last executing test programs: 4m43.80088602s ago: executing program 1 (id=105): syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random='\x00 \x00\x00\x00\b', @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) 4m43.732742925s ago: executing program 1 (id=108): creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) mount(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, 0x18c7c80, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e35765f0544400002000fedbf8251000000008000700050000001800018014000200776c616e300000000000"], 0x34}}, 0x8006) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="300000001900010000000000000000001c14"], 0x30}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRESOCT=r1, @ANYRESHEX=0x0, @ANYRES8=r3, @ANYRES32], 0x44}}, 0x0) creat(&(0x7f0000000000)='./bus\x00', 0x109) 4m43.682469658s ago: executing program 1 (id=110): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) syz_open_dev$video4linux(&(0x7f0000000000), 0x4, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000002340)=[{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000003c0)="919f31e60f56df74b694d3cc94ed8834859e", 0x12}], 0x1}], 0x1, 0x10) (async) mkdirat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs\x00', 0x1ff) (async) close_range(r2, 0xffffffffffffffff, 0x0) (async, rerun: 64) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x2, 0x0, {}, [@NHA_OIF={0x8, 0x5, r7}]}, 0x20}}, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x18c, r1, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_MODES_OURS={0xc8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xc1, 0x5, "320394eca556b40a85df44c86ce0db7ce19fb8f9867a9125a6e06808a27b04d997acd0d584ae53191b90834d8612445130c9aef00c5c7c854855e12e6748a3ed457b6770e3bf858398497d5a03328974e4264f454eb617bd6da264baca6705596c6f8e681fd966d5b9c596f24d13adb5db70378be7fa475a009e9be6b25f4a6cd6a2c5203967e9fd8138b746e02e619402bf98cd6f634fa4e58415a3e32a92357f10ba9bcf084a8f48af085466a2338cf80e0ce7a5f8b67fc9f2ddb214"}]}, @ETHTOOL_A_EEE_ENABLED={0x5, 0x5, 0x1}, @ETHTOOL_A_EEE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @ETHTOOL_A_EEE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_TIMER={0x8, 0x7, 0x7}]}, 0x18c}}, 0x40000) (async) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd7000fedbdf2531000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x2004c890}, 0x2000c800) 4m43.601718322s ago: executing program 1 (id=111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRES32=r0, @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e12"], 0xb4}}, 0x0) 4m43.601507452s ago: executing program 1 (id=112): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f00000000c0)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='debugfs\x00', 0x1000016, 0x0) r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 4m43.60054468s ago: executing program 1 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) 4m28.435021996s ago: executing program 32 (id=114): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) setresgid(0xffffffffffffffff, 0xee01, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f) 4m13.780928172s ago: executing program 3 (id=601): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f00003be000/0x2000)=nil, 0x2000, 0x1000, 0x0, &(0x7f0000ffc000/0x1000)=nil) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/65, 0x328000, 0x800}, 0x20) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x14) 4m13.658065106s ago: executing program 3 (id=602): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x20400, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) (async) syz_emit_ethernet(0x8a, &(0x7f0000000500)={@remote, @random="70a245d5cde0", @val={@void, {0x8100, 0x0, 0x1, 0x2}}, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x3d, 0x78, 0x64, 0x0, 0x7, 0x2f, 0x0, @empty, @local}, {{}, {0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x0]}, {0x8, 0x88be, 0x1, {{0x0, 0x1, 0xc, 0x1, 0x1, 0x1, 0x2}, 0x1, {0x1154}}}, {0x8, 0x22eb, 0x3, {{0x3, 0x2, 0x4, 0x0, 0x0, 0x3, 0x0, 0x10}, 0x2, {0x7ff, 0x4, 0x2, 0x6, 0x0, 0x1, 0x2, 0x1}}}, {0x8, 0x6558, 0x0, "7b6553150f927d3b5f89250714b75b4ee897d477537a82240433f08731c5"}}}}}}, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f0000000240)={'8255\x00', [0x2, 0x1, 0x3, 0xd28, 0x9, 0x28e9, 0x9, 0xef8, 0x401, 0x6, 0x200, 0x5, 0x100, 0x0, 0x7ff, 0x3, 0x8, 0xe, 0x3fd, 0x1, 0xf1, 0x5, 0x7, 0x16b3, 0xa169, 0xa8, 0x8, 0xa77, 0x1e30000, 0x42, 0x3, 0x3ff]}) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcmmio\x00', [0x4f29, 0x14, 0x10000, 0x4004, 0x5, 0x5, 0x4, 0x4, 0x9a, 0xfd, 0x2, 0x1, 0x1, 0x1, 0x7dd9, 0x101, 0x0, 0x807f, 0xffffffff, 0x7, 0xffff, 0x1c, 0x0, 0x7, 0x3, 0xe66, 0x27, 0x6, 0x20004086, 0x0, 0xfffffffb]}) (async) ioctl$COMEDI_DEVINFO(r1, 0x80b06401, &(0x7f0000000180)) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x14, r2, 0x1, 0x10000}, 0x6}}, 0x4010) 4m13.655891859s ago: executing program 3 (id=605): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a70000000060a0b0400000000000000000200000244000480400001800b00010074617267657400003000028014000300e1a0b063bae294fe8f45a9b02fdf068408000240000000010d000100434f4e4e4d41524b000000000900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a98000000060a0b040000000000000000020000006c000480680001800a000100696e6e65720000005800028008000240000000840800034000000007080004400000000f0800014000000000340005800c0001007061796c6f61641024000280080004400000001c08000340000000b9080001400000000a08000240000000000900010073797a30000000000900020073797a32"], 0xc0}}, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="3183000000010000000019000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x4886) 4m13.645856794s ago: executing program 3 (id=607): mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0) mount$tmpfs(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000300)={[{@gid}]}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0xa) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000100)=0x7fffffff, 0x4) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)={0x24, 0x2c, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r2}, @typed={0x8, 0xda, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x4) syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x0) 4m13.580050735s ago: executing program 3 (id=609): r0 = socket$igmp(0x2, 0x3, 0x2) getsockopt$MRT(r0, 0x0, 0xcf, 0x0, &(0x7f0000000100)) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0x4, 0x5, 0x5, 0x9, 0x6, 0x0, 0xf, 0x5, 0xc8, 0xac, 0x4f, 0x7, 0x9, 0x7b}, 0xe) setsockopt$MRT_ADD_MFC(r0, 0x0, 0xcc, &(0x7f0000000000)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "41b47005073a2f64327cf65eb55c925b7595ff2f356acaeb7474bd00c1a31cfb", 0x5906214, 0xfffffffa, 0x0, 0x8}, 0x3c) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@acquire], 0x0, 0x0, 0x0}) r5 = dup3(r4, r3, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x158, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@multicast2, 0x0, 0x33}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x6, 0x0, 0x0, 0xfffffffffffffff7}, {0x0, 0x0, 0x0, 0x4}, {}, 0x0, 0x3502, 0x2}, [@encap={0x1c, 0x4, {0xffffffffffffffff, 0x4e24, 0x4e22, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x158}}, 0x40) 4m13.341423197s ago: executing program 3 (id=617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x30, '\x00', 0x0, @sock_ops}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r2) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x40, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x15, &(0x7f0000001200)=ANY=[@ANYBLOB="950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000fffffeff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000078a5423ea95b88baeab2e26058b77567009d1cc684d3904116cff17498bc8164cc0952b319bad1faeda9f9dd4ba487736520a79d5a02f2701ead01614d2cb516de5375e0ffcff781cb82beeaa15b5a45bf7535560770185b348991bfefa65a0f29647f53574941d18fc2118cf50414", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000181d0000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='syzkaller\x00', 0x801, 0xad, &(0x7f0000000380)=""/173, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xc, 0x1, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000500), &(0x7f0000000540)=[{0x0, 0x5, 0x0, 0x2}, {0x0, 0x4, 0xb, 0x6}], 0x10, 0x81}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000000c0)={0x4, 0x4}) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000001380), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0x29}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) stat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000201, r10, &(0x7f0000001480)='./file0\x00') bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000540)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r11, &(0x7f0000001b40)}, 0x20) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m13.306096316s ago: executing program 33 (id=617): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x18}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x30, '\x00', 0x0, @sock_ops}, 0x94) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001500), r2) sendmsg$IPVS_CMD_SET_DEST(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x40, r3, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x4004000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x15, &(0x7f0000001200)=ANY=[@ANYBLOB="950000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000b7080000000000007b8af8ff00000000b7080000fffffeff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823000078a5423ea95b88baeab2e26058b77567009d1cc684d3904116cff17498bc8164cc0952b319bad1faeda9f9dd4ba487736520a79d5a02f2701ead01614d2cb516de5375e0ffcff781cb82beeaa15b5a45bf7535560770185b348991bfefa65a0f29647f53574941d18fc2118cf50414", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000181d0000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000100)='syzkaller\x00', 0x801, 0xad, &(0x7f0000000380)=""/173, 0x41000, 0x20, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0xc, 0x1, 0x9}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000500), &(0x7f0000000540)=[{0x0, 0x5, 0x0, 0x2}, {0x0, 0x4, 0xb, 0x6}], 0x10, 0x81}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) ioctl$F2FS_IOC_DEFRAGMENT(r5, 0xc010f508, &(0x7f00000000c0)={0x4, 0x4}) r6 = syz_open_dev$sg(&(0x7f00000002c0), 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="10000000040000000400000008"], 0x48) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000001340)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) setsockopt$inet_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000001380), 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=@delneigh={0x1c, 0x1d, 0x1, 0x70bd2a, 0x25dfdbfc, {0x2, 0x0, 0x0, 0x0, 0x80, 0x29}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x40048a0) stat(&(0x7f00000013c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r9, 0xffffffff80000201, r10, &(0x7f0000001480)='./file0\x00') bpf$MAP_UPDATE_CONST_STR(0x4, &(0x7f0000000540)={{r7, 0xffffffffffffffff}, 0x0, &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r11, &(0x7f0000001b40)}, 0x20) ioctl$SG_IO(r6, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffd, 0x0, 0x0, @buffer={0x2, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3m54.484268696s ago: executing program 4 (id=722): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)='lY', 0x2}], 0x1) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000100)={0x2, @vbi={0x9, 0x7, 0x7ffffffd, 0x4f565559, [0x1000, 0x1000007], [0x9, 0xffb], 0x108}}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002100)='/proc/bus/input/devices\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000040)={0x2020}, 0x2020) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0xb, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r6, 0xae80, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x3, 0x8, 0x201, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) mount$tmpfs(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='mpol=prefer=statiF:0']) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r7, @ANYBLOB="00001000252155b21c0012000c000100626f6e6400"], 0x3c}}, 0x40000) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r8}, &(0x7f0000000800), &(0x7f0000000840)=r9}, 0x20) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0xc, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='rss_stat\x00', r11}, 0x10) 3m54.251048413s ago: executing program 4 (id=727): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r1, 0x7b0, &(0x7f0000000140)={@any, 0x7}) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r1, @ANYRES32=0x0, @ANYRES64=r0, @ANYBLOB="00000000000000009c00110000000000000000000000000000000000fe"], 0xec}}, 0x0) 3m54.250036913s ago: executing program 4 (id=728): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r0) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0xe8, r1, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0xcc, 0x22, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x2}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3398}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xa}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffb}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x33}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0xfffffffffffffed8, 0x6, 0x5}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8a35}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x20734783}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x1000}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xfffffffc}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x1000}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xb13d}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1000}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7ff}]}]}, @NL80211_ATTR_REG_RULES={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0xe8}, 0x1, 0x0, 0x0, 0x4054}, 0x20000010) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)={0x34, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0x8, 0x5, 0x0, 0x0, @u32=0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0x4040) 3m54.117499958s ago: executing program 4 (id=729): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x2b) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) fcntl$setstatus(r2, 0x4, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000002c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x3, @private2, 0x7fff}, {0xa, 0x4e22, 0x0, @remote, 0x7}, 0xffffffffffffffff, 0xf}}, 0x48) r3 = add_key$user(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="c35bbc884a10af46c33c4cfb6bbbfb19a23226c1b59267a292f64dd940bcc09ffe929a833f9c2e45b215053daefad6012afb02c616131a797d5a2268bdc4ede6c17c06e4098947c80bee88bb0ab3bc2f", 0x50, 0xfffffffffffffffc) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f0000000680)={0x0, 0x0, 0x10000, 0x1}) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dc55) close(r4) r5 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) write$binfmt_register(r5, &(0x7f0000000180)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x7, 0x3a, 's\x05\x00\\\x00ller\x00', 0x3a, 'Sy\x00[\xea\xe1lq\x00\x00\x00\x002#', 0x3a, './file0', 0x3a, [0x46]}, 0x40) r6 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r6, 0x42, 0x1ff) r7 = add_key$user(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000340)="eea56fdf9092b6d404eef7279f74168f5ada23d0f000443d148e0a111b099069b52511fa75f42f376760bd33dc2e3c3cbf06b04479577cc1f0bc84300bd58b476b9676c8ddcd0a690b04bd551359e9", 0x4f, 0xfffffffffffffffb) r8 = add_key$user(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, &(0x7f00000004c0)="1d3d698437efe22f03e8e7033145fa10aa7bfc350e7adae8cbbbf671c4c1996ff30dd9975cbc", 0x26, 0xfffffffffffffffd) r9 = inotify_init1(0x0) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmmsg$inet(r10, &(0x7f0000004540)=[{{&(0x7f0000000040)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) close_range(r9, 0xffffffffffffffff, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000500)={r3, r7, r8}, &(0x7f0000000bc0)=""/4096, 0x1000, &(0x7f00000005c0)={&(0x7f0000000540)={'sha3-256-ce\x00'}, &(0x7f0000001bc0)="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", 0x1000}) r11 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r0) sendmsg$NLBL_CALIPSO_C_ADD(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000600)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="0a0000007000ffdbdf25010000000800010003000000080002000200000008744c1d54f03c4a0f08940914ecf0f9b28198991367fe11b61f256c5115e0e3f54164215001cfffc7651150dc"], 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20020000) 3m54.117188164s ago: executing program 4 (id=730): r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xb, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x5, 0x1, 0x1, "3a8e07ca5de21f00000000000000000000004b5c00", 0x33424752}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x6, 0x4) fstat(r1, &(0x7f0000000480)) sendmsg$nl_route_sched(r1, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f00000008c0)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0xbacf, {0x1, 0x0, 0x0, 0x0, 0x4, 0x6}, {0x1, 0x0, 0x0, 0x0, 0x10, 0x6}}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x88c}}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSSOFTCAR(r2, 0x40087101, 0x0) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_elf32(r3, &(0x7f0000000000)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x3, 0x0, 0x3, 0x0, 0x2, 0x6, 0x10, 0x301, 0x38, 0xffffffff, 0xf, 0x0, 0x20, 0x3f, 0x4, 0x0, 0x4}}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="310401080000030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8000) close(r3) execve(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00'}, 0x10) r7 = gettid() sendmsg$nl_generic(r3, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x104204}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x27, 0x100, 0x70bd28, 0x25dfdbfe, {0x5}, [@typed={0x8, 0x2f, 0x0, 0x0, @pid=r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40) r8 = io_uring_setup(0x6280, &(0x7f0000000580)={0x0, 0x90000000, 0x1, 0x0, 0x1d2}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r8, 0x10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002700)=""/4096, 0x1000}], &(0x7f0000000200), 0x1}, 0x20) r9 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100), r9) sendmsg$nl_route(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="600000001000010427bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000a0001000180c20000000000140012800b0001006c6f7770616e"], 0x60}}, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000000a80)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000000)='B', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000001c0)="16501740220c", 0x6}], 0x1}}], 0x2, 0xc444) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000040), &(0x7f0000000080)=0x4) 3m53.960630985s ago: executing program 4 (id=741): r0 = syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, &(0x7f0000000300)={0x0, [[0x9ef8], [0x10000], [0x7]], '\x00', [{0xffffffff}, {0x0, 0x10}, {}, {0x0, 0x80000000, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x5f, 0x1}, {}, {}, {0x0, 0x3}, {0x0, 0xfffffffe}], '\x00', 