last executing test programs: 46.880173451s ago: executing program 0 (id=83): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xffffffff, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040)=@known='trusted.overlay.impure\x00', &(0x7f0000000140)='\x00', 0x1, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r1 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) write$binfmt_script(r1, &(0x7f0000000080)={'#! ', './file0', [{0x20, '\x00'}, {0x20, 'bridge_slave_1\x00'}, {0x20, '\x8f\x13@'}, {0x20, '(*'}, {0x20, 'bridge_slave_1\x00'}, {0x20, '\x00'}, {0x20, '\x00'}, {}], 0xa, "8e86d6a96d4e07cde4c8ae9ed0265447232b697063782018173e0f7dbb0eae6615a25949c08dc34933097fdcb6e34b74a5210aa997b466e5c9d664f8abfb725136fb78e29e609cdb4f9fa297a22de4f9e369c779b2263c50e13278633d0b7e23f60c700ae913346db1aafb6d1654018d5cce7ff10db476f394"}, 0xb2) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r3, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='memory.current\x00', 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000400)='pimreg0\x00', 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000140012800c0001006d61637674617000040002800800", @ANYRES32=r4], 0x44}}, 0x0) 46.799922096s ago: executing program 0 (id=86): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_SET_SWBIT(r0, 0x4004556d, 0x1) syz_emit_ethernet(0x1de, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd606410a601a80000fc020000000000000000000000000000fe8000000000000000000000000000aa2234c204c9"], 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0)='pstore\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r2, &(0x7f0000005740)={0x0, 0x0, &(0x7f0000005700)={&(0x7f00000006c0)={0x120, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}, {@pci={{0x8}, {0x11}}, {0x1c}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x120}, 0x1, 0x0, 0x0, 0x40000c4}, 0x24004814) mkdir(&(0x7f0000000580)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@uuid_off}, {@lowerdir={'lowerdir', 0x3d, './file1'}, 0x3a}], [], 0x2f}) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0x1, 0x3, 0x32314241, 0x8, 0x200, 0x5, 0xb, 0xc562, 0x1, 0x4}}) 46.797312066s ago: executing program 0 (id=88): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='htcp\x00', 0x5) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000000)=@sr0, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mlockall(0x3) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4096, 0x1000}], 0x2, 0x0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) 45.74850143s ago: executing program 0 (id=101): chdir(0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'veth0_to_bridge\x00', &(0x7f0000000000)=@ethtool_cmd={0x28, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}}) (async) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x2, 0x4, 0x0, 0xe}, 0x10) statx(r1, &(0x7f0000000980)='./file0\x00', 0x2000, 0x40, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lsetxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x5}, [{}, {0x2, 0x5}, {0x2, 0x3}, {}, {0x2, 0x4}], {0x4, 0x1}, [{0x8, 0x5, 0xffffffffffffffff}, {0x8, 0x2}, {0x8, 0x5}, {0x8, 0x1}, {0x8, 0x1}, {0x8, 0x4}, {0x8, 0x1}, {0x8, 0xf, r3}], {0x10, 0x1}, {0x20, 0x7}}, 0x8c, 0x3) (async) write(r2, &(0x7f0000000000)="1c0000001a005f0214f9f4070009010000000000fe03000100000000", 0x1c) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @loopback, @empty}}}}) (async) semget(0x1, 0x3, 0x204) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r4, 0x89f5, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000140)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x64, 0x0, 0x0, 0x0, 0x0, @local, @multicast2}}}}) r6 = socket$inet(0x2, 0x3, 0x33) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f0000000000)=[{0x7, 0x0, 0x0, 0x7fff0000}]}) (async) r7 = syz_io_uring_setup(0x24f8, &(0x7f0000002ec0)={0x0, 0x0, 0x10100}, &(0x7f0000000080), &(0x7f0000000140)=0x0) (async) r9 = memfd_secret(0x0) ftruncate(r9, 0x5) (async) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2, 0x11, r9, 0x0) syz_io_uring_submit(r10, r8, &(0x7f0000000e40)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40}) (async) io_uring_enter(r7, 0x2d3e, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_mreqsrc(r6, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x89f2, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000240)={'erspan0\x00', 0x0, 0x0, 0x8000, 0x7fff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x67, 0x0, 0x10, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0xfc, 0x0}}}}}) 45.646351452s ago: executing program 0 (id=104): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x0, 0x0) r1 = dup(r0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x12, r1, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000600)={0x2, &(0x7f0000000080)=[{0x20, 0x0, 0x0, 0x1}, {0x16, 0x4, 0x6}]}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mprotect(&(0x7f0000652000/0x2000)=nil, 0x2000, 0x2) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) 45.330550517s ago: executing program 0 (id=108): syz_emit_ethernet(0x1c9, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "e3b5ec", 0x193, 0x6, 0xff, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x4}, @hopopts={0x2c, 0x11, '\x00', [@generic={0x9, 0x8d, "417262feb4154ba0449bc32fca84a2b6f5c080250a3e70217a9b8e75a20f04832a11dd8cee62e88ae30d4532c87d920f51a2a6d2fd545f3cf873664a163c95bb280551c851aef04c752cb0518002ece79421aa1c08689fc619be4205f95111a97e92f41e6635224c3d3b4c45ac557550cc222085630796e0a93032f2d078fb98cec3a83f3a31c2447c7ddffcfc"}]}, @hopopts={0x0, 0x6, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x801}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @generic={0xe, 0x17, "de0e839d492623471232eaa8bd737fa08ca702bb07007e"}]}], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x10, 0x2, 0x0, 0x3ff, {[@generic={0x1, 0x5, "1a5702"}]}}, {"fec77fd930833b7f1e2d83dc2e8f6d02b8f7f48495bcd3fbee8863a9f5e5eabe5dbc4efb8d55844261e6605fcaa5cee291aa3ab9446522fd4e661aa5517027421d613eca286197a1a947e21dc49e1b6febba154af48ae5bee3779a553b76547edb5de85ce82de4bd18ebf65f7ca6bbb4550a2fafede5d98cf4df01a500f741c8daab34ac0f91171f5a477e09d3bc969c4ab398de234e7d"}}}}}}}, 0x0) 45.30316189s ago: executing program 32 (id=108): syz_emit_ethernet(0x1c9, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "e3b5ec", 0x193, 0x6, 0xff, @empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@dstopts={0x4}, @hopopts={0x2c, 0x11, '\x00', [@generic={0x9, 0x8d, "417262feb4154ba0449bc32fca84a2b6f5c080250a3e70217a9b8e75a20f04832a11dd8cee62e88ae30d4532c87d920f51a2a6d2fd545f3cf873664a163c95bb280551c851aef04c752cb0518002ece79421aa1c08689fc619be4205f95111a97e92f41e6635224c3d3b4c45ac557550cc222085630796e0a93032f2d078fb98cec3a83f3a31c2447c7ddffcfc"}]}, @hopopts={0x0, 0x6, '\x00', [@padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x8}, @ra={0x5, 0x2, 0x801}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x9}, @generic={0xe, 0x17, "de0e839d492623471232eaa8bd737fa08ca702bb07007e"}]}], {{0x4e22, 0x4e21, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x10, 0x2, 0x0, 0x3ff, {[@generic={0x1, 0x5, "1a5702"}]}}, {"fec77fd930833b7f1e2d83dc2e8f6d02b8f7f48495bcd3fbee8863a9f5e5eabe5dbc4efb8d55844261e6605fcaa5cee291aa3ab9446522fd4e661aa5517027421d613eca286197a1a947e21dc49e1b6febba154af48ae5bee3779a553b76547edb5de85ce82de4bd18ebf65f7ca6bbb4550a2fafede5d98cf4df01a500f741c8daab34ac0f91171f5a477e09d3bc969c4ab398de234e7d"}}}}}}}, 0x0) 1.220212819s ago: executing program 3 (id=781): mkdir(&(0x7f0000000000)='./cgroup/file0\x00', 0xd0939199c36b4d28) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848140000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) close(r3) 1.149903767s ago: executing program 3 (id=784): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x4310}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_HSR_PROTOCOL={0x5}, @IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_VERSION={0x5, 0x6, 0x3}]}}}]}, 0x50}}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/ldiscs\x00', 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/tcp_dsack\x00', 0x1, 0x0) sendfile(r5, r4, &(0x7f00000000c0)=0x58, 0x7) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x800}) 1.149405586s ago: executing program 3 (id=785): r0 = socket$inet6(0xa, 0x5, 0x0) listen(r0, 0x80053) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f00000000c0)=0x2, 0x4) listen(r0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711208000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x669, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, 'wg2\x00'}}) 1.064484087s ago: executing program 3 (id=786): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x88102, 0x0) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000240)=""/177) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) write$P9_RMKNOD(r2, &(0x7f00000000c0)={0x14, 0x13, 0x2, {0x4, 0x0, 0x3}}, 0x14) fdatasync(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x2, 0x4, &(0x7f0000000000)=ANY=[@ANYRES64=r1], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.063883961s ago: executing program 3 (id=787): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r2}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r3, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r1, &(0x7f00000000c0)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x20}, @ipv4=@udp={{0x9, 0x4, 0x3, 0x1b, 0x88, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}, {[@timestamp={0x44, 0x10, 0x1c, 0x0, 0x6, [0x1, 0x0, 0x4]}]}}, {0x4e20, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x1, 0x1, "cc9076053333c98aab3d501bf817920a8da263c567a486ff0a1b2e8f78165e39", "7d591a13c426e5901e02555e5cf04d15", {"853745e0ace7a15e4078ad604dbe515d", "90701aad8601dc8a67b8332ccc4f325c"}}}}}, 0x96) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000540), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "00001000", "4e67cb72f328ac2f"}, 0x28) writev(r5, &(0x7f00000001c0)=[{&(0x7f0000000100)="75dafa", 0x3}], 0x1) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 980.131023ms ago: executing program 2 (id=789): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100"], 0x57) move_mount(r1, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) (async) chdir(&(0x7f0000000140)='./bus\x00') openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) (async) mknodat$null(r0, &(0x7f0000000040)='./file1/file0\x00', 0x0, 0x103) (async) creat(&(0x7f0000000340)='./file0/file0\x00', 0x0) 979.262284ms ago: executing program 2 (id=790): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@delsa={0x48, 0x12, 0x1, 0x0, 0x0, {@in=@dev}, [@srcaddr={0x14, 0xd, @in6=@rand_addr=' \x01\x00'}, @mark={0xc}]}, 0x48}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="791298000000000061138c0000000000bf2000000000000015000000080063033d030100000000009500003a000000006916000000000000bf6700000000000066060500fcff03006706000002000000760300000ee60060bf050000000000003c650000000000006507f9ff01000000070700004cdfffff1e75040000000000bf54000000000000070400000400f9ffad43010000000000d5000000000000000500000000000000950000000000000032410000000000000054bb12dc8c27df8ecfc7bdd2d17f2f1754558f22dd399703d6c4f6f3be0b369289aa6812b8e007e733a9a4f16d0a3e1282ee45a010fb94fe9de56c9d8a814261bdb94a05000000c6c60bf7a13ba1fcf1111ce4fc0d742a81762bab8395fa64810b5b40d893ea8fe0ffffff7f1b546cad3f1d5af65706fd4f68795cce6cf16ab689b555202da2e0ec2871a51445dc8da39e5b0ab71ca9b901627b562ed84b026002d4519af619e3cca4d69e0dee080006774a8f3e691700ec88158f02001b0000c81c8b297dff0445a13d0045fb3cda32a673a6bb55d8c80800dce431e56723888fb126a1403d2b63f16fb2ad9bc117aba7cbebe174aba210d739a018f9bbec63222d20cedbc4d03723f1c932b3a6aa57f1ad2e99e0e67a993716d20000009f0f53acbb40b401e3738270b3156268784f2af9e4bcf8b07a10d6735154be1602f9dd1d7d4301e00000000000460bcc5989ec85e3cbcb6bcfaf0000000000000000bc00f674629709e7e78f4ddc211bc3ebf0bd9d42ca019dd5d0861cd64722cf74686ebfbe2562671cd47840f81d2a8f8f9be3bcd19dc6840aa7afaab43176e65ec1118d50d1e80100008000000000887a5ad103649afa17690884f800031e03a6d1bb96589a7eab049b1bd47287cd31cc43ea0ffb567b40407d000000000000000000000000005f37d83f84e98a523d80bd0d0d703f37ca363f601ae899a56715a0a62a26a0f6a5480a55c22fe394ae0000000000000000000000000000437d57defb79ea000500000000000000000000f014a4a318ba48d35ae9f438000000000000db894b62a614cb1fdd46619c5d2200000000000700000000000000000000006dcd2f421400f69947e4f26e099c9e8369080663c909b7e7c87e3b5e8e5a6df77c8f7338cd5a85f211a41b5d529d4243e47d7ab0d5991756b59d363ba30b18fc2ff189a4e8db38ab97c6a125e2785619e84c6a2b50f0e3ff83ef5149aff43dc899fdebdc2c496e6bdd4dd4d21f06fe133f4444272c5f0839ad663100452a6c6b6421f7e89a33b339401eee2cd466ab2a93a1ee7fb8a9e455ba1c6e17b02a1cd7bf35d36cf5b2a0f063469ae0d0b9fc042b48e98626eb0f9754d8cbbefa3079fe63063047baff09e9aaf7600000fba9a88db9ebef86f7cb522a784bb6d37e5f802757a15c6735138b493db9df53440a63fc565a0b190a710ae1e6807cbeb415ac841e94b706974160a60a14e571274f333d23186143b95514c79b50994cb39cda343bda8f01cf8ec7cdfdace0289e83ce50a57d69bfecfaf69fe7ff5b0375a47d3eb57b41d8a0589b82a1cf1149ba3f21ea2b65433321eb1a6f04ecc713c2b26d27baa49e54c2babec86335b9f418b5a5eb997bc9dd65197124b9aa80fc4aa8defb986bf05c41b919886bb81ecd3d24cf9ecc7004000000000000002c70d32f5d55ef2a2cf7560cb2884f46a92b3c25550f73e407fc5d514b2b7a6b690e290e676266addb7d96e723dec9c418eec8c48dffb6f432b4d5fef16e4f0051ba7efc690022c3f62b37cb5682d8bfdfc637ad3bf089ef0117bcd395322fcfb8e8e0a6e2babceb5f289b1d991770681192bcd0b584c3497e455f30ab918a690514a87a7d8e1d5f169a4e680e9c390071d26f2e0e26fc062f2785f14c0404fe01fb4000000000000000577dcb1698a9021a36d73ed03651c1937b2c84046023a1a0a87b208e33ad2d7c2892b176877264e1d699b7401eb917b289f6f67060fda0fa44b54bd87517a2bf09dba7209e41db4288b61bda5960952c45e5c55f2cd68bf9c6ff33e46109584bf42e8696ef1876564fef6f24cbbed0db8ab7fda1ffcc8c9fd4ab2cbe8f8df8e5535b12a942a948eacdaf308d48932064cfc3329da74f6f3e4409d6764a29680e312bf1a0143180e6493c9201ea916e6c9b2566c558ad88d9f7c0aebf82f5807eecefa97ada9bbd9e478e5d7748ee188bc719ca7a73dce5b6758a767c4c6b7572ab25eb2d73986379d5685cb438fe7091d097cc8f33fc0f83dee76603d6580f1c8fc4c37efd305ccc5a25678180425718bb9344e60dda8dae2677bb602d29aa0810616a2fdbca7020d72291b592b84223e2522ee01f5bdaa0fc4eb8d71d948a2baccf3ea2aa79d4d9069d8c0000000000000000000000321cd67859b4567badee56f158406f08683bdc5ffe2dedc916000c71f922fa2dfead7535999436a4aeb908781893479319b8b55e00d90ae6f09f06be2a0fc0bc17bef53331208112a0132350c0c5dd4607547079acc9471300dea6ae01742dccdae69f932cef80bca1bfcb57b9c852cf8358a580044772a80f20de36f707385380155be8907029d039a1d1447fc06b7020221e0d439f3f47edcf12f913dc8b6389a540340ae37804728ea65352e630c2e90424d58d72fdc1b28403e1dc7aad238b81df3b2d4166d656c6a9c73554bdf4f7312a4c0271e0eb45b4a596b7fa928ac3683f09fdaca46226c1df2c6c866cb4412d17d3d52c38cf0f7bd3b0eea2d4e06d061bb1b7c8c52f37f4036932d00028abd4527f5649bd60df638596fd639d7b16860033754ab13419429e5e39f290751ab6bd9392aef5519cd8c16e1f1cb1f225cc84a1a62497c1e436142fe28048a2b4d133905814a1808bc5b3e45eaa9eaebd946bee806968aeeb5a9eed87eba3d25d0b412a1b4cf2d419a58b09fc275c4395a0bd332eb538321465043e5967dd22459d0f52190a37f93ab823431a81fa6f54de61637fd473e19a6f567fead100e7d8cac149b66ebe9973af846146c62065a64854ed21e8b6f6fbe78474b753915a42efcb7da8ad18bacff8d69e0af1ca1f8174530a21820738412b100b54ee9b4a0dc22d5fe1cadecaea73fbfad087b19ce53177488d230539c5174f572a539d9d7c42698aa82bccf030ad393f25c10baa17e919f647d0e31877b7a6c1d8d86583f884a0c1da07b9b6dced06cdeb0094aa635a82f233b5993926b8970a0840ba116a7d20a40efb3bd03c4bdf380a2510a0a1ea69811ded68943c71218b42783b38959753978f222e1396b9b36dee2ce205122a000577cab29f48bff4f88c417e6bf5fb430d925596f29aca8677ca5a113aeaa5e0252ca17244d6c76e78ff1bbd81a71c4dfc72431d7f1126f8bdbf4056ee0f58a1bf83d53b1de07489541182dc4ee0f573c25b6c15dad930bc7a770b5a4f407d7a879db7185f15f80100000000000000739cc97db66ec6b925955d9a591808947fdd8d484ad27353230a449fdf87fc46c73b852fec931cfb6718acf3315bf5e577d00beb77c5514bc05d576a81345a03ad7aae74c5d2b77d45718348aed4fcbcd1441ff31b8f038824a989a9446a4a69367b228b3d174230b7320fc4d3c03368db573816dd0c04e65d6f8ce48283e76abdddbb965e0b2568e93c9cc5494a55421793f562c50c53f876cbde93c5cc7a3099c99d9775af010ba093f8a13b771782a3cfb24fbde6ef763e20c613164ab014d1906c4e098f1431b6b2886a155c4bac2911d7ee6a646f5913205ebd175e68975b93c330e4f9131788026b3b7cd5b6452c9e17452ac70000000000000000000000c71185f72436640fd4294fc3da230f9065095be47d7a848df12316c3c8b184fe110b061987fd79cf7d83443e69d08e2e839ae4fbe26ef7764f4870ef3bd0ec12eb45f60ca10dbfe329271f0bc93b28798e982e0dd32fc14bd4313c63b2dbb568f33fb45acad2dc7f438ea162c0709c0bbe1ea13e1e47399286e8143f400d7adf5f69e455706626814ee49274667f47769293451fd49885a152b8d2cf18febc7993f4a93893c6c7b7e46a230359ef2443e6bb9f50bb0faa5eaafd3ed6d551600c46b58a29fd7ccbbb0616f0be27302b683eccd742791d97f4a1daa0447f004426fd09b67d926f51525da63987bc73af35b28277879089b89fff6edab2fa1caf660a46a1a9f09e2d095b1c4be95c7c33dc81857f580e36c0a78d94dd879ee18de4a6475858d2ded2e3427ae007cc6f8e5e99aa146667f71ad83f3ddcf5db2dc396d7da499b65cd98125f20c284fc84d6a70be1de44b49c82022225292199c75cc26beab98dce4c331ed722f01d0d6314a72416814a565f4d90a5f8a255810f23541082f4b06f451e4724cd882f4d589600000000005854ca490d7df9cc293547c9a51aecc7a92f417f6a4d327737f1b198252358832dbe43507844a0cc112af4ce457c173fa64174ffd5ab9501eeb85508ebb60e169c0736c5960f2fe08735d6a7aa7c1f4a6433e77d3e547bbe6cf5b5d93a491ab4bba1ea7a1e6f37618b1d74cff3630d85a210092211be1ec12a30891eef590b19cdde055d626818c64e1c56b8918f33441a64b54946571b7bc70fb065d3bb1647f6f989ab8159e6d1cfa6c0ec7329d7d2263ca22144bf17d8692f03b592bd0f610096094da096233984e95b9a8216a6e60a104ae0bb5f77ac70b4390ea2cb6f6c40c928fae489f447240a25fd0a5bd9d5b6cd2a98f8804862922c11229c4e45c765e4d3348af3d3aadd5cc24b39437f1ea2df0000000000000000000000000022b90d93a267f3af4e02606f0ce6c2ffc404b575a09d6e625f3248689005eb4a9c8df3c67e6b2b759cab3a7bedf1b927cd8ba6d13b3e7d7279515e3d6d20"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000010400000000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000201200001c00128009000100626f6e6400000079680002800800030009000000"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x0) 