version 0x0000 [ 71.470917][ T71] r8152-cfgselector 7-1: bad CDC descriptors [ 71.473658][ T71] r8152-cfgselector 7-1: USB disconnect, device number 10 [ 71.650815][ T39] audit: type=1400 audit(1732801775.836:752): avc: denied { getopt } for pid=7586 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.658165][ T39] audit: type=1400 audit(1732801775.836:753): avc: denied { read } for pid=7586 comm="syz.3.453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.749256][ T7593] xt_hashlimit: size too large, truncated to 1048576 [ 71.874965][ T5947] Bluetooth: hci0: command 0x0c1a tx timeout [ 72.044874][ T71] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 72.093141][ T7602] kvm: vcpu 0: requested 32 ns lapic timer period limited to 200000 ns [ 72.194826][ T71] usb 8-1: Using ep0 maxpacket: 32 [ 72.197735][ T71] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 72.199954][ T71] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 72.202655][ T71] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 72.206927][ T71] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 72.209341][ T71] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 72.211551][ T71] usb 8-1: Product: syz [ 72.212632][ T71] usb 8-1: Manufacturer: syz [ 72.213836][ T71] usb 8-1: SerialNumber: syz [ 72.216179][ T71] usb 8-1: config 0 descriptor?? [ 72.421026][ T7596] netlink: 228 bytes leftover after parsing attributes in process `syz.3.454'. [ 72.424984][ T39] audit: type=1400 audit(1732801776.616:754): avc: denied { getopt } for pid=7592 comm="syz.3.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.430048][ T39] audit: type=1400 audit(1732801776.616:755): avc: denied { name_bind } for pid=7592 comm="syz.3.454" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 72.676380][ T5947] Bluetooth: hci2: command 0x0405 tx timeout [ 72.676497][ T5305] Bluetooth: hci1: command 0x0c1a tx timeout [ 72.754994][ T64] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 72.757759][ T5305] Bluetooth: hci4: command 0x1003 tx timeout [ 72.793572][ T7605] delete_channel: no stack [ 72.835132][ T7609] 9pnet_fd: Insufficient options for proto=fd [ 73.204736][ T71] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 73.364688][ T71] usb 7-1: Using ep0 maxpacket: 8 [ 73.368137][ T71] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.371753][ T71] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.375351][ T71] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.378868][ T71] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.383376][ T71] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 73.386646][ T71] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.602148][ T71] usb 7-1: GET_CAPABILITIES returned 0 [ 73.604127][ T71] usbtmc 7-1:16.0: can't read capabilities [ 73.806915][ C1] usbtmc 7-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 73.809656][ T62] usb 7-1: USB disconnect, device number 11 [ 73.816231][ T5976] usb 5-1: USB disconnect, device number 4 [ 73.816591][ T7619] netlink: 8 bytes leftover after parsing attributes in process `syz.1.462'. [ 73.873288][ T7625] trusted_key: encrypted_key: insufficient parameters specified [ 73.927607][ T7625] cgroup: name respecified [ 73.929830][ T7625] overlay: ./file1 is not a directory [ 73.956257][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.087306][ T39] audit: type=1400 audit(1732801778.276:756): avc: denied { connect } for pid=7631 comm="syz.1.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 74.239968][ T7647] netlink: 28 bytes leftover after parsing attributes in process `syz.0.471'. [ 74.243479][ T7647] netlink: 'syz.0.471': attribute type 7 has an invalid length. [ 74.246980][ T7647] netlink: 'syz.0.471': attribute type 8 has an invalid length. [ 74.249483][ T7647] netlink: 4 bytes leftover after parsing attributes in process `syz.0.471'. [ 74.342502][ T7651] veth1_macvtap: left promiscuous mode [ 74.342601][ T7650] mmap: syz.2.472 (7650): VmData 37859328 exceed data ulimit 5. Update limits or use boot option ignore_rlimit_data. [ 74.346569][ T7652] veth1_macvtap: entered promiscuous mode [ 74.354409][ T39] audit: type=1400 audit(1732801778.536:757): avc: denied { write } for pid=7654 comm="syz.1.473" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.514877][ T7676] fuse: Bad value for 'fd' [ 74.528868][ T7676] fuse: Unknown parameter 'cCIDogr^*)+5(jڂI1Uѫ' [ 74.642694][ T39] audit: type=1400 audit(1732801778.826:758): avc: denied { name_bind } for pid=7686 comm="syz.2.482" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 74.668717][ T7689] netlink: 'syz.0.483': attribute type 1 has an invalid length. [ 74.755706][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 74.756280][ T5305] Bluetooth: hci2: command 0x0405 tx timeout [ 74.767958][ T35] usb 8-1: USB disconnect, device number 13 [ 74.833145][ T39] audit: type=1400 audit(1732801779.016:759): avc: denied { mount } for pid=7705 comm="syz.3.486" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 74.845204][ T39] audit: type=1400 audit(1732801779.026:760): avc: denied { search } for pid=7705 comm="syz.3.486" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.851247][ T39] audit: type=1400 audit(1732801779.026:761): avc: denied { read } for pid=7705 comm="syz.3.486" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.869064][ T39] audit: type=1400 audit(1732801779.026:762): avc: denied { open } for pid=7705 comm="syz.3.486" path="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.875368][ T39] audit: type=1400 audit(1732801779.026:763): avc: denied { write } for pid=7705 comm="syz.3.486" name="/" dev="configfs" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.881096][ T39] audit: type=1400 audit(1732801779.026:764): avc: denied { add_name } for pid=7705 comm="syz.3.486" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 74.886779][ T39] audit: type=1400 audit(1732801779.026:765): avc: denied { create } for pid=7705 comm="syz.3.486" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=file permissive=1 [ 74.941653][ T39] audit: type=1400 audit(1732801779.126:766): avc: denied { shutdown } for pid=7709 comm="syz.2.489" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.027819][ T7720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 75.211006][ T7730] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 75.297496][ T7737] JFS: charset not found [ 75.374554][ T5976] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 75.534747][ T5976] usb 8-1: Using ep0 maxpacket: 8 [ 75.537841][ T5976] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 75.540428][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.544298][ T5976] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.548320][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.552017][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.558568][ T5976] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 75.561063][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.564977][ T5976] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.569218][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.572966][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.577899][ T5976] usb 8-1: config 168 descriptor has 1 excess byte, ignoring [ 75.580487][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 75.584437][ T5976] usb 8-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 75.588372][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 75.592056][ T5976] usb 8-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 75.598297][ T5976] usb 8-1: string descriptor 0 read error: -22 [ 75.600299][ T5976] usb 8-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 75.603463][ T5976] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.608893][ T5976] adutux 8-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 75.613073][ T7735] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 75.898482][ T7756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.504'. [ 76.473773][ T7777] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 76.480946][ T7777] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 76.483116][ T7777] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 76.485812][ T7779] netlink: 880 bytes leftover after parsing attributes in process `syz.2.512'. [ 76.509033][ T7781] tmpfs: Bad value for 'mpol' [ 76.688033][ T7802] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 76.690444][ T7802] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 76.693783][ T7802] vhci_hcd vhci_hcd.0: Device attached [ 76.844619][ T5305] Bluetooth: hci1: command 0x0c1a tx timeout [ 76.844660][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 76.875274][ T35] vhci_hcd: vhci_device speed not set [ 76.934524][ T3226] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 76.936717][ T35] usb 37-1: new full-speed USB device number 2 using vhci_hcd [ 77.024622][ T832] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 77.105800][ T3226] usb 5-1: config 0 has no interfaces? [ 77.107333][ T3226] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 77.109694][ T3226] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.112993][ T3226] usb 5-1: config 0 descriptor?? [ 77.184455][ T832] usb 7-1: Using ep0 maxpacket: 8 [ 77.187327][ T832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 77.190429][ T832] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.193093][ T832] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 77.195741][ T832] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 77.198306][ T832] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 77.200794][ T832] usb 7-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 77.207290][ T832] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 77.210378][ T832] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.213112][ T832] usb 7-1: Product: syz [ 77.214679][ T832] usb 7-1: Manufacturer: syz [ 77.216341][ T832] usb 7-1: SerialNumber: syz [ 77.321562][ T5988] IPVS: starting estimator thread 0... [ 77.385549][ T35] vhci_hcd: vhci_device speed not set [ 77.386917][ T5988] usb 5-1: USB disconnect, device number 5 [ 77.390692][ T7803] vhci_hcd: connection reset by peer [ 77.393462][ T1224] vhci_hcd: stop threads [ 77.394728][ T1224] vhci_hcd: release socket [ 77.399077][ T1224] vhci_hcd: disconnect device [ 77.424781][ T7806] IPVS: using max 37 ests per chain, 88800 per kthread [ 77.444576][ T35] usb 37-1: device descriptor read/64, error -71 [ 77.474562][ T832] cdc_ncm 7-1:1.0: bind() failure [ 77.477052][ T832] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 77.477069][ T832] cdc_ncm 7-1:1.1: bind() failure [ 77.480461][ T832] usb 7-1: USB disconnect, device number 12 [ 77.515424][ T7814] netlink: 12 bytes leftover after parsing attributes in process `syz.1.520'. [ 77.624610][ T35] vhci_hcd: vhci_device speed not set [ 77.654391][ T7828] netlink: 4 bytes leftover after parsing attributes in process `syz.2.524'. [ 78.187195][ T832] usb 8-1: USB disconnect, device number 14 [ 78.231958][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.2.533'. [ 78.239501][ T7857] vlan0: entered allmulticast mode [ 78.415784][ T7871] nilfs2: Unknown parameter 'upperdir' [ 78.416934][ T7871] overlayfs: failed to resolve './file2': -2 [ 78.506417][ T7871] tipc: Trying to set illegal importance in message [ 78.780675][ T7880] netlink: 'syz.2.540': attribute type 11 has an invalid length. [ 79.245795][ T7917] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 79.247328][ T7918] overlay: filesystem on ./bus not supported as upperdir [ 79.249896][ T7917] overlayfs: missing 'lowerdir' [ 79.302327][ T7923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.551'. [ 79.399829][ T39] kauditd_printk_skb: 14 callbacks suppressed [ 79.399841][ T39] audit: type=1400 audit(1732801783.586:781): avc: denied { getopt } for pid=7932 comm="syz.3.554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 79.520313][ T7941] netlink: 124 bytes leftover after parsing attributes in process `syz.3.557'. [ 79.523193][ T7941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.557'. [ 79.560488][ T7953] overlay: Unknown parameter 'fowner<00000000000000000000' [ 79.576027][ T7949] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 79.591711][ T39] audit: type=1400 audit(1732801783.776:782): avc: denied { read } for pid=7955 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.597927][ T39] audit: type=1400 audit(1732801783.776:783): avc: denied { getopt } for pid=7955 comm="syz.3.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 79.639786][ T39] audit: type=1400 audit(1732801783.826:784): avc: denied { bind } for pid=7959 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.648463][ T39] audit: type=1400 audit(1732801783.836:785): avc: denied { getopt } for pid=7959 comm="syz.3.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 79.681317][ T39] audit: type=1400 audit(1732801783.866:786): avc: denied { map } for pid=7962 comm="syz.3.564" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 79.694189][ T7963] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.699676][ T7963] netlink: 28 bytes leftover after parsing attributes in process `syz.2.563'. [ 79.978771][ T7984] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7984 comm=syz.3.569 [ 79.982992][ T39] audit: type=1400 audit(1732801784.166:787): avc: denied { getopt } for pid=7985 comm="syz.2.570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 79.985097][ T7984] netlink: 4 bytes leftover after parsing attributes in process `syz.3.569'. [ 79.985476][ T7986] netlink: 104 bytes leftover after parsing attributes in process `syz.2.570'. [ 80.005519][ T7984] 8021q: adding VLAN 0 to HW filter on device team1 [ 80.289115][ T8017] No control pipe specified [ 80.292069][ T8017] Bluetooth: MGMT ver 1.23 [ 80.345664][ T39] audit: type=1400 audit(1732801784.536:788): avc: denied { create } for pid=8013 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.352590][ T39] audit: type=1400 audit(1732801784.536:789): avc: denied { write } for pid=8013 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.359588][ T39] audit: type=1400 audit(1732801784.536:790): avc: denied { setopt } for pid=8013 comm="syz.3.578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 80.393276][ T8022] block device autoloading is deprecated and will be removed. [ 80.965561][ T8040] loop6: detected capacity change from 0 to 524287999 [ 81.004106][ C3] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 81.009131][ C1] I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.009893][ C3] I/O error, dev loop6, sector 524287746 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.011848][ C1] Buffer I/O error on dev loop6, logical block 524287744, async page read [ 81.015480][ C3] Buffer I/O error on dev loop6, logical block 524287746, async page read [ 81.017770][ C1] I/O error, dev loop6, sector 524287745 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.020804][ C3] I/O error, dev loop6, sector 524287747 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.023361][ C1] Buffer I/O error on dev loop6, logical block 524287745, async page read [ 81.028556][ C3] Buffer I/O error on dev loop6, logical block 524287747, async page read [ 81.030904][ C3] I/O error, dev loop6, sector 524287748 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.033503][ C3] Buffer I/O error on dev loop6, logical block 524287748, async page read [ 81.036117][ C3] I/O error, dev loop6, sector 524287749 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.039666][ C3] Buffer I/O error on dev loop6, logical block 524287749, async page read [ 81.042817][ C3] I/O error, dev loop6, sector 524287750 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.045681][ C3] Buffer I/O error on dev loop6, logical block 524287750, async page read [ 81.047989][ C3] I/O error, dev loop6, sector 524287751 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 81.050548][ C3] Buffer I/O error on dev loop6, logical block 524287751, async page read [ 81.079309][ T8047] overlayfs: workdir and upperdir must be separate subtrees [ 81.196260][ T8062] overlayfs: failed to set uuid (189/file1, err=-1); falling back to uuid=null. [ 81.199270][ T8063] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 81.203146][ T8062] overlayfs: failed to verify upper root origin [ 81.300281][ T8074] fuse: Bad value for 'fd' [ 81.317228][ T9] cfg80211: failed to load regulatory.db [ 81.332688][ T8080] sp0: Synchronizing with TNC [ 81.356617][ T8076] IPVS: Unknown mcast interface: nr0 [ 81.397447][ T8087] netlink: 36 bytes leftover after parsing attributes in process `syz.2.602'. [ 81.543834][ T8106] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 81.549717][ T8106] program syz.3.606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 81.553191][ T8110] syz.2.607 (8110) used obsolete PPPIOCDETACH ioctl [ 81.565599][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.608'. [ 81.571165][ T8112] netlink: 36 bytes leftover