last executing test programs: 49.4597241s ago: executing program 1 (id=94): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000180), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000001"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000ac0), 0x1, 0x0) ioctl$I2C_SMBUS(r1, 0x705, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0}) 49.459325846s ago: executing program 1 (id=95): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) (async) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000000c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0, 0x55, &(0x7f00000002c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x42, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'ip6_vti0\x00', &(0x7f0000000500)={'ip6gre0\x00', 0x0, 0x29, 0x9, 0xe, 0x3ff, 0x28, @local, @rand_addr=' \x01\x00', 0x700, 0x10, 0x33, 0x3db}}) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000006c0)={'batadv_slave_1\x00', 0x0}) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000780)={'ip_vti0\x00', &(0x7f0000000700)={'ip_vti0\x00', 0x0, 0x20, 0x8, 0x8, 0x12a, {{0x15, 0x4, 0x0, 0x22, 0x54, 0x65, 0x0, 0x6, 0x29, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @ssrr={0x89, 0x7, 0xa3, [@rand_addr=0x64010100]}, @timestamp_prespec={0x44, 0x34, 0xe0, 0x3, 0x6, [{@remote, 0x3}, {@private=0xa010101, 0x8}, {@multicast1, 0x1}, {@broadcast, 0x8000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x101}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @end, @end]}}}}}) (async) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f00000007c0), &(0x7f0000000800)=0x4) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000840)={0x0, @empty, @empty}, &(0x7f0000000880)=0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000008c0)={'batadv0\x00', 0x0}) r11 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800c0001006d6163766c616e001800028008000100080000000a000900aaaaaaaaaa23000008000500", @ANYRES32=r12, @ANYBLOB='\b', @ANYRES32=0x0], 0x58}}, 0x2004) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000940)={'syztnl1\x00', &(0x7f0000000900)={'sit0\x00', 0x0, 0x20, 0x7, 0x100, 0xf7c, {{0x6, 0x4, 0x3, 0x14, 0x18, 0x68, 0x0, 0xa1, 0x4, 0x0, @multicast1, @rand_addr=0x64010102, {[@noop]}}}}}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000e00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e80)={0x40c, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x300, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x2}, @ETHTOOL_A_BITSET_MASK={0x61, 0x5, "9b037d1b6dbc00b1d42b6de64701da42637a1bcb062c2c3e036e773315e78f9720b6c286b41682b737d395d4c05e4e446a3c613d334af4f246825ead10cc5c18d6bc9e5ccfd97bc0759bf35842248a055dc6947d8d4f21465acf457278"}, @ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "29b5df71b48d2a8336598979814ebe226a22bd23a1c0464f2ab454b26d248093e506dd11bfccfa85700373253f9d16f3050af15d38453d203a2a5992e565e96a02ceff1326dded233e06164e25724a8ec249d32e7f8303c89980e4e6519b37bc6566571fa66711f5c06eab957cf534888c6d8d5f66046b4df2a049b2a6871dc2d8e3df782ff144ddd785cff0b31b6615e904"}, @ETHTOOL_A_BITSET_BITS={0xbc, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'port1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x500}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!!\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'port1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '{@\x00'}]}, {0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'port1\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x62159750}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_MASK={0xe6, 0x5, "879f56014ac8d6d43e2f99c11b189519d0a3f4782a1abf23a6dfa0885519ac5e86b63fc3b5a4d2c42697e68475f99ffdfd79c2230fc8466d4fc40cdf40d40e699c6c466dd4a7fcade901799660591a9d0e0ff53ca177ef2cea785fdbf4adf1d093cd7d0b961525a5bf94b94eb38bff5a9b1268e3119771aca5c4627efc9300f8a1c4fc3b603e8f9559d69cb80dd947b0fbccff4481f1e71abe93177ba01190fb6e68697cd8a1599e203932c570671db63f8888783f9c662e6e9342da9b12db57d4e6d825c173ab6992c7c5c95c1851b552c2a663aa029bc737aafa4fa16f98ee239d"}, @ETHTOOL_A_BITSET_MASK={0x52, 0x5, "c971f7854ff066653504069375b9c8a33d235654ff95650a2ce198768da657428a91dec1a102ad5d218eb6a527bc1265978702c8409e1c5eb25088dbcac5517c880d36bf2ebd2aa21ff561d53faa"}]}, @ETHTOOL_A_DEBUG_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @ETHTOOL_A_DEBUG_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}]}, 0x40c}, 0x1, 0x0, 0x0, 0x40}, 0x40000000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80, 0x2}, 'port1\x00', 0xe3, 0x1b1c07}) (async) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r1, r1, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f0000000200)={{0x7, 0x35}, 'port1\x00', 0x2d, 0xc, 0x1, 0x2, 0xb, 0x1, 0x3, 0x0, 0x0, 0x1}) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0), 0x240bf, 0x0) (async) r15 = fanotify_init(0x200, 0x0) fanotify_mark(r15, 0x201, 0x4800003e, r0, 0x0) 49.35843034s ago: executing program 1 (id=96): pipe2(&(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r3 = syz_open_dev$evdev(&(0x7f00000004c0), 0x3, 0x248000) close(r3) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async, rerun: 64) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x4) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x2f, 0x2, 0x9, 0x10000, 0x2, @mcast2, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7822, 0x80, 0x80000000}}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r8, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r8, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x24, r9, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)={0xc0, r5, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x40000}, 0x40) (async) r11 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000a40)=ANY=[@ANYRES32=r4, @ANYRES32=r11, @ANYBLOB="05"], 0x10) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r4}, &(0x7f0000000440), &(0x7f0000000500)=r2}, 0x20) (async) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) (async) sendmsg$NFT_BATCH(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a38000000080abf1b0000000000000000020000000900020073797a32000000000900010073797a30000000000c0003"], 0x60}}, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) 49.358136711s ago: executing program 1 (id=97): r0 = socket$inet(0xa, 0x1, 0x0) fcntl$setlease(r0, 0x400, 0x3) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 49.357957959s ago: executing program 1 (id=98): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x800) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='autofs\x00', 0x0, &(0x7f0000000100)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) syz_open_dev$loop(&(0x7f00000001c0), 0x40000000001, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000004830000000000000fa40000007010000080020007500feff0000820095"], &(0x7f0000000100)='GPL\x00', 0x8, 0xef, &(0x7f0000000000)=""/239, 0x40f00, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000940)={{}, 'syz0\x00'}) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$UI_DEV_CREATE(r1, 0x5501) read(r1, &(0x7f0000000280)=""/44, 0x2c) shmget(0x2, 0x4000, 0x1000, &(0x7f0000323000/0x4000)=nil) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r4 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r4}, './file0\x00'}) openat(r0, &(0x7f00000000c0)='./file0\x00', 0x20101, 0x20) ioctl$AUTOFS_IOC_ASKUMOUNT(r0, 0xc0089364, &(0x7f00000001c0)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 48.450140081s ago: executing program 1 (id=99): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x4) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010100, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000080)={0x3ff, &(0x7f0000000440)="536893b433870648b3c584f302c3493d3127d2a2d817acc4a0445b0b53e630352b76acb2984da9a13cdebae7bab0deff726cd951ff38879a260a326678c8562f727443dc92396c89167171bec09abe03668a10db2c42ebb452f12cdc024036ddc71d633702178b6f5342c1200912c778b44e6a84ab7099bc44cefbafe2b421bd5a2fed5e71c0b468f0374ea5b90d7ff9ba34a24413fca7e88ee432ab52cda998a2c4a64765be94858d1aea77a3904d4726a1d931a1ed92e2608e9f718521226d43312dc7f5e6e5b953e3b13451d3313110"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080), 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x7}, 0x28) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x6, @vbi={0x9, 0x3, 0x1, 0x38414762, [0xfffffffd, 0x8], [0x4], 0x1}}) 39.396678307s ago: executing program 3 (id=159): setitimer(0x2, &(0x7f0000000580)={{0x77359400}, {0x0, 0xea60}}, 0x0) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x7fff, 0xffffffff}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003d000b08d25a80648c7494f90224fc600b0002400c000400040082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 39.340229057s ago: executing program 3 (id=160): r0 = accept4$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@netrom, @bcast, @null, @rose, @netrom, @netrom, @bcast, @default]}, &(0x7f0000000080)=0x48, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_CAP_MEMORY_FAULT_INFO(r2, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_GET_SREGS(r3, 0x8138ae83, &(0x7f0000000180)) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f00000002c0)={0xa4, 0x0, 0x1}) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r2, 0x4068aea3, &(0x7f0000000340)) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f00000003c0)={"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"}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f00000007c0)={0xd000, 0xc000}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000800)={0x1, 0x0, [{0xc0000001, 0xd, 0x6, 0xdee, 0x4}]}) r5 = syz_open_dev$vcsu(&(0x7f0000000880), 0xb0, 0x1158c0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), r5) ioctl$SNDCTL_SYNTH_MEMAVL(r5, 0xc004510e, &(0x7f00000008c0)=0x81) ioctl$SNDCTL_DSP_GETISPACE(r5, 0x8010500d, &(0x7f0000000900)) ioctl$TUNSETCARRIER(r5, 0x400454e2, &(0x7f0000000940)) r6 = openat$hpet(0xffffffffffffff9c, &(0x7f0000000980), 0x18000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f00000009c0)="66ba2100ec64f3430f21280f01b76de600000f32470f3566660f2246660f632266ba420066ed0f0766baf80cb87ef91387ef66bafc0c66b8bb9d66ef", 0x3c}], 0x1, 0x9, &(0x7f0000000a40)=[@flags={0x3, 0xa0240}, @cstype0={0x4, 0xc}], 0x2) sendmsg$NFNL_MSG_COMPAT_GET(r6, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x70, 0x0, 0xb, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_REV={0x8}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x11, 0x1, ']:\\!!)@\\.\'\x93,\x00'}, @NFTA_COMPAT_NAME={0xe, 0x1, '/dev/hpet\x00'}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040}, 0x24004001) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000bc0)={0x0, 0x0}, &(0x7f0000000c00)=0xc) ioctl$SG_BLKTRACESETUP(r6, 0xc0481273, &(0x7f0000000c40)={'\x00', 0xff, 0x0, 0x7ff, 0x7, 0xb, r7}) sendmsg$nl_route_sched(r6, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)=@delqdisc={0x68, 0x25, 0x20, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x1, 0x9}, {0x7, 0xfff1}, {0x0, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0xb, 0x7f}}, @TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x5, 0x5}}, @TCA_STAB={0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}, @qdisc_kind_options=@q_plug={{0x9}, {0xc, 0x2, {0x1, 0x8}}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000094}, 0x8000) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000e00)=@md0, r8, &(0x7f0000000e40)='./file0\x00') r9 = syz_open_dev$ptys(0xc, 0x3, 0x0) ioctl$KDGKBLED(r9, 0x4b64, &(0x7f0000000e80)) write$vhost_msg(r5, &(0x7f0000000fc0)={0x1, {&(0x7f0000000ec0)=""/114, 0x72, &(0x7f0000000f40)=""/107, 0x1, 0x1}}, 0x48) socket$netlink(0x10, 0x3, 0xc) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000001040)) readv(0xffffffffffffffff, &(0x7f0000001280)=[{&(0x7f0000001080)=""/147, 0x93}, {&(0x7f0000001140)=""/111, 0x6f}, {&(0x7f00000011c0)=""/121, 0x79}, {&(0x7f0000001240)=""/25, 0x19}], 0x4) 39.339866694s ago: executing program 3 (id=161): bind$rxrpc(0xffffffffffffffff, 0x0, 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYRES16=r0], 0xc0}, 0x1, 0x0, 0x0, 0x20044004}, 0x40) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000064c0)=ANY=[@ANYBLOB="140000001000010000000000400000000000000a2c0000000e0a010a0000000000000000070000000900020073797a31000000000900010073797a300000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x130, 0x5, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x40, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_USERDATA={0xd3, 0xc, "5417d5b6d2191b5135adad056ddf26e23c0a09027e3a73b3ddbf8053ee072d78ecc2d0e69346f7e350a08d597f136db2fc083e8eed0353a78e9763f2cfcb445a1b932abd2b87f09f98eeef3bb28934bc09878aaf8f470fb200941abbad8e16d1e9fa3f23779166cee5c8901d8fdcafa56489b6fa2f2423f1387b710e22a3049df85f0bf93b0d9cd3ba79d53379e8c40da66c8597ef3b229cde52bcf1dcc1e49b23c916999c2b537359bdd4969abbcc1ef9176e7c689a001448e6475badad060a23396a9edea6050edbac025608eeb8"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x90, 0xb, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xb}, @NFTA_SET_EXPR={0x64, 0x11, 0x0, 0x1, @flow_offload={{0x11}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOW_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}}}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_POLICY={0x8}]}, @NFT_MSG_DELTABLE={0x228, 0x2, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x7}, [@NFTA_TABLE_USERDATA={0x40, 0x6, "651858ab940d2d7cbae5d38b3221ea258e8937b95e4bd1349c98d75af2509208a4d925913dd00f74823c86950cd69d0dcaf0cc662146d4ae4127d982"}, @NFTA_TABLE_USERDATA={0xe3, 0x6, "294c0b0fe76176eddc86bade6de26c53dfce37d41ad26b3cfdf729e32f545878646fcd0ce691cac7e7f85a6484f613fa6f1f002a0e38d48ce851394e3fe9acb00c00679011559aacc9ee4ec4c06995a7ef6733d65d7b2938ab7b2a6ce3a49ceca95a71fee46b8f3ddceb8499d1fc7893f11636f68850085fb764bc2cee324fca131be90d0f2ee33eaa54b81f254cf0f71b6d9ba6590b9367ede32c00d182b96a59a179ad20440980ee93da6be0f2c4f517dd481f80f7780688c7ace5d7f3c7f679babdb58dc0006812b1c08bc0e2e453cb5f71ccadd0a8ec00041ee3ba0c22"}, @NFTA_TABLE_USERDATA={0xe4, 0x6, "1bac450cef58d19792dc7839cb6873665108caf02769c8cbf578bc05ba35c4eaf4b00d3fb9c5012f0c0382dc4ca02aa30f0504ae6fb41e905afebaadb30064386247eba35cb3992a837d9b56a7487ef4b36ecc85f0ba6f7e31219642d979ff41b1bd51f5f8a5d3d6d8e7d3a8dfba4c03315b90641118db5a05c1fa63c1f0abf416e405c97441da600c36edbea3584640183c44e60fbd0370db1e98fff1e3f9df58f71726de0a42d0fd771a86763f41de69c8813586d322de3c14729b2027dc000088290212ac6f8671dbb1fc8f84463080a707c84463f198464209fa2c0326c0"}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x450}, 0x1, 0x0, 0x0, 0x24000001}, 0x40890) 39.279811066s ago: executing program 3 (id=162): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000080)={0x9, "92a9a539c09eb4cdb4d3ccc5ccde327320a31da64f19f85b56fc00", 0x2, 0x1}) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x26}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) (async) prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000010000000000000000"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000080000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001d00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) (async) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00', r5}, 0x10) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000001c0)=@ipv4_delrule={0x24, 0x21, 0xb12becd5a2b54ddf, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x4}]}, 0x24}}, 0x0) (async) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000580)={&(0x7f0000000340)="52d29b201e4b404f722015bb28a87fe296f2d98a5b88c434ef274574d3ab968df11ef83f22f9b50f56716ae3e2e01cc70173123422b95f08d95cf3ba8a86be12c585ae327248ac9327e6068a0574fb7cda81e08fc24c5a84baaf7f8609db1d8cc6c8cde620fbd1d5e7647ec66715b2b108015b1738fbe83a1b0b1c900d7bd9f47d29cdeafd03b7012c03c15df6624e5529295ffdaddc4094398f35bf0bec4ae14209cc60c46a68cae2636b17b5aeb6e79d46dc255cb4070db649f8127ac5e9a75caf4aa65881ebde599c683ede8b42", &(0x7f0000000440)=""/201, &(0x7f0000000540)="b6142d131e14eaff1c5023bae6cb7cf45eefb8faf1980b9d3441b0cebc8f482fd7ac", &(0x7f0000000640)="e6b237dc19f0862a483006b5798e168353687ea9f1e54d853918ed7cdaec205d512679de560565e3f3e2ea4126edbef6e0b3e81c2432c502eff251d344879145d9c8468a3f3c4d", 0xf3c7, r1, 0x4}, 0x38) (async) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)={0x0, 0x0}) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r3, r4, 0x15, 0x0, @val=@uprobe_multi={&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=[0x5, 0x6832c99d, 0x5], 0x0, 0x7, 0x3, 0x1, r7}}, 0x40) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000300)={0xa, 0x3, 0x2, 0x7fff, 0x7, "446a1ef6390c825a74032b236b4b7c11dd813e"}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5a6e41dea43e63a3f70cff11c72b", 0x0, 0x2e00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.278825808s ago: executing program 3 (id=163): mount$9p_rdma(0x0, 0x0, 0x0, 0x200000, &(0x7f0000000080)=ANY=[@ANYBLOB="7472616e733d72646d612c706f4f743d30783030303030303030303030303465bf32322c00c56e38bc9ac1c99965d413f3"]) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000005700)=[@text32={0x20, 0x0}], 0x1, 0xc, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = shmget$private(0x0, 0x1000, 0x4, &(0x7f0000ffb000/0x1000)=nil) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r5, 0x0) shmctl$SHM_LOCK(r3, 0xb) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000200), 0x2) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000699100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r6, &(0x7f0000000000), 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 36.150167375s ago: executing program 3 (id=184): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)="457a1a359a4e97", 0x7}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x1, &(0x7f0000000040)=@raw=[@alu], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 34.970033646s ago: executing program 2 (id=194): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0x141002, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000001c0)) r1 = fanotify_init(0x200, 0x0) r2 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh#\xcf)\x0f\xc8\xc0\"\x9cc\x10d\xee\xa9\x8b\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) r3 = dup(r2) ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000040)=0x7) fanotify_mark(r1, 0x1, 0x48001059, r3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0xa}}, 0x20) execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x5fffd) 34.900034237s ago: executing program 2 (id=195): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1}, 0x6e) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@abs={0x1}, 0x6e) 34.899746362s ago: executing program 2 (id=196): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$get_persistent(0x16, 0xee00, r1) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r3 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000001c0)="3c75c2015e8724b5a4c586f2ae924b277f0443ec773eab27570e28988217c9b0", 0x20) r5 = accept$alg(r4, 0x0, 0x0) sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f0000000300)="758af16a415dbb00000000005f7596", 0xf}, {&(0x7f0000001140)="f4ade2555d44edd43f7d", 0xa}], 0x2, 0x0, 0x0, 0x400000d}, 0x40040) recvmmsg(r5, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/24, 0x18}, {&(0x7f0000000800)=""/103, 0x67}], 0x2}, 0xffffffff}], 0x1, 0x40012022, 0x0) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="39000000140081ae10003c000500018311001f9f660fcf066505acb61276dcba173508abca1be6eeb89c44ebb37358582bdbb7d553a4e9215503a41c4c0848b7de1ce11733add4a08196cd4601984b4a", 0x50}], 0x1}, 0x0) r7 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344, 0x41424344}, 0x1, 0x0) syz_extract_tcp_res(&(0x7f0000000280)={0x41424344}, 0x3, 0x7) write$tun(r2, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="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"/413], 0x302) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0xa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$IOMMU_TEST_OP_ACCESS_RW(r11, 0x3ba0, &(0x7f0000000380)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000540), 0x4}) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="01000000000100000000060000000e00016d0000000f0002006e657464657673696d300000d4ff03000000000008009100000000000600160001000000050012000000000069cb2a5b02d7e07650daf70008866d77cd56ad30d0c6469da8ed675784f432b92efdf64367a14325e462650414d2feee77d80af2d0e9d14a000000000000000000"], 0x54}, 0x1, 0x0, 0x0, 0x20}, 0x0) 33.979247548s ago: executing program 2 (id=197): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$CDROM_SEND_PACKET(r0, 0x5393, &(0x7f0000001280)={"e9ae75a7bad303c1d25c76d5", &(0x7f0000000400)="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", 0x20e, 0x0, 0x0, 0x4b352c225a4a617f, 0x91, 0x0, 0x0}) 33.978861074s ago: executing program 2 (id=198): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001ac0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000100000000000c0000001800058008000100756470000c000280080004"], 0x2c}}, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r0, &(0x7f00000012c0)="a5", 0x1) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r4, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r6 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r6, &(0x7f0000000180)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0002}}}, 0x14) r7 = dup(r6) connect$802154_dgram(r7, &(0x7f0000000080)={0x24, @short}, 0x14) write$USERIO_CMD_REGISTER(r7, 0x0, 0x6e) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000040)={r5, 0x0, r5, 0x8dd, 0x9c0, 0xffffffff, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x5}) ioctl$SNDCTL_DSP_GETISPACE(r3, 0x8010500d, &(0x7f00000014c0)) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000280)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7, 0x1, 0x4, 0x7}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f00000003c0)={&(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0], 0xa, 0x5, 0x1, 0x4}) syz_emit_ethernet(0x33, &(0x7f0000000440)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x1, 0x1, 0x2, 0xc, 0x100, @void}, "09cf88f0a1"}}}}}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "9e188a80c32aa9b86ed6ce56992732d9f7fc6cda762c07530a038941764a92bb", "074336477e9205df5f47f7da965c25c746ba7f8ca07841d3da17308a6df3f54855ecedd6d8664fa125e3972a48e81039", "a562ff321beb3f036b9fd27aeff89c8e79a57a3873e0b4e6553e2c44", {"4cf02a016458a5f67aa497153eddc6a1", "9a3f9661ac468177dc130be49bdd8eb5"}}}}}}}, 0x0) ioctl$DRM_IOCTL_MODE_SETPLANE(r4, 0xc03064b7, &(0x7f0000000400)={r5, r8, r9, 0x3, 0x10000, 0x9, 0x2, 0x9, 0x3, 0x0, 0x5, 0xc11b}) 33.830311266s ago: executing program 2 (id=199): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340)={0x80, 0x6, 0x300}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x2, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0x7, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x8}]}}) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xf8f}) 32.820459391s ago: executing program 32 (id=99): r0 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001800)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xc}}, 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$caif_stream(0x25, 0x1, 0x4) recvmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x40010100, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r3, 0x8010550e, &(0x7f0000000080)={0x3ff, &(0x7f0000000440)="536893b433870648b3c584f302c3493d3127d2a2d817acc4a0445b0b53e630352b76acb2984da9a13cdebae7bab0deff726cd951ff38879a260a326678c8562f727443dc92396c89167171bec09abe03668a10db2c42ebb452f12cdc024036ddc71d633702178b6f5342c1200912c778b44e6a84ab7099bc44cefbafe2b421bd5a2fed5e71c0b468f0374ea5b90d7ff9ba34a24413fca7e88ee432ab52cda998a2c4a64765be94858d1aea77a3904d4726a1d931a1ed92e2608e9f718521226d43312dc7f5e6e5b953e3b13451d3313110"}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000080), 0xc) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000000c0)={0x28, 0x7}, 0x28) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000240)={0x6, @vbi={0x9, 