last executing test programs: 1m1.969895921s ago: executing program 3 (id=197): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x38, r2, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e24}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback={0xfec0ffffffffffff}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x38}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)={[{@redirect_dir_follow}, {@index_on}, {@metacopy_on}]}) 1m1.910317563s ago: executing program 3 (id=201): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="440100001000130100000000000000007f0000010000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYBLOB='\r'], 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) (async) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="440100001000130100000000000000007f0000010000000000000000000000007f00000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fc0000000000000000000000000000000000000032000000ac14140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c00", @ANYBLOB='\r'], 0x144}, 0x1, 0x0, 0x0, 0x81}, 0x4004000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 1m1.699476045s ago: executing program 3 (id=209): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local, @loopback}, 0xc) getsockopt$inet_buf(r2, 0x0, 0x29, &(0x7f0000000040)=""/173, &(0x7f0000000200)=0xad) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x100000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x4, 0x20000000, 0x4) r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, 0x0) dup(r2) syz_emit_ethernet(0x46, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff0800450000380000000000019078ac1e0001ac1414aa03049078030000004500000000000000002f0000ac14140ae0000001040022eb00000000ab0b35e92b180e2ff599507dd5aa0bd7ed4338f0bfa3be7682374302305b18cf3d9cb56657f982de88243079"], 0x0) openat$cgroup_type(r6, &(0x7f0000000000), 0x2, 0x0) 1m1.570127835s ago: executing program 3 (id=214): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000005c0)='./file1\x00', 0x158) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000003c0)='./bus\x00') r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000005c0)='./file1\x00', 0x158) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000580)='debugfs\x00', 0x0, 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async) chdir(&(0x7f00000003c0)='./bus\x00') (async) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) (async) getdents(r0, &(0x7f0000001fc0)=""/184, 0x20002078) (async) 1m1.567839889s ago: executing program 3 (id=216): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x15, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fsync(r0) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') mknod(&(0x7f00000005c0)='./file0/../file0\x00', 0x1000, 0xff) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000100)={r0, 0x20, &(0x7f00000000c0)={&(0x7f0000000080)=""/46, 0x2e, 0x0, &(0x7f00000003c0)=""/4096, 0x1000}}, 0x10) 1m1.309725865s ago: executing program 3 (id=226): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x5fa}]}, 0x44}}, 0x0) 1m1.299014283s ago: executing program 32 (id=226): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_NET_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}, @IFLA_MTU={0x8, 0x4, 0x5fa}]}, 0x44}}, 0x0) 55.450239608s ago: executing program 0 (id=317): r0 = socket$inet(0x10, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB2(r1, 0xc06864b8, &(0x7f0000000500)={0x0, 0xae, 0x3ff, 0x30315559, 0x0, [], [], [0x200]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x2, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x0, 0xb9cd]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}]}]}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x59}]}, 0xac}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000100000000000018010000786c6c2500000000002020207b1af8ff00000000aaa100000000000007010000f8ff00000000ffffffff0000b703000000000000850000002d00000095000000000000005d7dfa4973bbfbe832bb844ebd35b61b7b9a19a80468ba0f72a0ab73c96405fbf6d1a62157bd216ad87cd3daecaf9158a6b80d8dafc4f55089c8b13fb3d443913b998a1e19535e5c7978645022ca4f90e52fefe98801232074a1f4aea8968060"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x51) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x198, 0x13, 0x300, 0x70bd29, 0x25dfdbfe, {0x1, 0x6, 0x6f, 0xf9, {0x4e23, 0x4e22, [0x4, 0x7, 0xd89, 0x6], [0x4, 0x8, 0x9, 0x7], r2, [0x0, 0x6a94]}, 0x17, 0x3}, [@INET_DIAG_REQ_BYTECODE={0xb0, 0x1, "f390f1e367a0f25d656963206ac07e39fe819dea071a2950adbde095d3d68f55ebe4c5d1bc29fe248db941abc2d63e4c06b84056e24d49bc6db04ef413152a215e12c67a84c032285ae3c274818a9982bf7bff4654f9e6d46a213cfc38cd422d9f988e16fffd63281802f0608114acc545a3a7a178359dd65e3cfee6a96f4e3b0fe35176fc684fdab691cccf231eac52edaec3874ec001bdff519868b211b97c50eadbad65d46e83cf91b0b8"}, @INET_DIAG_REQ_BYTECODE={0x66, 0x1, "78840fe1e02c96bda2158e85b2f5f9620268595b0a8b3c43583d9b17270d4203e7aacdc063beba308b3569458c83944634b55e61db3c559d30cbbac16f1ec83cb0550d82eec6c2e26bb01b97309432afd93d34f3cfd9d6e5ae3dffb4db19b1954ab6"}, @INET_DIAG_REQ_BYTECODE={0x34, 0x1, "574753a8de16e01dfd1c73d2e3c6b6d12468ecbd63c7d03c3de01a621e7ed312796388e63c11c918f17e3b439fac1431"}]}, 0x198}, 0x1, 0x0, 0x0, 0x100}, 0x24040841) 55.449320373s ago: executing program 0 (id=318): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x28031, 0xffffffffffffffff, 0x8000) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r0, &(0x7f000001a240)=""/102400, 0x19000, 0x100008) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="31b1d1adcbbfdf632bffec8f388d4772a6a29e100c6739df14637f9ba85ad03926"], 0x7) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/vlan/vlan0\x00') r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8923, &(0x7f0000000040)={'vlan0\x00', 0x40}) write$FUSE_STATX(r1, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000001580)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) clock_gettime(0x2, &(0x7f0000000280)) 55.290240549s ago: executing program 0 (id=319): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000340)='D\xa3\xd5Wj\x00\x00x0\xc1\xac\x1a\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xc9\rDa\x16\xbd\x1a\xb2w\b', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r2, 0x0) fchdir(r3) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000040)='.