last executing test programs: 2.455649129s ago: executing program 3 (id=687): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002fc0)=@newtfilter={0xe84, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0xe58, 0x2, [@TCA_FW_ACT={0xe54, 0x4, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x4, 0x1ff, 0x20000000, 0xc, 0x6}, 0x7f, 0x5}, [{0x2a9, 0x6, 0x810, 0x4, 0x5}, {0x4a7, 0x1ff, 0x4, 0x1, 0x7, 0xdd}, {0x9, 0x7, 0x3ff, 0x97, 0xfffffffd, 0x4}, {0x8, 0x0, 0x6, 0x2, 0x7fff, 0x3}, {0x4f9a, 0x5, 0x1, 0x3, 0x2, 0x8}, {0x0, 0x5, 0x1437, 0x1, 0xee57, 0x9}, {0x77d, 0x8, 0x9, 0x6, 0x8, 0x1}, {0x5, 0x6, 0x0, 0x2, 0x1, 0x7fff}, {0x0, 0x3, 0x4235da1, 0x9, 0x7ec9, 0x8}, {0x10000, 0x2, 0x5, 0x1, 0x3, 0x9}, {0xd, 0xffff0001, 0x0, 0x6, 0x81, 0x4}, {0xfffffffc, 0x4, 0xffff, 0x2, 0xffffffff, 0xfffffffa}, {0x5, 0xd29, 0x101, 0x3, 0x7, 0xc}, {0x0, 0xfffffff7, 0x401, 0x72b2, 0xc874, 0x3}, {0x3, 0xf, 0x5, 0x1, 0x1ff, 0x6}, {0x9b9b, 0xffff, 0x6, 0xb, 0xb3d, 0x812}, {0x5, 0x7, 0x2, 0x5, 0x5, 0x4}, {0x6, 0x0, 0x9, 0x2, 0x82, 0x2}, {0xfffffff7, 0x6, 0x2, 0x9, 0xff}, {0x4, 0x1, 0x371, 0x8, 0x0, 0xeac}, {0x9, 0x2, 0x4, 0x8, 0x113, 0x8d3f}, {0x7, 0xffffffff, 0x8, 0x92a4, 0x9, 0x10}, {0x1a4a13f0, 0x9, 0xe, 0x3, 0xad47, 0xf83b}, {0x1ff, 0x5, 0x7, 0xfff, 0x9}, {0x100, 0x4, 0x200, 0x9, 0x1, 0x9df}, {0x9, 0x1, 0x65, 0x9, 0x7}, {0x401, 0x10001, 0x9, 0x200, 0x9, 0x1}, {0x6, 0x10, 0xf, 0x2, 0x6, 0x3}, {0xf23, 0x3ff, 0x0, 0x9, 0x7}, {0x80000000, 0x6, 0x0, 0x6, 0x6, 0xd}, {0x0, 0x8, 0xd, 0x8000, 0x3, 0x2}, {0x800, 0x9, 0x6, 0x3, 0x7, 0x8}, {0x7, 0x8, 0x7358, 0x7, 0x8, 0xffffffff}, {0x4d9, 0x45db8bad, 0xb3dd, 0x1, 0xbc, 0x7ff}, {0x7, 0x7, 0x3, 0x3, 0x3, 0x7a}, {0x5a1b, 0x1, 0x1, 0x7ff, 0x3, 0x4}, {0x3, 0x7, 0x4, 0x4, 0xffff, 0x8}, {0xffffffa5, 0x7, 0x0, 0x10, 0x3, 0x5}, {0x8219, 0x0, 0x2, 0x6, 0x3, 0x2}, {0x62, 0xf4, 0x6, 0x4, 0x4, 0x67}, {0x5, 0x4, 0x53, 0x8, 0xc0000000, 0x7}, {0x2, 0x5, 0x2, 0xffff, 0x2, 0x2}, {0x80000001, 0x94c, 0x6, 0xfffffe00, 0x5, 0x7b27}, {0x2, 0x6, 0x1000, 0x9, 0x9}, {0xa, 0x0, 0x9, 0x4, 0xe, 0x9}, {0xdf, 0x7fff, 0x8000, 0x81, 0xff, 0xfffffff8}, {0x2, 0x10000, 0x9, 0x2, 0x2}, {0x2, 0x6, 0x9, 0x1, 0x2, 0x40}, {0xfffffe00, 0x3, 0x74d2, 0x3, 0x80000001, 0x6}, {0x2, 0x8, 0xfffffff7, 0x1, 0x6, 0xa}, {0x8, 0x9, 0x8e, 0x33, 0x10001, 0x22cb}, {0x2, 0x31f5, 0x7, 0x5, 0x7fffffff, 0x1}, {0x9, 0x10001, 0x4, 0x7, 0x7, 0x9}, {0xb, 0x1ff, 0xb, 0x3, 0x5, 0x80000001}, {0x7, 0x80, 0x69b, 0x3, 0x8, 0x339}, {0xee, 0x80000000, 0xfba6, 0x101, 0x5, 0xb}, {0x3, 0x458, 0x6, 0xf, 0x7, 0x8000}, {0x9, 0xfffffffa, 0x1000, 0x8, 0xb, 0xce5a}, {0x400, 0xffff, 0x3, 0xbcbb, 0x7, 0xb}, {0x0, 0xe000, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x0, 0x3, 0x9, 0x0, 0x401}, {0xd, 0x1, 0x2, 0xf, 0x81, 0x5}, {0x6, 0xfff, 0x5, 0x5, 0x3, 0x3649}, {0x7, 0x2, 0x80000000, 0x9, 0x1630, 0x9e73}, {0xb, 0x1b6, 0xc4, 0x7, 0x4, 0xca}, {0x4, 0x5, 0x401, 0x4, 0xfffffff8, 0x40}, {0x8, 0x4594, 0x8, 0x4, 0x0, 0xffff}, {0x100, 0xfffffffb, 0x6, 0x0, 0x9, 0x6}, {0x3, 0xf7b, 0x3, 0x8, 0x6, 0x3}, {0x1, 0x5, 0x3, 0xab9, 0x7, 0x9}, {0xffffffff, 0x0, 0xfc, 0x7, 0x6, 0xc}, {0xf, 0x1, 0xa000000, 0x1, 0x101, 0x1f3}, {0x7ff, 0x9, 0xfffff001, 0x8001, 0x2, 0x2}, {0x4, 0xd9, 0x6, 0x1, 0x9, 0xfffffff7}, {0x3, 0x3, 0x7, 0x69a0, 0x10, 0x1}, {0x8f000000, 0x100, 0xffffffff, 0x963, 0x2, 0xc}, {0x6, 0x50, 0x80000006, 0xa, 0x0, 0x3}, {0x649, 0x2, 0x80000001, 0x8, 0x0, 0x1}, {0x8, 0xfff, 0x6, 0x80000001, 0x7fffffff, 0x3}, {0xa3, 0x81, 0x9fcb, 0x1, 0x8, 0x7fff}, {0x0, 0x2, 0x750c, 0x0, 0x1, 0xfffffffc}, {0x7ff, 0x7, 0x10000, 0x9, 0x0, 0x88}, {0x5, 0x10001, 0x7fff, 0x81, 0xfffffff4, 0x7}, {0xfce, 0x80000001, 0x5, 0x4, 0x1ff}, {0x3, 0x0, 0x3ff, 0x7fffffff, 0x9, 0x7}, {0xdac, 0x0, 0x4, 0x80000001, 0x3, 0x8}, {0x7, 0xffffffff, 0x6, 0x8, 0x80000001, 0xa}, {0x2, 0x4, 0x4, 0x401, 0xe32}, {0x5, 0x7, 0x6, 0x8, 0x2, 0x2}, {0x10001, 0x100, 0x3, 0x4, 0x9, 0xfffffffa}, {0x2, 0x0, 0x3, 0x6, 0x800, 0x3}, {0x0, 0x0, 0x3, 0x8, 0x1, 0x3}, {0x3, 0x3, 0xffffffff, 0x3, 0x800, 0xde}, {0x5, 0x66, 0x41d0, 0x8001, 0x1, 0x3}, {0x5, 0x7, 0xfffffffc, 0x4, 0x3, 0x92c}, {0x4, 0xffff, 0x0, 0x101, 0x4, 0x1}, {0x9, 0xf667, 0x5, 0x3, 0x5, 0x4}, {0x1731, 0xa, 0x9960, 0x9, 0x1, 0x7}, {0xd, 0xfffffffa, 0x1, 0x3, 0x40, 0x2}, {0x1, 0x4, 0x80000000, 0x80000001, 0x2, 0x6}, {0x7, 0x2, 0xffffff3a, 0x4cf, 0x800, 0x6}, {0x8000, 0x6, 0x1, 0x0, 0x100, 0x80000000}, {0x3b, 0x5562334a, 0x2, 0x2, 0x6, 0x81}, {0x4, 0x96, 0x81, 0x0, 0x101, 0x7}, {0x4, 0xff, 0x9, 0x0, 0x81, 0x29}, {0xa, 0x5, 0x0, 0x9, 0xffffffff, 0xfb4}, {0x80000000, 0x2, 0xffff, 0x39b4, 0x1, 0x6}, {0x61, 0x2d, 0x6, 0x1fe4c5d2, 0x1, 0x3}, {0x1, 0xe2, 0x7ff, 0x7ff, 0x7f, 0x29d0}, {0x0, 0x4, 0xc, 0xd594, 0x9, 0x7}, {0x6, 0x0, 0x7, 0x9, 0x7, 0x9}, {0x80e9, 0x7, 0x9, 0x1, 0x1, 0x18000}, {0x400, 0x9, 0x0, 0x6c}, {0x2, 0x1, 0x7f, 0x3, 0xfffff71b, 0xce}, {0x1, 0xff, 0xb, 0x4, 0x800, 0x1}, {0x6, 0x2, 0x8, 0xfff, 0x4, 0x7fff}, {0x0, 0x0, 0x7f, 0x401, 0x7, 0x7fff}, {0x7, 0xb, 0x10000, 0x1, 0x8000, 0xfffff830}, {0x2, 0x4, 0x2, 0x1, 0x6, 0x2b4}, {0x3cd2dbce, 0x929a, 0x9dc, 0x0, 0x8, 0xfffffffc}, {0x6, 0x0, 0xe71, 0xc5c3, 0x3, 0x1}, {0x7, 0x2, 0x197a, 0x7, 0x1, 0x8}, {0xff, 0x2c, 0xfffffc01, 0x1, 0x3, 0x100}, {0x7, 0x6, 0x10001, 0xce7, 0xec, 0x1000}, {0x3, 0x6, 0xffffffff, 0x9, 0x2, 0x6}, {0xfa, 0x9, 0xbf1d, 0x9, 0x80, 0x5}, {0x1c91, 0x5f27, 0x1, 0x0, 0x6, 0x6}, {0x37, 0x622, 0x2, 0x1, 0x7, 0x2}], [{0x5}, {0xccffbfc290ab3baa}, {}, {0x2}, {0x2}, {0x0, 0x1}, {0x3}, {0x4, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {}, {0x5, 0x1}, {0x3}, {0x2}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x4, 0x1}, {0x2}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x3, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0xed3229170eca159, 0x1}, {0x2, 0x1}, {0x1}, {0x3}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {}, {0x3}, {0x4}, {0x3, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x5, 0x1}, {0x4}, {0x5, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x5}, {0x54e1b160e6ec45e8, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {}, {0x4, 0x1}, {0x4}, {0x5}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x2}, {}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x2}, {0x9baeccaf277094c4, 0x1}, {}, {0x2, 0x1}, {}, {}, {0x8f9fc2e2ef57f2f0}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x3}, {0x3}, {0x2, 0x1}, {0x2, 0x1}, {0x1}, {0x1, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xe84}, 0x1, 0x0, 0x0, 0x81}, 0x800) syz_emit_ethernet(0xfc1, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0xfb3, 0x0, 0x0, 0x0, 0x84, 0x0, @empty, @broadcast}, "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"}}}}, 0x0) 2.315523515s ago: executing program 3 (id=691): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000007dfb920109050000000000000000000300000a240002000c00028005000140210000001400018008000100ac1414bb08000200ac1414270900010073797a3000000000"], 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20008850) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40101, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'\x00', 0x6bf1c2d5adba8c32}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), r3) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$int_in(r4, 0x40000000af01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000600)) r5 = socket$packet(0x11, 0x3, 0x300) r6 = dup(r1) r7 = fcntl$dupfd(r4, 0x406, r5) ioctl$VHOST_SET_VRING_ADDR(r7, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/251, 0x0, 0x4000}) ioctl$VHOST_NET_SET_BACKEND(r7, 0x4008af30, &(0x7f0000000080)={0x0, r6}) r8 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r9 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r9, 0xaf01, 0x0) r10 = eventfd(0xffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r8, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$VHOST_SET_LOG_FD(r9, 0x4004af07, &(0x7f0000000240)=r10) ioctl$VHOST_SET_VRING_KICK(r9, 0x4008af20, &(0x7f0000000040)={0x1, r10}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r9, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r9, 0x4008af03, &(0x7f0000000880)={0x3, 0x0, [{0x1000, 0x39, &(0x7f0000000340)=""/57}, {0x6000, 0x97, &(0x7f00000006c0)=""/151}, {0x1000, 0xe1, &(0x7f0000000780)=""/225}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r9, 0x4004af61, &(0x7f0000000000)=0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 2.165957567s ago: executing program 0 (id=701): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r1, r2, 0xfffffffffffffc01, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) syz_open_dev$video(&(0x7f00000000c0), 0xb, 0x400) chdir(&(0x7f0000000080)='./file0\x00') 2.056927439s ago: executing program 0 (id=702): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="01002bbd70000000000f4ca4001400000018000180140002006e6500190001000000"], 0x34}}, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x70, 0x2c, 0xd27, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, r4, {0xfff2, 0x4}, {}, {0x5, 0x10}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{}, {0x5, 0x8}}}]}}]}]}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0x400c021}, 0x20040054) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000020000103feffffff000000000a000000000000000400010008000a000008000005001e"], 0x50}}, 0x4000850) 2.04486464s ago: executing program 0 (id=703): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8905, &(0x7f0000000580)) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', &(0x7f0000000100), 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000000)='./file0\x00', 0x20240, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8905, &(0x7f0000000580)) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000140)='./file2\x00', &(0x7f0000000100), 0x0, 0x0) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x800000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) open(&(0x7f0000000000)='./file0\x00', 0x20240, 0x0) (async) 1.807196362s ago: executing program 0 (id=711): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x13, r4, 0x0) r5 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000000)={0x0, &(0x7f0000000180)=[@code={0x1, 0x5e, {"c7442400d0000000c744240216bcde7cff2c24b9800000c00f3235000400000f308b39c4a3e16f3713c4421145fd65362e480fc76eb78f4978d104af43f7e72e490fc75e040f7984d600000000"}}], 0x5e}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REGISTER_BEACONS(r7, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000001500)={0x30, r6, 0x1, 0x70bd07, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x64}, @val={0x8, 0x3, r8}, @val={0xc, 0x99, {0xb, 0x43}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r9) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r10, @ANYBLOB="796100000000000400007e"], 0x14}}, 0x4000054) sendmsg$NL80211_CMD_SET_REG(r7, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000080)={0x34, r10, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x59}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x50}]}, 0x34}}, 0x8040) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000000c0)={[0x6, 0x0, 0xffffffffffbffffd, 0x5, 0x0, 0x0, 0x7a6e, 0x4, 0x20000000000, 0x7fffffff, 0x9, 0x7, 0x0, 0x2, 0x0, 0x400000000000000], 0xeeef0000, 0xeb40}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.686013162s ago: executing program 0 (id=713): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) gettid() (async) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000080)={0x77359400}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000380)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fbdbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="2a44466aa4c39888354593fd"], 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYRESHEX=0x0, @ANYRESDEC=0x0, @ANYRES32=r0], 0x140}}, 0x0) 1.456066735s ago: executing program 0 (id=714): mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) (async) mknod$loop(&(0x7f0000000200)='./file0\x00', 0x2480, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x8}) (async) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port1\x00', 0xf3, 0x1b1c07, 0xfffffffa, 0x0, 0xffffffff, 0x400, 0x0, 0x0, 0x0, 0x8}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_CPUID2(r2, 0x4048aecb, &(0x7f00000000c0)=ANY=[@ANYBLOB="070000000000000007000000ffffffff"]) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000020603f800000000000000000000000705000100070000000900020073797a310000000014000780080013000000000008001240000000000500050002000000050004000100000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="64000000020603f800000000000000000000000705000100070000000900020073797a310000000014000780080013000000000008001240000000000500050002000000050004000100000016000300686173683a6e65742c706f72742c6e6574"], 0x64}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000000)={{0x80}, 'port0\x00', 0x0, 0x849}) dup3(0xffffffffffffffff, r5, 0x0) socket$inet(0x2, 0x1, 0x0) (async) r6 = socket$inet(0x2, 0x1, 0x0) getsockopt$inet_tcp_int(r6, 0x6, 0x2a, 0x0, &(0x7f0000000340)) r7 = syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x6d89, 0x400, 0x1, 0x163}, &(0x7f0000000400)=0x0, &(0x7f0000000240)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) socket$inet6(0x10, 0x3, 0x0) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r8, r9, &(0x7f00000004c0)=@IORING_OP_MADVISE={0x19, 0x8, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x9, 0x1, {0x0, r10}}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000700)=0x1000) io_uring_enter(r7, 0x8aa, 0x0, 0x0, 0x0, 0x0) (async) io_uring_enter(r7, 0x8aa, 0x0, 0x0, 0x0, 0x0) r11 = gettid() r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000140)={[0xfffffffffbfffff5]}, 0x8, 0x0) readv(r12, &(0x7f0000002940)=[{&(0x7f0000000000)=""/93, 0x5d}, {0x0, 0x3c}], 0x2) tkill(r11, 0x8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) (async) io_uring_register$IORING_REGISTER_SYNC_CANCEL(r7, 0x18, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x11, {0x27fffffffffffff, 0x8}, 0x54}, 0x1) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f00000006c0)=0x4) (async) ioctl$SNDCTL_SEQ_TESTMIDI(r5, 0x40045108, &(0x7f00000006c0)=0x4) mount(&(0x7f00000000c0)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x0, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500200000010ac05370240000102030109022400010100801f09040007020301040109210900000122780b890581030004040008"], &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x99, 0x7c, 0xa5, 0x20, 0xf2}, 0x4f, &(0x7f0000000740)={0x5, 0xf, 0x4f, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x21, 0x2, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x9, 0x4d, 0x23a, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x9, 0x8001}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x5, 0xc3, 0x18, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2d13f8e17d506942f464f925f976db20"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0xec, 0xb, 0xe00, 0x3}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42f}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "d9a08f568f3dc817f9439386a8198baafcb6e40799c891bf2de26bd8996b2cda9b6d047a405189dfdd8ffcfbed42c8d04c5d24fc4886c60c814097f72f123232ec5ef634994b7813d83a3e3e59c8c9e1fdabef8a66fffac5689058b40aa31130d3d2104315b5b1bbe2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x87, &(0x7f0000000580)=ANY=[@ANYBLOB="870329affbece56a64443be58c2a3c898587539aba1460c641474dc1e4916a7920cda5d4c18c85ab9f74807c1d01a2c40e1a9ead34b505783116f28701a5433ea4d12db97fcc6579d1e2d87380cb1f36b2499387bbac3054308430cd00002b1f9d280c7fcf5d0e5685309419e3066fc61c6a257ea0aaacecd34171348a3093252247b0b71b5c3f"]}]}) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201500200000010ac05370240000102030109022400010100801f09040007020301040109210900000122780b890581030004040008"], &(0x7f0000000640)={0xa, &(0x7f0000000180)={0xa, 0x6, 0x310, 0x99, 0x7c, 0xa5, 0x20, 0xf2}, 0x4f, &(0x7f0000000740)={0x5, 0xf, 0x4f, 0x6, [@wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x21, 0x2, 0x3, 0x2}, @wireless={0xb, 0x10, 0x1, 0xc, 0x8, 0x9, 0x4d, 0x23a, 0x2}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x0, 0x5, 0x9, 0x8001}, @wireless={0xb, 0x10, 0x1, 0x8, 0x10, 0x5, 0xc3, 0x18, 0x9}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "2d13f8e17d506942f464f925f976db20"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0xec, 0xb, 0xe00, 0x3}]}, 0x8, [{0x4, &(0x7f00000001c0)=@lang_id={0x4, 0x3, 0x861}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x42d}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x41e}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x443}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42f}}, {0x6b, &(0x7f00000004c0)=@string={0x6b, 0x3, "d9a08f568f3dc817f9439386a8198baafcb6e40799c891bf2de26bd8996b2cda9b6d047a405189dfdd8ffcfbed42c8d04c5d24fc4886c60c814097f72f123232ec5ef634994b7813d83a3e3e59c8c9e1fdabef8a66fffac5689058b40aa31130d3d2104315b5b1bbe2"}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x2c0a}}, {0x87, &(0x7f0000000580)=ANY=[@ANYBLOB="870329affbece56a64443be58c2a3c898587539aba1460c641474dc1e4916a7920cda5d4c18c85ab9f74807c1d01a2c40e1a9ead34b505783116f28701a5433ea4d12db97fcc6579d1e2d87380cb1f36b2499387bbac3054308430cd00002b1f9d280c7fcf5d0e5685309419e3066fc61c6a257ea0aaacecd34171348a3093252247b0b71b5c3f"]}]}) 1.384057047s ago: executing program 3 (id=715): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) close_range(r0, r0, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) mkdirat(r4, &(0x7f0000000080)='./file1\x00', 0x48) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r6, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000240)={r8, 0x1}, 0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={r8, 0xffffffff}, &(0x7f00000001c0)=0x8) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, &(0x7f0000000340)={0x2000, r4}, 0x0) landlock_restrict_self(r5, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_IIF={0x8, 0x4, r3}, @TCA_ROUTE4_FROM={0x8, 0x3, 0xd3}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 845.779484ms ago: executing program 2 (id=721): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) (async, rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@var={0x2, 0x0, 0x0, 0x11, 0x4, 0xffffffff}, @const={0x0, 0x0, 0x0, 0x2}, @func_proto={0x2, 0x0, 0x0, 0x13, 0x2}, @var={0x2, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x0, 0x61]}}, 0x0, 0x54, 0x0, 0x4, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 32) r1 = syz_clone(0x8d002240, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) (async) ptrace$pokeuser(0x6, r1, 0x378, 0x1) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000006201a400000000009500"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) clock_gettime(0x0, &(0x7f0000000800)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000000780)=[{{&(0x7f00000001c0)=@l2, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000240)=""/110, 0x6e}], 0x1, &(0x7f0000000300)=""/96, 0x60}, 0xfffffff9}, {{&(0x7f0000000380)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000400)=""/225, 0xe1}, {&(0x7f0000000500)=""/225, 0xe1}, {&(0x7f0000000600)=""/91, 0x5b}], 0x3, &(0x7f00000006c0)=""/167, 0xa7}, 0x7}], 0x2, 0x0, &(0x7f0000000840)={r3, r4+60000000}) (async) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000180)=0x4) (async) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000880), 0x802, 0x0) ioctl$UI_GET_SYSNAME(r5, 0x8040552c, &(0x7f00000008c0)) 755.891602ms ago: executing program 1 (id=722): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r2 = socket(0x1, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(0x0, r3, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000100)={{}, {0x1, 0x2}, [{0x2, 0x5, r3}], {}, [], {0x10, 0x6}, {0x20, 0x3}}, 0x2c, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000000c0)={0x0, 0x0, 0xfffd, 0x0, 0x0, "e872185081e6c67e"}) 755.60217ms ago: executing program 2 (id=723): socket$packet(0x11, 0x3, 0x300) (async) r0 = io_uring_setup(0x5bfc, &(0x7f0000000080)={0x0, 0x9779, 0x800, 0x3, 0x32a}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) ioctl$SNDCTL_DSP_SETTRIGGER(r1, 0x40045010, &(0x7f0000000000)) (async) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001400)) writev(r1, &(0x7f0000000640)=[{&(0x7f00000006c0)="2e31b69c9bd4beb2ce56518bf0aea548722f054677edd0cb67e2afb987c3e16e3b65bfe50c4d55086a56832bebeb32802ecd8e61032995b891d24c782afea345ed2f0a87bc1bfc6101fa7d1d2c2e57f889dbb28fe7b7e2fc562acebfd86566be11c267f5c5c5e1707a44f2795400fb26cd4170d76c6807d8270435f365d737751f", 0x81}], 0x1) (async) ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0) (async) syz_io_uring_setup(0x7791, &(0x7f0000000440)={0x0, 0x251b9, 0xe2, 0x8, 0x156, 0x0, r0}, 0x0, 0x0) (async, rerun: 64) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') (rerun: 64) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000180)=""/216, 0xd1}], 