after parsing attributes in process `syz.1.608'. [ 81.603804][ T8114] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 81.670571][ T8121] 9p: Unknown Cache mode or invalid value mmap" [ 81.754293][ T35] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 81.926129][ T35] usb 5-1: config 0 has no interfaces? [ 81.930190][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.933720][ T35] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.936152][ T35] usb 5-1: Product: syz [ 81.937688][ T35] usb 5-1: Manufacturer: syz [ 81.939526][ T35] usb 5-1: SerialNumber: syz [ 81.943634][ T35] usb 5-1: config 0 descriptor?? [ 82.054300][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 82.154578][ T35] usb 5-1: USB disconnect, device number 6 [ 82.214322][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 82.217038][ T9] usb 7-1: too many configurations: 15, using maximum allowed: 8 [ 82.220297][ T9] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 82.222322][ T9] usb 7-1: can't read configurations, error -61 [ 82.354310][ T9] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 82.504249][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 82.506289][ T9] usb 7-1: too many configurations: 15, using maximum allowed: 8 [ 82.509559][ T9] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 82.511644][ T9] usb 7-1: can't read configurations, error -61 [ 82.513770][ T9] usb usb7-port1: attempt power cycle [ 82.861177][ T9] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 82.884849][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 82.886781][ T9] usb 7-1: too many configurations: 15, using maximum allowed: 8 [ 82.890203][ T9] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 82.892210][ T9] usb 7-1: can't read configurations, error -61 [ 83.024292][ T9] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 83.028408][ T8180] binder: BC_ACQUIRE_RESULT not supported [ 83.030571][ T8180] binder: 8172:8180 ioctl c0306201 200002c0 returned -22 [ 83.044664][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 83.046468][ T9] usb 7-1: too many configurations: 15, using maximum allowed: 8 [ 83.049578][ T9] usb 7-1: unable to read config index 0 descriptor/start: -61 [ 83.051746][ T9] usb 7-1: can't read configurations, error -61 [ 83.053834][ T9] usb usb7-port1: unable to enumerate USB device [ 83.514494][ T8159] 9pnet_fd: p9_fd_create_tcp (8159): problem connecting socket to 127.0.0.1 [ 83.594595][ T8188] fuse: Unknown parameter 'group_il' [ 83.779249][ T8195] A link change request failed with some changes committed already. Interface sit1 may have been left with an inconsistent configuration, please check. [ 83.884278][ T8207] support for the xor transformation has been removed. [ 83.956696][ T8227] program syz.1.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.956696][ T8228] program syz.1.634 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 83.956733][ T8228] ata1.00: invalid service action 31 [ 83.963233][ T8227] ata1.00: invalid service action 31 [ 84.248675][ T8260] netlink: 'syz.0.644': attribute type 18 has an invalid length. [ 84.988832][ T8276] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.038728][ T8276] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.047935][ T8277] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 85.188799][ T39] kauditd_printk_skb: 111 callbacks suppressed [ 85.188811][ T39] audit: type=1400 audit(1732801789.377:902): avc: denied { mount } for pid=8284 comm="syz.3.651" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 85.228669][ T8290] cgroup: subsys name conflicts with all [ 85.336933][ T6441] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 85.378205][ T8311] veth1_to_team: entered promiscuous mode [ 85.385556][ T8309] veth1_to_team: left promiscuous mode [ 85.416597][ T39] audit: type=1400 audit(1732801789.607:903): avc: denied { setopt } for pid=8287 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.458844][ T8320] tmpfs: Unknown parameter ' ' [ 85.489292][ T39] audit: type=1400 audit(1732801789.677:904): avc: denied { append } for pid=8322 comm="syz.0.662" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 85.522505][ T6441] usb 6-1: not running at top speed; connect to a high speed hub [ 85.526551][ T6441] usb 6-1: config 9 interface 0 has no altsetting 0 [ 85.532058][ T8328] affs: No valid root block on device nbd0 [ 85.532255][ T6441] usb 6-1: New USB device found, idVendor=03f0, idProduct=251d, bcdDevice=4e.f4 [ 85.536912][ T6441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.538956][ T6441] usb 6-1: Product:  [ 85.540308][ T6441] usb 6-1: Manufacturer: ䷼⽔툓䐷吂Ȱ촽ꭔ䕊㑓߯뭀៮ᦙ㯰ﹿ▛鞞笏޺畽褷᷅硊᭨烳崝⪐뷯ᗸꂚꢬ㽏뺜鯛厡껬砠汹㠧챷堂៓㸴賰郹Დ甝䠇葦❤愋洢ទ䑍⌥퍣ゎ薷᤹迀짭㨖殃̗쩈춃뢢啢诳䃞篣䃬貜痸㞧 [ 85.541810][ T8328] trusted_key: syz.0.663 sent an empty control message without MSG_MORE. [ 85.546939][ T6441] usb 6-1: SerialNumber: ᐌ [ 85.630118][ T8327] syz.0.663: attempt to access beyond end of device [ 85.630118][ T8327] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 85.635570][ T8327] syz.0.663: attempt to access beyond end of device [ 85.635570][ T8327] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 85.638962][ T8327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.642327][ T8327] syz.0.663: attempt to access beyond end of device [ 85.642327][ T8327] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 85.646094][ T8327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.650158][ T8327] syz.0.663: attempt to access beyond end of device [ 85.650158][ T8327] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 85.653860][ T8327] syz.0.663: attempt to access beyond end of device [ 85.653860][ T8327] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 85.657432][ T8327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.660051][ T8327] syz.0.663: attempt to access beyond end of device [ 85.660051][ T8327] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 85.663415][ T8327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.667192][ T8327] syz.0.663: attempt to access beyond end of device [ 85.667192][ T8327] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 85.670687][ T8327] syz.0.663: attempt to access beyond end of device [ 85.670687][ T8327] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 85.674561][ T8327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.677394][ T8327] syz.0.663: attempt to access beyond end of device [ 85.677394][ T8327] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 85.680982][ T8327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.683872][ T8327] syz.0.663: attempt to access beyond end of device [ 85.683872][ T8327] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 85.688108][ T8327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.690708][ T8327] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.693400][ T8327] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 85.696616][ T8329] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.699601][ T8329] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.702346][ T8329] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.706584][ T8329] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.709266][ T8329] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.711787][ T8329] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.716161][ T8329] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 85.718704][ T8329] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 85.721227][ T8329] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 85.734746][ T8329] block nbd0: shutting down sockets [ 85.766994][ T6441] usb 6-1: USB disconnect, device number 13 [ 85.929759][ T39] audit: type=1400 audit(1732801790.117:905): avc: denied { getopt } for pid=8287 comm="syz.3.652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 85.957828][ T8342] random: crng reseeded on system resumption [ 85.961925][ T39] audit: type=1400 audit(1732801790.147:906): avc: denied { append } for pid=8341 comm="syz.0.666" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.069420][ T8346] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.128393][ T39] audit: type=1400 audit(1732801790.317:907): avc: denied { ioctl } for pid=8341 comm="syz.0.666" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 86.299236][ T8356] __nla_validate_parse: 4 callbacks suppressed [ 86.299248][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.670'. [ 86.303326][ T8356] netlink: 16 bytes leftover after parsing attributes in process `syz.1.670'. [ 86.305920][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.670'. [ 86.308328][ T8356] netlink: 36 bytes leftover after parsing attributes in process `syz.1.670'. [ 86.325497][ T8358] input: syz0 as /devices/virtual/input/input9 [ 86.349797][ T39] audit: type=1400 audit(1732801790.537:908): avc: denied { ioctl } for pid=8359 comm="syz.1.672" path="time:[4026531834]" dev="nsfs" ino=4026531834 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 86.350088][ T8360] Illegal XDP return value 337122263 on prog (id 155) dev syz_tun, expect packet loss! [ 86.411872][ T8367] overlayfs: failed to resolve './file2': -2 [ 86.608540][ T39] audit: type=1400 audit(1732801790.797:909): avc: denied { getopt } for pid=8382 comm="syz.2.