0x3, 0x1, 0x38414762, [0xfffffffd, 0x8], [0x4], 0x1}}) 20.794075161s ago: executing program 33 (id=184): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x2710, @hyper}, 0x10) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000640)="457a1a359a4e97", 0x7}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000480)=""/68, 0x44}], 0x1}, 0x4c2103a0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f00000002c0)=ANY=[], 0x0) ioctl$SNAPSHOT_FREE(r5, 0x3305) ioctl$BTRFS_IOC_BALANCE(r5, 0x5000940c, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000013c0)={0x6, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1c, 0x1, &(0x7f0000000040)=@raw=[@alu], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 18.867870448s ago: executing program 34 (id=199): bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x0, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000007c0), 0x73, 0x82) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000340)={0x80, 0x6, 0x300}, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(0x3) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r3, 0x4048aec9, &(0x7f0000000740)={0x1, 0x0, @ioapic={0x0, 0x296a, 0xf7c, 0x3, 0x0, [{0x98, 0x27, 0x81, '\x00', 0x7f}, {0x1, 0xc, 0x81, '\x00', 0xf5}, {0xe9, 0x4, 0x9, '\x00', 0xe}, {0x6, 0x8, 0x3, '\x00', 0x8f}, {0xff, 0x80, 0xb1, '\x00', 0x7}, {0xf, 0x2, 0x28, '\x00', 0xaa}, {0x7f, 0x8, 0x1, '\x00', 0x8}, {0x1, 0x3, 0x2, '\x00', 0x67}, {0x2, 0x7, 0x91, '\x00', 0x8}, {0x8, 0x3, 0x43, '\x00', 0x80}, {0xfc, 0x8, 0x4, '\x00', 0x3}, {0x2, 0x3, 0x3, '\x00', 0x8}, {0x6, 0x6, 0x8, '\x00', 0xa6}, {0x8, 0x0, 0xa, '\x00', 0x9}, {0x4, 0x4e, 0x9}, {0x6, 0x5e, 0x5, '\x00', 0x3}, {0x5, 0x5, 0x7, '\x00', 0x5}, {0x0, 0x3, 0x3, '\x00', 0xff}, {0x5, 0x0, 0xb, '\x00', 0x3}, {0x4, 0x6, 0xb, '\x00', 0x3}, {0x7f, 0xf1, 0x7, '\x00', 0x4}, {0x7, 0x40, 0x9, '\x00', 0x10}, {0x2, 0x8, 0x1, '\x00', 0x7}, {0x2, 0xc, 0x91, '\x00', 0x8}]}}) ioctl$KVM_SET_IRQCHIP(r3, 0xc048aec8, &(0x7f0000000080)={0x1, 0x0, @pic={0x0, 0x81, 0x9, 0x5, 0x3c, 0xfd, 0x5, 0x9, 0x4, 0xfc, 0xff, 0xf9, 0x55, 0x9, 0xf7, 0x7}}) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)={0x0, 0x0, 0xf8f}) 2.85816139s ago: executing program 5 (id=370): prctl$PR_SET_THP_DISABLE(0x41, 0x3) add_key(&(0x7f0000000000)='cifs.idmap\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) 2.549264926s ago: executing program 0 (id=373): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@ipv6_getroute={0x1c, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x10, 0x4, 0x0, 0x0, 0x0, 0xb, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000700)=@ipv6_getroute={0x1c, 0x1a, 0x100, 0x70bd2d, 0x25dfdbfe, {0xa, 0x10, 0x10, 0x4, 0x0, 0x0, 0x0, 0xb, 0x1000}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000091}, 0x40010) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, 0x0}, 0x20) (async) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r1, 0x0}, 0x20) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) (async) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102374, 0x18fe6}], 0x1, 0x0, 0x0) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0x4, 0x4}, 0x6) write(r1, &(0x7f0000000080)="747d354a512691c0ca19d0aa03ee9306947a0d660f8649591d45a96c42a2be13417a23cd76", 0x25) r5 = memfd_create(&(0x7f0000001040)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6&\xd0\x9daA\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8\x13\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xe2\x05\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5\xad\xd1\x9b1\xbd\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7\x8en\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xef%\xa1a\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcaf2\x02F1\xc6\x82\x00E\xae\x9d\x17\x871N:\xb4\xea \x8e\xdelP\x83\x1f\'\xe2\xd6\xc0\xc3\xfc\xc9677u\xf3RUP@o>\xee\xb8\xa3\t\x02\xb7\\,\xebK\xed\x1b\xc9e\xb3\x16\xce\x9bI\xdb\xfa\x82\x85\t\x9bg\xd0s\xe2\f{\x8cp~;\xf8\x96\xf2\x91\x06\x89\xa6D\xce\xac\x03\xc1\x83\xd1\xe6 |\xa75\xd7\x80t\xfc\xf8\xd2\x12N\x1cB7^\xfd4\xae\xb0VFw\b!\xae\x1baTv\xc0z\x19\xc5\xc8w\xba\x97N\x9a`\x8f\xfc\x9ee\xf9\x00\x1cQA\x14]\r\xd4\"\xc2\x12GD\xdb{\x88\xaa\x81\xc8\xa2\xdeI\xa2\xbel\x0e\xec\x17fNI\x05\xff\x8d\xf4_\x1a\vqA\xb7\x0ed<\x98\xee\xb8\x19\xec\x9f\xee\xe1_\xacG\x8b\xa3\xc3\x13\x80\x0f\xf4I\xdeAwG\xbdkno\xa2\b\x126\x97\x9b\xf9|P\xd94\v\x15\xcb\xc0\x9d\x11\xf3\x18\xae!2\x1b\x12\xa9\xc8~\xb7S\x94\xb5\xc7;\xa90D>s\xe9\xa4N\xf8\xdb\xab\xa0\x94~\xa1]b\xa4\xe5\xe2e\x1c\x8b\xd2\xc7Md\x93\x02\xd8\xb0,\xeb\x03\xaa\v\xed\x9bR\x8a\x80\xc2\x1f\x17ej\x973wv\x83a\xe06\x96\xde\xbc%Uh;H\xf8S\xf1\xa1g\x02\xc4\xc3\xa4\xa8\x96\t\xfex\xa2?\xcb\\Y\x1e\xfe\xca\xa0i\x80O\x11\xb0\xcb\xacqU\xb5*\x00\x00\x00\x00\x00\x00\x00\f\xda\xf8oV\x89\xd3\x1f\x99+\xe5T\x8eM4\x1c\xc6\x7f\xd4\xf2\xcc\xd3\x06\x00\xd4\x00\x00\x00\x00\x00\x00\x00\x00\x00~A9\xf6IBu2L\x9e\xa2\xd0Y\xcb\x8e;\xdb\x88\b.N\x87\x95\xbb\xa9s\xab\x90\x06\xc6!p\x9e?~\xf9\xe6\xae*\v\xa3\xd9gxKN\'z]*\x93\xf7\b\x91\xd0\xff\xd9\xc6a\xb5q\x9c\xa1Go\xd58\x93\xe0,\x9f\xe4\xa9\xd9A\x9e\x95e\x98\xd0V\x9d\xed\x97\xf1\xc5\xce\xf5\x90!d\x9a\xd8\x10\xbbx\r8\xff\x8bNUK\xebA\xe5\x92f\xc4\xd1\xa8\x15\xbf\xb5iW\xdb.kbf*\x89\xf0\xecq m-~\xbbf?\xec=\xd2\xe2\x1e\x8d/o\xcd\xc8x\xdb\xe6\xd0W\xca\xc5kz\x8e9\xfa\x86\x0f\x96p\x89E]%W=\xd1\x0e\x05S\xd0\x94\xe9\xf7U\x11\x9a\xc0^\x1a5\xc6dc\xe2\x8c\xa7j\b+\xfa.\f\xd9\xda\x12\xd0:\xb1\xb3', 0x7) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) (async) bind$llc(r3, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10) close_range(r0, 0xffffffffffffffff, 0x0) (async) close_range(r0, 0xffffffffffffffff, 0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$GIO_SCRNMAP(r6, 0x4b40, &(0x7f00000000c0)=""/94) 2.419203329s ago: executing program 0 (id=374): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000500)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "e453f079df21d540", "1ec2d524d78682576ec2d9e13dad1018", "993161e3", "be0692db0b429ee8"}, 0x28) write$binfmt_script(r0, &(0x7f0000001300), 0x8f) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfccf}, &(0x7f0000000240)=0x40) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x162682, 0x0) dup(r1) (async) r2 = dup(r1) fallocate(r2, 0x3, 0x0, 0x180000000004) (async) fallocate(r2, 0x3, 0x0, 0x180000000004) writev(r0, &(0x7f00000030c0)=[{&(0x7f0000000a40)="fb", 0x1}], 0x1) close(r0) 2.418040017s ago: executing program 0 (id=376): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/crypto\x00', 0x0, 0x0) lseek(r1, 0x1000000, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c000280050001000000000008000740000000"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setresuid(r5, r5, 0xee00) mount$9p_virtio(&(0x7f0000000240), &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000500)={'trans=virtio,', {[{@directio}], [{@hash}, {@dont_measure}, {@fowner_gt={'fowner>', r5}}, {@smackfsroot={'smackfsroot', 0x3d, '}#(!'}}]}}) r6 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r6, 0x7, 0x0, 0x0, 0x0) link(&(0x7f0000001240)='./file0\x00', 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000b00000000000119078ac1400000000000000f4cb985d33b16266b5efb88aaa87eda081bac8b2f9a49d564054f1c9218f47b3cf8743eb4d9e776f94a6a58d36e006ac614f6f7bce9217cbfea31675d4a860cf6003977b1e4dbb16dc31cc76522bf19d5043edd2a8cc8c41345f8feb1a7a8e23043b8a465b1ed5bf8bc91307c7193f7edd1efc4742dc481e6f57f901948177bcc5dea4029ba4683a6bdcd7a1f13d745f7414b657797f00"/200], 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r10], 0x38}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x74, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @device_b, @device_b, @from_mac}, 0x0, @random, 0x0, @void, @val, @val={0x3, 0x1, 0x8c}, @void, @val={0x6, 0x2}, @void, @void, @void, @void, @void, @void, @val={0x71, 0x7, {0x0, 0xffffffffffffffff}}, @val={0x76, 0x6}}}], @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x74}}, 0x0) 2.319375472s ago: executing program 0 (id=377): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r0, 0x5607, 0x2c) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0xc, &(0x7f0000000040)=0x5, 0x4) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080", @ANYRES32=r1], 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x0) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) ptrace$peekuser(0x3, r2, 0x8) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) ioctl$TIOCL_SETVESABLANK(r4, 0x560e, &(0x7f0000000140)) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_BLANKSCREEN(r5, 0x541c, &(0x7f0000000000)) kexec_load(0x0, 0x1, &(0x7f0000000180)=[{0x0, 0x0, 0x7ff, 0x41000000}], 0x320000) 2.229921948s ago: executing program 5 (id=378): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBENT(r0, 0x4b47, &(0x7f0000000080)={0x0, 0xff, 0x3}) (async) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) (async) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000002c0), 0x2200800, 0x0) (async) chdir(&(0x7f0000000100)='./file0\x00') (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getpeername$netrom(r2, 0x0, 0x0) (async) r3 = open(&(0x7f00000024c0)='./file0\x00', 0x105c42, 0x5) write$binfmt_script(r3, 0x0, 0x0) (async) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt(r4, 0x10d, 0x1, 0x0, 0x0) pread64(r3, &(0x7f0000000140)=""/115, 0x73, 0xbcf) (async) recvfrom$inet(r3, &(0x7f0000000200)=""/25, 0x19, 0x10000, 0x0, 0x0) (async) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0xc) getgroups(0x1, &(0x7f0000000380)=[r6]) chown(&(0x7f0000000340)='./file0\x00', r5, r7) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x4, 0x5b, 0x8a, 0x200, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8001, @void, @value}, 0x94) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r10, 0x4048ae9b, &(0x7f0000000300)={0xe0001}) (async) syz_open_dev$cec(&(0x7f0000000100), 0x0, 0x0) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x13, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006111850000000000950000000000a2"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000041a000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f2f51c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) 1.91951402s ago: executing program 5 (id=381): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x11, &(0x7f0000000940), &(0x7f0000000080)=0x4) r1 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_RESET(r1, 0x80044dfe, 0x1000000000000) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_dev$radio(&(0x7f0000000040), 0x2, 0x2) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder1\x00', 0x802, 0x0) r4 = creat(&(0x7f0000000000)='./file0\x00', 0xcd) r5 = socket$isdn_base(0x22, 0x3, 0x0) ioctl$IMGETVERSION(r5, 0x80044942, &(0x7f0000000000)) r6 = socket$kcm(0x21, 0x2, 0x2) r7 = dup2(r3, r3) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x1080, r2}, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r6, 0x110, 0x6, 0x0, 0x20000000) r8 = syz_open_dev$dri(&(0x7f0000000080), 0x9, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r8, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r9 = syz_open_dev$dri(&(0x7f0000000000), 0x29, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) syz_open_dev$vcsu(&(0x7f0000000300), 0x7fd, 0x70000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r9, 0xc04064a0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x0, 0xffffffffffffffc7, 0x0, 0x1}) ioctl$KVM_GET_XSAVE2(r4, 0x9000aecf, &(0x7f0000ffc000/0x1000)=nil) r11 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r11) ptrace$pokeuser(0x6, r11, 0x358, 0x0) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_buf(r12, 0x0, 0x11, 0x0, 0x2) ioctl$DRM_IOCTL_MODE_ATOMIC(r8, 0xc03864bc, &(0x7f0000000180)={0x0, 0x1, &(0x7f00000002c0)=[r10], &(0x7f0000000140)=[0x7], &(0x7f0000000800)=[0x0], &(0x7f0000000100), 0x0, 0x400000000}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.870015529s ago: executing program 5 (id=382): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) (async) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)=@bridge_setlink={0x28, 0x13, 0x0, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5}]}, 0x28}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001800000000000000000000000a00000000000000000000000800100004"], 0x24}}, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff02, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x4}, @ETHTOOL_A_FEATURES_HEADER={0xc}]}, 0x24}}, 0x0) (async) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="d81400003b0001002fbd70000000000003"], 0x14d8}}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r3, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x2}) (async) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) (async) r5 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_CAP_HYPERV_SYNIC2(r5, 0x4068aea3, &(0x7f0000002240)) (async) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000f80)=@newtaction={0x64, 0x30, 0x9e54f29ff072a93b, 0x0, 0x0, {}, [{0x50, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x3f}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 1.779733706s ago: executing program 5 (id=383): syz_emit_vhci(&(0x7f00000003c0)=@HCI_EVENT_PKT={0x4, @hci_ev_clock_offset={{0x1c, 0x5}, {0x0, 0xc9, 0x2}}}, 0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) write$UHID_INPUT(r1, &(0x7f0000001040)={0xfc, {"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", 0xffffffffffffff34}}, 0x1006) syz_emit_vhci(&(0x7f0000000040)=@HCI_EVENT_PKT={0x4, @hci_ev_si_device={{0x1, 0x4}, {0x708, 0xe}}}, 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffe26, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.779513673s ago: executing program 5 (id=384): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pread64(r1, &(0x7f0000000280)=""/4096, 0x1000, 0x0) 1.4395298s ago: executing program 0 (id=388): r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "fc5930d71e250c7c17f93b61be27f4c7ba2502a046a92328b09fcc295de8087b03c17994469e2c160fee3f76ac2ed2fe05ab97b9d2832944993b000ae10f243b", 0x1b}, 0x48, 0xfffffffffffffffd) keyctl$restrict_keyring(0x1d, r0, &(0x7f0000000100)='trusted\x00', &(0x7f0000000140)='}&\x00') (async) keyctl$search(0xa, 0x0, &(0x7f0000000180)='dns_resolver\x00', &(0x7f00000001c0)={'syz', 0x2}, r0) (async) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000200)={r0, 0x83, 0x1000}, &(0x7f0000000240)={'enc=', 'raw', ' hash=', {'streebog512\x00'}}, &(0x7f00000002c0)="8a0e11df6ec256cb950d07bdf1e8bec8a84d267c4ef687dbc0a45dc66a50e11e7c570a7e1e7acfb6d470f1b2fed9a54cfb24e00c96170e6b594af81fc3d669f3ac8fa3a993fe9056c08fb377f0b16c4c155acbdc4e399e3e10bd74c2b02dfee474731fae63f621eee81d0a9d349f0de279384de4690f8a9e8e6899c1a03a80b869b24b", &(0x7f0000000380)=""/4096) r1 = add_key(&(0x7f0000001380)='id_resolver\x00', &(0x7f00000013c0)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$join(0x1, &(0x7f0000001400)={'syz', 0x1}) (async) r2 = add_key$user(&(0x7f0000001440), &(0x7f0000001480)={'syz', 0x1}, &(0x7f00000014c0)="9ee5e6549fb81f10a58aef7cd361ab9556528792907ceb70c1b8e9242d793a465623ded74242a5351eebf93354d7dfed9f79c5fb2463dde0fd858ae18a17263d8bde0f30ef185a83516edcfeaafbcf315a1c0f7432", 0x55, r1) (async) r3 = request_key(&(0x7f0000001540)='asymmetric\x00', &(0x7f0000001580)={'syz', 0x3}, &(0x7f00000015c0)='$\x00', 0x0) keyctl$revoke(0x3, r0) (async) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001600)={0x0, 0x0}, &(0x7f0000001640)=0xc) keyctl$chown(0x4, r2, r5, 0xee01) (async) keyctl$unlink(0x9, r0, r3) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r6, 0x10e, 0x5, &(0x7f0000001680)=0x7ff, 0x4) (async) r7 = add_key(&(0x7f00000016c0)='big_key\x00', &(0x7f0000001700)={'syz', 0x1}, &(0x7f0000001740)="14a9f811b17a7b0f4220034183bc300dbcbf4eefdcbdc72760a8b73653eedf1556538cd44f8ddcc6b815a314cfab517354893760ec74b055a374242b4b0abece4f1dc56b4c5500c866743ee9e950cdeb50e0293150e607c17b99078d000235edf339b5c3ec5497d4ca326a89bb0396a148e192524d9709f1c8a74e7149946ec228fe91db731b21bd0db71caa975da111629f490504f7a93e5c249717ff265a9a9b5ab80417ef3558cb7ef962044d04e0ebf140a01f4cdbc6138ad04969fa", 0xbe, 0xfffffffffffffffa) r8 = add_key$keyring(&(0x7f00000018c0), &(0x7f0000001900)={'syz', 0x1}, 0x0, 0x0, r1) request_key(&(0x7f0000001800)='asymmetric\x00', &(0x7f0000001840)={'syz', 0x0}, &(0x7f0000001880)='e355a76a11a1be18', r8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000001a00)={'sit0\x00', &(0x7f0000001980)={'syztnl0\x00', 0x0, 0x8, 0x7800, 0x3, 0x3, {{0xb, 0x4, 0x2, 0x9, 0x2c, 0x66, 0x0, 0x2, 0x4, 0x0, @multicast2, @private=0xa010102, {[@rr={0x7, 0x7, 0xa8, [@private=0xacf]}, @ra={0x94, 0x4, 0x1}, @timestamp_addr={0x44, 0xc, 0xf8, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x26}]}]}}}}}) (async, rerun: 64) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000001a40)={@mcast2, 0x0}, &(0x7f0000001a80)=0x14) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000001cc0)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001c80)={&(0x7f0000001ac0)=@bridge_setlink={0x1a0, 0x13, 0x400, 0x70bd2b, 0x25dfdbfb, {0x7, 0x0, 0x0, r9, 0x410, 0x18061}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'ip6gretap0\x00'}, @IFLA_MASTER={0x8, 0xa, r10}, @IFLA_GROUP={0x8, 0x1b, 0x2}, @IFLA_VF_PORTS={0x15c, 0x18, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0x54f}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "4b2a8478e6e6dc17fc12ac90744dc807"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "4ced8327003c7faf7079dcbbfed0b40e"}]}, {0x44, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "5a5be93487e7ba4ad4091281c5f0ac5c"}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "f15264ea45159b6d7df7190de47bd5f6"}, @IFLA_PORT_VF={0x8, 0x1, 0xd04a}, @IFLA_PORT_VF={0x8, 0x1, 0xd8f2}]}, {0x38, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "754751919e962ec5e378977d39054469"}, @IFLA_PORT_PROFILE={0x8, 0x2, '](+\x00'}, @IFLA_PORT_VF={0x8, 0x1, 0x2c}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x4}]}, {0x9c, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "52bbb83370cc990d0302300c8364ec17"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "5e73c8e6f5956b288bbd92bca21d3a45"}, @IFLA_PORT_PROFILE={0x8, 0x2, 'enc='}, @IFLA_PORT_VF={0x8, 0x1, 0x2}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "93c5e4c21af6f0d2ffb9466e5fa612bb"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "9efb516616702fe2076cb2c998e1979a"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x8}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "db87073605df78d0a95ad3a963b15c4a"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "23975e50234d327a0372a0a2ef3d98df"}, @IFLA_PORT_PROFILE={0x5, 0x2, '\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x6}]}]}]}, 0x1a0}}, 0x1) keyctl$join(0x1, &(0x7f0000001d00)={'syz', 0x0}) (async) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r11, 0x89f2, &(0x7f0000001dc0)={'tunl0\x00', &(0x7f0000001d40)={'syztnl0\x00', r9, 0x0, 0x7, 0x4, 0x6, {{0x10, 0x4, 0x3, 0x3a, 0x40, 0x67, 0x0, 0x52, 0x29, 0x0, @rand_addr=0x64010100, @loopback, {[@ssrr={0x89, 0xb, 0x72, [@dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x2d}]}, @cipso={0x86, 0xa, 0x0, [{0x2, 0x4, "41c6"}]}, @timestamp={0x44, 0x14, 0x7e, 0x0, 0x9, [0xd, 0x3, 0x748, 0xa]}]}}}}}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000001e00)={0x10200, 0x5, 0x8000000, 0x2000, &(0x7f0000ffb000/0x2000)=nil}) (async, rerun: 32) ioctl$EXT4_IOC_SWAP_BOOT(r4, 0x6611) (async, rerun: 32) add_key$keyring(&(0x7f0000001e40), &(0x7f0000001e80)={'syz', 0x1}, 0x0, 0x0, r7) (async) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000001ec0)=0x17f6, 0x4) (async, rerun: 64) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r12, &(0x7f0000002240)={&(0x7f0000001f00), 0xc, &(0x7f0000002200)={&(0x7f0000001f40)=@delsa={0x2a8, 0x11, 0x419, 0x70bd2c, 0x25dfdbff, {@in=@private=0xa010100, 0x4d6, 0xa, 0x32}, [@algo_aead={0x13c, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0x780, 0x180, "2cfc8a4318e6a8d3978beee3cc28eaddb433415d14fcb154658995d73f0730f2b10b267da36379928b3365406fabfe23d0e7d26878bcc1d78db92afa60162695431154b561daef92ee8fba0f031b1057fb6f89afd9229ac8e22439fd6d766b890bee5715d67c183c0730ff035ba0af25086bad7eb3cb7865b966c6ca2dc7afeb07ef59f42c06765c2c5787860f7622e7d51731a9f650e1ff83558bc0864f6f91a23d91302ea8bb534a2935e8ac0b770ec81ffe096b4e4ed72df7d2bcdc70bacd47f5b4c0b3b92450f7c79642a5c736eba9110ccfe44acd96513cd48365573497207563a3b1445fe767dea89dee94845d"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x1}, @XFRMA_SET_MARK={0x8, 0x1d, 0xe}, @XFRMA_SET_MARK={0x8, 0x1d, 0x3}, @coaddr={0x14, 0xe, @in6=@local}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @tmpl={0x104, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x33}, 0x2, @in6=@mcast1, 0x34ff, 0x1, 0x1, 0x5, 0x1, 0xffffffff, 0x1}, {{@in=@private=0xa010102, 0x4d5, 0x3c}, 0x2, @in=@local, 0x3504, 0x4, 0x0, 0x4, 0x4, 0x800, 0x6}, {{@in6=@remote, 0x4d6, 0xff}, 0xa, @in=@loopback, 0x3502, 0x2, 0x3, 0x2, 0x80, 0x6, 0x437}, {{@in6=@mcast2, 0x4d6, 0x93}, 0xa, @in=@loopback, 0x3506, 0x0, 0x3, 0x7f, 0x3ca, 0x10, 0xb}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x4}, 0x10000080) 1.439060768s ago: executing program 0 (id=389): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40025b0c, &(0x7f0000000040)) r2 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40242) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000000c0)={0x80000043, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r3, 0x0, 0x0) sendmsg$tipc(r3, &(0x7f0000001b80)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(r2, &(0x7f00000000c0)=ANY=[], 0x66) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000082c0)=@newtaction={0xe94, 0x30, 0x25, 0x0, 0x0, {}, [{0xe80, 0x1, [@m_pedit={0xe7c, 0x1, 0x0, 0x0, {{0xa}, {0xe50, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x2c, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {}, {0x0, 0x800}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x4000000}, {}, {0x0, 0x0, 0xfffffffc}, {}, {}, {0x8}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1, 0x40}, {0x0, 0x0, 0x400}, {}, {}, {}, {0x10}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x8000, 0x0, 0x0, 0x4}, {}, {0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x80}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x0, 0x1000}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0x0, 0x0, 0x63}, {}, {0x0, 0x0, 0x20000000}, {0x0, 0x0, 0x8ade}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, {0xfffffffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffe}, {}, {}, {0x0, 0x0, 0x2, 0x0, 0x80}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, {0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {0x8, 0x0, 0x5}, {}, {0x8001}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {0x0, 0x3, 0x0, 0x0, 0x3}, {0x0, 0x8, 0x4}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8e71}, {0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x10000}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1}, {}, {}, {}, {}, {0x5}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x4}, {0x2}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x5}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe94}}, 0x0) ioctl$SG_GET_NUM_WAITING(r2, 0x227d, &(0x7f00000000c0)) 1.039869714s ago: executing program 4 (id=392): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}, {{@in=@broadcast, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000000)) close(r1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0) sendmsg$IEEE802154_ADD_IFACE(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000000)={0x50, r4, 0x1, 0x50bd2c, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy3\x00'}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x20000050) 1.039477788s ago: executing program 4 (id=393): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0x6, &(0x7f0000000080), &(0x7f0000000040)=0x1b) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a010200000000000000000100fffe0900010073797a30000000000900030073797a3200000000dc000000060a010400000000000000000100000508000b4000000000b4000480200001800d00010073796e70726f7879000000000c000280060001400000000034000180080001006c6f670028000280080006400000000d110002402b24292d2d2a5d24402c2d400000000006000440000700003c0001800900010068617368000000002c0002800800074000000000080003400000001608000140000000120800024000000000080004400000000020000180080001006e61740014000280080003400000000008000540000000000900010073797a30"], 0x150}}, 0x0) (async, rerun: 64) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 64) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet(0x2, 0x200000002, 0x0) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="440000001800010000000000000000000a000000000000000000000018001600140001000f00000000000000000010000000000008000400", @ANYRES32=r6, @ANYBLOB="0600150008"], 0x44}}, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x88, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) (async) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000080)={0x4c, r8, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x64}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_TIMEOUT={0x8}]}]}, 0x4c}}, 0x0) (async) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)={0x10c, r8, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0xff}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x32, 0x20}}, @IPVS_SVC_ATTR_SCHED_NAME={0xa, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3c}]}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x50}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9313}, @IPVS_CMD_ATTR_DEST={0x3c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e21}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@empty}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7fffffff}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 969.422219ms ago: executing program 4 (id=394): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000200)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@empty, 0x0, 0x33}, @in=@local, {}, {}, {}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x24}, [@algo_auth={0x48, 0x1, {{'digest_null\x00'}}}]}, 0x138}}, 0x0) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x1c, r2, 0x30d, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}]}, 0x1c}}, 0x40) r3 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000100)='rxrpc\x00', 0x0, &(0x7f0000000d80)="0000000000000001ff6943b80000000800000028f2000000008607000000ebcd1f63dd65dd530700a28f2cbf86f474fad8cb594ed9fabe9ec277bb8d", 0x3c, r3) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), r0) 969.04439ms ago: executing program 4 (id=395): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d40), 0x0, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000d80)=@e={0xff, 0xa, 0x0, 0x0, @SEQ_NOTEON=@special}) 919.389493ms ago: executing program 4 (id=396): r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x7ff, 0x41}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000c00), 0x1, 0x2) r3 = openat$bsg(0xffffffffffffff9c, &(0x7f00000001c0), 0x40, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_IPV6_PKTINFO(0xffffffffffffffff, 0x29, 0x32, &(0x7f0000000040)={@private1={0xfc, 0x1, '\x00', 0x1}}, 0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r6 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) syz_usb_connect$hid(0xf63067478e218e8, 0x36, &(0x7f0000000cc0)=ANY=[], 0x0) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000800)='9', 0x1}], 0x1f) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000500)) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mount$overlay(0x0, 0x0, &(0x7f00000000c0), 0x8, &(0x7f0000000580)) syz_emit_vhci(0x0, 0x0) syz_emit_vhci(&(0x7f0000001940)=@HCI_EVENT_PKT={0x4, @hci_ev_hardware_error={{0x10, 0x1}, {0x1}}}, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$MPTCP_PM_CMD_ANNOUNCE(0xffffffffffffffff, 0x0, 0x11) syz_emit_vhci(0x0, 0x0) write$tun(r4, &(0x7f00000006c0)=ANY=[@ANYBLOB="000088caffffffffffffaaaaaaaaaa0086dd608a2d5500780000fe8000000000000000000000005d0000fe800000000000000000000000000000040e0407fe60"], 0xb2) connect$unix(r3, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000080)={0xa, 0x1, 0x0, "e2b329bd0786f620d5ba8c6328407254fda922761fb34ebed65965d1167853c6", 0x31303553}) syz_emit_ethernet(0x32, &(0x7f0000000040)={@broadcast, @random="0408fcc67af2", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @multicast1}, {0x0, 0x88be, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) 329.408247ms ago: executing program 4 (id=401): pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) close(r2) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="0900f2ff0f00000000e2ffeeb300000000000000", @ANYRES32, @ANYBLOB="00000000000000002400128009000100626f6e64000000001400028008000f"], 0x44}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r4, @ANYBLOB="000000000000000014001a80100004800c000280080001"], 0x34}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000280)={'wg2\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000002c0)={&(0x7f0000000500)={0x10c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x10c}, 0x1, 0x0, 0x0, 0x4000}, 0x4040002) bpf$MAP_CREATE(0x1100000000000000, 0x0, 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x41720, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) close(r0) ioctl$KVM_CREATE_IRQCHIP(r8, 0xae60) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="f3d2d4ba2000b070eeb800078ee8f020beb400b800088ee8bad004b090eef30fc73226660f1c86d28e440f20c0663508000000440f22c0f2a6"}], 0xaaaaaaaaaaaadcf, 0x3, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x14}, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) splice(r0, 0x0, r3, 0x0, 0x4ffe2, 0x0) syz_init_net_socket$ax25(0x3, 0x2, 0xce) 245.071437ms ago: executing program 6 (id=402): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') accept$alg(r2, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x83, &(0x7f0000000080)={r3}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0xe, 0x6, 0x1, 0x7}}]}}, @TCA_RATE={0x6, 0x5, {0x4, 0x6}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) r7 = socket$inet_tcp(0x2, 0x1, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000002c00000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r8, r9, 0x25, 0x0, @val=@kprobe_multi=@syms={0x1, 0x0, 0x0, 0x0, 0x1}}, 0x30) syz_emit_ethernet(0xfdef, &(0x7f0000000880)=ANY=[@ANYRES16=r9], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000000a00)={&(0x7f0000000880), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000102010200000000000000000a000000085ee51fb7dbb126e0dd00094000010201"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x10000080) 244.789318ms ago: executing program 6 (id=403): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = syz_clone(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r0, &(0x7f0000000300)=[{&(0x7f0000000580)=""/212, 0xd4}], 0x1, &(0x7f0000000840)=[{&(0x7f0000000680)=""/167, 0xa7}], 0x1, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x1}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x9000) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\xe0^@&&}\'\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, '.'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 169.789707ms ago: executing program 6 (id=404): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'macsec0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x44, r3, 0x709, 0x0, 0x0, {0x2e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}}, 0x0) shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300, 0x8042}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 50.035496ms ago: executing program 6 (id=405): ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6gre0\x00', 0x0, 0x2f, 0xfb, 0xbe, 0x8, 0x22, @mcast1, @local, 0x707, 0x8000, 0xd8, 0xf0}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x0, 0xfffffffffffffffc}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x200001, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 49.757047ms ago: executing program 6 (id=406): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r2}, 0x10) (async) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r3 = socket$netlink(0x10, 0x3, 0x0) (async) r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f00000001c0)=0x2, 0x4) (async) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f0000000040)={0x1, @pix={0x3, 0x2, 0x32315241, 0x1, 0x2020000, 0x9, 0x4, 0xf5e3, 0x0, 0x2, 0x2, 0x2}}) (async) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) 0s ago: executing program 6 (id=407): openat$dir(0xffffffffffffff9c, &(0x7f0000001a00)='./file1\x00', 0x40, 0x0) r0 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0) ioctl$NBD_SET_SOCK(r0, 0xab00, r1) ioctl$NBD_DO_IT(r2, 0xab03) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000480)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000000)="b66ee70bb6365bf35dca9589cbd4a0ae38a3a15f69f3d5f5c4a3bf8b62e94aa705a22c1a35ef3536e1208145bb0d5b3e9a533cf3cfcebe67de38809311a3d771c2cde790133da96142e55accc87500677b204656fb3b9ca119e17c09ffde97bd0e32c9d4518b3e4683e2f3c60ec7f00e33", 0x71}], 0x1}}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c000280080001"], 0x44}}, 0x0) writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f30000000170a00170000000004003700090003", 0x27}], 0x1) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000080)=@newtaction={0x60, 0x30, 0x0, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_skbedit={0x48, 0x1, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x60}}, 0x0) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e02003c000b05d25a806f8c6394f90324fc602f00001550000100053582c137153e370248018086dd1700d1bd", 0x33fe0}], 0x1}, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x10000) mount(&(0x7f0000000000)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000004a00)='./file1\x00', &(0x7f0000000040)='udf\x00', 0x8007, 0x0) kernel console output (not intermixed with test programs): 1/6-1:0.0/0003:0926:3333.0002/input/input6 [ 41.794529][ T8] keytouch 0003:0926:3333.0002: input,hidraw1: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0 [ 41.859875][ T5988] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 41.919229][ T35] usb 6-1: USB disconnect, device number 2 [ 41.937007][ T25] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.096688][ T25] usb 8-1: Using ep0 maxpacket: 16 [ 42.100635][ T25] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00 [ 42.102987][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.105059][ T25] usb 8-1: Product: syz [ 42.106199][ T25] usb 8-1: Manufacturer: syz [ 42.107494][ T25] usb 8-1: SerialNumber: syz [ 42.109121][ T5988] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 42.112309][ T25] usb 8-1: config 0 descriptor?? [ 42.114933][ T25] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected [ 42.117439][ T25] usb 8-1: Detected FT232H [ 42.266702][ T5988] usb 5-1: Using ep0 maxpacket: 32 [ 42.270932][ T5988] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=95.5e [ 42.273319][ T5988] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.275417][ T5988] usb 5-1: Product: syz [ 42.276537][ T5988] usb 5-1: Manufacturer: syz [ 42.277835][ T5988] usb 5-1: SerialNumber: syz [ 42.280370][ T5988] usb 5-1: config 0 descriptor?? [ 42.316238][ T25] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 42.318486][ T25] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 42.320553][ T25] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71 [ 42.323110][ T25] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 42.327398][ T25] usb 8-1: USB disconnect, device number 2 [ 42.331075][ T25] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 42.333867][ T25] ftdi_sio 8-1:0.0: device disconnected [ 42.406386][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 42.406397][ T40] audit: type=1400 audit(1731568552.603:204): avc: denied { read write } for pid=6080 comm="syz.2.25" name="lp0" dev="devtmpfs" ino=2797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.414141][ T40] audit: type=1400 audit(1731568552.603:205): avc: denied { open } for pid=6080 comm="syz.2.25" path="/dev/usb/lp0" dev="devtmpfs" ino=2797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 42.676656][ T6089] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 42.686188][ T5988] gs_usb 5-1:0.0: Configuring for 3 interfaces [ 42.837684][ T6089] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 42.840055][ T6089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.842212][ T6089] usb 6-1: Product: syz [ 42.843347][ T6089] usb 6-1: Manufacturer: syz [ 42.844599][ T6089] usb 6-1: SerialNumber: syz [ 42.847747][ T6089] usb 6-1: config 0 descriptor?? [ 42.927453][ T5944] Bluetooth: hci3: command tx timeout [ 42.927944][ T5957] Bluetooth: hci0: command tx timeout [ 42.928113][ T5300] Bluetooth: hci1: command tx timeout [ 42.928135][ T5300] Bluetooth: hci2: command tx timeout [ 43.055371][ T6089] usb 6-1: Firmware version (0.0) predates our first public release. [ 43.057780][ T6089] usb 6-1: Please update to version 0.2 or newer [ 43.076666][ T35] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 43.108210][ T6089] usb 6-1: USB disconnect, device number 3 [ 43.228859][ T35] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 43.231149][ T35] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 43.233791][ T35] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 43.236187][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 43.239664][ T35] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 43.243725][ T35] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 43.246086][ T35] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 43.249036][ T35] usb 8-1: Product: syz [ 43.250184][ T35] usb 8-1: Manufacturer: syz [ 43.255194][ T35] cdc_wdm 8-1:1.0: skipping garbage [ 43.256665][ T35] cdc_wdm 8-1:1.0: skipping garbage [ 43.259702][ T35] cdc_wdm 8-1:1.0: cdc-wdm1: USB WDM device [ 43.261467][ T35] cdc_wdm 8-1:1.0: Unknown control protocol [ 43.291581][ T5988] gs_usb 5-1:0.0: Disabling termination support for channel 1 (-EPROTO) [ 43.296743][ T5988] gs_usb 5-1:0.0: Couldn't get bit timing const for channel 2 (-EPROTO) [ 43.457612][ T829] usb 8-1: USB disconnect, device number 3 [ 43.488502][ T5988] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71 [ 43.491956][ T5988] usb 5-1: USB disconnect, device number 3 [ 43.576740][ T6089] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 43.729438][ T6089] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 43.731850][ T6089] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.733875][ T6089] usb 6-1: Product: syz [ 43.734972][ T6089] usb 6-1: Manufacturer: syz [ 43.736180][ T6089] usb 6-1: SerialNumber: syz [ 43.738320][ T6089] usb 6-1: config 0 descriptor?? [ 43.843871][ T828] usb 7-1: USB disconnect, device number 2 [ 43.847528][ T828] usblp0: removed [ 43.906663][ T5951] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 44.056714][ T5988] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 44.058005][ T5951] usb 8-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 44.061557][ T5951] usb 8-1: config 1 has an invalid descriptor of length 48, skipping remainder of the config [ 44.064913][ T5951] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 44.067514][ T5951] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 44.070528][ T5951] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024 [ 44.074540][ T5951] usb 8-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 44.076927][ T5951] usb 8-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 44.078896][ T5951] usb 8-1: Product: syz [ 44.080713][ T5951] usb 8-1: Manufacturer: syz [ 44.085201][ T5951] cdc_wdm 8-1:1.0: skipping garbage [ 44.086750][ T5951] cdc_wdm 8-1:1.0: skipping garbage [ 44.088909][ T5951] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 44.090646][ T5951] cdc_wdm 8-1:1.0: Unknown control protocol [ 44.142533][ T40] audit: type=1400 audit(1731568554.343:206): avc: denied { read } for pid=6096 comm="syz.1.29" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.142629][ T6089] usb 6-1: Firmware version (0.0) predates our first public release. [ 44.148464][ T40] audit: type=1400 audit(1731568554.343:207): avc: denied { open } for pid=6096 comm="syz.1.29" path="/dev/input/event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.157544][ T6089] usb 6-1: Please update to version 0.2 or newer [ 44.176664][ T828] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 44.188077][ T6089] usb 6-1: USB disconnect, device number 4 [ 44.206909][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 44.209433][ T5988] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 44.211572][ T5988] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 44.214050][ T5988] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 44.216539][ T5988] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 44.219278][ T5988] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 44.222526][ T5988] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 44.224795][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.328728][ T828] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 44.331366][ T828] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 44.335122][ T828] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 44.337488][ T828] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 44.339490][ T828] usb 7-1: Product: syz [ 44.340611][ T828] usb 7-1: Manufacturer: syz [ 44.341769][ T828] usb 7-1: SerialNumber: syz [ 44.432260][ T5988] usb 5-1: GET_CAPABILITIES returned 0 [ 44.433748][ T5988] usbtmc 5-1:16.0: can't read capabilities [ 44.548597][ T40] audit: type=1400 audit(1731568554.753:208): avc: denied { write } for pid=6104 comm="syz.2.32" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 44.559231][ T828] usb 7-1: 0:2 : does not exist [ 44.566056][ T828] usb 7-1: USB disconnect, device number 3 [ 44.685657][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.689072][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.692308][ T6111] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.692445][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 44.694672][ T6111] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.696545][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 44.701156][ T8] usb 5-1: USB disconnect, device number 4 [ 44.701365][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 44.704407][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 44.706149][ C3] cdc_wdm 8-1:1.0: nonzero urb status received: -71 [ 44.707969][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - 0 bytes [ 44.710107][ C3] cdc_wdm 8-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 44.712438][ T35] usb 8-1: USB disconnect, device number 4 [ 44.737244][ T6087] udevd[6087]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 44.916787][ T1015] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 45.006722][ T5957] Bluetooth: hci0: command tx timeout [ 45.006739][ T5944] Bluetooth: hci2: command tx timeout [ 45.008372][ T5957] Bluetooth: hci3: command tx timeout [ 45.008544][ T5953] Bluetooth: hci1: command tx timeout [ 45.070075][ T1015] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.072733][ T1015] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 45.076665][ T1015] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 45.079069][ T1015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.081157][ T1015] usb 6-1: Product: syz [ 45.082261][ T1015] usb 6-1: Manufacturer: syz [ 45.083479][ T1015] usb 6-1: SerialNumber: syz [ 45.326692][ T5993] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 45.476660][ T5993] usb 7-1: Using ep0 maxpacket: 16 [ 45.481479][ T5993] usb 7-1: config 0 has an invalid interface number: 70 but max is 0 [ 45.483609][ T5993] usb 7-1: config 0 has no interface number 0 [ 45.485163][ T5993] usb 7-1: config 0 interface 70 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 45.487945][ T5993] usb 7-1: config 0 interface 70 altsetting 0 has an invalid endpoint descriptor of length 6, skipping [ 45.490568][ T1015] usb 6-1: USB disconnect, device number 5 [ 45.491169][ T5993] usb 7-1: config 0 interface 70 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.493459][ T5993] usb 7-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=8d.1c [ 45.498482][ T5993] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.500655][ T5993] usb 7-1: Product: syz [ 45.501744][ T5993] usb 7-1: Manufacturer: syz [ 45.502925][ T5993] usb 7-1: SerialNumber: syz [ 45.505418][ T5993] usb 7-1: config 0 descriptor?? [ 45.507655][ T6114] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 45.686694][ T5988] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 45.715189][ T5993] usbhid 7-1:0.70: couldn't find an input interrupt endpoint [ 45.718003][ T5993] usb 7-1: USB disconnect, device number 4 [ 45.836719][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 45.839518][ T5988] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 45.842060][ T5988] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 45.844549][ T5988] usb 5-1: New USB device found, idVendor=1608, idProduct=0207, bcdDevice=43.8e [ 45.847136][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 45.850103][ T5988] usb 5-1: config 0 descriptor?? [ 45.852410][ T5988] io_ti 5-1:0.0: Edgeport TI 2 port adapter converter detected [ 45.857525][ T5988] io_ti 5-1:0.0: Direct firmware load for edgeport/down3.bin failed with error -2 [ 45.859962][ T5988] io_ti 5-1:0.0: Falling back to sysfs fallback for: edgeport/down3.bin [ 46.006722][ T1015] usb 8-1: new full-speed USB device number 5 using dummy_hcd [ 46.177893][ T1015] usb 8-1: too many endpoints for config 1 interface 0 altsetting 253: 68, using maximum allowed: 30 [ 46.180839][ T1015] usb 8-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 68 [ 46.184100][ T1015] usb 8-1: config 1 interface 0 has no altsetting 0 [ 46.190006][ T1015] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 46.192342][ T1015] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.194333][ T1015] usb 8-1: Product: syz [ 46.195400][ T1015] usb 8-1: Manufacturer: syz [ 46.196704][ T1015] usb 8-1: SerialNumber: syz [ 46.486657][ T8] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 46.658272][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 46.661889][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 46.665137][ T8] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 46.668291][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 46.671926][ T8] usb 7-1: config 0 descriptor?? [ 46.803725][ T1015] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 46.836752][ T35] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 47.007259][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 47.010480][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 47.014344][ T35] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 47.017551][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.021177][ T35] usb 6-1: config 0 descriptor?? [ 47.205183][ C0] usblp0: nonzero write bulk status received: -71 [ 47.208353][ T828] usb 8-1: USB disconnect, device number 5 [ 47.227093][ T35] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 47.281002][ T8] usb 7-1: string descriptor 0 read error: -22 [ 47.409090][ T6118] usblp0: removed [ 47.427005][ T40] audit: type=1400 audit(1731568557.633:209): avc: denied { write } for pid=6125 comm="syz.1.39" name="iowarrior0" dev="devtmpfs" ino=2836 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 47.430528][ T30] usb 6-1: USB disconnect, device number 6 [ 47.432978][ C1] iowarrior 6-1:0.0: iowarrior_callback - usb_submit_urb failed with result -19 [ 47.438172][ T30] iowarrior 6-1:0.0: I/O-Warror #0 now disconnected [ 47.484463][ T8] uclogic 0003:256C:006D.0003: interface is invalid, ignoring [ 47.488759][ T8] usb 7-1: USB disconnect, device number 5 [ 48.177043][ T8] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 48.236721][ T828] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 48.326723][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 48.329431][ T8] usb 8-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 48.331837][ T8] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.335338][ T8] usb 8-1: config 0 descriptor?? [ 48.337992][ T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 48.386693][ T30] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 48.388157][ T828] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 48.391759][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 48.394752][ T828] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 48.397757][ T828] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 48.401107][ T828] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 48.403477][ T828] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.407016][ T828] usb 7-1: config 0 descriptor?? [ 48.408855][ T6132] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 48.538266][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 48.540748][ T30] usb 6-1: config index 0 descriptor too short (expected 74, got 45) [ 48.542855][ T30] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 48.545721][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 48.548423][ T30] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 48.550968][ T30] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 48.554333][ T30] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 48.556790][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 48.763093][ T30] usb 6-1: GET_CAPABILITIES returned 0 [ 48.764589][ T30] usbtmc 6-1:16.0: can't read capabilities [ 48.817515][ T828] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 48.821353][ T828] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 48.826992][ T828] plantronics 0003:047F:FFFF.0004: hiddev1,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 48.965334][ C0] usbtmc 6-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 48.968225][ T6134] usbtmc 6-1:16.0: Unable to send data, error -71 [ 48.970689][ T828] usb 6-1: USB disconnect, device number 7 [ 49.019269][ T5983] usb 7-1: USB disconnect, device number 6 [ 49.544730][ T8] gspca_vc032x: reg_w err -71 [ 49.546024][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.548197][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.549581][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.551036][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.552430][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.553814][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.555222][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.556723][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.558107][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.559514][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.560919][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.562338][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.563729][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.565130][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.566540][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.568242][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.569648][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.571033][ T8] gspca_vc032x: I2c Bus Busy Wait 00 [ 49.572435][ T8] gspca_vc032x: Unknown sensor... [ 49.573778][ T8] vc032x 8-1:0.0: probe with driver vc032x failed with error -22 [ 49.576424][ T8] usb 8-1: USB disconnect, device number 6 [ 49.726731][ T829] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 49.776679][ T5983] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 49.876706][ T829] usb 6-1: Using ep0 maxpacket: 8 [ 49.879720][ T829] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 49.882511][ T829] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 49.885787][ T829] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 49.889491][ T829] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 49.892835][ T829] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 49.897283][ T829] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 49.900341][ T829] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.928166][ T5983] usb 7-1: config index 0 descriptor too short (expected 35577, got 27) [ 49.930356][ T5983] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 49.932559][ T5983] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 49.935169][ T5983] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 49.937560][ T5983] usb 7-1: config 1 has no interface number 0 [ 49.939146][ T5983] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 49.941474][ T5983] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.947010][ T5983] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found [ 50.109608][ T829] usb 6-1: GET_CAPABILITIES returned 0 [ 50.112407][ T829] usbtmc 6-1:16.0: can't read capabilities [ 50.147775][ T5983] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values [ 50.149932][ T5983] snd_usb_pod 7-1:1.1: invalid control EP [ 50.151462][ T5983] snd_usb_pod 7-1:1.1: cannot start listening: -22 [ 50.153293][ T5983] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected [ 50.155280][ T5983] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22 [ 50.306792][ T8] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 50.350185][ T5983] usb 7-1: USB disconnect, device number 7 [ 50.362918][ T6145] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.365238][ T6145] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.466776][ T8] usb 8-1: Using ep0 maxpacket: 32 [ 50.469449][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 50.471907][ T6147] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 50.474252][ T8] usb 8-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 50.474267][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 50.477342][ T6147] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 50.478832][ T8] usb 8-1: Product: syz [ 50.479468][ T40] audit: type=1400 audit(1731568560.683:210): avc: denied { rename } for pid=5344 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.479488][ T40] audit: type=1400 audit(1731568560.683:211): avc: denied { unlink } for pid=5344 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.479502][ T40] audit: type=1400 audit(1731568560.683:212): avc: denied { create } for pid=5344 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.498816][ T8] usb 8-1: Manufacturer: syz [ 50.500078][ T8] usb 8-1: SerialNumber: syz [ 50.502560][ T8] usb 8-1: config 0 descriptor?? [ 50.505230][ T8] quatech2 8-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 50.534868][ T5983] usb 6-1: USB disconnect, device number 8 [ 50.535418][ T6140] usbtmc 6-1:16.0: usb_control_msg returned -71 [ 50.538881][ T6146] usbtmc 6-1:16.0: usb_control_msg returned -19 [ 50.707113][ T8] usb 8-1: qt2_setup_urbs - submit read urb failed -8 [ 50.709611][ T8] quatech2 8-1:0.0: probe with driver quatech2 failed with error -8 [ 50.908612][ T5951] usb 8-1: USB disconnect, device number 7 [ 51.116722][ T1015] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 51.276849][ T1015] usb 7-1: Using ep0 maxpacket: 8 [ 51.279925][ T1015] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 51.282122][ T1015] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 51.284667][ T1015] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 51.287485][ T1015] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 51.290061][ T1015] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 51.293380][ T1015] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 51.295792][ T1015] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.470053][ T40] audit: type=1400 audit(1731568561.673:213): avc: denied { ioctl } for pid=6155 comm="syz.0.50" path="/dev/input/event2" dev="devtmpfs" ino=947 ioctlcmd=0x4518 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 51.496794][ T30] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 51.503932][ T1015] usb 7-1: usb_control_msg returned -32 [ 51.505460][ T1015] usbtmc 7-1:16.0: can't read capabilities [ 51.658603][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 51.661524][ T30] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 51.664020][ T30] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 51.666420][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.670145][ T30] usb 6-1: config 0 descriptor?? [ 51.676749][ T63] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 51.826678][ T63] usb 8-1: Using ep0 maxpacket: 8 [ 51.831385][ T63] usb 8-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 51.833759][ T63] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.835812][ T63] usb 8-1: Product: syz [ 51.837052][ T63] usb 8-1: Manufacturer: syz [ 51.838356][ T63] usb 8-1: SerialNumber: syz [ 51.840493][ T63] usb 8-1: config 0 descriptor?? [ 51.843127][ T63] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 52.077595][ T30] isku 0003:1E7D:319C.0005: hidraw1: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 52.477433][ T30] usb 6-1: USB disconnect, device number 9 [ 53.336672][ T35] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 53.496687][ T35] usb 6-1: Using ep0 maxpacket: 8 [ 53.499673][ T35] usb 6-1: config index 0 descriptor too short (expected 301, got 45) [ 53.502140][ T35] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.504740][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.507515][ T35] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.510926][ T35] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.514327][ T35] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.516775][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.724393][ T35] usb 6-1: GET_CAPABILITIES returned 0 [ 53.725922][ T35] usbtmc 6-1:16.0: can't read capabilities [ 53.873673][ T35] usb 7-1: USB disconnect, device number 8 [ 53.928235][ T1015] usb 6-1: USB disconnect, device number 10 [ 54.266725][ T35] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 54.416657][ T35] usb 7-1: Using ep0 maxpacket: 32 [ 54.419478][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 54.422527][ T35] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 54.425206][ T35] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 54.428641][ T35] usb 7-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 54.431028][ T35] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.434488][ T35] usb 7-1: config 0 descriptor?? [ 54.848622][ T1015] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 54.852134][ T35] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0006/input/input8 [ 54.910943][ T35] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/0003:0458:5011.0006/input/input9 [ 54.918909][ T35] kye 0003:0458:5011.0006: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0 [ 55.014307][ T1015] usb 6-1: Using ep0 maxpacket: 8 [ 55.018931][ T1015] usb 6-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 55.021282][ T1015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.023379][ T1015] usb 6-1: Product: syz [ 55.024528][ T1015] usb 6-1: Manufacturer: syz [ 55.025776][ T1015] usb 6-1: SerialNumber: syz [ 55.033023][ T1015] usb 6-1: config 0 descriptor?? [ 55.036107][ T1015] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 55.176335][ T40] audit: type=1400 audit(1731568565.373:214): avc: denied { append } for pid=6177 comm="syz.0.58" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 55.440878][ T6171] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 55.443150][ T6171] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 55.457854][ T63] gspca_sonixj: reg_w1 err -71 [ 55.459179][ T63] sonixj 8-1:0.0: probe with driver sonixj failed with error -71 [ 55.461983][ T63] usb 8-1: USB disconnect, device number 8 [ 55.464470][ T6086] udevd[6086]: setting owner of /dev/bus/usb/008/008 to uid=0, gid=0 failed: No such file or directory [ 55.846953][ T1015] gspca_zc3xx: reg_w_i err -71 [ 55.879261][ C3] kye 0003:0458:5011.0006: usb_submit_urb(ctrl) failed: -1 [ 55.994282][ T6180] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 55.997870][ T40] audit: type=1400 audit(1731568566.203:215): avc: denied { getopt } for pid=6179 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.412564][ T40] audit: type=1400 audit(1731568566.613:216): avc: denied { audit_write } for pid=6182 comm="syz.2.60" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 56.417915][ T40] audit: type=1400 audit(1731568566.623:217): avc: denied { unlink } for pid=6182 comm="syz.2.60" name="#1" dev="tmpfs" ino=73 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.423728][ T40] audit: type=1400 audit(1731568566.623:218): avc: denied { mount } for pid=6182 comm="syz.2.60" name="/" dev="overlay" ino=68 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 56.429751][ T40] audit: type=1400 audit(1731568566.623:219): avc: denied { create } for pid=6182 comm="syz.2.60" name="#3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.435239][ T40] audit: type=1400 audit(1731568566.623:220): avc: denied { link } for pid=6182 comm="syz.2.60" name="#3" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.441776][ T40] audit: type=1400 audit(1731568566.623:221): avc: denied { rename } for pid=6182 comm="syz.2.60" name="#4" dev="tmpfs" ino=75 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 56.503824][ T40] audit: type=1400 audit(1731568566.703:222): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 56.536016][ T40] audit: type=1400 audit(1731568566.733:223): avc: denied { create } for pid=6187 comm="syz.2.61" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 56.538434][ T6188] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 56.588739][ T6192] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 56.615266][ T6196] netlink: 'syz.3.65': attribute type 6 has an invalid length. [ 56.624831][ T6200] ======================================================= [ 56.624831][ T6200] WARNING: The mand mount option has been deprecated and [ 56.624831][ T6200] and is ignored by this kernel. Remove the mand [ 56.624831][ T6200] option from the mount to silence this warning. [ 56.624831][ T6200] ======================================================= [ 56.626650][ T1015] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 56.636258][ T1015] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 56.638527][ T6202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.67'. [ 56.641932][ T1015] usb 6-1: USB disconnect, device number 11 [ 56.660172][ T6089] usb 7-1: USB disconnect, device number 9 [ 56.670725][ T6202] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6202 comm=syz.3.67 [ 56.673576][ T6203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6203 comm=syz.3.67 [ 56.702639][ T6207] mkiss: ax0: crc mode is auto. [ 56.730547][ T6198] ecryptfs_parse_options: eCryptfs: unrecognized option [syz] [ 56.732596][ T6198] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 56.736146][ T6198] Error parsing options; rc = [-22] [ 56.758611][ T6210] netlink: 4 bytes leftover after parsing attributes in process `syz.2.69'. [ 56.819471][ T6214] macvlan1: mtu less than device minimum [ 56.956707][ T1015] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 57.136700][ T1015] usb 6-1: Using ep0 maxpacket: 8 [ 57.141455][ T1015] usb 6-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice=1d.9c [ 57.144659][ T1015] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.147576][ T1015] usb 6-1: Product: syz [ 57.149141][ T1015] usb 6-1: Manufacturer: syz [ 57.150776][ T1015] usb 6-1: SerialNumber: syz [ 57.154192][ T1015] usb 6-1: config 0 descriptor?? [ 57.158372][ T1015] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 57.358808][ T1015] gspca_zc3xx: reg_w_i err -71 [ 57.650532][ T6231] xt_hashlimit: size too large, truncated to 1048576 [ 57.701892][ T6242] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 57.801825][ T6235] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.804860][ T6234] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 57.883742][ T6248] netlink: 12 bytes leftover after parsing attributes in process `syz.1.78'. [ 57.910391][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz.3.80'. [ 57.913096][ T6255] netlink: 28 bytes leftover after parsing attributes in process `syz.3.80'. [ 57.938626][ T6260] netlink: 'syz.3.82': attribute type 62 has an invalid length. [ 58.116704][ T1015] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 58.118411][ T1015] gspca_zc3xx 6-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 58.121385][ T1015] usb 6-1: USB disconnect, device number 12 [ 58.202843][ T6279] netlink: 12 bytes leftover after parsing attributes in process `syz.0.88'. [ 58.213000][ T6279] SELinux: security_context_str_to_sid (rootlk) failed with errno=-22 [ 58.241274][ T6289] xt_hashlimit: size too large, truncated to 1048576 [ 58.248234][ T6292] netlink: 'syz.0.92': attribute type 2 has an invalid length. [ 58.304265][ T6292] netlink: 16 bytes leftover after parsing attributes in process `syz.0.92'. [ 58.331408][ T6302] netlink: 72 bytes leftover after parsing attributes in process `syz.0.93'. [ 58.443023][ T6308] netlink: 'syz.1.95': attribute type 9 has an invalid length. [ 58.575907][ T6319] input: syz0 as /devices/virtual/input/input10 [ 61.069336][ T40] kauditd_printk_skb: 69 callbacks suppressed [ 61.069352][ T40] audit: type=1400 audit(1731568571.273:293): avc: denied { create } for pid=6322 comm="syz.3.100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 61.073744][ T6323] Zero length message leads to an empty skb [ 61.113877][ T6325] Bluetooth: MGMT ver 1.23 [ 61.113878][ T40] audit: type=1400 audit(1731568571.313:294): avc: denied { write } for pid=6324 comm="syz.3.101" path="socket:[8086]" dev="sockfs" ino=8086 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 61.121857][ T40] audit: type=1400 audit(1731568571.313:295): avc: denied { shutdown } for pid=6324 comm="syz.3.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.127312][ T40] audit: type=1400 audit(1731568571.313:296): avc: denied { read } for pid=6324 comm="syz.3.101" dev="sockfs" ino=10880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.151747][ T40] audit: type=1400 audit(1731568571.353:297): avc: denied { open } for pid=6326 comm="syz.3.102" path="/dev/ttyqb" dev="devtmpfs" ino=394 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 61.351804][ T40] audit: type=1400 audit(1731568571.553:298): avc: denied { wake_alarm } for pid=6329 comm="syz.0.103" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 61.357348][ T40] audit: type=1400 audit(1731568571.553:299): avc: denied { create } for pid=6329 comm="syz.0.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 61.425350][ T6339] exFAT-fs (nullb0): invalid boot record signature [ 61.427216][ T6339] exFAT-fs (nullb0): failed to read boot sector [ 61.428856][ T6339] exFAT-fs (nullb0): failed to recognize exfat type [ 61.432990][ T6343] exFAT-fs (nullb0): invalid boot record signature [ 61.435283][ T6343] exFAT-fs (nullb0): failed to read boot sector [ 61.438089][ T6343] exFAT-fs (nullb0): failed to recognize exfat type [ 61.462191][ T40] audit: type=1400 audit(1731568571.663:300): avc: denied { mounton } for pid=6344 comm="syz.0.107" path="/24/file0/file0" dev="9p" ino=42080066 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 61.462670][ T6345] overlay: ./file1 is not a directory [ 61.481773][ T40] audit: type=1400 audit(1731568571.683:301): avc: denied { unmount } for pid=5943 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 61.612835][ T6351] netlink: 16 bytes leftover after parsing attributes in process `syz.0.109'. [ 61.719801][ T6354] netlink: 108 bytes leftover after parsing attributes in process `syz.0.110'. [ 61.722282][ T6354] netlink: 108 bytes leftover after parsing attributes in process `syz.0.110'. [ 61.724716][ T6354] netlink: 108 bytes leftover after parsing attributes in process `syz.0.110'. [ 61.799993][ T40] audit: type=1400 audit(1731568572.003:302): avc: denied { create } for pid=6362 comm="syz.0.113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.006353][ T6365] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.012044][ T6365] netlink: 52 bytes leftover after parsing attributes in process `syz.3.114'. [ 62.685550][ T6384] netlink: 'syz.0.119': attribute type 1 has an invalid length. [ 64.043231][ T6398] input: syz0 as /devices/virtual/input/input11 [ 64.045033][ T6398] input: failed to attach handler leds to device input11, error: -6 [ 64.577504][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.125'. [ 64.660393][ T6417] input: syz0 as /devices/virtual/input/input13 [ 64.682009][ T6417] ieee802154 phy0 wpan0: encryption failed: -22 [ 64.698131][ T6416] /dev/sr0: Can't open blockdev [ 64.785277][ T6421] xt_hashlimit: size too large, truncated to 1048576 [ 64.958574][ T6429] netlink: 44 bytes leftover after parsing attributes in process `syz.3.129'. [ 65.000046][ T6431] kvm: user requested TSC rate below hardware speed [ 65.004593][ T6431] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 65.007656][ T6431] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 65.038693][ T6431] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 65.171240][ T6436] netlink: 12 bytes leftover after parsing attributes in process `syz.3.131'. [ 65.201690][ T5983] IPVS: starting estimator thread 0... [ 65.286790][ T6441] IPVS: using max 21 ests per chain, 50400 per kthread [ 65.949325][ T6455] trusted_key: syz.0.136 sent an empty control message without MSG_MORE. [ 66.036677][ T63] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 66.190026][ T63] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 66.192454][ T63] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.194550][ T63] usb 7-1: Product: syz [ 66.195659][ T63] usb 7-1: Manufacturer: syz [ 66.196987][ T63] usb 7-1: SerialNumber: syz [ 66.200726][ T63] usb 7-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 66.216039][ T63] usb 7-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 66.418898][ T6448] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.421178][ T6448] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.430545][ T6127] usb 7-1: USB disconnect, device number 10 [ 66.894665][ T40] kauditd_printk_skb: 22 callbacks suppressed [ 66.894676][ T40] audit: type=1400 audit(1731568577.093:325): avc: denied { view } for pid=6463 comm="syz.0.138" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 66.995299][ T40] audit: type=1326 audit(1731568577.193:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6469 comm="syz.2.141" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15be57e719 code=0x0 [ 67.246678][ T63] ath9k_htc 7-1:1.0: ath9k_htc: Target is unresponsive [ 67.249001][ T63] ath9k_htc: Failed to initialize the device [ 67.252391][ T6127] usb 7-1: ath9k_htc: USB layer deinitialized [ 67.827279][ T40] audit: type=1400 audit(1731568578.033:327): avc: denied { name_bind } for pid=6482 comm="syz.2.145" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 67.871194][ T40] audit: type=1400 audit(1731568578.073:328): avc: denied { read write } for pid=6487 comm="syz.0.146" name="btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.879191][ T40] audit: type=1400 audit(1731568578.073:329): avc: denied { open } for pid=6487 comm="syz.0.146" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 67.885800][ T40] audit: type=1400 audit(1731568578.073:330): avc: denied { write } for pid=6487 comm="syz.0.146" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 67.891904][ T40] audit: type=1400 audit(1731568578.073:331): avc: denied { create } for pid=6487 comm="syz.0.146" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 