0x1000}) syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYRES16=r0, @ANYRES16=0x0, @ANYRESHEX=r0], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000183c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000900)='erofs_lookup\x00', r5, 0x0, 0x400000000000000}, 0x7b) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f00000006c0)=""/8, &(0x7f0000000700)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xffffffffffffffff, 0xffffffffffffffbc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'}) r8 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000183c0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0x10, &(0x7f0000000100)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000900)='erofs_lookup\x00', r5, 0x0, 0x400000000000000}, 0x7b) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) getsockopt$inet6_tcp_buf(r4, 0x6, 0xd, &(0x7f00000006c0)=""/8, &(0x7f0000000700)=0x8) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0xffffffffffffffff, 0xffffffffffffffbc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r6, 0x0, 0x4}, 0x18) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000680)={{0x1, 0x1, 0x18, r2, {0x7}}, './file1\x00'}) r8 = memfd_create(&(0x7f0000001ac0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85l\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~7\x16\x02\x00(v\xe6`\"6\xfcgC\xb5\xf0\x13.zj\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\a\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x82\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff}, 0x0) r3 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='mm_migrate_pages\x00', 0xffffffffffffffff, 0x0, 0x9}, 0x18) r4 = dup(0xffffffffffffffff) connect$802154_dgram(r4, &(0x7f0000000040)={0x24, @none={0x0, 0x1}}, 0x14) sendto$inet6(r4, 0x0, 0x0, 0x40dc880, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @local}, 0x1c) ioctl$SNDRV_TIMER_IOCTL_START(r4, 0x54a0) r5 = io_uring_setup(0x456, &(0x7f00000000c0)={0x0, 0x3, 0x1000, 0x1004003, 0x3c}) io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r5, 0x18, &(0x7f0000000000), 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe2(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) tee(r2, r6, 0xfffffffffffffc01, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) 2m52.867235668s ago: executing program 2 (id=1646): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) prlimit64(r1, 0x8, 0x0, &(0x7f0000000180)) setuid(0xee00) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) r5 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0) r6 = syz_open_dev$loop(&(0x7f0000000100), 0x7, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r5) r7 = syz_open_dev$loop(&(0x7f0000000700), 0x47d, 0x0) ioctl$LOOP_SET_STATUS64(r7, 0x4c04, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x10, 0xc, "8dcb0beceb261df83228d5e07180252d19ead294cdce6f1e7a3bff3c6c17705e23f7906e04ad107d546495c45e9400", "131baeb9c2f06041a56fa2b226bb94ce7cadf37e68998f0324442700", "e978332dbf65eb09536547e06c6548ffbca79e0f8300", [0x0, 0x8]}) fsetxattr$system_posix_acl(r4, &(0x7f0000000000)='system.posix_acl_access\x00', &(0x7f0000000b00)=ANY=[@ANYBLOB="020000000100060000000000040000000000000008000100", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0x3c, 0x3) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0xc2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280), 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0e00000004ad53575b2f1c34f790c65d12000000080000000000000000070000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f00000000c0)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f00000001c0)=[0x0], &(0x7f0000000300)=[0x0], 0x0, 0x58, &(0x7f0000000340)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000480), &(0x7f0000000580), 0x8, 0xbc, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYRESHEX, @ANYRES32=r9, @ANYBLOB="0000000000000000b7000000000000007b5af8ff00000000bfa200000000000007020000d6ffffffb703000008000000b704000000000000850000001400000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, r8, 0xcc03, 0x0, 0x0, 0x0, 0x0, 0x0, r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x2f000000, 0xe, 0x0, &(0x7f0000000740)="00eda9556e09000000000000000c", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) 2m51.980854453s ago: executing program 2 (id=1654): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_GET_IO_FLUSHER(0x3a) syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) 2m50.988933134s ago: executing program 2 (id=1665): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 2m48.770691908s ago: executing program 2 (id=1678): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 2m32.791709636s ago: executing program 35 (id=1678): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000400), 0x12) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) 5.679707082s ago: executing program 0 (id=3040): r0 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18bda15c85613a37043"}}) r1 = fanotify_init(0x0, 0x400) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r2, &(0x7f0000000d40), 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) ioctl$SNDCTL_DSP_CHANNELS(r4, 0xc0045006, &(0x7f0000000200)=0xc) r5 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000302000000020385696aaaa50e69ea0c4a84ac171df5f62482026d2f22c3d5380dca12"]}, 0x0) syz_usb_control_io(r5, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000004036653ff225426c1a48e5fe30000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r6, 0x4, 0xc00) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="a3", 0x1}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 4.863585867s ago: executing program 7 (id=3045): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000000c0)=0x13) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0xff02, 0x0, 0x0, 0xffff}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x5f) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000002c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0700000004000000000100000100000028"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000bb00551a000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='kfree\x00', r3, 0x0, 0x7}, 0x18) io_uring_enter(0xffffffffffffffff, 0x5b43, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x4, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r7}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8004010}, 0x0) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 4.748806031s ago: executing program 7 (id=3046): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000380)={{@my=0x0}, 0x1, 0x1}) ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r0, 0x7a5, &(0x7f0000000480)={{@host, 0x3}, 0x0, 0x2, 0x8001}) 4.687971826s ago: executing program 7 (id=3047): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0x15}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 4.629541369s ago: executing program 7 (id=3048): r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000380)=0x4, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x41000000}, 0x20) connect$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x42}, 0x9, 0x4}, 0x20) 4.629305795s ago: executing program 7 (id=3049): r0 = socket$rxrpc(0x21, 0x2, 0xa) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000040)=0x8, 0x4) bind$rxrpc(r0, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) listen(r0, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef00", @ANYBLOB='s'], 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000080)={0x81, 0x1, 0x8, 0x1, 0x1, 0x8, 0x9, 0x6, 0x1, 0x3, 0x1, 0x8, 0x90, 0x23}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000a48500000004000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='percpu_alloc_percpu\x00', r3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000004d99bce700b7008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000d0ffa3635a38e65b37d83d7b0000000000950000000000ffff"], 0x0}, 0x94) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000001c0)=0x3) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket(0x1e, 0x4, 0x0) keyctl$read(0xb, 0x0, &(0x7f0000000100)=""/59, 0x3b) r7 = dup3(r6, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000280)=@generic={&(0x7f0000000240)='./file0\x00', r7}, 0x18) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000}, 0xfffffffe}], 0x1, 0x40000140, 0x0) 3.627305274s ago: executing program 5 (id=3059): add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) 2.717103735s ago: executing program 5 (id=3061): r0 = open(&(0x7f00000005c0)='./file0\x00', 0x2a4c0, 0x13) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000340), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000a40)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x7ff, 0xbf5}}, 0x50) syz_fuse_handle_req(r1, &(0x7f00000041c0)="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", 0x2000, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20d01, 0x0) close_range(r0, r3, 0x2) syz_fuse_handle_req(r1, &(0x7f0000000f00)="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", 0x2000, &(0x7f0000003440)={&(0x7f0000000240)={0x50, 0xffffffffffffffda, 0xfffffffffffffffc, {0x7, 0x2b, 0x401, 0x14800100, 0x2, 0x0, 0x9, 0x1, 0x0, 0x0, 0x8, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.629914414s ago: executing program 0 (id=3062): socket$inet_tcp(0x2, 0x1, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f00000023c0), 0x82, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) 2.569655795s ago: executing program 0 (id=3063): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x6, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0xfffffffffffffced, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 2.509421841s ago: executing program 0 (id=3065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0x15}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.508840791s ago: executing program 0 (id=3067): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="40180000", @ANYRES16=r3, @ANYBLOB="04002abd7000fd"], 0x48}, 0x1, 0x0, 0x0, 0x8000}, 0x40041) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 2.399702096s ago: executing program 0 (id=3068): r0 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18bda15c85613a37043"}}) fanotify_init(0x0, 0x400) r1 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r1, &(0x7f0000000d40), 0x0, 0x2) r2 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r2, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000302000000020385696aaaa50e69ea0c4a84ac171df5f62482026d2f22c3d5380dca12"]}, 0x0) syz_usb_control_io(r2, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000004036653ff225426c1a48e5fe30000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$printer(r2, 0x0, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r3, 0x4, 0xc00) writev(r3, &(0x7f0000000200)=[{&(0x7f00000000c0)="a3", 0x1}], 0x1) 1.852804993s ago: executing program 5 (id=3069): add_key$fscrypt_provisioning(&(0x7f0000000040), 0x0, 0x0, 0x18, 0xfffffffffffffffe) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000280)=[{0x0, 0x0, 0x1000}], 0x1, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x10) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000000)={0xb, 0x0, 0x0, 0x0, 'syz1\x00'}) 1.729421482s ago: executing program 7 (id=3070): r0 = syz_open_dev$I2C(0x0, 0x0, 0x0) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000600)={0x0, 0x0, 0x6, &(0x7f00000005c0)={0x22, "50e1c0340af66e0dffda611f117e9df8b20630faa67cf4f18bda15c85613a37043"}}) r1 = fanotify_init(0x0, 0x400) r2 = openat$selinux_create(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) pwrite64(r2, &(0x7f0000000d40), 0x0, 0x2) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x80001, 0x0) ioctl$SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f00000000c0)) r5 = syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000dc0)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0xff, 0x40, 0x8, [{{0x9, 0x4, 0x0, 0xfd, 0x1, 0x7, 0x1, 0x1, 0x1, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x4, 0x0, 0xb}}}}}]}}]}}, 0x0) syz_usb_control_io$printer(r5, &(0x7f0000001100)={0x14, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="000302000000020385696aaaa50e69ea0c4a84ac171df5f62482026d2f22c3d5380dca12"]}, 0x0) syz_usb_control_io(r5, &(0x7f00000015c0)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00030400000004036653ff225426c1a48e5fe30000"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io$printer(r5, 0x0, 0x0) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) fcntl$setstatus(r6, 0x4, 0xc00) writev(r6, &(0x7f0000000200)=[{&(0x7f00000000c0)="a3", 0x1}], 0x1) close_range(r1, 0xffffffffffffffff, 0x0) 949.834585ms ago: executing program 5 (id=3071): socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x262200, 0x0) close(r0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) fcntl$setstatus(r0, 0x4, 0x2000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xd) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x3) 949.220391ms ago: executing program 5 (id=3072): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_open_procfs$namespace(r3, &(0x7f00000000c0)='ns/user\x00') sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) recvmmsg(r2, &(0x7f0000001bc0)=[{{0x0, 0x0, &(0x7f00000005c0)}}], 0x1, 0x40010140, 0x0) write$uinput_user_dev(r1, &(0x7f0000000b00)={'syz0\x00', {0xfff, 0x7, 0x3, 0x7}, 0x3e, [0x2, 0x9, 0x0, 0x1, 0xc, 0xea45, 0xd, 0x1, 0x0, 0x0, 0x800008, 0xc, 0x9, 0x0, 0x1, 0xb, 0x93f, 0x7fffffff, 0x51, 0x5, 0x803, 0xfffffffa, 0x3ff, 0x2, 0x7, 0xffffffff, 0x3, 0x1, 0x4f, 0x100006, 0x9, 0x7, 0x9, 0x4, 0x2, 0x1, 0x5, 0x4, 0x9, 0x4, 0xa, 0x8, 0x0, 0x8, 0x0, 0x2, 0xffff, 0x6, 0x939, 0x5, 0x9, 0x2, 0x4f, 0x40004, 0xfffffff7, 0x7fff, 0x4, 0x5, 0x2, 0x56f00ca9, 0x5, 0x2a, 0x1, 0x21], [0x1, 0x9, 0x9, 0x1, 0x5, 0x6, 0x800, 0xc, 0xfffffffa, 0x2329, 0xfd8, 0x1, 0xe9, 0x5, 0x0, 0x24e, 0x1, 0xfffffff7, 0x2, 0x3, 0x5, 0x9, 0x82, 0xb6fe, 0x1, 0x40, 0xa3, 0x8, 0xffffffff, 0x5, 0x10000, 0x1, 0xffffff00, 0x7ff, 0x6, 0x7, 0x0, 0xa9, 0x101, 0x10, 0x2, 0x7, 0x7, 0x8, 0x7, 0x8000, 0x0, 0x5, 0xc5, 0x6, 0x1, 0x9, 0x8, 0x3, 0xfffffff7, 0x3, 0x24b, 0x1fd, 0x2a0, 0x5, 0x6, 0x8, 0x7, 0x80000007], [0x2, 0x9, 0x1a9e1bfa, 0xfffffffc, 0x8, 0x6, 0x5, 0x8001, 0x10, 0x1, 0x2, 0x7fffffff, 0x8000, 0x4, 0x1, 0x5, 0x4, 0x2, 0x2b0, 0x5, 0x97f82544, 0x8, 0x0, 0x1a2e, 0x5, 0x5, 0x4, 0x9, 0xc93, 0xffffff3c, 0x9b2, 0x7, 0x0, 0xff, 0x0, 0x2, 0x4, 0xb, 0x9, 0x6, 0x7, 0x7c13, 0x1, 0x1, 0x7, 0xff, 0xe, 0xf3, 0x4, 0x8, 0x0, 0xffffff00, 0x100, 0x7, 0x2, 0x0, 0x9, 0xdd, 0xfe83, 0x9, 0xc3, 0x7751c64, 0x800007a3], [0xb, 0x3d3, 0xffff9a7f, 0x200, 0x3, 0x2, 0x2000003, 0x1, 0x5, 0x4, 0x3, 0x1f, 0x3, 0x6, 0x6, 0x2, 0x9, 0x7, 0x2, 0x66608000, 0x9, 0x7ff, 0x6, 0x5, 0xa476, 0x5, 0x9, 0x1, 0xd, 0x0, 0xfff7ff81, 0x5, 0x10001, 0x61, 0x10, 0x1000, 0x8, 0x100, 0x1, 0x20000000, 0x8, 0x1d, 0x4000b329, 0xec000000, 0x6, 0x1904, 0x4, 0x9, 0x8, 0x7ff, 0x80, 0x5, 0xfffffffb, 0x7, 0x6e79, 0x8, 0x10000, 0x9371, 0x4f89, 0x7, 0x580, 0x10001, 0x80, 0x8]}, 0x45c) r6 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder-control\x00', 0x0, 0x0) r7 = dup(r6) ioctl$BINDER_CTL_ADD(r7, 0xc1086201, 0x0) timer_create(0x2, 0x0, &(0x7f0000000000)=0x0) r9 = socket(0x2, 0x80805, 0x0) r10 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r10, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x13}, 0x4e20, 0x3, 'wrr\x00', 0x1, 0x2, 0x6e}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r9, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r10, 0x0, 0x485, 0x0, 0x0) timer_settime(r8, 0x0, &(0x7f0000000880)={{0x0, 0x989680}, {0x77359400}}, 0x0) setns(r1, 0x20000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000000040)={0x1, 0x40, 0x2, 0x1, 0x0, 0x0, 0x80, 0x800, 0x40, 0x4, 0x0, 0x4000cf16, 0x0, 0xffffffffffffff65, 0x0}) 819.639303ms ago: executing program 6 (id=3073): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x6, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x200000006, 0xfffffffffffffced, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/246, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x63, &(0x7f00000001c0)=""/99}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800000f}, 0x94) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 819.28333ms ago: executing program 6 (id=3074): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0) recvmsg(r1, &(0x7f0000002b80)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000980)=""/4074, 0xfea}, {&(0x7f0000000340)=""/7, 0x7}], 0x2}, 0x40) 749.898944ms ago: executing program 6 (id=3075): syz_open_dev$cec(&(0x7f0000000200), 0xffffffffffffffff, 0x4ae60) r0 = syz_io_uring_setup(0x110, &(0x7f00000003c0)={0x0, 0xfad6, 0x100, 0x1}, 0x0, &(0x7f0000002a00)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffa, 0x0, 0x4) syz_io_uring_submit(0x0, r1, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0) 749.604814ms ago: executing program 6 (id=3076): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@delchain={0x5c, 0x64, 0xf31, 0xfffffffb, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xfff3, 0xffff}, {0x0, 0xa}}, [@filter_kind_options=@f_flower={{0x15}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14, 0x20, [0x0, 0xff, 0x0, 0xffffffff]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x0) 689.695067ms ago: executing program 6 (id=3077): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1010, 0x89}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000000), 0x80, r3, 0x0, 0x7}, 0x38) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b000000", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 619.17732ms ago: executing program 6 (id=3078): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x14048841) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/crypto\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000324, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={0x0, r5}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendfile(r1, r0, 0x0, 0x20000023893) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf5", @ANYRES32=0x0, @ANYBLOB="03000000000000002800"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 0s ago: executing program 5 (id=3079): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b8108edee501030109022400010000100009040002020083ec0009050602000202000a09058202"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000e40)={0x40, 0x9, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f00000004c0)=ANY=[@ANYBLOB="600a43000000b2f38c"], 0x0, 0x0, 0x0, 0x0}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') open$dir(&(0x7f0000000100)='./file0\x00', 0x15b800, 0x0) rmdir(&(0x7f0000000440)='./file0\x00') lsetxattr$trusted_overlay_redirect(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200), &(0x7f0000000380)='./file0\x00', 0x8, 0x2) kernel console output (not intermixed with test programs): 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.169314][T12048] veth0_vlan: entered promiscuous mode [ 198.178939][T12048] veth1_vlan: entered promiscuous mode [ 198.195940][T12048] veth0_macvtap: entered promiscuous mode [ 198.200364][T12048] veth1_macvtap: entered promiscuous mode [ 198.210136][T12048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.216946][T12048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.222976][ T7105] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.227000][ T7105] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.230009][ T7118] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.232820][ T7118] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.281803][ T7118] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.285861][ T7118] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.301529][ T7118] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.304065][ T7118] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.359924][T12139] syz_tun: entered allmulticast mode [ 198.401411][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1807'. [ 198.408624][T12141] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1807'. [ 198.574008][ T5979] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 198.733981][ T5979] Bluetooth: hci2: command tx timeout [ 198.858937][T12154] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 199.307725][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.642238][T12127] kexec: Could not allocate control_code_buffer [ 199.730675][T12158] fuse: Bad value for 'fd' [ 200.152514][ T40] audit: type=1800 audit(1757464258.317:670): pid=12167 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.1814" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 200.768412][T12184] fuse: Bad value for 'fd' [ 200.810719][ T10] hid (null): unknown global tag 0xc [ 200.814099][ T5979] Bluetooth: hci2: command tx timeout [ 200.870911][ T10] hid-generic 0006:0007:0008.0007: unknown main item tag 0x3 [ 200.879312][ T10] hid-generic 0006:0007:0008.0007: unknown global tag 0xc [ 200.889603][T12190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1823'. [ 200.900368][ T10] hid-generic 0006:0007:0008.0007: item 0 1 1 12 parsing failed [ 200.905423][ T10] hid-generic 0006:0007:0008.0007: probe with driver hid-generic failed with error -22 [ 201.740213][T12211] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 201.984847][ T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 202.188123][ T10] usb 10-1: config index 0 descriptor too short (expected 23569, got 27) [ 202.191178][ T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 202.197334][ T10] usb 10-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 202.200293][ T10] usb 10-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 202.202865][ T10] usb 10-1: Manufacturer: syz [ 202.211140][ T10] usb 10-1: config 0 descriptor?? [ 202.304634][ T10] rc_core: IR keymap rc-hauppauge not found [ 202.306699][ T10] Registered IR keymap rc-empty [ 202.312291][ T10] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0 [ 202.317815][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/rc/rc0/input14 [ 202.423481][ T10] usb 10-1: USB disconnect, device number 7 [ 202.894432][ T5979] Bluetooth: hci2: command tx timeout [ 203.165417][T12243] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1839'. [ 203.794085][ T34] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 203.955200][ T34] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.958729][ T34] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 203.961632][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.965431][ T34] usb 5-1: config 0 descriptor?? [ 204.129755][T12262] input: syz0 as /devices/virtual/input/input15 [ 204.172734][ T34] usbhid 5-1:0.0: can't add hid device: -71 [ 204.175709][ T34] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 204.181116][ T34] usb 5-1: USB disconnect, device number 5 [ 204.613882][ T59] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 204.773996][ T59] usb 5-1: Using ep0 maxpacket: 16 [ 204.776828][ T59] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 204.781157][ T59] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 204.785178][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 204.791549][ T59] usb 5-1: config 0 descriptor?? [ 204.793618][T12276] overlayfs: failed to clone upperpath [ 205.202220][ T59] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 205.608158][ T59] usb 5-1: USB disconnect, device number 6 [ 206.106991][T12302] ptrace attach of "/syz-executor exec"[8692] was attempted by "/syz-executor exec"[12302] [ 206.166261][T12304] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 206.483908][ T9] usb 10-1: new full-speed USB device number 8 using dummy_hcd [ 206.635880][ T9] usb 10-1: config 1 interface 0 has no altsetting 0 [ 206.640614][ T9] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 206.644660][ T9] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.648041][ T9] usb 10-1: Product: syz [ 206.649681][ T9] usb 10-1: Manufacturer: syz [ 206.651283][ T9] usb 10-1: SerialNumber: syz [ 206.877127][T12313] syz_tun: entered allmulticast mode [ 206.880207][T12312] syz_tun: left allmulticast mode [ 207.505886][ T9] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 8 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 207.767694][ T40] audit: type=1400 audit(1757464265.937:671): avc: denied { read write } for pid=12305 comm="syz.5.1865" name="lp0" dev="devtmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 207.776017][ T40] audit: type=1400 audit(1757464265.937:672): avc: denied { open } for pid=12305 comm="syz.5.1865" path="/dev/usb/lp0" dev="devtmpfs" ino=3090 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 207.876394][ T5979] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260 [ 207.906626][T12339] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 208.242153][T12350] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1882'. [ 208.478399][T12353] tipc: Enabling of bearer rejected, failed to enable media [ 209.190047][ T10] usb 10-1: USB disconnect, device number 8 [ 209.343368][ T10] usblp0: removed [ 210.624135][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 210.785528][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 210.789761][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 210.794040][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 210.797941][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 210.804695][ T10] usb 5-1: config 0 descriptor?? [ 210.894069][ T59] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 211.043988][ T59] usb 12-1: Using ep0 maxpacket: 16 [ 211.048159][ T59] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 211.054052][ T59] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 211.058150][ T59] usb 12-1: config 0 interface 0 has no altsetting 0 [ 211.060901][ T59] usb 12-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00 [ 211.067954][ T59] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.074420][ T59] usb 12-1: config 0 descriptor?? [ 211.081070][T12411] syz_tun: entered allmulticast mode [ 211.317098][T12415] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1899'. [ 211.577565][ T59] hid (null): bogus close delimiter [ 211.579268][ T59] hid (null): invalid report_count -723372659 [ 211.582763][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.586827][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.589136][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.591417][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.593602][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.595823][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.597873][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.600031][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.602153][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.604365][ T59] cougar 0003:060B:500A.000A: unknown main item tag 0x0 [ 211.607188][ T59] cougar 0003:060B:500A.000A: unexpected long global item [ 211.609820][ T59] cougar 0003:060B:500A.000A: parse failed [ 211.612326][ T59] cougar 0003:060B:500A.000A: probe with driver cougar failed with error -22 [ 211.778099][T12406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 211.781978][T12406] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 211.785573][ T59] usb 12-1: USB disconnect, device number 2 [ 211.983021][T12419] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 212.249023][ T10] uclogic 0003:256C:006D.0009: v1 frame probing failed: -71 [ 212.251621][ T10] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 212.257058][ T10] uclogic 0003:256C:006D.0009: probe with driver uclogic failed with error -71 [ 212.318159][ T10] usb 5-1: USB disconnect, device number 7 [ 213.139859][T12446] dlm: Unknown command passed to DLM device : 0 [ 213.139859][T12446] [ 213.579459][T12456] pim6reg: entered allmulticast mode [ 215.254137][ T6059] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 215.754210][ T6059] usb 10-1: Using ep0 maxpacket: 8 [ 215.758402][ T6059] usb 10-1: config 179 has an invalid interface number: 65 but max is 0 [ 215.761835][ T6059] usb 10-1: config 179 has no interface number 0 [ 215.764539][ T6059] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 215.768085][ T6059] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 215.771665][ T6059] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 215.776436][ T6059] usb 10-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 215.780008][ T6059] usb 10-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 215.784282][ T6059] usb 10-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 215.787914][ T6059] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.794196][T12479] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 216.009397][ T6059] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:179.65/input/input16 [ 216.201221][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.205135][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 216.415074][ C1] xpad 10-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 216.415075][ T6038] usb 10-1: USB disconnect, device number 9 [ 216.467428][T12505] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(8) [ 216.469519][T12505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.472136][T12505] vhci_hcd vhci_hcd.0: Device attached [ 216.478699][T12505] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(10) [ 216.481431][T12505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 216.485856][T12505] vhci_hcd vhci_hcd.0: Device attached [ 216.489686][T12505] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(12) [ 216.492183][T12505] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 216.495097][T12505] vhci_hcd vhci_hcd.0: Device attached [ 216.497713][T12505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.503977][T12505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.509095][T12505] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 216.526051][T12505] vhci_hcd vhci_hcd.0: pdev(7) rhport(6) sockfd(20) [ 216.528112][T12505] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 216.532189][T12505] vhci_hcd vhci_hcd.0: Device attached [ 216.543940][T12512] vhci_hcd: connection closed [ 216.544058][T12508] vhci_hcd: connection closed [ 216.545691][T12510] vhci_hcd: connection closed [ 216.552012][T12506] vhci_hcd: connection closed [ 216.554301][ T7116] vhci_hcd: stop threads [ 216.558144][ T7116] vhci_hcd: release socket [ 216.560041][ T7116] vhci_hcd: disconnect device [ 216.567873][ T7116] vhci_hcd: stop threads [ 216.569729][ T7116] vhci_hcd: release socket [ 216.571609][ T7116] vhci_hcd: disconnect device [ 216.576036][ T7116] vhci_hcd: stop threads [ 216.577887][ T7116] vhci_hcd: release socket [ 216.580361][ T7116] vhci_hcd: disconnect device [ 216.586659][ T7116] vhci_hcd: stop threads [ 216.588545][ T7116] vhci_hcd: release socket [ 216.592285][ T7116] vhci_hcd: disconnect device [ 216.654065][ T839] vhci_hcd: vhci_device speed not set [ 216.735035][ T5975] Bluetooth: hci3: command 0x0406 tx timeout [ 217.067292][ T40] audit: type=1400 audit(1757464275.237:673): avc: denied { append } for pid=12520 comm="syz.5.1932" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 217.072212][T12523] loop6: detected capacity change from 0 to 2560 [ 217.082481][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.086339][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.090313][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.092105][T12525] tipc: Started in network mode [ 217.094311][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.096771][T12525] tipc: Node identity 8a20011ab2d1, cluster identity 4711 [ 217.099969][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.105445][T12525] tipc: Enabled bearer , priority 0 [ 217.106439][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.110273][T12525] syzkaller0: entered promiscuous mode [ 217.112325][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.113692][T12525] syzkaller0: entered allmulticast mode [ 217.117442][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.122484][T12523] ldm_validate_partition_table(): Disk read failed. [ 217.124649][T12525] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 217.125648][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.133264][T12523] Buffer I/O error on dev loop6, logical block 0, async page read [ 217.137136][T12523] Dev loop6: unable to read RDB block 0 [ 217.139719][T12526] blk_print_req_error: 2 callbacks suppressed [ 217.139758][T12526] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 217.140163][T12523] loop6: unable to read partition table [ 217.142481][T12526] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 217.146646][T12523] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 217.149261][T12526] I/O error, dev loop6, sector 1568 op 0x1:(WRITE) flags 0x8800 phys_seg 125 prio class 2 [ 217.160374][T12526] I/O error, dev loop6, sector 1568 op 0x1:(WRITE) flags 0x8800 phys_seg 125 prio class 2 [ 217.167351][T12525] tipc: Resetting bearer [ 217.173162][T12524] tipc: Resetting bearer [ 217.188478][T12524] tipc: Disabling bearer [ 218.821852][T12556] lo: entered allmulticast mode [ 218.824995][T12555] lo: left allmulticast mode [ 219.603718][ T6038] IPVS: starting estimator thread 0... [ 219.744270][T12573] IPVS: using max 44 ests per chain, 105600 per kthread [ 221.168202][T12604] overlayfs: failed to clone upperpath [ 221.203924][ T6038] usb 12-1: new full-speed USB device number 3 using dummy_hcd [ 221.355420][ T6038] usb 12-1: config 1 interface 0 has no altsetting 0 [ 221.359278][ T6038] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 221.363640][ T6038] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.366999][ T6038] usb 12-1: Product: syz [ 221.368358][ T6038] usb 12-1: Manufacturer: syz [ 221.369927][ T6038] usb 12-1: SerialNumber: syz [ 221.985266][ T6038] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 223.041120][T12634] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 223.923293][ T29] usb 12-1: USB disconnect, device number 3 [ 223.928453][ T29] usblp0: removed [ 224.444594][ T6103] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 224.595242][ T6103] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 224.597879][ T6103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.603145][ T6103] usb 5-1: config 0 descriptor?? [ 224.809421][ T6103] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 225.053954][ T59] usb 12-1: new full-speed USB device number 4 using dummy_hcd [ 225.205345][ T59] usb 12-1: config 1 interface 0 has no altsetting 0 [ 225.209148][ T59] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 225.212045][ T59] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 225.214861][ T59] usb 12-1: Product: syz [ 225.216280][ T59] usb 12-1: Manufacturer: syz [ 225.217836][ T59] usb 12-1: SerialNumber: syz [ 225.747363][T12680] fuse: Bad value for 'fd' [ 225.835146][ T59] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 226.836003][ T6103] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 226.839352][ T6103] asix 5-1:0.0: probe with driver asix failed with error -71 [ 226.843542][ T6103] usb 5-1: USB disconnect, device number 8 [ 227.813705][ T6103] usb 12-1: USB disconnect, device number 4 [ 227.867682][ T6103] usblp0: removed [ 228.884021][T12739] lo: entered allmulticast mode [ 228.886301][T12738] lo: left allmulticast mode [ 228.983420][ T40] audit: type=1800 audit(1757464287.147:674): pid=12747 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2006" name="file1" dev="tmpfs" ino=448 res=0 errno=0 [ 229.084462][ T40] audit: type=1400 audit(1757464287.257:675): avc: denied { map } for pid=12728 comm="syz.6.1998" path="socket:[45602]" dev="sockfs" ino=45602 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 230.099035][ T5975] Bluetooth: hci2: command 0x0405 tx timeout [ 230.876661][T12782] loop6: detected capacity change from 0 to 2560 [ 230.882271][ T8464] buffer_io_error: 6 callbacks suppressed [ 230.882284][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.888244][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.891727][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.932269][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.935476][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.938393][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.954625][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.957875][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.961179][ T8464] ldm_validate_partition_table(): Disk read failed. [ 230.968513][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.971102][ T8464] Buffer I/O error on dev loop6, logical block 0, async page read [ 230.974536][ T8464] Dev loop6: unable to read RDB block 0 [ 230.977347][ T8464] loop6: unable to read partition table [ 230.981344][T12782] ldm_validate_partition_table(): Disk read failed. [ 230.987372][T12782] Dev loop6: unable to read RDB block 0 [ 230.991663][T12782] loop6: unable to read partition table [ 230.995740][T12782] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 231.012886][T12788] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2019'. [ 231.212918][ T5376] ldm_validate_partition_table(): Disk read failed. [ 231.215942][ T5376] Dev loop6: unable to read RDB block 0 [ 231.218671][ T5376] loop6: unable to read partition table [ 231.920281][ T40] audit: type=1800 audit(1757464290.087:676): pid=12807 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2026" name="file1" dev="tmpfs" ino=1564 res=0 errno=0 [ 232.173898][ T5975] Bluetooth: hci2: command 0x0405 tx timeout [ 232.570591][T12820] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2030'. [ 232.572287][ T40] audit: type=1400 audit(1757464290.737:677): avc: denied { unmount } for pid=12048 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 233.689967][ T40] audit: type=1800 audit(1757464291.857:678): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2036" name="file1" dev="tmpfs" ino=2074 res=0 errno=0 [ 233.752247][T12846] netlink: 212 bytes leftover after parsing attributes in process `syz.0.2040'. [ 233.792741][T12850] fuse: Bad value for 'group_id' [ 233.795011][T12850] fuse: Bad value for 'group_id' [ 234.333900][ T34] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 234.498142][ T34] usb 10-1: config 0 has an invalid interface number: 16 but max is 0 [ 234.500739][ T34] usb 10-1: config 0 has no interface number 0 [ 234.502707][ T34] usb 10-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 234.506237][ T34] usb 10-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 234.510436][ T34] usb 10-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 234.513301][ T34] usb 