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 86.968704][ T8399] kvm: kvm [8398]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010058) = 0x20000200 [ 87.273706][ T8424] netlink: 44 bytes leftover after parsing attributes in process `syz.3.690'. [ 87.312198][ T8429] program syz.1.692 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 87.315208][ T8429] ata1.00: invalid command format 0 [ 87.376158][ T39] audit: type=1400 audit(1732801791.567:910): avc: denied { setopt } for pid=8430 comm="syz.1.693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 87.455531][ T8438] netlink: 'syz.3.695': attribute type 2 has an invalid length. [ 87.457721][ T8439] netlink: 16 bytes leftover after parsing attributes in process `syz.3.695'. [ 87.470240][ T8439] dummy0: entered promiscuous mode [ 87.474466][ T8439] dummy0: left promiscuous mode [ 87.512747][ T8448] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 87.560157][ T8457] tmpfs: Bad value for 'mpol' [ 87.625736][ T8460] sp0: Synchronizing with TNC [ 87.795389][ T5988] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 87.894770][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 87.898294][ T8465] netlink: 16 bytes leftover after parsing attributes in process `syz.0.701'. [ 87.900778][ T8465] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 87.913953][ T35] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 87.965287][ T5988] usb 7-1: Using ep0 maxpacket: 16 [ 87.971066][ T5988] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 87.975391][ T5988] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 87.978327][ T5988] usb 7-1: Product: syz [ 87.979834][ T5988] usb 7-1: Manufacturer: syz [ 87.981510][ T5988] usb 7-1: SerialNumber: syz [ 87.985094][ T5988] usb 7-1: config 0 descriptor?? [ 87.989305][ T8472] program syz.0.702 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.031478][ T39] audit: type=1400 audit(1732801792.217:911): avc: denied { read write } for pid=8475 comm="syz.1.704" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 88.059982][ T8478] overlay: Unknown parameter 'smackfsdef' [ 88.083946][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 88.097417][ T35] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 88.099784][ T35] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 88.102196][ T35] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 88.104971][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 88.107460][ T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 88.110001][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 88.113576][ T35] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 88.116178][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.119607][ T35] usb 8-1: config 0 descriptor?? [ 88.179780][ T8498] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.182166][ T8498] IPv6: NLM_F_CREATE should be set when creating new route [ 88.184139][ T8498] IPv6: NLM_F_CREATE should be set when creating new route [ 88.193998][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 88.237943][ T8503] tc_dump_action: action bad kind [ 88.265605][ T9] usb 7-1: USB disconnect, device number 17 [ 88.335626][ T8513] Bluetooth: MGMT ver 1.23 [ 88.339500][ T35] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 15 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 88.375097][ T64] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 88.540917][ C2] usblp0: nonzero read bulk status received: -71 [ 88.542793][ T5988] usb 8-1: USB disconnect, device number 15 [ 88.750027][ T8459] usblp0: removed [ 88.752344][ T8459] [U] [ 88.852120][ T8549] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 88.854673][ T8549] IPv6: NLM_F_CREATE should be set when creating new route [ 88.889568][ T8556] netlink: 68 bytes leftover after parsing attributes in process `syz.0.730'. [ 88.906100][ T8555] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 90.354025][ T64] Bluetooth: hci0: command 0x0c1a tx timeout [ 99.483614][ T8633] __nla_validate_parse: 1 callbacks suppressed [ 99.483626][ T8633] netlink: 5692 bytes leftover after parsing attributes in process `syz.3.751'. [ 99.486394][ T8634] input: syz0 as /devices/virtual/input/input10 [ 99.488162][ T8633] netlink: 5692 bytes leftover after parsing attributes in process `syz.3.751'. [ 99.521263][ T8614] udevd[8614]: setting owner of /dev/input/event4 to uid=0, gid=104 failed: No such file or directory [ 99.633203][ T832] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 99.736938][ T8635] netlink: 20 bytes leftover after parsing attributes in process `syz.1.749'. [ 99.797823][ T832] usb 5-1: Using ep0 maxpacket: 32 [ 99.800564][ T832] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 99.803883][ T832] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 99.807304][ T832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 99.810561][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 99.814217][ T832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 99.817449][ T832] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 99.820846][ T832] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 99.823571][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.830589][ T832] usb 5-1: config 0 descriptor?? [ 100.041469][ T832] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.046625][ T832] usb 5-1: USB disconnect, device number 7 [ 100.049160][ T832] usblp0: removed [ 100.353380][ T832] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 100.491332][ T39] kauditd_printk_skb: 20 callbacks suppressed [ 100.491343][ T39] audit: type=1400 audit(1732801804.677:932): avc: denied { watch_mount } for pid=8697 comm="syz.2.758" path="/224" dev="tmpfs" ino=1270 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.504220][ T8698] cifs: Unknown parameter 'mode' [ 100.513252][ T832] usb 5-1: Using ep0 maxpacket: 32 [ 100.519161][ T832] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 100.521536][ T832] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 100.524086][ T832] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 100.526513][ T832] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 100.529077][ T832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 100.531664][ T832] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 100.536305][ T832] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 100.539275][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.552727][ T832] usb 5-1: config 0 descriptor?? [ 100.755134][ T8718] program syz.2.764 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.762146][ T832] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 100.771825][ T832] usb 5-1: USB disconnect, device number 8 [ 100.776406][ T832] usblp0: removed [ 100.860317][ T5305] Bluetooth: hci0: unexpected event for opcode 0x2035 [ 100.899638][ T8732] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 101.061414][ T39] audit: type=1400 audit(1732801805.248:933): avc: denied { bind } for pid=8750 comm="syz.3.773" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 101.067185][ T39] audit: type=1400 audit(1732801805.248:934): avc: denied { name_bind } for pid=8750 comm="syz.3.773" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 101.072446][ T39] audit: type=1400 audit(1732801805.248:935): avc: denied { node_bind } for pid=8750 comm="syz.3.773" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 101.180575][ T39] audit: type=1400 audit(1732801805.368:936): avc: denied { watch } for pid=8764 comm="syz.2.775" path="/233/file0/file0" dev="9p" ino=35922763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 101.292189][ T8767] smc: net device wg0 applied user defined pnetid SYZ0 [ 101.294335][ T8767] netlink: 'syz.0.777': attribute type 39 has an invalid length. [ 101.308454][ T8767] smc: removing net device wg0 with user defined pnetid SYZ0 [ 101.490252][ T39] audit: type=1400 audit(1732801805.678:937): avc: denied { listen } for pid=8778 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.502224][ T39] audit: type=1400 audit(1732801805.688:938): avc: denied { accept } for pid=8778 comm="syz.0.