\x00', 0x140002d2) close_range(r0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TIOCVHANGUP(r5, 0x5437, 0x0) 55.289872879s ago: executing program 0 (id=320): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async, rerun: 64) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async, rerun: 64) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x1101090, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) (async, rerun: 32) readahead(0xffffffffffffffff, 0xc, 0x7fffffffffffffff) (async, rerun: 32) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x598, 0x1b8, 0x2d8, 0x0, 0x0, 0x0, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x4c8, 0x6, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x1b}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0xfffffc16, 0x9, @ipv6=@dev={0xfe, 0x80, '\x00', 0x25}, 0x4e20}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@eui64={{0x28}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x3b}}}, {{@ipv6={@local, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffff00, 0xff, 0xff000000, 0xffffff00], [0xffffff00, 0x0, 0x0, 0xffffffff], 'wg1\x00', 'wg1\x00', {0xff}, {}, 0x33, 0x5, 0x3, 0x32}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x2a}, [0xff000000, 0x0, 0xffffff00], [0xffffffff, 0xff000000, 0xff, 0xffffff00], 'vlan1\x00', 'veth0_vlan\x00', {}, {0xff}, 0x0, 0x1, 0x5}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x9a}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f8) (async) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18407908558086b302d1a7def59c9f13fcf633be3d41080000000000000007000000a07e1179cef25ceec4d1d58b75ee9f3c3f47ea1ace4efb080e867af748535e07905fcc29940f1a9918a5526ed59fbf0b137bfb9d4470dd6ed3a1c0e69eb3f6fc2de518e4195da3d53404ebf4fe5d4310", @ANYRES32=0x0], 0x18}}, 0x0) 55.230021606s ago: executing program 0 (id=321): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0xc831, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000004f00)=ANY=[], 0x12f4}}, 0x4) recvmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000a40)=""/81, 0x51}, {&(0x7f0000000ac0)=""/215, 0xd7}], 0x2}, 0xfffffffd}], 0x2, 0x40010100, 0x0) 55.037908406s ago: executing program 0 (id=322): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x6, &(0x7f0000000380)="922b22c06dac", 0x6) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r1) r2 = open(0x0, 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 54.973156025s ago: executing program 33 (id=322): mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x800000010d, 0x6, &(0x7f0000000380)="922b22c06dac", 0x6) r1 = open_tree(0xffffffffffffff9c, 0x0, 0x89901) fchdir(r1) r2 = open(0x0, 0x800, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) unlinkat(r2, &(0x7f0000000280)='./file0\x00', 0x200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r3, &(0x7f0000000140), 0x4924b68, 0x0) 10.721083832s ago: executing program 4 (id=933): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = epoll_create1(0x80000) epoll_create1(0x80000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) unshare(0x20000400) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB="640000000101010300000000000000000a0000000c001980080002008e000000440002802c00018014000300fe8000000000000000000000000000aa14000400fc00000000000000000000000000000006000340000100000c000280050001002100000044b0c0143aa5015c0705c58c5957840c7120d2"], 0x64}}, 0x8000) r5 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r0, &(0x7f0000000180)={0x2}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xa0002008}) dup3(r5, r2, 0x80000) 10.548029646s ago: executing program 4 (id=941): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000006c0)=0x0, &(0x7f0000000700)=0x4) r4 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000010240000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r6], 0x40}}, 0x4000) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000007c0)={'syztnl2\x00', &(0x7f0000000740)={'syztnl2\x00', 0x0, 0x29, 0x6, 0x9, 0x401, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, @mcast1, 0x8, 0x700, 0x9, 0x9ae}}) r8 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r9, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x1], 0x0, [0x8, 0x4], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x40]}}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}]}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000008c0)={'ip_vti0\x00', &(0x7f0000000800)={'erspan0\x00', 0x0, 0x7, 0x10, 0xfffffffd, 0x5, {{0x1f, 0x4, 0x2, 0x36, 0x7c, 0x20c8, 0x0, 0x40, 0x2f, 0x0, @empty, @multicast2, {[@timestamp_addr={0x44, 0x54, 0xa4, 0x1, 0x4, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@broadcast, 0x793}, {@loopback, 0x2}, {@multicast1, 0x5}, {@multicast1, 0x456}, {@multicast2, 0x2a5}, {@rand_addr=0x64010101, 0x1000}, {@loopback, 