67.902122][ T40] audit: type=1400 audit(1731568578.103:332): avc: denied { setattr } for pid=6490 comm="syz.0.147" name="event0" dev="devtmpfs" ino=941 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 67.902716][ T6493] 9pnet: Could not find request transport: rdm¦¡po 1 [ 69.212889][ T5944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.215884][ T5944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.218790][ T5944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.221556][ T5944] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 69.223617][ T5944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.255642][ T1165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.299805][ T6553] chnl_net:caif_netlink_parms(): no params data found [ 69.338406][ T1165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.369261][ T6553] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.371147][ T6553] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.373365][ T6553] bridge_slave_0: entered allmulticast mode [ 69.375381][ T6553] bridge_slave_0: entered promiscuous mode [ 69.378194][ T6553] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.380049][ T6553] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.381916][ T6553] bridge_slave_1: entered allmulticast mode [ 69.383920][ T6553] bridge_slave_1: entered promiscuous mode [ 69.410287][ T6553] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.416061][ T6553] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.417253][ T6564] overlay: Unknown parameter 'fsmagic' [ 69.449412][ T6553] team0: Port device team_slave_0 added [ 69.452267][ T6553] team0: Port device team_slave_1 added [ 69.478738][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.480646][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.487855][ T6553] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.491469][ T6553] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.493298][ T6553] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.500521][ T6553] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.503682][ T1165] bridge_slave_1: left allmulticast mode [ 69.505845][ T1165] bridge_slave_1: left promiscuous mode [ 69.509257][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.514038][ T1165] bridge_slave_0: left allmulticast mode [ 69.515982][ T1165] bridge_slave_0: left promiscuous mode [ 69.519333][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.739612][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 69.745760][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 69.750813][ T1165] bond0 (unregistering): Released all slaves [ 69.803049][ T6568] netlink: 'syz.2.168': attribute type 4 has an invalid length. [ 69.808152][ T6553] hsr_slave_0: entered promiscuous mode [ 69.811105][ T6553] hsr_slave_1: entered promiscuous mode [ 69.817966][ T6553] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.821413][ T6553] Cannot create hsr debugfs directory [ 70.030328][ T6583] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 70.037382][ T6583] netlink: 'syz.2.172': attribute type 10 has an invalid length. [ 70.040774][ T6583] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.043446][ T6583] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.052286][ T6583] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.054306][ T6583] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.056722][ T6583] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.058606][ T6583] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.063637][ T6583] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 70.080692][ T1165] hsr_slave_0: left promiscuous mode [ 70.082728][ T1165] hsr_slave_1: left promiscuous mode [ 70.084809][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.086884][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.089974][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.091975][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.107924][ T1165] veth1_macvtap: left promiscuous mode [ 70.109797][ T1165] veth0_macvtap: left promiscuous mode [ 70.111375][ T1165] veth1_vlan: left promiscuous mode [ 70.112944][ T1165] veth0_vlan: left promiscuous mode [ 70.622166][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 70.680628][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 71.012037][ T1410] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.013755][ T1410] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.147508][ T39] bond0: (slave bridge0): link status definitely up, 0 Mbps full duplex [ 71.247259][ T5957] Bluetooth: hci1: command tx timeout [ 71.251795][ T6610] capability: warning: `syz.2.178' uses deprecated v2 capabilities in a way that may be insecure [ 71.336145][ T6553] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.340521][ T6553] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.343630][ T6553] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.345348][ T6618] cgroup: none used incorrectly [ 71.348836][ T6553] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.390784][ T6553] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.402146][ T6553] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.406146][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.408184][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.424338][ T6553] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.427674][ T6553] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.431563][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.433494][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.462777][ T6633] gretap0: entered allmulticast mode [ 71.501722][ T6553] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.518081][ T6553] veth0_vlan: entered promiscuous mode [ 71.522029][ T6553] veth1_vlan: entered promiscuous mode [ 71.533482][ T6553] veth0_macvtap: entered promiscuous mode [ 71.536411][ T6553] veth1_macvtap: entered promiscuous mode [ 71.544169][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.547873][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.550396][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.553064][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.555570][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.558342][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.561569][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.565680][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.568553][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.571069][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.573763][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.576426][ T6553] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.579285][ T6553] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.582513][ T6553] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.585958][ T6553] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.588504][ T6553] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.590792][ T6553] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.593074][ T6553] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.618707][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.620898][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.630402][ T189] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.632444][ T189] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.637778][ T6640] Unknown status report in ack skb [ 71.668161][ T6645] netlink: 'syz.0.165': attribute type 10 has an invalid length. [ 71.672812][ T6645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.677559][ T6645] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 71.783150][ T6651] random: crng reseeded on system resumption [ 71.839652][ T6659] nfs4: Unknown parameter 'PL' [ 71.928516][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 71.928526][ T40] audit: type=1400 audit(1731568582.133:369): avc: denied { ioctl } for pid=6648 comm="syz.3.184" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 71.998263][ T5297] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 72.044433][ T6666] mkiss: ax0: crc mode is auto. [ 72.047242][ T6666] netlink: 128 bytes leftover after parsing attributes in process `syz.0.188'. [ 72.133099][ T6673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 72.136644][ T6673] tipc: MTU too low for tipc bearer [ 72.138888][ T6673] process 'syz.0.189' launched './file0' with NULL argv: empty string added [ 72.141731][ T40] audit: type=1400 audit(1731568582.343:370): avc: denied { execute_no_trans } for pid=6672 comm="syz.0.189" path="/5/file0" dev="tmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 72.150514][ T5297] usb 7-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 72.152899][ T5297] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.155233][ T5297] usb 7-1: Product: syz [ 72.156347][ T5297] usb 7-1: Manufacturer: syz [ 72.157808][ T5297] usb 7-1: SerialNumber: syz [ 72.159938][ T5297] usb 7-1: config 0 descriptor?? [ 72.367126][ T40] audit: type=1400 audit(1731568582.573:371): avc: denied { bind } for pid=6646 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 72.368213][ T1015] usb 7-1: USB disconnect, device number 11 [ 72.934250][ T40] audit: type=1400 audit(1731568583.133:372): avc: denied { watch watch_reads } for pid=6687 comm="syz.2.194" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1025 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 73.074415][ T6697] netlink: 48 bytes leftover after parsing attributes in process `syz.2.196'. [ 73.327409][ T5957] Bluetooth: hci1: command tx timeout [ 73.486704][ T6127] vhci_hcd: vhci_device speed not set [ 73.916562][ T6701] tipc: MTU too low for tipc bearer [ 73.924382][ T40] audit: type=1400 audit(1731568584.123:373): avc: denied { bind } for pid=6700 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 73.929581][ T40] audit: type=1400 audit(1731568584.123:374): avc: denied { connect } for pid=6700 comm="syz.2.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 74.050325][ T40] audit: type=1400 audit(1731568584.253:375): avc: denied { read } for pid=6702 comm="syz.2.199" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 74.056257][ T40] audit: type=1400 audit(1731568584.253:376): avc: denied { open } for pid=6702 comm="syz.2.199" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 75.098192][ T40] audit: type=1400 audit(1731568585.303:377): avc: denied { execute } for pid=6706 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.104924][ T40] audit: type=1400 audit(1731568585.303:378): avc: denied { execute_no_trans } for pid=6706 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 75.170793][ T5944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.173287][ T5944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.175622][ T5944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.179134][ T5944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.181291][ T5944] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.183281][ T5944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.251393][ T6707] chnl_net:caif_netlink_parms(): no params data found [ 75.292575][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.294705][ T6707] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.296752][ T6707] bridge_slave_0: entered allmulticast mode [ 75.298746][ T6707] bridge_slave_0: entered promiscuous mode [ 75.301393][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.303422][ T6707] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.305437][ T6707] bridge_slave_1: entered allmulticast mode [ 75.307629][ T6707] bridge_slave_1: entered promiscuous mode [ 75.337588][ T6707] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.341726][ T6707] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.352188][ T6716] netlink: 40 bytes leftover after parsing attributes in process `syz.0.201'. [ 75.368404][ T83] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.385823][ T6707] team0: Port device team_slave_0 added [ 75.390126][ T6707] team0: Port device team_slave_1 added [ 75.409202][ T5957] Bluetooth: hci1: command tx timeout [ 75.428132][ T83] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.432677][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.435016][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.443278][ T6707] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.446270][ T6722] netlink: 4 bytes leftover after parsing attributes in process `syz.0.204'. [ 75.455936][ T6707] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.458509][ T6707] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.465081][ T6707] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.488084][ T6707] hsr_slave_0: entered promiscuous mode [ 75.489963][ T6707] hsr_slave_1: entered promiscuous mode [ 75.502308][ T83] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.572382][ T6707] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.575623][ T6707] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.578945][ T6707] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.581894][ T6707] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.590804][ T6707] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.592686][ T6707] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.594650][ T6707] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.596510][ T6707] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.615681][ T83] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.628926][ T6707] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.635055][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.638731][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.647688][ T6707] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.654393][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.656967][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.661872][ T189] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.663873][ T189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.743349][ T83] bridge_slave_1: left allmulticast mode [ 75.744950][ T83] bridge_slave_1: left promiscuous mode [ 75.746481][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.750691][ T83] bridge_slave_0: left allmulticast mode [ 75.752247][ T83] bridge_slave_0: left promiscuous mode [ 75.753768][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.002758][ T83] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.006329][ T83] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.009836][ T83] bond0 (unregistering): Released all slaves [ 76.017376][ T6707] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.102389][ T6707] veth0_vlan: entered promiscuous mode [ 76.106386][ T6707] veth1_vlan: entered promiscuous mode [ 76.121320][ T6707] veth0_macvtap: entered promiscuous mode [ 76.124340][ T6707] veth1_macvtap: entered promiscuous mode [ 76.141490][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.144249][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.148092][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.148343][ T55] cfg80211: failed to load regulatory.db [ 76.150761][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.155010][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.160113][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.162623][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 76.165651][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.170090][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.209988][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.212740][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.215616][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.219663][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.222197][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.225069][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.228436][ T6707] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 76.231088][ T6707] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 76.234272][ T6707] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.240975][ T6707] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.243538][ T6707] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.245824][ T6707] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.248953][ T6707] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.276041][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.278373][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.304777][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.308519][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.356534][ T83] hsr_slave_0: left promiscuous mode [ 76.359286][ T83] hsr_slave_1: left promiscuous mode [ 76.361234][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 76.363165][ T83] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 76.367219][ T83] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 76.369183][ T83] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.385411][ T83] veth1_macvtap: left promiscuous mode [ 76.387018][ T83] veth0_macvtap: left promiscuous mode [ 76.388501][ T83] veth1_vlan: left promiscuous mode [ 76.389934][ T83] veth0_vlan: left promiscuous mode [ 76.907046][ T83] team0 (unregistering): Port device team_slave_1 removed [ 76.961949][ T83] team0 (unregistering): Port device team_slave_0 removed [ 77.249468][ T5957] Bluetooth: hci2: command tx timeout [ 77.487363][ T5957] Bluetooth: hci1: command tx timeout [ 77.498913][ T6787] hfs: unable to parse mount options [ 77.796345][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 77.796358][ T40] audit: type=1400 audit(1731568587.993:382): avc: denied { create } for pid=6820 comm="syz.4.215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 77.805218][ T40] audit: type=1400 audit(1731568588.003:383): avc: denied { name_bind } for pid=6820 comm="syz.4.215" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 77.811037][ T40] audit: type=1400 audit(1731568588.013:384): avc: denied { ioctl } for pid=6820 comm="syz.4.215" path="socket:[13239]" dev="sockfs" ino=13239 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 78.046955][ T40] audit: type=1400 audit(1731568588.243:385): avc: denied { sys_chroot } for pid=6846 comm="dhcpcd" capability=18 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 78.052428][ T40] audit: type=1400 audit(1731568588.253:386): avc: denied { setgid } for pid=6846 comm="dhcpcd" capability=6 scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=capability permissive=1 [ 78.058010][ T40] audit: type=1400 audit(1731568588.253:387): avc: denied { setrlimit } for pid=6846 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=process permissive=1 [ 79.328280][ T5957] Bluetooth: hci2: command tx timeout [ 80.522070][ T40] audit: type=1400 audit(1731568590.723:388): avc: denied { read write } for pid=6856 comm="syz.0.218" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 80.527981][ T40] audit: type=1400 audit(1731568590.723:389): avc: denied { open } for pid=6856 comm="syz.0.218" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 80.995190][ T40] audit: type=1400 audit(1731568591.193:390): avc: denied { read } for pid=6866 comm="syz.4.220" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.048293][ T6868] raw_sendmsg: syz.4.220 forgot to set AF_INET. Fix it! [ 81.127664][ T6872] netlink: 'syz.4.222': attribute type 2 has an invalid length. [ 81.129677][ T6872] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.222'. [ 81.151633][ T6874] warning: `syz.4.223' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 81.154063][ T40] audit: type=1400 audit(1731568591.353:391): avc: denied { connect } for pid=6873 comm="syz.4.223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 81.416825][ T5957] Bluetooth: hci2: command tx timeout [ 81.436681][ T6127] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 81.596686][ T6127] usb 9-1: Using ep0 maxpacket: 16 [ 81.599848][ T6127] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 81.602381][ T6127] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 81.604591][ T6127] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.607570][ T6127] usb 9-1: config 0 descriptor?? [ 81.611019][ T6127] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input15 [ 81.823026][ T5347] bcm5974 9-1:0.0: could not read from device [ 81.829031][ T6127] usb 9-1: USB disconnect, device number 2 [ 81.829197][ T5347] bcm5974 9-1:0.0: could not read from device [ 83.486728][ T5957] Bluetooth: hci2: command tx timeout [ 84.623732][ T40] audit: type=1400 audit(1731568594.823:392): avc: denied { mount } for pid=6910 comm="syz.0.230" name="/" dev="ramfs" ino=14075 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 84.691140][ T6915] hpfs: bad mount options. [ 84.787198][ T6919] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 86.048596][ T6929] netlink: 48 bytes leftover after parsing attributes in process `syz.4.236'. [ 86.071184][ T40] audit: type=1400 audit(1731568596.273:393): avc: denied { ioctl } for pid=6930 comm="syz.4.237" path="socket:[15485]" dev="sockfs" ino=15485 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 86.077968][ T40] audit: type=1400 audit(1731568596.273:394): avc: denied { append } for pid=6930 comm="syz.4.237" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.083953][ T40] audit: type=1400 audit(1731568596.273:395): avc: denied { ioctl } for pid=6930 comm="syz.4.237" path="/dev/ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 86.367411][ T6006] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 86.526850][ T6006] usb 9-1: Using ep0 maxpacket: 16 [ 86.530812][ T6006] usb 9-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 86.533178][ T6006] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.535223][ T6006] usb 9-1: Product: syz [ 86.536337][ T6006] usb 9-1: Manufacturer: syz [ 86.538196][ T6006] usb 9-1: SerialNumber: syz [ 86.541884][ T6006] r8152-cfgselector 9-1: Unknown version 0x0000 [ 86.543511][ T6006] r8152-cfgselector 9-1: config 0 descriptor?? [ 86.750804][ T6935] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 86.754114][ T6935] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 86.783759][ T6006] r8152-cfgselector 9-1: Unknown version 0x0000 [ 86.785515][ T6006] r8152-cfgselector 9-1: bad CDC descriptors [ 86.790095][ T6006] r8152-cfgselector 9-1: USB disconnect, device number 3 [ 87.208925][ T5944] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.211670][ T5944] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.214334][ T5944] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.217740][ T5944] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.220316][ T5944] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 87.223001][ T5944] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.302499][ T6937] chnl_net:caif_netlink_parms(): no params data found [ 87.304677][ T40] audit: type=1400 audit(1731568597.503:396): avc: denied { read write } for pid=6942 comm="syz.4.241" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.310719][ T40] audit: type=1400 audit(1731568597.503:397): avc: denied { open } for pid=6942 comm="syz.4.241" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 87.355200][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.357255][ T6937] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.359108][ T6937] bridge_slave_0: entered allmulticast mode [ 87.361039][ T6937] bridge_slave_0: entered promiscuous mode [ 87.363562][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.365362][ T6937] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.367292][ T6937] bridge_slave_1: entered allmulticast mode [ 87.369233][ T6937] bridge_slave_1: entered promiscuous mode [ 87.386227][ T6937] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.390962][ T6937] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.419790][ T40] audit: type=1400 audit(1731568597.623:398): avc: denied { listen } for pid=6949 comm="syz.4.242" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 87.422194][ T6937] team0: Port device team_slave_0 added [ 87.429428][ T6937] team0: Port device team_slave_1 added [ 87.448707][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.451218][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.458609][ T6937] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.462953][ T6937] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.464809][ T6937] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.472301][ T6937] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.495274][ T6937] hsr_slave_0: entered promiscuous mode [ 87.498399][ T6937] hsr_slave_1: entered promiscuous mode [ 87.500315][ T6937] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.502252][ T6937] Cannot create hsr debugfs directory [ 87.571434][ T6937] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 87.576329][ T6937] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 87.581446][ T6937] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 87.585427][ T6937] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 87.600012][ T6937] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.601855][ T6937] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.603778][ T6937] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.605601][ T6937] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.629416][ T6937] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.637695][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.640924][ T83] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.651675][ T6937] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.657027][ T6089] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 87.657858][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.660739][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.664842][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.666738][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.739490][ T6937] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.808012][ T6089] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 87.810744][ T6089] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.813707][ T6089] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.816263][ T6089] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 87.821515][ T6089] usb 9-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 87.823891][ T6089] usb 9-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 87.826438][ T6089] usb 9-1: Manufacturer: syz [ 87.831517][ T6089] usb 9-1: config 0 descriptor?? [ 87.837515][ T6937] veth0_vlan: entered promiscuous mode [ 87.842199][ T6937] veth1_vlan: entered promiscuous mode [ 87.855056][ T6937] veth0_macvtap: entered promiscuous mode [ 87.858764][ T6937] veth1_macvtap: entered promiscuous mode [ 87.867105][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.869762][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.872280][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.874897][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.877650][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.880296][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.882781][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.885412][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.889839][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.895622][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.898658][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.901071][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.903814][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.906289][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.909432][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.911895][ T6937] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.914609][ T6937] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.918085][ T6937] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.921744][ T6937] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.924070][ T6937] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.926237][ T6937] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.928807][ T6937] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.951994][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.953983][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.963435][ T1165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.965443][ T1165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.004385][ T40] audit: type=1400 audit(1731568598.203:399): avc: denied { create } for pid=6965 comm="syz.5.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.010191][ T40] audit: type=1400 audit(1731568598.203:400): avc: denied { create } for pid=6965 comm="syz.5.240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 88.022190][ T40] audit: type=1400 audit(1731568598.223:401): avc: denied { read } for pid=6965 comm="syz.5.240" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 88.028082][ T6966] autofs4:pid:6966:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 88.236672][ T6089] appleir 0003:05AC:8243.0007: unknown main item tag 0x0 [ 88.238707][ T6089] appleir 0003:05AC:8243.0007: No inputs registered, leaving [ 88.243115][ T6089] appleir 0003:05AC:8243.0007: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 88.568371][ T6089] usb 9-1: USB disconnect, device number 4 [ 88.945604][ T7000] tmpfs: Bad value for 'mpol' [ 89.064723][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.249'. [ 89.067610][ T7006] netlink: 28 bytes leftover after parsing attributes in process `syz.5.249'. [ 89.129008][ T5957] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 89.131690][ T5957] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 89.133901][ T5957] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 89.136205][ T5957] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 89.138335][ T5957] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 89.140557][ T5957] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 89.217745][ T7010] chnl_net:caif_netlink_parms(): no params data found [ 89.246726][ T5944] Bluetooth: hci4: command tx timeout [ 89.280452][ T7010] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.282349][ T7010] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.284427][ T7010] bridge_slave_0: entered allmulticast mode [ 89.288682][ T7010] bridge_slave_0: entered promiscuous mode [ 89.295088][ T7010] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.298030][ T7010] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.299964][ T7010] bridge_slave_1: entered allmulticast mode [ 89.301908][ T7010] bridge_slave_1: entered promiscuous mode [ 89.331862][ T7010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.336708][ T7010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.347099][ T63] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 89.363238][ T7010] team0: Port device team_slave_0 added [ 89.365895][ T7010] team0: Port device team_slave_1 added [ 89.388503][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.390272][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.397927][ T7010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.401659][ T7010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.403445][ T7010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.412032][ T7010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.438120][ T7010] hsr_slave_0: entered promiscuous mode [ 89.440097][ T7010] hsr_slave_1: entered promiscuous mode [ 89.441994][ T7010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.444148][ T7010] Cannot create hsr debugfs directory [ 89.516782][ T63] usb 9-1: Using ep0 maxpacket: 16 [ 89.517283][ T7010] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.519388][ T63] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 89.522660][ T63] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 89.524493][ T7010] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 89.525291][ T63] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.532115][ T63] usb 9-1: config 0 descriptor?? [ 89.532490][ T7010] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 89.536986][ T63] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input16 [ 89.549531][ T7010] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 89.583208][ T7010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.604405][ T7010] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.610599][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.612373][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.619202][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.621708][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.709036][ T7010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.748447][ T5347] bcm5974 9-1:0.0: could not read from device [ 89.754687][ T63] usb 9-1: USB disconnect, device number 5 [ 89.755688][ T5347] bcm5974 9-1:0.0: could not read from device [ 89.759330][ T5347] bcm5974 9-1:0.0: could not read from device [ 89.804787][ T7010] veth0_vlan: entered promiscuous mode [ 89.809456][ T7010] veth1_vlan: entered promiscuous mode [ 89.824619][ T7010] veth0_macvtap: entered promiscuous mode [ 89.828209][ T7010] veth1_macvtap: entered promiscuous mode [ 89.835828][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.839688][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.842364][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.845053][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.847704][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.850483][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.853370][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.856320][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.859308][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.862226][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.866052][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.873811][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.876662][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.879218][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.881879][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.884405][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.887834][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.890496][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.893215][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.895750][ T7010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.898607][ T7010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.902914][ T7010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.907481][ T7010] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.909841][ T7010] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.912242][ T7010] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.914525][ T7010] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.945638][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.948326][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.958831][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.960930][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.996101][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 89.996118][ T40] audit: type=1400 audit(1731568600.193:415): avc: denied { watch_mount } for pid=7051 comm="syz.6.248" path="/0" dev="tmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 90.013409][ T7052] mmap: syz.6.248 (7052) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 90.022802][ T40] audit: type=1400 audit(1731568600.223:416): avc: denied { name_connect } for pid=7051 comm="syz.6.248" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 90.136091][ T7059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.253'. [ 90.331858][ T7068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.254'. [ 90.336903][ T40] audit: type=1400 audit(1731568600.543:417): avc: denied { getopt } for pid=7066 comm="syz.4.254" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 90.918248][ T7072] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 90.984461][ T7076] Bluetooth: MGMT ver 1.23 [ 91.003726][ T7078] netlink: 'syz.0.259': attribute type 29 has an invalid length. [ 91.006087][ T7078] netlink: 'syz.0.259': attribute type 29 has an invalid length. [ 91.012629][ T7078] netlink: 'syz.0.259': attribute type 29 has an invalid length. [ 91.014723][ T7079] netlink: 'syz.0.259': attribute type 29 has an invalid length. [ 91.042126][ T7082] netlink: 84 bytes leftover after parsing attributes in process `syz.0.260'. [ 91.043420][ T7081] netlink: 84 bytes leftover after parsing attributes in process `syz.0.260'. [ 91.162328][ T40] audit: type=1400 audit(1731568601.363:418): avc: denied { getopt } for pid=7090 comm="syz.0.263" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.176790][ T5944] Bluetooth: hci5: command tx timeout [ 91.177275][ T40] audit: type=1400 audit(1731568601.383:419): avc: denied { name_bind } for pid=7090 comm="syz.0.263" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 91.201233][ T40] audit: type=1400 audit(1731568601.403:420): avc: denied { remount } for pid=7095 comm="syz.0.264" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 91.327045][ T5944] Bluetooth: hci4: command tx timeout [ 91.376794][ T5983] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 91.546722][ T5983] usb 9-1: Using ep0 maxpacket: 16 [ 91.550215][ T5983] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.552965][ T5983] usb 9-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 91.555312][ T5983] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.558894][ T5983] usb 9-1: config 0 descriptor?? [ 91.563988][ T5983] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.0/input/input17 [ 91.763668][ T5347] bcm5974 9-1:0.0: could not read from device [ 91.764799][ T5297] usb 9-1: USB disconnect, device number 6 [ 91.768632][ T6086] bcm5974 9-1:0.0: could not read from device [ 92.297681][ T7104] hpfs: Bad magic ... probably not HPFS [ 92.333189][ T7106] syzkaller1: entered promiscuous mode [ 92.334664][ T7106] syzkaller1: entered allmulticast mode [ 92.608211][ T40] audit: type=1400 audit(1731568602.813:421): avc: denied { create } for pid=7117 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 92.613136][ T40] audit: type=1400 audit(1731568602.813:422): avc: denied { setopt } for pid=7117 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.618358][ T40] audit: type=1400 audit(1731568602.813:423): avc: denied { write } for pid=7117 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.663444][ T40] audit: type=1400 audit(1731568602.863:424): avc: denied { read } for pid=7117 comm="syz.5.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 92.750750][ T7128] mmap: syz.5.273 (7128): VmData 37392384 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 92.806939][ T55] usb 9-1: new full-speed USB device number 7 using dummy_hcd [ 92.970792][ T55] usb 9-1: config index 0 descriptor too short (expected 65330, got 27) [ 92.973027][ T55] usb 9-1: too many endpoints for config 1 interface 0 altsetting 253: 132, using maximum allowed: 30 [ 92.976019][ T55] usb 9-1: config 1 interface 0 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 132 [ 92.979516][ T55] usb 9-1: config 1 interface 0 has no altsetting 0 [ 92.982963][ T55] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 92.985414][ T55] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.987742][ T55] usb 9-1: Product: syz [ 92.989823][ T55] usb 9-1: Manufacturer: syz [ 92.991232][ T55] usb 9-1: SerialNumber: syz [ 93.027184][ T63] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 93.176985][ T63] usb 10-1: Using ep0 maxpacket: 16 [ 93.184989][ T63] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 93.187873][ T63] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 93.190388][ T63] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.193396][ T63] usb 10-1: config 0 descriptor?? [ 93.193464][ T7135] netlink: 48 bytes leftover after parsing attributes in process `syz.6.276'. [ 93.196920][ T63] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input18 [ 93.247415][ T5944] Bluetooth: hci5: command tx timeout [ 93.275373][ T7140] program syz.6.278 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.406704][ T5944] Bluetooth: hci4: command tx timeout [ 93.599027][ T55] usblp 9-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 93.916800][ T6006] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 94.066695][ T6006] usb 11-1: Using ep0 maxpacket: 16 [ 94.069263][ T6006] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.072092][ T6006] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 94.074623][ T6006] usb 11-1: New USB device found, idVendor=056a, idProduct=0013, bcdDevice= 0.00 [ 94.077080][ T6006] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.080158][ T6006] usb 11-1: config 0 descriptor?? [ 94.284480][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.286959][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.289792][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.292467][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.294876][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.297431][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.299859][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.302119][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.304494][ T7144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.306900][ T7144] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 94.339568][ T7147] ebt_among: src integrity fail: 300 [ 94.388057][ T7151] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 94.432205][ T7156] overlay: filesystem on ./bus not supported as upperdir [ 94.470231][ T11] Bluetooth: hci6: Frame reassembly failed (-84) [ 94.527034][ T6006] usbhid 11-1:0.0: can't add hid device: -71 [ 94.528758][ T6006] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 94.534331][ T6006] usb 11-1: USB disconnect, device number 2 [ 95.054789][ T40] kauditd_printk_skb: 13 callbacks suppressed [ 95.054800][ T40] audit: type=1400 audit(1731568605.253:438): avc: denied { connect } for pid=7162 comm="syz.6.285" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 95.056059][ T7163] netlink: 112 bytes leftover after parsing attributes in process `syz.6.285'. [ 95.092335][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.6.286'. [ 95.328634][ T5957] Bluetooth: hci5: command tx timeout [ 95.486838][ T5957] Bluetooth: hci4: command tx timeout [ 95.566117][ T6127] usb 9-1: USB disconnect, device number 7 [ 95.569691][ T6127] usblp0: removed [ 95.588463][ T7173] dummy0: entered promiscuous mode [ 95.591074][ T7173] dummy0: left promiscuous mode [ 95.653066][ T40] audit: type=1400 audit(1731568605.853:439): avc: denied { ioctl } for pid=7174 comm="syz.4.290" path="socket:[17822]" dev="sockfs" ino=17822 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 95.667479][ T7175] syzkaller0: entered promiscuous mode [ 95.668980][ T7175] syzkaller0: entered allmulticast mode [ 95.791458][ T5347] bcm5974 10-1:0.0: could not read from device [ 95.795143][ T5347] bcm5974 10-1:0.0: could not read from device [ 95.795942][ T63] usb 10-1: USB disconnect, device number 2 [ 95.807051][ T40] audit: type=1400 audit(1731568606.003:440): avc: denied { read } for pid=5347 comm="acpid" name="event7" dev="devtmpfs" ino=2967 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 95.812927][ T40] audit: type=1400 audit(1731568606.003:441): avc: denied { open } for pid=5347 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=2967 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 95.819070][ T40] audit: type=1400 audit(1731568606.003:442): avc: denied { ioctl } for pid=5347 comm="acpid" path="/dev/input/event7" dev="devtmpfs" ino=2967 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 95.826939][ T40] audit: type=1400 audit(1731568606.033:443): avc: denied { append } for pid=7176 comm="syz.5.291" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.833050][ T40] audit: type=1400 audit(1731568606.033:444): avc: denied { map } for pid=7176 comm="syz.5.291" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.839835][ T40] audit: type=1400 audit(1731568606.033:445): avc: denied { write } for pid=7176 comm="syz.5.291" path="/dev/fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 95.849941][ T40] audit: type=1400 audit(1731568606.053:446): avc: denied { create } for pid=7176 comm="syz.5.291" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 96.152523][ T40] audit: type=1400 audit(1731568606.353:447): avc: denied { ioctl } for pid=7179 comm="syz.5.292" path="/dev/ptyqf" dev="devtmpfs" ino=142 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 96.536976][ T5944] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 96.538617][ T5957] Bluetooth: hci6: command 0x1003 tx timeout [ 96.580258][ T7185] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 96.581999][ T7185] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 96.584039][ T7185] vhci_hcd vhci_hcd.0: Device attached [ 96.635692][ T7186] vhci_hcd: cannot find a urb of seqnum 9 max seqnum 0 [ 96.639323][ T12] vhci_hcd: stop threads [ 96.640837][ T12] vhci_hcd: release socket [ 96.642361][ T12] vhci_hcd: disconnect device [ 96.747367][ T7189] netlink: 48 bytes leftover after parsing attributes in process `syz.5.294'. [ 96.817501][ T7191] netlink: 24 bytes leftover after parsing attributes in process `syz.5.295'. [ 96.839903][ T7193] 9pnet_virtio: no channels available for device syz [ 97.266748][ T828] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 97.406754][ T5944] Bluetooth: hci5: command tx timeout [ 97.426697][ T828] usb 10-1: Using ep0 maxpacket: 16 [ 97.429248][ T828] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 97.432095][ T828] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 97.434511][ T828] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.437697][ T828] usb 10-1: config 0 descriptor?? [ 97.441286][ T828] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input19 [ 97.566834][ T5944] Bluetooth: hci4: command tx timeout [ 97.937822][ T7214] syzkaller0: entered promiscuous mode [ 97.939392][ T7214] syzkaller0: entered allmulticast mode [ 97.947201][ T7214] netlink: 24 bytes leftover after parsing attributes in process `syz.4.302'. [ 98.194634][ T7223] binder_alloc: 7222: binder_alloc_buf size -384 failed, no address space [ 98.197577][ T7223] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 98.656819][ T6006] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 98.817797][ T6006] usb 11-1: Using ep0 maxpacket: 8 [ 98.820480][ T6006] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 98.823170][ T6006] usb 11-1: config 0 has no interfaces? [ 98.824652][ T6006] usb 11-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 98.827063][ T6006] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.830371][ T6006] usb 11-1: config 0 descriptor?? [ 99.238230][ T7238] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 99.240667][ T7238] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 99.244970][ T7238] i2c i2c-1: Invalid block write size 34 [ 99.250012][ T6127] usb 11-1: USB disconnect, device number 3 [ 99.835755][ T7260] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=7260 comm=syz.6.317 [ 99.839888][ T7260] netlink: 40 bytes leftover after parsing attributes in process `syz.6.317'. [ 99.864404][ T7262] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=7262 comm=syz.6.318 [ 99.934953][ T7269] overlay: Unknown parameter 'permit_directio' [ 100.022345][ T5347] bcm5974 10-1:0.0: could not read from device [ 100.025432][ T5347] bcm5974 10-1:0.0: could not read from device [ 100.027280][ T828] usb 10-1: USB disconnect, device number 3 [ 100.092262][ T40] kauditd_printk_skb: 21 callbacks suppressed [ 100.092273][ T40] audit: type=1400 audit(1731568610.293:469): avc: denied { ioctl } for pid=7276 comm="syz.6.323" path="net:[4026534018]" dev="nsfs" ino=4026534018 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 100.093482][ T7277] netlink: 'syz.6.323': attribute type 5 has an invalid length. [ 100.103915][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz.6.323'. [ 100.108650][ T7277] vlan2: entered promiscuous mode [ 100.146310][ T7284] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.153263][ T7284] team0: No ports can be present during mode change [ 100.157686][ T7284] netlink: 4 bytes leftover after parsing attributes in process `syz.6.325'. [ 100.172676][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.222893][ T7284] bridge_slave_0 (unregistering): left allmulticast mode [ 100.224891][ T7284] bridge_slave_0 (unregistering): left promiscuous mode [ 100.227123][ T7284] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.299637][ T7288] 9pnet_fd: Insufficient options for proto=fd [ 100.376011][ T40] audit: type=1400 audit(1731568610.573:470): avc: denied { map } for pid=7290 comm="syz.6.328" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 100.647019][ T55] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 100.796717][ T5951] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 100.817933][ T55] usb 11-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 100.821140][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 100.824162][ T55] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 100.827279][ T55] usb 11-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 100.830734][ T55] usb 11-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 100.833227][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.836685][ T55] usb 11-1: config 0 descriptor?? [ 100.838587][ T7291] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 100.956723][ T5951] usb 10-1: Using ep0 maxpacket: 16 [ 100.959879][ T5951] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 100.962567][ T5951] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 100.965040][ T5951] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.968518][ T5951] usb 10-1: config 0 descriptor?? [ 100.972252][ T5951] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input20 [ 101.042768][ T55] plantronics 0003:047F:FFFF.0008: unknown main item tag 0xd [ 101.045757][ T55] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving [ 101.049811][ T55] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 101.170529][ T7300] i2c i2c-1: Invalid block write size 34 [ 101.177220][ T40] audit: type=1400 audit(1731568611.383:471): avc: denied { listen } for pid=7299 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.186240][ T40] audit: type=1400 audit(1731568611.383:472): avc: denied { accept } for pid=7299 comm="syz.0.