10-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 234.516080][ T34] usb 10-1: Product: syz [ 234.518972][ T34] usb 10-1: config 0 descriptor?? [ 234.653430][T12870] netlink: 212 bytes leftover after parsing attributes in process `syz.7.2050'. [ 234.655190][T12872] loop6: detected capacity change from 0 to 2560 [ 234.660645][T12872] ldm_validate_partition_table(): Disk read failed. [ 234.663194][T12872] Dev loop6: unable to read RDB block 0 [ 234.669557][T12872] loop6: unable to read partition table [ 234.672984][T12872] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 234.684484][T12874] fuse: Bad value for 'group_id' [ 234.686326][T12874] fuse: Bad value for 'group_id' [ 234.755753][T12876] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 235.025110][T12885] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 235.027910][T12885] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 235.031640][T12885] vhci_hcd vhci_hcd.0: Device attached [ 235.174098][T12889] ptrace attach of "/syz-executor exec"[8127] was attempted by "/syz-executor exec"[12889] [ 235.272527][T12889] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 235.284229][ T839] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 235.288143][T12889] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 235.294289][T12889] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 235.297674][T12889] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 235.302120][T12889] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 235.311873][T12889] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 235.321438][T12889] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 235.325327][T12889] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 235.331678][T12889] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 235.339137][T12889] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 236.310924][T12886] vhci_hcd: connection reset by peer [ 236.315673][ T7103] vhci_hcd: stop threads [ 236.317233][ T7103] vhci_hcd: release socket [ 236.318759][ T7103] vhci_hcd: disconnect device [ 237.129345][T12912] overlayfs: failed to resolve './file0': -2 [ 237.180218][T12918] loop6: detected capacity change from 0 to 2560 [ 237.182852][T12918] buffer_io_error: 64 callbacks suppressed [ 237.182861][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.191881][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.193171][ T34] usbhid 10-1:0.16: can't add hid device: -71 [ 237.195921][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.202414][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.203140][ T34] usbhid 10-1:0.16: probe with driver usbhid failed with error -71 [ 237.207645][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.211582][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.213358][ T34] usb 10-1: USB disconnect, device number 10 [ 237.216493][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.222831][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.226576][T12918] ldm_validate_partition_table(): Disk read failed. [ 237.228976][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.232404][T12918] Buffer I/O error on dev loop6, logical block 0, async page read [ 237.235370][T12918] Dev loop6: unable to read RDB block 0 [ 237.237464][T12918] loop6: unable to read partition table [ 237.241384][T12918] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 237.254721][T12921] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2064'. [ 237.453602][T12933] binder: 12930:12933 ioctl c0306201 0 returned -14 [ 238.371633][T12945] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2073'. [ 238.596117][ T40] audit: type=1400 audit(1757464296.757:679): avc: denied { getopt } for pid=12946 comm="syz.5.2081" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 238.873858][ T34] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 239.027808][ T34] usb 5-1: config 0 has an invalid interface number: 16 but max is 0 [ 239.035360][ T34] usb 5-1: config 0 has no interface number 0 [ 239.038029][ T34] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 239.043071][ T34] usb 5-1: config 0 interface 16 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 239.048740][ T34] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice=95.dc [ 239.059218][ T34] usb 5-1: New USB device strings: Mfr=0, Product=18, SerialNumber=0 [ 239.062036][ T34] usb 5-1: Product: syz [ 239.072676][ T34] usb 5-1: config 0 descriptor?? [ 239.658411][T12970] ptrace attach of "/syz-executor exec"[11678] was attempted by "/syz-executor exec"[12970] [ 239.859901][T12973] netlink: 204 bytes leftover after parsing attributes in process `syz.5.2082'. [ 240.169500][T12988] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 240.451502][ T839] vhci_hcd: vhci_device speed not set [ 240.703906][ T6038] usb 12-1: new high-speed USB device number 5 using dummy_hcd [ 240.853853][ T6038] usb 12-1: Using ep0 maxpacket: 32 [ 240.893106][ T6038] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 240.897489][ T6038] usb 12-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 240.901524][ T6038] usb 12-1: config 0 interface 0 has no altsetting 0 [ 240.907509][ T6038] usb 12-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 240.911256][ T6038] usb 12-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 240.914824][ T6038] usb 12-1: Product: syz [ 240.916616][ T6038] usb 12-1: Manufacturer: syz [ 240.918537][ T6038] usb 12-1: SerialNumber: syz [ 240.923494][ T6038] usb 12-1: config 0 descriptor?? [ 241.007151][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2091'. [ 241.286630][ T7103] Bluetooth: Error in BCSP hdr checksum [ 241.330311][ T6038] gs_usb 12-1:0.0: Configuring for 1 interfaces [ 241.535414][ T6038] gs_usb 12-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 241.540425][ T6038] gs_usb 12-1:0.0: probe with driver gs_usb failed with error -22 [ 241.544215][ T7095] Bluetooth: Error in BCSP hdr checksum [ 241.709673][ T34] usbhid 5-1:0.16: can't add hid device: -71 [ 241.711749][ T34] usbhid 5-1:0.16: probe with driver usbhid failed with error -71 [ 241.716031][ T34] usb 5-1: USB disconnect, device number 9 [ 241.938370][T13021] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2101'. [ 242.214010][ T34] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 242.365507][ T34] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.370006][ T34] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 242.373616][ T34] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 242.377497][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.382490][ T34] usb 5-1: config 0 descriptor?? [ 243.008783][T13038] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2109'. [ 243.019962][T13038] netlink: 'syz.6.2109': attribute type 10 has an invalid length. [ 243.022612][T13038] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2109'. [ 243.026320][T13038] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 243.029296][T13038] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 243.033118][T13038] batman_adv: batadv0: Adding interface: virt_wifi0 [ 243.038491][T13038] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.051768][T13038] batman_adv: batadv0: Interface activated: virt_wifi0 [ 243.054696][ T5979] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 243.411624][ T10] usb 12-1: USB disconnect, device number 5 [ 243.971111][T13052] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 244.678967][T13076] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2125'. [ 245.008468][ T6103] usb 5-1: USB disconnect, device number 10 [ 245.096467][T13100] fuse: Unknown parameter 'grou00000000000000000000' [ 245.128706][ T40] audit: type=1800 audit(1757464303.297:680): pid=13102 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2136" name="file1" dev="tmpfs" ino=589 res=0 errno=0 [ 245.494631][ T34] usb 12-1: new full-speed USB device number 6 using dummy_hcd [ 245.686687][ T34] usb 12-1: config 1 interface 0 has no altsetting 0 [ 245.691955][ T34] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 245.696238][ T34] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 245.699701][ T34] usb 12-1: Product: syz [ 245.701593][ T34] usb 12-1: Manufacturer: syz [ 245.703708][ T34] usb 12-1: SerialNumber: syz [ 246.104334][T13124] fuse: Unknown parameter 'group_i00000000000000000000' [ 246.316027][ T34] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 6 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 246.382711][T13139] fuse: Bad value for 'fd' [ 246.461023][T13150] fuse: Unknown parameter 'group_i00000000000000000000' [ 246.481742][ T40] audit: type=1800 audit(1757464304.647:681): pid=13151 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2157" name="file1" dev="tmpfs" ino=1693 res=0 errno=0 [ 246.768172][T13172] fuse: Unknown parameter 'group_i00000000000000000000' [ 246.827704][T13176] netlink: 72 bytes leftover after parsing attributes in process `syz.6.2168'. [ 246.877252][ T40] audit: type=1800 audit(1757464305.047:682): pid=13178 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2169" name="file1" dev="tmpfs" ino=2400 res=0 errno=0 [ 247.562015][T13191] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 247.626801][T13195] fuse: Unknown parameter 'group_id00000000000000000000' [ 247.884381][ T40] audit: type=1800 audit(1757464306.057:683): pid=13203 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2178" name="file1" dev="tmpfs" ino=2416 res=0 errno=0 [ 248.058970][ T839] usb 12-1: USB disconnect, device number 6 [ 248.070749][ T839] usblp0: removed [ 248.616513][T13214] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 248.731750][T13219] fuse: Unknown parameter 'group_id00000000000000000000' [ 249.043861][ T6038] usb 10-1: new full-speed USB device number 11 using dummy_hcd [ 249.219607][ T6038] usb 10-1: config 1 interface 0 has no altsetting 0 [ 249.225499][ T6038] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 249.230834][ T6038] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.233619][ T6038] usb 10-1: Product: syz [ 249.235449][ T6038] usb 10-1: Manufacturer: syz [ 249.237263][ T6038] usb 10-1: SerialNumber: syz [ 249.521090][T13239] fuse: Unknown parameter 'group_id00000000000000000000' [ 249.550837][T13241] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 249.851379][ T6038] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 249.858580][ T6038] usb 10-1: USB disconnect, device number 11 [ 249.865015][ T6038] usblp0: removed [ 250.024514][T13259] fuse: Bad value for 'user_id' [ 250.026752][T13259] fuse: Bad value for 'user_id' [ 250.070222][ T40] audit: type=1800 audit(1757464308.237:684): pid=13261 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2204" name="file1" dev="tmpfs" ino=2468 res=0 errno=0 [ 250.869919][T13281] fuse: Bad value for 'user_id' [ 250.871589][T13281] fuse: Bad value for 'user_id' [ 250.930391][ T40] audit: type=1800 audit(1757464309.097:685): pid=13285 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2214" name="file1" dev="tmpfs" ino=2500 res=0 errno=0 [ 251.981756][ T40] audit: type=1800 audit(1757464310.147:686): pid=13309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2223" name="file1" dev="tmpfs" ino=2521 res=0 errno=0 [ 252.541360][T13329] Mount JFS Failure: -22 [ 252.542944][T13329] jfs_mount failed w/return code = -22 [ 252.880789][T13335] fuse: Bad value for 'group_id' [ 252.882542][T13335] fuse: Bad value for 'group_id' [ 252.885529][ T40] audit: type=1800 audit(1757464311.057:687): pid=13335 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2232" name="file1" dev="tmpfs" ino=2532 res=0 errno=0 [ 253.846073][ T40] audit: type=1400 audit(1757464312.017:688): avc: denied { append } for pid=13358 comm="syz.7.2241" name="usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 253.887875][T13361] fuse: Bad value for 'group_id' [ 253.889500][T13361] fuse: Bad value for 'group_id' [ 253.892190][ T40] audit: type=1800 audit(1757464312.057:689): pid=13361 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2242" name="file1" dev="tmpfs" ino=2568 res=0 errno=0 [ 253.918327][ T40] audit: type=1400 audit(1757464312.087:690): avc: denied { connect } for pid=13358 comm="syz.7.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 253.935568][ T6059] page_pool_release_retry() stalled pool shutdown: id 76, 21 inflight 121 sec [ 253.958465][T13366] fuse: Bad value for 'group_id' [ 253.960228][T13366] fuse: Bad value for 'group_id' [ 253.963644][ T40] audit: type=1800 audit(1757464312.127:691): pid=13366 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2251" name="file1" dev="tmpfs" ino=2579 res=0 errno=0 [ 253.970862][ T40] audit: type=1400 audit(1757464312.137:692): avc: denied { read } for pid=13358 comm="syz.7.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.025052][ T40] audit: type=1400 audit(1757464312.197:693): avc: denied { write } for pid=13358 comm="syz.7.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 254.320252][T13373] fuse: Bad value for 'user_id' [ 254.322293][T13373] fuse: Bad value for 'user_id' [ 254.326765][ T40] audit: type=1800 audit(1757464312.497:694): pid=13373 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2253" name="file1" dev="tmpfs" ino=2585 res=0 errno=0 [ 254.548448][T13395] fuse: Bad value for 'user_id' [ 254.550183][T13395] fuse: Bad value for 'user_id' [ 255.554581][T13424] fuse: Bad value for 'fd' [ 256.675508][T13461] fuse: Bad value for 'fd' [ 256.796466][ T40] kauditd_printk_skb: 1 callbacks suppressed [ 256.796476][ T40] audit: type=1400 audit(1757464314.967:696): avc: denied { map } for pid=13456 comm="syz.0.2279" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 256.807043][ T40] audit: type=1400 audit(1757464314.967:697): avc: denied { execute } for pid=13456 comm="syz.0.2279" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 257.027378][T13473] fuse: Bad value for 'fd' [ 257.142920][ T40] audit: type=1400 audit(1757464315.307:698): avc: denied { mounton } for pid=13478 comm="syz.7.2288" path="/81/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 257.147343][T13479] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 257.184921][ T40] audit: type=1400 audit(1757464315.357:699): avc: denied { unmount } for pid=12048 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 257.625202][T13489] fuse: Bad value for 'fd' [ 258.053916][ T6059] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 258.205514][ T6059] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 258.212086][ T6059] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 258.217935][ T6059] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 258.222802][T13511] fuse: Bad value for 'fd' [ 258.226865][ T6059] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 258.239898][ T6059] usb 5-1: config 0 descriptor?? [ 259.074055][ T839] usb 10-1: new full-speed USB device number 12 using dummy_hcd [ 259.188640][T13534] fuse: Invalid rootmode [ 259.225994][ T839] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 259.229188][ T839] usb 10-1: config 0 has 2 interfaces, different from the descriptor's value: 3 [ 259.232001][ T839] usb 10-1: config 0 has no interface number 1 [ 259.234424][ T839] usb 10-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 259.237278][ T839] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.241464][ T839] usb 10-1: config 0 descriptor?? [ 259.245093][ T839] usb 10-1: unknown number of interfaces: 2 [ 259.308026][T13540] fuse: Unknown parameter 'grou0x0000000000000000' [ 259.311363][ T40] audit: type=1800 audit(1757464317.477:700): pid=13540 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2314" name="file1" dev="tmpfs" ino=517 res=0 errno=0 [ 259.444677][ T40] audit: type=1400 audit(1757464317.617:701): avc: denied { connect } for pid=13547 comm="syz.7.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 259.499564][ T40] audit: type=1400 audit(1757464317.667:702): avc: denied { bind } for pid=13547 comm="syz.7.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 259.506552][ T40] audit: type=1400 audit(1757464317.667:703): avc: denied { listen } for pid=13547 comm="syz.7.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 259.512631][ T40] audit: type=1400 audit(1757464317.667:704): avc: denied { accept } for pid=13547 comm="syz.7.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 259.527377][ T839] usb 10-1: USB disconnect, device number 12 [ 259.563298][ T40] audit: type=1400 audit(1757464317.727:705): avc: denied { write } for pid=13547 comm="syz.7.2318" path="socket:[49505]" dev="sockfs" ino=49505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 260.111867][T13559] fuse: Unknown parameter 'grou0x0000000000000000' [ 260.740249][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.810622][T13582] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2330'. [ 260.873397][ T59] usb 5-1: USB disconnect, device number 11 [ 261.439592][T13604] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 261.723914][ T7024] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 261.811568][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 261.811659][ T40] audit: type=1400 audit(1757464319.977:709): avc: denied { name_bind } for pid=13616 comm="syz.6.2344" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 261.946038][ T40] audit: type=1400 audit(1757464320.117:710): avc: denied { read } for pid=13612 comm="syz.7.2343" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.010303][T13622] sctp: [Deprecated]: syz.7.2343 (pid 13622) Use of struct sctp_assoc_value in delayed_ack socket option. [ 262.010303][T13622] Use struct sctp_sack_info instead [ 262.028400][ T7024] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.032491][ T7024] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 262.036140][ T7024] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 262.039719][ T7024] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 262.044968][ T7024] usb 10-1: config 0 descriptor?? [ 262.508741][T13620] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 262.511638][T13620] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 262.546773][T13620] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.549038][T13620] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 262.561183][T13620] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 262.565347][T13620] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.567880][T13620] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 262.574577][T13620] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 262.581591][T13620] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 262.584345][T13620] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 262.587895][T13620] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 262.851576][T13641] overlayfs: failed to clone lowerpath [ 262.858701][T13641] overlayfs: failed to clone upperpath [ 263.585982][T13666] overlayfs: failed to clone lowerpath [ 263.594525][T13666] overlayfs: failed to clone upperpath [ 264.038573][T13686] fuse: Bad value for 'rootmode' [ 264.187534][ T5975] Bluetooth: hci3: command 0x0406 tx timeout [ 264.300186][T13696] fuse: Unknown parameter 'group_i0x0000000000000000' [ 264.308065][ T40] audit: type=1800 