0x9}, {@remote, 0x9}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x64}]}, @lsrr={0x83, 0x7, 0x34, [@dev={0xac, 0x14, 0x14, 0x27}]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x7, 0x4a, [@broadcast]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000980)={'syztnl2\x00', &(0x7f0000000900)={'syztnl1\x00', 0x0, 0x8000, 0x1, 0x9, 0x7, {{0xf, 0x4, 0x1, 0x9, 0x3c, 0x67, 0x0, 0xff, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @local, {[@noop, @ssrr={0x89, 0x7, 0xd2, [@local]}, @lsrr={0x83, 0x1f, 0xd2, [@dev={0xac, 0x14, 0x14, 0x16}, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x2f}, @broadcast, @empty]}]}}}}}) r13 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001a000100000000000000000002000000000000000000000008000100e000000108000300", @ANYRES32=r14], 0x34}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f00000009c0)={@multicast2, @multicast1, 0x0}, &(0x7f0000000a00)=0xc) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="74010000", @ANYRES16=0x0, @ANYBLOB="00082dbd7000fddbdf25090000000400018014000180080003000300000008000300030000008400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f746f5f7465616d000000080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="b9e7eab615570137a95d0b4347765c6603f8e7db39ce5cb305678097ca2a716a60d32563583d00c0f5f94b30b43b465626a319063aaa357edb5e43c1e3ea712f7072955c7722752d918f6222e72f3de26c1347cb95aa26585c845dd215683d43aa8471dc7c7f9ab90604000000b758618bd5793dd95affe41628f7810c03e11f70e6ed0608a667b03a15dd25291b4fd7df3950b7abbc036650d048ef02a005a01dab31a4ab68a9e911e5030000", @ANYRES32=0x0, @ANYBLOB="080003000200000014000200627269646765300000000000000000001400020070696d3672656731000000000000000014000200776c616e3000000000000000000000005c00018008000100", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="08000300010000001400020076657468315f766c616e000000000000140002007465616d5f736c6176655f310000000008000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r9, @ANYBLOB="08000300020000006800018008000100", @ANYRES32=r11, @ANYBLOB="140002007465616d5f736c6176655f310000000014000200776c616e300000000000000000000000140002007767310000000000000000000000000008000100", @ANYRES32=r12, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r15, @ANYBLOB="0800030000000000"], 0x174}, 0x1, 0x0, 0x0, 0x1}, 0x10) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x8, 0x48}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x30}}, 0x0) r16 = socket(0x11, 0x800000003, 0x0) r17 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r16, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r17, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000d40)=@newqdisc={0x90, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r18, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x2, [], 0x0, [0x4, 0x2, 0x0, 0x0, 0x20], [0x0, 0x4]}, [@TCA_MQPRIO_MODE={0x6, 0x4}]}}}]}, 0x90}}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r17, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f0000001040)=ANY=[@ANYBLOB="b00100000202030000000000000000000000000084010a800800014000000001080001400000000108000140000000013800028006000340000400001400018008000100ac14143908000200ac1414bb0600034000030000060003400002000006000340000200007c00028006000340000400002c00018014000300fe8000000000000000000000000000aa14000400ff01000000000000000000000000000106000340000000000c00028000000100210000000c00028005000100840000000c00028005000100110000000c00028005000100210000000c000280050001002f000000600002802c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffff000000000c0002800500010088000000060003400002000014000180080001000a0101010800020000000000060003400001000008000140000000013c0002801400018008000100ac1e010108000200640101010c00028005000100010000000c00028005000100110000000c0002800500010021000000080001400000000008000140002100010800084000000000100002800c0002800500010006000000"], 0x1b0}, 0x1, 0x0, 0x0, 0x840}, 0x800) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000f270000080003b1e23e86e4249cbdafee4e951f456f64e1933be1643af84e7b785d86575bf03fdcacf402c3a10f6c9d668d3be30239b82b9e44e955799f", @ANYRES32=r2, @ANYBLOB="28000e0080000000ffffffffffff0802110000000802110000000000000000000000000064000100080026006c09000008000c006400000008000d00000000000a0034000202020202020000080035000000000004000501"], 0x74}}, 0x0) 10.284872188s ago: executing program 4 (id=947): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="24000000210001"], 0x24}}, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/partitions\x00', 0x0, 0x0) preadv(r1, &(0x7f0000001500)=[{&(0x7f00000002c0)=""/4084, 0xff4}], 0x1, 0x202, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r2, &(0x7f0000000080)="3f031c000302140006001e0089003307258000000000000000c94500070000000000000000ff", 0x26, 0x0, &(0x7f00000000c0)={0xc9, 0x8100, r3, 0x1, 0x8, 0x6, @local}, 0x14) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000040)={'ip6gre0\x00', r3, 0x0, 0x40, 0x4, 0x9, 0x40, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40, 0x7800, 0x2, 0xb3}}) 10.210854312s ago: executing program 4 (id=948): close(0xffffffffffffffff) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000000c0)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={r4}) pselect6(0x40, &(0x7f00000001c0)={0x3f}, 0x0, 0x0, 0x0, 0x0) close(0xffffffffffffffff) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) (async) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000080)={&(0x7f0000000040)=[0x0, 0x0], 0x2, 0x80000}) (async) ioctl$TIOCGPTLCK(r1, 0x80045439, &(0x7f00000000c0)) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0x73220c8b}], 