0x0, 0x33, 0xfffffffd) (async) ioctl$sock_inet_SIOCSIFNETMASK(r2, 0x891c, &(0x7f0000000080)={'wg1\x00', {0x2, 0x4e22, @broadcast}}) 753.159282ms ago: executing program 1 (id=724): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) read$FUSE(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="090000001000010000000000000000000000000a40000000060a0b040000000000000000020000001400048010000180090001006d617371000000000900010073797a30000000000900020073797a320000020014000000110001000000000000000000f500000ab84b7d55ee3bf61ef92329697d5ecc71cb8af01eda97c681bbaa70793cf2029590"], 0x68}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x50483, 0x605}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5, 0x4, 0x6}]}}}]}, 0x3c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r4, 0x16, &(0x7f0000000380)={&(0x7f0000001000)={[{0x0}, {0x0}, {0x0}, {0x0}]}, 0x4}, 0x1) syz_io_uring_submit(r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, r3, 0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0}}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x240, 0x36}, 0x4, [0x7, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x5, 0x25cd, 0x1, 0xa4, 0x372c6fbf, 0xa2b9, 0x6, 0x9, 0xe4, 0x9, 0x2, 0x3, 0xbbf, 0x0, 0x8, 0x9, 0xd, 0x2, 0x12a3, 0x6, 0x3, 0x2, 0x4, 0x7, 0x81, 0x8a, 0xfffffff8, 0x558e0d31, 0x4, 0xfffeffff, 0x91, 0x5, 0x4, 0x7, 0x2, 0x5, 0x400, 0x7fff, 0x0, 0x4a7, 0x81, 0x6, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x3, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x6], [0x9, 0x3, 0x6, 0x5f, 0x4, 0xc66, 0xa8a9, 0x73, 0x8e, 0x10001, 0x7, 0x5, 0xf, 0x8, 0x4, 0x5, 0x1000, 0x0, 0x200b398, 0x400000, 0x0, 0x2, 0x1c, 0x8, 0x1, 0x2, 0x54f5bad8, 0x8, 0xfffffffd, 0x400, 0xffff58b9, 0x4c2336d3, 0x104, 0x0, 0x7, 0x401, 0x46, 0xf1, 0x4, 0xab00000, 0x5, 0xb, 0x2, 0x401, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x7, 0x1cb, 0x1, 0x4, 0x6, 0x438, 0x2, 0x9, 0x2, 0x8000, 0x5, 0xfffffffb, 0x200004, 0x1000, 0x4, 0x5], [0x2, 0x1, 0xffff, 0x3, 0x2, 0x2e63f783, 0x80000001, 0xb, 0x1, 0x491, 0x8d3, 0x6, 0x108, 0x3ff, 0x2, 0x400, 0x40, 0x6, 0x7, 0x7, 0x5, 0x0, 0x5, 0x9, 0x0, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x8000, 0x400, 0x3e55, 0x4, 0xd3, 0x7, 0x3435, 0x5, 0x7, 0xfd, 0x401, 0x101, 0x7ff, 0x60a2, 0x17fc, 0x9d26, 0x5, 0x8, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xfffffffc, 0x10000, 0x1, 0x8, 0x1], [0xa772, 0x1, 0x5, 0x1afa, 0xbfc, 0x8, 0x7c81, 0x7f, 0xfffffff8, 0x40, 0xff, 0x5, 0x7fffffff, 0x7, 0x4, 0x9, 0x82, 0x3, 0x9d86, 0x9, 0xfffffff7, 0x6, 0x40f1, 0x2, 0x3, 0x101, 0x80000001, 0x7777, 0xfff, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x624dfaee, 0xc, 0x7f, 0x1000, 0x1ff, 0xfffffffe, 0xffffffff, 0x10000, 0x0, 0x8001, 0x7fff, 0x1000, 0x6, 0xf, 0xe, 0x5337, 0x26d, 0x806, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x1, 0x8, 0x14000, 0x1, 0x1b18]}, 0x45c) io_uring_enter(r4, 0x27e2, 0x0, 0x0, 0x0, 0x0) r7 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r7, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x44000) r8 = socket(0x22, 0x3, 0x0) bind$inet(r8, &(0x7f0000000340)={0x22, 0x4e20, @loopback}, 0x57) sendmsg$rds(r8, &(0x7f0000000680)={&(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/94, 0x5e}], 0x1, &(0x7f0000000500)=[@mask_cswp={0x58, 0x114, 0x9, {{0x4, 0x2}, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x8, 0x98, 0x9, 0x20, 0x1}}, @rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000380)=""/250, 0xfa}, &(0x7f0000000280)}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x7}, &(0x7f00000002c0)=0xd, &(0x7f0000000300)=0x1, 0x3, 0x1, 0x9, 0xffffffffffffffff, 0x29}}, @zcopy_cookie={0x18, 0x114, 0xc, 0x3}, @fadd={0x58, 0x114, 0x6, {{0x70, 0x8}, &(0x7f0000000480)=0x4, &(0x7f00000004c0), 0x10000000000000d, 0xb, 0xfff, 0xffff, 0x1d, 0xfff}}], 0x150, 0x40890}, 0x4000) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/186, 0x1019000, 0x800, 0x5, 0x2}, 0x20) 686.983717ms ago: executing program 2 (id=725): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffc9a, &(0x7f0000000000), 0x0}, 0x50) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000440)={&(0x7f0000800000/0x800000)=nil, &(0x7f000051f000/0x4000)=nil, 0x800000, 0x1, 0xfe}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x3, 0x0, 0x0, 0x7fff0006}]}) close_range(r0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) syz_io_uring_setup(0x2c0e, &(0x7f0000000400)={0x0, 0x6, 0xc002, 0x1000}, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x8c92a2d9f66a17f8, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80, @void, @value}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', &(0x7f0000000080)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x1b30}}) ioctl(r1, 0x8b1a, &(0x7f0000000140)) io_uring_setup(0x192, &(0x7f0000000380)={0x0, 0x53c8, 0x400, 0x8000006, 0x1a8}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) timer_create(0x2, &(0x7f0000000000)={0x0, 0xe, 0x1, @thr={0x0, 0x0}}, &(0x7f00000001c0)=0x0) timer_settime(r4, 0x1, &(0x7f0000000200)={{0x77359400}}, 0x0) capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000040)={0x200002, 0x200000, 0x1, 0x0, 0x0, 0x2}) setregid(0x0, 0xee01) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x1d2) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x80800) fcntl$setlease(r5, 0x400, 0x0) accept$inet6(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'bond0\x00'}) openat$cgroup_procs(r5, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2d000000134b0000"], 0x20}}, 0x10000) prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="000000000000000000ffffffff00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x17) 247.208177ms ago: executing program 1 (id=726): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r0, &(0x7f0000000740)=[{&(0x7f0000000300)=""/41, 0x29}], 0x1, 0x68, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) setreuid(0xee01, 0xee01) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x24, &(0x7f0000000340)=0x7e, 0x4) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}, {@uuid_off}]}) 246.899957ms ago: executing program 3 (id=727): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x140, r2, 0x1, 0xc01, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x10e, 0x33, @mgmt_frame=@reassoc_req={{{0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}, {0x3}, @device_b, @device_b, @from_mac=@device_b, {0x5, 0x3}}, 0x4000, 0x5, @device_b, {}, @val, @val={0x2d, 0x1a, {0x72, 0x2, 0x0, 0x0, {0x1ff, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x1}, 0x6, 0x9, 0x7}}, [{0xdd, 0xc6, "7245ec7bcc88856573383183a1bd4b47434a67dd2d1481c826e39058f55ba34b3c7d68e48e1ecfe239486dcaaf0c3d6b10ee26bd552969d56d22fe9878ebb1cbfbda36a4f2f452cb38ddb920ef28889f38a72992ca0b1b677aa8b6f35d1849e96bc3f59bfc81e0eacf6ce57c4147560d4edfd2332f50781b44b8282ab39b8af7ca1c85ec78985b59c7c728780e8a6585c71b24d80f009be5b42fdebac9b15f0ca09a665c232aaf80f2b825d91ddff1420eae3bcaee982258c1db1caa762d61f2155ce39b34a9"}]}}]}, 0x140}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 246.532649ms ago: executing program 3 (id=728): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async, rerun: 64) r1 = socket(0x400000000010, 0x3, 0x0) (rerun: 64) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000840)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0x0, 0xffff}, {0x1, 0xf}}}, 0x24}}, 0x0) (async) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = eventfd2(0x65c, 0x80000) (async) r6 = socket$inet6(0xa, 0x3, 0xff) sendmsg$inet6(r6, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x0, 0xc, @dev}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)="daffc38b69363a52fe8000000000000021845a91f64fddcf51f405595faeea4197", 0x21}, {&(0x7f0000000580)="11922b64907e32", 0x7}], 0x2}, 0x20000b10) (async) r7 = eventfd2(0x4001, 0x800) ioctl$KVM_IRQFD(r4, 0x4020ae76, &(0x7f0000000100)={r5, 0x7, 0x2, r7}) (async) r8 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0x0) (rerun: 32) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r10, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r11, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000200)={0x10201, 0x0, 0xdddd0000, 0x2000, &(0x7f000091c000/0x2000)=nil}) (rerun: 64) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x2a, 0xc0, 0x5, 0x7, 0x7f, 0x0, 0xf, 0x4, 0x3, 0x41, 0x3, 0x58, 0x90, 0x5, 0xb, 0x7f}}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x0, 0x180, 0x4, 0x10, 0xf1, 0x0, 0x7fffffffffffb, 0x5, 0x0, 0x9, 0x0, 0x5, 0x0, 0xbdb], 0x1, 0x3c4210}) (async, rerun: 32) ioctl$KVM_RUN(r8, 0xae80, 0x0) (rerun: 32) 177.087793ms ago: executing program 2 (id=729): r0 = socket(0x10, 0x3, 0x0) r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc038563b, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000140), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000580)={0x0, 0xc1, 0x80, 0x20203843, 0x3, [0x2], [0x80ffff], [], [0x400000000000001]}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x40}}, 0x0) 140.127936ms ago: executing program 1 (id=730): r0 = socket(0x2, 0x80805, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="11"], 0x14}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000180)={'sit0\x00', 0x0, 0x80, 0x8000, 0x2, 0x5, {{0x5, 0x4, 0x3, 0x0, 0x14, 0x64, 0x0, 0x4, 0x29, 0x0, @empty, @loopback}}}}) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$team(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000006c0)={0x14, r5, 0x1, 0x70bd2d, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) sendto$packet(r2, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1a, 0x0, &(0x7f0000000140)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) 138.582097ms ago: executing program 1 (id=731): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@private1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty=0xe00, 0x0, 0x3c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0xa, 0x4, 0x0, 0x60}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r1, &(0x7f0000001fc0)={0x2, 0x0, @remote}, 0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8955, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000080), 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'netpci0\x00'}) 79.772246ms ago: executing program 1 (id=732): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) rt_sigaction(0x19, &(0x7f00000000c0)={&(0x7f0000000080)="366465f029144d00000081f30fc27f5e06ae0d0fd82e2e460f01d626f00994aff7000000c4c1796f960600000040cd00c4e2f1453c99f340a56544ca0c00", 0x84000004, 0x0}, 0x0, 0x8, &(0x7f0000000000)) ftruncate(r1, 0x3ff) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[], 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xe, 0x4, &(0x7f0000000500)=ANY=[@ANYRESOCT=r0], &(0x7f0000000000)='syzkaller\x00', 0xfffffc9e, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r5}, &(0x7f00000006c0), &(0x7f0000000700)=r4}, 0x20) sendmsg$inet(r3, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) socket$key(0xf, 0x3, 0x2) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r2, 0xffffffffffffffff}, &(0x7f0000000040), 0x0}, 0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) r8 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000004240), 0x2000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001040)={0x1f, 0x1b, &(0x7f0000000780)=ANY=[@ANYBLOB="180000000a00000000000000cb860f6018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001000000b7030000000200008500000083000000bf0900000000000055090100000000009500000000000000028602000200000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000eac7fbe8850000008200000018000000260a0000000000001a5fffffbf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000e80)='GPL\x00', 0x4, 0xa9, &(0x7f0000000580)=""/169, 0x1f00, 0x14, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000000fc0)={0x4, 0x5, 0x4, 0x10000}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000001000)=[r2], 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r8, 0x3b87, &(0x7f0000001100)={0x18, 0x0, 0x1, 0x0, 0x0, 0xffffffffffffffff}) getsockopt$sock_buf(r0, 0x1, 0x37, &(0x7f00000009c0)=""/241, &(0x7f0000000280)=0xf1) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r10 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000000540)=@known='user.incfs.id\x00', 0x0, 0x0, 0x3) socketpair$unix(0x1, 0x2, 0x0, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r11, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) ioctl$VHOST_VDPA_GET_IOVA_RANGE(r1, 0x8010af78, &(0x7f0000000300)) capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x4, 0xfffffffc}) accept$inet(r0, &(0x7f0000000dc0)={0x2, 0x0, @remote}, &(0x7f00000002c0)=0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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", @ANYRES64=r9, @ANYRES64=r8, @ANYRESOCT=r7, @ANYRES64=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) 5.995976ms ago: executing program 3 (id=733): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x98, 0x2, 0x1, 0x401, 0x0, 0x0, {0x3, 0x0, 0x2}, [@CTA_TUPLE_REPLY={0x78, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @CTA_NAT_SRC={0xc, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @broadcast}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x1}, 0x4000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128l-aesni\x00'}, 0x58) r2 = accept4(r1, 0x0, &(0x7f0000000200), 0x80800) sendmsg$kcm(r2, &(0x7f00000007c0)={&(0x7f0000000240)=@ax25={{0x3, @bcast, 0x2}, [@bcast, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x80, &(0x7f0000000600)=[{&(0x7f00000002c0)="1b4dbdf767df862e8c01a4429eb99a2add74f5226ea26d402f993c7069983e67098a9308d5bbf0a4c2259c0add3f1180adfc4f391f2cddb82e958677ff6c2e7a8d8a19d9e4c188ce", 0x48}, {&(0x7f0000000340)="98bc97cd9de691b44b9b4980febd908cb9db3cafbf5420eaa49cb48712a06c687f504246284f1feabc051b4c297bead1b8867f1d85a4c241ee4bebcec80787ad439995c2330af9960d38b4f51a48b199e3ae71ec3ce1b2bfc225691d5c4487a985b9c01a673dcbbb08948e1604740b7018161d280e00fde7c9dd97aadd1e4c30279867838822dd9d19a6b952cc22c24de2b8c5882ce5081c7c5102454ae1d69a", 0xa0}, {&(0x7f0000000400)="8eef2820c9d33dd0d2c782fda8ce5809ed68722081c18405b32c62a2ad5967a2852c2fc75cce5f7e0aa28cc33923fd8b561f9a5264718b87f2a59a9cf53685193897f5fa2d4c568c9c3f3247d5447f1d48d8406b160236ed9d3f79b47edf10505b9175a9d3d329d1a6bb74cb3704778a572dd0bab9ee9d5b162988a8f3c1ad7ade42e9d973f7f6b894f7917c2526794509c378e807532c4c78f52234c827a3eb728e194bea9e435cecb452429b2f60ad9f05bc88ae6c0c6ca86b188cd35a63e7b87a3d92f3bfa101d3865af8f29319174c88345f68e02167bfa05cb05992b949441615577a753218dc91958bee79450ece", 0xf1}, {&(0x7f0000000500)="29bab75935adba9f600033fe374e6550688d94ede90cf766c2476f0938720112dc0c65771bcd6e3b5075386b61f98511d8be8324c7e95b62b14e766d077afe0f295c93ca44c05562f29d5f74ba1e6eb871053250ee8e27326a95b40ead05d40ad14c18bc9cf72d1e628970450c7e003c7f532aa9bfd7a26b839fb4299876df32a13bb3afff32bd180dd5be11b435a2c5dc28900b9c46c3c4185c5aece2e8cd7de248b2e65d561c2d8703658ac5b7c0c72126800a04a68ba9abc893d265ff193324cf60cc2a", 0xc5}], 0x4, &(0x7f0000000640)=[{0x60, 0xff, 0x5, "b68d6a65fba546af9712a70c9b27379074281374f3c27842d65f3f9ca71f1b6dfc6d913a8b2d69e011d6cee8d95746c66000e0e31942ce880f0742d951d5d3616eac747e5f53820f71"}, {0x100, 0x10c, 0x7910, "7b088971753dbd1b719a7b7c8fd9df536792617962f66cdab5552d02e6358b8a4ab5faf52a579c28cf15e5966782a345ab62e7a19f268a35c207779acf65c106ca8743fdd5269edd0e1deb841ff4d5ecbb935dad7e9f82fe0359ddd5217950c4ea423956c73d3b0101b9be518bf6f73c0b6114314e88063768af82b036e2b8fb9d769284d7e3faca39d44e268f9ef2710720ad620622d6ca58141d4a7d5b0988bb18ee64daa9ec074da006889e2498f852e21e5b1c3f505e71a5cdb6f30def66f329765590e60f1e2e480820a4f018e8f188df23b785af7248b97462b46f53540ccb8364e834c4f68a224d"}], 0x160}, 0x20000040) getpeername(0xffffffffffffffff, &(0x7f0000000800)=@nfc_llcp, &(0x7f0000000880)=0x80) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) setsockopt$inet_MCAST_LEAVE_GROUP(r2, 0x0, 0x2d, &(0x7f0000000900)={0x0, {{0x2, 0x4e22, @loopback}}}, 0x88) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r2, 0x8982, &(0x7f00000009c0)={0x1, 'batadv0\x00', {}, 0x8001}) close(0xffffffffffffffff) sendmsg$NFT_BATCH(r2, &(0x7f0000001100)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000010c0)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x3c, 0x2, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_USERDATA={0x7, 0x6, "9f07f9"}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELOBJ={0x28, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELCHAIN={0x60, 0x5, 0xa, 0x101, 0x0, 0x0, {0xe56293de50159132, 0x0, 0x4}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x11, 0xc, "83e37fbf51e60137420dae15d9"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_USERDATA={0xd, 0xc, "8c9dc9f1a589f21598"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}]}, @NFT_MSG_NEWFLOWTABLE={0x230, 0x16, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1d4, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x90, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'nr0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'syzkaller0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfff}, @NFTA_FLOWTABLE_HOOK_DEVS={0xb8, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_team\x00'}, {0x14, 0x1, 'wg1\x00'}, {0x14, 0x1, 'pimreg\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth0\x00'}, {0x14, 0x1, 'bond_slave_0\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'bond_slave_1\x00'}, {0x14, 0x1, 'ip6gre0\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_vlan\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'gre0\x00'}, {0x14, 0x1, 'team0\x00'}, {0x14, 0x1, 'tunl0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x2fc, 0x6, 0xa, 0x400, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0xa8, 0x7, 0x1, 0x0, "f315dc8b5a8fc1e23b8d4a6ee2c2e599bda34ba2aedda52ad324536fe940325d5f2b0fb9abd7b69f459e6926366611ea0a985a404da0dadb07c444bb5db3fe2f12be8178fac86fc27920c1decfd78982638b48df5ff80bb46be4efac3d91b927ace742076c0365e6a49ea2e5eb95a7a9e1c1a2024a9d876dec7f73bfe205962d3b4325c4cda49907799adce921362990500917a217dff6f71a18d28fbdecfd34edd51082"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0xf8, 0x7, 0x1, 0x0, "40985ae43e00be058a2455a222bce63c86197692dda4d49625a3fb1cd6b686abb480906fbc2231d99de2b1515924181c703be69c902772c03c1aa6609e0b9f816b081d3f2a8c8b2afb7c1f1744940f89c5834ca933e2a635d70a3c9a83c964f78907f2ed440fe65aba5c24079a68867768fd43b068974e15e207e367758a0857cbaffbacf4eab83581e2afd7c79edc724f1613f6c485a9de489cb8ccd6b56a332d8c266c0e6cfcc1fd59f5d604452245f052b003508466227d1ac541b4e530ca9a65e536e9c14d6419409a2b5145825de4cda66fbc73f8ac95c38711301f6faa3481503fc41c7a44f7424eacc913dea7555f2a91"}, @NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "5b565519e0aab484bbc989722f9fb77dbabb66c713f425dbff6710d7b474c8d11f8e98f85fdf0628c27455f300c6629738eca04b6c87b99915982e50aacfd0957514ad88fb5f8d14e9c8b062a8be6b5e269c9ae9f43a25521c2a3b2ac7a1f362f64b1cd81cb630a6f3dd90c192ff852a8f8ad980036b7ed497db093310e6bef5681357b6b495adbc557dc9969543275773b8601291ce34e7347a03f7d739"}, @NFTA_RULE_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x80, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x6c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x5c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0xffffffff}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x72}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_LIMIT_RATE={0xc}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_LIMIT_BURST={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x9}}}, 0x670}, 0x1, 0x0, 0x0, 0x40005}, 0x20008810) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000001140), 0x2, 0x0) read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f00000031c0)={0x1, 0x0}, 0x8) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000003200)=r5, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000003480)={0x98, 0x0, &(0x7f0000003300)=[@exit_looper, @increfs_done={0x40106308, 0x2}, @acquire={0x40046305, 0x2}, @reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000003240)={@fda={0x66646185, 0x4, 0x1, 0x1f}, @fd={0x66642a85, 0x0, r6}, @flat=@binder={0x73622a85, 0x1}}, &(0x7f00000032c0)={0x0, 0x20, 0x38}}}, @increfs_done, @increfs_done={0x40106308, 0x2}, @increfs={0x40046304, 0x1}, @register_looper], 0xb5, 0x0, &(0x7f00000033c0)="4bf4657793c8839914a413632b57de825b1b4b3ad67e332cd89d9b7d2587a5b237400ca0bc570340f2b6644a4791a0daf51d77b79727a8a2404854cb2a20b54a7c83201ee1c3f4a70813c6b73fa3b520d4dab06ff70a0027e1e65498432d698afe39d480f3e084efee7fe396acf4df6ea84dfddd42fb4512ba585495b4a80977d2ebbb17b750689571a1f59cb67dbd16241eab9138655def37d88bb1ec49cc348ea1917d0cee1c1186c00ab7b1a1890c25fc1628d2"}) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f00000034c0)) r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000003500), 0x200200, 0x0) ioctl$IOMMU_VFIO_IOAS$GET(0xffffffffffffffff, 