audit(1757464322.477:711): pid=13696 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2377" name="file1" dev="tmpfs" ino=2920 res=0 errno=0 [ 264.404104][T13707] fuse: Bad value for 'rootmode' [ 264.544446][T13718] fuse: Unknown parameter 'group_id0x0000000000000000' [ 264.548305][ T40] audit: type=1800 audit(1757464322.717:712): pid=13718 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2387" name="file1" dev="tmpfs" ino=2962 res=0 errno=0 [ 264.574821][ T5975] Bluetooth: hci1: command 0x0406 tx timeout [ 264.574859][ T5979] Bluetooth: hci4: command 0x0405 tx timeout [ 264.664260][ T5979] Bluetooth: hci2: command 0x0405 tx timeout [ 264.669768][T13726] fuse: Unknown parameter 'use00000000000000000000' [ 264.757885][T13730] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 264.759034][ T6103] usb 10-1: USB disconnect, device number 13 [ 265.457656][T13747] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2397'. [ 265.576084][T13749] overlayfs: failed to clone upperpath [ 265.908498][T13754] fuse: Unknown parameter 'use00000000000000000000' [ 265.921695][T13756] sch_tbf: burst 0 is lower than device lo mtu (82) ! [ 266.051408][ T40] audit: type=1400 audit(1757464324.207:713): avc: denied { write } for pid=13757 comm="syz.5.2403" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 266.272275][ T5979] Bluetooth: hci3: command 0x0406 tx timeout [ 266.487073][T13771] overlayfs: failed to clone lowerpath [ 266.525758][T13771] overlayfs: failed to clone upperpath [ 266.656010][ T5979] Bluetooth: hci1: command 0x0406 tx timeout [ 266.656061][ T5975] Bluetooth: hci4: command 0x0405 tx timeout [ 266.734044][ T5975] Bluetooth: hci2: command 0x0405 tx timeout [ 267.504362][T13796] fuse: Unknown parameter 'user_i00000000000000000000' [ 268.733853][ T5975] Bluetooth: hci1: command 0x0406 tx timeout [ 268.744894][ T5975] Bluetooth: hci4: command 0x0405 tx timeout [ 268.799071][T13828] fuse: Unknown parameter 'user_i00000000000000000000' [ 268.824076][ T5975] Bluetooth: hci2: command 0x0405 tx timeout [ 269.233827][ T6103] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 269.409711][ T6103] usb 10-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36 [ 269.413875][ T6103] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.420337][ T6103] usb 10-1: config 0 descriptor?? [ 269.658843][ T6103] kaweth 10-1:0.0: Firmware present in device. [ 269.674275][T13848] tipc: Started in network mode [ 269.676420][T13848] tipc: Node identity b6e95a8dfc63, cluster identity 4711 [ 269.679502][T13848] tipc: Enabled bearer , priority 0 [ 269.711180][T13848] syzkaller0: entered promiscuous mode [ 269.713579][T13848] syzkaller0: entered allmulticast mode [ 269.716721][T13848] tipc: Resetting bearer [ 269.727419][T13847] tipc: Resetting bearer [ 269.839822][ T6103] kaweth 10-1:0.0: Statistics collection: 0 [ 269.842171][ T6103] kaweth 10-1:0.0: Multicast filter limit: 0 [ 269.846091][ T6103] kaweth 10-1:0.0: MTU: 0 [ 269.847836][ T6103] kaweth 10-1:0.0: Read MAC address 00:00:00:00:00:00 [ 270.444492][ T6103] kaweth 10-1:0.0: Error setting receive filter [ 270.455542][ T6103] kaweth 10-1:0.0: probe with driver kaweth failed with error -5 [ 270.460338][ T6103] usb 10-1: USB disconnect, device number 14 [ 270.706685][ T6103] tipc: Node number set to 1250581133 [ 271.006635][T13857] fuse: Unknown parameter 'user_i00000000000000000000' [ 271.189675][T13847] tipc: Disabling bearer [ 271.300160][T13868] qrtr: Invalid version 0 [ 271.495141][T13878] fuse: Bad value for 'fd' [ 271.498769][ T40] audit: type=1800 audit(1757464329.667:714): pid=13878 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2448" name="file1" dev="tmpfs" ino=890 res=0 errno=0 [ 271.827981][T13886] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 271.830330][T13886] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 271.832480][T13886] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 271.834683][T13886] comedi comedi3: 8255: I/O port conflict (0xfff,4) [ 271.836871][T13886] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 271.839161][T13886] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 271.841237][T13886] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 271.843491][T13886] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 271.845637][T13886] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 271.848183][T13886] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 271.850607][T13886] comedi comedi3: 8255: I/O port conflict (0x6,4) [ 271.853011][T13886] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 271.855344][T13886] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 271.857704][T13886] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4) [ 271.860551][T13886] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4) [ 272.289194][T13897] fuse: Bad value for 'group_id' [ 272.289784][T13898] overlayfs: failed to clone lowerpath [ 272.290917][T13897] fuse: Bad value for 'group_id' [ 272.294008][ T6103] usb 12-1: new full-speed USB device number 7 using dummy_hcd [ 272.464737][ T6103] usb 12-1: config 1 interface 0 has no altsetting 0 [ 272.477876][ T6103] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 272.480912][ T6103] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.483610][ T6103] usb 12-1: Product: syz [ 272.485621][ T6103] usb 12-1: Manufacturer: syz [ 272.488282][ T6103] usb 12-1: SerialNumber: syz [ 272.669275][T13906] fuse: Bad value for 'fd' [ 272.672891][ T40] audit: type=1800 audit(1757464330.837:715): pid=13906 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2460" name="file1" dev="tmpfs" ino=3107 res=0 errno=0 [ 272.954940][ T6103] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 272.967121][ T6103] usb 12-1: USB disconnect, device number 7 [ 272.987941][ T6103] usblp0: removed [ 273.836360][T13920] qrtr: Invalid version 0 [ 274.097575][T13930] fuse: Bad value for 'fd' [ 274.099841][ T40] audit: type=1800 audit(1757464332.267:716): pid=13930 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2469" name="file1" dev="tmpfs" ino=653 res=0 errno=0 [ 274.334717][T13941] qrtr: Invalid version 0 [ 274.372892][T13943] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2475'. [ 274.457296][T13951] fuse: Bad value for 'fd' [ 274.460372][ T40] audit: type=1800 audit(1757464332.627:717): pid=13951 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2479" name="file1" dev="tmpfs" ino=2016 res=0 errno=0 [ 274.523924][ T59] usb 12-1: new high-speed USB device number 8 using dummy_hcd [ 274.683903][ T59] usb 12-1: Using ep0 maxpacket: 32 [ 274.715011][ T59] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 274.718196][ T59] usb 12-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 274.721287][ T59] usb 12-1: config 0 interface 0 has no altsetting 0 [ 274.755166][ T59] usb 12-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 274.758966][ T59] usb 12-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 274.762374][ T59] usb 12-1: Product: syz [ 274.764276][ T59] usb 12-1: Manufacturer: syz [ 274.766293][ T59] usb 12-1: SerialNumber: syz [ 274.770466][ T59] usb 12-1: config 0 descriptor?? [ 275.182402][ T59] gs_usb 12-1:0.0: Configuring for 1 interfaces [ 275.384939][ T59] gs_usb 12-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 275.389728][ T59] gs_usb 12-1:0.0: probe with driver gs_usb failed with error -22 [ 275.533133][T13974] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 276.013970][ T59] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 276.601445][ T59] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 276.939071][ T59] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 277.301783][ T59] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 277.304181][ T29] usb 12-1: USB disconnect, device number 8 [ 277.304682][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 277.309481][ T59] usb 5-1: SerialNumber: syz [ 277.338124][T14002] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2499'. [ 277.338786][T14000] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 277.372171][T14004] fuse: Bad value for 'fd' [ 277.526681][ T59] usb 5-1: 0:2 : does not exist [ 277.539228][ T59] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 277.552439][ T59] usb 5-1: 5:0: failed to get current value for ch 1 (-22) [ 277.565090][ T59] usb 5-1: USB disconnect, device number 12 [ 277.593343][ T8464] udevd[8464]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 277.773860][ T7024] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 277.926980][ T7024] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.931381][ T7024] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 277.935373][ T7024] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 277.939288][ T7024] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 277.945369][ T7024] usb 10-1: config 0 descriptor?? [ 278.214406][T14029] fuse: Unknown parameter '0x0000000000000003' [ 279.401849][T14055] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2520'. [ 279.461898][T14057] fuse: Unknown parameter '0x0000000000000003' [ 280.566389][ T6045] usb 10-1: USB disconnect, device number 15 [ 280.629440][T14080] fuse: Unknown parameter '0x0000000000000003' [ 281.132139][T14091] fuse: Unknown parameter 'use00000000000000000000' [ 281.136053][ T40] audit: type=1800 audit(1757464339.307:718): pid=14091 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.2534" name="file1" dev="tmpfs" ino=3213 res=0 errno=0 [ 281.204669][ T59] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 281.472808][T14107] fuse: Unknown parameter '0x0000000000000003' [ 281.476011][ T59] usb 10-1: Using ep0 maxpacket: 32 [ 281.482508][ T59] usb 10-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 281.579070][ T59] usb 10-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 281.582142][ T59] usb 10-1: config 0 interface 0 has no altsetting 0 [ 281.586794][ T59] usb 10-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 281.589643][ T59] usb 10-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 281.592215][ T59] usb 10-1: Product: syz [ 281.593592][ T59] usb 10-1: Manufacturer: syz [ 281.595166][ T59] usb 10-1: SerialNumber: syz [ 281.598293][ T59] usb 10-1: config 0 descriptor?? [ 282.034205][ T59] gs_usb 10-1:0.0: Configuring for 1 interfaces [ 282.080009][T14115] fuse: Unknown parameter 'group_i00000000000000000000' [ 282.178087][ T40] audit: type=1400 audit(1757464340.347:719): avc: denied { write } for pid=14118 comm="syz.0.2544" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 282.241148][ T59] gs_usb 10-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 282.251303][ T59] gs_usb 10-1:0.0: probe with driver gs_usb failed with error -22 [ 282.270978][T14122] fuse: Unknown parameter 'user_i00000000000000000000' [ 282.277189][ T40] audit: type=1800 audit(1757464340.447:720): pid=14122 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2545" name="file1" dev="tmpfs" ino=999 res=0 errno=0 [ 282.471515][T14128] fuse: Unknown parameter '0x0000000000000003' [ 282.515762][ T40] audit: type=1400 audit(1757464340.687:721): avc: denied { read } for pid=14130 comm="syz.0.2549" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 282.529982][ T40] audit: type=1400 audit(1757464340.687:722): avc: denied { open } for pid=14130 comm="syz.0.2549" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 282.820303][ T40] audit: type=1400 audit(1757464340.907:723): avc: denied { ioctl } for pid=14130 comm="syz.0.2549" path="/dev/loop-control" dev="devtmpfs" ino=657 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 282.864753][ T40] audit: type=1400 audit(1757464341.027:724): avc: denied { setopt } for pid=14130 comm="syz.0.2549" lport=59542 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 283.045329][T14140] batman_adv: batadv0: Adding interface: gretap1 [ 283.048083][T14140] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.064516][T14140] batman_adv: batadv0: Interface activated: gretap1 [ 283.429173][T14155] fuse: Unknown parameter 'group_i00000000000000000000' [ 283.459776][T14156] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2551'. [ 283.804711][T14164] netlink: 'syz.0.2555': attribute type 2 has an invalid length. [ 283.807670][T14164] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2555'. [ 283.997551][ T10] usb 10-1: USB disconnect, device number 16 [ 284.085378][T14168] fuse: Unknown parameter '0x0000000000000003' [ 284.137518][T14172] fuse: Unknown parameter 'user_i00000000000000000000' [ 284.141177][ T40] audit: type=1800 audit(1757464342.307:725): pid=14172 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2559" name="file1" dev="tmpfs" ino=2170 res=0 errno=0 [ 284.216246][T14176] SELinux: failed to load policy [ 284.242496][T14178] fuse: Unknown parameter 'group_i00000000000000000000' [ 284.541444][T14189] fuse: Unknown parameter 'user_id00000000000000000000' [ 284.551758][ T40] audit: type=1800 audit(1757464342.717:726): pid=14189 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2568" name="file1" dev="tmpfs" ino=1047 res=0 errno=0 [ 284.569225][ T5979] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 284.573148][ T5979] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 284.573994][ T59] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 284.578919][ T5979] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 284.581695][ T5979] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.584507][ T5979] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.632382][T14195] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 284.740990][ T59] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 284.745860][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 284.750225][ T59] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 284.750780][ T9515] syz_tun (unregistering): left allmulticast mode [ 284.753507][ T59] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 284.760204][ T59] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 284.763263][ T59] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.770728][T14190] chnl_net:caif_netlink_parms(): no params data found [ 284.774553][ T59] usb 10-1: config 0 descriptor?? [ 284.882460][T14190] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.884899][T14190] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.887271][T14190] bridge_slave_0: entered allmulticast mode [ 284.888492][T14213] fuse: Unknown parameter 'user_id00000000000000000000' [ 284.889828][T14190] bridge_slave_0: entered promiscuous mode [ 284.893854][ T40] audit: type=1800 audit(1757464343.057:727): pid=14213 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2576" name="file1" dev="tmpfs" ino=1083 res=0 errno=0 [ 284.895005][T14190] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.903087][T14190] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.906444][T14190] bridge_slave_1: entered allmulticast mode [ 284.909093][T14190] bridge_slave_1: entered promiscuous mode [ 284.943610][T14190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.948812][T14190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 285.003113][T14190] team0: Port device team_slave_0 added [ 285.008665][T14190] team0: Port device team_slave_1 added [ 285.080303][ T7107] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.092907][T14190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 285.097012][T14190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.105336][T14190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 285.110976][T14190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 285.114273][T14190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 285.125057][T14190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 285.172726][T14190] hsr_slave_0: entered promiscuous mode [ 285.175244][T14190] hsr_slave_1: entered promiscuous mode [ 285.177337][T14190] debugfs: 'hsr0' already exists in 'hsr' [ 285.179258][T14190] Cannot create hsr debugfs directory [ 285.195318][ T7107] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.232044][ T59] plantronics 0003:047F:FFFF.000B: ignoring exceeding usage max [ 285.245189][ T59] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 285.285039][ T7107] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.404379][ T7107] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.559783][ T7107] batman_adv: batadv0: Interface deactivated: gretap1 [ 285.711834][ T7107] batman_adv: batadv0: Removing interface: gretap1 [ 286.194347][ T7107] bond0 (unregistering): Released all slaves [ 286.200865][ T7107] bond1 (unregistering): Released all slaves [ 286.274625][T14239] fuse: Unknown parameter 'user_id00000000000000000000' [ 286.287810][ T40] audit: type=1800 audit(1757464344.457:728): pid=14239 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2586" name="file1" dev="tmpfs" ino=1104 res=0 errno=0 [ 286.430886][ T40] audit: type=1326 audit(1757464344.597:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.7.2589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 286.440133][ T40] audit: type=1326 audit(1757464344.597:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.7.2589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 286.449750][ T40] audit: type=1326 audit(1757464344.597:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.7.2589" exe="/syz-executor" sig=0 arch=c000003e syscall=204 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 286.457895][ T40] audit: type=1326 audit(1757464344.597:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14244 comm="syz.7.2589" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 286.545468][ T40] audit: type=1326 audit(1757464344.717:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.0.2592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 286.552807][ T40] audit: type=1326 audit(1757464344.717:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.0.2592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 286.561551][ T40] audit: type=1326 audit(1757464344.717:735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.0.2592" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 286.570757][ T40] audit: type=1326 audit(1757464344.717:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.0.2592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 286.578036][ T40] audit: type=1326 audit(1757464344.717:737): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14251 comm="syz.0.2592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 286.589733][ T7107] hsr_slave_0: left promiscuous mode [ 286.592432][ T7107] hsr_slave_1: left promiscuous mode [ 286.594714][ T7107] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 286.595215][ T10] usb 10-1: reset high-speed USB device number 17 using dummy_hcd [ 286.596915][ T7107] batman_adv: batadv0: Removing interface: virt_wifi0 [ 286.629321][ T7107] veth1_macvtap: left promiscuous mode [ 286.631100][ T7107] veth0_macvtap: left promiscuous mode [ 286.633525][ T7107] veth1_vlan: left promiscuous mode [ 286.636192][ T7107] veth0_vlan: left promiscuous mode [ 286.654118][ T5979] Bluetooth: hci5: command tx timeout [ 286.703854][ T7107] pim6reg (unregistering): left allmulticast mode [ 287.449023][T14256] fuse: Bad value for 'fd' [ 