909.811634ms ago: executing program 3 (id=791): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000140)={0x24, @none={0x0, 0x1}}, 0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000180), 0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x4c}}, 0x0) r6 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) preadv2(r7, &(0x7f0000000340)=[{&(0x7f0000000380)=""/258, 0x102}], 0x1, 0x0, 0x0, 0x21) ioctl$LOOP_CHANGE_FD(r6, 0x545c, 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r9, 0x1, 0x0, 0x0, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r6, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="46872213d7b31f3d9219c0f9d5aba33475eb", @ANYRES16=r10, @ANYBLOB="00012bbd7000fddbdf2501000000000000000b000000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r11 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$KDGKBLED(r11, 0x4b64, &(0x7f0000000300)) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) mount$9p_tcp(&(0x7f0000000500), &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)={'trans=tcp,', {}, 0x2c, {[{@privport}]}}) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020300000009210000010122290a090581ff"], 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080001400000000a08000240000000160900010073797a3000000000140000001100010000000000000000000000000a841652aee59481ef60455fa3cc6d684cacaedc7824573c45105fbe617b"], 0xc4}}, 0x0) 909.597999ms ago: executing program 1 (id=792): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) (async) io_setup(0x3fe, &(0x7f0000000440)=0x0) io_getevents(r1, 0x1, 0x0, &(0x7f0000004600), 0x0) (async) io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000080)={0x3a0012fb, 0x2759, 0x7, 0x0, 0x0, r0, 0x0, 0x0, 0x1000000, 0x0, 0x10}]) 908.854048ms ago: executing program 2 (id=793): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$SIOCGSKNS(r0, 0x894c, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000580)='hybla\x00', 0x6) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000000c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x578, 0x0, 0x0, 0x3b8, 0x0, 0x1f0, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x4a8, 0x6, &(0x7f0000000040), {[{{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x7}}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff, 0x0, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffff00], 'wg0\x00', 'veth1_to_bond\x00', {0xff}, {0xff}, 0x21, 0xf, 0x4, 0x72}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x3}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x2b}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, @mcast1, [0x0, 0xffffff00, 0x0, 0xff], [0xffffffff, 0xff000000, 0xffffffff], 'tunl0\x00', 'team_slave_1\x00', {0xff}, {}, 0x5e, 0x8, 0x0, 0x6}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x0, 0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1, [0xff000000, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0xffff00, 0xffffffff], 'caif0\x00', 'nr0\x00', {}, {0xff}, 0x4, 0x0, 0x7, 0x2}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}]}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x2}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@empty, @ipv6=@empty, 0x7, 0xf, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5d8) 789.389229ms ago: executing program 2 (id=794): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003840), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000003fc0)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f00000000c0)={0x28, r1, 0x1, 0x0, 0x20000000, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x7}]}]}]}, 0x28}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) read$FUSE(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x33}, 0x0, @in=@loopback, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8983, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 789.070051ms ago: executing program 1 (id=795): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0xd, 0x0, 0xab49}, {0x20, 0x0, 0x4, 0xfffff00c}, {0x6, 0x0, 0x0, 0x5}]}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000001400)=ANY=[@ANYRESOCT]) write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xfdef) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$uinput_user_dev(r2, &(0x7f0000000a80)={'syz1\x00', {}, 0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3ff], [0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x4]}, 0x45c) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x1e, 0x4, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r3, &(0x7f0000000040), &(0x7f0000000180)=@tcp6=r4, 0x1}, 0x20) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r2, 0x5501) socket$packet(0x11, 0x3, 0x300) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r6 = socket$unix(0x1, 0x2, 0x0) r7 = dup2(r6, r5) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) inotify_init1(0x80800) close_range(r7, 0xffffffffffffffff, 0x0) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e110b07"], 0x14) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$CDROMVOLCTRL(r11, 0x31f, &(0x7f0000000080)={0xb0, 0x16, 0xa, 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x18, 0x202e, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r0], &(0x7f0000000100)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x111100, 0x0) 668.406359ms ago: executing program 4 (id=799): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', &(0x7f0000000440), 0x1000) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001280)='/proc/sysvipc/sem\x00', 0x0, 0x0) semget$private(0x0, 0x2, 0x140) read$hiddev(r0, &(0x7f0000001100)=""/234, 0xea) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500070000000000"], &(0x7f0000000040)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 666.243443ms ago: executing program 4 (id=800): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000100)="67660f7f955ee30d482e0f13709a0fb035d9ff66f30f21933e673e26650fe2791226660ff367a80f01d166b80500000066b9000000000f01d9b829010f00d0", 0x3f}], 0x1, 0x61, 0x0, 0x0) (async, rerun: 64) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) (rerun: 64) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x21, 0x0, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = dup(r5) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000700500"]) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0) (async, rerun: 32) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) syz_emit_ethernet(0xe2, &(0x7f00000001c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1}}, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0xa8, 0xff, 0x0, @dev={0xfe, 0x80, '\x00', 0x2a}, @loopback, {[@srh={0x73, 0x14, 0x4, 0xa, 0x8, 0x70, 0x0, [@mcast2, @dev={0xfe, 0x80, '\x00', 0x23}, @empty, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private0={0xfc, 0x0, '\x00', 0x1}, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast2]}]}}}}}, 0x0) (async) ioctl$sock_ifreq(r8, 0x8990, &(0x7f0000000180)={'bond0\x00', @ifru_names='rose0\x00'}) write$UHID_CREATE2(r7, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x200000b, 0x12, r7, 0x0) (async, rerun: 32) r9 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (rerun: 32) ioctl$sock_netdev_private(r9, 0x89f1, &(0x7f0000000000)) 569.5363ms ago: executing program 1 (id=801): bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pselect6(0x40, &(0x7f0000000040)={0x7ff, 0x30f1, 0x4, 0x7, 0x5, 0x485, 0x6, 0xfff}, &(0x7f00000000c0)={0x864, 0x8, 0x6, 0x8e, 0x24, 0x7, 0xe, 0x1ff}, &(0x7f0000000140)={0x7, 0x5, 0x9, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x6}, &(0x7f0000000180)={0x0, 0x3938700}, &(0x7f0000000200)={&(0x7f00000001c0)={[0xe1]}, 0x8}) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) r2 = signalfd4(r1, &(0x7f0000000000)={[0x3]}, 0x8, 0x80000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000240)="66b84d000f00d86566640f0866b808000f00d86626f30f09640f00eb64f30fb85dccc4c3d948582fb6c4e1fa5b148f0f2051c0fe8f", 0x35}], 0x1, 0x0, &(0x7f00000002c0), 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000300)={0xe0001, 0x0, [0xfffffffffffffffc, 0x0, 0x2, 0x800, 0x400000000000, 0x2, 0x7, 0x3]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 457.034222ms ago: executing program 1 (id=802): ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_link_key_notify={{0x18, 0x17}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, "0acb711fcd99fa7361206faa488d2dda", 0x10}}}, 0x1a) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x7, @local, 0x2}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="97865a3d6366dd22706ac7b85cef2680f1897e9d2ba0909a67981c42b4d8bcc8c1319aeae41580508af96b96c3d2a5b99dce59ec79af9d7a8a02111f9c7d1ea6f6169b366dfe7961622b0a7676d970e74235fb9e1be4a50a6d188837828fb8998965e1981a6ff537a102fbea7d54ad50c3840463b572dd3172c80a2bba056c86f0d838912030589a1170f0028c8a6507107bf270573859d88247d8d53de3f71aeafc61cc8672bcdeac2dfa7069cf242eb39b824fc8f39e92", 0xb8, 0x400, &(0x7f0000000000)={0xa, 0x4e21, 0xf, @local, 0xdfb0}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab003a0000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100030c100000000000224e0000", 0x58}], 0x1) 456.379399ms ago: executing program 1 (id=803): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x4}, [@typed={0x8, 0x3, 0x0, 0x0, @pid}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x81}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x8, 0x4, 0x4735919a, 0x7f, "d76841", 0x33d2800}}) ioctl$KVM_RUN(r7, 0xae80, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}]}, 0x2c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x2a, 0xb, 0x0, 0x0, {0x4}, [@typed={0x8, 0x3, 0x0, 0x0, @pid}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x81}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) (async) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) (async) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) (async) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_rxfh={0x47, 0x8, 0x4, 0x4735919a, 0x7f, "d76841", 0x33d2800}}) (async) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}}]}, 0x2c}}, 0x0) (async) 359.407219ms ago: executing program 4 (id=804): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10a}) syz_emit_ethernet(0x34, &(0x7f0000000280)=ANY=[@ANYBLOB="bbbbbbbbbbbbffffffffffff0800450055bbfdff1d8fde08b61cb8002600000000002f90780000000000000000000088befa1290786b8b836832cfd4d288a884c2f38a1572659204aaad4d569c27f55e510ba775d50b86c930774d7465a1a7080000009d4ebd1913e2ab2fed44373386aee6ac7cc21df392ea34cefebb74d93ceb3a9554eac896982505d65efab1470f65d49275ce5b4e268f355f154a2c2896e53de28e51d8c614025bf8997fcaf89b2344c3edaa1c06f9d58b27ba0000000000000000"], 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x1c0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [0x0, 0x0, 0x0, 0xffffffff], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x80}}}}, {{@ipv6={@private1, @mcast1, [0xff000000], [], 'wg2\x00', 'hsr0\x00', {}, {}, 0x0, 0xfc}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db", 0x1}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @fda={0x66646185, 0x1, 0x1, 0x3e}, @fda={0x66646185, 0x5, 0x1, 0xf}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1400}], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@flat=@handle={0x73682a85, 0x10a, 0x1}, @fda={0x66646185, 0x1, 0x1, 0x3e}, @fda={0x66646185, 0x5, 0x1, 0xf}}, &(0x7f0000000240)={0x0, 0x18, 0x38}}, 0x1400}], 0x0, 0x0, 0x0}) 300.258564ms ago: executing program 4 (id=805): creat(&(0x7f00000001c0)='./file0\x00', 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, 0x0) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file0\x00'}) 299.802363ms ago: executing program 4 (id=806): getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @remote}, &(0x7f0000000040)=0xc) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @private, @remote}, &(0x7f0000000040)=0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x7, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x3, '\x00', r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 200.098479ms ago: executing program 4 (id=807): openat$procfs(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/zoneinfo\x00', 0x0, 0x0) (async) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000013c0)='/proc/zoneinfo\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x8}, 0x0) (async) prlimit64(0x0, 0x7, &(0x7f0000000780)={0x6, 0x8}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r3, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0x2, 0x0, 0x6, 0x1}}, 0x20) dup(r2) syz_emit_ethernet(0xf87, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0x47) openat$tun(0xffffffffffffff9c, &(0x7f0000003700), 0x800, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000fc0)={0x4, 0xe, &(0x7f0000000fc0)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x40000000, 0x0, 0x0, 0xc542c6cded4fd9ad, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x19, 0x0, &(0x7f00000000c0)="b9ff03030018698cb89e40f086dd6000000e00002100630677", 0x0, 0x100, 0x2000000, 0x14, 0xfffffffffffffff9, &(0x7f00000016c0)="ef6335186a803f4142f566faff3e3cd14f5c68c3"}, 0x50) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) (async) r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100)) r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000200)=[@increfs], 0x0, 0x0, 0x0}) dup3(r8, r7, 0x0) (async) r9 = dup3(r8, r7, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) (async) r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r10, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r10, 0x4018620d, &(0x7f0000000040)) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x12, 0x6, &(0x7f0000000380)=ANY=[@ANYRES8=r4], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f00000001c0)={0x98, 0x0, &(0x7f0000003200)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1443, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) read$FUSE(r6, &(0x7f00000048c0)={0x2020}, 0x2020) (async) read$FUSE(r6, &(0x7f00000048c0)={0x2020}, 0x2020) 199.941791ms ago: executing program 2 (id=808): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES16=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20040080}, 0x2404c044) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a30000000000900020073797a320000000014000000110001"], 0x54}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELRULE={0x38, 0x6, 0xa, 0x135cfb4307d517, 0x0, 0x0, {0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}], {0x14}}, 0x60}}, 0x0) 149.297497ms ago: executing program 2 (id=809): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f0000000000)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420}}, 0x50) syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000006680)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)="deccfcdab44e8c2bd89025e9f8134631a3556ecb538e0808487b290fdeb1c6506e61f4547e192231840b96c4c14448d9496710daf354b752735131a80255b8b7fdd5f5cbccc8beff329ee53b5241d996316623e4f48332a925875d6e43a9b9c62285e4e8868399a4a4eee5", 0x6b}], 0x1, &(0x7f0000000740)=[{0xa0, 0x10c, 0x5, "87babbc349d77a4195e3cbf249470e3a7e03a2d7ee1dbb466b9d35f859d7774f64ad60d237d76e37c000831ff1b20d6c922432b846fe46e858b6dbdc1cf2d7e2c9607d014a21acacb678b0e0fc08bc93ddfee4b35705aef4bbe58d5d48ef946b13d11a1e2fa4edc60b36829bdca5136c8e25e3bf7482052c8e2f65bf57d3221d24922cf5b5449937b911"}, {0xe8, 0x88, 0x401, "60ed2c5687617fc04512c3312e02f09a445afe94f61f44db8ef038b3bf53cf1972ad9924cc862e89d288b491a0db412500d4cafba4828dcfbd01e1db5e678b5286ffddbf4fc2cc2c0e8952fc25ef4ff13b88fcaee28d73ae09988ba0878c96a439c1d7c6bb93e2f0974c47bff947b29e3a8b88e6277b7d4f82491f4087a0a4b612493319fab6433bf09dcf46ed02a96f812c3d2ffa7081f0b53266d8c81287eae4d2ca47c774db257710a743f8eb9690c6a6dcf19c6e7aba808b837c2baea41e39ab8ea7a40cd558b46d0f555f8f3ea3f57b"}, {0xd8, 0x10f, 0x3, "0c1c2a1992f300ca71ad867abcbad0bbb3493476ea7351bdb9530871a5f60212e8fcdc49ed5e0f5f45866b29701449950c8d9e6d9cf6d2094d90390e2e377ee302acc127db618069a957fe12d306e6342ab941f3652a7a5dfdec9e903734b0cefa418556654a3ab6e48f799c082e63c3c77fd36a1e83d9920ddbeda4bd33724a106c20f247a953503ceb96bb2932a76a524edc04052e1556dfdec567fb2d1109044120fc054a667b3adfcef0a0b3f221953f57a18c0815ffe1b9b675d9d6d82287c798dbd5"}, {0xb8, 0x109, 0x4, "a98181d8aa70c9ba50ca601980145d6eb2ff00ce6ceeaf196cd9febe5d4507453e4074851f60cf8e5999ed53e3923370b22c4dadf9ea6118099f0f3586c9b911ed9744f3995153f483ea626093e74fdf0374fa477a5e42292d99d645e0536f568013321e89f6a4d7bf3f418f28bd4e122d4864924c6158db60679580cd7a420899013250afede797020485fc127e612bcaf49f3b4720f459df1d55c0c0ae5bc6dd"}, {0x28, 0x109, 0x5, "5a6ed7588a9ec74d5233574ad960f38d9c33"}, {0x58, 0x104, 0x1, "3e4a6f80c625ab62e667be21674fb19f52e2dc0e6798efb0bfb1e4466720d0d0460afdc7ae8cf2828f51892191dda069c764c2aee6c5fe2bd2fe11d7b9d364d253f4c026db"}, {0xf8, 0x10b, 0xdb6c, "ac51b0cc5c1d67f9b29f08f7769541e8564d40a76448ccdee42b976893e88910dc28448161795eb4d6bd2e262890137a2000ebb93091daff1f2fd86c1b9abbf8c588d7a48f92d7ef0a8a0e203b33c59b1491c66cd6ec822eb8515734844b7ccc149a4395cca372bd860888c735fe92be7610d532070715b52c4be2a2eeb208b08a00b8cc4e1ddf14281526ba72b2123326c665b7b06daed99ff9737d9d7da147bc3bcb8320ed972b65baee2a2a5426f12c9ccb6a3664684e0e27e2c5cdafe7a16d939a2c92961021ff15cc792cfd4fce7a9e9fcca07eb9f2699ccd6b0b862a997764b6ba"}, {0x68, 