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 101.553930][ T9] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 101.555920][ T9] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 101.633284][ T5305] Bluetooth: hci2: command 0x0405 tx timeout [ 101.779448][ T8784] netlink: 'syz.0.781': attribute type 32 has an invalid length. [ 101.781577][ T8784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.781'. [ 101.784347][ T8784] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 102.098597][ T8809] program syz.0.786 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 102.208220][ T8825] xt_SECMARK: invalid mode: 0 [ 102.243630][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.0.791'. [ 102.413036][ T39] audit: type=1400 audit(1732801806.598:939): avc: denied { ioctl } for pid=8849 comm="syz.2.796" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.482844][ T39] audit: type=1400 audit(1732801806.668:940): avc: denied { append } for pid=8852 comm="syz.2.798" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 102.546694][ T39] audit: type=1400 audit(1732801806.738:941): avc: denied { write } for pid=8862 comm="syz.2.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 102.570428][ T8863] syzkaller0: entered promiscuous mode [ 102.574908][ T8863] syzkaller0: entered allmulticast mode [ 102.588888][ T8863] syzkaller0: create flow: hash 1243059651 index 1 [ 102.599620][ T8867] overlayfs: disabling nfs_export due to verity=on [ 102.623176][ T8862] syzkaller0: delete flow: hash 1243059651 index 1 [ 102.688111][ T8876] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes [ 103.637054][ T64] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.638959][ T9] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 103.640653][ T9] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 103.951840][ T8910] netlink: 108 bytes leftover after parsing attributes in process `syz.2.814'. [ 103.976532][ C2] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.025836][ T8921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.819'. [ 104.138824][ T8931] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 104.139213][ T8930] IPVS: stopping master sync thread 8931 ... [ 104.293196][ T6441] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 104.350827][ T8962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8962 comm=syz.3.827 [ 104.453082][ T6441] usb 5-1: Using ep0 maxpacket: 8 [ 104.455737][ T6441] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 104.457962][ T6441] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 104.460608][ T6441] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 104.463833][ T6441] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 104.466423][ T6441] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.469834][ T6441] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 104.472329][ T6441] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.712927][ T9] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 105.712979][ T64] Bluetooth: hci2: command 0x0405 tx timeout [ 105.714597][ T9] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 109.554254][ T6441] usb 5-1: usb_control_msg returned -110 [ 109.555803][ T6441] usbtmc 5-1:16.0: can't read capabilities [ 114.396598][ T5990] usb 5-1: USB disconnect, device number 9 [ 114.433352][ T8984] overlay: Unknown parameter 'permit_directio' [ 114.435767][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 114.435777][ T39] audit: type=1400 audit(1732801818.628:950): avc: denied { ioctl } for pid=8985 comm="syz.3.836" path="socket:[30887]" dev="sockfs" ino=30887 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 114.444912][ T39] audit: type=1400 audit(1732801818.628:951): avc: denied { read } for pid=8985 comm="syz.3.836" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 114.444934][ T39] audit: type=1400 audit(1732801818.628:952): avc: denied { open } for pid=8985 comm="syz.3.836" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 114.465446][ T39] audit: type=1400 audit(1732801818.658:953): avc: denied { ioctl } for pid=8985 comm="syz.3.836" path="socket:[30890]" dev="sockfs" ino=30890 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 114.486900][ T8996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8996 comm=syz.2.837 [ 114.490474][ T8996] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8996 comm=syz.2.837 [ 114.507550][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.3.839'. [ 114.511806][ T8998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.839'. [ 114.594787][ T8998] xt_hashlimit: size too large, truncated to 1048576 [ 114.646053][ T39] audit: type=1400 audit(1732801818.838:954): avc: denied { setopt } for pid=9002 comm="syz.0.840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 114.673442][ T6441] page_pool_release_retry() stalled pool shutdown: id 27, 1 inflight 60 sec [ 115.148709][ T9020] tmpfs: Bad value for 'mpol' [ 115.175454][ T9026] netlink: 28 bytes leftover after parsing attributes in process `syz.3.846'. [ 115.203398][ T9029] tipc: Started in network mode [ 115.204725][ T9029] tipc: Node identity , cluster identity 4711 [ 115.206311][ T9029] tipc: Failed to obtain node identity [ 115.207749][ T9029] tipc: Enabling of bearer rejected, failed to enable media [ 115.234251][ T9031] netlink: 8 bytes leftover after parsing attributes in process `syz.3.848'. [ 115.236982][ T9031] netlink: 52 bytes leftover after parsing attributes in process `syz.3.848'. [ 115.276196][ T9038] virtio-fs: tag <(null)> not found [ 115.345480][ T9031] fuse: Unknown parameter 'fdCbΊFcB' [ 115.712373][ T5990] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 115.784886][ T39] audit: type=1400 audit(1732801819.978:955): avc: denied { unlink } for pid=9063 comm="syz.0.857" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="9p" ino=35922763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 115.799079][ T9078] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 115.855470][ T9082] infiniband syz1: set active [ 115.858735][ T9065] netlink: 'syz.0.857': attribute type 4 has an invalid length. [ 115.892533][ T5990] usb 6-1: Using ep0 maxpacket: 32 [ 115.898901][ T5990] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 115.903179][ T5990] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 115.905548][ T5990] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 115.907679][ T5990] usb 6-1: Product: syz [ 115.908880][ T5990] usb 6-1: Manufacturer: syz [ 115.910106][ T5990] usb 6-1: SerialNumber: syz [ 115.912612][ T5990] usb 6-1: config 0 descriptor?? [ 115.914950][ T9059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.148013][ T39] audit: type=1400 audit(1732801820.338:956): avc: denied { setopt } for pid=9089 comm="syz.3.862" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 116.176465][ T5990] usb 6-1: USB disconnect, device number 14 [ 116.273780][ T39] audit: type=1400 audit(1732801820.468:957): avc: denied { mounton } for pid=9096 comm="syz.3.863" path="/206/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 116.280543][ T9097] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 116.284758][ T9097] overlayfs: failed to clone lowerpath [ 116.632441][ T6441] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 116.668852][ T9111] dlm: Unknown command passed to DLM device : 8 [ 116.668852][ T9111] [ 116.772572][ T9122] Invalid source name [ 116.802428][ T6441] usb 6-1: Using ep0 maxpacket: 8 [ 116.805680][ T6441] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 116.808530][ T6441] usb 6-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.811255][ T6441] usb 6-1: config 1 interface 0 altsetting 8 bulk endpoint 0x82 has invalid maxpacket 32 [ 116.813866][ T6441] usb 6-1: config 1 interface 0 altsetting 8 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 116.817211][ T6441] usb 6-1: config 1 interface 0 has no altsetting 0 [ 116.821005][ T6441] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 116.823736][ T6441] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.825742][ T6441] usb 6-1: Product: 脭廀踼偫枨ꊊⱴ睭ϟ欰裞졸囁౱쁍唇ꞎ웉ꇃ㒒꣈ᨯ䂆憬약钸 [ 116.828538][ T6441] usb 6-1: Manufacturer: Ꝑ竟㓫꣕ᑊ옓癿㨰⇏葖侧鼺攼⮳ᴠﳛ鏾愼혜㽬卶⇖켧䠍퇁犕ᗠ|铴㋨ᰚ섷ꇀ♘䖑ִ [ 116.832549][ T6441] usb 6-1: SerialNumber: 㐢 [ 116.844093][ T9059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.846724][ T9059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 116.921794][ T39] audit: type=1400 audit(1732801821.108:958): avc: denied { append } for pid=9129 comm="syz.0.871" name="usbmon5" dev="devtmpfs" ino=753 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 116.976868][ T39] audit: type=1400 audit(1732801821.168:959): avc: denied { setopt } for pid=9129 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 117.054079][ T6441] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 117.070242][ T6441] usb 6-1: USB disconnect, device number 15 [ 117.682537][ T9149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.876'. [ 117.689035][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.0.876'. [ 117.844875][ T9164] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 117.930111][ T9171] Option ' Jgs|;Bv@5&V' to dns_resolver key: bad/missing value [ 118.002881][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.880'. [ 118.005357][ T9170] netlink: 20 bytes leftover after parsing attributes in process `syz.3.880'. [ 118.350581][ T9192] syzkaller0: entered promiscuous mode [ 118.352714][ T9192] syzkaller0: entered allmulticast mode [ 118.755168][ T9205] netlink: 'syz.2.890': attribute type 9 has an invalid length. [ 118.757299][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.890'. [ 119.060807][ T9221] raw_sendmsg: syz.1.893 forgot to set AF_INET. Fix it! [ 119.120123][ T9222] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 119.640550][ T9214] Falling back ldisc for ptm0. [ 129.438960][ T9226] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 129.440736][ T9226] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 129.443915][ T9226] vhci_hcd vhci_hcd.0: Device attached [ 129.695494][ T5988] usb 37-1: new high-speed USB device number 4 using vhci_hcd [ 129.701398][ T9227] vhci_hcd: connection reset by peer [ 129.704636][ T6124] vhci_hcd: stop threads [ 129.706084][ T6124] vhci_hcd: release socket [ 129.708287][ T6124] vhci_hcd: disconnect device [ 130.284710][ T9232] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 130.286853][ T9232] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 130.290573][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 130.290587][ T39] audit: type=1400 audit(1732801834.479:963): avc: denied { connect } for pid=9231 comm="syz.0.896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 131.703312][ T9241] overlayfs: failed to resolve './file1': -2 [ 131.755933][ T9244] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 131.815966][ T9254] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 131.828344][ T39] audit: type=1326 audit(1732801836.019:964): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9253 comm="syz.2.903" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd236580809 code=0x0 [ 131.939372][ T39] audit: type=1400 audit(1732801836.129:965): avc: denied { shutdown } for pid=9253 comm="syz.2.903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 132.022695][ T39] audit: type=1400 audit(1732801836.219:966): avc: denied { execute } for pid=9264 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 132.028762][ T39] audit: type=1400 audit(1732801836.219:967): avc: denied { execute_no_trans } for pid=9264 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 132.049639][ T9267] nvme_fabrics: unknown parameter or missing value ' ' in ctrl creation request [ 132.075015][ T39] audit: type=1400 audit(1732801836.269:968): avc: denied { bind } for pid=9270 comm="syz.3.909" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 132.168694][ T5305] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.173543][ T5305] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.176463][ T5305] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.183489][ T5305] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.186698][ T5305] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 132.190506][ T5305] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.221164][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 132.226918][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 132.229502][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 132.232481][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 132.234584][ T64] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 132.236570][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 132.250501][ T39] audit: type=1400 audit(1732801836.439:969): avc: denied { mounton } for pid=9282 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 132.380760][ T9282] chnl_net:caif_netlink_parms(): no params data found [ 132.437603][ T9282] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.439639][ T9282] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.442045][ T9282] bridge_slave_0: entered allmulticast mode [ 132.444936][ T9282] bridge_slave_0: entered promiscuous mode [ 132.447650][ T9282] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.449510][ T9282] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.451565][ T9282] bridge_slave_1: entered allmulticast mode [ 132.454146][ T9282] bridge_slave_1: entered promiscuous mode [ 132.473699][ T9282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 132.477327][ T9282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.499605][ T9282] team0: Port device team_slave_0 added [ 132.502355][ T9282] team0: Port device team_slave_1 added [ 132.520679][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.522640][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.529090][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.529677][ T9282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.531643][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.536108][ T9282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.538422][ T9282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.546519][ T9282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 134.281398][ T5305] Bluetooth: hci2: command tx timeout [ 134.831309][ T5988] vhci_hcd: vhci_device speed not set [ 136.351310][ T5305] Bluetooth: hci2: command tx timeout [ 138.431112][ T5305] Bluetooth: hci2: command tx timeout [ 140.511115][ T5305] Bluetooth: hci2: command tx timeout [ 147.471408][ T1415] ================================================================== [ 147.473757][ T1415] BUG: KASAN: slab-use-after-free in handle_tx+0x5dc/0x630 [ 147.475748][ T1415] Read of size 1 at addr ffff888050488490 by task aoe_tx0/1415 [ 147.479171][ T1415] [ 147.481200][ T1415] CPU: 0 UID: 0 PID: 1415 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 147.483877][ T1415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.486718][ T1415] Call Trace: [ 147.487629][ T1415] [ 147.488417][ T1415] dump_stack_lvl+0x116/0x1f0 [ 147.489850][ T1415] print_report+0xc3/0x620 [ 147.491160][ T1415] ? __virt_addr_valid+0x5e/0x590 [ 147.492485][ T1415] ? __phys_addr+0xc6/0x150 [ 147.493683][ T1415] kasan_report+0xd9/0x110 [ 147.494875][ T1415] ? handle_tx+0x5dc/0x630 [ 147.496061][ T1415] ? handle_tx+0x5dc/0x630 [ 147.497247][ T1415] handle_tx+0x5dc/0x630 [ 147.498396][ T1415] dev_hard_start_xmit+0x9a/0x7b0 [ 147.499817][ T1415] __dev_queue_xmit+0x7f0/0x43e0 [ 147.501346][ T1415] ? __pfx___dev_queue_xmit+0x10/0x10 [ 147.502886][ T1415] ? __pfx___lock_acquire+0x10/0x10 [ 147.504259][ T1415] ? __pfx___lock_acquire+0x10/0x10 [ 147.505622][ T1415] ? lock_acquire.part.0+0x11b/0x380 [ 147.507040][ T1415] ? find_held_lock+0x2d/0x110 [ 147.508319][ T1415] ? find_held_lock+0x2d/0x110 [ 147.509758][ T1415] ? tx+0xa8/0x190 [ 147.510866][ T1415] ? __pfx_lock_release+0x10/0x10 [ 147.512196][ T1415] ? lock_acquire+0x2f/0xb0 [ 147.513548][ T1415] tx+0xcc/0x190 [ 147.514537][ T1415] ? __pfx_tx+0x10/0x10 [ 147.515659][ T1415] kthread+0x1e7/0x3c0 [ 147.516740][ T1415] ? __pfx_kthread+0x10/0x10 [ 147.517974][ T1415] ? __pfx_default_wake_function+0x10/0x10 [ 147.518902][ T9322] syz-executor: vmalloc error: size 4194304, failed to allocated page array size 8192, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset= [ 147.519553][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.524643][ T9322] / [ 147.525666][ T1415] ? __kthread_parkme+0x148/0x220 [ 147.525692][ T1415] ? __pfx_kthread+0x10/0x10 [ 147.525864][ T9322] ,mems_allowed=0-1 [ 147.526584][ T1415] kthread+0x2c1/0x3a0 [ 147.528026][ T9322] [ 147.529220][ T1415] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.533297][ T1415] ? __pfx_kthread+0x10/0x10 [ 147.534527][ T1415] ret_from_fork+0x45/0x80 [ 147.535710][ T1415] ? __pfx_kthread+0x10/0x10 [ 147.536919][ T1415] ret_from_fork_asm+0x1a/0x30 [ 147.538175][ T1415] [ 147.539003][ T1415] [ 147.539009][ T9322] CPU: 1 UID: 0 PID: 9322 Comm: syz-executor Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 147.539743][ T1415] Allocated by task 7163: [ 147.542546][ T9322] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.543700][ T1415] kasan_save_stack+0x33/0x60 [ 147.546446][ T9322] Call Trace: [ 147.546455][ T9322] [ 147.547660][ T1415] kasan_save_track+0x14/0x30 [ 147.548541][ T9322] dump_stack_lvl+0x16c/0x1f0 [ 147.549306][ T1415] __kasan_kmalloc+0xaa/0xb0 [ 147.550526][ T9322] warn_alloc+0x24d/0x3a0 [ 147.551755][ T1415] alloc_tty_struct+0x98/0x8d0 [ 147.553016][ T9322] ? __pfx_warn_alloc+0x10/0x10 [ 147.554118][ T1415] tty_init_dev.part.0+0x1e/0x660 [ 147.555359][ T9322] ? __get_vm_area_node+0x1b0/0x2f0 [ 147.556603][ T1415] tty_open+0xac1/0xf80 [ 147.558001][ T9322] ? __get_vm_area_node+0x1dc/0x2f0 [ 147.559486][ T1415] chrdev_open+0x237/0x6a0 [ 147.560540][ T9322] __vmalloc_node_range_noprof+0x1105/0x1530 [ 147.561902][ T1415] do_dentry_open+0xf59/0x1ea0 [ 147.563066][ T9322] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 147.564606][ T1415] vfs_open+0x82/0x3f0 [ 147.565819][ T9322] ? kcov_ioctl+0x4c/0x730 [ 147.567095][ T1415] path_openat+0x1e6a/0x2d60 [ 147.568145][ T9322] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 147.569288][ T1415] do_filp_open+0x20c/0x470 [ 147.570486][ T9322] ? kcov_ioctl+0x4c/0x730 [ 147.572116][ T1415] do_sys_openat2+0x17a/0x1e0 [ 147.573327][ T9322] vmalloc_user_noprof+0x6b/0x90 [ 147.574477][ T1415] __x64_sys_openat+0x175/0x210 [ 147.575699][ T9322] ? kcov_ioctl+0x4c/0x730 [ 147.576960][ T1415] do_syscall_64+0xcd/0x250 [ 147.578219][ T9322] kcov_ioctl+0x4c/0x730 [ 147.579403][ T1415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.580598][ T9322] ? __pfx_kcov_ioctl+0x10/0x10 [ 147.581689][ T1415] [ 147.581697][ T1415] Freed by task 9283: [ 147.583497][ T9322] __x64_sys_ioctl+0x190/0x200 [ 147.584773][ T1415] kasan_save_stack+0x33/0x60 [ 147.585409][ T9322] do_syscall_64+0xcd/0x250 [ 147.586437][ T1415] kasan_save_track+0x14/0x30 [ 147.587812][ T9322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.589031][ T1415] kasan_save_free_info+0x3b/0x60 [ 147.590216][ T9322] RIP: 0033:0x7fbc3c58040b [ 147.591474][ T1415] __kasan_slab_free+0x51/0x70 [ 147.593053][ T9322] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 147.594349][ T1415] kfree+0x14f/0x4b0 [ 147.595518][ T9322] RSP: 002b:00007ffce6fd99b0 EFLAGS: 00000246 [ 147.596755][ T1415] process_one_work+0x9c5/0x1ba0 [ 147.601698][ T9322] ORIG_RAX: 0000000000000010 [ 147.603058][ T1415] worker_thread+0x6c8/0xf00 [ 147.604667][ T9322] RAX: ffffffffffffffda RBX: 0000000000080000 RCX: 00007fbc3c58040b [ 147.606308][ T1415] kthread+0x2c1/0x3a0 [ 147.607526][ T9322] RDX: 0000000000080000 RSI: ffffffff80086301 RDI: 00000000000000da [ 147.608792][ T1415] ret_from_fork+0x45/0x80 [ 147.611019][ T9322] RBP: 00007fbc3c7461f8 R08: 00000000000000d9 R09: 0000000000000000 [ 147.612091][ T1415] ret_from_fork_asm+0x1a/0x30 [ 147.614426][ T9322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 147.615586][ T1415] [ 147.615592][ T1415] Last potentially related work creation: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 147.617627][ T9322] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 147.618893][ T1415] kasan_save_stack+0x33/0x60 [ 147.620946][ T9322] [ 147.621594][ T1415] __kasan_record_aux_stack+0xba/0xd0 [ 147.629512][ T1415] insert_work+0x36/0x230 [ 147.630655][ T1415] __queue_work+0x97e/0x1080 [ 147.631873][ T1415] queue_work_on+0x11a/0x140 [ 147.633091][ T1415] release_tty+0x4de/0x5d0 [ 147.634261][ T1415] tty_release_struct+0xb7/0xe0 [ 147.635549][ T1415] tty_release+0xe25/0x1410 [ 147.636757][ T1415] __fput+0x3f8/0xb60 [ 147.638024][ T1415] task_work_run+0x14e/0x250 [ 147.638587][ T39] audit: type=1400 audit(1732801851.710:970): avc: denied { write } for pid=5864 comm="syz-executor" path="pipe:[3816]" dev="pipefs" ino=3816 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 147.639310][ T1415] do_exit+0xadd/0x2d70 [ 147.646396][ T1415] do_group_exit+0xd3/0x2a0 [ 147.647647][ T1415] get_signal+0x24ed/0x26c0 [ 147.648850][ T1415] arch_do_signal_or_restart+0x90/0x7e0 [ 147.650314][ T1415] syscall_exit_to_user_mode+0x150/0x2a0 [ 147.651826][ T1415] do_syscall_64+0xda/0x250 [ 147.653039][ T1415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.654580][ T1415] [ 147.655212][ T1415] The buggy address belongs to the object at ffff888050488000 [ 147.655212][ T1415] which belongs to the cache kmalloc-cg-2k of size 2048 [ 147.658910][ T1415] The buggy address is located 1168 bytes inside of [ 147.658910][ T1415] freed 2048-byte region [ffff888050488000, ffff888050488800) [ 147.662513][ T1415] [ 147.662881][ T9322] Mem-Info: [ 147.663175][ T1415] The buggy address belongs to the physical page: [ 147.663181][ T1415] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x50488 [ 147.664058][ T9322] active_anon:3584 inactive_anon:15 isolated_anon:0 [ 147.664058][ T9322] active_file:4567 inactive_file:48617 isolated_file:0 [ 147.664058][ T9322] unevictable:1768 dirty:71 writeback:21 [ 147.664058][ T9322] slab_reclaimable:11639 slab_unreclaimable:76808 [ 147.664058][ T9322] mapped:24923 shmem:2470 pagetables:544 [ 147.664058][ T9322] sec_pagetables:303 bounce:0 [ 147.664058][ T9322] kernel_misc_reclaimable:0 [ 147.664058][ T9322] free:450115 free_pcp:10998 free_cma:0 [ 147.665739][ T1415] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 147.668011][ T9322] Node 0 active_anon:14336kB inactive_anon:60kB active_file:18268kB inactive_file:194392kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:99692kB dirty:284kB writeback:84kB shmem:6344kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12816kB pagetables:2176kB sec_pagetables:1212kB all_unreclaimable? no [ 147.682468][ T1415] memcg:ffff888031d95781 [ 147.682480][ T1415] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 147.682491][ T1415] page_type: f5(slab) [ 147.682501][ T1415] raw: 00fff00000000040 ffff88801b050140 dead000000000100 dead000000000122 [ 147.682510][ T1415] raw: 0000000000000000 0000000000080008 00000001f5000000 ffff888031d95781 [ 147.682519][ T1415] head: 00fff00000000040 ffff88801b050140 dead000000000100 dead000000000122 [ 147.682528][ T1415] head: 0000000000000000 0000000000080008 00000001f5000000 ffff888031d95781 [ 147.682537][ T1415] head: 00fff00000000003 ffffea0001412201 ffffffffffffffff 0000000000000000 [ 147.682546][ T1415] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 147.682551][ T1415] page dumped because: kasan: bad access detected [ 147.682556][ T1415] page_owner tracks the page as allocated [ 147.682560][ T1415] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6951, tgid 6949 (syz.2.262), ts 56683952216, free_ts 56680744433 [ 147.682579][ T1415] post_alloc_hook+0x2d1/0x350 [ 147.685947][ T9322] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 147.693013][ T1415] get_page_from_freelist+0xfce/0x2f80 [ 147.693037][ T1415] __alloc_pages_noprof+0x223/0x25a0 [ 147.693048][ T1415] alloc_pages_mpol_noprof+0x2c9/0x610 [ 147.693062][ T1415] new_slab+0x2c9/0x410 [ 147.693070][ T1415] ___slab_alloc+0xdac/0x1870 [ 147.693079][ T1415] __slab_alloc.constprop.0+0x56/0xb0 [ 147.694537][ T9322] Node 0 [ 147.695969][ T1415] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 147.696991][ T9322] DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 147.699133][ T1415] kmemdup_noprof+0x29/0x60 [ 147.701702][ T9322] lowmem_reserve[]: [ 147.703605][ T1415] neigh_sysctl_register+0xb3/0x640 [ 147.706090][ T9322] 0 [ 147.708247][ T1415] addrconf_sysctl_register+0xb9/0x1f0 [ 147.710312][ T9322] 1212 [ 147.711920][ T1415] ipv6_add_dev+0xa6f/0x13f0 [ 147.711939][ T1415] addrconf_notify+0x53e/0x19c0 [ 147.711952][ T1415] notifier_call_chain+0xb7/0x410 [ 147.711965][ T1415] call_netdevice_notifiers_info+0xbe/0x140 [ 147.711978][ T1415] register_netdevice+0x17a0/0x1e90 [ 147.711990][ T1415] page last free pid 6951 tgid 6949 stack trace: [ 147.712008][ T1415] free_unref_page+0x661/0x1080 [ 147.714283][ T9322] 0 [ 147.718461][ T1415] __put_partials+0x14c/0x170 [ 147.719665][ T9322] 0 0 [ 147.726851][ T1415] qlist_free_all+0x4e/0x120 [ 147.726879][ T1415] kasan_quarantine_reduce+0x195/0x1e0 [ 147.726890][ T1415] __kasan_slab_alloc+0x69/0x90 [ 147.726900][ T1415] __kmalloc_cache_noprof+0x243/0x410 [ 147.726910][ T1415] ref_tracker_alloc+0x17c/0x5b0 [ 147.726919][ T1415] netdev_queue_update_kobjects+0x24c/0x5b0 [ 147.726930][ T1415] netdev_register_kobject+0x290/0x3f0 [ 147.726939][ T1415] register_netdevice+0x1473/0x1e90 [ 147.726951][ T1415] register_netdev+0x2f/0x50 [ 147.729262][ T9322] [ 147.729785][ T1415] sit_init_net+0x24b/0x600 [ 147.731360][ T9322] Node 0 [ 147.732195][ T1415] ops_init+0x1df/0x5f0 [ 147.733355][ T9322] DMA32 free:192884kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:14336kB inactive_anon:60kB active_file:18268kB inactive_file:194392kB unevictable:3536kB writepending:368kB present:2080628kB managed:1269920kB mlocked:0kB bounce:0kB free_pcp:42992kB local_pcp:560kB free_cma:0kB [ 147.734667][ T1415] setup_net+0x21f/0x860 [ 147.735407][ T9322] lowmem_reserve[]: 0 [ 147.736956][ T1415] copy_net_ns+0x2b4/0x6b0 [ 147.744297][ T9322] 0 [ 147.744703][ T1415] create_new_namespaces+0x3ea/0xad0 [ 147.745940][ T9322] 0 [ 147.747219][ T1415] [ 147.747226][ T1415] Memory state around the buggy address: [ 147.747233][ T1415] ffff888050488380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.747983][ T9322] 0 [ 147.749338][ T1415] ffff888050488400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.749350][ T1415] >ffff888050488480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.749355][ T1415] ^ [ 147.750329][ T9322] 0 [ 147.751552][ T1415] ffff888050488500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.751564][ T1415] ffff888050488580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.751569][ T1415] ================================================================== [ 147.751632][ T1415] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.751640][ T1415] CPU: 0 UID: 0 PID: 1415 Comm: aoe_tx0 Not tainted 6.12.0-syzkaller-10553-gb86545e02e8c #0 [ 147.751653][ T1415] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 147.751659][ T1415] Call Trace: [ 147.751664][ T1415] [ 147.751669][ T1415] dump_stack_lvl+0x3d/0x1f0 [ 147.751685][ T1415] panic+0x71d/0x800 [ 147.751700][ T1415] ? __pfx_panic+0x10/0x10 [ 147.751717][ T1415] ? check_panic_on_warn+0x1f/0xb0 [ 147.751727][ T1415] check_panic_on_warn+0xab/0xb0 [ 147.751737][ T1415] end_report+0x117/0x180 [ 147.751749][ T1415] kasan_report+0xe9/0x110 [ 147.751760][ T1415] ? handle_tx+0x5dc/0x630 [ 147.751775][ T1415] ? handle_tx+0x5dc/0x630 [ 147.751790][ T1415] handle_tx+0x5dc/0x630 [ 147.751805][ T1415] dev_hard_start_xmit+0x9a/0x7b0 [ 147.751822][ T1415] __dev_queue_xmit+0x7f0/0x43e0 [ 147.751838][ T1415] ? __pfx___dev_queue_xmit+0x10/0x10 [ 147.751853][ T1415] ? __pfx___lock_acquire+0x10/0x10 [ 147.751865][ T1415] ? __pfx___lock_acquire+0x10/0x10 [ 147.751876][ T1415] ? lock_acquire.part.0+0x11b/0x380 [ 147.751887][ T1415] ? find_held_lock+0x2d/0x110 [ 147.751902][ T1415] ? find_held_lock+0x2d/0x110 [ 147.751916][ T1415] ? tx+0xa8/0x190 [ 147.751930][ T1415] ? __pfx_lock_release+0x10/0x10 [ 147.751941][ T1415] ? lock_acquire+0x2f/0xb0 [ 147.751954][ T1415] tx+0xcc/0x190 [ 147.751967][ T1415] ? __pfx_tx+0x10/0x10 [ 147.751980][ T1415] kthread+0x1e7/0x3c0 [ 147.751993][ T1415] ? __pfx_kthread+0x10/0x10 [ 147.752006][ T1415] ? __pfx_default_wake_function+0x10/0x10 [ 147.752018][ T1415] ? lockdep_hardirqs_on+0x7c/0x110 [ 147.752032][ T1415] ? __kthread_parkme+0x148/0x220 [ 147.752046][ T1415] ? __pfx_kthread+0x10/0x10 [ 147.752058][ T1415] kthread+0x2c1/0x3a0 [ 147.752071][ T1415] ? _raw_spin_unlock_irq+0x23/0x50 [ 147.752084][ T1415] ? __pfx_kthread+0x10/0x10 [ 147.752096][ T1415] ret_from_fork+0x45/0x80 [ 147.752107][ T1415] ? __pfx_kthread+0x10/0x10 [ 147.752120][ T1415] ret_from_fork_asm+0x1a/0x30 [ 147.752137][ T1415] [ 147.753757][ T1415] Kernel Offset: disabled VM DIAGNOSIS: 13:50:51 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000061 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85114245 RDI=ffffffff9ab43ba0 RBP=ffffffff9ab43b60 RSP=ffffc90006e7f498 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000061 R14=ffffffff851141e0 R15=0000000000000000 RIP=ffffffff8511426f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f59e4564fd8 CR3=0000000021396000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffe0000 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000400000206 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59e37f47e8 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59e37f47f5 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59e37f47ef ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59e37f4803 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59e37f4889 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f59e37f4967 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 6573756f6d2f7475 706e692f7665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000013 4650564c4e0c5756 534d4a0c5546470c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=fffffbfff2dd0d9f RBX=fffffbfff2dd0da0 RCX=ffffffff816a86fe RDX=fffffbfff2dd0da0 RSI=0000000000000008 RDI=ffffffff96e86cf8 RBP=fffffbfff2dd0d9f RSP=ffffc900036af308 R8 =0000000000000000 R9 =fffffbfff2dd0d9f R10=ffffffff96e86cff R11=0000000000000003 R12=ffffed100548f5e3 R13=ffff88802a47a440 R14=0000000000000005 R15=0000000000000000 RIP=ffffffff81f1a951 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f086dc1eff8 CR3=0000000051570000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c1fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 87efb3210af7ff00 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000100000008060a 0147da0480800800 000000000000000b 0000000500000001 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01ffec0300000021 0780a00300000000 00007f086cf10d00 00007f086cf10d00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0307f6a000000022 b803080800000000 03004c504701ffff fffffffffffff708 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffff00000023 80e0030000000000 d8030008000780d0 0306bcfa040780c0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0007818800000024 0781800300000000 0000000000000000 0000000001ffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffff0407828003 03ffffffff040781 f0030008000781e8 0301080000000027 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000700000000 ba08000781d00300 0800180300080010 0300080000000026 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000030000000000 032008000781b803 0dcc08000781b003 0008000800000025 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0003000400000000 1008000781980301 0800078190030008 0007818800000024 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=0000000000000001 RCX=00007fbc3c708780 RDX=00007ffce6fd9eb9 RSI=00007ffce6fd9b8c RDI=0000000000000001 RBP=0000000000000000 RSP=fffffe0000090fd0 R8 =0000000000000000 R9 =00007fbc3c61b674 R10=0000555594667000 R11=0000000000000202 R12=0000000000000002 R13=00007ffce6fd9d18 R14=00007ffce6fd9cb0 R15=00007ffce6fd9ca8 RIP=ffffffff8b401280 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555594667500 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fbc3c517150 CR3=0000000025084000 CR4=00352ef0 DR0=0000000000002800 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005555946677e0 00005555946677e0 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000038e20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc3c710448 00007fbc3c710460 00007fbc3c710468 00007fbc3c710440 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc3c710488 00007fbc3c710480 00007fbc3c710478 00007fbc3c710450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc3d27d100 00007fbc3c710440 00007fbc3c710458 00007fbc3c7104a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fbc3c710498 00007fbc3c710490 00007fbc3c710488 00007fbc3c710480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000ffffffff RBX=0000000000000001 RCX=0000000000000022 RDX=000000000000000c RSI=0000000000000001 RDI=0000000000002000 RBP=000000000000000c RSP=ffffc90005e37b08 R8 =ffffc90000000000 R9 =ffffe8ffffffffff R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000001 R14=0000000000002000 R15=dffffc0000000000 RIP=ffffffff81e1bfc0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555579515500 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5daf746038 CR3=000000005aab4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f709fa7d100 00007f709ef10440 00007f709ef10458 00007f709ef104a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000