287.507618][T14260] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 287.714904][T14267] vimc link validate: Sensor B:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 1:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 288.214722][T14190] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 288.227384][T14190] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 288.250316][T14190] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 288.267047][T14190] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 288.499109][ T6033] usb 10-1: USB disconnect, device number 17 [ 288.499604][T14190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 288.591325][T14283] netlink: 148 bytes leftover after parsing attributes in process `syz.0.2599'. [ 288.595647][T14283] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2599'. [ 288.599299][T14283] netlink: 'syz.0.2599': attribute type 1 has an invalid length. [ 288.648366][T14190] 8021q: adding VLAN 0 to HW filter on device team0 [ 288.733592][ T7107] IPVS: stop unused estimator thread 0... [ 288.733888][ T5979] Bluetooth: hci5: command 0x041b tx timeout [ 288.771373][ T7103] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.774593][ T7103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 288.807349][ T7118] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.811291][ T7118] bridge0: port 2(bridge_slave_1) entered forwarding state [ 288.853159][T14190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 288.856910][T14190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.047229][T14190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 289.160266][T14298] fuse: Bad value for 'fd' [ 289.201741][T14190] veth0_vlan: entered promiscuous mode [ 289.207012][T14302] qrtr: Invalid version 0 [ 289.210099][T14190] veth1_vlan: entered promiscuous mode [ 289.232559][T14190] veth0_macvtap: entered promiscuous mode [ 289.238831][T14190] veth1_macvtap: entered promiscuous mode [ 289.247358][T14190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 289.254989][T14190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 289.261812][ T7119] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.266366][ T7107] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.270894][ T7107] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.274784][ T7107] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 289.323201][ T7116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.329325][ T7116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.355304][ T7107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.357905][ T7107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.546711][ T6045] usb 12-1: new high-speed USB device number 9 using dummy_hcd [ 289.944379][ T6045] usb 12-1: Using ep0 maxpacket: 32 [ 289.949390][ T6045] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 289.952471][ T6045] usb 12-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 289.955626][ T6045] usb 12-1: config 0 interface 0 has no altsetting 0 [ 289.959702][ T6045] usb 12-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 289.962648][ T6045] usb 12-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 289.965282][ T6045] usb 12-1: Product: syz [ 289.966619][ T6045] usb 12-1: Manufacturer: syz [ 289.968219][ T6045] usb 12-1: SerialNumber: syz [ 289.971663][ T6045] usb 12-1: config 0 descriptor?? [ 290.336859][T14324] fuse: Bad value for 'fd' [ 290.549983][ T6045] gs_usb 12-1:0.0: Configuring for 1 interfaces [ 290.612736][ T6045] gs_usb 12-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 290.620283][ T6045] gs_usb 12-1:0.0: probe with driver gs_usb failed with error -22 [ 290.663505][T14332] overlayfs: failed to resolve './file0': -2 [ 290.823886][ T5979] Bluetooth: hci5: command 0x041b tx timeout [ 292.160206][T14353] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2622'. [ 292.285454][ T6045] usb 12-1: USB disconnect, device number 9 [ 292.367132][T14359] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 292.776352][T14372] tipc: Started in network mode [ 292.778504][T14372] tipc: Node identity , cluster identity 4711 [ 292.781015][T14372] tipc: Failed to obtain node identity [ 292.783289][T14372] tipc: Enabling of bearer rejected, failed to enable media [ 292.893921][ T5975] Bluetooth: hci5: command 0x041b tx timeout [ 293.023904][ T6851] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 293.123874][ T6045] usb 11-1: new high-speed USB device number 9 using dummy_hcd [ 293.173939][ T6851] usb 5-1: Using ep0 maxpacket: 32 [ 293.177714][ T6851] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 293.181733][ T6851] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 293.185815][ T6851] usb 5-1: config 0 interface 0 has no altsetting 0 [ 293.191577][ T6851] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 293.194658][ T6851] usb 5-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 293.197282][ T6851] usb 5-1: Product: syz [ 293.198630][ T6851] usb 5-1: Manufacturer: syz [ 293.200098][ T6851] usb 5-1: SerialNumber: syz [ 293.203662][ T6851] usb 5-1: config 0 descriptor?? [ 293.261676][T14380] fuse: Unknown parameter '0x0000000000000004' [ 293.266700][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 293.266716][ T40] audit: type=1800 audit(1757464351.437:766): pid=14380 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.7.2634" name="file1" dev="tmpfs" ino=861 res=0 errno=0 [ 293.283840][ T6045] usb 11-1: Using ep0 maxpacket: 16 [ 293.294241][ T6045] usb 11-1: config 0 has an invalid interface number: 118 but max is 0 [ 293.297234][ T6045] usb 11-1: config 0 has no interface number 0 [ 293.299586][ T6045] usb 11-1: config 0 interface 118 has no altsetting 0 [ 293.304499][ T6045] usb 11-1: New USB device found, idVendor=9710, idProduct=7810, bcdDevice=14.17 [ 293.307466][ T6045] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 293.310106][ T6045] usb 11-1: Product: syz [ 293.311471][ T6045] usb 11-1: Manufacturer: syz [ 293.313029][ T6045] usb 11-1: SerialNumber: syz [ 293.317230][ T6045] usb 11-1: config 0 descriptor?? [ 293.344755][ T40] audit: type=1400 audit(1757464351.517:767): avc: denied { create } for pid=14385 comm="syz.7.2637" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 293.524578][ T6045] mos7840 11-1:0.118: required endpoints missing [ 293.532396][ T6045] usb 11-1: USB disconnect, device number 9 [ 293.612065][ T6851] gs_usb 5-1:0.0: Configuring for 1 interfaces [ 293.818399][ T6851] gs_usb 5-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 293.823031][ T6851] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22 [ 294.041918][ T839] usb 5-1: USB disconnect, device number 13 [ 294.664038][T14410] fuse: Unknown parameter '0x0000000000000004' [ 294.668152][ T40] audit: type=1800 audit(1757464352.837:768): pid=14410 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2645" name="file1" dev="tmpfs" ino=1219 res=0 errno=0 [ 294.970336][T14423] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 294.984302][ T5975] Bluetooth: hci5: command 0x041b tx timeout [ 295.043817][T14427] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 295.067468][T14429] fuse: Unknown parameter '0x0000000000000004' [ 295.071242][ T40] audit: type=1800 audit(1757464353.237:769): pid=14429 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.2654" name="file1" dev="tmpfs" ino=2273 res=0 errno=0 [ 295.300929][T14446] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 295.707430][T14455] fuse: Unknown parameter '0x0000000000000004' [ 295.711421][ T40] audit: type=1800 audit(1757464353.877:770): pid=14455 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2664" name="file1" dev="tmpfs" ino=1250 res=0 errno=0 [ 295.973865][ T6045] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 296.128443][ T6045] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 296.132751][ T6045] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 296.137062][ T6045] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 296.140671][ T6045] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.146091][ T6045] usb 5-1: config 0 descriptor?? [ 296.169914][T14459] fuse: Bad value for 'fd' [ 297.063962][ T5975] Bluetooth: hci5: command 0x041b tx timeout [ 297.165686][ T40] audit: type=1326 audit(1757464355.337:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.6.2671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 297.174063][ T40] audit: type=1326 audit(1757464355.337:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.6.2671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 297.181873][ T40] audit: type=1326 audit(1757464355.337:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.6.2671" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 297.193090][ T40] audit: type=1326 audit(1757464355.337:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.6.2671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 297.202541][ T40] audit: type=1326 audit(1757464355.337:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14479 comm="syz.6.2671" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 297.233437][T14480] batman_adv: batadv0: Adding interface: dummy0 [ 297.235972][T14480] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.244302][T14480] batman_adv: batadv0: Interface activated: dummy0 [ 297.261381][T14480] batadv0: mtu less than device minimum [ 297.264011][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.267881][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.271612][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.275456][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.279207][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.283037][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.287108][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.290832][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.294657][T14480] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 297.480774][T14491] fuse: Bad value for 'fd' [ 298.617743][T14521] fuse: Bad value for 'fd' [ 298.830905][ T6851] usb 5-1: USB disconnect, device number 14 [ 299.053883][ T29] usb 10-1: new full-speed USB device number 18 using dummy_hcd [ 299.230310][ T29] usb 10-1: config 1 interface 0 has no altsetting 0 [ 299.237669][T14537] (syz.0.2691,14537,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 299.240477][T14537] (syz.0.2691,14537,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 299.248501][ T29] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 299.251437][ T29] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 299.254088][ T29] usb 10-1: Product: syz [ 299.255468][ T29] usb 10-1: Manufacturer: syz [ 299.257009][ T29] usb 10-1: SerialNumber: syz [ 299.880954][ T29] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 301.730717][ T59] usb 10-1: USB disconnect, device number 18 [ 301.732761][T14569] netlink: 'syz.6.2702': attribute type 2 has an invalid length. [ 301.744642][ T59] usblp0: removed [ 301.750853][ T5975] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 301.768533][T14577] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 301.778447][T14579] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2706'. [ 302.073996][ T839] usb 11-1: new high-speed USB device number 10 using dummy_hcd [ 302.224616][ T839] usb 11-1: Using ep0 maxpacket: 32 [ 302.230949][ T839] usb 11-1: unable to get BOS descriptor or descriptor too short [ 302.236019][ T839] usb 11-1: config 1 has an invalid descriptor of length 118, skipping remainder of the config [ 302.239300][ T839] usb 11-1: config 1 interface 0 altsetting 38 bulk endpoint 0x1 has invalid maxpacket 64 [ 302.242111][ T839] usb 11-1: config 1 interface 0 altsetting 38 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 302.246283][ T839] usb 11-1: config 1 interface 0 has no altsetting 0 [ 302.252367][ T839] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 302.259590][ T839] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.261976][ T839] usb 11-1: Product: syz [ 302.263258][ T839] usb 11-1: Manufacturer: syz [ 302.264824][ T839] usb 11-1: SerialNumber: syz [ 302.270434][T14585] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 302.490955][ T839] usb 11-1: USB disconnect, device number 10 [ 303.456773][T14610] 9pnet_virtio: no channels available for device [ 303.463988][ T59] usb 11-1: new full-speed USB device number 11 using dummy_hcd [ 303.672800][ T59] usb 11-1: config 1 interface 0 has no altsetting 0 [ 303.689255][ T59] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 303.693185][ T59] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 303.696949][ T59] usb 11-1: Product: syz [ 303.698704][ T59] usb 11-1: Manufacturer: syz [ 303.700622][ T59] usb 11-1: SerialNumber: syz [ 303.962173][T14618] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2723'. [ 304.015401][T14618] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2723'. [ 304.311361][ T59] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 304.493982][ T6045] usb 10-1: new high-speed USB device number 19 using dummy_hcd [ 304.643896][ T6045] usb 10-1: Using ep0 maxpacket: 8 [ 304.647266][ T6045] usb 10-1: unable to get BOS descriptor or descriptor too short [ 304.650495][ T6045] usb 10-1: config 7 has an invalid interface number: 58 but max is 0 [ 304.653085][ T6045] usb 10-1: config 7 has no interface number 0 [ 304.655368][ T6045] usb 10-1: config 7 interface 58 altsetting 3 endpoint 0xE has an invalid bInterval 111, changing to 7 [ 304.658810][ T6045] usb 10-1: config 7 interface 58 altsetting 3 endpoint 0xE has invalid maxpacket 25702, setting to 1024 [ 304.662240][ T6045] usb 10-1: config 7 interface 58 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 304.666322][ T6045] usb 10-1: config 7 interface 58 has no altsetting 0 [ 304.669917][ T6045] usb 10-1: New USB device found, idVendor=1498, idProduct=a090, bcdDevice=48.0f [ 304.672795][ T6045] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.675407][ T6045] usb 10-1: Product: syz [ 304.676745][ T6045] usb 10-1: Manufacturer: Ь [ 304.678224][ T6045] usb 10-1: SerialNumber: syz [ 305.794745][ T40] kauditd_printk_skb: 30 callbacks suppressed [ 305.797267][ T40] audit: type=1326 audit(1757464363.959:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.815343][ T40] audit: type=1326 audit(1757464363.969:807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.829199][T14641] batman_adv: batadv0: Adding interface: dummy0 [ 305.831737][T14641] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.840466][T14641] batman_adv: batadv0: Interface activated: dummy0 [ 305.860239][ T40] audit: type=1326 audit(1757464363.969:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.868596][ T40] audit: type=1326 audit(1757464363.969:809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.881684][ T40] audit: type=1326 audit(1757464363.969:810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.889932][ T40] audit: type=1326 audit(1757464363.969:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.899676][ T40] audit: type=1326 audit(1757464363.979:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.908389][ T40] audit: type=1326 audit(1757464363.979:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.915980][ T40] audit: type=1326 audit(1757464363.979:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 305.923623][ T40] audit: type=1326 audit(1757464363.979:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14640 comm="syz.0.2731" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 306.172852][ T6038] usb 11-1: USB disconnect, device number 11 [ 306.184318][ T6038] usblp0: removed [ 306.243296][T14649] syz.0.2734 (14649): drop_caches: 2 [ 306.249252][T14649] syz.0.2734 (14649): drop_caches: 2 [ 306.812473][ T6045] usb 10-1: USB disconnect, device number 19 [ 307.069969][T14668] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 307.404109][ T6851] usb 11-1: new full-speed USB device number 12 using dummy_hcd [ 307.567657][ T6851] usb 11-1: config 1 interface 0 has no altsetting 0 [ 307.571274][ T6851] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 307.574203][ T6851] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.576714][ T6851] usb 11-1: Product: syz [ 307.578121][ T6851] usb 11-1: Manufacturer: syz [ 307.579635][ T6851] usb 11-1: SerialNumber: syz [ 308.192000][ T6851] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 12 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 308.481592][T14692] net_ratelimit: 10 callbacks suppressed [ 308.481643][T14692] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 308.558649][T14693] syz.7.2750 (14693): drop_caches: 2 [ 308.573944][T14693] syz.7.2750 (14693): drop_caches: 2 [ 308.663451][T14701] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 309.383576][T14706] fuse: Unknown parameter 'user_i00000000000000000000' [ 309.471175][ T5975] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 310.098285][T14725] sch_tbf: peakrate 9 is lower than or equals to rate 3325826297750451116 ! [ 310.104706][ T6045] usb 11-1: USB disconnect, device number 12 [ 310.129824][ T6045] usblp0: removed [ 310.199436][T14728] fuse: Unknown parameter 'user_i00000000000000000000' [ 310.349262][T14733] syz.6.2766 (14733): drop_caches: 2 [ 310.352868][T14733] syz.6.2766 (14733): drop_caches: 2 [ 310.948458][ T5975] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 311.216450][T14749] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.2773'. [ 311.393952][ T6851] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 311.504032][ T839] usb 10-1: new full-speed USB device number 20 using dummy_hcd [ 311.545165][ T6851] usb 11-1: Using ep0 maxpacket: 32 [ 311.551540][ T6851] usb 11-1: config 0 has an invalid interface number: 133 but max is 0 [ 311.554979][ T6851] usb 11-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 311.560533][ T6851] usb 11-1: config 0 has no interface number 0 [ 311.563330][ T6851] usb 11-1: config 0 interface 133 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 311.567739][ T6851] usb 11-1: config 0 interface 133 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 311.572161][ T6851] usb 11-1: config 0 interface 133 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 311.579060][ T6851] usb 11-1: config 0 interface 133 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 311.586801][ T6851] usb 11-1: config 0 interface 133 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 311.596408][ T6851] usb 11-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=71.1e [ 311.599860][ T6851] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.602728][ T6851] usb 11-1: Product: syz [ 311.604281][ T6851] usb 11-1: Manufacturer: syz [ 311.605819][ T6851] usb 11-1: SerialNumber: syz [ 311.611807][ T6851] usb 11-1: config 0 descriptor?? [ 311.615223][T14750] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 311.618332][T14750] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 311.656604][ T839] usb 10-1: config 1 interface 0 has no altsetting 0 [ 311.662549][ T839] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 311.666973][ T839] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 311.670261][ T839] usb 10-1: Product: syz [ 311.671961][ T839] usb 10-1: Manufacturer: syz [ 