0x3b88, &(0x7f0000003540)={0xc, 0x0}) ioctl$IOMMU_IOAS_IOVA_RANGES(r7, 0x3b84, &(0x7f0000003600)={0x20, r8, 0x8, 0x0, &(0x7f0000003580)=[{}, {}, {}, {}, {}, {}, {}, {}]}) r9 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000003640), 0x301400, 0x0) write$snddsp(r9, &(0x7f0000003680), 0x0) ioctl$SNDCTL_SEQ_SYNC(r9, 0x5101) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f00000036c0)=0x8a59, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000003700)) ioctl$BINDER_THREAD_EXIT(r9, 0x40046208, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r9, 0x40345410, &(0x7f0000003740)={{0x1, 0x2, 0x6, 0x1, 0x4}}) ioctl$PTP_PIN_SETFUNC(r9, 0x40603d07, &(0x7f0000003780)={'\x00', 0x80000000, 0x0, 0x4}) 4.77799ms ago: executing program 2 (id=734): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0xfffffffffffffffe, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x40) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000280)={0x1, 0x5, 0x0, 0x0}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) 0s ago: executing program 2 (id=735): r0 = socket(0x15, 0x5, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000000)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_IRQCHIP(r5, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x14, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x8e, 0x4}}) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$nfc_llcp(r0, 0x114, 0x2718, 0x0, 0x20000000) kernel console output (not intermixed with test programs): erface batadv_slave_1 (retrying later): interface not active [ 46.842544][ T5943] team0: Port device team_slave_0 added [ 46.847404][ T5943] team0: Port device team_slave_1 added [ 46.947015][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.949733][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.959447][ T5943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.005001][ T5934] hsr_slave_0: entered promiscuous mode [ 47.007584][ T5934] hsr_slave_1: entered promiscuous mode [ 47.009851][ T5934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.013166][ T5934] Cannot create hsr debugfs directory [ 47.016271][ T5943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.018932][ T5943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 47.028844][ T5943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.106050][ T5938] hsr_slave_0: entered promiscuous mode [ 47.108233][ T5938] hsr_slave_1: entered promiscuous mode [ 47.110206][ T5938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.112501][ T5938] Cannot create hsr debugfs directory [ 47.225853][ T5943] hsr_slave_0: entered promiscuous mode [ 47.228066][ T5943] hsr_slave_1: entered promiscuous mode [ 47.230133][ T5943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 47.232482][ T5943] Cannot create hsr debugfs directory [ 47.525445][ T5942] Bluetooth: hci2: command tx timeout [ 47.525521][ T5937] Bluetooth: hci0: command tx timeout [ 47.527496][ T5941] Bluetooth: hci1: command tx timeout [ 47.537082][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.546015][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.550246][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.560836][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.589922][ T5934] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.595371][ T5941] Bluetooth: hci3: command tx timeout [ 47.596935][ T5934] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.605017][ T5934] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.611579][ T5934] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.677974][ T5943] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.687525][ T5943] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.693983][ T5943] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.720391][ T5943] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.768287][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.774325][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.780340][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.786105][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.794298][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.830898][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.859653][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.862724][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.868175][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.871168][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.881140][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.916690][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.937348][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.939581][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.942937][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.945207][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.958723][ T5943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.960419][ T40] audit: type=1400 audit(1748643965.778:89): avc: denied { sys_module } for pid=5931 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 47.972072][ T5943] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.982749][ T1054] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.985001][ T1054] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.997179][ T1054] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.999762][ T1054] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.030792][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.061658][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.067645][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.077258][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.080237][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.091696][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.094531][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.143753][ T5931] veth0_vlan: entered promiscuous mode [ 48.160651][ T5931] veth1_vlan: entered promiscuous mode [ 48.176469][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.198656][ T5931] veth0_macvtap: entered promiscuous mode [ 48.220539][ T5943] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.223520][ T5931] veth1_macvtap: entered promiscuous mode [ 48.236177][ T5934] veth0_vlan: entered promiscuous mode [ 48.244640][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.259290][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.269038][ T5934] veth1_vlan: entered promiscuous mode [ 48.276560][ T5931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.279566][ T5931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.282774][ T5931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.286811][ T5931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.314405][ T5943] veth0_vlan: entered promiscuous mode [ 48.328754][ T5934] veth0_macvtap: entered promiscuous mode [ 48.339296][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.344577][ T5943] veth1_vlan: entered promiscuous mode [ 48.349856][ T5934] veth1_macvtap: entered promiscuous mode [ 48.390173][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.397206][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.399682][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.407785][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.428135][ T5943] veth0_macvtap: entered promiscuous mode [ 48.433106][ T5934] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.436702][ T5934] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.439368][ T5934] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.441984][ T5934] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.448152][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.450733][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.451935][ T5943] veth1_macvtap: entered promiscuous mode [ 48.470632][ T5938] veth0_vlan: entered promiscuous mode [ 48.481782][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.486046][ T5938] veth1_vlan: entered promiscuous mode [ 48.503895][ T5931] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.507724][ T5943] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.513994][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.517555][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.537196][ T5943] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.539860][ T5943] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.542536][ T5943] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.545939][ T5943] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.557599][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.557907][ T5938] veth0_macvtap: entered promiscuous mode [ 48.560446][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.577870][ T5938] veth1_macvtap: entered promiscuous mode [ 48.591311][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.611199][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.634170][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.638396][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.651953][ T5999] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 48.656950][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.659738][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.662771][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.667111][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.686566][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.688959][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.756095][ T1054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.758451][ T1054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.776959][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7'. [ 48.777410][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.782393][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.814315][ T6013] FAULT_INJECTION: forcing a failure. [ 48.814315][ T6013] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 48.818936][ T6013] CPU: 0 UID: 0 PID: 6013 Comm: syz.1.8 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 48.818950][ T6013] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 48.818956][ T6013] Call Trace: [ 48.818960][ T6013] [ 48.818964][ T6013] dump_stack_lvl+0x16c/0x1f0 [ 48.818979][ T6013] should_fail_ex+0x512/0x640 [ 48.818994][ T6013] _copy_to_user+0x32/0xd0 [ 48.819010][ T6013] put_user_ifreq+0xeb/0x150 [ 48.819024][ T6013] sock_do_ioctl+0x230/0x280 [ 48.819037][ T6013] ? __pfx_sock_do_ioctl+0x10/0x10 [ 48.819053][ T6013] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 48.819070][ T6013] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 48.819084][ T6013] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 48.819100][ T6013] sock_ioctl+0x227/0x6b0 [ 48.819114][ T6013] ? __pfx_sock_ioctl+0x10/0x10 [ 48.819127][ T6013] ? hook_file_ioctl_common+0x145/0x410 [ 48.819147][ T6013] ? selinux_file_ioctl+0x180/0x270 [ 48.819159][ T6013] ? selinux_file_ioctl+0xb4/0x270 [ 48.819172][ T6013] ? __pfx_sock_ioctl+0x10/0x10 [ 48.819187][ T6013] __x64_sys_ioctl+0x18e/0x210 [ 48.819203][ T6013] do_syscall_64+0xcd/0x4c0 [ 48.819215][ T6013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 48.819226][ T6013] RIP: 0033:0x7fdcf3b8e969 [ 48.819235][ T6013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 48.819244][ T6013] RSP: 002b:00007fdcf4ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 48.819254][ T6013] RAX: ffffffffffffffda RBX: 00007fdcf3db5fa0 RCX: 00007fdcf3b8e969 [ 48.819260][ T6013] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 48.819266][ T6013] RBP: 00007fdcf4ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 48.819271][ T6013] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 48.819277][ T6013] R13: 0000000000000000 R14: 00007fdcf3db5fa0 R15: 00007ffe6b079a18 [ 48.819289][ T6013] [ 48.898143][ T6015] team0: No ports can be present during mode change [ 48.963084][ T6022] binder: 6021:6022 unknown command 0 [ 48.964984][ T6022] binder: 6021:6022 ioctl c0306201 200000000480 returned -22 [ 48.969323][ T6017] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 49.032630][ T6031] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12'. [ 49.040377][ T6031] netlink: 168 bytes leftover after parsing attributes in process `syz.1.12'. [ 49.049436][ T6035] binder: BINDER_SET_CONTEXT_MGR already set [ 49.049735][ T6022] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 49.051342][ T6035] binder: 6021:6035 ioctl 4018620d 200000000100 returned -16 [ 49.062145][ T6034] Zero length message leads to an empty skb [ 49.075190][ T6038] Invalid logical block size (3) [ 49.118611][ T6044] FAULT_INJECTION: forcing a failure. [ 49.118611][ T6044] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.122537][ T6044] CPU: 2 UID: 0 PID: 6044 Comm: syz.0.18 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 49.122551][ T6044] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.122557][ T6044] Call Trace: [ 49.122561][ T6044] [ 49.122565][ T6044] dump_stack_lvl+0x16c/0x1f0 [ 49.122580][ T6044] should_fail_ex+0x512/0x640 [ 49.122600][ T6044] _copy_to_user+0x32/0xd0 [ 49.122616][ T6044] ethtool_get_sset_info+0x280/0x340 [ 49.122628][ T6044] ? __pfx_ethtool_get_sset_info+0x10/0x10 [ 49.122637][ T6044] ? full_name_hash+0xbc/0x110 [ 49.122651][ T6044] ? netdev_name_node_lookup+0x127/0x180 [ 49.122663][ T6044] dev_ethtool+0x3692/0x5b90 [ 49.122672][ T6044] ? __kernel_text_address+0xd/0x40 [ 49.122687][ T6044] ? unwind_get_return_address+0x59/0xa0 [ 49.122702][ T6044] ? arch_stack_walk+0xa6/0x100 [ 49.122719][ T6044] ? __pfx_dev_ethtool+0x10/0x10 [ 49.122730][ T6044] ? __pfx_stack_trace_save+0x10/0x10 [ 49.122740][ T6044] ? stack_depot_save_flags+0x28/0xa40 [ 49.122755][ T6044] ? __lock_acquire+0xb8a/0x1c90 [ 49.122770][ T6044] ? __lock_acquire+0x622/0x1c90 [ 49.122788][ T6044] ? find_held_lock+0x2b/0x80 [ 49.122804][ T6044] ? avc_has_extended_perms+0x33a/0x1090 [ 49.122820][ T6044] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 49.122840][ T6044] ? __lock_acquire+0x622/0x1c90 [ 49.122858][ T6044] ? find_held_lock+0x2b/0x80 [ 49.122874][ T6044] ? dev_load+0x8e/0x240 [ 49.122887][ T6044] dev_ioctl+0x290/0x10e0 [ 49.122898][ T6044] sock_do_ioctl+0x19d/0x280 [ 49.122912][ T6044] ? __pfx_sock_do_ioctl+0x10/0x10 [ 49.122928][ T6044] ? ioctl_has_perm.constprop.0.isra.0+0x379/0x540 [ 49.122942][ T6044] ? ioctl_has_perm.constprop.0.isra.0+0x383/0x540 [ 49.122957][ T6044] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 49.122973][ T6044] sock_ioctl+0x227/0x6b0 [ 49.122987][ T6044] ? __pfx_sock_ioctl+0x10/0x10 [ 49.123000][ T6044] ? hook_file_ioctl_common+0x145/0x410 [ 49.123019][ T6044] ? selinux_file_ioctl+0x180/0x270 [ 49.123031][ T6044] ? selinux_file_ioctl+0xb4/0x270 [ 49.123045][ T6044] ? __pfx_sock_ioctl+0x10/0x10 [ 49.123059][ T6044] __x64_sys_ioctl+0x18e/0x210 [ 49.123075][ T6044] do_syscall_64+0xcd/0x4c0 [ 49.123088][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.123098][ T6044] RIP: 0033:0x7f556218e969 [ 49.123106][ T6044] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.123115][ T6044] RSP: 002b:00007f5562fca038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 49.123125][ T6044] RAX: ffffffffffffffda RBX: 00007f55623b5fa0 RCX: 00007f556218e969 [ 49.123131][ T6044] RDX: 0000200000000100 RSI: 0000000000008946 RDI: 0000000000000003 [ 49.123137][ T6044] RBP: 00007f5562fca090 R08: 0000000000000000 R09: 0000000000000000 [ 49.123143][ T6044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 49.123148][ T6044] R13: 0000000000000000 R14: 00007f55623b5fa0 R15: 00007ffc7f48be98 [ 49.123160][ T6044] [ 49.218352][ T6045] netlink: 24 bytes leftover after parsing attributes in process `syz.3.19'. [ 49.351837][ T6062] binder: 6059:6062 ioctl c0306201 200000000240 returned -11 [ 49.407681][ T6069] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 49.418444][ T6073] FAULT_INJECTION: forcing a failure. [ 49.418444][ T6073] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 49.422955][ T6073] CPU: 3 UID: 0 PID: 6073 Comm: syz.1.30 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 49.422970][ T6073] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 49.422976][ T6073] Call Trace: [ 49.422980][ T6073] [ 49.422984][ T6073] dump_stack_lvl+0x16c/0x1f0 [ 49.423000][ T6073] should_fail_ex+0x512/0x640 [ 49.423016][ T6073] _copy_from_user+0x2e/0xd0 [ 49.423031][ T6073] kstrtouint_from_user+0xd6/0x1d0 [ 49.423042][ T6073] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 49.423052][ T6073] ? __lock_acquire+0xb8a/0x1c90 [ 49.423071][ T6073] proc_fail_nth_write+0x83/0x250 [ 49.423082][ T6073] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.423095][ T6073] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 49.423104][ T6073] vfs_write+0x2a0/0x1150 [ 49.423115][ T6073] ? __pfx___mutex_lock+0x10/0x10 [ 49.423127][ T6073] ? __pfx_vfs_write+0x10/0x10 [ 49.423140][ T6073] ? __fget_files+0x20e/0x3c0 [ 49.423154][ T6073] ksys_write+0x12a/0x250 [ 49.423163][ T6073] ? __pfx_ksys_write+0x10/0x10 [ 49.423172][ T6073] ? fput+0x70/0xf0 [ 49.423186][ T6073] do_syscall_64+0xcd/0x4c0 [ 49.423198][ T6073] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.423208][ T6073] RIP: 0033:0x7fdcf3b8d41f [ 49.423217][ T6073] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 49.423227][ T6073] RSP: 002b:00007fdcf4ab9030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 49.423236][ T6073] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdcf3b8d41f [ 49.423242][ T6073] RDX: 0000000000000001 RSI: 00007fdcf4ab90a0 RDI: 0000000000000004 [ 49.423248][ T6073] RBP: 00007fdcf4ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 49.423254][ T6073] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 49.423259][ T6073] R13: 0000000000000000 R14: 00007fdcf3db5fa0 R15: 00007ffe6b079a18 [ 49.423272][ T6073] [ 49.457470][ T6075] process 'syz.3.31' launched '/dev/fd/6' with NULL argv: empty string added [ 49.595270][ T5941] Bluetooth: hci0: command tx timeout [ 49.604986][ T5941] Bluetooth: hci1: command tx timeout [ 49.606706][ T5941] Bluetooth: hci2: command tx timeout [ 49.684847][ T5941] Bluetooth: hci3: command tx timeout [ 49.712406][ T6101] binder: 6097:6101 ioctl c0306201 200000000640 returned -22 [ 49.723645][ T6101] binder: BINDER_SET_CONTEXT_MGR already set [ 49.726952][ T6101] binder: 6097:6101 ioctl 4018620d 200000000040 returned -16 [ 49.729275][ T6101] binder: 6097:6101 ioctl c0306201 200000000240 returned -11 [ 49.731811][ T6101] binder: 6097:6101 ioctl c0306201 2000000003c0 returned -22 [ 49.906001][ T6116] overlayfs: invalid origin (0000) [ 49.908556][ T6116] overlayfs: overlapping lowerdir path [ 50.074643][ T6124] delete_channel: no stack [ 50.075202][ T2307] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 50.170452][ T40] kauditd_printk_skb: 108 callbacks suppressed [ 50.170468][ T40] audit: type=1400 audit(1748643967.988:198): avc: denied { write } for pid=6127 comm="syz.1.52" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 50.171663][ T6129] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 50.188894][ T6129] CIFS mount error: No usable UNC path provided in device string! [ 50.188894][ T6129] [ 50.192293][ T6129] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 50.212772][ T6132] 9pnet_fd: Insufficient options for proto=fd [ 50.226954][ T2307] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 50.233179][ T2307] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 50.237168][ T2307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 50.240176][ T2307] usb 5-1: Product: syz [ 50.241728][ T2307] usb 5-1: Manufacturer: syz [ 50.243437][ T2307] usb 5-1: SerialNumber: syz [ 50.350263][ T40] audit: type=1400 audit(1748643968.168:199): avc: denied { setopt } for pid=6145 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 50.417939][ T40] audit: type=1400 audit(1748643968.238:200): avc: denied { ioctl } for pid=6151 comm="syz.3.60" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=9468 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 50.472768][ T2307] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 50.657853][ T40] audit: type=1400 audit(1748643968.478:201): avc: denied { ioctl } for pid=6161 comm="syz.2.63" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 50.668578][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 50.669309][ T40] audit: type=1400 audit(1748643968.488:202): avc: denied { read write } for pid=6108 comm="syz.0.44" name="lp0" dev="devtmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 50.678673][ T40] audit: type=1400 audit(1748643968.488:203): avc: denied { open } for pid=6108 comm="syz.0.44" path="/dev/usb/lp0" dev="devtmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 50.681531][ T6167] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 50.723059][ T40] audit: type=1400 audit(1748643968.538:204): avc: denied { bind } for pid=6172 comm="syz.1.67" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 50.730834][ T6175] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 50.733566][ T6175] netlink: 4 bytes leftover after parsing attributes in process `syz.3.64'. [ 50.739759][ T40] audit: type=1400 audit(1748643968.558:205): avc: denied { wake_alarm } for pid=6164 comm="syz.3.64" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 50.748869][ T40] audit: type=1400 audit(1748643968.568:206): avc: denied { mount } for pid=6176 comm="syz.2.68" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 50.755838][ T40] audit: type=1400 audit(1748643968.568:207): avc: denied { mounton } for pid=6176 comm="syz.2.68" path="/12/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 50.784829][ T2307] usb 5-1: USB disconnect, device number 2 [ 50.788713][ T2307] usblp0: removed [ 50.794559][ T6177] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 51.334349][ T6199] overlay: filesystem on ./file0 is read-only [ 51.547054][ T6214] No such timeout policy "syz1" [ 51.572825][ T6214] netlink: 296 bytes leftover after parsing attributes in process `syz.0.81'. [ 51.577446][ T6214] unsupported nlmsg_type 40 [ 51.593196][ T6214] syz.0.81: attempt to access beyond end of device [ 51.593196][ T6214] nbd0: rw=0, sector=64, nr_sectors = 1 limit=0 [ 51.598226][ T6214] syz.0.81: attempt to access beyond end of device [ 51.598226][ T6214] nbd0: rw=0, sector=256, nr_sectors = 1 limit=0 [ 51.602109][ T6214] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 51.605255][ T6214] syz.0.81: attempt to access beyond end of device [ 51.605255][ T6214] nbd0: rw=0, sector=512, nr_sectors = 1 limit=0 [ 51.609408][ T6214] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 51.612886][ T6214] syz.0.81: attempt to access beyond end of device [ 51.612886][ T6214] nbd0: rw=0, sector=64, nr_sectors = 2 limit=0 [ 51.617226][ T6214] syz.0.81: attempt to access beyond end of device [ 51.617226][ T6214] nbd0: rw=0, sector=512, nr_sectors = 2 limit=0 [ 51.621184][ T6214] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 51.629065][ T6214] syz.0.81: attempt to access beyond end of device [ 51.629065][ T6214] nbd0: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 51.633151][ T6214] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 51.637939][ T6214] syz.0.81: attempt to access beyond end of device [ 51.637939][ T6214] nbd0: rw=0, sector=64, nr_sectors = 4 limit=0 [ 51.642468][ T6214] syz.0.81: attempt to access beyond end of device [ 51.642468][ T6214] nbd0: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 51.648902][ T6214] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 51.652881][ T6214] syz.0.81: attempt to access beyond end of device [ 51.652881][ T6214] nbd0: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 51.658173][ T6214] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 51.662483][ T6214] syz.0.81: attempt to access beyond end of device [ 51.662483][ T6214] nbd0: rw=0, sector=64, nr_sectors = 8 limit=0 [ 51.675198][ T5941] Bluetooth: hci1: command tx timeout [ 51.679543][ T6214] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=256, location=256 [ 51.682886][ T6214] UDF-fs: error (device nbd0): udf_read_tagged: read failed, block=512, location=512 [ 51.686906][ T5941] Bluetooth: hci2: command tx timeout [ 51.692658][ T6214] UDF-fs: warning (device nbd0): udf_fill_super: No partition found (1) [ 51.764838][ T5941] Bluetooth: hci3: command tx timeout [ 51.794569][ T6230] Invalid logical block size (2) [ 51.886466][ T6239] veth1_vlan: entered allmulticast mode [ 51.904953][ T5941] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 52.161490][ T6251] mmap: syz.1.95 (6251) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 52.259124][ T6251] (unnamed net_device) (uninitialized): (slave ip_vti0): Device is not bonding slave [ 52.262108][ T6251] (unnamed net_device) (uninitialized): option active_slave: invalid value (ip_vti0) [ 52.543014][ T6278] netlink: 8 bytes leftover after parsing attributes in process `syz.1.104'. [ 52.733543][ T6290] ALSA: mixer_oss: invalid OSS volume '' [ 52.738168][ T6290] Bluetooth: MGMT ver 1.23 [ 53.319489][ T6277] overlayfs: statfs failed on './file0' [ 53.376713][ T6318] warning: `syz.1.118' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 53.766073][ T5941] Bluetooth: hci1: command tx timeout [ 54.480430][ T6350] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 54.804864][ T29] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 54.869884][ T6361] ALSA: seq fatal error: cannot create timer (-22) [ 54.966357][ T29] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 54.969901][ T29] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 54.972576][ T29] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 54.975287][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.980803][ T6356] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 54.985660][ T29] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 55.035609][ T5941] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 55.039080][ T5941] Bluetooth: hci0: Injecting HCI hardware error event [ 55.042680][ T5941] Bluetooth: hci0: hardware error 0x00 [ 55.133671][ T6381] FAULT_INJECTION: forcing a failure. [ 55.133671][ T6381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 55.138146][ T6381] CPU: 0 UID: 0 PID: 6381 Comm: syz.1.141 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 55.138168][ T6381] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.138179][ T6381] Call Trace: [ 55.138187][ T6381] [ 55.138193][ T6381] dump_stack_lvl+0x16c/0x1f0 [ 55.138238][ T6381] should_fail_ex+0x512/0x640 [ 55.138272][ T6381] _copy_from_user+0x2e/0xd0 [ 55.138293][ T6381] __sys_bpf+0x21d/0x4d80 [ 55.138308][ T6381] ? __pfx___sys_bpf+0x10/0x10 [ 55.138322][ T6381] ? ksys_write+0x190/0x250 [ 55.138334][ T6381] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 55.138354][ T6381] ? fput+0x70/0xf0 [ 55.138366][ T6381] ? ksys_write+0x1ac/0x250 [ 55.138375][ T6381] ? __pfx_ksys_write+0x10/0x10 [ 55.138386][ T6381] __x64_sys_bpf+0x78/0xc0 [ 55.138398][ T6381] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.138409][ T6381] do_syscall_64+0xcd/0x4c0 [ 55.138421][ T6381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.138432][ T6381] RIP: 0033:0x7fdcf3b8e969 [ 55.138440][ T6381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.138450][ T6381] RSP: 002b:00007fdcf4ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 55.138459][ T6381] RAX: ffffffffffffffda RBX: 00007fdcf3db5fa0 RCX: 00007fdcf3b8e969 [ 55.138465][ T6381] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000001c [ 55.138471][ T6381] RBP: 00007fdcf4ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 55.138477][ T6381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 55.138482][ T6381] R13: 0000000000000000 R14: 00007fdcf3db5fa0 R15: 00007ffe6b079a18 [ 55.138494][ T6381] [ 55.194013][ T5974] usb 5-1: USB disconnect, device number 3 [ 55.219612][ T6385] xt_ecn: cannot match TCP bits for non-tcp packets [ 55.267310][ T40] kauditd_printk_skb: 60 callbacks suppressed [ 55.267326][ T40] audit: type=1400 audit(1748643973.088:268): avc: denied { bind } for pid=6388 comm="syz.2.145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.268345][ T6389] __nla_validate_parse: 5 callbacks suppressed [ 55.268357][ T6389] netlink: 12 bytes leftover after parsing attributes in process `syz.2.145'. [ 55.835153][ T5937] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 55.838928][ T5937] Bluetooth: hci3: Injecting HCI hardware error event [ 55.843869][ T5937] Bluetooth: hci3: hardware error 0x00 [ 55.928025][ T40] audit: type=1400 audit(1748643973.748:269): avc: denied { map } for pid=6409 comm="syz.0.152" path="socket:[12571]" dev="sockfs" ino=12571 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 56.105268][ T6413] FAULT_INJECTION: forcing a failure. [ 56.105268][ T6413] name failslab, interval 1, probability 0, space 0, times 1 [ 56.109744][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.1.153 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 56.109758][ T6413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.109764][ T6413] Call Trace: [ 56.109768][ T6413] [ 56.109772][ T6413] dump_stack_lvl+0x16c/0x1f0 [ 56.109787][ T6413] should_fail_ex+0x512/0x640 [ 56.109800][ T6413] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 56.109818][ T6413] should_failslab+0xc2/0x120 [ 56.109829][ T6413] __kmalloc_cache_noprof+0x6a/0x3e0 [ 56.109844][ T6413] ? bpf_xdp_link_attach+0x18c/0x8f0 [ 56.109860][ T6413] bpf_xdp_link_attach+0x18c/0x8f0 [ 56.109872][ T6413] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 56.109883][ T6413] ? find_held_lock+0x2b/0x80 [ 56.109900][ T6413] ? __fget_files+0x204/0x3c0 [ 56.109916][ T6413] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.109934][ T6413] __sys_bpf+0x19ef/0x4d80 [ 56.109948][ T6413] ? __pfx___sys_bpf+0x10/0x10 [ 56.109959][ T6413] ? ksys_write+0x190/0x250 [ 56.109971][ T6413] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 56.109991][ T6413] ? fput+0x70/0xf0 [ 56.110002][ T6413] ? ksys_write+0x1ac/0x250 [ 56.110011][ T6413] ? __pfx_ksys_write+0x10/0x10 [ 56.110022][ T6413] __x64_sys_bpf+0x78/0xc0 [ 56.110034][ T6413] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.110044][ T6413] do_syscall_64+0xcd/0x4c0 [ 56.110057][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.110067][ T6413] RIP: 0033:0x7fdcf3b8e969 [ 56.110076][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.110085][ T6413] RSP: 002b:00007fdcf4ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.110095][ T6413] RAX: ffffffffffffffda RBX: 00007fdcf3db5fa0 RCX: 00007fdcf3b8e969 [ 56.110101][ T6413] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000001c [ 56.110107][ T6413] RBP: 00007fdcf4ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 56.110112][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.110118][ T6413] R13: 0000000000000000 R14: 00007fdcf3db5fa0 R15: 00007ffe6b079a18 [ 56.110130][ T6413] [ 56.201033][ T40] audit: type=1400 audit(1748643974.018:270): avc: denied { read } for pid=6414 comm="syz.1.154" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.210516][ T40] audit: type=1400 audit(1748643974.018:271): avc: denied { ioctl } for pid=6414 comm="syz.1.154" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 56.450318][ T6420] tmpfs: Bad value for 'mpol' [ 56.457916][ T6424] fuse: Unknown parameter 'rootm' [ 56.461374][ T40] audit: type=1400 audit(1748643974.278:272): avc: denied { read append } for pid=6423 comm="syz.1.157" name="event1" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.470954][ T40] audit: type=1400 audit(1748643974.278:273): avc: denied { ioctl } for pid=6423 comm="syz.1.157" path="/dev/input/event1" dev="devtmpfs" ino=942 ioctlcmd=0x4504 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.494544][ T6431] capability: warning: `syz.1.159' uses deprecated v2 capabilities in a way that may be insecure [ 56.533035][ T6435] tap0: tun_chr_ioctl cmd 1074025675 [ 56.536735][ T6435] tap0: persist enabled [ 56.607013][ T6442] FAULT_INJECTION: forcing a failure. [ 56.607013][ T6442] name failslab, interval 1, probability 0, space 0, times 0 [ 56.607866][ T5942] Bluetooth: hci0: unexpected event for opcode 0x1003 [ 56.612373][ T6442] CPU: 0 UID: 0 PID: 6442 Comm: syz.1.164 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 56.612397][ T6442] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 56.612407][ T6442] Call Trace: [ 56.612414][ T6442] [ 56.612421][ T6442] dump_stack_lvl+0x16c/0x1f0 [ 56.612445][ T6442] should_fail_ex+0x512/0x640 [ 56.612472][ T6442] should_failslab+0xc2/0x120 [ 56.612491][ T6442] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 56.612510][ T6442] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 56.612541][ T6442] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 56.612574][ T6442] idr_get_free+0x528/0xa30 [ 56.612604][ T6442] idr_alloc_u32+0x190/0x2f0 [ 56.612624][ T6442] ? __pfx_idr_alloc_u32+0x10/0x10 [ 56.612644][ T6442] ? lock_acquire+0x179/0x350 [ 56.612671][ T6442] idr_alloc_cyclic+0x10b/0x230 [ 56.612691][ T6442] ? __pfx_idr_alloc_cyclic+0x10/0x10 [ 56.612706][ T6442] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 56.612739][ T6442] bpf_link_prime+0x6e/0x290 [ 56.612761][ T6442] bpf_xdp_link_attach+0x249/0x8f0 [ 56.612784][ T6442] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 56.612802][ T6442] ? find_held_lock+0x2b/0x80 [ 56.612829][ T6442] ? __fget_files+0x204/0x3c0 [ 56.612861][ T6442] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 56.612894][ T6442] __sys_bpf+0x19ef/0x4d80 [ 56.612916][ T6442] ? __pfx___sys_bpf+0x10/0x10 [ 56.612937][ T6442] ? ksys_write+0x190/0x250 [ 56.612958][ T6442] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 56.612994][ T6442] ? fput+0x70/0xf0 [ 56.613013][ T6442] ? ksys_write+0x1ac/0x250 [ 56.613026][ T6442] ? __pfx_ksys_write+0x10/0x10 [ 56.613065][ T6442] __x64_sys_bpf+0x78/0xc0 [ 56.613086][ T6442] ? lockdep_hardirqs_on+0x7c/0x110 [ 56.613101][ T6442] do_syscall_64+0xcd/0x4c0 [ 56.613120][ T6442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.613136][ T6442] RIP: 0033:0x7fdcf3b8e969 [ 56.613149][ T6442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.613163][ T6442] RSP: 002b:00007fdcf4ab9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 56.613179][ T6442] RAX: ffffffffffffffda RBX: 00007fdcf3db5fa0 RCX: 00007fdcf3b8e969 [ 56.613189][ T6442] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000001c [ 56.613197][ T6442] RBP: 00007fdcf4ab9090 R08: 0000000000000000 R09: 0000000000000000 [ 56.613206][ T6442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 56.613214][ T6442] R13: 0000000000000000 R14: 00007fdcf3db5fa0 R15: 00007ffe6b079a18 [ 56.613237][ T6442] [ 56.650450][ T40] audit: type=1400 audit(1748643974.468:274): avc: denied { map } for pid=6443 comm="syz.1.165" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 56.765572][ T40] audit: type=1400 audit(1748643974.588:275): avc: denied { create } for pid=6437 comm="syz.2.162" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 56.793299][ T53] cfg80211: failed to load regulatory.db [ 56.910724][ T6453] program syz.1.167 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.921149][ T40] audit: type=1400 audit(1748643974.738:276): avc: denied { execute } for pid=6451 comm="syz.1.167" name="file2" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.928693][ T40] audit: type=1400 audit(1748643974.738:277): avc: denied { execute_no_trans } for pid=6451 comm="syz.1.167" path="/53/file2" dev="tmpfs" ino=304 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 56.965657][ T1115] ata1.00: exception Emask 0x0 SAct 0x0 SErr 0x0 action 0x0 [ 56.968126][ T1115] ata1.00: irq_stat 0x40000000 [ 56.969756][ T1115] ata1.00: failed command: ZAC MANAGEMENT OUT [ 56.972696][ T1115] ata1.00: cmd 9f/01:00:00:00:00/00:00:00:00:00/40 tag 5 [ 56.972696][ T1115] res 41/04:00:00:00:00/00:00:00:00:00/40 Emask 0x1 (device error) [ 56.977496][ T1115] ata1.00: status: { DRDY ERR } [ 56.979521][ T1115] ata1.00: error: { ABRT } [ 56.980983][ T1115] ata1.00: device reported invalid CHS sector 0 [ 57.015549][ T6462] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 57.018970][ T6462] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 57.102995][ T5942] Bluetooth: hci3: Malformed HCI Event [ 57.114827][ T5942] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 57.117664][ T5942] Bluetooth: hci2: Injecting HCI hardware error event [ 57.120234][ T5942] Bluetooth: hci2: hardware error 0x00 [ 57.125216][ T5941] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 57.432428][ T6482] FAULT_INJECTION: forcing a failure. [ 57.432428][ T6482] name failslab, interval 1, probability 0, space 0, times 0 [ 57.436383][ T6482] CPU: 0 UID: 0 PID: 6482 Comm: syz.2.175 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 57.436397][ T6482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 57.436403][ T6482] Call Trace: [ 57.436406][ T6482] [ 57.436410][ T6482] dump_stack_lvl+0x16c/0x1f0 [ 57.436426][ T6482] should_fail_ex+0x512/0x640 [ 57.436439][ T6482] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 57.436452][ T6482] should_failslab+0xc2/0x120 [ 57.436464][ T6482] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 57.436474][ T6482] ? __d_alloc+0x31/0xaa0 [ 57.436488][ T6482] __d_alloc+0x31/0xaa0 [ 57.436501][ T6482] d_alloc_pseudo+0x1c/0xc0 [ 57.436516][ T6482] alloc_file_pseudo+0xcf/0x230 [ 57.436530][ T6482] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 57.436544][ T6482] ? idr_alloc_cyclic+0x174/0x230 [ 57.436557][ T6482] __anon_inode_getfile+0xf7/0x3a0 [ 57.436571][ T6482] bpf_link_prime+0x10f/0x290 [ 57.436585][ T6482] bpf_xdp_link_attach+0x249/0x8f0 [ 57.436598][ T6482] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 57.436609][ T6482] ? find_held_lock+0x2b/0x80 [ 57.436626][ T6482] ? __fget_files+0x204/0x3c0 [ 57.436642][ T6482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 57.436660][ T6482] __sys_bpf+0x19ef/0x4d80 [ 57.436673][ T6482] ? __pfx___sys_bpf+0x10/0x10 [ 57.436685][ T6482] ? ksys_write+0x190/0x250 [ 57.436696][ T6482] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 57.436717][ T6482] ? fput+0x70/0xf0 [ 57.436728][ T6482] ? ksys_write+0x1ac/0x250 [ 57.436737][ T6482] ? __pfx_ksys_write+0x10/0x10 [ 57.436748][ T6482] __x64_sys_bpf+0x78/0xc0 [ 57.436760][ T6482] ? lockdep_hardirqs_on+0x7c/0x110 [ 57.436770][ T6482] do_syscall_64+0xcd/0x4c0 [ 57.436783][ T6482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.436794][ T6482] RIP: 0033:0x7f6359d8e969 [ 57.436802][ T6482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 57.436812][ T6482] RSP: 002b:00007f635ac7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 57.436821][ T6482] RAX: ffffffffffffffda RBX: 00007f6359fb5fa0 RCX: 00007f6359d8e969 [ 57.436828][ T6482] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000001c [ 57.436833][ T6482] RBP: 00007f635ac7b090 R08: 0000000000000000 R09: 0000000000000000 [ 57.436839][ T6482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.436844][ T6482] R13: 0000000000000000 R14: 00007f6359fb5fa0 R15: 00007ffe731a8cb8 [ 57.436857][ T6482] [ 57.716012][ T6493] block nbd1: shutting down sockets [ 57.855475][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.1.180'. [ 57.899937][ T6506] input: syz1 as /devices/virtual/input/input6 [ 57.914887][ T5937] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 57.985866][ T6508] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 58.016296][ T6510] FAULT_INJECTION: forcing a failure. [ 58.016296][ T6510] name failslab, interval 1, probability 0, space 0, times 0 [ 58.020184][ T6510] CPU: 2 UID: 0 PID: 6510 Comm: syz.3.185 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 58.020199][ T6510] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 58.020205][ T6510] Call Trace: [ 58.020210][ T6510] [ 58.020215][ T6510] dump_stack_lvl+0x16c/0x1f0 [ 58.020230][ T6510] should_fail_ex+0x512/0x640 [ 58.020244][ T6510] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 58.020257][ T6510] should_failslab+0xc2/0x120 [ 58.020268][ T6510] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 58.020278][ T6510] ? d_instantiate+0x77/0x90 [ 58.020290][ T6510] ? alloc_empty_file+0x55/0x1e0 [ 58.020305][ T6510] alloc_empty_file+0x55/0x1e0 [ 58.020318][ T6510] alloc_file_pseudo+0x13a/0x230 [ 58.020332][ T6510] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 58.020345][ T6510] ? idr_alloc_cyclic+0x174/0x230 [ 58.020358][ T6510] __anon_inode_getfile+0xf7/0x3a0 [ 58.020372][ T6510] bpf_link_prime+0x10f/0x290 [ 58.020385][ T6510] bpf_xdp_link_attach+0x249/0x8f0 [ 58.020399][ T6510] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 58.020410][ T6510] ? find_held_lock+0x2b/0x80 [ 58.020427][ T6510] ? __fget_files+0x204/0x3c0 [ 58.020443][ T6510] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 58.020461][ T6510] __sys_bpf+0x19ef/0x4d80 [ 58.020474][ T6510] ? __pfx___sys_bpf+0x10/0x10 [ 58.020486][ T6510] ? ksys_write+0x190/0x250 [ 58.020497][ T6510] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 58.020518][ T6510] ? fput+0x70/0xf0 [ 58.020529][ T6510] ? ksys_write+0x1ac/0x250 [ 58.020541][ T6510] ? __pfx_ksys_write+0x10/0x10 [ 58.020557][ T6510] __x64_sys_bpf+0x78/0xc0 [ 58.020579][ T6510] ? lockdep_hardirqs_on+0x7c/0x110 [ 58.020595][ T6510] do_syscall_64+0xcd/0x4c0 [ 58.020616][ T6510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 58.020634][ T6510] RIP: 0033:0x7f294678e969 [ 58.020647][ T6510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 