0x1}, 0x0) (async) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) (async) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, &(0x7f00000002c0)={0x1, 0x0, &(0x7f00000001c0)=[0x0]}) (async) ioctl$DRM_IOCTL_MODE_GETENCODER(r1, 0xc01464a6, &(0x7f0000000100)={r4}) (async) pselect6(0x40, &(0x7f00000001c0)={0x3f}, 0x0, 0x0, 0x0, 0x0) (async) 2.820426651s ago: executing program 2 (id=1048): r0 = syz_open_dev$video4linux(&(0x7f0000001240), 0x7ff, 0x101240) r1 = syz_io_uring_setup(0x12d, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x50}, 0x4, 0x700000000000000}, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r4, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r1, 0x47bc, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_QUERYCTRL(r0, 0xc0445624, &(0x7f0000001280)={0x40, 0x1, "cac74806093d17bac4185d0904bd302ab6c1350f4d480d798a5cc405670c6850", 0xfc, 0x2, 0xffffff20, 0x5, 0x23}) 2.793768576s ago: executing program 2 (id=1049): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xe, 0x38011, r0, 0x0) r1 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x400, 0x0, 0x2001}, &(0x7f0000000000)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x26}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000280)=0x6) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5) shutdown(r6, 0x1) ioctl$sock_TIOCINQ(r6, 0x541b, &(0x7f0000000000)) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="380000001800010026bd7000000000000a002000000000000000000008000400", @ANYRES32=r5, @ANYBLOB="060015000a0000000c001600"], 0x38}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv6_getnetconf={0x3c, 0x52, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NETCONFA_PROXY_NEIGH={0x8, 0x5, 0x10000}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0xfffffff9}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x7fffffff}, @NETCONFA_RP_FILTER={0x8, 0x3, 0x1144000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x40) io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0) r8 = socket(0x1e, 0x4, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000100)={0x80, {0x0, 0x8, 0x55, 0x900, 0x1, 0xd}}) setsockopt$packet_tx_ring(r8, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0x5}, 0x10) 2.792966147s ago: executing program 2 (id=1050): syz_usb_connect$hid(0x2, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) gettid() r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) read$FUSE(r0, &(0x7f0000000b00)={0x2020}, 0x2020) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="78226e6f65786163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000080)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$UHID_INPUT(r1, &(0x7f00000018c0)={0x8, {"afd4508df3f851e8f799412f3449019067af03c0edee0d01800000bb9fa629a7a29c2f93a3dc29a97855c97b334237371dad70468675f4792e9d054251acdbdc8b21648cbaf793c599b055f546886be3109fae986f14f078f971abc37e7a266b103ca6f9e515fd1e9302e909fd2b95c29449b50f8dc43267e81617e08b5f4bddd8237b94f0bcf513e50dee4f66da264d4555bb82d33f541f2e1f387cc48a69415b068862bda2802f03388e509b3a6bd98b6dd05545298801eb7978a988ebca22c69affe20fd20f57478fa9c32340948d4adcc128643294794f6f3f4f9bb30a9b64f1124016123ae1af5e9fd2b50a827a0311db9e16653ae161135e69bf341dc415e00e64d267a3a46d3a687fe240c08a51da9cb9141b5ceb21fb3f5673ab1461f81eb42d9a368fac2c17c90e2195cec5db06102449e747814b65d0397c08aebcbdd1391e5c8d9e3af7c75b2a5cd83611e5bfd8efe25643696d04b6421a6fb7bd4747c8c3a5c5c9148fb90658e2530f2b71ab7aeb989b2893c3adaee60cf222562b826011b771f80a7ed7a6adbd69ad218be09f01f26e9db732b290244ef13871b8302c36fe18a0f9297de2eb4a7681f01fc21ddcd80573627b354b49b7d802a8fc34fdca13b08e30e3be0f1208cde44cd986bee7f2c02660de49a2c96abb8343e3259aa7255ad20ef4b38ad3e3c39f56c6e6c0f550e54461c1cb054af6666a4c65a1a9abc0f994cabab7215a554e4965a3c63b26a2f57a0fac6ece379ae424f02946be0f4667743a8616794be8f45e96412ce31fc67dbebe4cd84983b4e05c31f6c4810e6fea81968cdfbff46c8c0c8012752788f2a243327780c8b799d60e5de6eeea64f33968a53d39315c215d865162a9c8285bdf229d883cdb4bec4f43cf32080d8275442bf09d43705602b2b036c7c89b195c41f10fd0321167c99c4bef90996ad541616570e1922cc5bc03f2d5230764653f48744c9b97f1b1448b8e46177646fa9f9b7153aabc6f551baea4e7d40c6ecc9908a39009c8989fa86ee77a7a012e2d304f5d4c04fb5c4e487e98d015489a4f1ba1846160f6ba36f7efd448fb80443361a94620700f00a2a84bf8b14dc19f5631f2772e716ecdea6e2342dbe0c4aac66514fef38fc2864beacf8471699849717b77101fb8e7a81ccbfa84005f20d2aa4209b7d2a5721204285475128fefd1f45ea2352c165e5baf2f3ba34f8e642db7d73c62ad38077c9b1c849a82e694bd064753f1f023625772ce120fa2616d03587657539a0b01a06c266a10137e22b8f96ecd2e39c396f5a0b87d6fa0aa5e1386741dbfef771c90d92b5a6114032053712d23b4749b523da6b1559e1a68e6b4124c4c3a96a3c61952c2fcfc8751954eeca75d051f75369d0e560d1d419f06bffef1e8fadc02c2f9c5d6a7868773a37e11187ac5df3d24bd7a2b20830b32917ee599d27a87093c2bb8000a9f6278de3e534569762a6d4a96be8a9b0b1f122b0b411f9cadfb7155946892947d14e9d577359948d89e4a56a847403ab5c8d32b644ebb71dd7a6c1d8951c78bf318cb1ad8f3049857003848394d2bcb4aef223b5da02cf9865a1d3fa41abe76a3188a157aa602bf30c04270b1340d530c836db83e7e0ce491d587648e3b92948fce60ad464ddb2b38b0cc02c5227a955492aa0b0277eedb593bb9d60b1c28aa20b2d321dfdc3e0df3cd4d5e0b7b3d1ea8cab9415984cd4f813bc6fefc06ce0c34c0b8f122905e389b7e65d5ce26d438402877eed9bf42aa0fb6553cfe3928b34e0e506f39c14e28a2d0251329c26121961721dd78c0727deaa6726ae97a7d1ef6a61397f6bd2e0d1e151efbed6f438f51b6d9bfd9deefb7bd20e7dc9fb16d2e83df2b80f8a44ac32cb6c40af53cd7790ef7161803a784f795dc99a6a4f0c5d80aca116d7b7ff040d31e70265480409cd4ef980f4d399c4ab8c81038ebe199237c97b1c1928f92a328f7c9eb29133d015