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 101.242172][ T5944] Bluetooth: hci1: Malformed Event: 0x02 [ 101.300971][ T40] audit: type=1400 audit(1731568611.503:473): avc: denied { execmod } for pid=7290 comm="syz.6.328" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.307453][ T40] audit: type=1400 audit(1731568611.503:474): avc: denied { execute } for pid=7290 comm="syz.6.328" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 101.327835][ T40] audit: type=1326 audit(1731568611.533:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbe77e719 code=0x7ff00000 [ 101.334684][ T40] audit: type=1326 audit(1731568611.533:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbe77e719 code=0x7ff00000 [ 101.340681][ T40] audit: type=1326 audit(1731568611.533:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbe77e719 code=0x7ff00000 [ 101.346517][ T40] audit: type=1326 audit(1731568611.533:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7310 comm="syz.0.332" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dbe77e719 code=0x7ff00000 [ 101.734141][ T7316] netlink: 40 bytes leftover after parsing attributes in process `syz.4.334'. [ 102.467542][ T5297] usb 11-1: reset high-speed USB device number 4 using dummy_hcd [ 102.596727][ T5297] usb 11-1: device descriptor read/64, error -32 [ 102.836680][ T5297] usb 11-1: reset high-speed USB device number 4 using dummy_hcd [ 102.844659][ T7334] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 102.966675][ T5297] usb 11-1: device descriptor read/64, error -32 [ 103.206668][ T5297] usb 11-1: reset high-speed USB device number 4 using dummy_hcd [ 103.227049][ T5297] usb 11-1: device descriptor read/8, error -32 [ 103.560017][ T5347] bcm5974 10-1:0.0: could not read from device [ 103.580922][ T5347] bcm5974 10-1:0.0: could not read from device [ 103.584476][ T5951] usb 10-1: USB disconnect, device number 4 [ 103.585453][ T7338] geneve2: entered promiscuous mode [ 103.586813][ T5347] bcm5974 10-1:0.0: could not read from device [ 103.588977][ T7338] geneve2: entered allmulticast mode [ 103.690576][ T7341] infiniband syz1: set down [ 103.691974][ T7341] infiniband syz1: added syzkaller0 [ 103.724064][ T7348] misc userio: No port type given on /dev/userio [ 103.729431][ T7341] RDS/IB: syz1: added [ 103.730862][ T7341] smc: adding ib device syz1 with port count 1 [ 103.732565][ T7341] smc: ib device syz1 port 1 has pnetid [ 103.812495][ T7354] binder_alloc: 7353: binder_alloc_buf, no vma [ 103.815895][ T7355] binder: BINDER_SET_CONTEXT_MGR already set [ 103.826525][ T7355] binder: 7353:7355 ioctl 4018620d 20000300 returned -16 [ 103.925250][ T7364] sctp: [Deprecated]: syz.6.345 (pid 7364) Use of int in maxseg socket option. [ 103.925250][ T7364] Use struct sctp_assoc_value instead [ 104.059770][ T189] smc: removing ib device syz1 [ 104.108290][ T55] usb 11-1: USB disconnect, device number 4 [ 104.440228][ T7389] netlink: 'syz.5.352': attribute type 1 has an invalid length. [ 104.442508][ T7389] openvswitch: netlink: Actions may not be safe on all matching packets [ 104.450453][ T7391] usb usb7: usbfs: interface 0 claimed by hub while 'syz.0.353' resets device [ 104.454319][ T7391] openvswitch: netlink: Flow actions attr not present in new flow. [ 104.481875][ T7395] uprobe: syz.0.355:7395 failed to unregister, leaking uprobe [ 104.567242][ T55] usb 11-1: new high-speed USB device number 5 using dummy_hcd [ 104.717663][ T55] usb 11-1: Using ep0 maxpacket: 16 [ 104.720246][ T55] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 104.722829][ T55] usb 11-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 104.725230][ T55] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.737016][ T55] usb 11-1: config 0 descriptor?? [ 104.741794][ T55] input: bcm5974 as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:0.0/input/input22 [ 104.783665][ T7421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.361'. [ 104.786024][ T7421] netlink: 12 bytes leftover after parsing attributes in process `syz.0.361'. [ 104.792077][ T7421] netlink: 84 bytes leftover after parsing attributes in process `syz.0.361'. [ 104.833429][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.365'. [ 104.839285][ T7435] syz.4.365: attempt to access beyond end of device [ 104.839285][ T7435] nbd4: rw=0, sector=6, nr_sectors = 2 limit=0 [ 104.843171][ T7435] ADFS-fs (nbd4): error: unable to read block 3, try 0 [ 104.851563][ T55] IPVS: starting estimator thread 0... [ 104.942391][ T55] usb 11-1: USB disconnect, device number 5 [ 104.942621][ T5347] bcm5974 11-1:0.0: could not read from device [ 104.947226][ T6086] bcm5974 11-1:0.0: could not read from device [ 104.956695][ T7440] IPVS: using max 36 ests per chain, 86400 per kthread [ 105.018103][ T7449] 9pnet_fd: Insufficient options for proto=fd [ 105.075501][ T7459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7459 comm=syz.0.371 [ 105.080201][ T7459] netlink: 'syz.0.371': attribute type 1 has an invalid length. [ 105.092830][ T7459] 8021q: adding VLAN 0 to HW filter on device bond1 [ 105.107277][ T7459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.371'. [ 105.109675][ T7459] openvswitch: netlink: Flow key attr not present in new flow. [ 105.121003][ T7459] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 105.125175][ T7459] bond1: (slave batadv1): making interface the new active one [ 105.131277][ T7459] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 105.135929][ T7459] netlink: 20 bytes leftover after parsing attributes in process `syz.0.371'. [ 105.140871][ T7459] vlan2: entered promiscuous mode [ 105.142243][ T7459] bond1: entered promiscuous mode [ 105.143584][ T7459] batadv1: entered promiscuous mode [ 105.197831][ T40] kauditd_printk_skb: 71898 callbacks suppressed [ 105.197842][ T40] audit: type=1400 audit(1731568615.403:72377): avc: denied { write } for pid=7477 comm="syz.0.372" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.205623][ T40] audit: type=1400 audit(1731568615.403:72378): avc: denied { open } for pid=7477 comm="syz.0.372" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.224457][ T40] audit: type=1400 audit(1731568615.423:72379): avc: denied { ioctl } for pid=7477 comm="syz.0.372" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.227705][ T7454] cgroup: fork rejected by pids controller in /syz5 [ 105.476441][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.375'. [ 105.479642][ T7515] IPVS: Error joining to the multicast group [ 105.480382][ T40] audit: type=1400 audit(1731568615.683:72380): avc: denied { read append } for pid=7516 comm="syz.0.374" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 105.481981][ T7515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.375'. [ 105.540350][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.376'. [ 105.546039][ T7528] netlink: 1320 bytes leftover after parsing attributes in process `syz.6.375'. [ 105.798354][ T7551] netlink: 256 bytes leftover after parsing attributes in process `syz.4.380'. [ 105.813372][ T40] audit: type=1400 audit(1731568616.013:72381): avc: denied { read write } for pid=7550 comm="syz.4.380" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.820569][ T40] audit: type=1400 audit(1731568616.013:72382): avc: denied { open } for pid=7550 comm="syz.4.380" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 105.896786][ T5944] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 105.899210][ T5944] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.970889][ T40] audit: type=1400 audit(1731568616.173:72383): avc: denied { write } for pid=7554 comm="syz.5.381" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 105.980361][ T40] audit: type=1400 audit(1731568616.173:72384): avc: denied { ioctl } for pid=7554 comm="syz.5.381" path="socket:[20785]" dev="sockfs" ino=20785 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 105.987576][ T40] audit: type=1400 audit(1731568616.173:72385): avc: denied { getopt } for pid=7554 comm="syz.5.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 106.104258][ T5944] Bluetooth: hci4: unexpected event 0x01 length: 4 > 1 [ 106.377377][ T6172] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 106.443313][ T40] audit: type=1400 audit(1731568616.643:72386): avc: denied { getopt } for pid=7579 comm="syz.0.388" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 106.546738][ T6172] usb 10-1: Using ep0 maxpacket: 16 [ 106.549476][ T6172] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 106.552332][ T6172] usb 10-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 106.554769][ T6172] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.558359][ T6172] usb 10-1: config 0 descriptor?? [ 106.562974][ T6172] input: bcm5974 as /devices/platform/dummy_hcd.5/usb10/10-1/10-1:0.0/input/input23 [ 106.799848][ T7590] team0: Device ip6_vti0 is of different type [ 106.849640][ T5988] io_ti 5-1:0.0: Failed to load image "edgeport/down3.bin" err -110 [ 106.852179][ T5988] io_ti 5-1:0.0: probe with driver io_ti failed with error -110 [ 106.859325][ T5988] usb 5-1: USB disconnect, device number 5 [ 107.156707][ T5988] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.306658][ T5988] usb 5-1: Using ep0 maxpacket: 8 [ 107.309723][ T5988] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 107.312168][ T5988] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 107.314708][ T5988] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 107.317248][ T5988] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 107.320549][ T5988] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 107.322859][ T5988] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 107.414236][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.6.399'. [ 107.513969][ T7614] netlink: 4 bytes leftover after parsing attributes in process `syz.6.400'. [ 107.530068][ T5988] usb 5-1: GET_CAPABILITIES returned 0 [ 107.531589][ T5988] usbtmc 5-1:16.0: can't read capabilities [ 107.623676][ T7617] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7617 comm=syz.4.401 [ 107.638911][ T7620] netlink: 8 bytes leftover after parsing attributes in process `syz.6.402'. [ 107.672798][ T7622] ptrace attach of "/syz-executor exec"[7624] was attempted by "/syz-executor exec"[7622] [ 107.687826][ T7622] overlayfs: workdir and upperdir must be separate subtrees [ 107.735585][ T6127] usb 5-1: USB disconnect, device number 6 [ 107.792528][ T1165] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.864181][ T1165] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.931873][ T1165] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.994788][ T1165] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.998133][ T7636] netlink: 'syz.6.407': attribute type 9 has an invalid length. [ 108.046952][ T7636] nbd6: detected capacity change from 0 to 131072 [ 108.056569][ T6087] block nbd6: Send control failed (result -89) [ 108.058823][ T6087] block nbd6: Request send failed, requeueing [ 108.062787][ T5944] block nbd6: Receive control failed (result -32) [ 108.069828][ T3320] block nbd6: Dead connection, failed to find a fallback [ 108.072163][ T3320] block nbd6: shutting down sockets [ 108.073712][ T3320] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.076347][ T3320] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.080552][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.086708][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.089471][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.092576][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.092795][ T1165] bridge_slave_1: left allmulticast mode [ 108.094699][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.096496][ T1165] bridge_slave_1: left promiscuous mode [ 108.096716][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.099107][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.104857][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.107275][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.107632][ T1165] bridge_slave_0: left allmulticast mode [ 108.109337][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.110986][ T1165] bridge_slave_0: left promiscuous mode [ 108.113294][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.115205][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.117259][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.120569][ T11] [ 108.121482][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.121538][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.122233][ T11] ============================= [ 108.124217][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.124257][ T6087] ldm_validate_partition_table(): Disk read failed. [ 108.127862][ T11] WARNING: suspicious RCU usage [ 108.129626][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.132011][ T11] 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 Not tainted [ 108.133702][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.134937][ T11] ----------------------------- [ 108.138031][ T6087] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 108.138046][ T6087] Buffer I/O error on dev nbd6, logical block 0, async page read [ 108.138171][ T6087] Dev nbd6: unable to read RDB block 0 [ 108.140790][ T11] net/sched/sch_generic.c:1290 suspicious rcu_dereference_protected() usage! [ 108.140801][ T11] [ 108.140801][ T11] other info that might help us debug this: [ 108.140801][ T11] [ 108.140804][ T11] [ 108.140804][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 108.140811][ T11] 3 locks held by kworker/u32:0/11: [ 108.140818][ T11] #0: ffff88802354c948 [ 108.143071][ T6087] nbd6: unable to read partition table [ 108.144235][ T11] ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 108.164713][ T11] #1: ffffc900000e7d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 108.167872][ T11] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 108.170322][ T11] [ 108.170322][ T11] stack backtrace: [ 108.171818][ T11] CPU: 2 UID: 0 PID: 11 Comm: kworker/u32:0 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 108.174581][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.177437][ T11] Workqueue: bond0 bond_mii_monitor [ 108.178796][ T11] Call Trace: [ 108.179669][ T11] [ 108.180450][ T11] dump_stack_lvl+0x16c/0x1f0 [ 108.181686][ T11] lockdep_rcu_suspicious+0x210/0x3c0 [ 108.183161][ T11] dev_deactivate_queue+0x167/0x190 [ 108.184570][ T11] dev_deactivate_many+0xe7/0xb20 [ 108.185860][ T11] dev_deactivate+0xf9/0x1c0 [ 108.187136][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 108.188940][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.190946][ T11] linkwatch_do_dev+0x11e/0x160 [ 108.192730][ T11] linkwatch_sync_dev+0x181/0x210 [ 108.194577][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 108.196620][ T11] ethtool_op_get_link+0x1d/0x70 [ 108.198440][ T11] bond_check_dev_link+0x197/0x490 [ 108.200322][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 108.202222][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.204001][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 108.205835][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 108.207792][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.209533][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 108.211406][ T11] ? process_one_work+0x921/0x1ba0 [ 108.213218][ T11] ? lock_acquire+0x2f/0xb0 [ 108.214848][ T11] ? process_one_work+0x921/0x1ba0 [ 108.216682][ T11] process_one_work+0x9c5/0x1ba0 [ 108.218459][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 108.220522][ T11] ? __pfx_process_one_work+0x10/0x10 [ 108.222400][ T11] ? assign_work+0x1a0/0x250 [ 108.224121][ T11] worker_thread+0x6c8/0xf00 [ 108.225796][ T11] ? __pfx_worker_thread+0x10/0x10 [ 108.227595][ T11] kthread+0x2c1/0x3a0 [ 108.229053][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.230738][ T11] ? __pfx_kthread+0x10/0x10 [ 108.232343][ T11] ret_from_fork+0x45/0x80 [ 108.233882][ T11] ? __pfx_kthread+0x10/0x10 [ 108.235573][ T11] ret_from_fork_asm+0x1a/0x30 [ 108.237340][ T11] [ 108.239487][ T11] [ 108.240007][ T6087] ldm_validate_partition_table(): Disk read failed. [ 108.240318][ T11] ============================= [ 108.242263][ T6087] Dev nbd6: unable to read RDB block 0 [ 108.243577][ T11] WARNING: suspicious RCU usage [ 108.245200][ T6087] nbd6: unable to read partition table [ 108.246459][ T11] 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 Not tainted [ 108.249805][ T11] ----------------------------- [ 108.251079][ T11] include/linux/rtnetlink.h:100 suspicious rcu_dereference_protected() usage! [ 108.251892][ T7636] ldm_validate_partition_table(): Disk read failed. [ 108.253524][ T11] [ 108.253524][ T11] other info that might help us debug this: [ 108.253524][ T11] [ 108.253533][ T11] [ 108.253533][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 108.255967][ T7636] Dev nbd6: unable to read RDB block 0 [ 108.258036][ T11] 3 locks held by kworker/u32:0/11: [ 108.258045][ T11] #0: ffff88802354c948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 108.258081][ T11] #1: ffffc900000e7d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0} [ 108.262182][ T7636] nbd6: unable to read partition table [ 108.262972][ T11] , at: process_one_work+0x921/0x1ba0 [ 108.270940][ T11] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 108.271290][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 108.273457][ T11] [ 108.273457][ T11] stack backtrace: [ 108.273464][ T11] CPU: 2 UID: 0 PID: 11 Comm: kworker/u32:0 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 108.273477][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.273484][ T11] Workqueue: bond0 bond_mii_monitor [ 108.276566][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65535, location=65535 [ 108.280337][ T11] [ 108.280343][ T11] Call Trace: [ 108.283270][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65279, location=65279 [ 108.284616][ T11] [ 108.284624][ T11] dump_stack_lvl+0x16c/0x1f0 [ 108.284638][ T11] lockdep_rcu_suspicious+0x210/0x3c0 [ 108.284655][ T11] dev_deactivate_many+0x8af/0xb20 [ 108.284673][ T11] dev_deactivate+0xf9/0x1c0 [ 108.284687][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 108.284701][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.284720][ T11] linkwatch_do_dev+0x11e/0x160 [ 108.284733][ T11] linkwatch_sync_dev+0x181/0x210 [ 108.284746][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 108.284757][ T11] ethtool_op_get_link+0x1d/0x70 [ 108.290698][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65534, location=65534 [ 108.291228][ T11] bond_check_dev_link+0x197/0x490 [ 108.292060][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65278, location=65278 [ 108.293277][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 108.295460][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65533, location=65533 [ 108.296046][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.298043][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65277, location=65277 [ 108.298684][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 108.300345][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65385, location=65385 [ 108.301544][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 108.302905][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65129, location=65129 [ 108.304756][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.306150][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65383, location=65383 [ 108.309067][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 108.309084][ T11] ? process_one_work+0x921/0x1ba0 [ 108.309095][ T11] ? lock_acquire+0x2f/0xb0 [ 108.309104][ T11] ? process_one_work+0x921/0x1ba0 [ 108.309115][ T11] process_one_work+0x9c5/0x1ba0 [ 108.309130][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 108.309140][ T11] ? __pfx_process_one_work+0x10/0x10 [ 108.309153][ T11] ? assign_work+0x1a0/0x250 [ 108.309169][ T11] worker_thread+0x6c8/0xf00 [ 108.309184][ T11] ? __pfx_worker_thread+0x10/0x10 [ 108.309194][ T11] kthread+0x2c1/0x3a0 [ 108.314627][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=65127, location=65127 [ 108.316968][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.316986][ T11] ? __pfx_kthread+0x10/0x10 [ 108.316998][ T11] ret_from_fork+0x45/0x80 [ 108.317007][ T11] ? __pfx_kthread+0x10/0x10 [ 108.317019][ T11] ret_from_fork_asm+0x1a/0x30 [ 108.317039][ T11] [ 108.317542][ T11] BUG: sleeping function called from invalid context at net/core/dev.c:11284 [ 108.320031][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 108.320818][ T11] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 11, name: kworker/u32:0 [ 108.323149][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 108.324620][ T11] preempt_count: 0, expected: 0 [ 108.324628][ T11] RCU nest depth: 1, expected: 0 [ 108.326113][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32767, location=32767 [ 108.328574][ T11] 3 locks held by kworker/u32:0/11: [ 108.328583][ T11] #0: ffff88802354c948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 108.328623][ T11] #1: ffffc900000e7d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 108.328650][ T11] #2: ffffffff8e1b8340 ( [ 108.332651][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32511, location=32511 [ 108.333767][ T11] rcu_read_lock [ 108.335167][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32766, location=32766 [ 108.336353][ T11] ){....