last executing test programs: 39.194330428s ago: executing program 1 (id=121): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x80, 0x1, 0x10001, 0xfffffff8, {{0xa, 0x4, 0x0, 0x1, 0x28, 0x66, 0x0, 0x0, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, {[@timestamp={0x44, 0x14, 0x8c, 0x0, 0x6, [0x1, 0x14f3287a, 0x5, 0x4]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=@deltclass={0x34, 0x29, 0x2, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xffe0}, {0x9, 0x1}, {0xfff1, 0x9}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x7}}, @TCA_RATE={0x6, 0x5, {0x8, 0x7}}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x20004000) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000004c0)={'vlan1\x00', &(0x7f0000000480)=@ethtool_eee={0x17}}) 39.130328643s ago: executing program 1 (id=122): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r3 = dup2(r2, r2) write$tun(r3, &(0x7f0000000040)=ANY=[], 0x46) r4 = syz_open_dev$vim2m(&(0x7f0000000580), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000100)={0x10001, 0x2, 0x2}) ioctl$vim2m_VIDIOC_S_FMT(r4, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x4, 0x2, 0x50565559, 0x4, 0xfffffffb, 0x4, 0x6, 0x4, 0x0, 0x4, 0x1, 0x7}}) setrlimit(0x7, &(0x7f0000000000)={0x5, 0x18fe}) socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) fanotify_init(0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f0000000040)=0x4) r6 = socket(0x200000100000011, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000300)={0x2c, 0x0, 0x0, 0x0, 0x25dfdbfd, "", [@generic="d96e6c8d5e85080045f00d80724e11d569116e3a1ce41e2a56"]}, 0x2c}], 0x1}, 0x0) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) r10 = openat$cgroup_freezer_state(r3, &(0x7f0000000080), 0x2, 0x0) write$cgroup_freezer_state(r10, &(0x7f00000001c0)='FROZEN\x00', 0x7) ioctl$KVM_RUN(r5, 0xae80, 0x0) 39.049567324s ago: executing program 1 (id=124): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28051, r0, 0x0) landlock_create_ruleset(0xffffffffffffffff, 0x6c, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r2}, 0x0, &(0x7f0000000040)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x6c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}, {0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10}]}]}], {0x14, 0x10}}, 0x10c}}, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r4, 0x1, 0x7, &(0x7f0000000340), 0x4) 38.98039698s ago: executing program 1 (id=125): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x37a, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xffffffff, @local}, 0x1a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000004000010085000000310001010000000000000017c8046700484bb5b11798d4a4475e4ae214b866"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@sack_perm, @sack_perm, @mss={0x2, 0x7}, @mss={0x2, 0x7}, @mss={0x2, 0x101}], 0x5) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000100)={'wpan0\x00'}) r2 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresgid(0x0, r3, r3) setregid(0xffffffffffffffff, r3) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000850000000f000000c5000000a0ef010095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r4}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x13, r5, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r6 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r7 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) symlinkat(&(0x7f00000000c0)='./file1\x00', r7, &(0x7f0000000100)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r6, 0x40049366, &(0x7f0000000180)) ioctl$AUTOFS_IOC_CATATONIC(r6, 0x9362, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) 38.865172656s ago: executing program 1 (id=127): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500000000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$netlink(0x10, 0x3, 0x14) syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0x1}, 0x0, &(0x7f0000000080)}, 0x20) r2 = socket(0x200000100000011, 0x803, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'ip_vti0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000100)='m', 0x102, 0xf5ff, &(0x7f0000000200)={0x3a, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', 0x0}) socket(0xa, 0x1, 0x0) (async) r7 = socket(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x178, 0xc, 0x0, 0x178, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@loopback={0x1f0}, @mcast2, [], [], 'team_slave_0\x00', 'netpci0\x00'}, 0x0, 0x190, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "fc6b061134c5d5c8465af5f5caa5bd6c0dde77ff83daa984c0d76167e0608dcaa2caff7bd9c5923cccd5b483df8124249f91b8c3c2cea9bed64dc935a975401a68e34a04c1f15e50050729ba985e8c1576994e350d93a782668d4d51a1bc76bba1fde09794922ae65a804c56f092e430ebb8fa892d671c8c8035cae06810f8c6", 0x20}}, @common=@unspec=@addrtype1={{0x28}, {0x0, 0x0, 0x8}}]}, @common=@inet=@SET2={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'wg2\x00', 'hsr0\x00'}, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "08db"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r6, 0x25, 0x0, @val=@netfilter}, 0x40) socket$packet(0x11, 0x3, 0x300) (async) r8 = socket$packet(0x11, 0x3, 0x300) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000040)=r9, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x800, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, {0x0, 0xfff2}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040804}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0x800, 0xffffffff, 0x25dfdbfb, {0x0, 0x0, 0x74, r6, {0x0, 0xfff2}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x20040804}, 0x0) 38.649910007s ago: executing program 1 (id=128): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x9c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x80}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xcc}}, 0x0) 38.639225037s ago: executing program 32 (id=128): ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x9c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0x1}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x80}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x3}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0xcc}}, 0x0) 5.334287847s ago: executing program 4 (id=488): ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'ip6tnl0\x00', 0x0, 0x29, 0x5, 0x6, 0x0, 0x40, @loopback, @mcast1, 0x80, 0x40, 0xffffff7c, 0x10}}) (async) r0 = socket$inet_udplite(0x2, 0x2, 0x88) (async) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="20040000f30300042abd7000ffdbdf2506000000020000001f0000006a01000005000000090000000300000008000000cb000000090000000002000000000080040000000000000009000000010000000600000006000000050000005f016c0302000000030000000000000006000000310000007e0d0000fdffffff0300000003000000060000000d00000006000000090000000500000000800000050000000000000002000000040000000000000004000000001000000100000000000000060000000700000008000000040000000400000008000000010000800100000007000000e688ffff05000000070000000000000000000000200d000000000004c94a00007fffffff0900000005000000ff0f0000030000000900000006000000060000004c0c00000e00000005000000060000000000008006000000020000000000040003000000c2af0000dc0000000400000004000000070000005787000008000000080000004100000006000000f9000000060000000700000008000000001000007a84000002000000f2ffffff05000000020000000800000092080000020000007d38914a020000000000000001000000af0000000400000002000000020000000900000005000000040000000500000007000000b5070000ff030000000000007f000000000000003d0000005800000000000000060000000001000009000000340a000006000000ff030000030000004000000006000000060000000900000003000000ff0100000001000001000000ffffff7f0c0000000700000001000100ad0e00000300000027c30000000000002d0b00000700000004000000070000000100000003000000060000008d000000040000000600000003000000060000001f08000004000000060000004000000009000000ff030000ffffff7fff0300000e00000002000000de0b00000a00000098b60000000800000700000009000000000000005304000000000000020000003008000005000000ffff"], 0x420}, 0x1, 0x0, 0x0, 0x1d}, 0x8080) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000600)=ANY=[@ANYBLOB="010000000000000001000080"]) (async) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, &(0x7f00000002c0)="c4e251aa95001000002e660f71d60040f6752566baf80cb82c8e7089ef66bafc0cb800200000ef66b89f000f00d8c4e165dfe7660fea1e2e0f01df0f23cc48b86e3e7162000000000f23c80f21f8350800c0000f23f8", 0x56}], 0x1, 0x40, &(0x7f0000000680)=[@cstype3={0x5, 0x7}, @cr4={0x1, 0x200110}], 0x2) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000000410101c0"]) (async) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000880)={0x7, 'vlan1\x00', {0x7}, 0x5}) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r4, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x44, 0x4, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000005}, 0x1) 5.169023675s ago: executing program 4 (id=493): socket$inet(0x2, 0x1, 0x0) (async) r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0810000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) (async) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000080)="441f0810000000e8c94ef56491ee54be0e1c2074ed27c1c6fe76cef3e2", 0x1d) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) (async) r2 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0) write$proc_mixer(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="4c494e453120274d61737465722043617074757265205302697463682720313030303030"], 0x39) close(r0) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) (async) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x232, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000040)={{&(0x7f0000012000/0x4000)=nil, 0x4000}, 0x2}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f0000000300)={0x140003, 0x0, [0x4e, 0x0, 0x1, 0x0, 0x0, 0x6, 0x7, 0x2000]}) modify_ldt$write(0x1, &(0x7f0000000000)={0x1001}, 0x10) modify_ldt$write(0x1, &(0x7f0000001700), 0x10) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) (async) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2501000000000000000009000000040003800400018050000380060007004e220000080003000400000014000200776730000000000000000000000000000800010000000000080001000200000006000400"], 0x6c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000140)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e066f30fa7c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x54}], 0x1, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r7 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) close_range(r1, r7, 0x0) 3.770632194s ago: executing program 4 (id=524): r0 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) r1 = syz_open_dev$ttys(0xc, 0x2, 0x1) fcntl$setstatus(r1, 0x4, 0x2800) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) syz_emit_vhci(&(0x7f0000002900)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xc}, @l2cap_cid_le_signaling={{0x8}, @l2cap_disconn_rsp={{0x7, 0x80, 0x4}, {0x3, 0x401}}}}, 0x11) (async) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xd) (async) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x30) (async) r4 = socket$inet(0x2, 0x200000002, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000900], 0x2, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000000000000000059d0000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x108) (async, rerun: 64) r5 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) (async) accept$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) socketpair(0x3, 0x1, 0x2, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet6(r6, &(0x7f00000001c0)={0xa, 0x4e20, 0x5, @remote, 0x5}, 0x1c) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10) (async) syz_emit_ethernet(0x6a, &(0x7f0000000680)=ANY=[@ANYBLOB="ffffffffffff0180c200000308004500005c0000000000119078000000000000000000014e20004800020000003fa3ece6d931e3e7abdd8db7363980df0132da33ba94e1144f4d6bb546cddc0c5015c2265cade6615542d88cf0cd39d823f599b85d6ea0a2"], 0x0) (async) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='.\x00', &(0x7f0000000200)='f2fs\x00', 0x0, 0x0) 3.709769473s ago: executing program 4 (id=525): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/vlan/config\x00') preadv(r0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/242, 0xf2}], 0x1, 0xfb, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r2, 0xc008aec1, 0x0) syz_usb_connect(0x2, 0x3d, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r3, &(0x7f0000000340)=[{&(0x7f0000000700)="97", 0x1}, {&(0x7f0000000640)="d3da", 0x2}], 0x2) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) r4 = socket(0x1, 0x0, 0x100000) getsockopt(r4, 0x2000, 0x80000040, 0x0, 0x0) syz_usb_connect(0x2, 0xe55, &(0x7f0000000740)={{0x12, 0x1, 0x201, 0x33, 0x5e, 0x9f, 0xff, 0x14b0, 0x3410, 0x7768, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe43, 0x4, 0x96, 0x6, 0xf0, 0x9b, [{{0x9, 0x4, 0xf1, 0xff, 0x5, 0xc5, 0x72, 0xc7, 0x7, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0xd}}], [{{0x9, 0x5, 0x7, 0x0, 0x8, 0xa, 0x5, 0xff, [@generic={0x25, 0x23, "f96e121e7def81d613b7573701ec8a3f0333e7e51ef7e7840e800c3f03077aacbe0d5e"}]}}, {{0x9, 0x5, 0x5, 0x0, 0x200, 0xfc, 0xf8, 0xfe}}, {{0x9, 0x5, 0xb, 0x0, 0x10, 0x88, 0x2, 0x3}}, {{0x9, 0x5, 0x2, 0x3, 0x400, 0x7, 0x3, 0x5}}, {{0x9, 0x5, 0x80, 0x1, 0x200, 0x9, 0x6, 0x58, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x9, 0x9}]}}]}}, {{0x9, 0x4, 0xb4, 0x8, 0xd, 0x6b, 0x51, 0x96, 0x5f, [@generic={0xdd, 0x7, "4209f7cace834c391a446e0f962df7d224a5d1dc38fa71dbc6040c2b1adcdc57bef59c6fc577058d74f2730a5791a5fec15dbc507420f3a74f361ec0a5a37cad79ae268a1a9b585b0d44332868add59d265400b7c9e4ced1dd0cf0056c8e213ad13e1db31ab95a3a3c96eb03114657d8eaf9b3b9133ab18f4089af185735b4099dd303751b6cc83e78746c0ad58b85d9b6c6bdee63976c0d23483690014aae36550b8f2ee14e4e23b00574af0c4769fc88cdb4bc3bcd0aa49932e0ce4bd2fe6c30805735a20db9994cc4b980870567cbaa9a207351a407b9baf4dd"}], [{{0x9, 0x5, 0x1, 0x10, 0x10, 0x86, 0x21, 0x8}}, {{0x9, 0x5, 0x8, 0x2, 0x3ff, 0x3, 0x5, 0x9}}, {{0x9, 0x5, 0x4, 0x0, 0x400, 0xb, 0x6, 0x1, [@generic={0x87, 0x6, "b4930aee01667fd3cddb3c6c9871888c569b8113734e8b012cde6e1000a9fadfecebc3a41249258318072ca5c9db68bfb0874bf00f1a4ee7d34eb8ca50f015957df397dcf35147fd1831a99411c44697c0b004e175b73d84b9216c02f0d6bf85b36f114f3843e615830b0ae6afc88606d5956ed55614027fcc681ddcaed77df0b16caa1b0c"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x9}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x8, 0x8, 0x3, [@generic={0xd5, 0x7, "d62332e0533197fde3d5b885a0443fd468cceceea3b571225325cf79999c66a33da81a8e4d2f5daaf41f801ef970641104a5874baee9bfda9a4f6b1929da6436c721d18a760c8543052d84c374dfea1e73eb22496180aa4c15caf123aaaab65782cbfb62ba491bee68ef8318bb7637eff76050019d808fdf75eacb632847ce0fea5799c6bd58c5e388a0d5843cdbb5ae044e8c519c3b61fb65586654808eee65640fd3bdc55efd1bf3ae1c1de6ed5e98e7cc4df0d9b88cd4760b4123901027531f33e6227717eb6e69f4c3b301f4f6e722b945"}, @generic={0x49, 0x1, "aadfd11fe5e8387ad4a1280b41d39b07e5f652c4ab84df947e02b6872df7768dadf8cbda2f48590b2aeb2bba33227e38f18eac014ec2925effeaf7cbcaddb2208a840d74c02b9d"}]}}, {{0x9, 0x5, 0x3, 0x8, 0x40, 0x2, 0x5, 0x4}}, {{0x9, 0x5, 0x0, 0x3, 0x20, 0x4, 0x9, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x1, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x3, 0x2e4}]}}, {{0x9, 0x5, 0xa, 0xc, 0x200, 0x3, 0x6f, 0x6e}}, {{0x9, 0x5, 0xb, 0x8, 0x200, 0x8b, 0x4, 0x94, [@generic={0xbc, 0x31, "204b84fe573233aa5e0f276eebb072682c80ec5d8b9fa7523cf4ff5462d9d011fa96433a98641f970ea49e0aa57dc577e891f543ac571e3939d92f90ea7b2dca3c8d028ce463030dcd5afbb176e7d8c3a9abe48f2853fd7c1c0280472e82bee3d146f651dde80c96f1371f9477588d76a49268354525e2c62b3733a946a3227ac8cfddeb609ac1032b04e1955562ba84610972911487ebc5a036c3170de11b4108e80bf0171ced1de99b11485a06a2c49009ed22090431d80051"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x1, 0x1, 0xf8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x3, 0x200}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x71, 0x2}]}}, {{0x9, 0x5, 0xc, 0x3, 0x400, 0x0, 0x5, 0x1, [@generic={0xbc, 0x22, "09374cb521c1e1c77a5d0140428ca6fe15310c5feeaa8e19f30dfc72b372c76adbc393db3f116093447cd221a57c80c333b99fb39944b074742b60ed8de1d3eefec332139fa8432a48f4643fbcc5067b35bc665bda79fcbcb92c7bda6f9969188198b7782d701b3b77a672b017c7274859aaa7c0456b9858659b32745decc0418e74b78388ab82a334ed1362c82217f8d9e60be69b2c7b9b2961dd153980420344a3fb6cdd99f8ea6977dac302f84c674ebb1a64a859e7e7578e"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x0, 0x8}]}}, {{0x9, 0x5, 0x4, 0x2, 0x200, 0x4, 0x8f, 0x8, [@generic={0x14, 0x44, "8e96c181e8e06bbc2bf022fdd03823476882"}]}}, {{0x9, 0x5, 0x7, 0x3, 0x40, 0xd5, 0x0, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0xff, 0x5}]}}, {{0x9, 0x5, 0x3, 0x1, 0x3ff, 0x67, 0x81, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x8, 0x7}]}}]}}, {{0x9, 0x4, 0x81, 0x54, 0xd, 0x0, 0xaa, 0xee, 0x5, [@generic={0x8c, 0x31, "d5dcab2d0138781487311b99fca9b0d8cf79e83663a222bedab194af0d6d489b6fe2178bf84f08f4a8ea829286fea15c60b243ad719d97215f7c481f35ecacd684aec659de78c3eab2db1d70c76593de2c40eb384ad07327086ee08ad227b1fb01d9455e6033b29d876f785dfe836eeeeaa004fe7e2e633886a22795aee745578be9063ab100b0eb27d6"}, @cdc_ncm={{0x9, 0x24, 0x6, 0x0, 0x1, "49b9fe25"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x4094, 0x100, 0xd}, {0x6, 0x24, 0x1a, 0x2620}}], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x0, 0x8, 0x3b, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x32, 0x400}]}}, {{0x9, 0x5, 0x7, 0x2, 0x40, 0x5, 0x9, 0x80}}, {{0x9, 0x5, 0xc, 0x3, 0x10, 0x3, 0x4, 0xf7, [@uac_iso={0x7, 0x25, 0x1, 0x80, 0x2, 0x80}]}}, {{0x9, 0x5, 0x4, 0x10, 0x8, 0x2, 0x7, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0xbc8fb815eda9009c, 0x6, 0x4}]}}, {{0x9, 0x5, 0xd, 0xc, 0x3ff, 0x7, 0xc, 0x2}}, {{0x9, 0x5, 0x7, 0x3, 0x400, 0x9, 0x6, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x5}]}}, {{0x9, 0x5, 0x1, 0x2, 0x20, 0xfd, 0x2}}, {{0x9, 0x5, 0x8, 0x0, 0x20, 0x9, 0x50, 0xb, [@generic={0x84, 0x22, "caf886fe0ae5ec9c7b584f899684c7da1eac4159c392de1b3d9bf8d2e701c686c818eaa38c513425fa3384c78d3a4b1dc44658e722f507d9e61ba05aa63b2255dffcd9815b97bbe46d1f7b912faeb6dc591f77100a069ffb37a2a20f252f5512d565e3fb6148ecf90eaec38477a89bdf4c548a4f133c0fae183a0197288e4ae8e07a"}, @generic={0x26, 0x7, "784a3d6c53ae700ed205ff65cde58f2181890d0b7acf3a674d4518aecaf152c37fa22230"}]}}, {{0x9, 0x5, 0x8, 0x3, 0x20, 0x3, 0x35, 0xd}}, {{0x9, 0x5, 0x0, 0xf64925b1af8e993b, 0x40, 0xd, 0x0, 0x4, [@generic={0x51, 0x5, "fb70804bb75048113356c99833a6970b1f3dbdbcde07360ddc4d88d79289d95ee8ad8d979a2640c0082978d9d10953869d9f337d08fc9d38aaa7ae1aba26e5488e8ff955d62223239a764c8eaebd5a"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x1, 0x9}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x54, 0x3, 0x2, [@generic={0xfc, 0x22, "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"}, @generic={0xe2, 0x1e, "476fad36894928569fc50685d5d66eb9c4749bae3bba4d6ebace173aa8e054b35450fcd73227c46eaa2650145325bcc433d0702f3e53e327a4aa5133ba38dbe5120bf1a0f5e7b4bdfb4ef891471c748678c61c7bf46f7f86c48efbc508408bec189219914e6ffb4bb296fc0b66c43e0fea5e87c6a0567d226546582e0c80ebd146b17dac14d404b78cf2add7ed25cbf4572755c11e3ceaaa33c419a47bb126ff887b87008f7db50edf9e4685e3c723ba11cb8cf1d0773581e7e4c618125f73e418dfcef1c0f57535d93a145cf55eab377b25f9f1c2fea0ba9a2119e87c77f1be"}]}}, {{0x9, 0x5, 0xd, 0x3, 0x200, 0x0, 0x80, 0x1, [@generic={0x100, 0x21, "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"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x0, 0xd}]}}, {{0x9, 0x5, 0xa, 0x0, 0x400, 0x0, 0x2, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x2, 0xbc11}, @generic={0x58, 0x68, "619dc2286649aa62ea894c87e22ba68fdb3978c5a3a42fd91d72364688d5a2c61307555e65f078f45b8bdf7c1c6cd13292aca34a4777b980ba37bf6a011c5e0d002cae50cc48d32b4cb94faadfe20fa3e111bab7359b"}]}}]}}, {{0x9, 0x4, 0x57, 0x5, 0xd, 0xa, 0x0, 0x0, 