184dc34dbe0bb00b3c083c9bb9b0491c5761cb62abaf61c0449bd308159351695efef3358895693fdde23df07ed77f0a7e3853a58cbfaaf1700d9b618a1bb2cd4c9f927ffd7a18e5f7647a1d8bf40a49d1e71ca18deaf962ebc4999e8b1d3a77f0641f590e54cbf4b2fe8478c71e4d34c4bdcb6b69754f96d63f6addf0d181aecb6ec5531c3369a38744fa6e327f286f9b0109acf1c385e8dc8aa420968a4c2dc374daf6c4016a24c27ab813bf4d7325684ebf6be8a6f2300829b95291b2149d7d2005721d01149e43d5b8f5315516ac8dd5a9cde548bdffe4dcdd76293a213752512a6f7757da4438fc3bc03b22b409f994d5d54bba8ba153a5a546a7528939ffd162b11fcd5b95a99a28005e62bd4967067478149e5292f6109c7265c21ae9336265c2d32b8c2dfc91fde1c2c5a9f7e25af3e2e44b1fbe385c492a7db764862fe9c85fd077b0c5b0e479df553866a95c7092c5a035fa8ad0f44750a25c420629fa94529bc8be477f7ca4da7d623e5ac9daa58680461d74a271b4c3f35bbd2db6578f8312a73d98eefdb92f91df66563b984f6b6dfa704ddf14fb058087ba4e70a97aa5e22e8ac688e9125e6ee2b4baa2d6e55be13a90d99bf9320accd132f15c542a28032ed7976215f14559c990cef493cead19fee07f0f8d5514c8123707fe6d9470c21e3dd96d80ca6b6524a5f345c02b25764a300846f10bc604e7558f763a4429a2b34b7b22c535dfcee6dbd7038acbb1cd6d5e0836b061e00f527fff20796bbc7c2e5b918c8705600c3a7d976a46e123ec656355a908bb16eafd082974811d9526b45027fc0baa07263dc2a08e5c758210298418377c47158eb708ab452f78b868f1af5979c439cfe60b8c2ff867fb032a1ac33c8f873caaec1fa2b5546b23093c0d05c866128f40357d676feaf2e722031021468ed662233d2dc360900d7f5c0cfbe569a0cae994941ba4e4c6611d9a0ee07346bb4be7a6d7360101ef7784b0c74abfd0706238acd8bdb2b49027b2ff8b2f52313ae96afbb39c48c92e9fa4d85a0bc27667dc07f9456eac7335b1e26f77862fa80e200b827f14622928be1eea816ef13246b598fa7ed9315877021740e7d8935394ec17c781e3744907190c68b2d20ba1edefb5a33525fefdd4ca4751053a2e406e6a0d3e9a3d71dff894a6687bc6b99c51e4c8e6399ef6f1ce4c56594fb265b3dd91524159bf77b271f10d855f7bbf3da26f8c95784c006fa1b9a79d46bb94956a1646af81f0f4cf825e2ace2eb638cfde7d78ff7086179500584e17444bbb4e17a9b3e5d22af8b5b76b93c71fd132d31f820776b66df81b8be0e621deef5ab3b962bd37f2b3601665090590cadc94fe0506e4cf525225262bf885eb690c2faad5a6b8b8313ee408fccb19e274517dfb02d2da59919b62e19880ffbd1d2cb067c49df24cb881108e7a7533cf14f01e09f02522488d3b78b065dba1ca8daca13a2a7fbf7ff5799631618112a278ecd5c6165793510b2f33048db56c3ded6b694b097f43038bd135b3101ca030b79013ba2ca2bbdef08d6dbadddd9f2e7d3c0274091c9b2d98790361112835968b4ccda2daf2bd73f5ee144f8be7e83b20e91d7613cba25d112c6f8642da0f985f0663821723921be1d8899453ec78af8c162ded74dba463a759beb6633aca4a91e3cf4572e13dcc2d5e721e347e644f0c4f59eb3c113160f07a97b7f1977d061a36da5dedd425e9b789e00af274bbbae5360e2e2a120cad3574d1756ba962b320f76351adf5c80f4717a117461a8e7a8281c0ca080eb8340a5c750785a435e4737e4a4a76b5014907f478b765a07635be8c84ced14ad502b8ff641599138e504ab56fa0b549c1f0baeed481e50dc9ebd10881be20221a19c8e7373c49ec51ef63af5dd8b28f9eeb01bbdcbb4486c5696965af0e4b9ba3ee15b6266829a70ee7a58f53535bd1affeb28480caf2f4ac8e9d94492655bd0e5f51e593b784a1e6e61ffb306e8b4de9e2cb7b39ae20804bdf80f3bcdbfddddd2e7dc6a17fcdf2e36a6dd67c773d2731583148abf01022a27ccc82e154a4ee906b6e8ceb1796708ed3e0c5e6e721f7a5c6cb16b13749e28c3c887861a88ca40ce5b82502ef7b888c50cb4d8416e265cd5ab1e4b1de7d05bce74f89ceab0b61dbaa3a3fdd6872e9e1ae5bb554e05c0f757e91f267f0e86bc604c3de31f3bd23ed040c680addc07b31411a2754ee25901e1efef7629a5045577e02033faef7d14cfee03e3d4f039480fa7bbba52bd8cfbd49a96f1c14171266b4dc477c224a47307845da69776faf237dd431298e768c33cb619c9456b97dc31b51a56858b5f25c15a7256b635a6f8df90e098e94ea116cf0dfd441793639edce5175b3f4409bf160c1037fa4bdd97eb9acddbbdb717f4d6d2150a6704a7583d854d9d134b9bd2855b92db98a35cc575262965982dc670f7ebbafcd0e4c0ab2d444c6f33a9d0411498aeb45c01000000000000e41c966dbf4281876e92af8e286d974a460ab251937404ecb0edf319c392df8f8ac5e11e6e728fdfda5a080f18d7075f939aa69986561d04bae3c2fc7d31d948dec730d428c36267711d1b4abd2533f9c365381497e04c55345fc0e3b1f7d492ad0c63cfbcb7972b00e190b93492e86182a235e63f32e1ced566e8dd7780dd44be4e9afe7b6be0466ee3640e9f8709d208da40fafc221dc4203f77eb7951c1c944cdaaaf015f1883dfd117a81a812c6f0b5c1340dcee033739f41f8c97cb9533190bf9522b6da2a692ea2f97522a7b293e233ab165c44c6dff9d3a65733c7175e520facb1c4d446c202b09b7955b1c47bfd3a60600664cb9afd7cc758acb710422cd8bd946d290bdeffc7f856a94d3db55fc18759bf6e95eee360582023ef0acd4040cb47cba40cd1bc6374203c949c85d3b3e48265bb19b3e49cd288a7543b9caa70e44c14a1fa48ad46b8c3d4c8d5c980dbfe85cedd0163fb38c41a692d15244e14d086f665445f11f0f76006c9a788f8494917dd79c53814ee751b18b7c078801b1bba3a07f1eb2f5a1ba1b47c0a4c46b2aa2b28f7c047e1780bf6f42fd57b462db21e9eb98466a2495eecb9a85bcb8c1e1799e0542ec73191a2750d63b7f2c9858e7da73dfc579ab1a8bd95c425757bd7e00d68913391d8cddb674953c1410a7e676687e8e91d9967a6c1b8e93f6004545bc258ea4fba2c624e94876f4059561ea751f8baa644d1275a85aa227b0492c8da2e556098b08cd946a20387090936df1ef48b1005163968e42084fdb0470788cad682c2fe1f524ab3634e057817ffef4fa6dd6e576629be823dd70fe4e6432612d783d3771782e7a7e2bde743ea9ef42b4ae3edc175df732e07d74530532e438d208e0fb253d70a202040cb677ad895eff28b9ea0fa22e9b3711c1a4390274f21eecf4909f6bf53f536515f7ee2299613de5a33cc0bdec7772023640cda52a0846e69f2c33c81ca09e31353142ce03d24eb93937bd22617e971abc42b52b6188920bb7a000a5f2bcf96cb7cf821d819a7cee7e6845ef50a1e3998643afd15082f3bddc57d7c4aaf4471c3d1184cdba6f3e6a75e6ff61a9a1c66322c3e4586c9f0d74f0d541bc427eb91088fc9b763864e6959c61afb4cd1e56b3941f00ee9efc027f79c5c124f23bf4df547bb70579302109847300", 0x1000}}, 0x101b) pipe2$9p(&(0x7f0000000200), 0x800) 931.00984ms ago: executing program 4 (id=1075): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@empty}, 0x14) (async) modify_ldt$write(0x1, &(0x7f0000000200), 