0x103, 0x111a, "a3f87175e26a32ca007db8238fdf57e10455e76e0677121d2c40819d6f53a9144ddede6521a919aea4535df2d021b646eef49986dd0c3686b7a07e93c942c752021a598400254cb292d3375a433f94c879ff"}], 0x4f8}}, {{&(0x7f0000000480)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000001f00)=[{&(0x7f0000000d40)="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", 0x1000}, {&(0x7f0000001d40)="39bd5533be0560968d64e28dd538359a740c7b1de026336d706ebcc6e6cc82347ce4a28276a848015849f5ade7cc6abb04490d2fb0b2db5badc15462ff0592ab83dc68aef720eb75bae60517b8a43604b445fa", 0x53}, {&(0x7f0000001dc0)="26a0229c94ba8487a6c033d46a31e9f0916b5391221819157d0c6020ab4dbd3303efacbd3870c59f2c3cce6b43d423dec963baba2fd88269ee4e49bc68daed26d3fcdaab3028659ee82bf0cdb5ab0f5d2d87e0ff3bc53187102b79", 0x5b}, {&(0x7f0000000400)="5b1e486b7e9bed45c1ae27778599931a79896f250ac514e3fe9ad6c43709fcde94826047f7d0054d7fde51d115ecd14e25963a37d97c251948dad035b1", 0x3d}, {&(0x7f0000001e40)="f4e497124c1798b06aba1cc21f313d186676b6316ff028222167dbc270d06f2ffa9f6011380e7926e70d427149865d4de9e0ca6729fcc75986cfbf862bec117f9a432f6dbea2fe58cab0e173650f191ce07da27622490a3d7d44953058710690e7d0d77b1ae118bc9ec0f26c1d520b2f0204ab732b333cf2ec62030ebab64b5c9b2b1046752647c3ebb894dca8c7705494dd3c628ce3361864951302bf9aaf915ce22fd4a31d265b471dda26", 0xac}], 0x5, &(0x7f0000006380)=[{0xf0, 0x3a, 0x2, "441908bbb0f621d56daf3ead52ad159e26c11a9af5d3e3300c1dc860be22c19f78f1d6b986e112a906f5e5812289c460ea19df9d09c1a6b71495d4339dd3b7f31ea1207bf87e86205714158bd6920423254349a8c93d343eb8c0b8f349d99d2641ad3922262d33c0a32fd80fe6fa600085738d80ffbc2b1f7606cbb024cc9da54e9a5a0b47b564b724d130828f7284f3f0cb37811c41fdaaa43946553e49c79fc63adca33a480ed746359b4bf43358b3ce98ceeeaea4c596486765e0fd6eedf4d35b6678996fec5536721be2e8f923bf6e9680f25c38c105e42c698f6b"}, {0x38, 0x104, 0x3, "067039ea24e146361ef74196df2749a6b24757eabba935df007e228f6b8dc51a41"}, {0x18, 0x112, 0x4, "4cdd26e1df"}], 0x140}}, {{&(0x7f0000001f80)=@caif=@util={0x25, "c72b1c33213b4643911633fcca85992f"}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000006200)="42fc5a04f17369afa0b0fa0b2e4e39639c05e4afcc8b116f7f63c63956dc4992ed30a38de34edef415c69cc48c3450bc9e0307995387243e54e18f9b4c4eb832d2b640a7bd2fc83a9d24c9f9fbd74aab967cde50ad7fbefd9cb6724b7bf620b047dc95dafbf15cabada7a8ba5ec3267d2ac2c935e242b6855eeeefb482bb89590de153af848e77a58b731755bf8f90089e5dde9f65f75a9f735a2355fa3745a5edd5e659cc209d9b18a94180f27ff4c26d04dcd2053451eb0c8ec39ee072c8", 0xbf}, {&(0x7f0000000500)="d2d79ea9e75b332e1ec37ab3289908e5b831778ac372cbd365d3a0f2ea3fe277bcc71eec5b002cdfdf4042f592c00328827c0b22ad4e2917935580c0f8dbe9", 0x3f}, {&(0x7f00000064c0)="6f539688adbbb2947d74ce735af18eb7e721470dcdc70c42290874cbc691eba4e5a3926a09dacea47e70e50442e45278fb938d8c47c3dc3aeb4d4febb272e737a5714f84fd76a22f133e2472b9b4c9eaadb2154a5c27e92ae414b7e7b5582295654254f19a706e65691c179ca8c663b6320f07e78140accce0a20ccf4667f708eea2faaacf378c15f52ff5ac7f3b141352b466878c86d417da331c10075a88fd156bc20ac33ff7c8a4959250eca2399e7e9e511f2a8b2d3471beb676dfaf0286763e7aa62a565663641a4e6c13f14daa1ed444324f6786", 0xd7}, {&(0x7f00000006c0)="821648adaa4e79deefa36f39c05aa7fb5962", 0x12}], 0x4, &(0x7f00000065c0)=[{0x88, 0x1, 0xffffffff, "851d3bea8761388c3dbafd4624abf4591e92e1cda248a83dbb6af3f1d08cbf0bad9ba49840fe3f0b02b602a60cc04b98e0588bab2d8cba9c36575dbbc02884bcc22a23c364dfd3975d5bb18a07561e6f8a32f504fe6ba13bd51e2d5f03fbc7fd676f14b9ba5d1762b5fa573317781d7853ed9908ef21"}], 0x88}}], 0x3, 0xc0c4) sendmmsg(r4, &(0x7f00000000c0), 0x2c8, 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000001200)=[{&(0x7f0000000080)="580000001500add427323b872545b4560a117fffffff81000e224e207f000001925aa80f20007b00090080007f000001e809000000ff0000f03ac7106e5a0000fffffffffeffffffffe7ee00000000000000000200000000", 0x58}], 0x1) io_submit(r5, 0x1, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x4, 0x1, 0x0, r3, 0x0}]) setsockopt$inet_tcp_buf(r3, 0x6, 0xd, &(0x7f00000005c0)="0d5f56f2a859da9c3cf69558b52bfdb4ec95ec316794b8cce5e06d3bcff28317eb50f2a98e95c7ea5fd2816371f7c35c3b8897debb17731bb2b5b30d639286c6f1bc34c4033bb0d3b9dd49c860f399e5929e9e8eb3a0b2cb30a3d317ffe1f12b5cf45cabb07b7761ab8b4cf0cddfead0d0b13166cf21b23b020ceaed053abf3a2beb9e17a6632d8e657401676d242e89ee4819d1d4e4ed56d0e794a9c5d7a634ffcffba51f0e44b0529ae7c996e5ddf609d78f6df16c1fd17dbf36411c266a1560decef878f6fc77f9ed244cb7cdc3d91f1861", 0xd3) ioctl$FBIO_WAITFORVSYNC(r0, 0x4601, 0x20000000) write$cgroup_pid(r3, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00') preadv(r8, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0) writev(r8, &(0x7f00000003c0), 0x100000000000022d) ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0) 0s ago: executing program 1 (id=810): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)=ANY=[@ANYBLOB, @ANYRES64=r3, @ANYRESDEC=r2], 0x74}}, 0x0) syz_usb_control_io(r2, &(0x7f0000000780)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000002600), 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="54010000100013070000010000000000000000000000000077fb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac1414aa000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}}, 0x0) r5 = syz_usbip_server_init(0x3) write$usbip_server(r5, &(0x7f0000000080)=@ret_unlink={{0x4, 0x5, 0x0, 0x0, 0x3}, {0x5}}, 0x30) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) read$FUSE(0xffffffffffffffff, &(0x7f00000016c0)={0x2020}, 0x2020) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe98, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe50, 0x2, {{{}, 0x97, 0x0, [{}, {}]}, [], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) kernel console output (not intermixed with test programs): oblems! [ 38.904993][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.907698][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.910148][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 38.913136][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.918382][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.926858][ T6001] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.4'. [ 38.933308][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.936631][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.939105][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.941714][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.944379][ T5940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 38.947491][ T5940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 38.951932][ T5940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.958880][ T5940] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.961916][ T5940] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.965257][ T5940] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.967614][ T5940] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.974965][ T5937] Bluetooth: hci0: command tx timeout [ 38.974973][ T5304] Bluetooth: hci2: command tx timeout [ 38.976030][ T1144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 38.976042][ T1144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.008316][ T6010] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 39.036834][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.039650][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.055083][ T5304] Bluetooth: hci3: command tx timeout [ 39.056782][ T5304] Bluetooth: hci1: command tx timeout [ 39.059442][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.061450][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.077061][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 39.079042][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 39.100455][ T6024] netlink: 20 bytes leftover after parsing attributes in process `syz.1.9'. [ 39.102666][ T6024] netlink: 40 bytes leftover after parsing attributes in process `syz.1.9'. [ 39.116517][ T6026] netlink: 404 bytes leftover after parsing attributes in process `syz.2.3'. [ 39.169992][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 39.174070][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 39.317343][ T6043] capability: warning: `syz.2.13' uses 32-bit capabilities (legacy support in use) [ 39.524626][ T5980] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 39.674316][ T5980] usb 6-1: Using ep0 maxpacket: 8 [ 39.678323][ T5980] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 39.680822][ T5980] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 39.683914][ T5980] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 39.686584][ T5980] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 39.690012][ T5980] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 39.692690][ T5980] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.901251][ T5980] usb 6-1: GET_CAPABILITIES returned 0 [ 39.902886][ T5980] usbtmc 6-1:16.0: can't read capabilities [ 40.321413][ T1470] usb 6-1: USB disconnect, device number 2 [ 40.362696][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 40.664425][ T5979] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 40.814697][ T5979] usb 7-1: Using ep0 maxpacket: 8 [ 40.818356][ T5979] usb 7-1: config 0 has no interfaces? [ 40.819790][ T5979] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 40.822234][ T5979] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.829277][ T5979] usb 7-1: config 0 descriptor?? [ 41.054347][ T5304] Bluetooth: hci0: command tx timeout [ 41.055302][ T5943] Bluetooth: hci2: command tx timeout [ 41.091905][ T6079] Trying to write to read-only block-device nullb0 [ 41.134312][ T5943] Bluetooth: hci1: command tx timeout [ 41.134329][ T5304] Bluetooth: hci3: command tx timeout [ 41.693286][ T6094] FAULT_INJECTION: forcing a failure. [ 41.693286][ T6094] name failslab, interval 1, probability 0, space 0, times 1 [ 41.696731][ T6094] CPU: 3 UID: 0 PID: 6094 Comm: syz.0.28 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 41.699594][ T6094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 41.702312][ T6094] Call Trace: [ 41.703187][ T6094] [ 41.703944][ T6094] dump_stack_lvl+0x16c/0x1f0 [ 41.705162][ T6094] should_fail_ex+0x497/0x5b0 [ 41.706349][ T6094] ? fs_reclaim_acquire+0xae/0x150 [ 41.707854][ T6094] should_failslab+0xc2/0x120 [ 41.709053][ T6094] __kmalloc_noprof+0xcb/0x510 [ 41.710286][ T6094] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 41.711634][ T6094] video_usercopy+0x1ac/0x1620 [ 41.712889][ T6094] ? __pfx___video_do_ioctl+0x10/0x10 [ 41.714217][ T6094] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 41.716128][ T6094] ? __pfx_video_usercopy+0x10/0x10 [ 41.717447][ T6094] v4l2_ioctl+0x1ba/0x250 [ 41.718616][ T6094] ? __pfx_v4l2_ioctl+0x10/0x10 [ 41.719848][ T6094] __x64_sys_ioctl+0x190/0x200 [ 41.721086][ T6094] do_syscall_64+0xcd/0x250 [ 41.722298][ T6094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 41.723786][ T6094] RIP: 0033:0x7f9bf9b7ff19 [ 41.725529][ T6094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 41.732354][ T6094] RSP: 002b:00007f9bf79f6058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 41.735368][ T6094] RAX: ffffffffffffffda RBX: 00007f9bf9d45fa0 RCX: 00007f9bf9b7ff19 [ 41.738040][ T6094] RDX: 0000000020000140 RSI: 00000000c0d05605 RDI: 0000000000000003 [ 41.740150][ T6094] RBP: 00007f9bf79f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 41.742244][ T6094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.744225][ T6094] R13: 0000000000000000 R14: 00007f9bf9d45fa0 R15: 00007ffde4f5dec8 [ 41.746741][ T6094] [ 41.775638][ T39] kauditd_printk_skb: 113 callbacks suppressed [ 41.775649][ T39] audit: type=1400 audit(1733191941.765:228): avc: denied { ioctl } for pid=6095 comm="syz.0.29" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=9552 ioctlcmd=0xf503 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 41.783629][ T39] audit: type=1400 audit(1733191941.765:229): avc: denied { create } for pid=6095 comm="syz.0.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 41.805382][ T39] audit: type=1400 audit(1733191941.795:230): avc: denied { read } for pid=6097 comm="syz.0.30" name="usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.807668][ T6098] usb usb8: usbfs: process 6098 (syz.0.30) did not claim interface 0 before use [ 41.811449][ T39] audit: type=1400 audit(1733191941.795:231): avc: denied { open } for pid=6097 comm="syz.0.30" path="/dev/usbmon8" dev="devtmpfs" ino=762 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 41.842482][ T39] audit: type=1400 audit(1733191941.825:232): avc: denied { ioctl } for pid=6102 comm="syz.0.31" path="/dev/ppp" dev="devtmpfs" ino=730 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 42.109308][ T39] audit: type=1400 audit(1733191942.095:233): avc: denied { unlink } for pid=6109 comm="syz.1.33" name="#1" dev="tmpfs" ino=102 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 42.115014][ T39] audit: type=1400 audit(1733191942.095:234): avc: denied { mount } for pid=6109 comm="syz.1.33" name="/" dev="overlay" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.285871][ T39] audit: type=1400 audit(1733191942.275:235): avc: denied { create } for pid=6114 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.286138][ T6115] Zero length message leads to an empty skb [ 42.290838][ T39] audit: type=1400 audit(1733191942.275:236): avc: denied { write } for pid=6114 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 42.374685][ T5980] usb 6-1: new full-speed USB device number 3 using dummy_hcd [ 42.412626][ T6118] syz.3.36 uses obsolete (PF_INET,SOCK_PACKET) [ 42.415657][ T6118] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 42.418498][ T39] audit: type=1400 audit(1733191942.405:237): avc: denied { ioctl } for pid=6117 comm="syz.3.36" path="/dev/fb0" dev="devtmpfs" ino=637 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 42.523383][ T6120] netpci0: tun_chr_ioctl cmd 1074025676 [ 42.525381][ T6120] netpci0: owner set to 0 [ 42.527765][ T6120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 42.537542][ T5980] usb 6-1: config 0 interface 0 altsetting 18 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 42.540868][ T5980] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 42.543591][ T5980] usb 6-1: config 0 interface 0 altsetting 18 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 42.546986][ T5980] usb 6-1: config 0 interface 0 has no altsetting 0 [ 42.550161][ T5980] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 42.552646][ T5980] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.554724][ T5980] usb 6-1: Product: syz [ 42.555908][ T5980] usb 6-1: Manufacturer: syz [ 42.557098][ T5980] usb 6-1: SerialNumber: syz [ 42.559753][ T5980] usb 6-1: config 0 descriptor?? [ 42.562284][ T6113] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 42.643610][ T6122] fuse: Bad value for 'user_id' [ 42.645463][ T6122] fuse: Bad value for 'user_id' [ 42.751789][ T9] usb 7-1: USB disconnect, device number 2 [ 42.786478][ T5980] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 42.790450][ T5980] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71 [ 42.797219][ T6141] raw_sendmsg: syz.3.43 forgot to set AF_INET. Fix it! [ 42.797235][ T5980] usb 6-1: USB disconnect, device number 3 [ 42.819014][ T6140] syz.0.42 (6140): attempted to duplicate a private mapping with mremap. This is not supported. [ 42.945303][ T6159] warning: `syz.3.48' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 42.979672][ T6161] tmpfs: Unknown parameter 'usrquotaj·da›–Ø6êJîV¶8r'”¼Š(çnß­Ž-܇œhXg¡‹Qñ *p¬ª¾µ†ž; o‘ƒ¹./file1' [ 42.988846][ T6161] kAFS: unparsable volume name [ 42.993413][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.3.49'. [ 43.134466][ T5304] Bluetooth: hci0: command tx timeout [ 43.144884][ T5304] Bluetooth: hci2: command tx timeout [ 43.215208][ T5304] Bluetooth: hci1: command tx timeout [ 43.215297][ T5943] Bluetooth: hci3: command 0x040f tx timeout [ 43.235507][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.3.51'. [ 43.295172][ T6175] lo speed is unknown, defaulting to 1000 [ 43.297099][ T6175] lo speed is unknown, defaulting to 1000 [ 43.299967][ T6175] lo speed is unknown, defaulting to 1000 [ 43.303314][ T6175] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 43.308850][ T6175] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 43.321085][ T6175] lo speed is unknown, defaulting to 1000 [ 43.324798][ T6175] lo speed is unknown, defaulting to 1000 [ 43.327520][ T6175] lo speed is unknown, defaulting to 1000 [ 43.329527][ T6175] lo speed is unknown, defaulting to 1000 [ 43.349317][ T6180] trusted_key: syz.1.54 sent an empty control message without MSG_MORE. [ 43.362744][ T1470] IPVS: starting estimator thread 0... [ 43.455001][ T6184] IPVS: using max 38 ests per chain, 91200 per kthread [ 43.674635][ T5970] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 43.825794][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 43.829027][ T5970] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 43.831608][ T5970] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 43.835018][ T5970] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 43.837461][ T5970] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 43.840460][ T5970] usb 6-1: config 0 descriptor?? [ 43.947541][ T30] usb 7-1: new low-speed USB device number 3 using dummy_hcd [ 44.018481][ T6207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.63'. [ 44.055992][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.65'. [ 44.104557][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 44.108207][ T6212] netlink: 48 bytes leftover after parsing attributes