0xde, [@uac_control={{0xa, 0x24, 0x1, 0xffff, 0x11}, [@processing_unit={0xb, 0x24, 0x7, 0x6, 0x2, 0xe, "7aef6e53"}, @output_terminal={0x9, 0x24, 0x3, 0x6, 0x302, 0x3, 0x4, 0x9}]}, @cdc_ecm={{0x8, 0x24, 0x6, 0x0, 0x0, "9c9e99"}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x16, 0x6, 0x5}}], [{{0x9, 0x5, 0xc, 0x1, 0x200, 0xe, 0x9, 0x7}}, {{0x9, 0x5, 0xb, 0x2, 0x10, 0xb7, 0x2, 0x7}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x8, 0xb, 0x1}}, {{0x9, 0x5, 0x16, 0x0, 0x8, 0x6, 0x2, 0x8}}, {{0x9, 0x5, 0x4, 0x10, 0x400, 0xdc, 0x66, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x44, 0xff}, @generic={0xb1, 0x3, "2a848a617ca314f671194fef4f99b14bf9eee8068340831dc5085dde5686ad1b8a9db128d4963ce5fdcdefc672eb3085c2c2e3e25da74df4bc971f292ae918dacecfe5082b4f62901cc5dbda8fc266b0bd8000fa9f2fd914fcead879e4676ab8a057daa3169b5214524aa193ca96a3f8ff3f0316249037d9499d841c58f0519622c93a36d8b5347db6d887d58bca9ea928500f13bdf8d12f9ac41177608462f61b8d766792002e6fdee54e49e2e518"}]}}, {{0x9, 0x5, 0xc, 0x2, 0x8, 0x2, 0x4, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x9, 0x88cc}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x10, 0x8}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0x97, 0x7, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x4, 0x3}, @generic={0xdb, 0x3, "db4007ad0f42c7d393bbbecfc8d09e8cd01bfb92418bd6565d5e09a703efb696254af78d0fd090eb7aea0d824f3de89abe2d9964bc911ff4e1d43c1af26450bec6f0f919933bf39a0baeddc2556ce63c1e3b8f3784d61cc7b0a41f0b2cc5adf22c6a0ad97f228ba84138c745f6cc93b89634bc5743ca15f8191ae6d2bbf9f31fa7837bb8212003afedafe96765ce7b338b0d63f949f9d9c9a00dc3e0b4a32ac6695acecb0b881c282dce20994f2e93bc3ba652cb4db1933d88b2cf9011c245c0ac31acdceab12c66d1a979967815120c5c766355431e8a2761"}]}}, {{0x9, 0x5, 0x4, 0xc, 0x10, 0x2, 0x4, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0xf2}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x4}]}}, {{0x9, 0x5, 0x91ddde8bec435c1e, 0x8, 0xd6813a1a9ac6468e, 0x2, 0x5, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x3, 0x5, 0xfb0c}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x3, 0xfff}]}}, {{0x9, 0x5, 0x4, 0xc, 0x8, 0x9, 0xc, 0xf}}, {{0x9, 0x5, 0xb, 0x0, 0x400, 0x0, 0xf, 0x8, [@generic={0xe2, 0x1, "1ad37ee6c3b00352988b7c5ff91c123410a2564140968c2a005233f877f45c9730e526a0503314400a1dc00948e7db28fbd089e13f6ff6108ea29149165062b3d13714dadc2ca531ea08cc80b24e9d916af48d4d0c7d1655d396c75d74df1f81f5ce9620bf188ab6b9b0452ad63184ea3febdb229b5a05c596458b4c1d33f09aa71c1e89a81d7aa4348b2be27767fbf5d2deaa57829d2e0025fbfaf3c5aaa1805f0351c0e4038b613de702a080b8cda7ef48d2de01ecee71b35b7d67484046ceb93365b6ec1502b62f57385f2fc2a329b290b582c4a21d7a5c2b629995f5dba9"}, @uac_iso={0x7, 0x25, 0x1, 0x81, 0x0, 0x6}]}}, {{0x9, 0x5, 0x2, 0xc, 0x3ff, 0x60, 0x0, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbd, 0xfffa}]}}, {{0x9, 0x5, 0x6, 0x10, 0x8, 0x51, 0x4, 0x6b, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x64, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x80}]}}]}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x3, 0x6, 0x8, 0x20, 0x4}, 0xad, &(0x7f0000000380)={0x5, 0xf, 0xad, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x4, 0x29, 0x2, 0x60e1}, @wireless={0xb, 0x10, 0x1, 0xc, 0x9c, 0x5, 0xff, 0x3ff, 0x8}, @generic={0x84, 0x10, 0xa, "1297633310cf80f1e3c582bf29bca6a5782885b8368c5dcce4bb72895fa7cb01453b17a477bd054b497c89ae79c1d36ad5dc4e0ee7b7b6e3f682b281a2d2e9fff63a9302cb5b6ee51f67e52b43fe4063385765e1dce1380988b8f8048ddaa830f126dd88c5942d2dd4643e63842db664b36a4bf854b0c192fbd3fadb2a6f2e6804"}, @ssp_cap={0xc, 0x10, 0xa, 0x7, 0x0, 0x40, 0x78f, 0xfffd}, @ptm_cap={0x3}]}, 0x1, [{0x18, &(0x7f0000000080)=@string={0x18, 0x3, "b3c19b433fe13b38b95874a963dd2c0d532938c30a57"}}]}) syz_init_net_socket$x25(0x9, 0x5, 0x0) getpgrp(0xffffffffffffffff) timer_create(0x6, &(0x7f0000000140)={0x0, 0x3e, 0x4, @thr={&(0x7f0000000300)="2c37e06b292a68", &(0x7f0000000440)="5d2b99820293bdb58c84e9d5e4e32d71"}}, &(0x7f0000000340)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r5) mkdirat(r5, &(0x7f0000000000)='./file0\x00', 0x48) 3.579093946s ago: executing program 0 (id=534): capset(&(0x7f0000000140)={0x20080522}, &(0x7f0000000180)={0x0, 0x7, 0x9}) prctl$PR_CAPBSET_DROP(0x2f, 0x2) (async, rerun: 32) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f000000cbc0)=@newtaction={0xe68, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe54, 0x1, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{}, 0x97}, [{}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xf}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {0x4}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe68}}, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x800, 0x7) (async, rerun: 64) add_key(&(0x7f0000000ac0)='asymmetric\x00', &(0x7f0000000b00)={'syz', 0x2}, &(0x7f0000000b40)="fc479c5868cc5f3be60ca131267200c06c823825055e14240e97093029f9654a25f0f3013e2a3d99", 0xfffff, 0xffffffffffffffff) 2.70017424s ago: executing program 0 (id=548): mkdir(&(0x7f0000000600)='./file1\x00', 0x114) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x8800, &(0x7f0000000080)) chdir(&(0x7f0000000740)='./file2\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x595601, 0x0) getdents(r0, 0x0, 0xfd76) r1 = creat(&(0x7f0000000440)='./file1\x00', 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x1413c1) ioctl$USBDEVFS_IOCTL(r2, 0xc00c5512, &(0x7f0000000200)) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000006c0)={&(0x7f0000000640)=ANY=[], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) accept4$nfc_llcp(r1, &(0x7f0000000580), &(0x7f0000000700)=0x60, 0x0) ioctl$USBDEVFS_BULK(r2, 0xc0185502, &(0x7f0000000b40)={{{0x1, 0x1}}, 0x0, 0x8000, 0x0}) lseek(r0, 0x1000000, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x10, 0x5, 0x508, 0x210, 0x210, 0xffffffff, 0x120, 0x120, 0x438, 0x438, 0xffffffff, 0x438, 0x438, 0x5, 0x0, {[{{@ipv6={@private0, @private2, [], [], 'wlan1\x00', 'ip6erspan0\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x1, @ipv4=@loopback, @ipv6=@private0, @gre_key, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv4=@dev, @icmp_id, @gre_key}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @ipv4, @port, @gre_key}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@hbh={{0x48}}]}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, @port, @icmp_id}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x568) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r7 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24e01, 0x121) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r7, 0xc018937b, &(0x7f00000008c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r5, r6}}, './file0\x00'}) fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lchown(&(0x7f0000000100)='./bus\x00', r5, r8) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000780)=0x200000000000162) r9 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010000100000000000000000000040000", @ANYRES32=r11, @ANYBLOB="12020000300000000500270008000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008050}, 0x20000000) 1.830160034s ago: executing program 3 (id=559): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x48}}, 0x0) (async, rerun: 32) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) (async, rerun: 32) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}]}, 0x3c}}, 0x0) (async) r4 = gettid() timer_create(0x0, &(0x7f0000001080)={0x0, 0x12, 0x4, @tid=r4}, &(0x7f0000044000)) (async, rerun: 32) sched_setscheduler(r4, 0x5, &(0x7f00000000c0)=0x9) (async, rerun: 32) r5 = io_uring_setup(0x74dc, &(0x7f0000000180)={0x0, 0x280e, 0x0, 0x2, 0x200}) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(generic-gcm-aesni)\x00'}, 0x58) (async) close_range(r5, 0xffffffffffffffff, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e010203010902"], 0x0) (async, rerun: 64) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r8 = syz_io_uring_setup(0x6823, &(0x7f0000000400)={0x0, 0x803, 0x10100, 0x3, 0xfffffffb}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r11, &(0x7f00000001c0)=ANY=[], 0x118) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r11, 0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x3, 0xffffffffffffffff, 0x0, 0x0}) (async) io_uring_enter(r8, 0x2d3e, 0xea37, 0x0, 0x0, 0x0) r12 = syz_open_dev$I2C(&(0x7f0000000040), 0x7, 0x783400) (async) r13 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000004100), 0x2, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r13, 0x4020565a, &(0x7f0000004140)={0x2, 0xc6, 0x2}) (async, rerun: 32) close(r13) (rerun: 32) ioctl$I2C_PEC(r12, 0x708, 0x2) 1.829568568s ago: executing program 3 (id=560): socket(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000300), 0x800) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x2}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000002240)) fstat(0xffffffffffffffff, &(0x7f0000000280)) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 1.739388033s ago: executing program 3 (id=561): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x1, 0x70) fsmount(r4, 0x1, 0x8) ioctl$HCIINQUIRY(r3, 0x400448e3, &(0x7f0000000040)={0x0, 0x0, "961a58"}) ioctl$EVIOCGMASK(r1, 0x5b14, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r5, 0x1, 0x21, &(0x7f00000001c0), 0x4) setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000140), 0x4) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0xc02c5341, &(0x7f0000000180)) timer_create(0x0, &(0x7f0000000000)={0x0, 0x21}, &(0x7f0000000040)) mknod$loop(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000021c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r8, 0x40047438, &(0x7f0000000180)=""/246) writev(r8, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) 704.82719ms ago: executing program 4 (id=567): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4008005) recvmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/133, 0x85}], 0x1}, 0x6b5}], 0x1, 0x40, 0x0) 619.958688ms ago: executing program 4 (id=568): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = getpid() pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0x86}, {0x1, 0x9}, @const={0x7f, {0x0, 0x2, 0x4, 0x81}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r3, &(0x7f0000000000), 0xfffffecc) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) splice(r2, 0x0, r4, 0x0, 0x4ffe6, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000100)={0x2, r1}) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) r5 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r5) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r6 = memfd_secret(0x0) ftruncate(r6, 0x4) r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x9, 0x13, r6, 0x0) syz_io_uring_submit(r7, 0x0, 0x0) mbind(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x0, 0x0, 0x3) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r8 = syz_open_dev$evdev(&(0x7f0000001900), 0x0, 0x0) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000700)={0x2, 0xa, &(0x7f0000000240)="5b497cde1216bacaaec9"}) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 619.781338ms ago: executing program 2 (id=569): socket(0x10, 0x3, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000300), 0x800) sendmmsg(r1, &(0x7f0000000180), 0x400000000000077, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r0, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x2}) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r2 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x5) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000002240)) fstat(0xffffffffffffffff, &(0x7f0000000280)) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 559.881009ms ago: executing program 2 (id=570): mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x1000, 0x8, '9P2000.u'}, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_INIT(r2, &(0x7f0000001740)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0x80, 0x0, 0x7}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000004380), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_IGMP_VERSION={0x5, 0x2b, 0x3}]}}}]}, 0x3c}}, 0x0) 500.005465ms ago: executing program 3 (id=571): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010012000000000000000700000a20000000000a03000000000000000000070000000900010073797a300000000044000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000020080003400000000514000000110001"], 0x8c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x4, 0x8, 0x201, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88e7}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004011}, 0x20008000) 499.483759ms ago: executing program 3 (id=572): r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) (async, rerun: 64) r1 = fsopen(&(0x7f0000000040)='ceph\x00', 0x0) (rerun: 64) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f0000000140)='#\n$)-.\x02\xcc\xd7\xb2f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112s\x88\n\x13:\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb|&#\xe9\xa3\'\x91>C\x1bV\x87\xeb\xfe\x1c\x9d\\C\xfeI%\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\xfao\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n=//\xf3\x96\xaf\b1\x1b48\bu\x01\xab\x90\x8d_r\xe7\r\'-06,\xff\x84x\'+\xd5\xd4?[e\x19\xa3\\J\xe9\x8a\xb9\xe495\x12', 0xfeffffff00000000) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000017c0)={0x2c, 0x3d, 0x9, 0x0, 0x0, {0x1}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@typed={0x4, 0x5, 0x0, 0x0, @binary}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @pid=0xffffffffffffffff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) (async, rerun: 32) close(r2) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) write$qrtrtun(r0, &(0x7f00000014c0)="6eed76c7359092f0f4787f58d263627feefba682091eef1d481dcb8002f607fdcc7946c649e31053b97502ca4b72ed8f8eedaaa9524475ff31025c2dd71fe6c355600889d3b17c41543066952536b022a4106d1ec9d3033e0ed5ab946952a8520ef2c1dcc51eaf09dfd9c31b0d6d39f875af32888481bdb3a645b9560a0f71d7345c1b59c5a11cd56851ca97482570bcca9794b70958f95711bfd01d52d4051092fa0cae0d2d13f228fafd5400bf7ab0cff62fe14807c9aac9b1a3a0a396fef8a39791f26acd75aeefe16a10c95b3a3bf2a0ad557906dd19c0d024669431babc3b5ab61229f417b97fc3caaab3ef57c04c01059192733be2464fe86a42e0c477870686b6e272d83dcfe72f34bdbc3ef798f88e32d0f1f8342300a558e8599c23ab89b9bb321ad0827a5ea819aee6f44110a83c24fa1c851f10b36e144c6225f442ba32bafafb24d38597cecaa00cd78e220b815143d174182553d3acf89bf3d45ae29f4a92b984753f89ac971fafecc57806abaf64e066373dbd2bad322fe3b7ecbdbd3868959f88108e8a665cb6bf4b86ad267179d91d61949b29814637e0922f508478ae56957978dcbc1aa5bb38d41747b392fe80e643ad465295ad274d175918908af4607d26232b5c42f1e391f18031ba81b8e34920061d6c78de53aaf5264b7cf93728a9dcea0924ddf3580ba39c15ed52b75e01b7b8b9ce77b062499ae13c6dcd702884bdb6a5a9952d3df15f050c2403634d3be8566a4218a6c55a9bbfe89c75b9395e24167f268acc4a90234233f4fe60f887f0e820deb70236c775dcc275a61dd431d88527f6c9b811fff4cd71e3911f2fbff159ac5f2ea16f70457c98d2b6e2d6c26991a4aca5105a1ae2d00164a86981d6cc920b0aae8e26adb83ebfcdf59375331fad408777201fbe71a59767107cde95d08b6dbc6186427914ab8e36f922f51b7192fa304eb8f65984a29c6e4e4bb294a44f2370266d4d0e47c7d92478b1ad89c61c70616003e720c2c68ca1150bb114236bdd81675162bac54e9b8b7f22d5b8b272d1b5b49e4f0f758dba0386523180ba9cbb2676b2f9689e9ea8c3fb80cb512ab2b60ece372b121990111eb6d439d34e6f5a454c2c2b3594f797fe8ed1d8fc2ac9c07b0b74e0004c3b6c3d157c96521ff43ae6bbbb8606cc7df8451ef278b106b3b3ca92a659f71476e254081958b677286d9239aa7d8986fb5328c603f86c8ed889e01deae066083e0acaa3a8da0be56937fd94ffac7ec56b89bc97c33903512b3a24b8948268be607be3c711189444d31b54d4da4514002cd751620ba1b21a6859375c6e5dd09b202de07acb960e40c565a729eaaccbb36641e70007cf27d42dfbbb8fd65912864e7389885917e4c783481e938fe69f0c8084c40aaaab3a24b2f644dd1e10ad4172750c045940374c4d9b53fbeb7ee13ec51133b2dce8aaf89659d5cc32eacd80e5513bc27b670efe70054bbcf684426c31219b13175160f679cb9d3630bd1db6c6b218b7721bf803473639595e1ed62798b866753e26733d281818d913c72aa2e16b4bfd7cf43069c0822b7af4f0f4d851e4afc4309e166d1cd103bf769bdc8e931f578b143ee0c3f91ba287e2457b25f1da7f84dc07fe226590c1c9df8fd0c0f860881d904a2aec7109f126ef5cf74481d521009c43f0196cc9e50de5da3ae17210687191cb920cc7c787d9cbdea34c34f3e3c2518d009fe5720bb783058e9bb4cbea5082de9cb9df37a949b6831150461c681cfe8d3792070bbf3eb34d5844a3e79441e93f7cc5916e58ca1f982559d0a96e2ff975b1c9477dea0cf2450384db33607e64718cf91b078042194132955a09caec70052d2a6fd1654fa4164708f9d336a7c42b75cbd4fb33ef99ea826b5251323b8c2acd6bd5fcead7a96e9363e29c3fb9a6bee010f84f8fcad27c65c84ba566cbc8ce1ee21fce5162a6060985e96f9b84fe04ec85c8621d2febac30d42591ae29631168aa8374271667e392b7922ef0fc1a2f27f35d4c4c7d50e55b4db83e7e7b964151de9f3b9c9880e6706e26d5dd3a5953ba1887fe028f8a6f6135359ad76c69fe596b95a7e472b932e7e156fe968c9c5d7369d7e2060a6401cbfa257163ad8a862fc7f303f03ecb1e4272cc29e37a3593d10aad5bdf9a84c74e841bf549a0e39b5ae41fc9cbc628f0334586b0243ac507b5772eeea6d4b9bdf869c6c234674e8b45baf4d797569c2cc88108e492230455cdb1738d65f5354323c78cbedde052fe5028c218d851ff462bf5e15e558c7bc3771b0628f8d6568aac5875154e1ca151b77769ce1bc2b5a0fd4a1a8767e232d7cc8fe86b8b47e7e8733ba68583b2d65efa655165994dec0863f6873e4920455c15b0e0bdce86343d0a2a70f9a42f228e6c4f0c75255f447b883db9033cfb6fc7ab1160cbb6908974bfc153d69a0ed96fc0d7e98abd792a67fdf4558d26ecaa4ac15387372ec7b73558d8bcd68372949b7fd8fa98ace69a34c2c45aad8ff3f8b472a0d1e52ae09ac363c348ed2a80bd25ac3dd49268c574bea9c1948467db6b75a821aca6a297a5cb3c68386a7275c7c5a79ae939a62ad94758ad35b013b646eb4425f29e204ddaad7d0e9d700090b03be7d4bc33cc18438d87c7af20ffc620cfc4e2971ae2f8e925a0fc9f4f8e4f012d8cbf98f035ea1b590e888cd594b28d2d4ad37eea113504e8355853e573d7e85f023b604dba2f5e2ff16c0edc2c47de4b2acf60845432386f74b547b979d54b12c7eaadcb9477f4c8a1edc6afb34bed039e659f9c40f8dca944d3e220cf05c98eaacbdfb12e5c9793faa931ee5a9812c5f5893907b9a8265a3b238604b789fd13f445c7ae4e96ab4aecea07acd39da2bb8fdc244615fccbf6827a02d8292535499212dc6d7eaac70a328a98262883d3783e343bd721f234d5f4de5c6bf0d1dac4e13dc991195cca8cad9366cef70fd23a2f7e7df0440a2ca4427d1f995d9d3d75b23828e3dcec6b1c20493781eb3523824594309ccd50e09212a3bcf9c0e2627bb3e3ab63e10be81d6a27acc3895357b7a5bbad3fc5eea714c2d44ac13de33dd3e83faa1641ae61cc693e3ce508782cb51075c9c643f07381f67d2aecbd7f462e74ece739d65479646555149d46f599c32dcd13a5a1ea01a121160215cc549ca47a0834ba5ff599daf45e5b4a0301dc961d92366bf816450acea02eb4a031f60d2a46efd255a6b08951c261cf24fce612c3d402963482d4b6755de4abdbf52c0f0a9b524aa65a7754333b7e3ed499ece05af3de92fe071f87cc8560323401f3944f27bef8504c5a32ca4a6c82589b1b9b186875f858d19122656a6aea418bab52132a1729d6de3eee689c2bae8c5652af15841e53c376b0cfe068376201a85bd0bf19279962420f8953a72824d42c580a9c5f8a4efa86d72585a3911f395119ff528ef4536a9f3600c2f8845e7783ce82f8dadeca631b5cdeda06af3d76b9b3148acda895df877efb48a69e2ab2de4e0b100b07ca32bf79196005a5a2ec48232682c6be4890bd431029adeb97c75982e777f9f246f063dece324843ce22eb61ded17ee0f09b57453677dd7d5bfc7e7d21dc8bcb44058e16243e997cdba5700fadfd719f960d284b75a33c0c97f6c9f8ca74aa3892438204bc28165c4e439d2797ab3aa40cef969a1930fe74bbcb47c6e91d892f78a077a79555504e230c55ae0fe0e016c38e031b7e0d6c163d87e3463a2e38702d26a2d4c0696b7555d4c19fe5c2f2f29cfe8b81e259798e60e5d4209904faf0498c96180468af1319f5aff1394865f0a3aac41284b9ec71892e0c8b497dcf7f385e9743787ee191e2fcb4f881bb21bdbab7cf387c2712879a73993bf9a9ba6975e5bf19909e059f5f0d155902eebc6ee8d51bdde4400dc92ff644ffc8e13006833737d106e4746e297a052c6a27221033f4512f470d6e2d4c464fa172539a4423e10ed83cb4a1c93bda43adf10ec4c5a1987ef27c7a5336c3d03e333d7b101641810fc96c8ba651d9ec936e73d3a9659788dc5cf81a83605f4f20334529e2a59d2234a169ba5eb315ecc255f12f0d5c841e5100f858b61f7320f26872e4e3764a4662ba90dbf118f233b4f251d5808216879ef608fce8aa49eec1a2f9d8a084f1a31d124e68b9abc361d96870c1c2f34196e6c9e24ed4326bb4104a09a2be5e49753be777ee23d6b314da5f9e7395f855179c85ac15aa8f1e384f640e05d9748131679e18e45f748843ce6afa12d053cbb7f5486d37c629748b6520f662780a696eac406287d22c038010435157d68470226d3894ff69d2e6ac4887244405ed734f502f0a4ebcaba405fa632b40fb3023aa5f0921e253cc7c19294ebefd158ef760129753811ff5230bf465b6033959a7fec51ff319773d18326e7ae66dc5f055fa66ab8f415e52834bb1fe05c309d340f4676a184637b9af9469e3327dfa51611235763f92d591c4e32fa066e38379847391d75dcde8890fbc2b7f67fb0d13c5998c5a1f1e5936eee616584e347dac73873e36424cdc75770a28c286f9f03b93b83d7c1e329df83ec163202be9b981ec4d90b9f4e405615e975a148dd7e4c21ff8eb5def188aff63e0d7342700f775720cb24af79173bf5a5d63676ef50319e062cff9b01c4be01f237c9f685c531cb52e8131fa4ff95c5b100c59c121d60fe20766e6b675914bcf9ba5c9424502c0a44288cd571dd5571e3d41f30ce6a97115e2c4efa72681b3d991722c3c7b6bfe64123ef7d8604b4eec670abc46e70abd90ded0cb036888a0b71d5fd8a1087df9e5a62aadb8fd6eaa99d2ec2451a0082db44ecca31fba0f7294f2415bf2f6429ceadf05b1f092c8986203176c1b77fac4fb933dfd63031ec175a22b9f521160a59ba2f68574a27fb8860e1a5b8130d91acfa828a7f1a0fff16139601af293557559e5b936d4d55110183129d6040e6003c84f072194e5fdf8941289ace90e59fb4abdeff35ad7c2d3ed2582d10dc885e919901e01b3b13d362034c5d32931e844b0c62cb248854fb6942f6e864226ba9d91f015f9201e25ad70356fabcd561a2c267f8d13fb6005af841e00b4ce1bba83f10ce1a0b1b7925e9aeda83c06dd3a75290b2b31276e50f63e3eb1698fb586d56c1153a07fab8c4ecffcab5c141d6b7be0fe1764cb6c3b6f4dffa5841da7f5f14836d635fc74a912b0933618644dd02cd81358ee8572868b8cbe400058078439fdfc7758331088eca35668ce7055d0a1c3c0b23017da4036f4e31d110d1701b6a0014d85c6d3f40204370c201f8a031a0f361341ed285aaf86cb1d9298ede4b6878f5bf8c8aa6716f447d190b98888e477592765ee7c6e0cb5c091f1a7f7211f94d6170e12b30db0ba047dd1058b75f97057c6614d9026b54149f74ccd196c7cfded424ae4e57e8d77f84f996ffba8a6ea22aa09dd267f8444cb49fd82b219392412dd7c2b866069905b5327b5c6912d8fa457d9322476edbbfd55163209f71ad8f805db4e724f6f19bbde1ac5e2d23b03ee434df07807e85edb566c7deb2d4e8347e5ceda5cb80a0bf3c9e8ca1f679a34d1032e53d1cbc850f28742fe0ebee60e9c03001407255f1dffeb7d7bc305e94c3bf350b97e5e7454ae13afb57a136180938cb698a07bf85453bcbe1a8b11e65dcbaf0583357e8dd4f15c5ec027b7b769dcda32fbfd9befa1c7260f88da89ce958d404c8b9142c9190bb4ed07b44c8477b4578a680d3ee4afe060e402089cbdc18b5c8cb0916c93bfd55ffe01dfa544a198ffb7024d82", 