311.673989][ T839] usb 10-1: SerialNumber: syz [ 311.856916][ T6851] usb 11-1: probing VID:PID(0424:012C) [ 311.868664][ T6851] usb 11-1: vub300 testing BULK OUT EndPoint(0) 0B [ 311.871945][ T6851] usb 11-1: vub300 testing UNKNOWN EndPoint(1) 8F [ 311.879695][ T6851] usb 11-1: vub300 ignoring EndPoint(1) 8F [ 311.882306][ T6851] usb 11-1: Could not find two sets of bulk-in/out endpoint pairs [ 311.885661][ T6851] vub300 11-1:0.133: probe with driver vub300 failed with error -22 [ 311.895945][ T6851] usb 11-1: USB disconnect, device number 13 [ 312.335102][ T839] usblp 10-1:1.0: usblp0: USB Unidirectional printer dev 20 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 312.675246][T14778] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2783'. [ 312.713541][ T5975] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 314.173891][ T6851] page_pool_release_retry() stalled pool shutdown: id 76, 21 inflight 181 sec [ 314.259520][ T6851] usb 10-1: USB disconnect, device number 20 [ 314.271725][ T6851] usblp0: removed [ 314.303494][T14803] qrtr: Invalid version 0 [ 314.380219][T14807] netlink: 1752 bytes leftover after parsing attributes in process `syz.6.2792'. [ 314.442983][T14818] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 314.494889][ T40] kauditd_printk_skb: 83 callbacks suppressed [ 314.494899][ T40] audit: type=1326 audit(1757464372.669:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.506633][ T40] audit: type=1326 audit(1757464372.669:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.515183][ T40] audit: type=1326 audit(1757464372.679:901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.522406][ T40] audit: type=1326 audit(1757464372.679:902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.531692][ T40] audit: type=1326 audit(1757464372.679:903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.543025][T14824] batman_adv: batadv0: Interface deactivated: dummy0 [ 314.546842][ T40] audit: type=1326 audit(1757464372.689:904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.550174][T14824] batman_adv: batadv0: Removing interface: dummy0 [ 314.556614][ T40] audit: type=1326 audit(1757464372.689:905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.565463][ T40] audit: type=1326 audit(1757464372.699:906): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.574458][ T40] audit: type=1326 audit(1757464372.699:907): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 314.581822][ T40] audit: type=1326 audit(1757464372.699:908): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14822 comm="syz.6.2800" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd6c018eba9 code=0x7ffc0000 [ 315.110426][ T5975] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 315.702865][T14859] fuse: Bad value for 'fd' [ 315.775179][ T5975] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 315.872258][T14875] fuse: Bad value for 'fd' [ 316.441829][T14890] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2825'. [ 316.526787][ T5975] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 316.796799][T14901] I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 316.805500][T14901] FAT-fs (loop11): unable to read boot sector [ 317.871982][ T5975] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 317.968709][T14933] fuse: Unknown parameter '0x0000000000000004' [ 317.970453][T14934] overlayfs: missing 'lowerdir' [ 318.080952][ T5975] Bluetooth: hci3: unexpected event for opcode 0x1003 [ 319.084456][T14962] fuse: Unknown parameter '0x0000000000000004' [ 319.209838][T14970] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2857'. [ 319.214073][T14970] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2857'. [ 319.234614][ T5975] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 319.484005][ T9] usb 12-1: new high-speed USB device number 10 using dummy_hcd [ 319.634259][ T9] usb 12-1: Using ep0 maxpacket: 8 [ 319.639055][ T9] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 319.642617][ T9] usb 12-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 319.645717][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.650974][ T9] usb 12-1: config 0 descriptor?? [ 319.838782][T14987] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2865'. [ 319.861529][ T9] iowarrior 12-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 319.975989][T14994] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2868'. [ 319.979193][T14994] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2868'. [ 320.118850][T15007] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 320.375284][ T6851] usb 12-1: USB disconnect, device number 10 [ 320.401346][T15016] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2876'. [ 320.487359][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'. [ 320.493297][T15016] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2876'. [ 320.899977][T15022] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2878'. [ 320.954027][T15030] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 320.991754][T15033] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 321.055135][T15040] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 321.273921][ T6851] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 321.486015][ T6851] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 321.490171][ T6851] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 321.493163][ T6851] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 321.496852][ T6851] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.503306][ T6851] usb 10-1: config 0 descriptor?? [ 321.797236][ T40] kauditd_printk_skb: 79 callbacks suppressed [ 321.797253][ T40] audit: type=1804 audit(1757464379.969:988): pid=15047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.2889" name="/newroot/297/file1" dev="fuse" ino=1 res=1 errno=0 [ 321.808801][ T40] audit: type=1800 audit(1757464379.969:989): pid=15047 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2889" name="/" dev="fuse" ino=1 res=0 errno=0 [ 321.817560][ T40] audit: type=1800 audit(1757464379.969:990): pid=15046 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.2889" name="/" dev="fuse" ino=1 res=0 errno=0 [ 321.832205][T15049] __nla_validate_parse: 1 callbacks suppressed [ 321.832216][T15049] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2891'. [ 321.862482][T15049] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2891'. [ 322.176546][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.735977][T15072] evm: overlay not supported [ 322.791009][ T40] audit: type=1400 audit(1757464380.959:991): avc: denied { mounton } for pid=15073 comm="syz.7.2899" path="/syzcgroup/net/syz7/cgroup.procs" dev="cgroup" ino=643 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 323.984125][ T9] usb 12-1: new full-speed USB device number 11 using dummy_hcd [ 324.132787][ T6045] usb 10-1: USB disconnect, device number 21 [ 324.150581][ T9] usb 12-1: config 1 interface 0 has no altsetting 0 [ 324.167150][ T9] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 324.171277][ T9] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 324.175148][ T9] usb 12-1: Product: syz [ 324.177047][ T9] usb 12-1: Manufacturer: syz [ 324.179097][ T9] usb 12-1: SerialNumber: syz [ 324.860210][ T9] usblp 12-1:1.0: usblp0: USB Unidirectional printer dev 11 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 324.875605][T15124] overlayfs: missing 'lowerdir' [ 324.918488][T15128] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2923'. [ 324.923499][T15128] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2923'. [ 325.029483][ T40] audit: type=1326 audit(1757464383.199:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.0.2928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 325.039189][ T40] audit: type=1326 audit(1757464383.199:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.0.2928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 325.050018][ T40] audit: type=1326 audit(1757464383.199:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.0.2928" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 325.059286][ T40] audit: type=1326 audit(1757464383.199:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.0.2928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 325.068829][T15138] batadv0: mtu less than device minimum [ 325.068919][ T40] audit: type=1326 audit(1757464383.199:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.0.2928" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 325.072334][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.081032][ T40] audit: type=1326 audit(1757464383.199:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15137 comm="syz.0.2928" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f31b638eba9 code=0x7ffc0000 [ 325.085731][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.099274][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.104732][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.109416][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.114871][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.120247][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.125614][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.130952][T15138] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 325.365995][T15145] syz.5.2929 (15145): drop_caches: 2 [ 325.427029][T15145] syz.5.2929 (15145): drop_caches: 2 [ 325.635683][T15147] fuse: Unknown parameter 'fd0x0000000000000004' [ 326.736733][ T9] usb 12-1: USB disconnect, device number 11 [ 326.742813][ T9] usblp0: removed [ 326.857495][T15180] syz.7.2943 (15180): drop_caches: 2 [ 326.870856][T15180] syz.7.2943 (15180): drop_caches: 2 [ 327.921498][T15197] overlayfs: missing 'lowerdir' [ 328.083840][ T6038] usb 11-1: new full-speed USB device number 14 using dummy_hcd [ 328.245685][ T6038] usb 11-1: config 1 interface 0 has no altsetting 0 [ 328.252630][ T6038] usb 11-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 328.257373][ T6038] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.261222][ T6038] usb 11-1: Product: syz [ 328.263153][ T6038] usb 11-1: Manufacturer: syz [ 328.265478][ T6038] usb 11-1: SerialNumber: syz [ 328.847626][ T6851] usb 12-1: new high-speed USB device number 12 using dummy_hcd [ 328.881250][ T6038] usblp 11-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 328.974939][T15214] syz.5.2955 (15214): drop_caches: 2 [ 328.984305][T15214] syz.5.2955 (15214): drop_caches: 2 [ 328.994005][ T6851] usb 12-1: Using ep0 maxpacket: 32 [ 328.999320][ T6851] usb 12-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 329.003393][ T6851] usb 12-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0 [ 329.008030][ T6851] usb 12-1: config 0 interface 0 has no altsetting 0 [ 329.012819][ T6851] usb 12-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 329.016874][ T6851] usb 12-1: New USB device strings: Mfr=229, Product=1, SerialNumber=3 [ 329.020330][ T6851] usb 12-1: Product: syz [ 329.022208][ T6851] usb 12-1: Manufacturer: syz [ 329.024531][ T6851] usb 12-1: SerialNumber: syz [ 329.027571][ T6851] usb 12-1: config 0 descriptor?? [ 329.434234][ T6851] gs_usb 12-1:0.0: Configuring for 1 interfaces [ 329.637579][ T6851] gs_usb 12-1:0.0: Couldn't register candev for channel 0 (-EINVAL) [ 329.651861][ T6851] gs_usb 12-1:0.0: probe with driver gs_usb failed with error -22 [ 329.823467][T15223] overlayfs: missing 'workdir' [ 329.844810][T15203] overlayfs: failed to resolve './file1/file0': -2 [ 329.848780][ T6851] usb 12-1: USB disconnect, device number 12 [ 330.431146][T15229] batman_adv: batadv0: Adding interface: dummy0 [ 330.435209][ T40] kauditd_printk_skb: 53 callbacks suppressed [ 330.435223][ T40] audit: type=1326 audit(1757464388.589:1051): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.444759][T15229] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 330.446667][ T40] audit: type=1326 audit(1757464388.589:1052): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.456109][T15229] batman_adv: batadv0: Interface activated: dummy0 [ 330.462085][ T40] audit: type=1326 audit(1757464388.589:1053): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.468135][T15229] net_ratelimit: 10 callbacks suppressed [ 330.468144][T15229] batadv0: mtu less than device minimum [ 330.472029][ T40] audit: type=1326 audit(1757464388.589:1054): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.474265][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.476086][ T40] audit: type=1326 audit(1757464388.589:1055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.484190][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.487750][ T40] audit: type=1326 audit(1757464388.589:1056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.497379][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.500228][ T40] audit: type=1326 audit(1757464388.589:1057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.509143][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.511950][ T40] audit: type=1326 audit(1757464388.589:1058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.519519][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.523242][ T40] audit: type=1326 audit(1757464388.589:1059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.530752][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.533727][ T40] audit: type=1326 audit(1757464388.599:1060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15228 comm="syz.7.2960" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fce7778eba9 code=0x7ffc0000 [ 330.541120][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.555283][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.558965][T15229] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 330.749589][ T9] usb 11-1: USB disconnect, device number 14 [ 330.770081][ T9] usblp0: removed [ 330.822257][T15244] overlayfs: missing 'workdir' [ 330.900440][T15251] syz.6.2966 (15251): drop_caches: 2 [ 330.907619][T15251] syz.6.2966 (15251): drop_caches: 2 [ 330.965369][T15254] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 330.975290][T15254] CIFS mount error: No usable UNC path provided in device string! [ 330.975290][T15254] [ 330.980026][T15254] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 331.223830][ T6038] usb 12-1: new high-speed USB device number 13 using dummy_hcd [ 331.376751][ T6038] usb 12-1: Using ep0 maxpacket: 32 [ 331.381972][ T6038] usb 12-1: unable to get BOS descriptor or descriptor too short [ 331.394601][ T6038] usb 12-1: config 244 has an invalid interface number: 68 but max is 0 [ 331.398020][ T6038] usb 12-1: config 244 has no interface number 0 [ 331.400605][ T6038] usb 12-1: config 244 interface 68 has no altsetting 0 [ 331.407016][ T6038] usb 12-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f [ 331.410723][ T6038] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.414320][ T6038] usb 12-1: Product: syz [ 331.416104][ T6038] usb 12-1: Manufacturer: syz [ 331.418065][ T6038] usb 12-1: SerialNumber: syz [ 331.754313][ T59] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 331.937893][ T59] usb 5-1: config 1 interface 0 has no altsetting 0 [ 331.944100][ T59] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 331.947898][ T59] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 331.951112][ T59] usb 5-1: Product: syz [ 331.952892][ T59] usb 5-1: Manufacturer: syz [ 331.955018][ T59] usb 5-1: SerialNumber: syz [ 332.428241][T15271] overlayfs: missing 'workdir' [ 332.611187][ T59] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 15 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 333.033907][ T6033] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 333.195561][ T6033] usb 11-1: config index 0 descriptor too short (expected 23569, got 27) [ 333.198250][ T6033] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.202092][ T6033] usb 11-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 333.205291][ T6033] usb 11-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 333.207805][ T6033] usb 11-1: Manufacturer: syz [ 333.210553][ T6033] usb 11-1: config 0 descriptor?? [ 333.264187][ T6033] rc_core: IR keymap rc-hauppauge not found [ 333.266386][ T6033] Registered IR keymap rc-empty [ 333.268726][ T6033] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0 [ 333.272870][ T6033] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/rc/rc0/input17 [ 333.407062][T15284] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2981'. [ 333.416318][ C0] igorplugusb 11-1:0.0: Error: urb status = -32 [ 333.458794][ T6033] usb 11-1: USB disconnect, device number 15 [ 333.770090][ T6038] comedi comedi5: Wrong number of endpoints [ 333.772177][ T6038] dt9812 12-1:244.68: driver 'dt9812' failed to auto-configure device. [ 333.778224][ T6038] usb 12-1: USB disconnect, device number 13 [ 334.123838][ T6038] usb 12-1: new high-speed USB device number 14 using dummy_hcd [ 334.275953][ T6038] usb 12-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 334.279837][ T6038] usb 12-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 334.283542][ T6038] usb 12-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 334.287179][ T6038] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 334.291571][ T6038] usb 12-1: config 0 descriptor?? [ 334.473335][ T6851] usb 5-1: USB disconnect, device number 15 [ 334.480560][ T6851] usblp0: removed [ 334.568909][ T5975] Bluetooth: hci4: unexpected event for opcode 0x1003 [ 336.240033][T15335] syz.5.2998 (15335): drop_caches: 2 [ 336.247190][T15335] syz.5.2998 (15335): drop_caches: 2 [ 336.404537][ T6045] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 336.556879][ T6045] usb 5-1: config 1 interface 0 has no altsetting 0 [ 336.561152][ T6045] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 336.564125][ T6045] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.566622][ T6045] usb 5-1: Product: syz [ 336.567958][ T6045] usb 5-1: Manufacturer: syz [ 336.569437][ T6045] usb 5-1: SerialNumber: syz [ 336.948076][ T5975] Bluetooth: hci5: unexpected event for opcode 0x1003 [ 337.018546][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 337.018562][ T40] audit: type=1326 audit(1757464395.189:1150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.030970][ T40] audit: type=1326 audit(1757464395.189:1151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.041468][ T40] audit: type=1326 audit(1757464395.189:1152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.051264][ T40] audit: type=1326 audit(1757464395.189:1153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.060966][ T40] audit: type=1326 audit(1757464395.189:1154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.070654][ T40] audit: type=1326 audit(1757464395.189:1155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.080377][ T40] audit: type=1326 audit(1757464395.189:1156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.089967][ T40] audit: type=1326 audit(1757464395.189:1157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.099533][ T40] audit: type=1326 audit(1757464395.189:1158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.109188][ T40] audit: type=1326 audit(1757464395.189:1159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15348 