in process `syz.3.65'. [ 44.130034][ T30] usb 7-1: unable to get BOS descriptor or descriptor too short [ 44.132849][ T30] usb 7-1: config index 0 descriptor too short (expected 2815, got 36) [ 44.135480][ T30] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 44.138100][ T30] usb 7-1: config 5 has 0 interfaces, different from the descriptor's value: 9 [ 44.143351][ T30] usb 7-1: string descriptor 0 read error: -22 [ 44.145135][ T30] usb 7-1: New USB device found, idVendor=19d2, idProduct=1057, bcdDevice= 9.6c [ 44.147542][ T30] usb 7-1: New USB device strings: Mfr=240, Product=1, SerialNumber=3 [ 44.178182][ T6226] No control pipe specified [ 44.220501][ T6230] kvm: kvm [6229]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x4000005a) = 0x0 [ 44.250040][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.252135][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.255943][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.257898][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.259809][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.261739][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.264656][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.266853][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.268767][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.270700][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.272618][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.274806][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.276740][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.278671][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.280636][ T5970] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 44.283057][ T5970] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 44.289150][ T5970] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 44.357806][ T6245] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 44.358347][ T6201] syz.2.60: attempt to access beyond end of device [ 44.358347][ T6201] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 44.363305][ T6201] efs: cannot read volume header [ 44.394620][ T6201] 9pnet_virtio: no channels available for device syz [ 44.525859][ T6247] SELinux: policydb version 1402900228 does not match my version range 15-33 [ 44.528454][ T6247] SELinux: failed to load policy [ 44.531618][ T6251] SELinux: policydb version 1402900228 does not match my version range 15-33 [ 44.534841][ T6251] SELinux: failed to load policy [ 44.584384][ T6254] uprobe: syz.1.57:6254 failed to unregister, leaking uprobe [ 44.611708][ T9] usb 7-1: USB disconnect, device number 3 [ 44.625010][ T6190] usb 6-1: string descriptor 0 read error: -22 [ 44.668565][ T6258] Cannot find del_set index 4 as target [ 44.826624][ T65] usb 6-1: USB disconnect, device number 4 [ 44.829698][ T6289] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 45.216374][ T5937] Bluetooth: hci2: command tx timeout [ 45.294357][ T5937] Bluetooth: hci1: command tx timeout [ 45.294393][ T5943] Bluetooth: hci3: command 0x040f tx timeout [ 45.549357][ T6312] syzkaller0: entered promiscuous mode [ 45.550899][ T6312] syzkaller0: entered allmulticast mode [ 45.565740][ T6311] lo speed is unknown, defaulting to 1000 [ 45.678859][ T6318] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 45.849287][ C3] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 45.871008][ T6334] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 46.265106][ T6358] netlink: 20 bytes leftover after parsing attributes in process `syz.1.107'. [ 46.269280][ T6357] block nbd1: shutting down sockets [ 46.311963][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.370010][ T6363] overlayfs: failed to resolve './file2': -2 [ 46.398328][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.440271][ T5304] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 46.446929][ T5304] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 46.450021][ T5304] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 46.453363][ T5304] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 46.457581][ T5304] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 46.460221][ T5304] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 46.477082][ T6366] lo speed is unknown, defaulting to 1000 [ 46.538848][ T6366] chnl_net:caif_netlink_parms(): no params data found [ 46.585517][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.601712][ T6366] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.603737][ T6366] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.605948][ T6366] bridge_slave_0: entered allmulticast mode [ 46.607989][ T6366] bridge_slave_0: entered promiscuous mode [ 46.610507][ T6366] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.612411][ T6366] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.623129][ T6366] bridge_slave_1: entered allmulticast mode [ 46.627818][ T6366] bridge_slave_1: entered promiscuous mode [ 46.644256][ T1470] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 46.673017][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.680005][ T6366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.683614][ T6366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.716704][ T6366] team0: Port device team_slave_0 added [ 46.720548][ T6366] team0: Port device team_slave_1 added [ 46.752413][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.754992][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.763896][ T6366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.769467][ T6366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.771368][ T6366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 46.778396][ T6366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.795441][ T1470] usb 6-1: Using ep0 maxpacket: 8 [ 46.801536][ T1470] usb 6-1: New USB device found, idVendor=0bed, idProduct=1101, bcdDevice=7c.68 [ 46.805112][ T1470] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.808147][ T1470] usb 6-1: Product: syz [ 46.809676][ T1470] usb 6-1: Manufacturer: syz [ 46.811363][ T1470] usb 6-1: SerialNumber: syz [ 46.818904][ T6366] hsr_slave_0: entered promiscuous mode [ 46.821284][ T6366] hsr_slave_1: entered promiscuous mode [ 46.823363][ T1470] usb 6-1: config 0 descriptor?? [ 46.823788][ T6366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 46.826962][ T1470] cp210x 6-1:0.0: cp210x converter detected [ 46.827812][ T6366] Cannot create hsr debugfs directory [ 46.860641][ T39] kauditd_printk_skb: 90 callbacks suppressed [ 46.860652][ T39] audit: type=1400 audit(1733191946.845:328): avc: denied { bind } for pid=6378 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.867809][ T12] bridge_slave_1: left allmulticast mode [ 46.869673][ T12] bridge_slave_1: left promiscuous mode [ 46.871849][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.872318][ T39] audit: type=1400 audit(1733191946.855:329): avc: denied { listen } for pid=6378 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.878833][ T39] audit: type=1400 audit(1733191946.855:330): avc: denied { connect } for pid=6378 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.883780][ T39] audit: type=1400 audit(1733191946.855:331): avc: denied { name_connect } for pid=6378 comm="syz.2.114" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 46.886333][ T12] bridge_slave_0: left allmulticast mode [ 46.889336][ T39] audit: type=1400 audit(1733191946.855:332): avc: denied { accept } for pid=6378 comm="syz.2.114" lport=42419 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 46.890706][ T12] bridge_slave_0: left promiscuous mode [ 46.895925][ T39] audit: type=1400 audit(1733191946.855:333): avc: denied { write } for pid=6378 comm="syz.2.114" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.895945][ T39] audit: type=1400 audit(1733191946.855:334): avc: denied { ioctl } for pid=6378 comm="syz.2.114" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 46.912672][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.113818][ T1470] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 47.116072][ T1470] cp210x 6-1:0.0: querying part number failed [ 47.119184][ T1470] usb 6-1: cp210x converter now attached to ttyUSB0 [ 47.123479][ T1470] usb 6-1: USB disconnect, device number 5 [ 47.127440][ T1470] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 47.129845][ T1470] cp210x 6-1:0.0: device disconnected [ 47.221566][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.226734][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.230172][ T12] bond0 (unregistering): Released all slaves [ 47.384974][ T6366] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 47.388780][ T6366] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 47.392295][ T6366] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 47.393793][ T39] audit: type=1400 audit(1733191947.375:335): avc: denied { read } for pid=6401 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.404220][ T6366] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 47.406686][ T39] audit: type=1400 audit(1733191947.375:336): avc: denied { open } for pid=6401 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.417773][ T39] audit: type=1400 audit(1733191947.375:337): avc: denied { getattr } for pid=6401 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1768 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.487492][ T6366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.499166][ T6366] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.505788][ T216] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.508279][ T216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.513878][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.516377][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.557842][ T12] hsr_slave_0: left promiscuous mode [ 47.559767][ T12] hsr_slave_1: left promiscuous mode [ 47.561694][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.563746][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.569155][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.571183][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.586859][ T12] veth1_vlan: left promiscuous mode [ 47.588701][ T12] veth0_vlan: left promiscuous mode [ 47.638993][ T6414] i2c i2c-1: Invalid block write size 34 [ 47.694151][ T6421] netlink: 52 bytes leftover after parsing attributes in process `syz.2.120'. [ 47.728604][ T6424] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 47.769026][ T6429] netlink: 8 bytes leftover after parsing attributes in process `syz.2.123'. [ 47.841779][ T6430] netlink: 84 bytes leftover after parsing attributes in process `syz.2.123'. [ 47.856459][ T5937] Bluetooth: hci4: command 0x1003 tx timeout [ 47.856414][ T5943] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 47.983683][ T6432] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 47.989042][ T6432] UDF-fs: Scanning with blocksize 2048 failed [ 47.995680][ T6432] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 47.998566][ T6432] UDF-fs: Scanning with blocksize 4096 failed [ 48.095600][ T6433] netlink: 16 bytes leftover after parsing attributes in process `syz.3.124'. [ 48.128195][ T12] team0 (unregistering): Port device team_slave_1 removed [ 48.189321][ T12] team0 (unregistering): Port device team_slave_0 removed [ 48.495618][ T5937] Bluetooth: hci3: command tx timeout [ 48.653686][ T6366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.679856][ T6447] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 48.684059][ T6366] veth0_vlan: entered promiscuous mode [ 48.693368][ T6366] veth1_vlan: entered promiscuous mode [ 48.713908][ T6366] veth0_macvtap: entered promiscuous mode [ 48.719824][ T6366] veth1_macvtap: entered promiscuous mode [ 48.726131][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.728869][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.731433][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.734127][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.737783][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.740648][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.743813][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.749495][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.752250][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.755374][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.758088][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.760608][ T6366] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.763291][ T6366] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.766922][ T6366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.771080][ T6366] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.773365][ T6366] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.776652][ T6366] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.778975][ T6366] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.791492][ T6450] process 'syz.1.126' launched './file0' with NULL argv: empty string added [ 48.827498][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.829693][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.196947][ T6467] Bluetooth: MGMT ver 1.23 [ 49.550558][ T6470] netlink: 'syz.1.132': attribute type 3 has an invalid length. [ 49.553090][ T6470] __nla_validate_parse: 1 callbacks suppressed [ 49.553098][ T6470] netlink: 44 bytes leftover after parsing attributes in process `syz.1.132'. [ 49.760016][ T1140] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.762946][ T1140] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.902174][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.137'. [ 49.995490][ T6496] trusted_key: encrypted_key: master key parameter 'r4šÈ«})û¤ÍO¬®Ýà°ÑÐOA' is invalid [ 50.071444][ T6491] kvm: kvm [6490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x4500000800 [ 50.092409][ T6491] kvm: kvm [6490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0xb900000800 [ 50.100994][ T6491] kvm: kvm [6490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xe200000000 [ 50.115248][ T6506] pim6reg: entered allmulticast mode [ 50.129484][ T6491] kvm: kvm [6490]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x13e00000000 [ 50.562695][ T6550] kvm: emulating exchange as write [ 50.577042][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 50.672796][ T6557] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 50.698171][ T6558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.162'. [ 50.804435][ T6573] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 50.810263][ T6573] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 51.111230][ T6598] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.121088][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz.3.174'. [ 51.374911][ T6626] netlink: 16 bytes leftover after parsing attributes in process `syz.3.184'. [ 51.471108][ T6638] input: syz0 as /devices/virtual/input/input6 [ 51.600417][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.191'. [ 51.681654][ T6655] qnx6: unable to set blocksize [ 51.807580][ T6663] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 51.811975][ T6663] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 51.821533][ T6664] batadv_slave_1: entered promiscuous mode [ 51.915011][ T6659] ebtables: ebtables: counters copy to user failed while replacing table [ 51.963591][ T6670] netlink: 36 bytes leftover after parsing attributes in process `syz.4.196'. [ 52.195172][ T6689] netlink: 288 bytes leftover after parsing attributes in process `syz.4.199'. [ 52.201735][ T39] kauditd_printk_skb: 43 callbacks suppressed [ 52.201745][ T39] audit: type=1400 audit(1733191952.185:381): avc: denied { shutdown } for pid=6688 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.204597][ T6689] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.199'. [ 52.208958][ T39] audit: type=1400 audit(1733191952.185:382): avc: denied { read } for pid=6688 comm="syz.4.199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 52.211253][ T6689] netlink: zone id is out of range [ 52.217490][ T39] audit: type=1400 audit(1733191952.205:383): avc: denied { rename } for pid=5335 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.217831][ T6689] netlink: zone id is out of range [ 52.223982][ T39] audit: type=1400 audit(1733191952.205:384): avc: denied { unlink } for pid=5335 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.225176][ T6689] netlink: zone id is out of range [ 52.225183][ T6689] netlink: zone id is out of range [ 52.230906][ T39] audit: type=1400 audit(1733191952.205:385): avc: denied { create } for pid=5335 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.232284][ T6689] netlink: get zone limit has 8 unknown bytes [ 52.346110][ T6692] lo speed is unknown, defaulting to 1000 [ 52.370641][ T39] audit: type=1326 audit(1733191952.355:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6691 comm="syz.4.200" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07a397ff19 code=0x0 [ 52.418718][ T39] audit: type=1400 audit(1733191952.405:387): avc: denied { ioctl } for pid=6694 comm="syz.3.201" path="socket:[15729]" dev="sockfs" ino=15729 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.478953][ T39] audit: type=1400 audit(1733191952.465:388): avc: denied { shutdown } for pid=6694 comm="syz.3.201" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 52.544725][ T6658] batadv_slave_1: left promiscuous mode [ 52.654349][ T5943] Bluetooth: hci3: command 0x041b tx timeout [ 52.684639][ T6702] netlink: 'syz.2.203': attribute type 1 has an invalid