0x1000) r4 = syz_open_dev$sg(&(0x7f0000000c40), 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x300000c, 0x12, r4, 0x0) ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040)=0xbffffffc) (async) syz_clone(0x29000300, &(0x7f0000000040)="c2fff97573891f3a758234f6b08390da0b6bf60d1722aac98289f6c5d78c4a00a795fcccafafdd52c35e9f8508b1e0faead61a9061dabf57e58fcf6c06f83a8223352bb9c28a254e928a6f92", 0x4c, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000240)="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") (async, rerun: 32) fsmount(r2, 0x1, 0x7) (rerun: 32) 449.949495ms ago: executing program 2 (id=573): syz_emit_ethernet(0x82, &(0x7f0000000200)=ANY=[@ANYBLOB="ffffffffffff1704b45adbde08004500007400000000000190780a010101ac1414bb05009078e00100e0460000000000000000110000ac1414aa00000000830329070300443c00030a010184080000000000000000000000e000000200000000ac1414bb00000000ffffffff000000000a0101000000000000000001000000000000"], 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 445.234675ms ago: executing program 3 (id=574): r0 = add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000480)={'fscrypt:', @auto=[0x39, 0x0, 0x0, 0x62, 0x86cc4097e8288a3a, 0x0, 0x0, 0x0, 0x34, 0x63, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64]}, &(0x7f00000004c0)={0x0, "3e82554dc8ccfbc2e85ec82d4ee9df60f6ae16b1a5f2c848722ba3b132e4fde178c945bd950b0477e801fc8a1be9b4ebbe9c2289a6b0aa00"}, 0x48, 0xfffffffffffffffe) syz_emit_vhci(&(0x7f00000033c0)=ANY=[@ANYBLOB="946fd81229200a"], 0x7) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x1d) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) read$watch_queue(r1, &(0x7f0000000540)=""/4096, 0x1000) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x1d) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r5, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc}) ioctl$KVM_RUN(r6, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000c000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x4502, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x0) pipe2$watch_queue(&(0x7f0000000040)={0xffffffffffffffff}, 0x80) syz_emit_ethernet(0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa08004500002800000000002c9078ac1414bbac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c0000fcb708c800"], 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r7, 0xb1) 444.812403ms ago: executing program 2 (id=575): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a80)=ANY=[@ANYBLOB="500000001000210400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa888e16000002800128009000100766c616e00000000180002800c0002000e0000000a00000013eea9eee3f4dfcf060001"], 0x50}}, 0x2) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'macvtap0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) pipe2$watch_queue(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1200a00a}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1e000004", @ANYRES16=r4, @ANYBLOB="02002dbd7000ffdbdf2502000000050004000200000006000a004e230000060001004e23000014000900fc01000000000000000000000000000008000b00", @ANYRES32=r2, @ANYBLOB="08000600ac141428"], 0x50}, 0x1, 0x0, 0x0, 0x20000014}, 0x800) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x8008550e, &(0x7f0000000340)) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x0) ioctl$I2C_SMBUS(r8, 0x720, &(0x7f0000000140)={0x0, 0x0, 0x1, 0x0}) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) close(r6) 270.261508ms ago: executing program 2 (id=576): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(camellia-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, 0x0, 0x0, 0x4008005) recvmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000340)=""/133, 0x85}], 0x1}, 0x6b5}], 0x1, 0x40, 0x0) 269.743346ms ago: executing program 2 (id=577): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/sync_on_suspend', 0x600403, 0x1b) r1 = syz_open_dev$video(&(0x7f00000005c0), 0x20000000005, 0x8900) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000680)={0x3, "f9008000290215cbab2f111658df5edc0100000000000000000000000400", 0x3, 0x1, 0x4, 0x200, 0x100, 0x4}) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) socket$rds(0x15, 0x5, 0x0) (async) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000021c0)={0x2, 0x2, @local}, 0x10) sendmsg$rds(r3, &(0x7f0000002180)={&(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000600)=[@fadd={0x58, 0x114, 0x6, {{0x101, 0xf}, 0x0, 0x0, 0x8, 0x20000000000, 0x7f, 0xfffffffffffffff7, 0x20, 0xfffffffffffffff8}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001ec0)=[{&(0x7f0000000040)=""/165, 0xa5}], 0x1}}], 0xa0, 0x40008d4}, 0x8000) r4 = shmget$private(0x0, 0x4000, 0x1000, &(0x7f0000ffc000/0x4000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) r5 = fanotify_init(0x81, 0x0) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/35, 0x23}], 0x1) (async) readv(r0, &(0x7f0000000180)=[{&(0x7f0000000140)=""/35, 0x23}], 0x1) fanotify_mark(r5, 0x105, 0x40001032, r0, 0x0) (async) fanotify_mark(r5, 0x105, 0x40001032, r0, 0x0) read$FUSE(r5, &(0x7f00000057c0)={0x2020}, 0x2020) (async) read$FUSE(r5, &(0x7f00000057c0)={0x2020}, 0x2020) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r2, 0xf504, 0x0) 160.181208ms ago: executing program 0 (id=578): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x2382, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) pipe2(&(0x7f0000000300), 0x800) sendmmsg(r2, &(0x7f0000000180), 0x400000000000077, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x2}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000400000004"]) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000002240)) fstat(r0, &(0x7f0000000280)) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000180)={0x4, 0x2007}) 70.186674ms ago: executing program 0 (id=579): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x200000, 0x0) chdir(&(0x7f0000000000)='./file0/file0\x00') (async) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000140)={0x100, r1}, 0x0) (async) landlock_restrict_self(r0, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000cc0)={0x1, @pix_mp={0x81, 0x500, 0x35315241, 0x3, 0x4, [{0x9, 0x7}, {0x10002, 0x1}, {0x1, 0x3ff}, {0x0, 0x9}, {0x8, 0x10000}, {0x1001, 0x1}, {0x7, 0x2c}, {0x6, 0x2}], 0xf2, 0x8, 0x1, 0x0, 0x6}}) (async) syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="040efbff2820"], 0x7) r3 = landlock_create_ruleset(&(0x7f0000000240)={0x20}, 0x18, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='./file0/file0\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r3, 0x1, &(0x7f00000002c0)={0x14923, r3}, 0x0) (async) landlock_restrict_self(r3, 0x0) 69.968055ms ago: executing program 0 (id=580): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@'], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000080), 0x0}, 0x20) r1 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r2 = memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r2, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000180)={0x0, 0x8, 0x2}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x40443, 0x1114a}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x81, @local}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010105}]}]}, 0x30}}, 0x0) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000007c0)={r3, 0x4, 0x6, 0x1}) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000580)) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='\n\x00\x00\x00\b\x00\x00\x00B\x00\x00\x00@'], 0x50) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000000c0)={r0, &(0x7f0000000080), 0x0}, 0x20) (async) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) (async) write$selinux_attr(r1, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) (async) memfd_create(&(0x7f00000005c0)='\xa3\x9fn\xb4dR\x04i5\x02\xac\xce\xe1\x88\x9d[@8\xd7\xce\x1f 9I\x7f\x15\x1d\x93=\xb5\xe7\\\'L\xe6\xd2\x8e\xbc)JtTDq\x81\xcf\x81\xba\xe51\xf5\x00\x00\x00\x00\x00\x00\x00\x05L\xbf\xcf\x91\xdfM\xf3\x02^T*\x00\x02\xb9~B\x9f\xacl\x1d3\x06o\xf8\x16H\xaa*\x02\xf7\xfb\x06\xf1\x83\x92\xa8\xc2\xcb\xae\xb0\xb4\x93\xb8\x04\xf1\x99\xc2yY+\xd9y\x8a\xd5b\xe8\"q\x1b0)\xccm\xacz\xc1\xadd\x9b6a\xf3\xdds\xbb\x88\xff\b\x85\xb3s\x00\x0e\xbcfvi\x85\xfc.|\xd4h\xec\x82o\x8e\x93\x11\xc1\xd4\xae\x05\x17=\xd9R\xd0\xd4\x90\xcf\x9b\xdc\xaeV\x88\x94\x9f\xe3\xefqi\xed\xa8w\xbe\xd0\xd0\xc8d\x96G\xcf\x066\x84\x82-tBl\x9e+\xd3\xed\xce\x9f\x83\x86\xf9\x12\x16Ts\x80\x13]C\xfb`\xc2`\xf7\x1a\x00\x00\x00\x00\x00\x00\x00k\xae\xcb\x1a.\xc2\x8f\xd1x4]PZ\x9e\xd5Y\xf0L\xa4\xbc\x84\xf6\x04L\xff0\x8b\\*\xf9,\xb6\r\x97\xedy\xe0\x8a\xe2\x8ck\xc6S\xc3g\xb9\x1a\xf8\x8f \x9d\x00u7\xd8\'\xf1E\xa4(Q\x80Fy\xb5\xe4q\xc9\xff \xd8\x9d\xad\x11\xf8m\xd3\xbc\x9e\x10D\x7f!\xca\x0ev\x15h$\x01\xdd\xe5\xce\xf8*\xb3\x01\x85\a\xe4qv&\x9c\xac\x9aN~o\xe5\x89\xd5\a\x9f\f\x1f\xc2e/\x8d\x1e\n\xd0_\xbd!^\xa46\xb8j\xc0x\n\xdb\xe1\xa3\xd6\xae;\r\x92@\xa5I\x88Z1F\xf0\x1at\t\xd0\x8a\x04m\x06\xf3BL\xffS\x9eY\xf4\xb0U \xf8\xd00\x88y\xebX\x92\xd5\xbb\xa1h7\xf3\xe0\x0f\xbd\x02\xe4%\xf9\xb1\x87\x8aM\xfeG\xb2L\xbd\x92-\xcd\x1f\xf4\xe1,\xb7G|\xec\"\xa2\xab\xf6\x84\xe0\xcf1\x9a', 0x0) (async) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) (async) execveat(r2, &(0x7f0000000140)='\x00', 0x0, 0x0, 0x1000) (async) ioctl$BTRFS_IOC_SCRUB(r2, 0xc400941b, &(0x7f0000000180)={0x0, 0x8, 0x2}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) (async) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, 0x40443, 0x1114a}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x81, @local}}]}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24000001}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x30, r7, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010105}]}]}, 0x30}}, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r1, 0xc400941d, &(0x7f00000007c0)={r3, 0x4, 0x6, 0x1}) (async) ioctl$SIOCGSTAMP(r4, 0x8906, &(0x7f0000000580)) (async) 0s ago: executing program 0 (id=581): r0 = socket(0x10, 0x803, 0x0) r1 = syz_open_dev$vim2m(&(0x7f0000000240), 0x2000a54, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x6, 0x1, 0x1}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r2) (async) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gre0\x00', 0x0}) sendto$packet(r4, 0x0, 0x0, 0x5, &(0x7f00000000c0)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}}, 0x14) (async) getsockopt$inet_mreqn(r0, 0x0, 0x3, &(0x7f0000000380)={@private, @empty, 0x0}, &(0x7f00000003c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000580)={'vcan0\x00', 0x0}) (async) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000c80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f00000006c0)={0x544, r3, 0x200, 0x70bd2b, 0x25dfdbfe, {}, [@ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @ETHTOOL_A_WOL_HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_WOL_MODES={0x164, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x82, 0x4, "c0655fba3dd06b8f555be03422d8bdab688d478ff98eafd4225b811bd7cd7ba3bb1d82b3b6eaad7d5b7730356f73e00a4ab79367a005c75c91a43fabd71402e8a6364f6114029cdebf7cf121b5679fd3c27fccaddf82f759b933626aa9095ea0dbed8cb1703e0b3e4cdb1bb1f88b9bb6ee60344463f20d1c3d6a41ba66fb"}, @ETHTOOL_A_BITSET_BITS={0xd0, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '^:%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xb}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '\x9b[\x93\x00'}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'bpf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[].\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x76f4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'tunnel_key\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '!+\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '%\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x101}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_WOL_SOPASS={0xd8, 0x3, "3c3d520ecffcb52c7d2a22cb948f9ca9a75444d191d41e1f289c335d2b54d969df1b9a1576a24c116b7c6d179f060372093275c0fd55c12380839fba4ab5816e88dc77bdd8391a2df17df33f50d7ced9d1843d441eaa53f70744d05910db52d58d9f0eb1ee0335253bccded17bf9fa3712430ea2bbadfd9027efebcd29edee3eedf82671652c3c4839fe3d083935aa192b2961675d2688e4b7fc85a4203f8241283fe5fcfa421e4a7a4bdcb25079af8e4a1f3647485e13818a793f2ed2d69ec37d81ac9dc24d5ee3176430b20c4f8c780311e7ce"}, @ETHTOOL_A_WOL_MODES={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x47, 0x4, "6dd237322ad3fd76528de8cf5c90e03ba2ef69e0dc8d0283ef60f4adc8ebb7951c6e4256d0e3b591471739d09a833bd0ca1a40558aa3dd26d04fc9620cff217b85c8f1"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xd}, @ETHTOOL_A_BITSET_VALUE={0x73, 0x4, "8b626ab75004d6d691745e898a550948bdd905e044c414e7f0ad714188ae97fa58717a3323365e5b06dbbbc3ca722dc7029d9890b3c6332d798da51e0b1dace72a8c3ebea2cc8b7dc520addb801ea9552dd78c43e162fa9bcb85140b547c26fbd33778d47c38ca50d03ed8f4534de3"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x2b, 0x4, "aab99a34803cc37c9090e4c3f419a1ffc08e0f6155f0ef5d02d5257d7eeff41866c3da3adc03ca"}, @ETHTOOL_A_BITSET_BITS={0x68, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5e8}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0xf, 0x2, 'tunnel_key\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'bpf\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xe355}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'vti\x00'}]}]}, @ETHTOOL_A_BITSET_BITS={0x74, 0x3, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbe}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, ',\\{}\'-\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, 'sample\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'R+)\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xc50}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'nat\x00'}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x3}]}]}, 0x544}, 0x1, 0x0, 0x0, 0x40000}, 0x814) (async) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r10, @ANYBLOB="050300000000000000000700000008000300", @ANYRES32], 0x1c}}, 0x0) (async) ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000140)=@multiplanar_mmap={0x4, 0x1, 0x4, 0x0, 0x800000, {}, {0x0, 0x0, 0x0, 0x0, 0xfc, 0xff, "e6dd3c3d"}, 0xb20f, 0x1, {0x0}}) ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0x40045612, &(0x7f0000000000)=0x1) (async) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0xac, 0xffff8000, 0x4, 0x3, 0xb0c0, 0x2, 0x9}, 0x1c) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newlink={0x38, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0xe}}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x4000) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000400)=@gettaction={0x15c, 0x32, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x19, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x14, 0x11, 0x0, 0x0, @TCA_ACT_KIND={0xd, 0x1, 'connmark\x00'}}, {0xc, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0xc, 0x19, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1000}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd4}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xd8}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xfffffff8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x100}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xe7}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x8}, @action_gd=@TCA_ACT_TAB={0x48, 0x1, [{0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x3, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xc0000000}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffff0001}}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x2000801}, 0x4000840) kernel console output (not intermixed with test programs): [ 38.247853][ T39] audit: type=1400 audit(1734850654.491:81): avc: denied { rlimitinh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.253327][ T39] audit: type=1400 audit(1734850654.501:82): avc: denied { siginh } for pid=5913 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 38.796261][ T39] audit: type=1400 audit(1734850655.061:83): avc: denied { read } for pid=5330 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 38.801827][ T39] audit: type=1400 audit(1734850655.061:84): avc: denied { append } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.807831][ T39] audit: type=1400 audit(1734850655.061:85): avc: denied { open } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.813434][ T39] audit: type=1400 audit(1734850655.061:86): avc: denied { getattr } for pid=5330 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 Warning: Permanently added '[localhost]:61016' (ED25519) to the list of known hosts. [ 39.407294][ T39] audit: type=1400 audit(1734850655.671:87): avc: denied { name_bind } for pid=5918 comm="sshd" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.010994][ T5920] cgroup: Unknown subsys name 'net' [ 41.155470][ T5920] cgroup: Unknown subsys name 'cpuset' [ 41.158579][ T5920] cgroup: Unknown subsys name 'rlimit' [ 41.344076][ T5924] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 41.948082][ T5920] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.055851][ T39] kauditd_printk_skb: 17 callbacks suppressed [ 44.055866][ T39] audit: type=1400 audit(1734850660.321:105): avc: denied { execmem } for pid=5927 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 44.214185][ T39] audit: type=1400 audit(1734850660.481:106): avc: denied { create } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.223202][ T39] audit: type=1400 audit(1734850660.481:107): avc: denied { read write } for pid=5931 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.229226][ T39] audit: type=1400 audit(1734850660.481:108): avc: denied { open } for pid=5931 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1291 