58.020661][ T6510] RSP: 002b:00007f2947540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 58.020678][ T6510] RAX: ffffffffffffffda RBX: 00007f29469b5fa0 RCX: 00007f294678e969 [ 58.020688][ T6510] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000001c [ 58.020697][ T6510] RBP: 00007f2947540090 R08: 0000000000000000 R09: 0000000000000000 [ 58.020708][ T6510] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 58.020716][ T6510] R13: 0000000000000000 R14: 00007f29469b5fa0 R15: 00007fff747df928 [ 58.020739][ T6510] [ 58.094917][ T838] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.133761][ T6512] netlink: 36 bytes leftover after parsing attributes in process `syz.3.186'. [ 58.138683][ T6512] gre0: entered promiscuous mode [ 58.140686][ T6512] gre0: entered allmulticast mode [ 58.279465][ T838] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 58.283609][ T838] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 58.287679][ T838] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.293552][ T6503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 58.299825][ T838] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 58.544245][ T5974] usb 7-1: USB disconnect, device number 2 [ 58.655654][ C2] ata1: illegal qc_active transition (00000000->00000400) [ 58.666650][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.191'. [ 58.818111][ T6532] binder: 6531:6532 ioctl c0306201 200000000640 returned -22 [ 58.897581][ T6537] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 58.979687][ T1115] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 58.984316][ T1115] ata1.00: configured for UDMA/100 [ 59.003233][ T6542] FAULT_INJECTION: forcing a failure. [ 59.003233][ T6542] name failslab, interval 1, probability 0, space 0, times 0 [ 59.007098][ T6542] CPU: 2 UID: 0 PID: 6542 Comm: syz.3.195 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 59.007112][ T6542] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 59.007118][ T6542] Call Trace: [ 59.007122][ T6542] [ 59.007125][ T6542] dump_stack_lvl+0x16c/0x1f0 [ 59.007141][ T6542] should_fail_ex+0x512/0x640 [ 59.007154][ T6542] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 59.007166][ T6542] should_failslab+0xc2/0x120 [ 59.007178][ T6542] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 59.007188][ T6542] ? security_file_alloc+0x34/0x2b0 [ 59.007205][ T6542] security_file_alloc+0x34/0x2b0 [ 59.007219][ T6542] init_file+0x93/0x4c0 [ 59.007231][ T6542] alloc_empty_file+0x73/0x1e0 [ 59.007244][ T6542] alloc_file_pseudo+0x13a/0x230 [ 59.007258][ T6542] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 59.007272][ T6542] ? idr_alloc_cyclic+0x174/0x230 [ 59.007284][ T6542] __anon_inode_getfile+0xf7/0x3a0 [ 59.007298][ T6542] bpf_link_prime+0x10f/0x290 [ 59.007311][ T6542] bpf_xdp_link_attach+0x249/0x8f0 [ 59.007325][ T6542] ? __pfx_bpf_xdp_link_attach+0x10/0x10 [ 59.007336][ T6542] ? find_held_lock+0x2b/0x80 [ 59.007353][ T6542] ? __fget_files+0x204/0x3c0 [ 59.007369][ T6542] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 59.007387][ T6542] __sys_bpf+0x19ef/0x4d80 [ 59.007400][ T6542] ? __pfx___sys_bpf+0x10/0x10 [ 59.007412][ T6542] ? ksys_write+0x190/0x250 [ 59.007423][ T6542] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 59.007443][ T6542] ? fput+0x70/0xf0 [ 59.007455][ T6542] ? ksys_write+0x1ac/0x250 [ 59.007463][ T6542] ? __pfx_ksys_write+0x10/0x10 [ 59.007474][ T6542] __x64_sys_bpf+0x78/0xc0 [ 59.007486][ T6542] ? lockdep_hardirqs_on+0x7c/0x110 [ 59.007496][ T6542] do_syscall_64+0xcd/0x4c0 [ 59.007509][ T6542] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.007524][ T6542] RIP: 0033:0x7f294678e969 [ 59.007532][ T6542] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 59.007542][ T6542] RSP: 002b:00007f2947540038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 59.007551][ T6542] RAX: ffffffffffffffda RBX: 00007f29469b5fa0 RCX: 00007f294678e969 [ 59.007558][ T6542] RDX: 0000000000000010 RSI: 0000200000000400 RDI: 000000000000001c [ 59.007564][ T6542] RBP: 00007f2947540090 R08: 0000000000000000 R09: 0000000000000000 [ 59.007569][ T6542] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 59.007575][ T6542] R13: 0000000000000000 R14: 00007f29469b5fa0 R15: 00007fff747df928 [ 59.007588][ T6542] [ 59.178293][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.2.197'. [ 59.204997][ T5942] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 59.454796][ T5976] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 59.584794][ T5976] usb 8-1: device descriptor read/64, error -71 [ 59.812396][ T6562] syz.1.202 uses obsolete (PF_INET,SOCK_PACKET) [ 59.844918][ T5976] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.995701][ T5976] usb 8-1: device descriptor read/64, error -71 [ 60.053049][ T6585] overlayfs: conflicting lowerdir path [ 60.062028][ T6584] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(19) [ 60.064218][ T6584] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 60.068312][ T6584] vhci_hcd vhci_hcd.0: Device attached [ 60.116237][ T5976] usb usb8-port1: attempt power cycle [ 60.296550][ T5974] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 60.325947][ T10] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 60.329170][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.446772][ T5974] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 60.451339][ T5974] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 60.454948][ T5976] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.455807][ T5974] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 60.461792][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.468174][ T6585] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 60.474022][ T5974] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.478275][ T9] usb 6-1: config 0 has no interfaces? [ 60.480013][ T9] usb 6-1: New USB device found, idVendor=0de5, idProduct=0056, bcdDevice= 5.b5 [ 60.483446][ T5976] usb 8-1: device descriptor read/8, error -71 [ 60.485670][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.489737][ T9] usb 6-1: config 0 descriptor?? [ 60.694336][ T6587] usb 39-1: recv xbuf, 0 [ 60.699021][ T75] vhci_hcd: stop threads [ 60.700869][ T6589] usb 6-1: USB disconnect, device number 2 [ 60.701714][ T75] vhci_hcd: release socket [ 60.701890][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 60.701899][ T40] audit: type=1400 audit(1748643978.518:312): avc: denied { mount } for pid=6613 comm="syz.0.216" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 60.714319][ T40] audit: type=1400 audit(1748643978.528:313): avc: denied { unmount } for pid=5938 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 60.717279][ T75] vhci_hcd: disconnect device [ 60.729222][ T5973] usb 7-1: USB disconnect, device number 3 [ 60.734929][ T5976] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 60.743223][ T6617] netlink: 4 bytes leftover after parsing attributes in process `syz.0.217'. [ 60.766175][ T10] vhci_hcd: vhci_device speed not set [ 60.770515][ T5976] usb 8-1: device descriptor read/8, error -71 [ 60.779382][ T6620] FAULT_INJECTION: forcing a failure. [ 60.779382][ T6620] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.783610][ T6620] CPU: 2 UID: 0 PID: 6620 Comm: syz.0.218 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 60.783624][ T6620] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 60.783630][ T6620] Call Trace: [ 60.783635][ T6620] [ 60.783639][ T6620] dump_stack_lvl+0x16c/0x1f0 [ 60.783655][ T6620] should_fail_ex+0x512/0x640 [ 60.783670][ T6620] _copy_to_user+0x32/0xd0 [ 60.783686][ T6620] simple_read_from_buffer+0xcb/0x170 [ 60.783704][ T6620] proc_fail_nth_read+0x197/0x270 [ 60.783721][ T6620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.783739][ T6620] ? rw_verify_area+0xcf/0x680 [ 60.783753][ T6620] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 60.783770][ T6620] vfs_read+0x1e1/0xc60 [ 60.783788][ T6620] ? __pfx___mutex_lock+0x10/0x10 [ 60.783800][ T6620] ? __pfx_vfs_read+0x10/0x10 [ 60.783819][ T6620] ? __fget_files+0x20e/0x3c0 [ 60.783833][ T6620] ksys_read+0x12a/0x250 [ 60.783842][ T6620] ? __pfx_ksys_read+0x10/0x10 [ 60.783855][ T6620] do_syscall_64+0xcd/0x4c0 [ 60.783868][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.783879][ T6620] RIP: 0033:0x7f556218d37c [ 60.783887][ T6620] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 60.783897][ T6620] RSP: 002b:00007f5562fca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 60.783907][ T6620] RAX: ffffffffffffffda RBX: 00007f55623b5fa0 RCX: 00007f556218d37c [ 60.783913][ T6620] RDX: 000000000000000f RSI: 00007f5562fca0a0 RDI: 0000000000000007 [ 60.783919][ T6620] RBP: 00007f5562fca090 R08: 0000000000000000 R09: 0000000000000000 [ 60.783924][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 60.783930][ T6620] R13: 0000000000000000 R14: 00007f55623b5fa0 R15: 00007ffc7f48be98 [ 60.783943][ T6620] [ 60.879362][ T5976] usb usb8-port1: unable to enumerate USB device [ 60.932800][ T6626] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 61.459976][ C0] hrtimer: interrupt took 28851 ns [ 61.479191][ T6655] netlink: 12 bytes leftover after parsing attributes in process `syz.0.232'. [ 61.487606][ T40] audit: type=1400 audit(1748643979.308:314): avc: denied { watch } for pid=6657 comm="syz.1.234" path="/73" dev="tmpfs" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.547646][ T6663] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58480 sclass=netlink_route_socket pid=6663 comm=syz.2.235 [ 61.554748][ T40] audit: type=1400 audit(1748643979.368:315): avc: denied { write } for pid=6662 comm="syz.2.235" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 61.564024][ T40] audit: type=1400 audit(1748643979.378:316): avc: denied { watch_reads } for pid=6664 comm="syz.1.236" path="/74" dev="tmpfs" ino=417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.571624][ T40] audit: type=1400 audit(1748643979.378:317): avc: denied { getopt } for pid=6664 comm="syz.1.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.589257][ T40] audit: type=1400 audit(1748643979.408:318): avc: denied { append } for pid=6666 comm="syz.2.237" name="v4l-subdev4" dev="devtmpfs" ino=969 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.661455][ T6672] netlink: 48 bytes leftover after parsing attributes in process `syz.0.238'. [ 61.671901][ T40] audit: type=1400 audit(1748643979.488:319): avc: denied { write } for pid=6670 comm="syz.0.238" name="mcfilter" dev="proc" ino=4026533188 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 61.685543][ T5942] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 61.688362][ T5942] Bluetooth: hci1: Injecting HCI hardware error event [ 61.691263][ T5942] Bluetooth: hci1: hardware error 0x00 [ 61.806328][ T6693] netlink: 'syz.2.242': attribute type 1 has an invalid length. [ 61.830129][ T6693] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 61.838029][ T6689] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.838491][ T6693] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.845645][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 61.848421][ T6693] netlink: 28 bytes leftover after parsing attributes in process `syz.2.242'. [ 61.851647][ T40] audit: type=1400 audit(1748643979.668:320): avc: denied { listen } for pid=6692 comm="syz.2.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 61.889487][ T40] audit: type=1400 audit(1748643979.708:321): avc: denied { write } for pid=6698 comm="syz.2.244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 61.955725][ T6689] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 62.017812][ T6714] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.249'. [ 62.031571][ T6716] netlink: 830 bytes leftover after parsing attributes in process `syz.2.250'. [ 62.150026][ T6726] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 62.270011][ T5937] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 62.580016][ T6798] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 62.596593][ T6800] netlink: 12 bytes leftover after parsing attributes in process `syz.0.266'. [ 62.599432][ T6800] nbd: illegal input index -16777216 [ 62.623130][ T6802] netlink: 28 bytes leftover after parsing attributes in process `syz.2.267'. [ 62.736202][ T5937] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 62.836076][ T6813] netlink: 80 bytes leftover after parsing attributes in process `syz.3.271'. [ 63.163092][ T6822] vlan2: entered promiscuous mode [ 63.167107][ T6822] bridge0: entered promiscuous mode [ 63.169556][ T6822] vlan2: entered allmulticast mode [ 63.171887][ T6822] bridge0: entered allmulticast mode [ 63.277587][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.282747][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.288146][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.293399][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.299146][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.304324][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.310346][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.315639][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.321054][ T6835] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=6835 comm=syz.2.278 [ 63.422230][ T5937] Bluetooth: hci1: unexpected event for opcode 0x1003 [ 63.530660][ T6847] netlink: 'syz.0.281': attribute type 62 has an invalid length. [ 63.703824][ T6844] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 63.764926][ T5942] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 64.329907][ T6871] netlink: zone id is out of range [ 64.332128][ T6871] netlink: zone id is out of range [ 64.334318][ T6871] netlink: zone id is out of range [ 64.336715][ T6871] netlink: zone id is out of range [ 64.338953][ T6871] netlink: zone id is out of range [ 64.341162][ T6871] netlink: zone id is out of range [ 64.343068][ T6871] netlink: zone id is out of range [ 64.345140][ T6871] netlink: zone id is out of range [ 64.347348][ T6871] netlink: zone id is out of range [ 64.349511][ T6871] netlink: zone id is out of range [ 65.136326][ T6903] ceph: No mds server is up or the cluster is laggy [ 65.160413][ T6916] input: syz1 as /devices/virtual/input/input7 [ 65.353288][ T6926] binder: BINDER_SET_CONTEXT_MGR already set [ 65.354872][ T24] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 65.355523][ T6926] binder: 6923:6926 ioctl 4018620d 200000000100 returned -16 [ 65.389065][ T6930] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.392186][ T6930] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.516097][ T24] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 32, setting to 8 [ 65.520292][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 65.524176][ T24] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 65.531273][ T24] usb 6-1: string descriptor 0 read error: -22 [ 65.533903][ T24] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 65.537517][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.543122][ T6909] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 65.759858][ T24] cdc_ncm 6-1:1.0: bind() failure [ 65.764540][ T24] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 65.767367][ T24] cdc_ncm 6-1:1.1: bind() failure [ 65.771842][ T24] usb 6-1: USB disconnect, device number 3 [ 66.242475][ T6940] tmpfs: Unknown parameter 'm' [ 66.245024][ T40] kauditd_printk_skb: 27 callbacks suppressed [ 66.245037][ T40] audit: type=1400 audit(1748643984.068:349): avc: denied { create } for pid=6939 comm="syz.0.309" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.259038][ T40] audit: type=1400 audit(1748643984.068:350): avc: denied { ioctl } for pid=6939 comm="syz.0.309" path="socket:[13851]" dev="sockfs" ino=13851 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.311787][ T6940] __nla_validate_parse: 5 callbacks suppressed [ 66.311798][ T6940] netlink: 8 bytes leftover after parsing attributes in process `syz.0.309'. [ 66.321877][ T6940] vti0: entered promiscuous mode [ 66.331962][ T6951] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 66.337554][ T40] audit: type=1400 audit(1748643984.158:351): avc: denied { accept } for pid=6950 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 66.373833][ T40] audit: type=1400 audit(1748643984.188:352): avc: denied { listen } for pid=6957 comm="syz.2.316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.390121][ T40] audit: type=1400 audit(1748643984.198:353): avc: denied { read } for pid=6957 comm="syz.2.316" lport=53502 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.434395][ T40] audit: type=1400 audit(1748643984.248:354): avc: denied { mount } for pid=6957 comm="syz.2.316" name="/" dev="ramfs" ino=14937 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 66.445086][ T40] audit: type=1400 audit(1748643984.268:355): avc: denied { accept } for pid=6950 comm="syz.1.313" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.521345][ T40] audit: type=1400 audit(1748643984.338:356): avc: denied { write } for pid=6964 comm="syz.1.317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.554765][ T40] audit: type=1400 audit(1748643984.368:357): avc: denied { connect } for pid=6955 comm="syz.0.315" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 66.569954][ T40] audit: type=1400 audit(1748643984.388:358): avc: denied { setopt } for pid=6968 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 66.951781][ T6999] ufs: Invalid option: "ЊI&Ҥ݌D_{ـR7hi_ۂ [ 66.951781][ T6999]  [ 66.951781][ T6999] yh JEFAm[ ba^"" or missing value [ 66.959313][ T7001] selinux_netlink_send: 56 callbacks suppressed [ 66.959322][ T7001] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2816 sclass=netlink_route_socket pid=7001 comm=syz.1.329 [ 66.967016][ T6999] ufs: wrong mount options [ 66.968697][ T7001] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 67.024195][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 67.031649][ T7008] netlink: 24 bytes leftover after parsing attributes in process `syz.1.329'. [ 67.034350][ T7008] netlink: 248 bytes leftover after parsing attributes in process `syz.1.329'. [ 67.036427][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 67.039532][ T7008] netlink: 56 bytes leftover after parsing attributes in process `syz.1.329'. [ 67.041950][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 67.049144][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 67.052491][ T7005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.331'. [ 67.454852][ T839] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 67.624780][ T839] usb 8-1: Using ep0 maxpacket: 8 [ 67.630448][ T839] usb 8-1: config 0 has no interfaces? [ 67.633969][ T839] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 67.637666][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.639902][ T839] usb 8-1: Product: syz [ 67.641084][ T839] usb 8-1: Manufacturer: syz [ 67.642385][ T839] usb 8-1: SerialNumber: syz [ 67.657534][ T839] usb 8-1: config 0 descriptor?? [ 67.863572][ T839] usb 8-1: USB disconnect, device number 6 [ 68.563958][ T7084] xt_l2tp: v2 doesn't support IP mode [ 68.667626][ T7095] netlink: 'syz.2.358': attribute type 5 has an invalid length. [ 68.737401][ T7099] x_tables: duplicate underflow at hook 1 [ 69.054806][ T29] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 69.214938][ T29] usb 7-1: Using ep0 maxpacket: 8 [ 69.218663][ T29] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 69.222704][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 69.225984][ T29] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 69.229209][ T29] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 69.233256][ T29] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 69.236967][ T29] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.280767][ T53] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 69.434776][ T53] usb 6-1: Using ep0 maxpacket: 8 [ 69.437775][ T53] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 69.440939][ T53] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16 [ 69.442959][ T29] usb 7-1: GET_CAPABILITIES returned 0 [ 69.446328][ T29] usbtmc 7-1:16.0: can't read capabilities [ 69.646257][ T7102] net_ratelimit: 3 callbacks suppressed [ 69.646268][ T7102] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 69.673206][ T839] usb 7-1: USB disconnect, device number 4 [ 69.863794][ T7155] tipc: Can't bind to reserved service type 2 [ 69.893587][ T7157] erspan0: entered promiscuous mode [ 69.895613][ T7157] macvtap1: entered promiscuous mode [ 69.897380][ T7157] macvtap1: entered allmulticast mode [ 69.899077][ T7157] erspan0: entered allmulticast mode [ 69.906437][ T7157] erspan0: left allmulticast mode [ 69.908238][ T7157] erspan0: left promiscuous mode [ 70.771099][ T7161] block nbd0: shutting down sockets [ 70.897972][ T7182] xt_l2tp: unknown flags: 17 [ 70.943829][ T7183] can: request_module (can-proto-0) failed. [ 71.010653][ T7181] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.119640][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.122377][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.259656][ T7187] binder: 7186:7187 ioctl 80404509 200000000000 returned -22 [ 71.360506][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 71.360516][ T40] audit: type=1400 audit(1748643989.178:387): avc: denied { create } for pid=7188 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 71.363467][ T7189] __nla_validate_parse: 10 callbacks suppressed [ 71.363482][ T7189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 71.368994][ T40] audit: type=1400 audit(1748643989.178:388): avc: denied { write } for pid=7188 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 71.491112][ T7196] sctp: [Deprecated]: syz.2.392 (pid 7196) Use of struct sctp_assoc_value in delayed_ack socket option. [ 71.491112][ T7196] Use struct sctp_sack_info instead [ 71.539692][ T40] audit: type=1400 audit(1748643989.358:389): avc: denied { append } for pid=7197 comm="syz.2.393" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.539881][ T7198] random: crng reseeded on system resumption [ 71.549474][ T40] audit: type=1400 audit(1748643989.358:390): avc: denied { open } for pid=7197 comm="syz.2.393" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.699605][ T40] audit: type=1400 audit(1748643989.518:391): avc: denied { bind } for pid=7205 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.705539][ T40] audit: type=1400 audit(1748643989.518:392): avc: denied { connect } for pid=7205 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.751378][ T40] audit: type=1400 audit(1748643989.568:393): avc: denied { shutdown } for pid=7205 comm="syz.3.