length. [ 52.865891][ T39] audit: type=1400 audit(1733191952.855:389): avc: denied { setattr } for pid=6703 comm="syz.2.204" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 53.276305][ T39] audit: type=1400 audit(1733191953.265:390): avc: denied { read } for pid=6708 comm="syz.3.206" name="rtc0" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 53.276735][ T6709] cgroup: none used incorrectly [ 53.332562][ T6713] MPI: mpi too large (16392 bits) [ 53.418131][ T6720] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 53.420087][ T6720] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.426464][ T6720] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 53.429508][ T6720] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 53.431247][ T6720] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.433642][ T6720] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 53.437242][ T6720] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 53.439524][ T6720] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.442237][ T6720] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 53.446507][ T6720] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 53.448124][ T6720] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.450344][ T6720] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 53.602596][ T6731] binder: 6730:6731 ioctl 80286722 20000440 returned -22 [ 53.671116][ T6734] netlink: 'syz.2.214': attribute type 1 has an invalid length. [ 53.678751][ T6734] 8021q: adding VLAN 0 to HW filter on device bond1 [ 53.689082][ T6734] bond1: (slave gretap1): making interface the new active one [ 53.692816][ T6734] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 53.769457][ T6739] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12336 sclass=netlink_route_socket pid=6739 comm=syz.4.216 [ 53.947439][ T6748] mkiss: ax0: crc mode is auto. [ 53.952601][ T30] IPVS: starting estimator thread 0... [ 53.976695][ T6737] fuse: Bad value for 'user_id' [ 53.978023][ T6737] fuse: Bad value for 'user_id' [ 53.979585][ T6737] fuse: Bad value for 'user_id' [ 53.980839][ T6737] fuse: Bad value for 'user_id' [ 54.017860][ T6751] lo speed is unknown, defaulting to 1000 [ 54.044349][ T6749] IPVS: using max 39 ests per chain, 93600 per kthread [ 54.055193][ T6751] geneve0: entered promiscuous mode [ 54.056642][ T6751] geneve0: entered allmulticast mode [ 54.434343][ T9] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 54.584799][ T9] usb 7-1: too many configurations: 9, using maximum allowed: 8 [ 54.588228][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.591178][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.595213][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.598693][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.601761][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.605500][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.608482][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.611459][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.615237][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.618509][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.621687][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.625492][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.628497][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.631511][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.635503][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.638522][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.641664][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.646142][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.649175][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.652233][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.656158][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.659253][ T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 54.662281][ T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 54.665400][ T9] usb 7-1: config 0 interface 0 has no altsetting 0 [ 54.668511][ T9] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 54.670776][ T9] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 54.672786][ T9] usb 7-1: Product: syz [ 54.673794][ T9] usb 7-1: Manufacturer: syz [ 54.675295][ T9] usb 7-1: SerialNumber: syz [ 54.681797][ T9] usb 7-1: config 0 descriptor?? [ 54.691356][ T9] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0 [ 55.096592][ T9] usb 7-1: USB disconnect, device number 4 [ 55.104016][ T9] yurex 7-1:0.0: USB YUREX #0 now disconnected [ 55.267095][ T6776] __nla_validate_parse: 1 callbacks suppressed [ 55.267106][ T6776] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 55.274427][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 55.356252][ T6793] lo speed is unknown, defaulting to 1000 [ 55.448723][ T6802] capability: warning: `syz.4.238' uses deprecated v2 capabilities in a way that may be insecure [ 55.464556][ T5943] Bluetooth: hci3: command 0x041b tx timeout [ 55.466651][ T5943] Bluetooth: hci2: command 0x0c1a tx timeout [ 55.466873][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 55.466902][ T5304] Bluetooth: hci0: command 0x0c1a tx timeout [ 55.492414][ T6810] netlink: 68 bytes leftover after parsing attributes in process `syz.4.239'. [ 55.501390][ T6809] netlink: 60 bytes leftover after parsing attributes in process `syz.1.240'. [ 55.504004][ T6808] random: crng reseeded on system resumption [ 55.616845][ T6823] xt_SECMARK: invalid mode: 0 [ 55.662159][ T6828] netlink: 36 bytes leftover after parsing attributes in process `syz.2.248'. [ 55.741283][ T6848] ipvlan2: entered promiscuous mode [ 55.741352][ T6846] netlink: 'syz.1.253': attribute type 20 has an invalid length. [ 55.751272][ T6846] netlink: 'syz.1.253': attribute type 7 has an invalid length. [ 55.753271][ T6846] netlink: 244 bytes leftover after parsing attributes in process `syz.1.253'. [ 55.783686][ T6858] rose0: renamed from bond0 (while UP) [ 55.847294][ T6873] FAULT_INJECTION: forcing a failure. [ 55.847294][ T6873] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 55.850685][ T6873] CPU: 1 UID: 0 PID: 6873 Comm: syz.2.259 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 55.853387][ T6873] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 55.856169][ T6873] Call Trace: [ 55.857072][ T6873] [ 55.857819][ T6873] dump_stack_lvl+0x16c/0x1f0 [ 55.859073][ T6873] should_fail_ex+0x497/0x5b0 [ 55.860321][ T6873] _copy_from_user+0x2e/0xd0 [ 55.861531][ T6873] do_sock_getsockopt+0x5f6/0x800 [ 55.862861][ T6873] ? trace_lock_acquire+0x50/0x1f0 [ 55.864186][ T6873] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 55.865605][ T6873] ? lock_acquire+0x2f/0xb0 [ 55.866805][ T6873] ? __fget_files+0x40/0x3a0 [ 55.868033][ T6873] ? __fget_files+0x206/0x3a0 [ 55.869272][ T6873] __sys_getsockopt+0x12f/0x260 [ 55.870578][ T6873] __x64_sys_getsockopt+0xbd/0x160 [ 55.871917][ T6873] ? do_syscall_64+0x91/0x250 [ 55.873164][ T6873] ? lockdep_hardirqs_on+0x7c/0x110 [ 55.874539][ T6873] do_syscall_64+0xcd/0x250 [ 55.875995][ T6873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.877617][ T6873] RIP: 0033:0x7f5b29f7ff19 [ 55.878801][ T6873] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.883738][ T6873] RSP: 002b:00007f5b2adca058 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 55.885887][ T6873] RAX: ffffffffffffffda RBX: 00007f5b2a145fa0 RCX: 00007f5b29f7ff19 [ 55.887862][ T6873] RDX: 000000000000000b RSI: 000000000000010d RDI: 0000000000000003 [ 55.889908][ T6873] RBP: 00007f5b2adca0a0 R08: 0000000020000040 R09: 0000000000000000 [ 55.891962][ T6873] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000001 [ 55.894005][ T6873] R13: 0000000000000000 R14: 00007f5b2a145fa0 R15: 00007ffd69d48438 [ 55.896064][ T6873] [ 55.924350][ T65] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 56.075736][ T65] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 231, changing to 11 [ 56.078931][ T65] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24694, setting to 1024 [ 56.081841][ T65] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 56.085460][ T65] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 56.087888][ T65] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.091110][ T65] usb 9-1: config 0 descriptor?? [ 56.094053][ T65] usbhid 9-1:0.0: can't add hid device: -22 [ 56.097164][ T65] usbhid 9-1:0.0: probe with driver usbhid failed with error -22 [ 56.690797][ T6959] netlink: 4 bytes leftover after parsing attributes in process `syz.1.265'. [ 56.864666][ T58] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 56.938574][ T6984] loop7: detected capacity change from 0 to 16384 [ 56.981113][ T6984] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 0 [ 56.983696][ T6984] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 57.004124][ T6985] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 57.038918][ T6986] I/O error, dev loop7, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 16 prio class 0 [ 57.041640][ T6986] Buffer I/O error on dev loop7, logical block 0, lost async page write [ 57.044049][ T6986] Buffer I/O error on dev loop7, logical block 1, lost async page write [ 57.047154][ T6986] Buffer I/O error on dev loop7, logical block 2, lost async page write [ 57.049391][ T6986] Buffer I/O error on dev loop7, logical block 3, lost async page write [ 57.051577][ T6986] Buffer I/O error on dev loop7, logical block 4, lost async page write [ 57.053782][ T6986] Buffer I/O error on dev loop7, logical block 5, lost async page write [ 57.056436][ T6986] Buffer I/O error on dev loop7, logical block 6, lost async page write [ 57.059208][ T6986] Buffer I/O error on dev loop7, logical block 7, lost async page write [ 57.061439][ T6986] Buffer I/O error on dev loop7, logical block 8, lost async page write [ 57.091370][ T6988] sctp: [Deprecated]: syz.3.273 (pid 6988) Use of int in maxseg socket option. [ 57.091370][ T6988] Use struct sctp_assoc_value instead [ 57.095325][ T6989] sctp: [Deprecated]: syz.3.273 (pid 6989) Use of int in maxseg socket option. [ 57.095325][ T6989] Use struct sctp_assoc_value instead [ 57.534424][ T5937] Bluetooth: hci1: command 0x0c1a tx timeout [ 57.534437][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 57.544572][ T5941] Bluetooth: hci0: command 0x0c1a tx timeout [ 57.544817][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 57.862997][ T6991] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6991 comm=syz.1.274 [ 57.867525][ T6991] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 57.909629][ T5937] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 57.962969][ T39] kauditd_printk_skb: 31 callbacks suppressed [ 57.962984][ T39] audit: type=1400 audit(1733191957.945:422): avc: denied { name_bind } for pid=6995 comm="syz.3.277" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 57.976160][ T39] audit: type=1400 audit(1733191957.945:423): avc: denied { name_bind } for pid=6995 comm="syz.3.277" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 57.976182][ T39] audit: type=1400 audit(1733191957.955:424): avc: denied { create } for pid=6998 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.976196][ T39] audit: type=1400 audit(1733191957.955:425): avc: denied { bind } for pid=6998 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 57.976210][ T39] audit: type=1400 audit(1733191957.955:426): avc: denied { write } for pid=6998 comm="syz.2.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 58.018758][ T39] audit: type=1400 audit(1733191958.005:427): avc: denied { attach_queue } for pid=7002 comm="syz.3.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 58.067468][ T39] audit: type=1400 audit(1733191958.055:428): avc: denied { getopt } for pid=7010 comm="syz.1.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 58.100618][ T39] audit: type=1400 audit(1733191958.085:429): avc: denied { create } for pid=7015 comm="syz.1.284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 58.149782][ T39] audit: type=1400 audit(1733191958.135:430): avc: denied { ioctl } for pid=7020 comm="syz.1.285" path="/dev/fuse" dev="devtmpfs" ino=105 ioctlcmd=0x70c9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 58.172583][ T39] audit: type=1804 audit(1733191958.135:431): pid=7013 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.2.283" name="/newroot/64/file1" dev="fuse" ino=1 res=1 errno=0 [ 58.223329][ T7029] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 58.265463][ T7036] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.291'. [ 58.267897][ T7036] openvswitch: netlink: Unknown key attributes 20 [ 58.329474][ T7043] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 58.465570][ T58] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.631578][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.634788][ T58] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 58.638160][ T58] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 58.642424][ T58] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 58.645582][ T58] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.650436][ T58] usb 8-1: config 0 descriptor?? [ 58.694810][ T25] usb 9-1: USB disconnect, device number 2 [ 58.866785][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.868763][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.870755][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.872653][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.877415][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.879369][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.881335][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.883276][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.885897][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.887938][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.889892][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.891823][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.893783][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.896071][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.901168][ T58] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 58.903235][ T58] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 58.925549][ T58] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 59.065245][ T5981] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 59.226275][ T5981] usb 6-1: Using ep0 maxpacket: 16 [ 59.229948][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.233137][ T5981] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 59.236001][ T5981] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 59.239765][ T5981] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 59.242019][ T5981] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.245431][ T5981] usb 6-1: config 0 descriptor?? [ 59.615470][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 59.616828][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 59.617499][ T5937] Bluetooth: hci0: command 0x0c1a tx timeout [ 59.619131][ T5941] Bluetooth: hci2: command 0x0c1a tx timeout [ 59.635988][ T5981] usbhid 6-1:0.0: can't add hid device: -71 [ 59.638003][ T5981] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 59.655416][ T5981] usb 6-1: USB disconnect, device number 6 [ 59.743203][ T7077] mmap: syz.4.303 (7077) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 60.248816][ T7089] SELinux: syz.1.307 (7089) set checkreqprot to 1. This is no longer supported. [ 60.549287][ T7115] netlink: 92 bytes leftover after parsing attributes in process `syz.1.316'. [ 60.551616][ T7116] netlink: 92 bytes leftover after parsing attributes in process `syz.1.316'. [ 60.623541][ T7121] wg2: entered promiscuous mode [ 60.630046][ T7121] wg2: entered allmulticast mode [ 60.677325][ T7130] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 60.704703][ T7137] CUSE: info not properly terminated [ 60.765977][ T7144] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 60.768152][ T7148] netlink: 'syz.2.327': attribute type 29 has an invalid length. [ 60.770945][ T7148] netlink: 'syz.2.327': attribute type 29 has an invalid length. [ 60.773377][ T7148] netlink: 500 bytes leftover after parsing attributes in process `syz.2.327'. [ 60.776083][ T7148] unsupported nla_type 40 [ 60.869881][ T7151] netlink: 68 bytes leftover after parsing attributes in process `syz.2.329'. [ 60.961513][ T5981] usb 8-1: USB disconnect, device number 2 [ 60.999651][ T7157] random: crng reseeded on system resumption [ 61.004282][ T5979] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 61.154360][ T5979] usb 9-1: Using ep0 maxpacket: 16 [ 61.157369][ T5979] usb 9-1: config 0 has an invalid interface number: 8 but max is 0 [ 61.159925][ T5979] usb 9-1: config 0 has no interface number 0 [ 61.161611][ T5979] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 61.164395][ T5979] usb 9-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 61.175618][ T5979] usb 9-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 61.177926][ T5979] usb 9-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 61.181248][ T5979] usb 9-1: Product: syz [ 61.182364][ T5979] usb 9-1: SerialNumber: syz [ 61.184516][ T5979] usb 9-1: config 0 descriptor?? [ 61.187076][ T5979] cm109 9-1:0.8: invalid payload size 0, expected 4 [ 61.189275][ T5979] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:0.8/input/input9 [ 61.410575][ C3] cm109 9-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 61.410598][ T5981] usb 9-1: USB disconnect, device number 3 [ 61.412441][ C3] cm109 