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 44.235423][ T39] audit: type=1400 audit(1734850660.491:109): avc: denied { ioctl } for pid=5931 comm="syz-executor" path="socket:[7421]" dev="sockfs" ino=7421 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.250192][ T5933] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 44.254019][ T5936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 44.257217][ T5936] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 44.260958][ T5936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 44.263700][ T5937] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 44.264003][ T5936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 44.265683][ T5937] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 44.268056][ T5936] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 44.270563][ T5937] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 44.273205][ T5936] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 44.274261][ T5937] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 44.277004][ T5936] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 44.278167][ T5937] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 44.279855][ T5945] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 44.281497][ T5937] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 44.289007][ T5943] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 44.289797][ T5288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 44.291988][ T39] audit: type=1400 audit(1734850660.551:110): avc: denied { read } for pid=5931 comm="syz-executor" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.293647][ T5288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 44.300050][ T5936] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 44.300070][ T39] audit: type=1400 audit(1734850660.551:111): avc: denied { open } for pid=5931 comm="syz-executor" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 44.300089][ T39] audit: type=1400 audit(1734850660.551:112): avc: denied { mounton } for pid=5931 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 44.300333][ T5943] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 44.302925][ T5943] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 44.304204][ T5288] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 44.310678][ T5933] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 44.323179][ T5933] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 44.401773][ T39] audit: type=1400 audit(1734850660.661:113): avc: denied { module_request } for pid=5938 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 44.418083][ T5938] chnl_net:caif_netlink_parms(): no params data found [ 44.486295][ T5931] chnl_net:caif_netlink_parms(): no params data found [ 44.527428][ T5939] chnl_net:caif_netlink_parms(): no params data found [ 44.549462][ T5938] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.552238][ T5938] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.555398][ T5938] bridge_slave_0: entered allmulticast mode [ 44.558129][ T5938] bridge_slave_0: entered promiscuous mode [ 44.562417][ T5938] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.565005][ T5938] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.567491][ T5938] bridge_slave_1: entered allmulticast mode [ 44.570251][ T5938] bridge_slave_1: entered promiscuous mode [ 44.641758][ T5938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.645540][ T5938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.664843][ T5931] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.666684][ T5931] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.668542][ T5931] bridge_slave_0: entered allmulticast mode [ 44.670483][ T5931] bridge_slave_0: entered promiscuous mode [ 44.686364][ T5938] team0: Port device team_slave_0 added [ 44.688106][ T5931] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.689945][ T5931] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.691833][ T5931] bridge_slave_1: entered allmulticast mode [ 44.694325][ T5931] bridge_slave_1: entered promiscuous mode [ 44.710410][ T5938] team0: Port device team_slave_1 added [ 44.756177][ T5932] chnl_net:caif_netlink_parms(): no params data found [ 44.767453][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 44.769224][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.775897][ T5938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 44.780512][ T5931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.782947][ T5939] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.784899][ T5939] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.786745][ T5939] bridge_slave_0: entered allmulticast mode [ 44.788592][ T5939] bridge_slave_0: entered promiscuous mode [ 44.792742][ T5939] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.794639][ T5939] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.796483][ T5939] bridge_slave_1: entered allmulticast mode [ 44.798408][ T5939] bridge_slave_1: entered promiscuous mode [ 44.800877][ T5938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 44.802744][ T5938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 44.810979][ T5938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 44.818179][ T5931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.866418][ T5939] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 44.869999][ T5939] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 44.873799][ T5931] team0: Port device team_slave_0 added [ 44.905948][ T5931] team0: Port device team_slave_1 added [ 44.932845][ T5938] hsr_slave_0: entered promiscuous mode [ 44.936001][ T5938] hsr_slave_1: entered promiscuous mode [ 44.940272][ T5939] team0: Port device team_slave_0 added [ 44.944298][ T5939] team0: Port device team_slave_1 added [ 45.003337][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.005156][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.011744][ T5931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.016129][ T5931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.017932][ T5931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.024749][ T5931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.027832][ T5932] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.029684][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.031574][ T5932] bridge_slave_0: entered allmulticast mode [ 45.033937][ T5932] bridge_slave_0: entered promiscuous mode [ 45.036885][ T5932] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.038768][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.040648][ T5932] bridge_slave_1: entered allmulticast mode [ 45.042636][ T5932] bridge_slave_1: entered promiscuous mode [ 45.056772][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.058677][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.065930][ T5939] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.071393][ T5939] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.073377][ T5939] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.080088][ T5939] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.116131][ T5932] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 45.122093][ T5932] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 45.154089][ T5939] hsr_slave_0: entered promiscuous mode [ 45.155971][ T5939] hsr_slave_1: entered promiscuous mode [ 45.157780][ T5939] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.159809][ T5939] Cannot create hsr debugfs directory [ 45.171545][ T5932] team0: Port device team_slave_0 added [ 45.193917][ T5932] team0: Port device team_slave_1 added [ 45.216065][ T5931] hsr_slave_0: entered promiscuous mode [ 45.218017][ T5931] hsr_slave_1: entered promiscuous mode [ 45.219969][ T5931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.222487][ T5931] Cannot create hsr debugfs directory [ 45.235096][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 45.236823][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.244000][ T5932] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 45.248169][ T5932] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 45.250096][ T5932] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 45.258678][ T5932] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 45.336189][ T5932] hsr_slave_0: entered promiscuous mode [ 45.338756][ T5932] hsr_slave_1: entered promiscuous mode [ 45.341101][ T5932] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 45.346716][ T5932] Cannot create hsr debugfs directory [ 45.387514][ T5938] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.393031][ T5938] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.417913][ T5938] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.424993][ T5938] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.486702][ T5939] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 45.494325][ T5939] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 45.499200][ T5939] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 45.513151][ T5939] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 45.543296][ T5931] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 45.546364][ T5931] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 45.554218][ T5931] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 45.557735][ T5931] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 45.579282][ T5932] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 45.582806][ T5932] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 45.586930][ T5932] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 45.596342][ T5932] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 45.622380][ T5938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.651832][ T5938] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.661320][ T5939] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.669834][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.672560][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.679582][ T5931] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.684990][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.687506][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.699778][ T5939] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.708745][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.711057][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.718739][ T5931] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.727211][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.729073][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.733486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.735386][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.738154][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.739972][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.781692][ T5932] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.781795][ T39] audit: type=1400 audit(1734850662.041:114): avc: denied { sys_module } for pid=5938 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 45.794018][ T5932] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.801932][ T1171] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.803903][ T1171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.814769][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.816955][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.845415][ T5938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.868413][ T5939] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.874295][ T5938] veth0_vlan: entered promiscuous mode [ 45.881636][ T5938] veth1_vlan: entered promiscuous mode [ 45.893034][ T5931] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.903478][ T5938] veth0_macvtap: entered promiscuous mode [ 45.908029][ T5938] veth1_macvtap: entered promiscuous mode [ 45.915397][ T5939] veth0_vlan: entered promiscuous mode [ 45.921384][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 45.928956][ T5938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 45.931740][ T5939] veth1_vlan: entered promiscuous mode [ 45.938438][ T5938] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.940760][ T5938] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.942934][ T5938] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.945621][ T5938] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 45.962629][ T5931] veth0_vlan: entered promiscuous mode [ 45.967098][ T5932] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 45.975758][ T5931] veth1_vlan: entered promiscuous mode [ 45.982767][ T5939] veth0_macvtap: entered promiscuous mode [ 46.000942][ T5939] veth1_macvtap: entered promiscuous mode [ 46.008465][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.011343][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.014564][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.020683][ T45] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.022410][ T5939] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.022823][ T45] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.028160][ T5939] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.032593][ T5939] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.039487][ T5939] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.041798][ T5939] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.045609][ T5939] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.048234][ T5939] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.052909][ T5932] veth0_vlan: entered promiscuous mode [ 46.059405][ T5932] veth1_vlan: entered promiscuous mode [ 46.074846][ T5931] veth0_macvtap: entered promiscuous mode [ 46.079536][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.081541][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.082940][ T5931] veth1_macvtap: entered promiscuous mode [ 46.086639][ T5932] veth0_macvtap: entered promiscuous mode [ 46.100015][ T5932] veth1_macvtap: entered promiscuous mode [ 46.110796][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.113897][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.116188][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.118842][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.122118][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.128278][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.129294][ T5938] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 46.131382][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.138919][ T5931] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.141623][ T5931] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.144929][ T5931] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.149865][ T5931] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.152155][ T5931] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.154804][ T5931] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.157160][ T5931] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.160264][ T70] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.162518][ T70] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.176281][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.178984][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.181388][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.184446][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.186933][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 46.189595][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.193662][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 46.201875][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.205425][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.207950][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.210502][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.213042][ T5932] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 46.216446][ T5932] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 46.220051][ T5932] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 46.230064][ T70] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.232507][ T70] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.241189][ T5932] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.244796][ T5932] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.247568][ T5932] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.249796][ T5932] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 46.271029][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.274015][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.296004][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.298137][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.303818][ T5933] Bluetooth: hci0: command tx timeout [ 46.308848][ T1171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.310936][ T1171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.335381][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 46.337529][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 46.393801][ T5940] Bluetooth: hci3: command tx timeout [ 46.394345][ T5288] Bluetooth: hci1: command tx timeout [ 46.395508][ T65] Bluetooth: hci2: command tx timeout [ 46.408929][ T6002] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 46.501537][ T6021] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 46.509226][ T6023] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 46.512426][ T6023] VFS: Can't find a romfs filesystem on dev nullb0. [ 46.512426][ T6023] [ 46.552923][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.555840][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.637362][ T6042] ieee802154 phy0 wpan0: encryption failed: -22 [ 47.027626][ T6054] Zero length message leads to an empty skb [ 47.420411][ T6062] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 47.443588][ T9] IPVS: starting estimator thread 0... [ 47.476388][ T6073] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6073 comm=syz.2.22 [ 47.480248][ T6073] netlink: 'syz.2.22': attribute type 1 has an invalid length. [ 47.499799][ T6076] syz.1.23 uses obsolete (PF_INET,SOCK_PACKET) [ 47.534680][ T6070] IPVS: using max 38 ests per chain, 91200 per kthread [ 47.639604][ T6094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42349 sclass=netlink_route_socket pid=6094 comm=syz.2.29 [ 47.642985][ T6094] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42349 sclass=netlink_route_socket pid=6094 comm=syz.2.29 [ 47.646155][ T6087] kvm: pic: non byte write [ 47.652423][ T6087] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1625286990 (3250573980 ns) > initial count (48 ns). Using initial count to start timer. [ 47.798852][ T6105] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 47.921285][ T6117] geneve2: entered promiscuous mode [ 47.923436][ T6117] geneve2: entered allmulticast mode [ 48.035446][ T6125] xt_hashlimit: size too large, truncated to 1048576 [ 48.059325][ T6127] binder: Unknown parameter 'smackfsroot' [ 48.088583][ T6132] ebt_among: src integrity fail: 300 [ 48.383558][ T5940] Bluetooth: hci0: command tx timeout [ 48.447927][ T6141] tipc: Enabling of bearer rejected, failed to enable media [ 48.463207][ T5940] Bluetooth: hci3: command 0x041b tx timeout [ 48.463227][ T5288] Bluetooth: hci1: command tx timeout [ 48.473743][ T5288] Bluetooth: hci2: command tx timeout [ 48.564550][ T6150] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 48.607595][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.52'. [ 48.612577][ T6155] NILFS (loop1): device size too small [ 48.678464][ T6162] 9pnet_fd: Insufficient options for proto=fd [ 48.747637][ T6173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.55'. [ 48.777622][ T6176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.56'. [ 48.830488][ T6170] kvm: pic: non byte write [ 48.836183][ T6170] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1625286990 (3250573980 ns) > initial count (48 ns). Using initial count to start timer. [ 49.209134][ T6184] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 49.212373][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.58'. [ 49.262847][ T39] kauditd_printk_skb: 104 callbacks suppressed [ 49.262862][ T39] audit: type=1400 audit(1734850665.521:219): avc: denied { create } for pid=6186 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.270315][ T39] audit: type=1400 audit(1734850665.531:220): avc: denied { bind } for pid=6186 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.271656][ T6187] openvswitch: netlink: Missing key (keys=40, expected=100) [ 49.276309][ T39] audit: type=1400 audit(1734850665.531:221): avc: denied { setopt } for pid=6186 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.283354][ T39] audit: type=1400 audit(1734850665.531:222): avc: denied { write } for pid=6186 comm="syz.3.