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 71.785806][ T6754] bond1: (slave ip6gretap1): link status up again after 0 ms [ 71.788427][ T6754] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 71.815532][ T7218] input: syz1 as /devices/virtual/input/input9 [ 71.894818][ T6767] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 72.006242][ T6753] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 72.006957][ T7229] FAULT_INJECTION: forcing a failure. [ 72.006957][ T7229] name failslab, interval 1, probability 0, space 0, times 0 [ 72.012461][ T7229] CPU: 2 UID: 0 PID: 7229 Comm: syz.0.403 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 72.012475][ T7229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 72.012481][ T7229] Call Trace: [ 72.012486][ T7229] [ 72.012490][ T7229] dump_stack_lvl+0x16c/0x1f0 [ 72.012521][ T7229] should_fail_ex+0x512/0x640 [ 72.012539][ T7229] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 72.012552][ T7229] should_failslab+0xc2/0x120 [ 72.012564][ T7229] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 72.012574][ T7229] ? __alloc_skb+0x2b2/0x380 [ 72.012586][ T7229] __alloc_skb+0x2b2/0x380 [ 72.012596][ T7229] ? __pfx___alloc_skb+0x10/0x10 [ 72.012607][ T7229] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 72.012624][ T7229] netlink_alloc_large_skb+0x69/0x130 [ 72.012638][ T7229] netlink_sendmsg+0x6a1/0xdd0 [ 72.012654][ T7229] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.012672][ T7229] ____sys_sendmsg+0xa98/0xc70 [ 72.012687][ T7229] ? copy_msghdr_from_user+0x10a/0x160 [ 72.012697][ T7229] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.012717][ T7229] ___sys_sendmsg+0x134/0x1d0 [ 72.012728][ T7229] ? __pfx____sys_sendmsg+0x10/0x10 [ 72.012738][ T7229] ? __lock_acquire+0x622/0x1c90 [ 72.012775][ T7229] __sys_sendmsg+0x16d/0x220 [ 72.012790][ T7229] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.012817][ T7229] do_syscall_64+0xcd/0x4c0 [ 72.012837][ T7229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.012853][ T7229] RIP: 0033:0x7f556218e969 [ 72.012867][ T7229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.012880][ T7229] RSP: 002b:00007f5562fca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.012895][ T7229] RAX: ffffffffffffffda RBX: 00007f55623b5fa0 RCX: 00007f556218e969 [ 72.012926][ T7229] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 72.012936][ T7229] RBP: 00007f5562fca090 R08: 0000000000000000 R09: 0000000000000000 [ 72.012946][ T7229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.012955][ T7229] R13: 0000000000000000 R14: 00007f55623b5fa0 R15: 00007ffc7f48be98 [ 72.012976][ T7229] [ 72.089577][ T53] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 72.095664][ T53] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.102910][ T53] usb 6-1: can't set config #1, error -71 [ 72.107629][ T53] usb 6-1: USB disconnect, device number 4 [ 72.113354][ T40] audit: type=1400 audit(1748643989.928:394): avc: denied { bind } for pid=7234 comm="syz.1.405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 72.124935][ T6753] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 72.146282][ T6752] Bluetooth: Error in BCSP hdr checksum [ 72.158924][ T7241] capability: warning: `syz.0.408' uses 32-bit capabilities (legacy support in use) [ 72.244816][ T6735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 72.289253][ T40] audit: type=1400 audit(1748643990.108:395): avc: denied { mounton } for pid=7255 comm="syz.1.413" path="/99/file0" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 72.354896][ T6754] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 72.405262][ T6754] Bluetooth: Error in BCSP hdr checksum [ 72.464849][ T6735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 72.560938][ T7265] netlink: 'syz.1.416': attribute type 29 has an invalid length. [ 72.566815][ T40] audit: type=1400 audit(1748643990.388:396): avc: denied { read } for pid=7264 comm="syz.1.416" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 72.574405][ T7265] netlink: 'syz.1.416': attribute type 29 has an invalid length. [ 72.578317][ T7265] netlink: 492 bytes leftover after parsing attributes in process `syz.1.416'. [ 72.596610][ T6754] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 72.667934][ T6754] Bluetooth: Error in BCSP hdr checksum [ 73.280404][ T7290] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 73.292651][ T7291] netlink: 16 bytes leftover after parsing attributes in process `syz.2.423'. [ 73.398416][ T7295] FAULT_INJECTION: forcing a failure. [ 73.398416][ T7295] name failslab, interval 1, probability 0, space 0, times 0 [ 73.402308][ T7295] CPU: 3 UID: 0 PID: 7295 Comm: syz.2.424 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 73.402328][ T7295] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 73.402336][ T7295] Call Trace: [ 73.402342][ T7295] [ 73.402348][ T7295] dump_stack_lvl+0x16c/0x1f0 [ 73.402371][ T7295] should_fail_ex+0x512/0x640 [ 73.402387][ T7295] should_failslab+0xc2/0x120 [ 73.402399][ T7295] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 73.402411][ T7295] ? skb_clone+0x190/0x3f0 [ 73.402424][ T7295] skb_clone+0x190/0x3f0 [ 73.402436][ T7295] netlink_deliver_tap+0xabd/0xd30 [ 73.402452][ T7295] netlink_unicast+0x5df/0x7f0 [ 73.402467][ T7295] ? __pfx_netlink_unicast+0x10/0x10 [ 73.402484][ T7295] netlink_sendmsg+0x8d1/0xdd0 [ 73.402500][ T7295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.402519][ T7295] ____sys_sendmsg+0xa98/0xc70 [ 73.402534][ T7295] ? copy_msghdr_from_user+0x10a/0x160 [ 73.402544][ T7295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.402565][ T7295] ___sys_sendmsg+0x134/0x1d0 [ 73.402576][ T7295] ? __pfx____sys_sendmsg+0x10/0x10 [ 73.402586][ T7295] ? __lock_acquire+0x622/0x1c90 [ 73.402615][ T7295] __sys_sendmsg+0x16d/0x220 [ 73.402625][ T7295] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.402641][ T7295] ? fput+0x70/0xf0 [ 73.402655][ T7295] do_syscall_64+0xcd/0x4c0 [ 73.402667][ T7295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.402678][ T7295] RIP: 0033:0x7f6359d8e969 [ 73.402687][ T7295] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.402696][ T7295] RSP: 002b:00007f635ac7b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.402706][ T7295] RAX: ffffffffffffffda RBX: 00007f6359fb5fa0 RCX: 00007f6359d8e969 [ 73.402712][ T7295] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 73.402718][ T7295] RBP: 00007f635ac7b090 R08: 0000000000000000 R09: 0000000000000000 [ 73.402723][ T7295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 73.402729][ T7295] R13: 0000000000000000 R14: 00007f6359fb5fa0 R15: 00007ffe731a8cb8 [ 73.402741][ T7295] [ 73.479635][ C3] vkms_vblank_simulate: vblank timer overrun [ 73.629095][ T7299] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 73.632677][ T7299] SELinux: failed to load policy [ 73.666005][ T7307] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 73.669590][ T7307] netlink: 'syz.0.429': attribute type 1 has an invalid length. [ 73.672036][ T7307] netlink: 610 bytes leftover after parsing attributes in process `syz.0.429'. [ 73.676835][ T7307] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=295 sclass=netlink_route_socket pid=7307 comm=syz.0.429 [ 73.676856][ T7308] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=295 sclass=netlink_route_socket pid=7308 comm=syz.0.429 [ 73.803560][ T7317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.432'. [ 73.813595][ T7317] netlink: 'syz.0.432': attribute type 2 has an invalid length. [ 73.819097][ T7317] (unnamed net_device) (uninitialized): (slave macvlan0): Device is not bonding slave [ 73.823050][ T7317] (unnamed net_device) (uninitialized): option active_slave: invalid value (macvlan0) [ 73.914978][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 73.916254][ T5942] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 73.959275][ T7329] netlink: 'syz.2.436': attribute type 3 has an invalid length. [ 73.961985][ T7329] netlink: 132 bytes leftover after parsing attributes in process `syz.2.436'. [ 74.009117][ T7332] FAULT_INJECTION: forcing a failure. [ 74.009117][ T7332] name failslab, interval 1, probability 0, space 0, times 0 [ 74.014584][ T7332] CPU: 2 UID: 0 PID: 7332 Comm: syz.0.437 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 74.014608][ T7332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 74.014632][ T7332] Call Trace: [ 74.014639][ T7332] [ 74.014646][ T7332] dump_stack_lvl+0x16c/0x1f0 [ 74.014670][ T7332] should_fail_ex+0x512/0x640 [ 74.014706][ T7332] ? __kmalloc_noprof+0xbf/0x510 [ 74.014726][ T7332] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 74.014754][ T7332] should_failslab+0xc2/0x120 [ 74.014775][ T7332] __kmalloc_noprof+0xd2/0x510 [ 74.014796][ T7332] ? avc_has_perm_noaudit+0x149/0x3b0 [ 74.014824][ T7332] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 74.014857][ T7332] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 74.014884][ T7332] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 74.014919][ T7332] ? bpf_lsm_capable+0x9/0x10 [ 74.014943][ T7332] ? security_capable+0x7e/0x260 [ 74.014962][ T7332] ? ns_capable+0xd7/0x110 [ 74.014991][ T7332] genl_rcv_msg+0x55c/0x800 [ 74.015021][ T7332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.015047][ T7332] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 74.015065][ T7332] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 74.015088][ T7332] ? __pfx_nl80211_post_doit+0x10/0x10 [ 74.015115][ T7332] netlink_rcv_skb+0x155/0x420 [ 74.015139][ T7332] ? __pfx_genl_rcv_msg+0x10/0x10 [ 74.015164][ T7332] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 74.015198][ T7332] ? netlink_deliver_tap+0x1ae/0xd30 [ 74.015224][ T7332] genl_rcv+0x28/0x40 [ 74.015247][ T7332] netlink_unicast+0x53d/0x7f0 [ 74.015272][ T7332] ? __pfx_netlink_unicast+0x10/0x10 [ 74.015302][ T7332] netlink_sendmsg+0x8d1/0xdd0 [ 74.015329][ T7332] ? __pfx_netlink_sendmsg+0x10/0x10 [ 74.015362][ T7332] ____sys_sendmsg+0xa98/0xc70 [ 74.015386][ T7332] ? copy_msghdr_from_user+0x10a/0x160 [ 74.015405][ T7332] ? __pfx_____sys_sendmsg+0x10/0x10 [ 74.015440][ T7332] ___sys_sendmsg+0x134/0x1d0 [ 74.015461][ T7332] ? __pfx____sys_sendmsg+0x10/0x10 [ 74.015477][ T7332] ? __lock_acquire+0x622/0x1c90 [ 74.015528][ T7332] __sys_sendmsg+0x16d/0x220 [ 74.015548][ T7332] ? __pfx___sys_sendmsg+0x10/0x10 [ 74.015584][ T7332] do_syscall_64+0xcd/0x4c0 [ 74.015606][ T7332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 74.015624][ T7332] RIP: 0033:0x7f556218e969 [ 74.015638][ T7332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.015653][ T7332] RSP: 002b:00007f5562fca038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 74.015669][ T7332] RAX: ffffffffffffffda RBX: 00007f55623b5fa0 RCX: 00007f556218e969 [ 74.015680][ T7332] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 74.015690][ T7332] RBP: 00007f5562fca090 R08: 0000000000000000 R09: 0000000000000000 [ 74.015699][ T7332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.015709][ T7332] R13: 0000000000000000 R14: 00007f55623b5fa0 R15: 00007ffc7f48be98 [ 74.015731][ T7332] [ 74.135916][ T7334] netlink: 4 bytes leftover after parsing attributes in process `syz.0.438'. [ 74.144289][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.194876][ T7335] trusted_key: syz.0.438 sent an empty control message without MSG_MORE. [ 74.200365][ T7334] bridge_slave_1 (unregistering): left allmulticast mode [ 74.202675][ T7334] bridge_slave_1 (unregistering): left promiscuous mode [ 74.204962][ T7334] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.331706][ T7339] NILFS (loop0): device size too small [ 74.394872][ T7346] netlink: 4 bytes leftover after parsing attributes in process `syz.1.441'. [ 74.675772][ T6753] net_ratelimit: 17 callbacks suppressed [ 74.675785][ T6753] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 74.785721][ T6754] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 74.798999][ T7380] xfrm1: entered allmulticast mode [ 74.813738][ T7383] NILFS (loop0): device size too small [ 74.916609][ T6754] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 75.034917][ T6754] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 75.133819][ T7411] 9pnet_virtio: no channels available for device qY3aK [ 75.151285][ T7413] support for cryptoloop has been removed. Use dm-crypt instead. [ 75.155052][ T6751] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 75.171457][ T7418] syz_tun: entered allmulticast mode [ 75.186618][ T7418] syz_tun: left allmulticast mode [ 75.198936][ T7423] netlink: 'syz.0.462': attribute type 64 has an invalid length. [ 75.204073][ T7423] netlink: 'syz.0.462': attribute type 4 has an invalid length. [ 75.209573][ T7423] netlink: 152 bytes leftover after parsing attributes in process `syz.0.462'. [ 75.220290][ T7423] xt_ipcomp: unknown flags 12 [ 75.253369][ T7428] overlayfs: failed to resolve './file1': -2 [ 75.274825][ T6767] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 75.385342][ T6749] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 75.495060][ T6750] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 75.539798][ T7481] FAULT_INJECTION: forcing a failure. [ 75.539798][ T7481] name failslab, interval 1, probability 0, space 0, times 0 [ 75.544441][ T7481] CPU: 0 UID: 0 PID: 7481 Comm: syz.3.475 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 75.544456][ T7481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.544463][ T7481] Call Trace: [ 75.544466][ T7481] [ 75.544471][ T7481] dump_stack_lvl+0x16c/0x1f0 [ 75.544486][ T7481] should_fail_ex+0x512/0x640 [ 75.544499][ T7481] ? __netdev_alloc_skb+0x213/0x920 [ 75.544512][ T7481] should_failslab+0xc2/0x120 [ 75.544525][ T7481] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 75.544535][ T7481] ? __sys_sendmsg+0x16d/0x220 [ 75.544545][ T7481] ? do_syscall_64+0xcd/0x4c0 [ 75.544556][ T7481] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.544566][ T7481] ? skb_clone+0x190/0x3f0 [ 75.544578][ T7481] skb_clone+0x190/0x3f0 [ 75.544590][ T7481] ieee80211_store_ack_skb+0x171/0x1d0 [ 75.544604][ T7481] ieee80211_build_hdr+0x27f5/0x2dd0 [ 75.544622][ T7481] ? __pfx_ieee80211_build_hdr+0x10/0x10 [ 75.544635][ T7481] ? __sched_core_account_forceidle+0x318/0x7b0 [ 75.544648][ T7481] ? ieee80211_downgrade_queue+0x32c/0x4b0 [ 75.544664][ T7481] __ieee80211_subif_start_xmit+0x7d3/0x1390 [ 75.544695][ T7481] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 75.544712][ T7481] ? find_held_lock+0x2b/0x80 [ 75.544728][ T7481] ? ieee80211_tx_control_port+0x897/0xd40 [ 75.544746][ T7481] ieee80211_tx_control_port+0x627/0xd40 [ 75.544763][ T7481] ? __pfx_ieee80211_tx_control_port+0x10/0x10 [ 75.544778][ T7481] ? netdev_run_todo+0x864/0x1320 [ 75.544791][ T7481] ? ref_tracker_alloc+0x305/0x5b0 [ 75.544808][ T7481] nl80211_tx_control_port+0x565/0xa60 [ 75.544822][ T7481] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 75.544835][ T7481] ? nl80211_pre_doit+0x1b0/0xb10 [ 75.544848][ T7481] genl_family_rcv_msg_doit+0x206/0x2f0 [ 75.544881][ T7481] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.544903][ T7481] ? bpf_lsm_capable+0x9/0x10 [ 75.544918][ T7481] ? security_capable+0x7e/0x260 [ 75.544930][ T7481] ? ns_capable+0xd7/0x110 [ 75.544946][ T7481] genl_rcv_msg+0x55c/0x800 [ 75.544963][ T7481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.544979][ T7481] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 75.544989][ T7481] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 75.544998][ T7481] ? __pfx_nl80211_post_doit+0x10/0x10 [ 75.545014][ T7481] netlink_rcv_skb+0x155/0x420 [ 75.545027][ T7481] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.545043][ T7481] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.545063][ T7481] ? netlink_deliver_tap+0x1ae/0xd30 [ 75.545082][ T7481] genl_rcv+0x28/0x40 [ 75.545095][ T7481] netlink_unicast+0x53d/0x7f0 [ 75.545110][ T7481] ? __pfx_netlink_unicast+0x10/0x10 [ 75.545128][ T7481] netlink_sendmsg+0x8d1/0xdd0 [ 75.545144][ T7481] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.545162][ T7481] ____sys_sendmsg+0xa98/0xc70 [ 75.545176][ T7481] ? copy_msghdr_from_user+0x10a/0x160 [ 75.545187][ T7481] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.545207][ T7481] ___sys_sendmsg+0x134/0x1d0 [ 75.545219][ T7481] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.545229][ T7481] ? __lock_acquire+0x622/0x1c90 [ 75.545256][ T7481] __sys_sendmsg+0x16d/0x220 [ 75.545267][ T7481] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.545287][ T7481] do_syscall_64+0xcd/0x4c0 [ 75.545299][ T7481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.545309][ T7481] RIP: 0033:0x7f294678e969 [ 75.545317][ T7481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.545327][ T7481] RSP: 002b:00007f2947540038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.545338][ T7481] RAX: ffffffffffffffda RBX: 00007f29469b5fa0 RCX: 00007f294678e969 [ 75.545344][ T7481] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 75.545350][ T7481] RBP: 00007f2947540090 R08: 0000000000000000 R09: 0000000000000000 [ 75.545356][ T7481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.545361][ T7481] R13: 0000000000000000 R14: 00007f29469b5fa0 R15: 00007fff747df928 [ 75.545374][ T7481] [ 75.668731][ T6735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 75.700369][ T7483] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 75.832741][ T7509] cifs: Unknown parameter 'no9 PG!8E8- ŖEeլ' [ 75.873422][ T7519] FAULT_INJECTION: forcing a failure. [ 75.873422][ T7519] name failslab, interval 1, probability 0, space 0, times 0 [ 75.877410][ T7519] CPU: 1 UID: 0 PID: 7519 Comm: syz.3.488 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 75.877425][ T7519] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 75.877431][ T7519] Call Trace: [ 75.877435][ T7519] [ 75.877439][ T7519] dump_stack_lvl+0x16c/0x1f0 [ 75.877454][ T7519] should_fail_ex+0x512/0x640 [ 75.877467][ T7519] ? __netdev_alloc_skb+0x213/0x920 [ 75.877481][ T7519] should_failslab+0xc2/0x120 [ 75.877493][ T7519] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 75.877503][ T7519] ? __sys_sendmsg+0x16d/0x220 [ 75.877513][ T7519] ? do_syscall_64+0xcd/0x4c0 [ 75.877523][ T7519] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.877534][ T7519] ? skb_clone+0x190/0x3f0 [ 75.877556][ T7519] skb_clone+0x190/0x3f0 [ 75.877571][ T7519] ieee80211_store_ack_skb+0x171/0x1d0 [ 75.877585][ T7519] ieee80211_build_hdr+0x27f5/0x2dd0 [ 75.877603][ T7519] ? __pfx_ieee80211_build_hdr+0x10/0x10 [ 75.877616][ T7519] ? __sched_core_account_forceidle+0x318/0x7b0 [ 75.877629][ T7519] ? ieee80211_downgrade_queue+0x32c/0x4b0 [ 75.877645][ T7519] __ieee80211_subif_start_xmit+0x7d3/0x1390 [ 75.877665][ T7519] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 