}-{1:2} [ 108.338097][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32510, location=32510 [ 108.339028][ T11] , at: bond_mii_monitor+0x140/0x2d90 [ 108.340569][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32765, location=32765 [ 108.341883][ T11] CPU: 2 UID: 0 PID: 11 Comm: kworker/u32:0 Not tainted 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 108.343140][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32509, location=32509 [ 108.344278][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.345666][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32617, location=32617 [ 108.346667][ T11] Workqueue: bond0 bond_mii_monitor [ 108.346685][ T11] Call Trace: [ 108.346689][ T11] [ 108.346693][ T11] dump_stack_lvl+0x16c/0x1f0 [ 108.346706][ T11] __might_resched+0x3c0/0x5e0 [ 108.346719][ T11] ? __pfx___might_resched+0x10/0x10 [ 108.346730][ T11] ? dev_deactivate_many+0x260/0xb20 [ 108.346747][ T11] synchronize_net+0x1b/0x60 [ 108.346761][ T11] dev_deactivate_many+0x2a1/0xb20 [ 108.346777][ T11] dev_deactivate+0xf9/0x1c0 [ 108.351994][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32361, location=32361 [ 108.352986][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 108.354273][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32615, location=32615 [ 108.355437][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.356326][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=32359, location=32359 [ 108.358500][ T11] linkwatch_do_dev+0x11e/0x160 [ 108.358520][ T11] linkwatch_sync_dev+0x181/0x210 [ 108.358534][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 108.358544][ T11] ethtool_op_get_link+0x1d/0x70 [ 108.358554][ T11] bond_check_dev_link+0x197/0x490 [ 108.358567][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 108.392489][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 108.394900][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.399092][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=256, location=256 [ 108.400135][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 108.402799][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16383, location=16383 [ 108.403972][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 108.404910][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16127, location=16127 [ 108.405568][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.407051][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16382, location=16382 [ 108.408015][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 108.409493][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16126, location=16126 [ 108.410741][ T11] ? process_one_work+0x921/0x1ba0 [ 108.412041][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16381, location=16381 [ 108.413298][ T11] ? lock_acquire+0x2f/0xb0 [ 108.413315][ T11] ? process_one_work+0x921/0x1ba0 [ 108.413326][ T11] process_one_work+0x9c5/0x1ba0 [ 108.413341][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 108.414644][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16125, location=16125 [ 108.417073][ T11] ? __pfx_process_one_work+0x10/0x10 [ 108.417099][ T11] ? assign_work+0x1a0/0x250 [ 108.417115][ T11] worker_thread+0x6c8/0xf00 [ 108.417131][ T11] ? __pfx_worker_thread+0x10/0x10 [ 108.417141][ T11] kthread+0x2c1/0x3a0 [ 108.417152][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.417166][ T11] ? __pfx_kthread+0x10/0x10 [ 108.418969][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16233, location=16233 [ 108.421058][ T11] ret_from_fork+0x45/0x80 [ 108.422734][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=15977, location=15977 [ 108.425140][ T11] ? __pfx_kthread+0x10/0x10 [ 108.426522][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=16231, location=16231 [ 108.427774][ T11] ret_from_fork_asm+0x1a/0x30 [ 108.427803][ T11] [ 108.428358][ T11] [ 108.429637][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=15975, location=15975 [ 108.430791][ T11] ============================= [ 108.432237][ T7636] UDF-fs: error (device nbd6): udf_read_tagged: read failed, block=512, location=512 [ 108.433606][ T11] WARNING: suspicious RCU usage [ 108.436094][ T7636] UDF-fs: warning (device nbd6): udf_fill_super: No partition found (1) [ 108.437411][ T11] 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 Tainted: G W [ 108.501065][ T11] ----------------------------- [ 108.502333][ T11] kernel/rcu/tree_exp.h:946 Illegal synchronize_rcu_expedited() in RCU read-side critical section! [ 108.505050][ T11] [ 108.505050][ T11] other info that might help us debug this: [ 108.505050][ T11] [ 108.507750][ T11] [ 108.507750][ T11] rcu_scheduler_active = 2, debug_locks = 1 [ 108.509834][ T11] 3 locks held by kworker/u32:0/11: [ 108.511185][ T11] #0: ffff88802354c948 ((wq_completion)bond0#2){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 108.513919][ T11] #1: ffffc900000e7d80 ((work_completion)(&(&bond->mii_work)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 108.517142][ T11] #2: ffffffff8e1b8340 (rcu_read_lock){....}-{1:2}, at: bond_mii_monitor+0x140/0x2d90 [ 108.519637][ T11] [ 108.519637][ T11] stack backtrace: [ 108.521183][ T11] CPU: 2 UID: 0 PID: 11 Comm: kworker/u32:0 Tainted: G W 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 108.524278][ T11] Tainted: [W]=WARN [ 108.525278][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.527959][ T11] Workqueue: bond0 bond_mii_monitor [ 108.529282][ T11] Call Trace: [ 108.530138][ T11] [ 108.530901][ T11] dump_stack_lvl+0x16c/0x1f0 [ 108.532111][ T11] lockdep_rcu_suspicious+0x210/0x3c0 [ 108.533494][ T11] synchronize_rcu_expedited+0x1e5/0x450 [ 108.534923][ T11] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 108.536490][ T11] ? dump_stack_lvl+0x1a1/0x1f0 [ 108.537774][ T11] ? dump_stack_lvl+0x1a3/0x1f0 [ 108.539054][ T11] ? add_taint+0x5f/0xd0 [ 108.540180][ T11] ? __pfx___might_resched+0x10/0x10 [ 108.541559][ T11] ? dev_deactivate_many+0x260/0xb20 [ 108.542947][ T11] synchronize_net+0x3e/0x60 [ 108.544176][ T11] dev_deactivate_many+0x2a1/0xb20 [ 108.545522][ T11] dev_deactivate+0xf9/0x1c0 [ 108.546746][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 108.548118][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.549664][ T11] linkwatch_do_dev+0x11e/0x160 [ 108.550910][ T11] linkwatch_sync_dev+0x181/0x210 [ 108.552235][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 108.553699][ T11] ethtool_op_get_link+0x1d/0x70 [ 108.555003][ T11] bond_check_dev_link+0x197/0x490 [ 108.556352][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 108.557812][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.559068][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 108.560379][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 108.561777][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.563028][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 108.564395][ T11] ? process_one_work+0x921/0x1ba0 [ 108.565726][ T11] ? lock_acquire+0x2f/0xb0 [ 108.566904][ T11] ? process_one_work+0x921/0x1ba0 [ 108.568188][ T11] process_one_work+0x9c5/0x1ba0 [ 108.569485][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 108.570949][ T11] ? __pfx_process_one_work+0x10/0x10 [ 108.572361][ T11] ? assign_work+0x1a0/0x250 [ 108.573583][ T11] worker_thread+0x6c8/0xf00 [ 108.574809][ T11] ? __pfx_worker_thread+0x10/0x10 [ 108.576145][ T11] kthread+0x2c1/0x3a0 [ 108.577216][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.578568][ T11] ? __pfx_kthread+0x10/0x10 [ 108.579795][ T11] ret_from_fork+0x45/0x80 [ 108.580973][ T11] ? __pfx_kthread+0x10/0x10 [ 108.582192][ T11] ret_from_fork_asm+0x1a/0x30 [ 108.583456][ T11] [ 108.584690][ T11] ------------[ cut here ]------------ [ 108.586118][ T11] Voluntary context switch within RCU read-side critical section! [ 108.586175][ T11] WARNING: CPU: 1 PID: 11 at kernel/rcu/tree_plugin.h:331 rcu_note_context_switch+0xc5c/0x1ae0 [ 108.591371][ T11] Modules linked in: [ 108.592399][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u32:0 Tainted: G W 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 108.595548][ T11] Tainted: [W]=WARN [ 108.596566][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.599345][ T11] Workqueue: bond0 bond_mii_monitor [ 108.600726][ T11] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 108.602382][ T11] Code: 79 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 52 c3 d2 0e 01 90 48 c7 c7 40 a5 6e 8b e8 f5 1d d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 108.607346][ T11] RSP: 0018:ffffc900000e74f8 EFLAGS: 00010086 [ 108.608976][ T11] RAX: 0000000000000000 RBX: ffff88806a73fe80 RCX: ffffffff814e6e79 [ 108.611005][ T11] RDX: ffff88801daa2440 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 108.613033][ T11] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 108.615092][ T11] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801daa2440 [ 108.617288][ T11] R13: ffff88801daa2440 R14: ffff88801daa2440 R15: ffff88806a73eec0 [ 108.619493][ T11] FS: 0000000000000000(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 108.621853][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 108.623600][ T11] CR2: 0000000000000000 CR3: 0000000028ce4000 CR4: 0000000000352ef0 [ 108.625682][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 108.627742][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 108.629743][ T11] Call Trace: [ 108.630615][ T11] [ 108.631400][ T11] ? __warn+0xea/0x3d0 [ 108.632504][ T11] ? hlock_class+0x4e/0x130 [ 108.633745][ T11] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 108.635244][ T11] ? report_bug+0x3c0/0x580 [ 108.636405][ T11] ? handle_bug+0x54/0xa0 [ 108.637525][ T11] ? exc_invalid_op+0x17/0x50 [ 108.638760][ T11] ? asm_exc_invalid_op+0x1a/0x20 [ 108.640095][ T11] ? __warn_printk+0x199/0x350 [ 108.641372][ T11] ? __warn_printk+0x1a6/0x350 [ 108.642638][ T11] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 108.644134][ T11] ? rcu_note_context_switch+0xc5b/0x1ae0 [ 108.645628][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.646885][ T11] ? schedule+0xe7/0x350 [ 108.648019][ T11] __schedule+0x297/0x5740 [ 108.649199][ T11] ? __pfx___lock_acquire+0x10/0x10 [ 108.650563][ T11] ? find_held_lock+0x2d/0x110 [ 108.651824][ T11] ? __pfx___schedule+0x10/0x10 [ 108.653100][ T11] ? schedule+0x298/0x350 [ 108.654250][ T11] ? __pfx_lock_release+0x10/0x10 [ 108.655561][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 108.656930][ T11] ? lock_acquire+0x2f/0xb0 [ 108.658112][ T11] ? schedule+0x1fd/0x350 [ 108.659244][ T11] schedule+0xe7/0x350 [ 108.660322][ T11] exp_funnel_lock+0x344/0x3b0 [ 108.661576][ T11] ? __pfx_exp_funnel_lock+0x10/0x10 [ 108.662955][ T11] ? __pfx_autoremove_wake_function+0x10/0x10 [ 108.664557][ T11] ? __pfx___might_resched+0x10/0x10 [ 108.665936][ T11] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 108.667385][ T11] synchronize_rcu_expedited+0x290/0x450 [ 108.668855][ T11] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 108.670454][ T11] ? dump_stack_lvl+0x1a1/0x1f0 [ 108.671728][ T11] ? dump_stack_lvl+0x1a3/0x1f0 [ 108.673006][ T11] ? add_taint+0x5f/0xd0 [ 108.674128][ T11] ? __pfx___might_resched+0x10/0x10 [ 108.675508][ T11] ? dev_deactivate_many+0x260/0xb20 [ 108.676895][ T11] synchronize_net+0x3e/0x60 [ 108.678108][ T11] dev_deactivate_many+0x2a1/0xb20 [ 108.679456][ T11] dev_deactivate+0xf9/0x1c0 [ 108.680681][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 108.682037][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.683590][ T11] linkwatch_do_dev+0x11e/0x160 [ 108.684875][ T11] linkwatch_sync_dev+0x181/0x210 [ 108.686196][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 108.687664][ T11] ethtool_op_get_link+0x1d/0x70 [ 108.688971][ T11] bond_check_dev_link+0x197/0x490 [ 108.690316][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 108.691780][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.693047][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 108.694362][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 108.695776][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.697006][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 108.698360][ T11] ? process_one_work+0x921/0x1ba0 [ 108.699692][ T11] ? lock_acquire+0x2f/0xb0 [ 108.700894][ T11] ? process_one_work+0x921/0x1ba0 [ 108.702229][ T11] process_one_work+0x9c5/0x1ba0 [ 108.703571][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 108.705048][ T11] ? __pfx_process_one_work+0x10/0x10 [ 108.706452][ T11] ? assign_work+0x1a0/0x250 [ 108.707668][ T11] worker_thread+0x6c8/0xf00 [ 108.708893][ T11] ? __pfx_worker_thread+0x10/0x10 [ 108.710236][ T11] kthread+0x2c1/0x3a0 [ 108.711307][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.712677][ T11] ? __pfx_kthread+0x10/0x10 [ 108.713890][ T11] ret_from_fork+0x45/0x80 [ 108.715066][ T11] ? __pfx_kthread+0x10/0x10 [ 108.716298][ T11] ret_from_fork_asm+0x1a/0x30 [ 108.717557][ T11] [ 108.718375][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 108.720262][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u32:0 Tainted: G W 6.12.0-rc7-syzkaller-00070-g0a9b9d17f3a7 #0 [ 108.723377][ T11] Tainted: [W]=WARN [ 108.724394][ T11] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 108.727153][ T11] Workqueue: bond0 bond_mii_monitor [ 108.728536][ T11] Call Trace: [ 108.729412][ T11] [ 108.730190][ T11] dump_stack_lvl+0x3d/0x1f0 [ 108.731409][ T11] panic+0x71d/0x800 [ 108.732449][ T11] ? __pfx_panic+0x10/0x10 [ 108.733623][ T11] ? show_trace_log_lvl+0x29d/0x3d0 [ 108.735002][ T11] ? check_panic_on_warn+0x1f/0xb0 [ 108.736357][ T11] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 108.737846][ T11] check_panic_on_warn+0xab/0xb0 [ 108.739199][ T11] __warn+0xf6/0x3d0 [ 108.740301][ T11] ? hlock_class+0x4e/0x130 [ 108.741497][ T11] ? rcu_note_context_switch+0xc5c/0x1ae0 [ 108.742973][ T11] report_bug+0x3c0/0x580 [ 108.744113][ T11] handle_bug+0x54/0xa0 [ 108.745206][ T11] exc_invalid_op+0x17/0x50 [ 108.746397][ T11] asm_exc_invalid_op+0x1a/0x20 [ 108.747670][ T11] RIP: 0010:rcu_note_context_switch+0xc5c/0x1ae0 [ 108.749413][ T11] Code: 79 00 4c 8b 54 24 30 48 8b 44 24 28 8b 4c 24 10 e9 c6 03 00 00 c6 05 52 c3 d2 0e 01 90 48 c7 c7 40 a5 6e 8b e8 f5 1d d9 ff 90 <0f> 0b 90 90 e9 a8 f4 ff ff 38 d0 7f 08 84 c0 0f 85 2b 08 00 00 80 [ 108.754422][ T11] RSP: 0018:ffffc900000e74f8 EFLAGS: 00010086 [ 108.756012][ T11] RAX: 0000000000000000 RBX: ffff88806a73fe80 RCX: ffffffff814e6e79 [ 108.758045][ T11] RDX: ffff88801daa2440 RSI: ffffffff814e6e86 RDI: 0000000000000001 [ 108.760087][ T11] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 108.762126][ T11] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88801daa2440 [ 108.764179][ T11] R13: ffff88801daa2440 R14: ffff88801daa2440 R15: ffff88806a73eec0 [ 108.766233][ T11] ? __warn_printk+0x199/0x350 [ 108.767489][ T11] ? __warn_printk+0x1a6/0x350 [ 108.768750][ T11] ? rcu_note_context_switch+0xc5b/0x1ae0 [ 108.770235][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.771494][ T11] ? schedule+0xe7/0x350 [ 108.772624][ T11] __schedule+0x297/0x5740 [ 108.773799][ T11] ? __pfx___lock_acquire+0x10/0x10 [ 108.775165][ T11] ? find_held_lock+0x2d/0x110 [ 108.776431][ T11] ? __pfx___schedule+0x10/0x10 [ 108.777710][ T11] ? schedule+0x298/0x350 [ 108.778853][ T11] ? __pfx_lock_release+0x10/0x10 [ 108.780175][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 108.781544][ T11] ? lock_acquire+0x2f/0xb0 [ 108.782745][ T11] ? schedule+0x1fd/0x350 [ 108.783891][ T11] schedule+0xe7/0x350 [ 108.784966][ T11] exp_funnel_lock+0x344/0x3b0 [ 108.786224][ T11] ? __pfx_exp_funnel_lock+0x10/0x10 [ 108.787606][ T11] ? __pfx_autoremove_wake_function+0x10/0x10 [ 108.789197][ T11] ? __pfx___might_resched+0x10/0x10 [ 108.790573][ T11] ? lockdep_rcu_suspicious+0x2ee/0x3c0 [ 108.792020][ T11] synchronize_rcu_expedited+0x290/0x450 [ 108.793476][ T11] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 108.795087][ T11] ? dump_stack_lvl+0x1a1/0x1f0 [ 108.796377][ T11] ? dump_stack_lvl+0x1a3/0x1f0 [ 108.797648][ T11] ? add_taint+0x5f/0xd0 [ 108.798776][ T11] ? __pfx___might_resched+0x10/0x10 [ 108.800162][ T11] ? dev_deactivate_many+0x260/0xb20 [ 108.801551][ T11] synchronize_net+0x3e/0x60 [ 108.802790][ T11] dev_deactivate_many+0x2a1/0xb20 [ 108.804140][ T11] dev_deactivate+0xf9/0x1c0 [ 108.805351][ T11] ? __pfx_dev_deactivate+0x10/0x10 [ 108.806704][ T11] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 108.808273][ T11] linkwatch_do_dev+0x11e/0x160 [ 108.809557][ T11] linkwatch_sync_dev+0x181/0x210 [ 108.810862][ T11] ? __pfx_ethtool_op_get_link+0x10/0x10 [ 108.812325][ T11] ethtool_op_get_link+0x1d/0x70 [ 108.813608][ T11] bond_check_dev_link+0x197/0x490 [ 108.814951][ T11] ? __pfx_bond_check_dev_link+0x10/0x10 [ 108.816416][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.817672][ T11] bond_mii_monitor+0x3c1/0x2d90 [ 108.818979][ T11] ? __pfx_bond_mii_monitor+0x10/0x10 [ 108.820388][ T11] ? rcu_is_watching+0x12/0xc0 [ 108.821637][ T11] ? trace_lock_acquire+0x14a/0x1d0 [ 108.822993][ T11] ? process_one_work+0x921/0x1ba0 [ 108.824337][ T11] ? lock_acquire+0x2f/0xb0 [ 108.825528][ T11] ? process_one_work+0x921/0x1ba0 [ 108.826860][ T11] process_one_work+0x9c5/0x1ba0 [ 108.828162][ T11] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 108.829627][ T11] ? __pfx_process_one_work+0x10/0x10 [ 108.830978][ T11] ? assign_work+0x1a0/0x250 [ 108.832209][ T11] worker_thread+0x6c8/0xf00 [ 108.833439][ T11] ? __pfx_worker_thread+0x10/0x10 [ 108.834785][ T11] kthread+0x2c1/0x3a0 [ 108.835863][ T11] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.837222][ T11] ? __pfx_kthread+0x10/0x10 [ 108.838435][ T11] ret_from_fork+0x45/0x80 [ 108.839599][ T11] ? __pfx_kthread+0x10/0x10 [ 108.840819][ T11] ret_from_fork_asm+0x1a/0x30 [ 108.842047][ T11] [ 108.843447][ T11] Kernel Offset: disabled [ 108.844653][ T11] Rebooting in 86400 seconds.. VM DIAGNOSIS: 07:16:58 Registers: info registers vcpu 0 CPU#0 RAX=000000000000000d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850bb475 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc90003ba6698 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=000000000000000d R14=ffffffff850bb410 R15=0000000000000000 RIP=ffffffff850bb49f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007ff66ed18280 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020002f80 CR3=000000002b5b2000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc6e429050 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22fb9f25fb ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22fb9f2608 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22fb9f2602 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22fb9f2616 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22fb9f269c ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f22fb9f277a ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001e4 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000008 0000000000000000 0000000000000000 00000000000001e4 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000004016 RBX=ffff88804d23d000 RCX=ffffc9002dc75000 RDX=0000000000040000 RSI=ffffffff81245714 RDI=0000000000000005 RBP=0000000080000306 RSP=ffffc90003087a18 R8 =0000000000000005 R9 =0000000000000001 R10=0000000000000003 R11=0000000000000000 R12=0000000000000003 R13=0000000000000000 R14=0000000000000006 R15=ffff88804d23d040 RIP=ffffffff8124571c RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] FS =0000 00007f22fc7306c0 ffffffff 00c09300 DPL=0 DS [-WA] GS =0000 ffff88806a700000 ffffffff 00c09300 DPL=0 DS [-WA] LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000ffff IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000004c798000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff850bb475 RDI=ffffffff9aaebc40 RBP=ffffffff9aaebc00 RSP=ffffc900000e7410 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000030 R14=ffffffff850bb410 R15=0000000000000000 RIP=ffffffff850bb49f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ffcf3638e38 CR3=000000002e27e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000005000001 Opmask01=0000000000000000 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=000000007fffffff Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe79826540 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e6f63007325 203a726f72726520 64656e7275746572 2072657672657300 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 40514b4a46005600 051f574a57574005 41404b5750514057 0557405357405600 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00313d6564617373 693a725f6d206165 6b633a735f65723d 723d6573616c6374 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0022323233243024 6930722237206165 6320303735373737 633d202061656320 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a28323239243a24 7073792837676765 692a333d3f3d376e 637a2a2a78656c2a ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2a7e55676e6b7973 79307855676e6b79 7379307e65657837 7e726f7e6465697e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000001c92dd RBX=0000000000000003 RCX=ffffffff8b23a439 RDX=0000000000000000 RSI=ffffffff8b6ccfc0 RDI=ffffffff8bd1b4c0 RBP=ffffed1003b5b488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d527025 R10=ffff88806a93812b R11=0000000000000000 R12=0000000000000003 R13=ffff88801dada440 R14=ffffffff905f5b88 R15=0000000000000000 RIP=ffffffff8b23b81f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c3ea9d8 CR3=0000000028ce4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000015 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555588bda4a8 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555588be417a 0000555588be3af0 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ef08000308808010 0005ac8e08000100 0000080606011bee 0010000004010000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300020012036020 8080808200100364 626e2f7665642f01 ffffffffffffffff ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffff70801 80030031656c6966 2f2e01ffffffffff ffffffef0802a880 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 03ffffffff040480 8e100001800402a8 800400040a012bf0 0066647501ffffff ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0103ffffffff0404 808e100001800402 a8800400040a012b f00066647501ffff ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 fffffffffffff708 0180030031656c69 662f2e01ffffffff ffffffffef0802a8 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003000200120360 2080808082001003 64626e2f7665642f 01ffffffffffffff ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffef080003088080 100005ac8e080001 000000080606011b ee00100000040100 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 65746e49203a0965 6d616e206c65646f 6d0a363031203a09 096c65646f6d0a36 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 70706574730a7a48 4730362e32204020 555043202952286e 6f6558202952286c ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 630a666666666666 66667830203a0965 646f636f7263696d 0a36203a09676e69 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 656c66206267315f 7470652064615f74 706520796c6e6f5f 785f747065206469 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61762066746d2072 7074762074657366 666f5f6373742079 7469726f69727078 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2074736575675f64 6574636972747365 726e752064697076 2074706520636970 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 75620a6c6d702073 636d765f776f6461 6873206469762067 65725f6369706176