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 49.295021][ T39] audit: type=1400 audit(1734850665.561:223): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.323605][ T39] audit: type=1400 audit(1734850665.591:224): avc: denied { write } for pid=6188 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.328601][ T39] audit: type=1400 audit(1734850665.591:225): avc: denied { read } for pid=6188 comm="syz.3.60" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.334015][ T39] audit: type=1400 audit(1734850665.591:226): avc: denied { ioctl } for pid=6188 comm="syz.3.60" path="socket:[11444]" dev="sockfs" ino=11444 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.744976][ T39] audit: type=1400 audit(1734850666.011:227): avc: denied { ioctl } for pid=6211 comm="syz.3.69" path="/dev/ptp0" dev="devtmpfs" ino=729 ioctlcmd=0x3d07 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 49.752732][ T39] audit: type=1400 audit(1734850666.011:228): avc: denied { search } for pid=5648 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 49.798801][ T6222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 49.802959][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz.3.71'. [ 49.899105][ T6234] evm: overlay not supported [ 49.924683][ T6241] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.134443][ T6265] program syz.0.85 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 50.168531][ T6273] netlink: 24 bytes leftover after parsing attributes in process `syz.1.88'. [ 50.258797][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.94'. [ 50.261177][ T6288] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'. [ 50.261817][ T6292] xt_CT: You must specify a L4 protocol and not use inversions on it [ 50.303045][ T6299] netlink: 40 bytes leftover after parsing attributes in process `syz.2.98'. [ 50.312577][ T6302] tls_set_device_offload_rx: netdev not found [ 50.387486][ T6315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.401243][ T6313] loop6: detected capacity change from 0 to 524287999 [ 50.409345][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 0 [ 50.413725][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.416174][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.419083][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.421388][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.423975][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.426331][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.428500][ C1] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.430924][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.434558][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.436924][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.439057][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.441378][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.446780][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.449183][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.452201][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.454573][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.457124][ C2] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 50.459590][ C2] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.463182][ C3] Buffer I/O error on dev loop6, logical block 0, async page read [ 50.473149][ T5288] Bluetooth: hci0: command tx timeout [ 50.545414][ T5288] Bluetooth: hci2: command tx timeout [ 50.545487][ T5933] Bluetooth: hci1: command tx timeout [ 50.546870][ T5288] Bluetooth: hci3: command 0x041b tx timeout [ 50.671777][ T6357] Bluetooth: MGMT ver 1.23 [ 50.673942][ T6357] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes [ 51.033292][ T35] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 51.185095][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 51.189219][ T35] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 51.194952][ T35] usb 8-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 51.197338][ T35] usb 8-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 51.199510][ T35] usb 8-1: Product: syz [ 51.200621][ T35] usb 8-1: Manufacturer: syz [ 51.201830][ T35] usb 8-1: SerialNumber: syz [ 51.212471][ T35] usb 8-1: config 0 descriptor?? [ 51.216300][ T6366] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 51.271706][ T6387] mmap: syz.0.126 (6387) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 51.295727][ T6387] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.368877][ T45] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.443467][ T5940] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.446995][ T5940] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.449451][ T45] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.450723][ T5940] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.456911][ T5940] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.459079][ T5940] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.461769][ T5940] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.493529][ T5971] usb 8-1: USB disconnect, device number 2 [ 51.524861][ T45] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.564578][ T6414] tipc: Started in network mode [ 51.565993][ T6414] tipc: Node identity 4, cluster identity 4711 [ 51.567574][ T6414] tipc: Node number set to 4 [ 51.579492][ T6400] chnl_net:caif_netlink_parms(): no params data found [ 51.610793][ T45] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.647515][ T6400] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.649483][ T6400] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.651265][ T6400] bridge_slave_0: entered allmulticast mode [ 51.653571][ T6400] bridge_slave_0: entered promiscuous mode [ 51.656150][ T6400] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.657937][ T6400] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.660344][ T6400] bridge_slave_1: entered allmulticast mode [ 51.662371][ T6400] bridge_slave_1: entered promiscuous mode [ 51.682644][ T6400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 51.688186][ T6400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 51.711226][ T6400] team0: Port device team_slave_0 added [ 51.714517][ T6400] team0: Port device team_slave_1 added [ 51.734908][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 51.736878][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.744984][ T6400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 51.748895][ T6400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 51.751003][ T6400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 51.758041][ T6400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 51.818778][ T6400] hsr_slave_0: entered promiscuous mode [ 51.821633][ T6400] hsr_slave_1: entered promiscuous mode [ 51.824122][ T6400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 51.826898][ T6400] Cannot create hsr debugfs directory [ 51.845768][ T45] bridge_slave_1: left allmulticast mode [ 51.847994][ T45] bridge_slave_1: left promiscuous mode [ 51.850904][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.860415][ T45] bridge_slave_0: left allmulticast mode [ 51.862344][ T45] bridge_slave_0: left promiscuous mode [ 51.864656][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.077756][ T45] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.082159][ T45] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.085554][ T45] bond0 (unregistering): Released all slaves [ 52.251804][ T6400] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 52.255324][ T6400] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 52.259276][ T6400] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 52.264365][ T6400] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 52.322078][ T6440] netlink: 'syz.2.140': attribute type 7 has an invalid length. [ 52.326283][ T6440] netlink: 'syz.2.140': attribute type 8 has an invalid length. [ 52.340195][ T6440] bond0: entered promiscuous mode [ 52.341566][ T6440] bond_slave_0: entered promiscuous mode [ 52.344017][ T6440] bond_slave_1: entered promiscuous mode [ 52.346710][ T6440] batadv_slave_1: entered promiscuous mode [ 52.348701][ T6440] gretap0: entered promiscuous mode [ 52.377104][ T6400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 52.383285][ T5972] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 52.389343][ T6400] 8021q: adding VLAN 0 to HW filter on device team0 [ 52.408178][ T45] hsr_slave_0: left promiscuous mode [ 52.411010][ T45] hsr_slave_1: left promiscuous mode [ 52.414664][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.417441][ T45] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.422460][ T45] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.430202][ T45] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.451673][ T45] veth1_macvtap: left promiscuous mode [ 52.455283][ T45] veth0_macvtap: left promiscuous mode [ 52.457054][ T45] veth1_vlan: left promiscuous mode [ 52.458778][ T45] veth0_vlan: left promiscuous mode [ 52.542288][ T5972] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.545155][ T5972] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 52.547425][ T5972] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 52.550188][ T5972] usb 8-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 52.552890][ T5972] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 52.553472][ T5940] Bluetooth: hci0: command tx timeout [ 52.557028][ T5972] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.570305][ T5972] hub 8-1:1.0: bad descriptor, ignoring hub [ 52.574930][ T5972] hub 8-1:1.0: probe with driver hub failed with error -5 [ 52.577777][ T5972] cdc_wdm 8-1:1.0: skipping garbage [ 52.579164][ T5972] cdc_wdm 8-1:1.0: skipping garbage [ 52.586246][ T5972] cdc_wdm 8-1:1.0: cdc-wdm0: USB WDM device [ 52.587864][ T5972] cdc_wdm 8-1:1.0: Unknown control protocol [ 52.633230][ T5940] Bluetooth: hci3: command 0x041b tx timeout [ 52.633302][ T5288] Bluetooth: hci2: command tx timeout [ 52.969479][ T45] team0 (unregistering): Port device team_slave_1 removed [ 53.046677][ T45] team0 (unregistering): Port device team_slave_0 removed [ 53.317066][ T6429] usb 8-1: reset low-speed USB device number 3 using dummy_hcd [ 53.471996][ T102] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.473800][ T102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.488907][ T102] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.491549][ T102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.503361][ T5288] Bluetooth: hci1: command tx timeout [ 53.582632][ T6400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 53.652288][ T6429] usb 8-1: device firmware changed [ 53.657796][ T6429] cdc_wdm 8-1:1.0: Error autopm - -16 [ 53.657915][ T5996] usb 8-1: USB disconnect, device number 3 [ 53.688141][ T6490] (syz.2.147,6490,3):dlmfs_mkdir:420 ERROR: invalid domain name for directory. [ 53.729126][ T6400] veth0_vlan: entered promiscuous mode [ 53.734306][ T6400] veth1_vlan: entered promiscuous mode [ 53.744532][ T6400] veth0_macvtap: entered promiscuous mode [ 53.748311][ T6400] veth1_macvtap: entered promiscuous mode [ 53.754779][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.757502][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.760003][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.762662][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.766694][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 53.769804][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.773032][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 53.777338][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.780834][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.783533][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.785662][ T5971] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 53.786219][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.791688][ T5971] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz1] on syz0 [ 53.792087][ T6400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 53.799087][ T6400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 53.802869][ T6400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 53.813658][ T5996] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 53.815119][ T6400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.818537][ T6400] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.821488][ T6400] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.824027][ T6400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 53.862305][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.865095][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.875238][ T1171] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.877353][ T1171] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.975966][ T5996] usb 8-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 53.978821][ T5996] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 53.981340][ T5996] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 53.985505][ T5996] usb 8-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 53.988139][ T5996] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.997393][ T5996] hub 8-1:1.0: bad descriptor, ignoring hub [ 53.999769][ T5996] hub 8-1:1.0: probe with driver hub failed with error -5 [ 54.003024][ T5996] cdc_wdm 8-1:1.0: skipping garbage [ 54.005004][ T5996] cdc_wdm 8-1:1.0: skipping garbage [ 54.007058][ T5996] cdc_wdm 8-1:1.0: probe with driver cdc_wdm failed with error -22 [ 54.305026][ T8] usb 8-1: USB disconnect, device number 4 [ 54.532842][ T6555] __nla_validate_parse: 3 callbacks suppressed [ 54.532858][ T6555] netlink: 28 bytes leftover after parsing attributes in process `syz.0.151'. [ 54.606101][ T39] kauditd_printk_skb: 136 callbacks suppressed [ 54.606118][ T39] audit: type=1400 audit(1734850670.871:365): avc: denied { write } for pid=6557 comm="syz.0.153" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 54.703477][ T5940] Bluetooth: hci3: command 0x041b tx timeout [ 54.743391][ T6575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 54.749189][ T39] audit: type=1400 audit(1734850671.011:366): avc: denied { setopt } for pid=6577 comm="syz.0.160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 54.845729][ T6583] team0: No ports can be present during mode change [ 54.848005][ T6583] team0: No ports can be present during mode change [ 54.850523][ T6583] team0: No ports can be present during mode change [ 54.852385][ T6583] team0: No ports can be present during mode change [ 54.855385][ T6583] team0: No ports can be present during mode change [ 54.857253][ T6583] team0: No ports can be present during mode change [ 54.859048][ T6583] team0: No ports can be present during mode change [ 54.860929][ T6583] team0: No ports can be present during mode change [ 54.864806][ T6583] team0: No ports can be present during mode change [ 54.866922][ T6583] team0: No ports can be present during mode change [ 54.868849][ T6583] team0: No ports can be present during mode change [ 54.870634][ T6583] team0: No ports can be present during mode change [ 54.872929][ T6583] team0: No ports can be present during mode change [ 54.876139][ T6583] team0: No ports can be present during mode change [ 54.877940][ T6583] team0: No ports can be present during mode change [ 54.879843][ T6583] team0: No ports can be present during mode change [ 54.881657][ T6583] team0: No ports can be present during mode change [ 54.884241][ T6583] team0: No ports can be present during mode change [ 54.886720][ T6583] team0: No ports can be present during mode change [ 54.888597][ T6583] team0: No ports can be present during mode change [ 54.890372][ T6583] team0: No ports can be present during mode change [ 54.892172][ T6583] team0: No ports can be present during mode change [ 54.894146][ T6583] team0: No ports can be present during mode change [ 54.895929][ T6583] team0: No ports can be present during mode change [ 54.897698][ T6583] team0: No ports can be present during mode change [ 54.899462][ T6583] team0: No ports can be present during mode change [ 54.901158][ T6583] team0: No ports can be present during mode change [ 54.902975][ T6583] team0: No ports can be present during mode change [ 54.905008][ T6583] team0: No ports can be present during mode change [ 54.906699][ T6583] team0: No ports can be present during mode change [ 54.908591][ T6583] team0: No ports can be present during mode change [ 54.913301][ T6583] team0: No ports can be present during mode change [ 54.915034][ T6583] team0: No ports can be present during mode change [ 54.916764][ T6583] team0: No ports can be present during mode change [ 54.918469][ T6583] team0: No ports can be present during mode change [ 54.920101][ T6583] team0: No ports can be present during mode change [ 54.921759][ T6583] team0: No ports can be present during mode change [ 54.924708][ T6583] team0: No ports can be present during mode change [ 54.926721][ T6583] team0: No ports can be present during mode change [ 54.928512][ T6583] team0: No ports can be present during mode change [ 54.931481][ T6583] team0: No ports can be present during mode change [ 54.933466][ T6583] team0: No ports can be present during mode change [ 54.935175][ T6583] team0: No ports can be present during mode change [ 54.937176][ T6583] team0: No ports can be present during mode change [ 54.938956][ T6583] team0: No ports can be present during mode change [ 54.940698][ T6583] team0: No ports can be present during mode change [ 54.942384][ T6583] team0: No ports can be present during mode change [ 54.945025][ T6583] team0: No ports can be present during mode change [ 54.947136][ T6583] team0: No ports can be present during mode change [ 54.949009][ T6583] team0: No ports can be present during mode change [ 54.950682][ T6583] team0: No ports can be present during mode change [ 54.952410][ T6583] team0: No ports can be present during mode change [ 54.954362][ T6583] team0: No ports can be present during mode change [ 54.956106][ T6583] team0: No ports can be present during mode change [ 54.957890][ T6583] team0: No ports can be present during mode change [ 54.959789][ T6583] team0: No ports can be present during mode change [ 54.961424][ T6583] team0: No ports can be present during mode change [ 54.963345][ T6583] team0: No ports can be present during mode change [ 54.965019][ T6583] team0: No ports can be present during mode change [ 54.966628][ T6583] team0: No ports can be present during mode change [ 54.968556][ T6583] team0: No ports can be present during mode change [ 54.971017][ T6583] team0: No ports can be present during mode change [ 54.973969][ T6583] team0: No ports can be present during mode change [ 