9-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 61.418816][ T5981] cm109 9-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 61.534370][ T7181] input: syz0 as /devices/virtual/input/input10 [ 61.617451][ T5937] Bluetooth: hci1: SCO packet for unknown connection handle 201 [ 61.619317][ T5937] Bluetooth: hci1: SCO packet for unknown connection handle 200 [ 61.704398][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 61.932068][ T7205] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 62.077913][ T7215] overlay: filesystem on ./bus not supported [ 62.397691][ T7241] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 62.440299][ T7255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.360'. [ 62.463565][ T7252] /dev/sg0: Can't lookup blockdev [ 62.495484][ T7270] Cannot find set identified by id 65534 to match [ 62.537170][ T7274] o2cb: This node has not been configured. [ 62.538800][ T7274] o2cb: Cluster check failed. Fix errors before retrying. [ 62.540594][ T7274] (syz.1.367,7274,2):user_dlm_register:674 ERROR: status = -22 [ 62.542485][ T7274] (syz.1.367,7274,2):dlmfs_mkdir:436 ERROR: Error -22 could not register domain "bus" [ 62.608882][ T7274] 9pnet_fd: Insufficient options for proto=fd [ 62.629962][ T5937] Bluetooth: hci1: unexpected event for opcode 0x1004 [ 62.730811][ T7294] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 62.833822][ T6019] kernel read not supported for file /video7 (pid: 6019 comm: kworker/1:3) [ 62.875756][ T7311] input: syz0 as /devices/virtual/input/input11 [ 62.940224][ T7315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.378'. [ 62.994073][ T7320] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 63.077949][ T39] kauditd_printk_skb: 40 callbacks suppressed [ 63.077960][ T39] audit: type=1400 audit(1733191963.064:472): avc: denied { ioctl } for pid=7328 comm="syz.1.383" path="mnt:[4026532895]" dev="nsfs" ino=4026532895 ioctlcmd=0x940c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 63.107192][ T39] audit: type=1400 audit(1733191963.094:473): avc: denied { connect } for pid=7332 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 63.112356][ T39] audit: type=1400 audit(1733191963.094:474): avc: denied { getopt } for pid=7332 comm="syz.1.385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 63.150574][ T7336] autofs4:pid:7336:validate_dev_ioctl: invalid path supplied for cmd(0xc018937e) [ 63.287914][ T39] audit: type=1400 audit(1733191963.274:475): avc: denied { execute } for pid=7339 comm="syz.1.387" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 63.294399][ T39] audit: type=1400 audit(1733191963.274:476): avc: denied { getopt } for pid=7339 comm="syz.1.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 63.435718][ T7341] block nbd2: shutting down sockets [ 63.481895][ T7344] netlink: 10 bytes leftover after parsing attributes in process `syz.2.389'. [ 63.491172][ T7344] netlink: 8 bytes leftover after parsing attributes in process `syz.2.389'. [ 63.493989][ T7344] netlink: 4 bytes leftover after parsing attributes in process `syz.2.389'. [ 63.660641][ T7363] bad cache= option: none [ 63.660641][ T7363] [ 63.664915][ T7363] CIFS: VFS: bad cache= option: none [ 63.733240][ T39] audit: type=1400 audit(1733191963.714:477): avc: denied { create } for pid=7372 comm="syz.3.398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 63.758065][ T39] audit: type=1400 audit(1733191963.744:478): avc: denied { accept } for pid=7380 comm="syz.2.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.801809][ T7381] kvm: MONITOR instruction emulated as NOP! [ 63.954113][ T39] audit: type=1400 audit(1733191963.934:479): avc: denied { bind } for pid=7398 comm="syz.4.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 64.029545][ T7404] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 64.031579][ T7404] UDF-fs: Scanning with blocksize 2048 failed [ 64.035134][ T7404] UDF-fs: warning (device sr0): udf_load_vrs: No VRS found [ 64.037286][ T7404] UDF-fs: Scanning with blocksize 4096 failed [ 64.116295][ T65] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 64.175789][ T7407] program syz.4.409 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.280704][ T39] audit: type=1400 audit(1733191964.264:480): avc: denied { mount } for pid=7414 comm="syz.4.411" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 64.298877][ T7387] xt_hashlimit: size too large, truncated to 1048576 [ 64.300907][ T7387] xt_hashlimit: max too large, truncated to 1048576 [ 64.317764][ T7422] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 64.403846][ T39] audit: type=1400 audit(1733191964.384:481): avc: denied { listen } for pid=7430 comm="syz.4.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 64.406108][ T65] usb 6-1: unable to get BOS descriptor or descriptor too short [ 64.413388][ T65] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 64.415797][ T65] usb 6-1: can't read configurations, error -71 [ 64.794589][ T5979] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 64.814276][ T58] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 64.944947][ T5979] usb 9-1: too many configurations: 9, using maximum allowed: 8 [ 64.947713][ T5979] usb 9-1: config 0 has no interfaces? [ 64.949964][ T5979] usb 9-1: config 0 has no interfaces? [ 64.952079][ T5979] usb 9-1: config 0 has no interfaces? [ 64.954492][ T5979] usb 9-1: config 0 has no interfaces? [ 64.957676][ T5979] usb 9-1: config 0 has no interfaces? [ 64.960020][ T5979] usb 9-1: config 0 has no interfaces? [ 64.962094][ T5979] usb 9-1: config 0 has no interfaces? [ 64.964815][ T5979] usb 9-1: config 0 has no interfaces? [ 64.968681][ T5979] usb 9-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 64.971439][ T5979] usb 9-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 64.973596][ T5979] usb 9-1: Product: syz [ 64.975408][ T5979] usb 9-1: Manufacturer: syz [ 64.976644][ T5979] usb 9-1: SerialNumber: syz [ 64.979280][ T5979] usb 9-1: config 0 descriptor?? [ 64.985031][ T58] usb 7-1: Using ep0 maxpacket: 8 [ 64.989055][ T58] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 64.994245][ T58] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 64.996917][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 64.999343][ T58] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.001905][ T58] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.002469][ T7443] vlan3: entered allmulticast mode [ 65.005483][ T58] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 65.007955][ T7443] bond0: entered allmulticast mode [ 65.009509][ T58] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.010855][ T7443] bond_slave_0: entered allmulticast mode [ 65.015713][ T7443] bond_slave_1: entered allmulticast mode [ 65.018981][ T7443] bond0: left allmulticast mode [ 65.020381][ T7443] bond_slave_0: left allmulticast mode [ 65.022231][ T7443] bond_slave_1: left allmulticast mode [ 65.185311][ T7435] program syz.4.415 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.189384][ T5979] usb 9-1: USB disconnect, device number 4 [ 65.217789][ T58] usb 7-1: usb_control_msg returned -32 [ 65.219315][ T58] usbtmc 7-1:16.0: can't read capabilities [ 65.233478][ T7452] openvswitch: netlink: Missing key (keys=40, expected=100) [ 65.355104][ T7453] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 65.481849][ T7464] overlayfs: failed to resolve './file0': -2 [ 65.616258][ T7466] /dev/sr0: Can't open blockdev [ 65.636104][ T7468] usbtmc 7-1:16.0: usb_control_msg returned -32 [ 65.692401][ T7473] __nla_validate_parse: 6 callbacks suppressed [ 65.692411][ T7473] netlink: 48 bytes leftover after parsing attributes in process `syz.1.428'. [ 65.701310][ T7473] fuse: Bad value for 'user_id' [ 65.702550][ T7473] fuse: Bad value for 'user_id' [ 65.838695][ T7437] can0: slcan on ptm0. [ 65.843094][ T7475] netlink: 8 bytes leftover after parsing attributes in process `syz.4.429'. [ 65.957742][ T7483] netlink: 'syz.3.431': attribute type 10 has an invalid length. [ 65.961160][ T7483] syz_tun: entered promiscuous mode [ 65.971856][ T7483] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 66.061743][ T7490] netlink: 104 bytes leftover after parsing attributes in process `syz.3.433'. [ 66.101937][ T7492] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 66.104761][ T7492] overlayfs: failed to set xattr on upper [ 66.106635][ T7492] overlayfs: ...falling back to redirect_dir=nofollow. [ 66.108842][ T7492] overlayfs: ...falling back to index=off. [ 66.110726][ T7492] overlayfs: ...falling back to uuid=null. [ 66.171667][ T7494] netlink: 'syz.3.435': attribute type 11 has an invalid length. [ 66.621705][ T7500] batadv_slave_1: entered promiscuous mode [ 66.624298][ T7500] batadv_slave_1: left promiscuous mode [ 66.630232][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.632527][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.635016][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.637092][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.639131][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.641171][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.643291][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.645862][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.648031][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.650097][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.652593][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.656470][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.658686][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.660824][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.662945][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.666247][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.668296][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.670504][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.672621][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.676083][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.678964][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.681794][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.687159][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.690224][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.693073][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.696357][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.699176][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.702326][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.705653][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.709706][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.712742][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.716276][ T7501] overlay: filesystem on ./file0 not supported as upperdir [ 66.760021][ T7504] futex_wake_op: syz.4.439 tries to shift op by 32; fix this program [ 66.817887][ T7508] netlink: 20 bytes leftover after parsing attributes in process `syz.4.441'. [ 66.988374][ T7519] lo speed is unknown, defaulting to 1000 [ 67.125686][ T7523] cgroup: release_agent respecified [ 67.127152][ T7523] cgroup: release_agent respecified [ 67.128771][ T7523] cgroup: release_agent respecified [ 67.130155][ T7523] cgroup: release_agent respecified [ 67.131583][ T7523] cgroup: release_agent respecified [ 67.133029][ T7523] cgroup: release_agent respecified [ 67.135007][ T7523] cgroup: release_agent respecified [ 67.136449][ T7523] cgroup: release_agent respecified [ 67.137869][ T7523] cgroup: release_agent respecified [ 67.139280][ T7523] cgroup: release_agent respecified [ 67.140659][ T7523] cgroup: release_agent respecified [ 67.142641][ T7523] cgroup: release_agent respecified [ 67.144314][ T7523] cgroup: release_agent respecified [ 67.145756][ T7523] cgroup: release_agent respecified [ 67.147218][ T7523] cgroup: release_agent respecified [ 67.148665][ T7523] cgroup: release_agent respecified [ 67.150134][ T7523] cgroup: release_agent respecified [ 67.151560][ T7523] cgroup: release_agent respecified [ 67.152932][ T7523] cgroup: release_agent respecified [ 67.156775][ T7523] cgroup: release_agent respecified [ 67.159488][ T7523] cgroup: release_agent respecified [ 67.160907][ T7523] cgroup: release_agent respecified [ 67.162362][ T7523] cgroup: release_agent respecified [ 67.163777][ T7523] cgroup: release_agent respecified [ 67.165579][ T7523] cgroup: release_agent respecified [ 67.167077][ T7523] cgroup: release_agent respecified [ 67.169242][ T7523] cgroup: release_agent respecified [ 67.170712][ T7523] cgroup: release_agent respecified [ 67.172191][ T7523] cgroup: release_agent respecified [ 67.173649][ T7523] cgroup: release_agent respecified [ 67.175735][ T7523] cgroup: release_agent respecified [ 67.177859][ T7523] cgroup: release_agent respecified [ 67.179329][ T7523] cgroup: release_agent respecified [ 67.180799][ T7523] cgroup: release_agent respecified [ 67.182244][ T7523] cgroup: release_agent respecified [ 67.183706][ T7523] cgroup: release_agent respecified [ 67.338142][ T7543] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.342782][ T7543] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.408145][ T7549] netlink: 1 bytes leftover after parsing attributes in process `syz.1.453'. [ 67.579590][ T9] usb 7-1: USB disconnect, device number 5 [ 67.666795][ T7437] can0 (unregistered): slcan off ptm0. [ 67.806980][ T7561] netlink: 12 bytes leftover after parsing attributes in process `syz.2.456'. [ 68.040402][ T7582] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 68.088725][ T7584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.212156][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 68.212166][ T39] audit: type=1400 audit(1733191968.194:507): avc: denied { setopt } for pid=7585 comm="syz.3.465" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 68.433004][ T39] audit: type=1400 audit(1733191968.414:508): avc: denied { execute } for pid=7589 comm="syz.1.467" path="/dev/dsp" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 68.454428][ T58] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 68.530860][ T7597] netlink: 8 bytes leftover after parsing attributes in process `syz.1.469'. [ 68.533384][ T7597] netlink: 16 bytes leftover after parsing attributes in process `syz.1.469'. [ 68.539505][ T7597] gtp0: entered promiscuous mode [ 68.540884][ T7597] gtp0: entered allmulticast mode [ 68.615985][ T58] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 68.624902][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.628410][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.632638][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.645906][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.649505][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.652309][ T39] audit: type=1400 audit(1733191968.634:509): avc: denied { write } for pid=7599 comm="syz.4.470" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 68.653972][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.660506][ T7605] tmpfs: Unknown parameter 'Nuge' [ 68.667550][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.670831][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.684709][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.688271][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.691934][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.700505][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.703823][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.710602][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.717712][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.721016][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.724415][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.728253][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.731593][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.734963][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.741977][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.745450][ T58] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 68.748765][ T58] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 68.752523][ T58] usb 8-1: config 0 interface 0 has no altsetting 0 [ 68.757315][ T58] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 68.760727][ T58] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 68.763714][ T58] usb 8-1: Product: syz [ 68.765504][ T58] usb 8-1: Manufacturer: syz [ 68.767643][ T58] usb 8-1: SerialNumber: syz [ 68.773163][ T58] usb 8-1: config 0 descriptor?? [ 68.786450][ T58] yurex 8-1:0.0: USB YUREX device now attached to Yurex #0 [ 68.795051][ T7614] sch_tbf: burst 6758 is lower than device lo mtu (65550) ! [ 68.813378][ T7615] sch_tbf: burst 6758 is lower than device lo mtu (65550) ! [ 68.825655][ T7614] i2c i2c-1: Invalid block write size 34 [ 68.867500][ T5937] Bluetooth: hci3: unexpected event for opcode 0x0c5a [ 68.964360][ T64] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 68.989048][ T5981] usb 8-1: USB disconnect, device number 3 [ 68.991498][ T5981] yurex 8-1:0.0: USB YUREX #0 now disconnected [ 69.043377][ T7630] netlink: 528 bytes leftover after parsing attributes in process `syz.2.481'. [ 69.048585][ T39] audit: type=1400 audit(1733191969.034:510): avc: denied { connect } for pid=7629 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.054508][ T39] audit: type=1400 audit(1733191969.034:511): avc: denied { read } for pid=7629 comm="syz.2.481" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 69.125064][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 69.129065][ T64] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 69.132555][ T64] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 69.138908][ T64] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 69.142222][ T64] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.147176][ T64] usb 6-1: config 0 descriptor?? [ 69.149495][ T7610] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 69.164416][ T39] audit: type=1326 audit(1733191969.154:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7635 comm="syz.2.482" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5b29f7ff19 code=0x0 [ 69.557810][ T64] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 69.561097][ T64] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 69.570219][ T64] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 69.895348][ T65] usb 6-1: USB disconnect, device number 9 [ 70.292215][ T7645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.484'. [ 70.448259][ T7653] binder: 7652:7653 ioctl 89ec 20000000 returned -22 [ 70.450611][ T39] audit: type=1400 audit(1733191970.434:513): avc: denied { transfer } for pid=7652 comm="syz.2.487" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 70.452526][ T7654] binder: BINDER_SET_CONTEXT_MGR already set [ 70.460053][ T7654] binder: 7652:7654 ioctl 4018620d 20000100 returned -16 [ 70.491082][ T7660] fuse: Unknown parameter 'measure' [ 70.498291][ T7660] IPv4: Oversized IP packet from 127.202.26.0 [ 70.510240][ T39] audit: type=1400 audit(1733191970.494:514): avc: denied { write } for pid=7659 comm="syz.2.489" laddr=::ffff:127.0.0.1 lport=20000 faddr=::ffff:127.0.0.1 fport=55956 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 71.058137][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.060671][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.311892][ T39] audit: type=1400 audit(1733191971.294:515): avc: denied { create } for pid=7681 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 71.317026][ T7659] dccp_close: ABORT with 92 bytes unread [ 71.331819][ T39] audit: type=1400 audit(1733191971.314:516): avc: denied { write } for pid=7681 comm="syz.1.493" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 71.339326][ T7686] tty tty1: ldisc open failed (-12), clearing slot 0 [ 71.474102][ T7700] ip6t_REJECT: ECHOREPLY is not supported [ 71.508164][ T7702] netlink: 84 bytes leftover after parsing attributes in process `syz.2.499'. [ 71.564684][ T65] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 71.614280][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 71.724425][ T65] usb 8-1: Using ep0 maxpacket: 32 [ 71.726981][ T65] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 71.729098][ T65] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 71.731447][ T65] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 71.733833][ T65] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 71.736429][ T65] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 71.738830][ T65] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 71.742162][ T65] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 71.744565][ T65] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.747731][ T65] usb 8-1: config 0 descriptor?? [ 71.765435][ T9] usb 6-1: Using ep0 maxpacket: 8 [ 71.768552][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 71.770521][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.773770][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.776863][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.779761][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.783794][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 71.786364][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.789268][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.792879][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.796305][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.800024][ T9] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 71.802236][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 71.805386][ T9] usb 6-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.808658][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.811858][ T9] usb 6-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 71.818334][ T9] usb 6-1: string descriptor 0 read error: -22 [ 71.820286][ T9] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 71.822828][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.829435][ T9] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 71.953841][ T65] usblp 8-1:0.0: usblp1: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 72.205687][ T30] usb 8-1: USB disconnect, device number 4 [ 72.494431][ T5943] Bluetooth: hci4: command 0x1003 tx timeout [ 72.494455][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 72.635158][ T7724] overlayfs: refusing to follow metacopy origin for (/file0) [ 72.695308][ T7728] erofs (device nbd4): cannot find valid erofs superblock [ 73.483425][ T39] kauditd_printk_skb: 3 callbacks suppressed [ 73.483436][ T39] audit: type=1400 audit(1733191973.464:520): avc: denied { bind } for pid=7732 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.491909][ T39] audit: type=1400 audit(1733191973.474:521): avc: denied { listen } for pid=7732 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.498618][ T39] audit: type=1400 audit(1733191973.474:522): avc: denied { connect } for pid=7732 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.508532][ T39] audit: type=1400 audit(1733191973.484:523): avc: denied { accept } for pid=7732 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.513634][ T39] audit: type=1400 audit(1733191973.484:524): avc: denied { read } for pid=7732 comm="syz.2.509" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 73.587891][ T7736] evm: overlay not supported [ 73.588348][ T7728] syz.4.507 (7728) used greatest stack depth: 20896 bytes left [ 73.616802][ T7739] lo speed is unknown, defaulting to 1000 [ 73.676083][ T7744] program syz.2.513 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 73.985371][ T5937] Bluetooth: hci0: unexpected event for opcode 0x0c7b [ 74.034390][ T64] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 74.041998][ T39] audit: type=1400 audit(1733191974.024:525): avc: denied { remount } for pid=7760 comm="syz.2.520" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.043449][ T7762] ======================================================= [ 74.043449][ T7762] WARNING: The mand mount option has been deprecated and [ 74.043449][ T7762] and is ignored by this kernel. Remove the mand [ 74.043449][ T7762] option from the mount to silence this warning. [ 74.043449][ T7762] ======================================================= [ 74.095426][ T30] usblp1: removed [ 74.097620][ T5981] usb 6-1: USB disconnect, device number 10 [ 74.164326][ T64] usb 9-1: device descriptor read/64, error -71 [ 74.404313][ T30] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 74.404316][ T64] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 74.428952][ T7766] netlink: 'syz.3.522': attribute type 23 has an invalid length. [ 74.457964][ T7776] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7776 comm=syz.1.524 [ 74.541424][ T64] usb 9-1: device descriptor read/64, error -71 [ 74.645686][ T64] usb usb9-port1: attempt power cycle [ 74.771334][ T39] audit: type=1400 audit(1733191974.754:526): avc: denied { read } for pid=7792 comm="syz.1.528" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 74.780544][ T39] audit: type=1400 audit(1733191974.754:527): avc: denied { open } for pid=7792 comm="syz.1.528" path="/dev/input/mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 74.853541][ T7798] netlink: 'syz.1.530': attribute type 21 has an invalid length. [ 74.920685][ T7798] netlink: 36 bytes leftover after parsing attributes in process `syz.1.530'. [ 74.922923][ T7798] netlink: 44 bytes leftover after parsing attributes in process `syz.1.530'. [ 74.995638][ T64] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 75.027675][ T64] usb 9-1: device descriptor read/8, error -71 [ 75.284376][ T64] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 75.326542][ T64] usb 9-1: device descriptor read/8, error -71 [ 75.403819][ T39] audit: type=1400 audit(1733191975.384:528): avc: denied { setopt } for pid=7821 comm="syz.3.535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.409237][ T39] audit: type=1400 audit(1733191975.394:529): avc: denied { ioctl } for pid=7821 comm="syz.3.535" path="socket:[20186]" dev="sockfs" ino=20186 ioctlcmd=0xae05 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 75.434809][ T64] usb usb9-port1: unable to enumerate USB device [ 75.445733][ T7824] lo speed is unknown, defaulting to 1000 [ 75.764073][ T5937] Bluetooth: hci0: unexpected event for opcode 0x0413 [ 76.178174][ T1023] cfg80211: failed to load regulatory.db [ 76.227921][ T7856] netlink: 'syz.1.544': attribute type 10 has an invalid length. [ 76.235077][ T7856] syz_tun: entered promiscuous mode [ 76.239643][ T7856] rose0: (slave syz_tun): Enslaving as an active interface with an up link [ 76.297597][ T7858] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7858 comm=syz.1.545 [ 76.650688][ T7875] netlink: 'syz.2.551': attribute type 1 has an invalid length. [ 76.652695][ T7875] netlink: 'syz.2.551': attribute type 4 has an invalid length. [ 76.654883][ T7875] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.551'. [ 76.715026][ T7880] sctp: [Deprecated]: syz.2.553 (pid 7880) Use of int in max_burst socket option. [ 76.715026][ T7880] Use struct sctp_assoc_value instead [ 76.924685][ T25] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 77.031692][ T7917] xt_l2tp: v2 tid > 0xffff: 150994944 [ 77.044272][ T1023] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 77.087171][ T25] usb 8-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f [ 77.089485][ T25] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.091488][ T25] usb 8-1: Product: syz [ 77.092548][ T25] usb 8-1: Manufacturer: syz [ 77.093709][ T25] usb 8-1: SerialNumber: syz [ 77.096200][ T25] usb 8-1: config 0 descriptor?? [ 77.177612][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 200 [ 77.181085][ T5937] Bluetooth: hci0: SCO packet for unknown connection handle 200 [ 77.204388][ T1023] usb 6-1: Using ep0 maxpacket: 8 [ 77.214649][ T1023] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 77.217532][ T1023] usb 6-1: config 179 has no interface number 0 [ 77.219588][ T1023] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 77.222764][ T1023] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 77.228076][ T1023] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 77.230993][ T1023] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 77.233989][ T1023] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 77.238579][ T1023] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 77.240986][ T1023] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.245495][ T7883] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 77.306431][ T25] usb 8-1: USB disconnect, device number 6 [ 77.369263][ T7932] can0: slcan on ptm0. [ 77.424473][ T7932] ttyprintk ttyprintk: ldisc open failed (-12), clearing slot 0 [ 77.436726][ T7930] can0 (unregistered): slcan off ptm0. [ 77.458759][ T1023] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb6/6-1/6-1:179.65/input/input14 [ 77.709959][ T1023] usb 6-1: USB disconnect, device number 11 [ 77.711580][ C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 77.711600][ C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 77.717819][ T1023] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 77.755054][ T6071] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 77.914572][ T6071] usb 7-1: Using ep0 maxpacket: 8 [ 77.917067][ T6071] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 77.919193][ T6071] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 77.921659][ T6071] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 77.924350][ T6071] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 77.926915][ T6071] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 77.930320][ T6071] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 77.932593][ T6071] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.056939][ T7955] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 78.058754][ T7955] overlayfs: failed to set xattr on upper [ 78.060269][ T7955] overlayfs: ...falling back to redirect_dir=nofollow. [ 78.061968][ T7955] overlayfs: ...falling back to index=off. [ 78.063446][ T7955] overlayfs: ...falling back to uuid=null. [ 78.065002][ T7955] overlayfs: ...falling back to xino=off. [ 78.101533][ T7959] No control pipe specified [ 78.137889][ T7962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 78.137985][ T6071] usb 7-1: usb_control_msg returned -32 [ 78.141551][ T6071] usbtmc 7-1:16.0: can't read capabilities [ 78.198507][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.3.581'. [ 78.198560][ T7967] tmpfs: Unknown parameter 'iîod܆Ár3ßrZ ³ýICç@Ù9>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 85.638745][ T8402] ufs: ufstype=old is supported read-only [ 85.642114][ T8402] syz.3.716: attempt to access beyond end of device [ 85.642114][ T8402] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0 [ 85.785911][ T5937] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 85.844069][ T8412] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 85.853436][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 85.856792][ T8412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.720'. [ 86.049901][ T8423] lo speed is unknown, defaulting to 1000 [ 86.301462][ T5937] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 86.707038][ T8455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.734'. [ 86.724383][ T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 86.744978][ T8458] lo speed is unknown, defaulting to 1000 [ 86.884277][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 86.887529][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 86.890379][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 86.893000][ T9] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 86.896464][ T9] usb 7-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 86.898679][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.902295][ T9] usb 7-1: config 0 descriptor?? [ 86.979541][ T8471] netlink: 8 bytes leftover after parsing attributes in process `syz.4.740'. [ 87.596640][ T8503] hsr0: entered promiscuous mode [ 87.610868][ T8505] netlink: 32 bytes leftover after parsing attributes in process `syz.1.750'. [ 87.620857][ T8505] binder: binder_mmap: 8504 20acc000-20ace000 bad vm_flags failed -1 [ 87.631467][ T8445] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 87.633519][ T8445] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 87.635688][ T8445] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 87.639888][ T8445] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 87.649783][ T9] usbhid 7-1:0.0: can't add hid device: -71 [ 87.651366][ T9] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 87.654412][ T8508] binder: 8507:8508 ioctl c0306201 20000300 returned -22 [ 87.656355][ T9] usb 7-1: USB disconnect, device number 8 [ 87.790567][ T8521] cgroup: fork rejected by pids controller in /syz3 [ 87.954380][ T8560] block nbd1: Device being setup by another task [ 88.085980][ T30] usb 9-1: new high-speed USB device number 10 using dummy_hcd [ 88.227543][ T8572] overlay: Unknown parameter 'permit_directio' [ 88.234521][ T30] usb 9-1: device descriptor read/64, error -71 [ 88.484317][ T30] usb 9-1: new high-speed USB device number 11 using dummy_hcd [ 88.614321][ T30] usb 9-1: device descriptor read/64, error -71 [ 88.686856][ T5937] block nbd1: Receive control failed (result -32) [ 88.687334][ T8558] block nbd1: shutting down sockets [ 88.726979][ T30] usb usb9-port1: attempt power cycle [ 88.729457][ T5937] Bluetooth: hci2: unexpected event for opcode 0x0411 [ 88.730960][ T8584] cgroup: Unknown subsys name 'cpuset' [ 89.066312][ T30] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 89.084683][ T30] usb 9-1: device descriptor read/8, error -71 [ 89.089801][ T8598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.767'. [ 89.089891][ T39] kauditd_printk_skb: 8 callbacks suppressed [ 89.089904][ T39] audit: type=1400 audit(1733191989.074:582): avc: denied { map } for pid=8597 comm="syz.1.767" path="socket:[29804]" dev="sockfs" ino=29804 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 89.297187][ T8613] binder: 8610:8613 ioctl aea2 80000000 returned -22 [ 89.324365][ T30] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 89.344806][ T30] usb 9-1: device descriptor read/8, error -71 [ 89.465537][ T30] usb usb9-port1: unable to enumerate USB device [ 89.694409][ T5937] Bluetooth: hci3: command 0x041b tx timeout [ 89.694749][ T5943] Bluetooth: hci0: command 0x0c1a tx timeout [ 89.694917][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.295092][ T65] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 90.359111][ T39] audit: type=1400 audit(1733191990.344:583): avc: denied { map } for pid=8650 comm="syz.3.780" path="/dev/bus/usb/002/001" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 90.395877][ T8653] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 90.403875][ T8653] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 90.408014][ T8653] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 90.417274][ T8653] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.419923][ T8653] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.423828][ T8653] netlink: 'syz.3.781': attribute type 10 has an invalid length. [ 90.426238][ T8653] netlink: 40 bytes leftover after parsing attributes in process `syz.3.781'. [ 90.428822][ T8653] batadv0: entered promiscuous mode [ 90.430422][ T8653] batadv0: entered allmulticast mode [ 90.432798][ T8653] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.436500][ T8653] bridge0: port 3(batadv0) entered blocking state [ 90.438637][ T8653] bridge0: port 3(batadv0) entered disabled state [ 90.441373][ T8653] bridge0: port 3(batadv0) entered blocking state [ 90.444237][ T8653] bridge0: port 3(batadv0) entered forwarding state [ 90.557441][ T39] audit: type=1326 audit(1733191990.544:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.3.