0x10) (async) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) (async) syz_clone(0xa8800c00, &(0x7f0000000000)="0f00000000000000c7c0d8338e9a1d5380374c5926229ed0d38654080d74d062534db3a4a026d29968bf9d2ec783502741dcffaf2f7dccd30b3db0b53e8ccb4dd5728188ab456a06d9172e7a6c155623e0516494c30667ac27b7097841a87376213197853b6c67b59693e2c08f0535cbdccca038c8733606c981e93b1e7f46843a22436b05a0fd70dda6d54994612259ea2bf0e7826728bbcf9f119165bcf2b0427b5a1ba4f364ef541cf83b0b5a7b2b2bce039328bf074291702d4b69f205b2d4228fdd1a002e67eb2b3160e8068a666b2dd7e087875b510691b11b4d5f61e9", 0xe0, 0x0, 0x0, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x6, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8}, [@ldst={0x5, 0x5, 0x1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) ptrace(0x10, r1) (async) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000340)) (async) ptrace$poke(0x21, r1, 0x0, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "2abe00", 0x18, 0x11, 0x0, @dev={0xfe, 0x80, '\x00', 0x22}, @empty, {[], {0x0, 0x4e1d, 0x18, 0x0, @wg=@data={0x4, 0xffc0, 0x7}}}}}}}, 0x0) 930.642948ms ago: executing program 4 (id=1076): r0 = syz_usbip_server_init(0x4) syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="120100001ddf8208c00712152230000000010902"], 0x0) write$usbip_server(r0, &(0x7f00000004c0)=ANY=[], 0xffffffffffffff79) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept$netrom(r1, 0x0, &(0x7f0000000240)) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001500)={@map=0x1, 0x2f, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x7, r0, 0x1}) ioctl$INCFS_IOC_FILL_BLOCKS(r2, 0x80106720, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x8, 0x3e, &(0x7f00000000c0)="3acc7868c56b3b0fd6bfeb8a17426865f9d20a17220d3de7ce1d0dc4a835cffc214664a4d8404f3f99107e7d40626c44e5368e016206a61dfe99383b9d01", 0x1, 0x1}, {0x3, 0x1000, &(0x7f0000000400)="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", 0x1}]}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CAP_HALT_POLL(r6, 0x4068aea3, &(0x7f00000056c0)={0xb6, 0x0, 0x10001}) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) r9 = dup(r8) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f00000001c0)=ANY=[@ANYBLOB="01000000050000f59104"]) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x6, 0x2, 0x81}, 0x1}}, @TCA_MPLS_LABEL={0x8, 0x5, 0xa97e2}, @TCA_MPLS_PROTO={0x6, 0x4, 0x883e}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) 364.410618ms ago: executing program 5 (id=1080): seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x200) (async) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000080)=0x200) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="2c00417dc6ec50afa3b2000005001b0001072d86c482a3a665058500"], 0x2c}}, 0x24008800) 256.934012ms ago: executing program 5 (id=1081): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = msgget$private(0x0, 0x209) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb0, 0x8}, 0x0, 0x0, 0xc0e8, 0x2, 0x8000000000000000, 0x100000001, 0xfffffffffffffff8, 0x8001, 0x6}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000430001002bbd7000fcdbdf250a000000070001"], 0x48}}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) msgget$private(0x0, 0x209) (async) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000380)={{0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xb0, 0x8}, 0x0, 0x0, 0xc0e8, 0x2, 0x8000000000000000, 0x100000001, 0xfffffffffffffff8, 0x8001, 0x6}) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="48000000430001002bbd7000fcdbdf250a000000070001"], 0x48}}, 0x40) (async) 254.291709ms ago: executing program 1 (id=1082): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000019000100000000a86c9733000a00000004000000000000002c05001400070000"], 0x24}}, 0x0) 253.518848ms ago: executing program 1 (id=1083): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) (async, rerun: 32) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async, rerun: 32) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async, rerun: 32) read$FUSE(r1, &(0x7f0000002140)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 32) syz_fuse_handle_req(r1, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, 0x0, {0x40, 0x4, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x120, 0x6000, 0x0, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) write$FUSE_INIT(r1, &(0x7f0000000440)={0x50, 0x0, r2}, 0x50) (async, rerun: 64) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) (rerun: 64) ioctl$TIOCGPTPEER(r3, 0x800c0910, 0x8) (async) ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000040)={0x4, 0x0, 0x3, 0x1d, 0x100, &(0x7f00000000c0)="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"}) 253.430999ms ago: executing program 5 (id=1084): ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000080)="0f2a1f36f30f01e8dad766b9800000c00f326635008000000f30670f784f000f21570fe9514d66b9800000c00f326635002000000f3066b92e0b00000f32bad104b011ee", 0x44}], 0x1, 0x3, &(0x7f0000000140)=[@dstype0={0x6, 0x1}], 0x1) (async) ioctl$TCFLSH(r1, 0x4b63, 0x3) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002007910480000000000610430000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) 252.473386ms ago: executing program 5 (id=1085): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket(0x11, 0x80a, 0x0) (async) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e21, 0x400000, @ipv4={'\x00', '\xff\xff', @empty}, 0x4000}, 0x18) r3 = getpid() (async) r4 = syz_io_uring_setup(0x6d09, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000200), &(0x7f0000000140)) io_uring_register$IORING_REGISTER_PROBE(r4, 0x8, &(0x7f00000000c0)={0x0, 0x0, 