54.976475][ T6583] team0: No ports can be present during mode change [ 54.980032][ T6583] team0: No ports can be present during mode change [ 55.053633][ T39] audit: type=1400 audit(1734850671.311:367): avc: denied { ioctl } for pid=6594 comm="syz.0.166" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=14555 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 55.396914][ T39] audit: type=1400 audit(1734850671.661:368): avc: denied { read write } for pid=6599 comm="syz.2.167" name="raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.403991][ T39] audit: type=1400 audit(1734850671.661:369): avc: denied { open } for pid=6599 comm="syz.2.167" path="/dev/raw-gadget" dev="devtmpfs" ino=849 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.410484][ T39] audit: type=1400 audit(1734850671.661:370): avc: denied { ioctl } for pid=6599 comm="syz.2.167" path="/dev/raw-gadget" dev="devtmpfs" ino=849 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 55.593239][ T5940] Bluetooth: hci1: command tx timeout [ 55.633972][ T5972] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.783209][ T5972] usb 7-1: Using ep0 maxpacket: 8 [ 55.787007][ T5972] usb 7-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 55.790809][ T5972] usb 7-1: config 1 interface 0 has no altsetting 0 [ 55.794577][ T39] audit: type=1400 audit(1734850672.061:371): avc: denied { rename } for pid=5330 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.800918][ T39] audit: type=1400 audit(1734850672.061:372): avc: denied { unlink } for pid=5330 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.808825][ T39] audit: type=1400 audit(1734850672.061:373): avc: denied { create } for pid=5330 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 55.848891][ T39] audit: type=1400 audit(1734850672.111:374): avc: denied { ioctl } for pid=6605 comm="syz.3.168" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 55.986556][ T6620] process 'syz.3.171' launched './file0' with NULL argv: empty string added [ 56.004490][ T6620] netlink: 24 bytes leftover after parsing attributes in process `syz.3.171'. [ 56.104879][ T6629] capability: warning: `syz.0.174' uses 32-bit capabilities (legacy support in use) [ 56.223297][ T5940] Bluetooth: hci4: command 0x1003 tx timeout [ 56.225757][ T5288] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.297645][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz.0.184'. [ 57.650492][ T6673] overlayfs: missing 'workdir' [ 57.665482][ T5288] Bluetooth: hci1: command tx timeout [ 57.686449][ T6676] [U]  [ 57.840848][ T6688] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 58.023660][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'. [ 58.406835][ T5972] usb 7-1: New USB device found, idVendor=18d1, idProduct=502b, bcdDevice= 0.40 [ 58.409285][ T5972] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.413442][ T5972] usb 7-1: can't set config #1, error -71 [ 58.416821][ T5972] usb 7-1: USB disconnect, device number 2 [ 58.863242][ T6642] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 59.743380][ T5288] Bluetooth: hci1: command tx timeout [ 70.838913][ T6775] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 70.840933][ T6775] netlink: 128 bytes leftover after parsing attributes in process `syz.0.199'. [ 70.843397][ T6775] netlink: 'syz.0.199': attribute type 5 has an invalid length. [ 70.845720][ T6775] netlink: 'syz.0.199': attribute type 6 has an invalid length. [ 70.848335][ T6775] netlink: 3 bytes leftover after parsing attributes in process `syz.0.199'. [ 70.852146][ T39] kauditd_printk_skb: 23 callbacks suppressed [ 70.852159][ T39] audit: type=1400 audit(1734850687.111:398): avc: denied { setopt } for pid=6780 comm="syz.3.202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 70.852877][ T6775] netlink: 'syz.0.199': attribute type 21 has an invalid length. [ 70.861705][ T6775] netlink: 128 bytes leftover after parsing attributes in process `syz.0.199'. [ 70.864208][ T6775] netlink: 'syz.0.199': attribute type 5 has an invalid length. [ 70.866731][ T6775] netlink: 'syz.0.199': attribute type 6 has an invalid length. [ 70.868710][ T6775] netlink: 3 bytes leftover after parsing attributes in process `syz.0.199'. [ 70.929697][ T39] audit: type=1400 audit(1734850687.191:399): avc: denied { setopt } for pid=6795 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.945620][ T39] audit: type=1400 audit(1734850687.211:400): avc: denied { bind } for pid=6795 comm="syz.0.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 70.951102][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.955263][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.957126][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.958998][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.960824][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.963056][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.965628][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.968012][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.971062][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.974715][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.977362][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.979834][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.982922][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.985795][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.988067][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.989894][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.991725][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.993646][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.995451][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.997269][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 70.999078][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.000900][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.002752][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.004678][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.006527][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.008340][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.010194][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.012026][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.014523][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.016357][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.018162][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.019976][ T1018] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 71.022437][ T1018] hid-generic 0000:0000:0000.0003: hidraw1: HID v0.00 Device [syz0] on syz0 [ 71.036096][ T6810] gtp0: entered promiscuous mode [ 71.047343][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.210'. [ 71.049967][ T6812] netlink: 32 bytes leftover after parsing attributes in process `syz.2.210'. [ 71.115819][ T1415] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.117918][ T1415] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.193284][ T5972] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 71.217690][ T39] audit: type=1400 audit(1734850687.481:401): avc: denied { bind } for pid=6820 comm="syz.2.213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 71.222490][ T39] audit: type=1400 audit(1734850687.481:402): avc: denied { node_bind } for pid=6820 comm="syz.2.213" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 71.234584][ T6821] syz.2.213: attempt to access beyond end of device [ 71.234584][ T6821] loop2: rw=0, sector=16, nr_sectors = 1 limit=0 [ 71.237573][ T6821] qnx6: unable to read the first superblock [ 71.239216][ T6821] syz.2.213: attempt to access beyond end of device [ 71.239216][ T6821] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 71.242079][ T6821] qnx6: unable to read the first superblock [ 71.243827][ T6821] qnx6: unable to read the first superblock [ 71.274820][ T39] audit: type=1400 audit(1734850687.541:403): avc: denied { map } for pid=6823 comm="syz.2.215" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.282512][ T39] audit: type=1400 audit(1734850687.541:404): avc: denied { execute } for pid=6823 comm="syz.2.215" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 71.337398][ T6828] trusted_key: syz.2.216 sent an empty control message without MSG_MORE. [ 71.345027][ T5972] usb 9-1: config 0 has no interfaces? [ 71.346281][ T39] audit: type=1400 audit(1734850687.611:405): avc: denied { map } for pid=6827 comm="syz.2.216" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=758 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 71.346883][ T5972] usb 9-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 71.357191][ T5972] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.365263][ T5972] usb 9-1: config 0 descriptor?? [ 71.423184][ T1018] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 71.591240][ T1018] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 71.595554][ T1018] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 71.599310][ T1018] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 71.602682][ T1018] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 71.607212][ T1018] usb 8-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 71.611458][ T1018] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 71.616289][ T1018] usb 8-1: config 0 descriptor?? [ 71.627511][ T39] audit: type=1400 audit(1734850687.891:406): avc: denied { name_bind } for pid=6798 comm="syz.4.207" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 71.632737][ T39] audit: type=1400 audit(1734850687.891:407): avc: denied { setopt } for pid=6798 comm="syz.4.207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 71.822005][ T6819] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 71.827940][ T6819] VFS: Can't find a romfs filesystem on dev nullb0. [ 71.827940][ T6819] [ 72.091259][ T1018] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max [ 72.094356][ T1018] plantronics 0003:047F:FFFF.0004: unknown main item tag 0x0 [ 72.097219][ T1018] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 72.264467][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.233'. [ 72.455663][ T6907] unknown channel width for channel at 909000KHz? [ 72.458052][ T6907] unknown channel width for channel at 909000KHz? [ 72.460250][ T6907] unknown channel width for channel at 909000KHz? [ 72.462934][ T6907] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 72.518514][ T6911] netlink: 12 bytes leftover after parsing attributes in process `syz.2.242'. [ 72.570883][ T6920] autofs: Bad value for 'fd' [ 72.604581][ T6922] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 72.650936][ T6932] vivid-000: disconnect [ 72.660675][ T6931] vivid-000: reconnect [ 72.673030][ T6935] 9pnet_fd: Insufficient options for proto=fd [ 72.882545][ T6949] rdma_op ffff888044f4b1f0 conn xmit_rdma 0000000000000000 [ 72.963183][ T1330] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 72.967396][ T6950] hsr0: entered promiscuous mode [ 72.969055][ T6950] macsec1: entered promiscuous mode [ 72.970475][ T6950] macsec1: entered allmulticast mode [ 72.971834][ T6950] hsr0: entered allmulticast mode [ 72.973203][ T6950] hsr_slave_0: entered allmulticast mode [ 72.974679][ T6950] hsr_slave_1: entered allmulticast mode [ 72.977488][ T6950] hsr0: left allmulticast mode [ 72.978843][ T6950] hsr_slave_0: left allmulticast mode [ 72.980255][ T6950] hsr_slave_1: left allmulticast mode [ 73.116711][ T6952] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 73.143210][ T1330] usb 7-1: Using ep0 maxpacket: 8 [ 73.147196][ T1330] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 73.149851][ T1330] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 73.153026][ T1330] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 73.156236][ T1330] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 73.159346][ T1330] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 73.163701][ T1330] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 73.166945][ T1330] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.176230][ T6953] Driver unsupported XDP return value 0 on prog (id 80) dev N/A, expect packet loss! [ 73.182164][ T6952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.254'. [ 73.227140][ T6955] netlink: 48 bytes leftover after parsing attributes in process `syz.0.255'. [ 73.258832][ T6957] kAFS: unable to lookup cell '/,c¾ūL' [ 73.375117][ T1330] usb 7-1: usb_control_msg returned -32 [ 73.377105][ T1330] usbtmc 7-1:16.0: can't read capabilities [ 73.933222][ T1018] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 73.940901][ T30] usb 9-1: USB disconnect, device number 2 [ 74.103728][ T8] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 74.243218][ T8] usb 8-1: device descriptor read/64, error -32 [ 74.247850][ T6975] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 74.305517][ T6985] vivid-007: ================= START STATUS ================= [ 74.307797][ T6985] vivid-007: Enable Output Cropping: true [ 74.309526][ T6985] vivid-007: Enable Output Composing: true [ 74.311008][ T6985] vivid-007: Enable Output Scaler: true [ 74.312447][ T6985] vivid-007: Tx RGB Quantization Range: Automatic [ 74.315258][ T6985] vivid-007: Transmit Mode: HDMI [ 74.316547][ T6985] vivid-007: Hotplug Present: 0x00000000 [ 74.317934][ T6985] vivid-007: RxSense Present: 0x00000000 [ 74.319350][ T6985] vivid-007: EDID Present: 0x00000000 [ 74.320757][ T6985] vivid-007: ================== END STATUS ================== [ 74.461452][ T6992] binder: 6990:6992 unknown command 0 [ 74.463587][ T6992] binder: 6990:6992 ioctl c0306201 20000080 returned -22 [ 74.496885][ T8] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 74.600291][ T6995] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 74.627996][ T8] usb 8-1: device descriptor read/64, error -32 [ 74.863208][ T8] usb 8-1: reset high-speed USB device number 5 using dummy_hcd [ 74.883419][ T8] usb 8-1: device descriptor read/8, error -32 [ 75.036413][ T7001] tmpfs: Bad value for 'usrquota_inode_hardlimit' [ 75.093498][ T7005] vivid-000: disconnect [ 75.106727][ T7004] vivid-000: reconnect [ 75.365614][ T70] tipc: Subscription rejected, illegal request [ 75.405137][ T7020] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 75.459586][ T7030] input: syz0 as /devices/virtual/input/input9 [ 75.517743][ T7039] vcan0: Master is either lo or non-ether device [ 75.541264][ T7043] 9pnet_fd: Insufficient options for proto=fd [ 75.640897][ T7049] block device autoloading is deprecated and will be removed. [ 75.693737][ T7047] md2: using deprecated bitmap file support [ 75.695408][ T7047] md2: error: bitmap file must be a regular file [ 75.731869][ T1018] usb 7-1: USB disconnect, device number 3 [ 75.766621][ T9] usb 8-1: USB disconnect, device number 5 [ 75.856933][ T7070] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 76.007828][ T39] kauditd_printk_skb: 53 callbacks suppressed [ 76.007839][ T39] audit: type=1400 audit(1734850692.271:461): avc: denied { append } for pid=7081 comm="syz.2.295" name="001" dev="devtmpfs" ino=748 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.042416][ T39] audit: type=1400 audit(1734850692.301:462): avc: denied { open } for pid=7083 comm="syz.4.296" path="/dev/ptyqd" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 76.057514][ T39] audit: type=1400 audit(1734850692.321:463): avc: denied { write } for pid=7083 comm="syz.4.296" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 76.117963][ T39] audit: type=1400 audit(1734850692.381:464): avc: denied { ioctl } for pid=7089 comm="syz.4.298" path="socket:[15354]" dev="sockfs" ino=15354 ioctlcmd=0x661b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 76.124338][ T7086] ceph: No mds server is up or the cluster is laggy [ 76.128391][ T7091] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) ! [ 76.228522][ T63] cfg80211: failed to load regulatory.db [ 76.248292][ T39] audit: type=1400 audit(1734850692.511:465): avc: denied { mount } for pid=7101 comm="syz.2.302" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.254176][ T39] audit: type=1400 audit(1734850692.511:466): avc: denied { unmount } for pid=7101 comm="syz.2.302" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.307068][ T7103] trusted_key: encrypted_key: master key parameter 'le1' is invalid [ 76.311389][ T7102] gfs2: Unknown parameter 'discardse' [ 76.443164][ T35] usb 9-1: new low-speed USB device number 3 using dummy_hcd [ 76.457348][ T39] audit: type=1400 audit(1734853252.726:467): avc: denied { listen } for pid=7113 comm="syz.2.306" lport=20002 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.524431][ T30] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 76.604415][ T35] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 76.606518][ T35] usb 9-1: config 0 has no interface number 0 [ 76.608026][ T35] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 76.610706][ T35] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 76.613901][ T35] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 76.616782][ T35] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 76.619395][ T35] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 76.620429][ T7060] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 76.621750][ T35] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 76.621774][ T35] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 76.630384][ T35] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.633604][ T35] usb 9-1: config 0 descriptor?? [ 76.635298][ T7095] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 76.639041][ T35] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 76.706586][ T39] audit: type=1400 audit(1734853252.966:468): avc: denied { bind } for pid=7128 comm="syz.3.310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.793224][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.839215][ T7095] ldusb 9-1:0.55: Couldn't submit interrupt_in_urb -90 [ 76.845986][ T39] audit: type=1400 audit(1734853253.106:469): avc: denied { accept } for pid=7094 comm="syz.4.300" lport=37190 faddr=::ffff:172.20.255.187 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 76.854762][ T39] audit: type=1400 audit(1734853253.116:470): avc: denied { connect } for pid=7094 comm="syz.4.300" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 76.901987][ T6460] usb 9-1: USB disconnect, device number 3 [ 76.904976][ T6460] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 76.963218][ T8] usb 5-1: Using ep0 maxpacket: 8 [ 76.966047][ T8] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 76.968676][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 76.971216][ T8] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 76.974134][ T8] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 76.977544][ T8] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 76.979876][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.188774][ T8] usb 5-1: GET_CAPABILITIES returned 0 [ 77.190265][ T8] usbtmc 5-1:16.0: can't read capabilities [ 77.567333][ T56] usb 5-1: USB disconnect, device number 2 [ 77.704122][ T7180] IPVS: set_ctl: invalid protocol: 0 172.20.20.170:20002 [ 77.778715][ T7190] __nla_validate_parse: 3 callbacks suppressed [ 77.778725][ T7190] netlink: 1276 bytes leftover after parsing attributes in process `syz.2.323'. [ 77.782529][ T7190] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 77.949764][ T7215] block nbd3: shutting down sockets [ 78.068080][ T7220] xt_time: unknown flags 0xc [ 78.106834][ T7222] netlink: 'syz.3.333': attribute type 5 has an invalid length. [ 78.198772][ T7243] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 78.201163][ T7243] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 