comm="syz.5.3005" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f723c98eba9 code=0x7ffc0000 [ 337.153394][ T6038] usb 12-1: USB disconnect, device number 14 [ 337.189558][ T6045] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 16 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 337.210787][ T5975] Bluetooth: hci2: unexpected event for opcode 0x1003 [ 337.294903][T15365] syz.7.3012 (15365): drop_caches: 2 [ 337.303302][T15365] syz.7.3012 (15365): drop_caches: 2 [ 337.743892][ T6033] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 337.841192][T15373] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 337.896795][ T6033] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 72, setting to 64 [ 337.908096][ T6033] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 337.911145][ T6033] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.916882][ T6033] usb 10-1: Product: syz [ 337.918327][ T6033] usb 10-1: Manufacturer: syz [ 337.920210][ T6033] usb 10-1: SerialNumber: syz [ 337.921163][T15377] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3017'. [ 337.927271][ T6033] usb 10-1: config 0 descriptor?? [ 337.958614][T15377] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3017'. [ 338.349747][ T6038] usb 10-1: USB disconnect, device number 22 [ 338.953632][T15401] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3027'. [ 338.981931][T15401] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3027'. [ 339.138945][T15413] syz.6.3031 (15413): drop_caches: 2 [ 339.148095][T15413] syz.6.3031 (15413): drop_caches: 2 [ 339.189787][ T6038] usb 5-1: USB disconnect, device number 16 [ 339.315299][ T6038] usblp0: removed [ 340.833937][ T6045] usb 12-1: new high-speed USB device number 15 using dummy_hcd [ 340.861859][T15432] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3038'. [ 340.896448][T15432] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3038'. [ 340.997661][ T6045] usb 12-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 72, setting to 64 [ 341.005087][ T6045] usb 12-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 341.008121][ T6045] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.010710][ T6045] usb 12-1: Product: syz [ 341.012106][ T6045] usb 12-1: Manufacturer: syz [ 341.013650][ T6045] usb 12-1: SerialNumber: syz [ 341.018407][ T6045] usb 12-1: config 0 descriptor?? [ 341.106645][T15437] netlink: 148 bytes leftover after parsing attributes in process `syz.6.3037'. [ 341.109525][T15437] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3037'. [ 341.112332][T15437] netlink: 'syz.6.3037': attribute type 1 has an invalid length. [ 341.295849][T15441] syz.5.3041 (15441): drop_caches: 2 [ 341.305571][T15441] syz.5.3041 (15441): drop_caches: 2 [ 341.414124][ T6103] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 341.438085][ T5889] usb 12-1: USB disconnect, device number 15 [ 341.601493][ T6103] usb 5-1: config 1 interface 0 has no altsetting 0 [ 341.617145][ T6103] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 341.621035][ T6103] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 341.627890][ T6103] usb 5-1: Product: syz [ 341.631295][ T6103] usb 5-1: Manufacturer: syz [ 341.633201][ T6103] usb 5-1: SerialNumber: syz [ 342.109458][T15456] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3047'. [ 342.132880][T15456] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3047'. [ 342.279229][ T6103] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 342.433950][ T6033] usb 12-1: new high-speed USB device number 16 using dummy_hcd [ 342.583945][ T6033] usb 12-1: Using ep0 maxpacket: 8 [ 342.588382][ T6033] usb 12-1: config 0 has an invalid descriptor of length 115, skipping remainder of the config [ 342.592673][ T6033] usb 12-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 342.599069][ T6033] usb 12-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 342.602436][ T6033] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.605391][ T6033] usb 12-1: Product: syz [ 342.606934][ T6033] usb 12-1: Manufacturer: syz [ 342.608557][ T6033] usb 12-1: SerialNumber: syz [ 342.612618][ T6033] usb 12-1: config 0 descriptor?? [ 342.617421][ T6033] streamzap 12-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 342.913224][T15469] hub 9-0:1.0: USB hub found [ 342.920988][T15469] hub 9-0:1.0: 1 port detected [ 343.018470][ T5975] Bluetooth: hci5: unexpected event for opcode 0x0804 [ 343.051483][T15479] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3056'. [ 343.081491][T15479] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3056'. [ 344.125738][ T6103] usb 5-1: USB disconnect, device number 17 [ 344.129909][ T6103] usblp0: removed [ 344.281790][T15505] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3065'. [ 344.285637][T15505] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3065'. [ 344.336336][T15509] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3067'. [ 344.447897][ T6033] usb 12-1: USB disconnect, device number 16 [ 344.564415][ T59] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 344.663892][ T29] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 344.723811][ T59] usb 11-1: Using ep0 maxpacket: 8 [ 344.726646][ T59] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 344.730161][ T59] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 344.733310][ T59] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.738748][ T59] usb 11-1: config 0 descriptor?? [ 344.825489][ T29] usb 5-1: config 1 interface 0 has no altsetting 0 [ 344.830058][ T29] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 344.833590][ T29] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.837112][ T29] usb 5-1: Product: syz [ 344.838966][ T29] usb 5-1: Manufacturer: syz [ 344.840848][ T29] usb 5-1: SerialNumber: syz [ 344.944448][ T59] iowarrior 11-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 345.353962][ T5889] usb 12-1: new full-speed USB device number 17 using dummy_hcd [ 345.450442][ T6851] usb 11-1: USB disconnect, device number 16 [ 345.462484][ T29] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 18 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 345.516994][ T5889] usb 12-1: config 1 interface 0 has no altsetting 0 [ 345.522025][ T5889] usb 12-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 345.525907][ T5889] usb 12-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.529230][ T5889] usb 12-1: Product: syz [ 345.530589][ T5889] usb 12-1: Manufacturer: syz [ 345.532079][ T5889] usb 12-1: SerialNumber: syz [ 346.076323][T15534] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3076'. [ 346.079988][T15534] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3076'. [ 346.135604][T15537] netlink: 1688 bytes leftover after parsing attributes in process `syz.6.3077'. [ 346.140091][ T5889] usblp 12-1:1.0: usblp1: USB Unidirectional printer dev 17 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 347.072623][ T5975] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 347.074058][ T59] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 347.077839][ T5975] Bluetooth: hci5: Injecting HCI hardware error event [ 347.083866][ T5975] Bluetooth: hci5: hardware error 0x00 [ 347.111362][T14773] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 347.115168][T14773] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 347.118955][T14773] CPU: 0 UID: 0 PID: 14773 Comm: kbnepd bnep0 Not tainted syzkaller #0 PREEMPT(full) [ 347.123114][T14773] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 347.126791][T14773] RIP: 0010:klist_put+0x4d/0x1b0 [ 347.128372][T14773] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 3f 0d [ 347.135002][T14773] RSP: 0018:ffffc900038979b0 EFLAGS: 00010202 [ 347.137317][T14773] RAX: dffffc0000000000 RBX: ffff888055f26460 RCX: ffffffff82610a3d [ 347.140580][T14773] RDX: 000000000000000b RSI: ffffffff8b89c035 RDI: 0000000000000058 [ 347.143739][T14773] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 347.146929][T14773] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 347.150114][T14773] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 347.153308][T14773] FS: 0000000000000000(0000) GS:ffff8880d66b5000(0000) knlGS:0000000000000000 [ 347.156873][T14773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.159596][T14773] CR2: 00007fd6c03d7dac CR3: 0000000034753000 CR4: 0000000000352ef0 [ 347.162828][T14773] Call Trace: [ 347.164253][T14773] [ 347.165495][T14773] device_del+0x1d8/0x9f0 [ 347.167150][T14773] ? __pfx_device_del+0x10/0x10 [ 347.169119][T14773] ? netdev_unregister_kobject+0x2da/0x540 [ 347.171690][T14773] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 347.174433][T14773] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 347.177210][T14773] ? __pfx___mutex_lock+0x10/0x10 [ 347.179326][T14773] unregister_netdevice_queue+0x305/0x3f0 [ 347.181672][T14773] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 347.184279][T14773] ? rtnl_net_dev_lock+0x28/0x360 [ 347.186362][T14773] ? rtnl_net_dev_lock+0x146/0x360 [ 347.188516][T14773] ? rtnl_lock+0x9/0x20 [ 347.190269][T14773] ? rtnl_net_dev_lock+0x146/0x360 [ 347.192417][T14773] unregister_netdev+0x1f/0x60 [ 347.194439][T14773] bnep_session+0x224e/0x2d80 [ 347.196324][T14773] ? __pfx_bnep_session+0x10/0x10 [ 347.198375][T14773] ? do_raw_spin_lock+0x12c/0x2b0 [ 347.200452][T14773] ? __pfx_woken_wake_function+0x10/0x10 [ 347.202780][T14773] ? rcu_is_watching+0x12/0xc0 [ 347.204776][T14773] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 347.207160][T14773] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.209285][T14773] ? __kthread_parkme+0x19e/0x250 [ 347.211341][T14773] ? __pfx_bnep_session+0x10/0x10 [ 347.213424][T14773] kthread+0x3c2/0x780 [ 347.215101][T14773] ? __pfx_kthread+0x10/0x10 [ 347.216975][T14773] ? rcu_is_watching+0x12/0xc0 [ 347.218945][T14773] ? __pfx_kthread+0x10/0x10 [ 347.220754][T14773] ret_from_fork+0x5d4/0x6f0 [ 347.222680][T14773] ? __pfx_kthread+0x10/0x10 [ 347.224568][T14773] ret_from_fork_asm+0x1a/0x30 [ 347.226527][T14773] [ 347.227777][T14773] Modules linked in: [ 347.230376][T14773] ---[ end trace 0000000000000000 ]--- [ 347.234610][ T40] kauditd_printk_skb: 56 callbacks suppressed [ 347.234618][ T40] audit: type=1400 audit(1757464405.399:1216): avc: denied { read } for pid=5358 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 347.234779][T14773] RIP: 0010:klist_put+0x4d/0x1b0 [ 347.237222][ T40] audit: type=1400 audit(1757464405.399:1217): avc: denied { search } for pid=5358 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.245371][T14773] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 1c 3f 0d [ 347.247410][ T40] audit: type=1400 audit(1757464405.399:1218): avc: denied { search } for pid=5358 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.255403][T14773] RSP: 0018:ffffc900038979b0 EFLAGS: 00010202 [ 347.261440][ T40] audit: type=1400 audit(1757464405.399:1219): avc: denied { add_name } for pid=5358 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.270533][T14773] [ 347.272298][ T40] audit: type=1400 audit(1757464405.399:1220): avc: denied { create } for pid=5358 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.280755][T14773] RAX: dffffc0000000000 RBX: ffff888055f26460 RCX: ffffffff82610a3d [ 347.281528][ T40] audit: type=1400 audit(1757464405.399:1221): avc: denied { append open } for pid=5358 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.289578][T14773] RDX: 000000000000000b RSI: ffffffff8b89c035 RDI: 0000000000000058 [ 347.292076][ T40] audit: type=1400 audit(1757464405.399:1222): avc: denied { getattr } for pid=5358 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 347.300494][T14773] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 347.315321][T14773] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 347.318536][T14773] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 347.321725][T14773] FS: 0000000000000000(0000) GS:ffff8880d66b5000(0000) knlGS:0000000000000000 [ 347.325728][T14773] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 347.328822][T14773] CR2: 00007fd6c03d7dac CR3: 000000000e380000 CR4: 0000000000352ef0 [ 347.332064][T14773] Kernel panic - not syncing: Fatal exception [ 347.335458][T14773] Kernel Offset: disabled [ 347.337235][T14773] Rebooting in 86400 seconds.. VM DIAGNOSIS: 00:33:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646ef5 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc900038973b0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=000000004153414b R12=0000000000000000 R13=0000000000000030 R14=ffffffff9b115060 R15=ffffffff85646e90 RIP=ffffffff85646f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6c03d7dac CR3=0000000034753000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4bf710d0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4bf71256 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc4bf71256 00007ffc4bf7125c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f723ca12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f723ca12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f723ca12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f723ca12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f723ca12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f723ca12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=ffffc900069c0000 RBX=ffff8880298e0000 RCX=ffffffff86b3b202 RDX=00000000ffffffff RSI=ffffffff86b3b20f RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900006a0eb0 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffffc900006a0ff8 R12=0000000000000000 R13=ffff8880298e16b8 R14=ffff8880298e12d0 R15=0000000000000000 RIP=ffffffff86b3b23c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f1e4ea6a300 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33b22ff8 CR3=00000000331f3000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c08000000060000 0008000400080010 00080000000c0200 0000000000080008 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0014010000000000 000800080007000c 00080000000c0000 133c000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c08000000200000 0006000000100008 0000000000000004 000c001a00100000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ba6effffffff8b93 f144000002460300 000000000008ffff ed7a000003e60000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000400000008 0008000000140000 125c000012700000 1284000012980000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 12b8000000060000 0000000000000000 008c0000000001c9 c380000000140000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 001c0000000e0014 000c000000080004 001c000e00000000 0000000000000000 ZMM24=e03fb640e03fb640 e03fb640e03fb640 e03fb640e03fb640 e03fb640e03fb640 e03fb640e03fb640 e03fb640e03fb640 e03fb640e03fb640 e03fb640e03fb640 ZMM25=b159a79db159a79d b159a79db159a79d b159a79db159a79d b159a79db159a79d b159a79db159a79d b159a79db159a79d b159a79db159a79d b159a79db159a79d ZMM26=cd40b89fcd40b89f cd40b89fcd40b89f cd40b89fcd40b89f cd40b89fcd40b89f cd40b89fcd40b89f cd40b89fcd40b89f cd40b89fcd40b89f cd40b89fcd40b89f ZMM27=2d02644f2d02644f 2d02644f2d02644f 2d02644f2d02644f 2d02644f2d02644f 2d02644f2d02644f 2d02644f2d02644f 2d02644f2d02644f 2d02644f2d02644f ZMM28=000000500000004f 0000004e0000004d 0000004c0000004b 0000004a00000049 0000004800000047 0000004600000045 0000004400000043 0000004200000041 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=9b1100009b110000 9b1100009b110000 9b1100009b110000 9b1100009b110000 9b1100009b110000 9b1100009b110000 9b1100009b110000 9b1100009b110000 info registers vcpu 2 CPU#2 RAX=0000000000000000 RBX=ffff88806a63b540 RCX=ffffffff81afa673 RDX=ffff88801de84880 RSI=0000000000000000 RDI=0000000000000005 RBP=ffffc90000157d08 RSP=ffffc90000157bb8 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=fffffbfff1cb981e R12=1ffff9200002af80 R13=0000000000000003 R14=0000000000000001 R15=ffffed100d4c76a9 RIP=ffffffff81bb8892 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fd6c0f056c0 CR3=000000003322d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69cd74c6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff69cd74c6 00007fff69cd74cc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b6412e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b6412e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b6412e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b6412e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b6412ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b6412fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b65a74a8 00007f31b65a74a0 00007f31b65a7498 00007f31b65a7470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b710d100 00007f31b65a7460 00007f31b65a0004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f31b65a74b8 00007f31b65a74b0 00007f31b65a74a8 00007f31b65a74a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080000002 RBX=ffffea0001701f80 RCX=ffffffff820612e8 RDX=ffff888028fcc880 RSI=ffffffff82061300 RDI=0000000000000007 RBP=0000000000000001 RSP=ffffc90005f8f650 R8 =0000000000000007 R9 =0000000000000000 R10=0000000000000000 R11=0000000000000001 R12=ffffea0001701f80 R13=0000000000000000 R14=0000000000000000 R15=ffffea0001701f80 RIP=ffffffff81bb8ee7 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000555558b83500 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b2db21ff8 CR3=000000003a3af000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fefeffd0 Opmask01=000000000ffe0000 Opmask02=000000000fffffff Opmask03=0000000000400004 Opmask04=00000000ffffffff Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 44455a494c414954 494e495f43455355 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557d5433dbc0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000557d5434c0d0 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f9dc03f1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 676e6168633d4e4f 495443410036706f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ff00000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373260e27401483 7373260b70a9da59 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c8c20c91a711c90d 7373737624a63032 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 302d78742f736575 6575712f3070656e 622f74656e2f6c61 75747269762f7365 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000036706f6f 6c2f6b636f6c622f 6c6175747269762f 736563697665642f ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1006141017007569 3739793621752820 3f7e7523651b0e43 51655362392f2431 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30323a3569636800 39393636323d4d55 4e51455300736575 6575713d4d455453 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 717468703d2d2100 7d70716077794d68 0a18020545376531 2c20277809456917 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 737f7f7b7f3f7f7f 7f7d7f7f7f7f7d7d 3f7f7f3f757f7f7b 7d677f7a3d6f6f77 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30652d4245453165 3141323070424132 317633303030623a 7475706e693d5341 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5953422f5300302d 76652f2f3d485441 502f30440065622f 6d656e2f4e4f4954 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3032002f53003000 39392f2f323d4d41 4e2f30440030622f 65622f2f4d452f30 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000