0x0, '\x00', [{}]}, 0x1) socket$igmp(0x2, 0x3, 0x2) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010025bd7000fbdbdf250b"], 0x24}, 0x1, 0x0, 0x0, 0x8811}, 0x0) (async) ioctl$SNDRV_PCM_IOCTL_UNLINK(0xffffffffffffffff, 0x4161, 0x0) (async) r7 = syz_pidfd_open(r3, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002003, 0x0) r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_INC(r8, 0xc0105702, &(0x7f0000000100)) ioctl$VFAT_IOCTL_READDIR_SHORT(r7, 0xff06, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00'}) (async, rerun: 32) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)="2e043949aa80008e48621e8bf4ac632be2b747d3800000121f0000000000000000000000000000624e3bb9ff076816a1b59749dd85ce217b14d93c008966661c0dbe590e40dd7f596ef9e4e64530895217797c2af200"/98, 0x62}], 0x1, 0x0, 0x22}, 0x0) (rerun: 32) 204.267375ms ago: executing program 1 (id=1086): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r2, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@bridge_getvlan={0x28, 0x72, 0x800, 0x70bd2a, 0x25dfdbfb, {0x7, 0x0, 0x0, r2}, [@BRIDGE_VLANDB_DUMP_FLAGS={0x8, 0x1, 0x1}, @BRIDGE_VLANDB_DUMP_FLAGS={0x8}]}, 0x28}}, 0x40001) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) 203.928998ms ago: executing program 1 (id=1087): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000300)=""/88, 0x0) r2 = syz_open_procfs(r0, &(0x7f00000002c0)='pagemap\x00') r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) read$msr(r2, &(0x7f0000032680)=""/102385, 0xffffff49) 129.195385ms ago: executing program 5 (id=1088): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000b40)="a2", 0xfffffd2a}], 0x1, 0x0, 0x0, 0x20000000}, 0x4000041) close(r1) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000100)=0x14) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r4, 0x26, &(0x7f0000000000)={0x1}) fcntl$lock(r4, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x80, 0x7}) fcntl$lock(r4, 0x25, &(0x7f00000000c0)={0x1, 0x2, 0x0, 0x80000000}) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000040000000400000022"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000880)={{r5}, &(0x7f00000001c0), &(0x7f00000006c0)='%-5lx \x00'}, 0x20) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r7, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15) r8 = dup(r7) write$P9_RLERRORu(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="8b"], 0x53) write$RDMA_USER_CM_CMD_SET_OPTION(r8, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) write$binfmt_elf64(r8, &(0x7f0000000340)=ANY=[@ANYBLOB="7f454c4600073f034b0b00000000000003003e00ffffffe93501"], 0x7c8) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc0000000, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x19, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x779}}, &(0x7f0000000080)='GPL\x00', 0x329, 0xdd, &(0x7f0000000240)=""/221, 0x100, 0x8, '\x00', r2, @fallback=0x17, r3, 0x8, &(0x7f00000001c0)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0xc, 0x80, 0x9}, 0x10, 0x0, r4, 0x8, &(0x7f0000000400)=[r5, r8, r9], &(0x7f0000000440)=[{0x3, 0x5, 0x10, 0x4}, {0x1, 0x5, 0x6, 0x5}, {0x5, 0x1, 0x1, 0x3}, {0x4, 0x1, 0x8, 0x4}, {0x2, 0x2, 0xd, 0x3}, {0x2, 0x5, 0x2, 0x7}, {0x4, 0x3, 0x2, 0x5}, {0x3, 0x3, 0x1, 0x2}], 0x10, 0x7, @void, @value}, 0x94) r10 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)={0x0, "7513d8d142f71a1a27cc314cc34550df469f6940256d42176fdb5e07236d4d68c5e76a78cd4ba68f8713c383ba230298e700b0030594d8fe6fe3abd5e70c12fc"}, 0x48, 0xffffffffffffffff) keyctl$read(0xf, r10, 0x0, 0x0) close(r0) 50.904874ms ago: executing program 5 (id=1089): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) open(&(0x7f00000000c0)='./file0\x00', 0x60c2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r1, 0x400, 0x1) rename(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file1\x00') r2 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) mbind(&(0x7f00002b9000/0x1000)=nil, 0x1000, 0x3, &(0x7f0000000340)=0x7fffffff, 0x10001, 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r3, &(0x7f0000000380)={@val, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x32, 0x0, @rand_addr=0x64010102, @multicast1}, {0x0, 0x0, 0x8}}}}}}, 0x8f) ioctl$SCSI_IOCTL_SEND_COMMAND(r2, 0x1, &(0x7f0000000640)=ANY=[@ANYBLOB="00000000000000008508"]) dup2(r0, r0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001be512800b000100697036886e6c08000c0002800800140036c60000"], 0x3c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_CREATE_PIT2(r6, 0x4040ae77, &(0x7f0000000040)) syz_open_procfs(0x0, &(0x7f0000000300)='net/vlan/vlan0\x00') r8 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_PIT(r6, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x1}, {0x0, 0xc, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10, 0x0, 0x0, 0x0, 0x10004}, {0x800, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc60], 0x0, 0x200}) mmap(&(0x7f00008a0000/0x2000)=nil, 0x2000, 0x1000002, 0x200000005c831, r2, 0x148b000) 50.003644ms ago: executing program 1 (id=1090): r0 = openat$ptp1(0xffffffffffffff9c, &(0x7f0000000200), 0x101, 0x0) ioctl$PTP_PEROUT_REQUEST(r0, 0x40383d03, &(0x7f0000000600)={{0x2926, 0x8}, {0x0, 0x1}, 0xfe, 0x1}) (async) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000180)='./file0\x00', 0x1) r2 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000)) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=r5, @ANYBLOB="00000000000000003400128009000100626f6e64000000002400028005001600000000000500110001000000080007"], 0x54}}, 0x0) (async) vmsplice(r2, &(0x7f00000004c0), 0x100001b5, 