78.605440][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 78.611543][ T7280] macsec0: entered promiscuous mode [ 78.655125][ T7291] netlink: 100 bytes leftover after parsing attributes in process `syz.3.352'. [ 78.658295][ T7291] netlink: 396 bytes leftover after parsing attributes in process `syz.3.352'. [ 78.738606][ T7294] netlink: 277 bytes leftover after parsing attributes in process `syz.3.354'. [ 78.932449][ T7324] netlink: 'syz.4.363': attribute type 19 has an invalid length. [ 78.975525][ T7325] kAFS: No cell specified [ 79.068701][ T7335] program syz.0.366 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.181100][ T7353] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.184540][ T7353] batadv_slave_1: entered promiscuous mode [ 79.223942][ T7359] netlink: 24 bytes leftover after parsing attributes in process `syz.4.373'. [ 79.305647][ T7364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.374'. [ 79.404819][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.4.380'. [ 79.883175][ T30] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 80.043523][ T30] usb 5-1: Using ep0 maxpacket: 8 [ 80.046021][ T30] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.048832][ T30] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1040, setting to 1024 [ 80.051548][ T30] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 80.053222][ T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 80.054439][ T30] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 80.058771][ T30] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 80.062570][ T30] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 80.065021][ T30] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.067338][ T30] usb 5-1: Product: syz [ 80.068435][ T30] usb 5-1: Manufacturer: syz [ 80.069581][ T30] usb 5-1: SerialNumber: syz [ 80.203220][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 80.207291][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.209908][ T8] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 80.212210][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.215088][ T8] usb 7-1: config 0 descriptor?? [ 80.275464][ T30] cdc_ncm 5-1:1.0: bind() failure [ 80.284845][ T30] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 80.287076][ T30] cdc_ncm 5-1:1.1: bind() failure [ 80.290212][ T30] usb 5-1: USB disconnect, device number 3 [ 80.382604][ T7418] netlink: 68 bytes leftover after parsing attributes in process `syz.4.390'. [ 80.385121][ T7418] netlink: 68 bytes leftover after parsing attributes in process `syz.4.390'. [ 80.422663][ T8] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 80.422906][ T7423] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2838 sclass=netlink_route_socket pid=7423 comm=syz.3.391 [ 80.622063][ T7397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.627022][ T7397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.636537][ T8] usb 7-1: USB disconnect, device number 4 [ 81.072131][ T39] kauditd_printk_skb: 1003 callbacks suppressed [ 81.072141][ T39] audit: type=1326 audit(1734853257.326:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7475 comm="syz.0.407" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa209585d29 code=0x0 [ 81.246176][ T39] audit: type=1400 audit(1734853257.506:1475): avc: denied { create } for pid=7501 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 81.251329][ T5288] Bluetooth: Unknown BR/EDR signaling command 0x0c [ 81.253053][ T5288] Bluetooth: Wrong link type (-22) [ 81.466206][ T39] audit: type=1400 audit(1734853257.726:1476): avc: denied { append } for pid=7509 comm="syz.2.417" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 81.467784][ T7512] tmpfs: Unknown parameter '' [ 81.505022][ T39] audit: type=1400 audit(1734853257.756:1477): avc: denied { recv } for pid=7452 comm="syz.4.400" saddr=127.0.0.1 src=30000 daddr=127.0.0.1 dest=33396 netif=lo scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 81.512924][ T39] audit: type=1400 audit(1734853257.756:1478): avc: denied { recv } for pid=7452 comm="syz.4.400" saddr=127.0.0.1 src=33396 daddr=127.0.0.1 dest=30000 netif=lo scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 81.547801][ T39] audit: type=1400 audit(1734853257.806:1479): avc: denied { read append } for pid=7517 comm="syz.2.419" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 81.556194][ T39] audit: type=1400 audit(1734853257.806:1480): avc: denied { open } for pid=7517 comm="syz.2.419" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 81.594084][ T7523] tmpfs: Unknown parameter 'mp¯‹' [ 81.669899][ T39] audit: type=1400 audit(1734853257.926:1481): avc: denied { read write } for pid=7524 comm="syz.2.420" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.678329][ T39] audit: type=1400 audit(1734853257.926:1482): avc: denied { open } for pid=7524 comm="syz.2.420" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 81.829590][ T39] audit: type=1400 audit(1734853258.086:1483): avc: denied { getattr } for pid=7527 comm="syz.2.421" path="socket:[18328]" dev="sockfs" ino=18328 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 82.113256][ T7536] xt_hashlimit: size too large, truncated to 1048576 [ 82.386439][ T7543] netlink: zone id is out of range [ 82.387903][ T7543] netlink: zone id is out of range [ 82.389671][ T7543] netlink: get zone limit has 8 unknown bytes [ 82.911365][ T7565] sctp: [Deprecated]: syz.3.432 (pid 7565) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.911365][ T7565] Use struct sctp_sack_info instead [ 83.074694][ T7590] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=30229 sclass=netlink_xfrm_socket pid=7590 comm=syz.3.439 [ 83.186089][ T7609] __nla_validate_parse: 33 callbacks suppressed [ 83.186099][ T7609] netlink: 8 bytes leftover after parsing attributes in process `syz.4.445'. [ 83.190087][ T7609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.445'. [ 83.198328][ T7609] netlink: 'syz.4.445': attribute type 18 has an invalid length. [ 83.232584][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.4.449'. [ 83.235154][ T7622] netlink: 'syz.4.449': attribute type 22 has an invalid length. [ 83.237186][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.4.449'. [ 83.399050][ T7659] xt_NFQUEUE: number of total queues is 0 [ 83.405809][ T7660] netlink: 16 bytes leftover after parsing attributes in process `syz.0.460'. [ 83.501430][ T7674] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 83.501873][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.2.463'. [ 83.502298][ T7675] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 83.613252][ T832] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 83.764445][ T832] usb 9-1: config index 0 descriptor too short (expected 45, got 36) [ 83.766667][ T832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 83.769549][ T832] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 83.772406][ T832] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 83.775837][ T832] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 83.778211][ T832] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.783182][ T832] usb 9-1: config 0 descriptor?? [ 83.784982][ T7656] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 84.126420][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.3.468'. [ 84.131547][ T7685] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 84.135117][ T7685] overlayfs: failed to set xattr on upper [ 84.136502][ T7685] overlayfs: ...falling back to redirect_dir=nofollow. [ 84.138080][ T7685] overlayfs: ...falling back to index=off. [ 84.139482][ T7685] overlayfs: ...falling back to uuid=null. [ 84.201193][ T832] usbhid 9-1:0.0: can't add hid device: -71 [ 84.202927][ T832] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 84.207622][ T832] usb 9-1: USB disconnect, device number 4 [ 84.437982][ T7719] netlink: 'syz.0.481': attribute type 11 has an invalid length. [ 84.553179][ T35] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 84.563960][ T7723] xfs: Unknown parameter 'grpquota‹' [ 84.673914][ T7750] netlink: 256 bytes leftover after parsing attributes in process `syz.0.487'. [ 84.702649][ T7757] SELinux: security policydb version 18 (MLS) not backwards compatible [ 84.705106][ T7757] SELinux: failed to load policy [ 84.713160][ T35] usb 8-1: Using ep0 maxpacket: 32 [ 84.716012][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.718754][ T35] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 84.721258][ T35] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 84.724896][ T35] usb 8-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00 [ 84.727281][ T35] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.730430][ T35] usb 8-1: config 0 descriptor?? [ 84.783960][ T7764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.786244][ T7764] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.835782][ T7771] capability: warning: `syz.2.492' uses deprecated v2 capabilities in a way that may be insecure [ 84.938294][ T7784] FAULT_INJECTION: forcing a failure. [ 84.938294][ T7784] name failslab, interval 1, probability 0, space 0, times 1 [ 84.944126][ T7784] CPU: 1 UID: 0 PID: 7784 Comm: syz.2.500 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 84.946564][ T7784] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 84.949094][ T7784] Call Trace: [ 84.949901][ T7784] [ 84.950609][ T7784] dump_stack_lvl+0x16c/0x1f0 [ 84.951746][ T7784] should_fail_ex+0x497/0x5b0 [ 84.952902][ T7784] ? fs_reclaim_acquire+0xae/0x150 [ 84.954134][ T7784] should_failslab+0xc2/0x120 [ 84.955249][ T7784] __kmalloc_cache_noprof+0x68/0x410 [ 84.956507][ T7784] ? fput+0x67/0x440 [ 84.957446][ T7784] keyctl_watch_key+0x151/0x500 [ 84.958606][ T7784] __do_sys_keyctl+0x123/0x590 [ 84.959751][ T7784] do_syscall_64+0xcd/0x250 [ 84.960829][ T7784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.962262][ T7784] RIP: 0033:0x7ff9d6385d29 [ 84.963336][ T7784] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.967826][ T7784] RSP: 002b:00007ff9d7103038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 84.969783][ T7784] RAX: ffffffffffffffda RBX: 00007ff9d6575fa0 RCX: 00007ff9d6385d29 [ 84.971639][ T7784] RDX: 0000000000000007 RSI: 000000001fadeda4 RDI: 0000000000000020 [ 84.973556][ T7784] RBP: 00007ff9d7103090 R08: 0000000000000000 R09: 0000000000000000 [ 84.975383][ T7784] R10: 00000000000000b1 R11: 0000000000000246 R12: 0000000000000001 [ 84.977273][ T7784] R13: 0000000000000000 R14: 00007ff9d6575fa0 R15: 00007ffff2ae8f58 [ 84.979141][ T7784] [ 84.979927][ C1] vkms_vblank_simulate: vblank timer overrun [ 85.026638][ T7789] 9pnet_virtio: no channels available for device syz [ 85.028479][ T7789] 9pnet_virtio: no channels available for device syz [ 85.030252][ T7789] 9pnet_virtio: no channels available for device syz [ 85.031995][ T7789] 9pnet_virtio: no channels available for device syz [ 85.033909][ T7789] 9pnet_virtio: no channels available for device syz [ 85.035608][ T7789] 9pnet_virtio: no channels available for device syz [ 85.037295][ T7789] 9pnet_virtio: no channels available for device syz [ 85.039291][ T7789] 9pnet_virtio: no channels available for device syz [ 85.041080][ T7789] 9pnet_virtio: no channels available for device syz [ 85.042786][ T7789] 9pnet_virtio: no channels available for device syz [ 85.045353][ T7789] 9pnet_virtio: no channels available for device syz [ 85.047007][ T7789] 9pnet_virtio: no channels available for device syz [ 85.048679][ T7789] 9pnet_virtio: no channels available for device syz [ 85.050366][ T7789] 9pnet_virtio: no channels available for device syz [ 85.052222][ T7789] 9pnet_virtio: no channels available for device syz [ 85.053195][ T832] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 85.054061][ T7789] 9pnet_virtio: no channels available for device syz [ 85.057826][ T7789] 9pnet_virtio: no channels available for device syz [ 85.059510][ T7789] 9pnet_virtio: no channels available for device syz [ 85.073854][ T7789] 9pnet_virtio: no channels available for device syz [ 85.104785][ T5288] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 85.107349][ T5288] Bluetooth: hci2: Injecting HCI hardware error event [ 85.109984][ T5288] Bluetooth: hci2: hardware error 0x00 [ 85.127772][ T7793] syz.0.503: attempt to access beyond end of device [ 85.127772][ T7793] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 85.131084][ T7793] EXT4-fs (nbd0): unable to read superblock [ 85.142112][ T35] hid (null): unknown global tag 0xff [ 85.148431][ T35] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0005/input/input12 [ 85.187184][ T7796] input: syz0 as /devices/virtual/input/input14 [ 85.213218][ T832] usb 9-1: Using ep0 maxpacket: 32 [ 85.220593][ T832] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 85.222167][ T35] input: HID 0458:5011 as /devices/platform/dummy_hcd.3/usb8/8-1/8-1:0.0/0003:0458:5011.0005/input/input13 [ 85.224057][ T7799] netlink: 'syz.0.505': attribute type 10 has an invalid length. [ 85.228316][ T832] usb 9-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40 [ 85.231428][ T832] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.233663][ T832] usb 9-1: Product: syz [ 85.234762][ T832] usb 9-1: Manufacturer: syz [ 85.236682][ T832] usb 9-1: SerialNumber: syz [ 85.244374][ T832] input: bcm5974 as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:1.0/input/input15 [ 85.255380][ T35] kye 0003:0458:5011.0005: input,hiddev0,hidraw1: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.3-1/input0 [ 85.262168][ T7799] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 85.284073][ T7799] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 85.315604][ T7799] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 85.350208][ T35] usb 8-1: USB disconnect, device number 6 [ 85.445583][ T7764] netlink: 16 bytes leftover after parsing attributes in process `syz.4.493'. [ 85.469167][ T7803] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 85.478651][ T7814] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 85.481574][ T7765] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 85.489008][ T7764] CIFS mount error: No usable UNC path provided in device string! [ 85.489008][ T7764] [ 85.491988][ T7764] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 85.494502][ T7765] CIFS mount error: No usable UNC path provided in device string! [ 85.494502][ T7765] [ 85.497207][ T7765] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 85.509416][ T7249] bcm5974 9-1:1.0: could not read from device [ 85.509424][ T5972] usb 9-1: USB disconnect, device number 5 [ 85.510580][ T7764] ALSA: mixer_oss: invalid index 100000 [ 85.639494][ T7833] FAULT_INJECTION: forcing a failure. [ 85.639494][ T7833] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.643699][ T7833] CPU: 3 UID: 0 PID: 7833 Comm: syz.2.511 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 85.647002][ T7833] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 85.649639][ T7833] Call Trace: [ 85.650714][ T7833] [ 85.651520][ T7833] dump_stack_lvl+0x16c/0x1f0 [ 85.652971][ T7833] should_fail_ex+0x497/0x5b0 [ 85.654218][ T7833] _copy_to_user+0x32/0xd0 [ 85.655398][ T7833] simple_read_from_buffer+0xd0/0x160 [ 85.657033][ T7833] proc_fail_nth_read+0x198/0x270 [ 85.658847][ T7833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.660854][ T7833] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 85.662773][ T7833] vfs_read+0x1df/0xbe0 [ 85.664175][ T7833] ? __fget_files+0x1fc/0x3a0 [ 85.665373][ T7833] ? __pfx___mutex_lock+0x10/0x10 [ 85.666669][ T7833] ? __pfx_vfs_read+0x10/0x10 [ 85.667919][ T7833] ? __fget_files+0x206/0x3a0 [ 85.669154][ T7833] ksys_read+0x12b/0x250 [ 85.670279][ T7833] ? __pfx_ksys_read+0x10/0x10 [ 85.671583][ T7833] do_syscall_64+0xcd/0x250 [ 85.673255][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.675538][ T7833] RIP: 0033:0x7ff9d638473c [ 85.677183][ T7833] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 85.683873][ T7833] RSP: 002b:00007ff9d7103030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 85.686857][ T7833] RAX: ffffffffffffffda RBX: 00007ff9d6575fa0 RCX: 00007ff9d638473c [ 85.689692][ T7833] RDX: 000000000000000f RSI: 00007ff9d71030a0 RDI: 0000000000000009 [ 85.692532][ T7833] RBP: 00007ff9d7103090 R08: 0000000000000000 R09: 0000000000000000 [ 85.695320][ T7833] R10: 00000000000000b1 R11: 0000000000000246 R12: 0000000000000001 [ 85.698054][ T7833] R13: 0000000000000000 R14: 00007ff9d6575fa0 R15: 00007ffff2ae8f58 [ 85.700706][ T7833] [ 85.894985][ T7858] nft_compat: unsupported protocol 0 [ 85.933670][ T7864] fuse: Bad value for 'rootmode' [ 85.965934][ T7869] openvswitch: netlink: Tunnel attr 222 out of range max 16 [ 86.106439][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.0.522'. [ 86.201884][ T39] kauditd_printk_skb: 42 callbacks suppressed [ 86.201894][ T39] audit: type=1400 audit(1734853522.454:1526): avc: denied { ioctl } for pid=7901 comm="syz.4.524" path="/dev/ptyqd" dev="devtmpfs" ino=140 ioctlcmd=0x5423 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 86.208260][ T7907] ebtables: ebtables: counters copy to user failed while replacing table [ 86.281220][ T7918] IPVS: length: 24 != 3637346424 [ 86.282889][ T39] audit: type=1400 audit(1734853522.534:1527): avc: denied { getopt } for pid=7917 comm="syz.3.526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.315678][ T7921] xt_cluster: you have exceeded the maximum number of cluster nodes (4095 > 32) [ 86.391307][ T7944] syz.2.533: attempt to access beyond end of device [ 86.391307][ T7944] loop2: rw=0, sector=64, nr_sectors = 2 limit=0 [ 86.395656][ T7944] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32 [ 86.418917][ T7944] overlayfs: conflicting lowerdir path [ 86.504179][ T5965] usb 9-1: new full-speed USB device number 6 using dummy_hcd [ 86.560536][ T39] audit: type=1400 audit(1734853522.814:1528): avc: denied { setopt } for pid=7971 comm="syz.3.538" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 86.605153][ T39] audit: type=1400 audit(1734853522.864:1529): avc: denied { mount } for pid=7973 comm="syz.2.537" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.605503][ T7975] devtmpfs: Cannot change global quota limit on remount [ 86.611099][ T39] audit: type=1400 audit(1734853522.864:1530): avc: denied { remount } for pid=7973 comm="syz.2.537" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 86.626148][ T5940] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 86.628761][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: kworker/u33:5 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 86.631774][ T5940] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.634439][ T5940] Workqueue: hci3 hci_rx_work [ 86.635709][ T5940] Call Trace: [ 86.636609][ T5940] [ 86.637365][ T5940] dump_stack_lvl+0x16c/0x1f0 [ 86.638595][ T5940] sysfs_warn_dup+0x7f/0xa0 [ 86.639802][ T5940] sysfs_create_dir_ns+0x24d/0x2b0 [ 86.641136][ T5940] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 86.642627][ T5940] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 86.644050][ T5940] ? kobject_add_internal+0x12d/0x990 [ 86.645467][ T5940] ? do_raw_spin_unlock+0x172/0x230 [ 86.646828][ T5940] kobject_add_internal+0x2c8/0x990 [ 86.648197][ T5940] kobject_add+0x16f/0x240 [ 86.649350][ T5940] ? __pfx_kobject_add+0x10/0x10 [ 86.650582][ T5940] ? class_to_subsys+0x3e/0x160 [ 86.651832][ T5940] ? do_raw_spin_unlock+0x172/0x230 [ 86.653108][ T5940] ? kobject_put+0xab/0x5a0 [ 86.654265][ T5940] device_add+0x289/0x1a70 [ 86.655383][ T5940] ? __pfx_dev_set_name+0x10/0x10 [ 86.656581][ T5940] ? __pfx_device_add+0x10/0x10 [ 86.657765][ T5940] ? mgmt_send_event_skb+0x2f2/0x460 [ 86.659116][ T5940] hci_conn_add_sysfs+0x17e/0x230 [ 86.660369][ T5940] le_conn_complete_evt+0x107f/0x1da0 [ 86.661703][ T5940] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 86.663199][ T5940] ? trace_contention_end+0xee/0x140 [ 86.664575][ T5940] ? __mutex_lock+0x1cc/0xa60 [ 86.665772][ T5940] hci_le_enh_conn_complete_evt+0x23d/0x380 [ 86.667295][ T5940] ? skb_pull_data+0x166/0x210 [ 86.668565][ T5940] hci_le_meta_evt+0x2e2/0x5d0 [ 86.669873][ T5940] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 86.671541][ T5940] hci_event_packet+0x666/0x1180 [ 86.672852][ T5940] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 86.674234][ T5940] ? __pfx_hci_event_packet+0x10/0x10 [ 86.675663][ T5940] ? mark_held_locks+0x9f/0xe0 [ 86.676929][ T5940] ? kcov_remote_start+0x3cf/0x6e0 [ 86.678208][ T5940] ? lockdep_hardirqs_on+0x7c/0x110 [ 86.679549][ T5940] hci_rx_work+0x2c5/0x16b0 [ 86.680758][ T5940] ? process_one_work+0x921/0x1ba0 [ 86.682107][ T5940] process_one_work+0x9c5/0x1ba0 [ 86.683433][ T5940] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 86.684898][ T5940] ? __pfx_process_one_work+0x10/0x10 [ 86.686297][ T5940] ? rcu_is_watching+0x12/0xc0 [ 86.687526][ T5940] ? assign_work+0x1a0/0x250 [ 86.688655][ T5940] worker_thread+0x6c8/0xf00 [ 86.689797][ T5940] ? __pfx_worker_thread+0x10/0x10 [ 86.691056][ T5940] kthread+0x2c1/0x3a0 [ 86.692055][ T5940] ? _raw_spin_unlock_irq+0x23/0x50 [ 86.693312][ T5940] ? __pfx_kthread+0x10/0x10 [ 86.694465][ T5940] ret_from_fork+0x45/0x80 [ 86.695554][ T5940] ? __pfx_kthread+0x10/0x10 [ 86.696710][ T5940] ret_from_fork_asm+0x1a/0x30 [ 86.697894][ T5940] [ 86.699333][ T5940] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 86.702970][ T5940] Bluetooth: hci3: failed to register connection device [ 86.738744][ T5965] usb 9-1: config 0 has an invalid interface number: 55 but max is 0 [ 86.740811][ T5965] usb 9-1: config 0 has no interface number 0 [ 86.742277][ T5965] usb 9-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 86.746738][ T5965] usb 9-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 86.750442][ T5965] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 86.763026][ T5965] usb 9-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 86.766032][ T5965] usb 9-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.769978][ T5965] usb 9-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 86.773339][ T5965] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.783749][ T5965] usb 9-1: config 0 descriptor?? [ 86.785472][ T7916] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 86.788657][ T5965] ldusb 9-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 86.818145][ T39] audit: type=1400 audit(1734853523.074:1531): avc: denied { mounton } for pid=8002 comm="syz.3.543" path="/142/bus" dev="devtmpfs" ino=726 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:removable_device_t tclass=blk_file permissive=1 [ 86.928311][ T39] audit: type=1400 audit(1734853523.184:1532): avc: denied { unmount } for pid=5931 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 87.055372][ T8029] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.063873][ T8029] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.078661][ T39] audit: type=1400 audit(1734853523.334:1533): avc: denied { sqpoll } for pid=8031 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 87.186287][ T5288] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 87.266660][ T8051] ip6t_srh: unknown srh match flags 4000 [ 87.513172][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 87.673804][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 87.677390][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.682724][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.685748][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.688430][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.690893][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.693883][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.696524][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.698930][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.701840][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.704637][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.706984][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.709839][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.713585][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.716043][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.718896][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.721536][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.724645][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.727553][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.730104][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.732570][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.735731][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.738323][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 87.740772][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 87.743708][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 87.747688][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 87.750234][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 87.752474][ T9] usb 5-1: Product: syz [ 87.753685][ T9] usb 5-1: Manufacturer: syz [ 87.755017][ T9] usb 5-1: SerialNumber: syz [ 87.759054][ T9] usb 5-1: config 0 descriptor?? [ 87.765442][ T9] yurex 5-1:0.0: USB YUREX device now attached to Yurex #1 [ 87.923544][ T39] audit: type=1400 audit(1734853524.184:1534): avc: denied { write } for pid=8068 comm="syz.2.554" name="unix" dev="proc" ino=4026533353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 88.001147][ T39] audit: type=1400 audit(1734853524.254:1535): avc: denied { write } for pid=8075 comm="syz.2.556" laddr=172.20.20.170 lport=46908 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 88.269444][ T8098] sctp: [Deprecated]: syz.2.562 (pid 8098) Use of int in maxseg socket option. [ 88.269444][ T8098] Use struct sctp_assoc_value instead [ 88.273533][ T8098] ptrace attach of "/syz-executor exec"[5939] was attempted by "/syz-executor exec"[8098] [ 88.473235][ T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 88.633232][ T9] usb 8-1: Using ep0 maxpacket: 8 [ 88.636559][ T9] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 88.638835][ T9] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.641415][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 88.644025][ T9] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 88.646617][ T9] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.650187][ T9] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 88.652618][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.783487][ T5288] Bluetooth: hci3: command 0x041b tx timeout [ 88.785673][ T30] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 88.787518][ T30] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 88.861959][ T9] usb 8-1: usb_control_msg returned -32 [ 88.863861][ T9] usbtmc 8-1:16.0: can't read capabilities [ 89.253693][ T832] usb 5-1: USB disconnect, device number 4 [ 89.262460][ T832] yurex 5-1:0.0: USB YUREX #1 now disconnected [ 89.273406][ T5965] usb 9-1: USB disconnect, device number 6 [ 89.299905][ T5965] ldusb 9-1:0.55: LD USB Device #0 now disconnected [ 89.342674][ T1018] usb 8-1: USB disconnect, device number 7 [ 89.392425][ T8119] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 89.394848][ T8119] overlayfs: failed to set xattr on upper [ 89.396362][ T8119] overlayfs: ...falling back to redirect_dir=nofollow. [ 89.398130][ T8119] overlayfs: ...falling back to index=off. [ 89.400870][ T8119] overlayfs: ...falling back to uuid=null. [ 89.402422][ T8119] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 89.478328][ T8126] openvswitch: netlink: IP tunnel dst address not specified [ 89.535663][ T8136] __nla_validate_parse: 6 callbacks suppressed [ 89.535674][ T8136] netlink: 8 bytes leftover after parsing attributes in process `syz.2.575'. [ 89.972968][ T8161] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 89.979376][ T8161] vimc vimc.0: subdev_call error Scaler [ 89.981128][ T8161] ------------[ cut here ]------------ [ 89.982504][ T8161] WARNING: CPU: 0 PID: 8161 at drivers/media/v4l2-core/v4l2-subdev.c:460 call_s_stream+0x2df/0x350 [ 89.985424][ T8161] Modules linked in: [ 89.986503][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.0.581 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 89.990543][ T8161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.993487][ T8161] RIP: 0010:call_s_stream+0x2df/0x350 [ 89.994861][ T8161] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 c0 1e 4f 8c e8 bc 3b 39 fe e9 54 fe ff ff e8 02 2e 0e fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 31 d9 70 fa e9 48 fd ff ff e8 [ 89.999755][ T8161] RSP: 0018:ffffc90005517a60 EFLAGS: 00010293 [ 90.001328][ T8161] RAX: 0000000000000000 RBX: ffff88810801a020 RCX: ffffffff878be52e [ 90.003522][ T8161] RDX: ffff888022760000 RSI: ffffffff878be7ae RDI: 0000000000000000 [ 90.005580][ T8161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.007608][ T8161] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 90.009623][ T8161] R13: 0000000000000000 R14: ffff88810801a198 R15: ffffffff87de9380 [ 90.011706][ T8161] FS: 00007fa2073d56c0(0000) GS:ffff88806a600000(0000) knlGS:0000000000000000 [ 90.014106][ T8161] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 90.015864][ T8161] CR2: 00007fa2073d3fb8 CR3: 000000004fb4e000 CR4: 0000000000352ef0 [ 90.017944][ T8161] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 90.020012][ T8161] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 90.022052][ T8161] Call Trace: [ 90.022955][ T8161] [ 90.023819][ T8161] ? __warn+0xea/0x3c0 [ 90.024937][ T8161] ? call_s_stream+0x2df/0x350 [ 90.026199][ T8161] ? report_bug+0x3c0/0x580 [ 90.027415][ T8161] ? handle_bug+0x54/0xa0 [ 90.028560][ T8161] ? exc_invalid_op+0x17/0x50 [ 90.029806][ T8161] ? asm_exc_invalid_op+0x1a/0x20 [ 90.031109][ T8161] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 90.032599][ T8161] ? call_s_stream+0x5e/0x350 [ 90.033941][ T8161] ? call_s_stream+0x2de/0x350 [ 90.035195][ T8161] ? call_s_stream+0x2df/0x350 [ 90.036516][ T8161] ? __pfx_call_s_stream+0x10/0x10 [ 90.037837][ T8161] vimc_streamer_pipeline_terminate+0x218/0x320 [ 90.039481][ T8161] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 90.040959][ T8161] vimc_streamer_s_stream+0x650/0x9a0 [ 90.042441][ T8161] vimc_capture_start_streaming+0xa1/0x130 [ 90.044068][ T8161] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 90.045784][ T8161] vb2_start_streaming+0x15f/0x5a0 [ 90.047156][ T8161] ? __bitmap_weight+0xdc/0x110 [ 90.048460][ T8161] vb2_core_streamon+0x2a7/0x450 [ 90.049824][ T8161] vb2_ioctl_streamon+0xf4/0x170 [ 90.051127][ T8161] __video_do_ioctl+0xaf0/0xf00 [ 90.052447][ T8161] ? __pfx___video_do_ioctl+0x10/0x10 [ 90.053927][ T8161] ? __might_fault+0xe3/0x190 [ 90.055183][ T8161] video_usercopy+0x4d2/0x1620 [ 90.056462][ T8161] ? __pfx___video_do_ioctl+0x10/0x10 [ 90.057866][ T8161] ? __pfx_video_usercopy+0x10/0x10 [ 90.059239][ T8161] v4l2_ioctl+0x1ba/0x250 [ 90.060395][ T8161] ? __pfx_v4l2_ioctl+0x10/0x10 [ 90.061692][ T8161] __x64_sys_ioctl+0x190/0x200 [ 90.062983][ T8161] do_syscall_64+0xcd/0x250 [ 90.064243][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.065782][ T8161] RIP: 0033:0x7fa209585d29 [ 90.066918][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.071899][ T8161] RSP: 002b:00007fa2073d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.074114][ T8161] RAX: ffffffffffffffda RBX: 00007fa209776080 RCX: 00007fa209585d29 [ 90.076163][ T8161] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000004 [ 90.078225][ T8161] RBP: 00007fa209601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 90.080290][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.082379][ T8161] R13: 0000000000000000 R14: 00007fa209776080 R15: 00007ffe270742d8 [ 90.084597][ T8161] [ 90.085427][ T8161] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.087340][ T8161] CPU: 0 UID: 0 PID: 8161 Comm: syz.0.581 Not tainted 6.13.0-rc3-syzkaller-00289-g48f506ad0b68 #0 [ 90.090112][ T8161] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 90.092928][ T8161] Call Trace: [ 90.093790][ T8161] [ 90.094586][ T8161] dump_stack_lvl+0x3d/0x1f0 [ 90.095837][ T8161] panic+0x71d/0x800 [ 90.096873][ T8161] ? __pfx_panic+0x10/0x10 [ 90.098057][ T8161] ? show_trace_log_lvl+0x29d/0x3d0 [ 90.099450][ T8161] ? check_panic_on_warn+0x1f/0xb0 [ 90.100808][ T8161] ? call_s_stream+0x2df/0x350 [ 90.102057][ T8161] check_panic_on_warn+0xab/0xb0 [ 90.103374][ T8161] __warn+0xf6/0x3c0 [ 90.104404][ T8161] ? call_s_stream+0x2df/0x350 [ 90.105697][ T8161] report_bug+0x3c0/0x580 [ 90.106873][ T8161] handle_bug+0x54/0xa0 [ 90.108019][ T8161] exc_invalid_op+0x17/0x50 [ 90.109255][ T8161] asm_exc_invalid_op+0x1a/0x20 [ 90.110576][ T8161] RIP: 0010:call_s_stream+0x2df/0x350 [ 90.112022][ T8161] Code: c1 ea 03 80 3c 02 00 75 75 48 8b bb 08 01 00 00 44 89 e2 48 c7 c6 c0 1e 4f 8c e8 bc 3b 39 fe e9 54 fe ff ff e8 02 2e 0e fa 90 <0f> 0b 90 e9 cb fe ff ff 4c 89 f7 e8 31 d9 70 fa e9 48 fd ff ff e8 [ 90.117054][ T8161] RSP: 0018:ffffc90005517a60 EFLAGS: 00010293 [ 90.118619][ T8161] RAX: 0000000000000000 RBX: ffff88810801a020 RCX: ffffffff878be52e [ 90.120678][ T8161] RDX: ffff888022760000 RSI: ffffffff878be7ae RDI: 0000000000000000 [ 90.122797][ T8161] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 90.124902][ T8161] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 90.126950][ T8161] R13: 0000000000000000 R14: ffff88810801a198 R15: ffffffff87de9380 [ 90.129013][ T8161] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 90.130535][ T8161] ? call_s_stream+0x5e/0x350 [ 90.131733][ T8161] ? call_s_stream+0x2de/0x350 [ 90.132985][ T8161] ? __pfx_call_s_stream+0x10/0x10 [ 90.134345][ T8161] vimc_streamer_pipeline_terminate+0x218/0x320 [ 90.135991][ T8161] ? __pfx_vimc_scaler_s_stream+0x10/0x10 [ 90.137481][ T8161] vimc_streamer_s_stream+0x650/0x9a0 [ 90.138930][ T8161] vimc_capture_start_streaming+0xa1/0x130 [ 90.140484][ T8161] ? __pfx_vimc_capture_start_streaming+0x10/0x10 [ 90.142185][ T8161] vb2_start_streaming+0x15f/0x5a0 [ 90.143508][ T8161] ? __bitmap_weight+0xdc/0x110 [ 90.144823][ T8161] vb2_core_streamon+0x2a7/0x450 [ 90.146150][ T8161] vb2_ioctl_streamon+0xf4/0x170 [ 90.147492][ T8161] __video_do_ioctl+0xaf0/0xf00 [ 90.148805][ T8161] ? __pfx___video_do_ioctl+0x10/0x10 [ 90.150248][ T8161] ? __might_fault+0xe3/0x190 [ 90.151525][ T8161] video_usercopy+0x4d2/0x1620 [ 90.152810][ T8161] ? __pfx___video_do_ioctl+0x10/0x10 [ 90.154241][ T8161] ? __pfx_video_usercopy+0x10/0x10 [ 90.155631][ T8161] v4l2_ioctl+0x1ba/0x250 [ 90.156817][ T8161] ? __pfx_v4l2_ioctl+0x10/0x10 [ 90.158096][ T8161] __x64_sys_ioctl+0x190/0x200 [ 90.159414][ T8161] do_syscall_64+0xcd/0x250 [ 90.160610][ T8161] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.162184][ T8161] RIP: 0033:0x7fa209585d29 [ 90.163410][ T8161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.168482][ T8161] RSP: 002b:00007fa2073d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.170699][ T8161] RAX: ffffffffffffffda RBX: 00007fa209776080 RCX: 00007fa209585d29 [ 90.172779][ T8161] RDX: 0000000020000000 RSI: 0000000040045612 RDI: 0000000000000004 [ 90.174897][ T8161] RBP: 00007fa209601aa8 R08: 0000000000000000 R09: 0000000000000000 [ 90.177046][ T8161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.179170][ T8161] R13: 0000000000000000 R14: 00007fa209776080 R15: 00007ffe270742d8 [ 90.181324][ T8161] [ 90.182781][ T8161] Kernel Offset: disabled [ 90.184032][ T8161] Rebooting in 86400 seconds.. VM DIAGNOSIS: 06:58:26 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000044 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851bc8a5 RDI=ffffffff9ab0fbe0 RBP=ffffffff9ab0fba0 RSP=ffffc900055173c8 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000005 R12=0000000000000000 R13=0000000000000044 R14=ffffffff851bc840 R15=0000000000000000 RIP=ffffffff851bc8cf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fa2073d56c0 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa2073d3fb8 CR3=000000004fb4e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000008000100 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe27074670 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa209602a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa209602a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa209602a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa209602a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa209602adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fa209602bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000000d0a17 RBX=0000000000000001 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1eca0 RBP=ffffed10039de910 RSP=ffffc90000187e08 R8 =0000000000000001 R9 =ffffed100d4e6fed R10=ffff88806a737f6b R11=0000000000000000 R12=0000000000000001 R13=ffff88801cef4880 R14=ffffffff905f3650 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000206 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005625cff76908 CR3=000000002a5fe000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0023746e6576652f 7475706e692f7665 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1313602a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1313602a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1313602a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1313602a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1313602adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f1313602bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f131374b488 00007f131374b480 00007f131374b478 00007f131374b450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f13142ad100 00007f131374b440 00007f1313740004 00080000000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f131374b498 00007f131374b490 00007f131374b488 00007f131374b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=ffffed1008c7e38f RBX=ffffed1008c7e390 RCX=ffffffff81757de8 RDX=ffffed1008c7e390 RSI=0000000000000008 RDI=ffff8880463f1c78 RBP=ffffed1008c7e38f RSP=ffffc9000d097238 R8 =0000000000000001 R9 =ffffed1008c7e38f R10=ffff8880463f1c7f R11=0000000000000000 R12=ffff8880463f1ce0 R13=ffffc9000d097488 R14=ffffffff905f6970 R15=0000000000000000 RIP=ffffffff81fcbb41 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0000 0000000000000000 ffffffff 00c00000 DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa2073d6880 CR3=00000000287bc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000a1045 RBX=0000000000000003 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd860 RDI=ffffffff8bd1eca0 RBP=ffffed1003ad8488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6c2440 R14=ffffffff905f3650 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fa2073b3f98 CR3=0000000051a86000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabfc402a3a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabfc402a47 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabfc402a41 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabfc402a55 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabfc402adb ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabfc402bb9 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000aa1414ac bb1414ac78902c00 0000000028000045 0008aaaaaaaaaaaa ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabfd0ad100 00007fabfc54b440 00007fabfc540004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fabfc54b498 00007fabfc54b490 00007fabfc54b488 00007fabfc54b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000