75.877681][ T7519] ? find_held_lock+0x2b/0x80 [ 75.877697][ T7519] ? ieee80211_tx_control_port+0x897/0xd40 [ 75.877714][ T7519] ieee80211_tx_control_port+0x627/0xd40 [ 75.877732][ T7519] ? __pfx_ieee80211_tx_control_port+0x10/0x10 [ 75.877746][ T7519] ? netdev_run_todo+0x864/0x1320 [ 75.877758][ T7519] ? ref_tracker_alloc+0x305/0x5b0 [ 75.877775][ T7519] nl80211_tx_control_port+0x565/0xa60 [ 75.877789][ T7519] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 75.877802][ T7519] ? nl80211_pre_doit+0x1b0/0xb10 [ 75.877815][ T7519] genl_family_rcv_msg_doit+0x206/0x2f0 [ 75.877833][ T7519] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 75.877853][ T7519] ? bpf_lsm_capable+0x9/0x10 [ 75.877867][ T7519] ? security_capable+0x7e/0x260 [ 75.877879][ T7519] ? ns_capable+0xd7/0x110 [ 75.877895][ T7519] genl_rcv_msg+0x55c/0x800 [ 75.877912][ T7519] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.877935][ T7519] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 75.877945][ T7519] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 75.877954][ T7519] ? __pfx_nl80211_post_doit+0x10/0x10 [ 75.877970][ T7519] netlink_rcv_skb+0x155/0x420 [ 75.877983][ T7519] ? __pfx_genl_rcv_msg+0x10/0x10 [ 75.877999][ T7519] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 75.878018][ T7519] ? netlink_deliver_tap+0x1ae/0xd30 [ 75.878033][ T7519] genl_rcv+0x28/0x40 [ 75.878047][ T7519] netlink_unicast+0x53d/0x7f0 [ 75.878062][ T7519] ? __pfx_netlink_unicast+0x10/0x10 [ 75.878079][ T7519] netlink_sendmsg+0x8d1/0xdd0 [ 75.878095][ T7519] ? __pfx_netlink_sendmsg+0x10/0x10 [ 75.878117][ T7519] ____sys_sendmsg+0xa98/0xc70 [ 75.878132][ T7519] ? copy_msghdr_from_user+0x10a/0x160 [ 75.878143][ T7519] ? __pfx_____sys_sendmsg+0x10/0x10 [ 75.878163][ T7519] ___sys_sendmsg+0x134/0x1d0 [ 75.878174][ T7519] ? __pfx____sys_sendmsg+0x10/0x10 [ 75.878184][ T7519] ? __lock_acquire+0x622/0x1c90 [ 75.878212][ T7519] __sys_sendmsg+0x16d/0x220 [ 75.878223][ T7519] ? __pfx___sys_sendmsg+0x10/0x10 [ 75.878239][ T7519] ? fput+0x70/0xf0 [ 75.878253][ T7519] do_syscall_64+0xcd/0x4c0 [ 75.878265][ T7519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 75.878275][ T7519] RIP: 0033:0x7f294678e969 [ 75.878283][ T7519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 75.878293][ T7519] RSP: 002b:00007f2947540038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 75.878304][ T7519] RAX: ffffffffffffffda RBX: 00007f29469b5fa0 RCX: 00007f294678e969 [ 75.878310][ T7519] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 75.878316][ T7519] RBP: 00007f2947540090 R08: 0000000000000000 R09: 0000000000000000 [ 75.878322][ T7519] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 75.878328][ T7519] R13: 0000000000000000 R14: 00007f29469b5fa0 R15: 00007fff747df928 [ 75.878340][ T7519] [ 76.084971][ T839] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 76.090501][ T7536] binder: 7535:7536 ioctl c00c6211 0 returned -14 [ 76.092687][ T7537] binder: 7535:7537 ioctl c00c6211 0 returned -14 [ 76.104584][ T7539] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 76.107349][ T7539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.111805][ T7539] vhci_hcd vhci_hcd.0: Device attached [ 76.118111][ T7539] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 76.120800][ T7539] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 76.124645][ T7539] vhci_hcd vhci_hcd.0: Device attached [ 76.245095][ T839] usb 6-1: Using ep0 maxpacket: 16 [ 76.248076][ T839] usb 6-1: config 1 interface 0 altsetting 16 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 76.252027][ T839] usb 6-1: config 1 interface 0 has no altsetting 0 [ 76.255842][ T839] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 76.258768][ T839] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.261114][ T839] usb 6-1: Product: ఊ [ 76.262451][ T839] usb 6-1: Manufacturer: ь [ 76.263884][ T839] usb 6-1: SerialNumber: 볽ⷢ굿암푪⬌궙졨챨侢╯쥸䨄듈꧗ጴ쿯㺌⠪㗪⊺퀆࡭蒮皱츘쮻푡뱕競렂扰휫ಯ塦ೱ䒨辁⟄〨찻㤫理꤮㣁婻볜㕍塮䓐檨吙軮ꓬ꺇ꕦ戔񻨏浈ʹ笁᠟匝苿鞈錨ယ䮘ꟕ໰쁘䵂맷潴鷋뀏藷Ὦ犉蜾⹷䧥积㮽ᙧ垧ꍁ㼑ᩩ呅泎ނ [ 76.275536][ T7489] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 76.364841][ T54] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 76.573442][ T839] usb 6-1: USB disconnect, device number 5 [ 76.652410][ T7563] overlay: filesystem on ./bus not supported as upperdir [ 76.656023][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 76.656032][ T40] audit: type=1400 audit(1748643994.478:418): avc: denied { setattr } for pid=7562 comm="syz.0.501" name="RAWv6" dev="sockfs" ino=17728 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 76.921100][ T7567] netlink: 'syz.0.502': attribute type 12 has an invalid length. [ 76.924394][ T7567] __nla_validate_parse: 71 callbacks suppressed [ 76.924408][ T7567] netlink: 132 bytes leftover after parsing attributes in process `syz.0.502'. [ 76.937403][ T7542] vhci_hcd: connection closed [ 76.937485][ T7540] vhci_hcd: connection reset by peer [ 76.943152][ T6750] vhci_hcd: stop threads [ 76.944546][ T6750] vhci_hcd: release socket [ 76.946254][ T6750] vhci_hcd: disconnect device [ 76.948394][ T6750] vhci_hcd: stop threads [ 76.949928][ T6750] vhci_hcd: release socket [ 76.951376][ T6750] vhci_hcd: disconnect device [ 76.999387][ T7571] netlink: 92 bytes leftover after parsing attributes in process `syz.0.503'. [ 77.038829][ T40] audit: type=1400 audit(1748643994.858:419): avc: denied { create } for pid=7576 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.045873][ T40] audit: type=1400 audit(1748643994.858:420): avc: denied { shutdown } for pid=7576 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.051978][ T40] audit: type=1400 audit(1748643994.858:421): avc: denied { read } for pid=7576 comm="syz.0.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.073359][ T7582] binder: 7581:7582 ioctl c018620c 2000000000c0 returned -22 [ 77.073550][ T40] audit: type=1400 audit(1748643994.888:422): avc: denied { getopt } for pid=7581 comm="syz.0.506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.100398][ T7585] random: crng reseeded on system resumption [ 77.100659][ T40] audit: type=1400 audit(1748643994.918:423): avc: denied { write } for pid=7584 comm="syz.1.507" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 77.235739][ T7585] Hibernate inconsistent memory map detected! [ 77.238359][ T7585] PM: hibernation: Image mismatch: architecture specific data [ 77.262448][ T7598] netlink: 'syz.2.511': attribute type 4 has an invalid length. [ 77.300511][ T7600] trusted_key: encrypted_key: insufficient parameters specified [ 77.391716][ T7612] netlink: 28 bytes leftover after parsing attributes in process `syz.2.515'. [ 77.441571][ T40] audit: type=1400 audit(1748643995.258:424): avc: denied { sqpoll } for pid=7615 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 77.448404][ T7616] netlink: 36 bytes leftover after parsing attributes in process `syz.2.516'. [ 77.448413][ T40] audit: type=1400 audit(1748643995.268:425): avc: denied { connect } for pid=7615 comm="syz.2.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 77.453558][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 77.465826][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.2.516'. [ 77.468422][ T7619] FAULT_INJECTION: forcing a failure. [ 77.468422][ T7619] name failslab, interval 1, probability 0, space 0, times 0 [ 77.473415][ T7619] CPU: 2 UID: 0 PID: 7619 Comm: syz.3.517 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 77.473429][ T7619] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.473435][ T7619] Call Trace: [ 77.473440][ T7619] [ 77.473444][ T7619] dump_stack_lvl+0x16c/0x1f0 [ 77.473459][ T7619] should_fail_ex+0x512/0x640 [ 77.473475][ T7619] should_failslab+0xc2/0x120 [ 77.473487][ T7619] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 77.473498][ T7619] ? __alloc_skb+0x2b2/0x380 [ 77.473511][ T7619] __alloc_skb+0x2b2/0x380 [ 77.473521][ T7619] ? __pfx___alloc_skb+0x10/0x10 [ 77.473532][ T7619] ? do_raw_spin_lock+0x12c/0x2b0 [ 77.473550][ T7619] skb_copy+0x1c9/0x3a0 [ 77.473560][ T7619] mac80211_hwsim_tx_frame_no_nl.isra.0+0xb6e/0x13c0 [ 77.473579][ T7619] ? __pfx_mac80211_hwsim_tx_frame_no_nl.isra.0+0x10/0x10 [ 77.473598][ T7619] ? mac80211_hwsim_monitor_rx+0x1cd/0x880 [ 77.473610][ T7619] mac80211_hwsim_tx+0x7b0/0x2500 [ 77.473628][ T7619] ieee80211_handle_wake_tx_queue+0x18c/0x260 [ 77.473644][ T7619] ? __ieee80211_schedule_txq+0x167/0xc80 [ 77.473656][ T7619] ? __pfx_ieee80211_handle_wake_tx_queue+0x10/0x10 [ 77.473669][ T7619] ? __pfx___ieee80211_schedule_txq+0x10/0x10 [ 77.473680][ T7619] ? mark_held_locks+0x49/0x80 [ 77.473692][ T7619] ? __local_bh_enable_ip+0xa4/0x120 [ 77.473703][ T7619] ieee80211_queue_skb+0x12c1/0x2010 [ 77.473723][ T7619] ieee80211_tx+0x2e4/0x420 [ 77.473737][ T7619] ? __pfx_ieee80211_tx+0x10/0x10 [ 77.473758][ T7619] ? ieee80211_downgrade_queue+0x32c/0x4b0 [ 77.473768][ T7619] ? ieee80211_skb_resize+0x22a/0x630 [ 77.473780][ T7619] ? ieee80211_set_qos_hdr+0x291/0x3f0 [ 77.473791][ T7619] ieee80211_xmit+0x30f/0x3e0 [ 77.473806][ T7619] __ieee80211_subif_start_xmit+0x880/0x1390 [ 77.473825][ T7619] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 77.473842][ T7619] ? find_held_lock+0x2b/0x80 [ 77.473858][ T7619] ? ieee80211_tx_control_port+0x897/0xd40 [ 77.473875][ T7619] ieee80211_tx_control_port+0x627/0xd40 [ 77.473893][ T7619] ? __pfx_ieee80211_tx_control_port+0x10/0x10 [ 77.473908][ T7619] ? netdev_run_todo+0x864/0x1320 [ 77.473920][ T7619] ? ref_tracker_alloc+0x305/0x5b0 [ 77.473936][ T7619] nl80211_tx_control_port+0x565/0xa60 [ 77.473951][ T7619] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 77.473963][ T7619] ? nl80211_pre_doit+0x1b0/0xb10 [ 77.473976][ T7619] genl_family_rcv_msg_doit+0x206/0x2f0 [ 77.473993][ T7619] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 77.474013][ T7619] ? bpf_lsm_capable+0x9/0x10 [ 77.474029][ T7619] ? security_capable+0x7e/0x260 [ 77.474040][ T7619] ? ns_capable+0xd7/0x110 [ 77.474056][ T7619] genl_rcv_msg+0x55c/0x800 [ 77.474073][ T7619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.474088][ T7619] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 77.474098][ T7619] ? __pfx_nl80211_tx_control_port+0x10/0x10 [ 77.474108][ T7619] ? __pfx_nl80211_post_doit+0x10/0x10 [ 77.474123][ T7619] netlink_rcv_skb+0x155/0x420 [ 77.474140][ T7619] ? __pfx_genl_rcv_msg+0x10/0x10 [ 77.474156][ T7619] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 77.474175][ T7619] ? netlink_deliver_tap+0x1ae/0xd30 [ 77.474190][ T7619] genl_rcv+0x28/0x40 [ 77.474203][ T7619] netlink_unicast+0x53d/0x7f0 [ 77.474219][ T7619] ? __pfx_netlink_unicast+0x10/0x10 [ 77.474236][ T7619] netlink_sendmsg+0x8d1/0xdd0 [ 77.474252][ T7619] ? __pfx_netlink_sendmsg+0x10/0x10 [ 77.474271][ T7619] ____sys_sendmsg+0xa98/0xc70 [ 77.474285][ T7619] ? copy_msghdr_from_user+0x10a/0x160 [ 77.474296][ T7619] ? __pfx_____sys_sendmsg+0x10/0x10 [ 77.474316][ T7619] ___sys_sendmsg+0x134/0x1d0 [ 77.474328][ T7619] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.474341][ T7619] ? __lock_acquire+0x622/0x1c90 [ 77.474368][ T7619] __sys_sendmsg+0x16d/0x220 [ 77.474379][ T7619] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.474395][ T7619] ? fput+0x70/0xf0 [ 77.474409][ T7619] do_syscall_64+0xcd/0x4c0 [ 77.474422][ T7619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.474433][ T7619] RIP: 0033:0x7f294678e969 [ 77.474442][ T7619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.474452][ T7619] RSP: 002b:00007f2947540038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.474461][ T7619] RAX: ffffffffffffffda RBX: 00007f29469b5fa0 RCX: 00007f294678e969 [ 77.474468][ T7619] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 77.474474][ T7619] RBP: 00007f2947540090 R08: 0000000000000000 R09: 0000000000000000 [ 77.474480][ T7619] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.474485][ T7619] R13: 0000000000000000 R14: 00007f29469b5fa0 R15: 00007fff747df928 [ 77.474498][ T7619] [ 77.625954][ T40] audit: type=1400 audit(1748643995.448:426): avc: denied { listen } for pid=7620 comm="syz.2.518" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.668199][ T7624] netlink: 168 bytes leftover after parsing attributes in process `syz.3.519'. [ 77.671050][ T7624] netlink: 104 bytes leftover after parsing attributes in process `syz.3.519'. [ 77.698640][ T7626] bio_check_eod: 2 callbacks suppressed [ 77.698653][ T7626] syz.2.520: attempt to access beyond end of device [ 77.698653][ T7626] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 77.704506][ T7626] vxfs: unable to read disk superblock at 1 [ 77.707159][ T7626] syz.2.520: attempt to access beyond end of device [ 77.707159][ T7626] nbd2: rw=0, sector=16, nr_sectors = 2 limit=0 [ 77.711028][ T7626] vxfs: unable to read disk superblock at 8 [ 77.712888][ T7626] vxfs: can't find superblock. [ 77.758305][ T7632] netlink: 'syz.3.522': attribute type 2 has an invalid length. [ 77.760823][ T7632] netlink: 46 bytes leftover after parsing attributes in process `syz.3.522'. [ 77.820950][ T40] audit: type=1400 audit(1748643995.638:427): avc: denied { create } for pid=7641 comm="syz.2.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 77.831189][ T7642] netlink: 20 bytes leftover after parsing attributes in process `syz.2.526'. [ 77.838269][ T7644] netlink: 'syz.2.526': attribute type 1 has an invalid length. [ 77.841616][ T7645] FAULT_INJECTION: forcing a failure. [ 77.841616][ T7645] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.849110][ T7645] CPU: 1 UID: 0 PID: 7645 Comm: syz.3.527 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 77.849133][ T7645] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.849145][ T7645] Call Trace: [ 77.849151][ T7645] [ 77.849157][ T7645] dump_stack_lvl+0x16c/0x1f0 [ 77.849184][ T7645] should_fail_ex+0x512/0x640 [ 77.849213][ T7645] _copy_to_user+0x32/0xd0 [ 77.849238][ T7645] simple_read_from_buffer+0xcb/0x170 [ 77.849268][ T7645] proc_fail_nth_read+0x197/0x270 [ 77.849295][ T7645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.849323][ T7645] ? rw_verify_area+0xcf/0x680 [ 77.849346][ T7645] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.849371][ T7645] vfs_read+0x1e1/0xc60 [ 77.849398][ T7645] ? __pfx___mutex_lock+0x10/0x10 [ 77.849418][ T7645] ? __pfx_vfs_read+0x10/0x10 [ 77.849449][ T7645] ? __fget_files+0x20e/0x3c0 [ 77.849470][ T7645] ksys_read+0x12a/0x250 [ 77.849483][ T7645] ? __pfx_ksys_read+0x10/0x10 [ 77.849506][ T7645] do_syscall_64+0xcd/0x4c0 [ 77.849528][ T7645] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.849545][ T7645] RIP: 0033:0x7f294678d37c [ 77.849560][ T7645] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.849576][ T7645] RSP: 002b:00007f2947540030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.849593][ T7645] RAX: ffffffffffffffda RBX: 00007f29469b5fa0 RCX: 00007f294678d37c [ 77.849606][ T7645] RDX: 000000000000000f RSI: 00007f29475400a0 RDI: 0000000000000005 [ 77.849616][ T7645] RBP: 00007f2947540090 R08: 0000000000000000 R09: 0000000000000000 [ 77.849628][ T7645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 77.849637][ T7645] R13: 0000000000000000 R14: 00007f29469b5fa0 R15: 00007fff747df928 [ 77.849659][ T7645] [ 77.941358][ T7637] netfs: Couldn't get user pages (rc=-14) [ 78.028503][ T7660] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0 [ 78.138937][ T7670] overlayfs: failed to resolve '/͇O<{ȃ&L"w=AL9dQX`k?I8~vL~.;*5Git [ 78.138937][ T7670] uF~Rdr.F䨫ݩ֠UsRO': -2 [ 78.144875][ T7670] tmpfs: Unknown parameter 'uid<00000000000000000000' [ 78.152890][ T7674] tmpfs: Bad value for 'mpol' [ 78.681210][ T7699] netlink: 'syz.0.544': attribute type 1 has an invalid length. [ 79.024765][ T839] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 79.187885][ T839] usb 6-1: Using ep0 maxpacket: 8 [ 79.196048][ T839] usb 6-1: config 0 has no interfaces? [ 79.198433][ T839] usb 6-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 79.202209][ T839] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.218263][ T839] usb 6-1: config 0 descriptor?? [ 79.437688][ T7701] IPVS: You probably need to specify IP address on multicast interface. [ 79.440825][ T7701] IPVS: Error connecting to the multicast addr [ 79.527546][ T7703] block device autoloading is deprecated and will be removed. [ 79.533829][ T53] usb 6-1: USB disconnect, device number 6 [ 79.705750][ T6748] net_ratelimit: 33 callbacks suppressed [ 79.705767][ T6748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 79.796223][ T7739] ======================================================= [ 79.796223][ T7739] WARNING: The mand mount option has been deprecated and [ 79.796223][ T7739] and is ignored by this kernel. Remove the mand [ 79.796223][ T7739] option from the mount to silence this warning. [ 79.796223][ T7739] ======================================================= [ 79.825229][ T6754] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 79.945055][ T6749] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 80.114901][ T6752] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 80.234930][ T6751] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 80.356461][ T6751] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 80.465991][ T6752] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 80.570910][ T7783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.594073][ T7783] 8021q: adding VLAN 0 to HW filter on device bond2 [ 80.597669][ T7783] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 80.602367][ T7783] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 80.645211][ T6748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 80.765938][ T6751] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 80.874945][ T6749] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 81.227836][ T7840] syz.1.587 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 81.241348][ T7842] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.253712][ T7842] batadv_slave_0: entered promiscuous mode [ 81.331436][ T2307] libceph: mon0 (1)[::]:6789 socket error on write [ 81.377750][ T7851] ceph: No mds server is up or the cluster is laggy [ 81.504891][ T54] vhci_hcd: vhci_device speed not set [ 81.664846][ T40] kauditd_printk_skb: 22886 callbacks suppressed [ 81.664861][ T40] audit: type=1326 audit(1748643999.478:23314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.676428][ T40] audit: type=1326 audit(1748643999.488:23315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.684961][ T40] audit: type=1326 audit(1748643999.488:23316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.692612][ T40] audit: type=1326 audit(1748643999.488:23317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.700031][ T40] audit: type=1326 audit(1748643999.488:23318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.707647][ T40] audit: type=1326 audit(1748643999.488:23319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.715813][ T40] audit: type=1326 audit(1748643999.488:23320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.724487][ T40] audit: type=1326 audit(1748643999.488:23321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.733951][ T40] audit: type=1326 audit(1748643999.488:23322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 81.746210][ T40] audit: type=1326 audit(1748643999.488:23323): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7722 comm="syz.2.552" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6359d8e969 code=0x50000 [ 82.056390][ T7885] __nla_validate_parse: 16 callbacks suppressed [ 82.056408][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 82.062496][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 82.067781][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz.0.599'. [ 82.071054][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.599'. [ 82.148910][ T7887] SELinux: failed to load policy [ 82.338681][ T7907] netlink: 16 bytes leftover after parsing attributes in process `syz.0.609'. [ 82.956019][ T7955] ipt_rpfilter: unknown options [ 83.068703][ T7961] kvm: pic: non byte write [ 83.371918][ T7980] sch_fq: defrate 4294967292 ignored. [ 83.385516][ T7979] sch_fq: defrate 4294967292 ignored. [ 83.484383][ T8001] netlink: 16 bytes leftover after parsing attributes in process `syz.0.639'. [ 83.532912][ T8005] x_tables: duplicate underflow at hook 2 [ 83.719517][ T8026] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 83.787064][ T8033] mkiss: ax0: crc mode is auto. [ 83.855841][ T8043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.653'. [ 83.861111][ T8043] netlink: 48 bytes leftover after parsing attributes in process `syz.1.653'. [ 84.211547][ T8059] netlink: 4 bytes leftover after parsing attributes in process `syz.3.658'. [ 84.264187][ T8066] netlink: 12 bytes leftover after parsing attributes in process `syz.1.660'. [ 84.283701][ T8066] bond1: entered promiscuous mode [ 84.285739][ T8066] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 84.289586][ T8066] bond1: left promiscuous mode [ 84.429918][ T8072] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 84.460407][ T8074] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.465095][ T8074] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.534654][ T8076] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.538315][ T8076] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.604418][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.611611][ T8076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.683483][ T8076] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.687106][ T8076] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.690974][ T8076] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.694501][ T8076] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.733228][ T8076] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.734795][ T6748] net_ratelimit: 32 callbacks suppressed [ 84.734805][ T6748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 84.789362][ T8086] overlay: filesystem on ./file0 is read-only [ 84.846090][ T6748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 84.965035][ T6735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 85.028681][ T8128] netlink: 'syz.0.680': attribute type 4 has an invalid length. [ 85.031892][ T8128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 85.080671][ T8129] syz.0.680 (8129): /proc/8125/oom_adj is deprecated, please use /proc/8125/oom_score_adj instead. [ 85.099653][ T8128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 85.131204][ T8136] tipc: MTU too low for tipc bearer [ 85.133399][ T8138] netlink: 'syz.2.683': attribute type 23 has an invalid length. [ 85.138864][ T8136] syzkaller0: mtu less than device minimum [ 85.154939][ T6748] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 85.275251][ T6752] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 85.279077][ T8150] xt_hashlimit: size too large, truncated to 1048576 [ 85.379672][ T8171] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 85.383154][ T8171] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 85.386111][ T6735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 85.490434][ T8178] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 85.496231][ T6735] bond1: (slave ip6gretap1): failed to get link speed/duplex [ 85.938917][ T8219] syz.0.711 (8219) used greatest stack depth: 19640 bytes left [ 86.177068][ T6749] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.186788][ T8226] netlink: 'syz.1.712': attribute type 4 has an invalid length. [ 86.291990][ T6749] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.334243][ T5937] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.339723][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.342490][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.346486][ T5937] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.349231][ T5937] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.432734][ T6749] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.447640][ T8233] chnl_net:caif_netlink_parms(): no params data found [ 86.502983][ T6749] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.598247][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.600647][ T8233] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.603678][ T8233] bridge_slave_0: entered allmulticast mode [ 86.607162][ T8233] bridge_slave_0: entered promiscuous mode [ 86.613324][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.615876][ T8233] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.618228][ T8233] bridge_slave_1: entered allmulticast mode [ 86.620867][ T8233] bridge_slave_1: entered promiscuous mode [ 86.683220][ T8233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.690666][ T8233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.747673][ T8233] team0: Port device team_slave_0 added [ 86.751084][ T8233] team0: Port device team_slave_1 added [ 86.786694][ T40] kauditd_printk_skb: 3657 callbacks suppressed [ 86.786705][ T40] audit: type=1400 audit(1748644004.608:26981): avc: denied { getopt } for pid=8255 comm="syz.2.720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 86.811644][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.813875][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.822304][ T8233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.845865][ T8233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.846855][ T40] audit: type=1400 audit(1748644004.668:26982): avc: denied { search } for pid=5647 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.848263][ T8233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.856352][ T40] audit: type=1400 audit(1748644004.668:26983): avc: denied { search } for pid=5647 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.862814][ T8233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.870628][ T40] audit: type=1400 audit(1748644004.668:26984): avc: denied { search } for pid=5647 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.890990][ T40] audit: type=1400 audit(1748644004.668:26985): avc: denied { read } for pid=5647 comm="dhcpcd" name="n104" dev="tmpfs" ino=4382 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.897837][ T40] audit: type=1400 audit(1748644004.668:26986): avc: denied { open } for pid=5647 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=4382 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.906335][ T40] audit: type=1400 audit(1748644004.668:26987): avc: denied { getattr } for pid=5647 comm="dhcpcd" path="/run/udev/data/n104" dev="tmpfs" ino=4382 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 86.920774][ T6749] bridge_slave_0: left allmulticast mode [ 86.922786][ T6749] bridge_slave_0: left promiscuous mode [ 86.927732][ T6749] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.948753][ T40] audit: type=1400 audit(1748644004.768:26988): avc: denied { map } for pid=8272 comm="syz.2.725" path="pipe:[5592]" dev="pipefs" ino=5592 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 86.955968][ T40] audit: type=1400 audit(1748644004.778:26989): avc: denied { module_request } for pid=8272 comm="syz.2.725" kmod="netdev-" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 86.995958][ T40] audit: type=1400 audit(1748644004.818:26990): avc: denied { bind } for pid=8270 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 87.216359][ T6749] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 87.221065][ T6749] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 87.225551][ T6749] bond0 (unregistering): Released all slaves [ 87.231817][ T6749] bond1 (unregistering): Released all slaves [ 87.296108][ T6749] bond2 (unregistering): Released all slaves [ 87.321615][ T8233] hsr_slave_0: entered promiscuous mode [ 87.324416][ T8233] hsr_slave_1: entered promiscuous mode [ 87.327068][ T8233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.329988][ T8233] Cannot create hsr debugfs directory [ 87.383448][ T8285] overlayfs: upper fs does not support file handles, falling back to index=off. [ 87.387267][ T8285] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 87.390194][ T8285] overlayfs: conflicting lowerdir path [ 87.665648][ T6749] ------------[ cut here ]------------ [ 87.671030][ T6749] Have pending ack frames! [ 87.672832][ T6749] WARNING: CPU: 3 PID: 6749 at net/mac80211/main.c:1715 ieee80211_free_ack_frame+0x5a/0x60 [ 87.676095][ T6749] Modules linked in: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 87.677534][ T6749] CPU: 3 UID: 0 PID: 6749 Comm: kworker/u32:35 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 87.682888][ T6749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.686311][ T6749] Workqueue: netns cleanup_net [ 87.687902][ T6749] RIP: 0010:ieee80211_free_ack_frame+0x5a/0x60 [ 87.689885][ T6749] Code: 31 ff e8 59 0d 67 fe 31 c0 5b 5d e9 c0 6b 96 00 e8 bb fa d2 f6 c6 05 bc 07 a7 05 01 90 48 c7 c7 80 0b 05 8d e8 37 08 92 f6 90 <0f> 0b 90 90 eb c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 87.696787][ T6749] RSP: 0000:ffffc9000de0f8d0 EFLAGS: 00010282 [ 87.699412][ T6749] RAX: 0000000000000000 RBX: ffff88802580d040 RCX: ffffffff817af908 [ 87.702642][ T6749] RDX: ffff8880540f4880 RSI: ffffffff817af915 RDI: 0000000000000001 [ 87.706232][ T6749] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.709333][ T6749] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 87.712460][ T6749] R13: ffffffff8ae8eee0 R14: 0000000080000000 R15: 0000000000000000 [ 87.715957][ T6749] FS: 0000000000000000(0000) GS:ffff8880d6a6e000(0000) knlGS:0000000000000000 [ 87.719627][ T6749] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.721732][ T6749] CR2: 00007f9049b73e40 CR3: 00000000503ce000 CR4: 0000000000352ef0 [ 87.724188][ T6749] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.726666][ T6749] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.729142][ T6749] Call Trace: [ 87.730214][ T6749] [ 87.731163][ T6749] idr_for_each+0x143/0x270 [ 87.732606][ T6749] ? __pfx_idr_for_each+0x10/0x10 [ 87.734223][ T6749] ? kfree+0x2b4/0x4d0 [ 87.735584][ T6749] ? kfree+0x2b4/0x4d0 [ 87.737139][ T6749] ? kfree_const+0x55/0x60 [ 87.738547][ T6749] ieee80211_free_hw+0x9c/0x2d0 [ 87.740078][ T6749] ? kobject_put+0x210/0x5a0 [ 87.741598][ T6749] hwsim_exit_net+0x3fd/0x7d0 [ 87.743178][ T6749] ? __pfx_hwsim_exit_net+0x10/0x10 [ 87.744890][ T6749] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 87.746570][ T6749] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 87.748388][ T6749] ? __pfx_hwsim_exit_net+0x10/0x10 [ 87.750306][ T6749] ops_undo_list+0x2eb/0xab0 [ 87.751765][ T6749] ? __pfx_ops_undo_list+0x10/0x10 [ 87.753455][ T6749] ? __local_bh_enable_ip+0xa4/0x120 [ 87.755172][ T6749] cleanup_net+0x408/0x890 [ 87.756586][ T6749] ? __pfx_cleanup_net+0x10/0x10 [ 87.758155][ T6749] ? rcu_is_watching+0x12/0xc0 [ 87.759733][ T6749] process_one_work+0x9cc/0x1b70 [ 87.761313][ T6749] ? __pfx_process_one_work+0x10/0x10 [ 87.763078][ T6749] ? assign_work+0x1a0/0x250 [ 87.765044][ T6749] worker_thread+0x6c8/0xf10 [ 87.766539][ T6749] ? __pfx_worker_thread+0x10/0x10 [ 87.768147][ T6749] kthread+0x3c2/0x780 [ 87.769447][ T6749] ? __pfx_kthread+0x10/0x10 [ 87.770945][ T6749] ? rcu_is_watching+0x12/0xc0 [ 87.772491][ T6749] ? __pfx_kthread+0x10/0x10 [ 87.773977][ T6749] ret_from_fork+0x5d4/0x6f0 [ 87.775510][ T6749] ? __pfx_kthread+0x10/0x10 [ 87.776980][ T6749] ret_from_fork_asm+0x1a/0x30 [ 87.778496][ T6749] [ 87.779479][ T6749] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 87.781789][ T6749] CPU: 3 UID: 0 PID: 6749 Comm: kworker/u32:35 Not tainted 6.15.0-syzkaller-09113-g8477ab143069 #0 PREEMPT(full) [ 87.785785][ T6749] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 87.789148][ T6749] Workqueue: netns cleanup_net [ 87.790659][ T6749] Call Trace: [ 87.791714][ T6749] [ 87.792666][ T6749] dump_stack_lvl+0x3d/0x1f0 [ 87.794131][ T6749] panic+0x71c/0x800 [ 87.795385][ T6749] ? __pfx_panic+0x10/0x10 [ 87.796807][ T6749] ? show_trace_log_lvl+0x29b/0x3e0 [ 87.798444][ T6749] ? check_panic_on_warn+0x1f/0xb0 [ 87.800037][ T6749] ? ieee80211_free_ack_frame+0x5a/0x60 [ 87.801800][ T6749] check_panic_on_warn+0xab/0xb0 [ 87.803393][ T6749] __warn+0xf6/0x3c0 [ 87.804626][ T6749] ? __pfx_vprintk_emit+0x10/0x10 [ 87.806199][ T6749] ? ieee80211_free_ack_frame+0x5a/0x60 [ 87.807919][ T6749] report_bug+0x3c3/0x580 [ 87.809282][ T6749] ? ieee80211_free_ack_frame+0x5a/0x60 [ 87.811010][ T6749] handle_bug+0x184/0x210 [ 87.812367][ T6749] exc_invalid_op+0x17/0x50 [ 87.813795][ T6749] asm_exc_invalid_op+0x1a/0x20 [ 87.815320][ T6749] RIP: 0010:ieee80211_free_ack_frame+0x5a/0x60 [ 87.817250][ T6749] Code: 31 ff e8 59 0d 67 fe 31 c0 5b 5d e9 c0 6b 96 00 e8 bb fa d2 f6 c6 05 bc 07 a7 05 01 90 48 c7 c7 80 0b 05 8d e8 37 08 92 f6 90 <0f> 0b 90 90 eb c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 87.823227][ T6749] RSP: 0000:ffffc9000de0f8d0 EFLAGS: 00010282 [ 87.825120][ T6749] RAX: 0000000000000000 RBX: ffff88802580d040 RCX: ffffffff817af908 [ 87.827551][ T6749] RDX: ffff8880540f4880 RSI: ffffffff817af915 RDI: 0000000000000001 [ 87.830006][ T6749] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 87.832450][ T6749] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 87.834959][ T6749] R13: ffffffff8ae8eee0 R14: 0000000080000000 R15: 0000000000000000 [ 87.837400][ T6749] ? __pfx_ieee80211_free_ack_frame+0x10/0x10 [ 87.839358][ T6749] ? __warn_printk+0x198/0x350 [ 87.840892][ T6749] ? __warn_printk+0x1a5/0x350 [ 87.842394][ T6749] idr_for_each+0x143/0x270 [ 87.843881][ T6749] ? __pfx_idr_for_each+0x10/0x10 [ 87.845472][ T6749] ? kfree+0x2b4/0x4d0 [ 87.846754][ T6749] ? kfree+0x2b4/0x4d0 [ 87.848039][ T6749] ? kfree_const+0x55/0x60 [ 87.849449][ T6749] ieee80211_free_hw+0x9c/0x2d0 [ 87.850972][ T6749] ? kobject_put+0x210/0x5a0 [ 87.852421][ T6749] hwsim_exit_net+0x3fd/0x7d0 [ 87.853902][ T6749] ? __pfx_hwsim_exit_net+0x10/0x10 [ 87.855534][ T6749] ? ip_vs_sync_net_cleanup+0x72/0xb0 [ 87.857220][ T6749] ? __ip_vs_dev_cleanup_batch+0xb1/0x290 [ 87.858998][ T6749] ? __pfx_hwsim_exit_net+0x10/0x10 [ 87.860628][ T6749] ops_undo_list+0x2eb/0xab0 [ 87.862187][ T6749] ? __pfx_ops_undo_list+0x10/0x10 [ 87.863862][ T6749] ? __local_bh_enable_ip+0xa4/0x120 [ 87.865521][ T6749] cleanup_net+0x408/0x890 [ 87.866926][ T6749] ? __pfx_cleanup_net+0x10/0x10 [ 87.868478][ T6749] ? rcu_is_watching+0x12/0xc0 [ 87.869989][ T6749] process_one_work+0x9cc/0x1b70 [ 87.871559][ T6749] ? __pfx_process_one_work+0x10/0x10 [ 87.873250][ T6749] ? assign_work+0x1a0/0x250 [ 87.874712][ T6749] worker_thread+0x6c8/0xf10 [ 87.876172][ T6749] ? __pfx_worker_thread+0x10/0x10 [ 87.877781][ T6749] kthread+0x3c2/0x780 [ 87.879087][ T6749] ? __pfx_kthread+0x10/0x10 [ 87.880545][ T6749] ? rcu_is_watching+0x12/0xc0 [ 87.882054][ T6749] ? __pfx_kthread+0x10/0x10 [ 87.883523][ T6749] ret_from_fork+0x5d4/0x6f0 [ 87.885033][ T6749] ? __pfx_kthread+0x10/0x10 [ 87.886491][ T6749] ret_from_fork_asm+0x1a/0x30 [ 87.888036][ T6749] [ 87.889735][ T6749] Kernel Offset: disabled [ 87.891169][ T6749] Rebooting in 86400 seconds.. VM DIAGNOSIS: 22:26:45 Registers: info registers vcpu 0 CPU#0 RAX=0000000080000000 RBX=0000000000000000 RCX=0000000000000001 RDX=0000000000000000 RSI=ffffffff8def8a4c RDI=ffffffff8c1530c0 RBP=0000000000000002 RSP=ffffc900038df7b0 R8 =0000000000000000 R9 =0000000000000000 R10=0000000000000000 R11=0000000000007c90 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff8b7c7bfd RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d676e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f3736dcde9c CR3=000000000e382000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000200000 Opmask01=0000000004008111 Opmask02=00000000fff7ffdf Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f373713d8f0 00007f373713d310 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37370fe050 00007f37370fd0c0 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37370fe580 00007f37370fdb20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3736e000c0 00007f37370feab0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f373713cda0 00007f37370fd5f0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3736e006b0 00007f3736e000c0 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37370feab0 00007f37370fe580 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f37370fdb20 00007f37370fe050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c6f7365722f6574 6174732d6b6f6f68 2f6463706368642f 6e75722f7261762f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756769666e6f635f 6669006b6e696c2e 336874652e666e6f 632e766c6f736572 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000021 RBX=000055c8896454c0 RCX=0000000000000000 RDX=000055c8896484c0 RSI=000055c88989b110 RDI=000055c88988dc40 RBP=000055c88988dc30 RSP=00007ffff3d393f0 R8 =000055c88989b120 R9 =0000000000000004 R10=0000000000000000 R11=621a00c474328a97 R12=fffffffffffffe68 R13=000055c88566f100 R14=0000000000000000 R15=0000000000000000 RIP=00007ff7f4cb9f06 RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA] SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff7f5359880 ffffffff 00c00000 GS =0000 0000000000000000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2d327b CR3=00000000255cc000 CR4=00352ef0 DR0=000000000000004b DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeff00 Opmask01=000000000000007f Opmask02=00000000fffeff7f Opmask03=0000000000000000 Opmask04=00000000fffffbff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c88989dd90 000055c88989dd90 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c88987cb10 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7f4df1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff7f4df1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffff0000 ffff000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73730c8487ac6fe3 73730c8487ac6fe3 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 73737373737372f2 737326bbfaf8ec63 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d003d454d 414e564544003d58 45444e494649003d 4550595456454400 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4f4a414d0018454d 414e564544001858 45444e4946490018 4550595456454400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 697377685f313132 303863616d2f6c61 75747269762f7365 63697665642f7379 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000181 000055c8898b9f10 0000003165737500 306d656d702f6b63 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c44422c43422c42 422c41422c39422c 38422c37422c3242 2c31422c30422c44 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 412c36412c35412c 34412c33412c3141 2c46392c45392c38 392c36392c45382c ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 43382c41382c3938 2c38382c37382c36 382c35382c34382c 33382c32382c3138 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 323032302c313032 302c394631302c32 4331302c38423130 2c464131302c4541 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=00000000000a3f03 RBX=0000000000000002 RCX=ffffffff8b7c7449 RDX=0000000000000000 RSI=ffffffff8de06e4b RDI=ffffffff8c1530c0 RBP=ffffed1003bd8910 RSP=ffffc90000187df8 R8 =0000000000000001 R9 =ffffed100d4c663d R10=ffff88806a6331eb R11=0000000000000001 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90a78650 R15=0000000000000000 RIP=ffffffff8b7c5faf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d696e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00002000000031c0 CR3=0000000061358000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000400001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000306e616c77 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcf3c11a8a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcf3c11a97 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcf3c11a91 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcf3c11aa5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcf3c11b2b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fdcf3c11c09 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 207465735f79656b 700074616d726f66 207972616e690004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 055140565f5c404e 5500514448574a43 055c57444b4c4705 4b524a4b4e4b5000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000077 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85592cc5 RDI=ffffffff9b06d6a0 RBP=ffffffff9b06d660 RSP=ffffc9000de0f240 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000001 R12=0000000000000000 R13=0000000000000077 R14=ffffffff9b06d660 R15=ffffffff85592c60 RIP=ffffffff85592cef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6a6e000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f9049b73e40 CR3=00000000503ce000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0c0c102 Opmask01=0000000000000001 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000002 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 002d002b002b002b 002c002b00000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000030 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000018 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9049da1b20 00007f9049da2050 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7171717171717171 7171717171717171 7171717171717171 7171717171717171 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9049d69617 00007fff8b98a210 00007f9049da1000 6244726c61737176 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000e9038a79617 00000e8e8b98a210 00000e9038ab1000 1335031d10020007 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000