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94477ff19 code=0x7ffc0000 [ 90.563756][ T39] audit: type=1326 audit(1733191990.544:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.3.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94477ff19 code=0x7ffc0000 [ 90.570130][ T39] audit: type=1326 audit(1733191990.544:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.3.787" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd94477ff19 code=0x7ffc0000 [ 90.570551][ T8666] syzkaller1: entered promiscuous mode [ 90.576690][ T39] audit: type=1326 audit(1733191990.544:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.3.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94477ff19 code=0x7ffc0000 [ 90.578013][ T8666] syzkaller1: entered allmulticast mode [ 90.585524][ T39] audit: type=1326 audit(1733191990.544:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.3.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94477ff19 code=0x7ffc0000 [ 90.595126][ T39] audit: type=1326 audit(1733191990.544:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.3.787" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fd94477ff19 code=0x7ffc0000 [ 90.602249][ T39] audit: type=1326 audit(1733191990.544:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.3.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94477ff19 code=0x7ffc0000 [ 90.609796][ T39] audit: type=1326 audit(1733191990.544:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8665 comm="syz.3.787" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd94477ff19 code=0x7ffc0000 [ 90.624476][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 90.628340][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 90.698836][ T8689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.790'. [ 90.701112][ T8689] netlink: 'syz.2.790': attribute type 21 has an invalid length. [ 90.718508][ T8693] Unsupported ieee802154 address type: 0 [ 90.750237][ T8693] 9pnet_fd: p9_fd_create_tcp (8693): problem binding to privport [ 90.791545][ T8696] x_tables: duplicate underflow at hook 1 [ 90.856922][ T5943] Bluetooth: hci3: unexpected event for opcode 0x0c12 [ 90.909078][ T8713] input: syz1 as /devices/virtual/input/input17 [ 90.918737][ T8716] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 91.005709][ T834] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 91.053718][ T8726] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 91.164334][ T834] usb 8-1: Using ep0 maxpacket: 16 [ 91.166920][ T834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 91.169719][ T834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 91.172191][ T834] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 91.183240][ T834] usb 8-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 91.185808][ T834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.188890][ T834] usb 8-1: config 0 descriptor?? [ 91.193080][ T834] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/input/input18 [ 91.197185][ T5338] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.202230][ T8753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.803'. [ 91.207964][ T5338] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.212271][ T5338] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.218227][ T5338] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.232607][ T5949] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.244139][ T5338] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.253854][ T5338] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.269449][ T5338] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.276677][ T8761] binder: BINDER_SET_CONTEXT_MGR already set [ 91.278955][ T8761] binder: 8760:8761 ioctl 4018620d 20000100 returned -16 [ 91.285468][ T8761] binder: BINDER_SET_CONTEXT_MGR already set [ 91.288193][ T8761] binder: 8760:8761 ioctl 4018620d 20000000 returned -16 [ 91.336346][ T8770] No control pipe specified [ 91.394828][ T8693] pxrc 8-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 91.409216][ T65] usb 8-1: USB disconnect, device number 7 [ 91.764388][ T8790] ------------[ cut here ]------------ [ 91.766132][ T8790] platform vkms: [drm] vblank wait timed out on crtc 0 [ 91.768173][ T8790] WARNING: CPU: 1 PID: 8790 at drivers/gpu/drm/drm_vblank.c:1307 drm_wait_one_vblank+0x334/0x550 [ 91.770913][ T8790] Modules linked in: [ 91.772355][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.2.809 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 91.777364][ T8790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.780785][ T8790] RIP: 0010:drm_wait_one_vblank+0x334/0x550 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 91.782529][ T8790] Code: 85 ed 0f 84 54 01 00 00 e8 f9 e4 5c fc 4c 89 e7 e8 b1 9c 88 00 89 e9 4c 89 ea 48 c7 c7 80 76 e7 8b 48 89 c6 e8 8d 2e 1d fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 ce e4 5c fc 90 48 8d 7b 08 48 b8 00 [ 91.788711][ T8790] RSP: 0018:ffffc9000f53fb28 EFLAGS: 00010286 [ 91.791428][ T8790] RAX: 0000000000000000 RBX: ffff888025244000 RCX: ffffc9000ca51000 [ 91.793970][ T8790] RDX: 0000000000080000 RSI: ffffffff815a5166 RDI: 0000000000000001 [ 91.796788][ T8790] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 91.800050][ T8790] R10: 0000000000000000 R11: 0000000000000003 R12: ffff888025601010 [ 91.802308][ T8790] R13: ffff888105508f00 R14: 1ffff92001ea7f67 R15: 00000000000009de [ 91.804472][ T8790] FS: 00007f5b2ada96c0(0000) GS:ffff88806a700000(0000) knlGS:0000000000000000 [ 91.806769][ T8790] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 91.808470][ T8790] CR2: 00007f5b2ad87fb8 CR3: 000000003076e000 CR4: 0000000000352ef0 [ 91.810557][ T8790] DR0: fffffffffffffffc DR1: 0000000000000000 DR2: 0000000000000002 [ 91.812625][ T8790] DR3: 0000000000000800 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 91.814769][ T8790] Call Trace: [ 91.815638][ T8790] [ 91.816404][ T8790] ? __warn+0xea/0x3c0 [ 91.817483][ T8790] ? lock_acquire.part.0+0x11b/0x380 [ 91.818849][ T8790] ? drm_wait_one_vblank+0x334/0x550 [ 91.820245][ T8790] ? report_bug+0x3c0/0x580 [ 91.821439][ T8790] ? handle_bug+0x54/0xa0 [ 91.823187][ T8790] ? exc_invalid_op+0x17/0x50 [ 91.824535][ T8790] ? asm_exc_invalid_op+0x1a/0x20 [ 91.825844][ T8790] ? __warn_printk+0x1a6/0x350 [ 91.827374][ T8790] ? drm_wait_one_vblank+0x334/0x550 [ 91.828733][ T8790] ? drm_wait_one_vblank+0x333/0x550 [ 91.830165][ T8790] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 91.831570][ T8790] ? mark_held_locks+0x9f/0xe0 [ 91.832844][ T8790] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.834704][ T8790] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.836078][ T8790] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.837605][ T8790] ? drm_vblank_get+0x150/0x280 [ 91.838924][ T8790] drm_fb_helper_ioctl+0x156/0x1a0 [ 91.840292][ T8790] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 91.841808][ T8790] do_fb_ioctl+0x3d4/0x7d0 [ 91.843040][ T8790] ? __pfx_do_fb_ioctl+0x10/0x10 [ 91.844457][ T8790] ? do_vfs_ioctl+0x513/0x1990 [ 91.845761][ T8790] ? selinux_file_ioctl+0x180/0x270 [ 91.847164][ T8790] fb_ioctl+0xe5/0x150 [ 91.848189][ T8790] ? __pfx_fb_ioctl+0x10/0x10 [ 91.849440][ T8790] __x64_sys_ioctl+0x190/0x200 [ 91.850733][ T8790] do_syscall_64+0xcd/0x250 [ 91.851971][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.853546][ T8790] RIP: 0033:0x7f5b29f7ff19 [ 91.854787][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.859912][ T8790] RSP: 002b:00007f5b2ada9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.862135][ T8790] RAX: ffffffffffffffda RBX: 00007f5b2a146080 RCX: 00007f5b29f7ff19 [ 91.864282][ T8790] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 91.866361][ T8790] RBP: 00007f5b29ff3986 R08: 0000000000000000 R09: 0000000000000000 [ 91.868429][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.870526][ T8790] R13: 0000000000000000 R14: 00007f5b2a146080 R15: 00007ffd69d48438 [ 91.872594][ T8790] [ 91.873421][ T8790] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 91.875331][ T8790] CPU: 1 UID: 0 PID: 8790 Comm: syz.2.809 Not tainted 6.13.0-rc1-syzkaller-00002-gcdd30ebb1b9f #0 [ 91.878093][ T8790] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 91.880872][ T8790] Call Trace: [ 91.881761][ T8790] [ 91.882544][ T8790] dump_stack_lvl+0x3d/0x1f0 [ 91.883769][ T8790] panic+0x71d/0x800 [ 91.884823][ T8790] ? __pfx_panic+0x10/0x10 [ 91.886015][ T8790] ? show_trace_log_lvl+0x29d/0x3d0 [ 91.887400][ T8790] ? drm_wait_one_vblank+0x334/0x550 [ 91.888792][ T8790] check_panic_on_warn+0xab/0xb0 [ 91.890114][ T8790] __warn+0xf6/0x3c0 [ 91.891156][ T8790] ? lock_acquire.part.0+0x11b/0x380 [ 91.892552][ T8790] ? drm_wait_one_vblank+0x334/0x550 [ 91.893944][ T8790] report_bug+0x3c0/0x580 [ 91.895104][ T8790] handle_bug+0x54/0xa0 [ 91.896205][ T8790] exc_invalid_op+0x17/0x50 [ 91.897431][ T8790] asm_exc_invalid_op+0x1a/0x20 [ 91.898739][ T8790] RIP: 0010:drm_wait_one_vblank+0x334/0x550 [ 91.900307][ T8790] Code: 85 ed 0f 84 54 01 00 00 e8 f9 e4 5c fc 4c 89 e7 e8 b1 9c 88 00 89 e9 4c 89 ea 48 c7 c7 80 76 e7 8b 48 89 c6 e8 8d 2e 1d fc 90 <0f> 0b 90 90 e9 0d fe ff ff e8 ce e4 5c fc 90 48 8d 7b 08 48 b8 00 [ 91.905330][ T8790] RSP: 0018:ffffc9000f53fb28 EFLAGS: 00010286 [ 91.906942][ T8790] RAX: 0000000000000000 RBX: ffff888025244000 RCX: ffffc9000ca51000 [ 91.909017][ T8790] RDX: 0000000000080000 RSI: ffffffff815a5166 RDI: 0000000000000001 [ 91.911087][ T8790] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 91.913160][ T8790] R10: 0000000000000000 R11: 0000000000000003 R12: ffff888025601010 [ 91.915240][ T8790] R13: ffff888105508f00 R14: 1ffff92001ea7f67 R15: 00000000000009de [ 91.917328][ T8790] ? __warn_printk+0x1a6/0x350 [ 91.918578][ T8790] ? drm_wait_one_vblank+0x333/0x550 [ 91.919979][ T8790] ? __pfx_drm_wait_one_vblank+0x10/0x10 [ 91.921418][ T8790] ? mark_held_locks+0x9f/0xe0 [ 91.922671][ T8790] ? __pfx_autoremove_wake_function+0x10/0x10 [ 91.924262][ T8790] ? lockdep_hardirqs_on+0x7c/0x110 [ 91.925641][ T8790] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 91.927160][ T8790] ? drm_vblank_get+0x150/0x280 [ 91.928706][ T8790] drm_fb_helper_ioctl+0x156/0x1a0 [ 91.930088][ T8790] ? __pfx_drm_fb_helper_ioctl+0x10/0x10 [ 91.931551][ T8790] do_fb_ioctl+0x3d4/0x7d0 [ 91.932708][ T8790] ? __pfx_do_fb_ioctl+0x10/0x10 [ 91.933991][ T8790] ? do_vfs_ioctl+0x513/0x1990 [ 91.935268][ T8790] ? selinux_file_ioctl+0x180/0x270 [ 91.936658][ T8790] fb_ioctl+0xe5/0x150 [ 91.937841][ T8790] ? __pfx_fb_ioctl+0x10/0x10 [ 91.939089][ T8790] __x64_sys_ioctl+0x190/0x200 [ 91.940355][ T8790] do_syscall_64+0xcd/0x250 [ 91.941563][ T8790] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.943109][ T8790] RIP: 0033:0x7f5b29f7ff19 [ 91.944264][ T8790] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.949216][ T8790] RSP: 002b:00007f5b2ada9058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.951321][ T8790] RAX: ffffffffffffffda RBX: 00007f5b2a146080 RCX: 00007f5b29f7ff19 [ 91.953366][ T8790] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000003 [ 91.955534][ T8790] RBP: 00007f5b29ff3986 R08: 0000000000000000 R09: 0000000000000000 [ 91.957630][ T8790] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.959674][ T8790] R13: 0000000000000000 R14: 00007f5b2a146080 R15: 00007ffd69d48438 [ 91.961783][ T8790] [ 91.963123][ T8790] Kernel Offset: disabled [ 91.964357][ T8790] Rebooting in 86400 seconds.. VM DIAGNOSIS: 02:13:11 Registers: info registers vcpu 0 CPU#0 RAX=0000000000138a33 RBX=0000000000000000 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b460 RBP=fffffbfff1bd2ef8 RSP=ffffffff8de07e20 R8 =0000000000000001 R9 =ffffed100d4c6fed R10=ffff88806a637f6b R11=0000000000000000 R12=0000000000000000 R13=ffffffff8de977c0 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f19dcb47bac CR3=000000003045a000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8277dd90 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c9955 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc9000f53f488 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000007 R12=0000000000000000 R13=0000000000000020 R14=ffffffff851c98f0 R15=0000000000000000 RIP=ffffffff851c997f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007f5b2ada96c0 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5b2ad87fb8 CR3=000000003076e000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000208001 Opmask01=0000000000000000 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a39f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a3b10488 00007f07a3b10480 00007f07a3b10478 00007f07a3b10450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a467d100 00007f07a3b10440 00007f07a3b10458 0004000b000c0008 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f07a3b10498 00007f07a3b10490 00007f07a3b10488 00007f07a3b10480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000000 RBX=ffff888021838000 RCX=1ffffffff20bd839 RDX=ffff888021838ad8 RSI=0000000000000002 RDI=ffff888021838ad8 RBP=f7cd61d6135d86ad RSP=ffffc9000481f780 R8 =0000000000000000 R9 =0000000000000001 R10=ffffffff905f0417 R11=0000000000000002 R12=ffff888021838000 R13=0000000000000000 R14=0000000000000002 R15=0000000000000006 RIP=ffffffff817664fe RFL=00000086 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f11b7c99d00 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000561cb328a908 CR3=00000000252e2000 CR4=00352ef0 DR0=fffffffffffffffc DR1=0000000000000000 DR2=0000000000000002 DR3=0000000000000800 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008082082 Opmask01=0000000000000000 Opmask02=00000000dfff7fff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000001 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 0054454955510029 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 554245440045534f 4252455600524f52 5245004c41544146 005445495551000c ZMM20=0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 0000000000000000 0000000000000004 ZMM21=b7b89ed3b7b89ed3 b7b89ed3b7b89ed3 b7b89ed3b7b89ed3 b7b89ed3b7b89ed3 b7b89ed3b7b89ed3 b7b89ed3b7b89ed3 b7b89ed3b7b89ed3 b7b89ed3b7b89ed3 ZMM22=cc2863facc2863fa cc2863facc2863fa cc2863facc2863fa cc2863facc2863fa cc2863facc2863fa cc2863facc2863fa cc2863facc2863fa cc2863facc2863fa ZMM23=f54a7255f54a7255 f54a7255f54a7255 f54a7255f54a7255 f54a7255f54a7255 f54a7255f54a7255 f54a7255f54a7255 f54a7255f54a7255 f54a7255f54a7255 ZMM24=a6b8ed74a6b8ed74 a6b8ed74a6b8ed74 a6b8ed74a6b8ed74 a6b8ed74a6b8ed74 a6b8ed74a6b8ed74 a6b8ed74a6b8ed74 a6b8ed74a6b8ed74 a6b8ed74a6b8ed74 ZMM25=26c9a71626c9a716 26c9a71626c9a716 26c9a71626c9a716 26c9a71626c9a716 26c9a71626c9a716 26c9a71626c9a716 26c9a71626c9a716 26c9a71626c9a716 ZMM26=f1fbe7c2f1fbe7c2 f1fbe7c2f1fbe7c2 f1fbe7c2f1fbe7c2 f1fbe7c2f1fbe7c2 f1fbe7c2f1fbe7c2 f1fbe7c2f1fbe7c2 f1fbe7c2f1fbe7c2 f1fbe7c2f1fbe7c2 ZMM27=e3077370e3077370 e3077370e3077370 e3077370e3077370 e3077370e3077370 e3077370e3077370 e3077370e3077370 e3077370e3077370 e3077370e3077370 ZMM28=000000200000001f 0000001e0000001d 0000001c0000001b 0000001a00000019 0000001800000017 0000001600000015 0000001400000013 0000001200000011 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=6804000068040000 6804000068040000 6804000068040000 6804000068040000 6804000068040000 6804000068040000 6804000068040000 6804000068040000 info registers vcpu 3 CPU#3 RAX=00000000000c5af3 RBX=0000000000000003 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b460 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2e0f02 CR3=000000003076e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001030001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd69d48560 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b29ff4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b29ff483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b29ff4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b29ff484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b29ff48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5b29ff49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6e776f6e6b6e7500 6f6c6c3332302500 657a697320740004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4b524a4b4e4b5000 4a49491617150000 405f4c560551464a 5751560541444700 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 61181fd9c3cdb74c 24edf977fcf678f8 cede60156a261c41 36bf7dd11f6cf16d ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8fd709f6dde596c9 e79a52b0440e1fa5 fbcfff34a6d7c5a9 94e7d056ede4d4d1 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1948ee892e246d67 0174658e2d63a617 9eeb2b3abf3a05ed ea0c023bb221cf66 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 31b1d0d0eadfcdf0 4c8bab61777bb0ab 5cf45c2bf1e1ff17 d3a330cbb2a0b38e ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000