0x1) (async) r6 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) (async) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x2001}, 0x18, 0x0) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f0000000340)={0x2000, r8}, 0x0) r9 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000000380)=ANY=[@ANYBLOB="210000f2000000000100000065666768696a6b6c6d6e6f7099e0ff8159110aa8982b42d40e214737194ab2ac462615f167d91e6ccfa5c10d37c4125ab9a35369bdd7e2702d50fc1d8b1780eb1614e70b92deefdc6ce54a538d860970637165c14ee3285a3090713a5097cc9fa33ca4a2e796036dde6afcc2581149b2bf6143e699a7dc901661a95e46f3df6fe291bfffb7eed6d3838678be2100"], 0x18, 0xfffffffffffffffc) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r8, 0xc0506617, &(0x7f00000001c0)={@id={0x2, 0x0, @d}, 0x21, r9, '\x00', @c}) ioctl$vim2m_VIDIOC_ENUM_FMT(r6, 0xc0405602, &(0x7f0000000140)={0x21, 0x1, 0x0, "27425ba25f17386bcec1d8665c0084feea8be6b8a80052d063e6179d13f019e3", 0x494e4f4b}) (async) inotify_add_watch(r1, &(0x7f0000000100)='./file0\x00', 0x86000000) 49.814266ms ago: executing program 2 (id=1091): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000019000100000000a86c9733000a00000004000000000000002c05001400070000"], 0x24}}, 0x0) 709.281µs ago: executing program 2 (id=1092): syz_clone3(&(0x7f00000023c0)={0x20000, &(0x7f0000002180), &(0x7f00000021c0), &(0x7f0000002200)=0x0, {0x15}, &(0x7f0000002240)=""/205, 0xcd, &(0x7f0000002340)=""/59, &(0x7f0000002380)=[0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0], 0x7}, 0x58) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000025c0)=0x0) stat(&(0x7f0000002600)='./file0\x00', &(0x7f0000002640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000002740)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000004900)=0x0) lstat(&(0x7f0000004940)='./file0\x00', &(0x7f0000004980)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000004a00)={{{@in6=@ipv4={""/10, ""/2, @local}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@private1}}, &(0x7f0000004b00)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000004b40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000006b80)=0x0) r9 = getegid() r10 = geteuid() statx(0xffffffffffffff9c, &(0x7f0000006bc0)='./file0\x00', 0x1000, 0x10, &(0x7f0000006c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, &(0x7f0000006d00)='./file0\x00', 0x1600, 0x400, &(0x7f0000006d40)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000006e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000006ec0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00}}, './file0\x00'}) getresgid(&(0x7f0000006f00)=0x0, &(0x7f0000006f40), &(0x7f0000006f80)=0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000006fc0)='./file0\x00', &(0x7f0000007000)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) stat(&(0x7f0000007080)='./file0\x00', &(0x7f00000070c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000007140)='./file0\x00', &(0x7f0000007180)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000007200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000007280)='./file0\x00', &(0x7f00000072c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x6000) getgroups(0x4, &(0x7f0000007340)=[0xee01, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000007a00)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000007a40)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000009b80)={{{@in=@multicast2, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000009c80)=0xe8) read$FUSE(0xffffffffffffffff, &(0x7f0000009cc0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000000000)="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", 0x2000, &(0x7f000000be40)={&(0x7f0000002000)={0x50, 0x0, 0x3, {0x7, 0x29, 0x6, 0x10000000, 0x2, 0x3ff, 0x6, 0x4d8, 0x0, 0x0, 0x40, 0x3}}, &(0x7f0000002080)={0x18, 0x0, 0x200, {0x6}}, &(0x7f00000020c0)={0x18, 0xfffffffffffffff5, 0xff, {0x6}}, &(0x7f0000002100)={0x18, 0x0, 0x6fc6, {0x9}}, &(0x7f0000002140)={0x18, 0x0, 0xffffffffffffffff, {0x4}}, &(0x7f0000002440)={0x28, 0x0, 0x9, {{0xb, 0x2, 0x1, r0}}}, &(0x7f0000002480)={0x60, 0xfffffffffffffffe, 0x81, {{0x4611, 0x8000000000000001, 0xffffffffffff7fd1, 0x10000, 0x62, 0x8, 0x2, 0xfffff041}}}, &(0x7f0000002500)={0x18, 0x0, 0x1, {0x3}}, &(0x7f0000002540)={0x22, 0x0, 0x3, {'\x9c%^\x84*.*\xb4}^$](]@)\xe9\x00'}}, &(0x7f0000002580)={0x20, 0x0, 0x9, {0x0, 0x11}}, &(0x7f00000026c0)={0x78, 0xfffffffffffffffe, 0x6, {0x80, 0x3, 0x0, {0x5, 0xfce, 0xfffffffffffffff7, 0x9, 0x4, 0x9, 0x9, 0x1, 0x2783f685, 0x8000, 0x7, r1, r2, 0x0, 0x9b7}}}, &(0x7f0000004780)={0x90, 0x0, 0x9, {0x5, 0x1, 0x0, 0x9e26, 0x7, 0x4, {0x4, 0x1ff, 0x4, 0x2, 0x9, 0xfe1b, 0xa1, 0x1, 0xffffffff, 0xa000, 0x21b7, 0xee00, r3, 0x7, 0x8}}}, &(0x7f0000004840)={0xb8, 0x0, 0x401, [{0x3, 0x3, 0x1, 0x6, '\x1b'}, {0x1, 0x7fffffffffffffff, 0x0, 0x1000000}, {0x5, 0x915c, 0x3, 0x46, '-,,'}, {0x0, 0x26, 0x5, 0x5, '\\]]!@'}, {0x1, 0xb}, {0x1, 0x2, 0x0, 0xfffffffe}]}, &(0x7f0000007380)={0x648, 0xffffffffffffffda, 0x7ff, [{{0x4, 0x1, 0x1, 0x8, 0x7, 0xe, {0x0, 0x0, 0x7, 0x0, 0x6, 0x3, 0x5, 0x8, 0xff, 0x6000, 0x8, r4, r5, 0x8, 0x7}}, {0x1, 0x6, 0x8, 0x6, '((-{@}:^'}}, {{0x0, 0x2, 0x8, 0x5, 0x0, 0x8, {0x2, 0x7, 0x47, 0x7, 0x5, 0x9, 0xffffffff, 0x4, 0xfffffff8, 0x2000, 0x3, r6, r7, 0x7, 0x7}}, {0x5, 0x8000000000000000, 0x0, 0xd5a1}}, {{0x5, 0x1, 0x9, 0xffffffff, 0x5, 0x496f, {0x6, 0xfffffffffffffff7, 0x6, 0x0, 0xffffffffffffb021, 0x7, 0x6, 0x2991, 0xf, 0x6000, 0x0, r8, r9, 0xd, 0x1}}, {0x6, 0x7, 0x1, 0xe061, '\xed'}}, {{0x4, 0x0, 0x6, 0x7, 0x4, 0x8, {0x3, 0x27c0, 0x3, 0x8000, 0x7, 0x4, 0x7f, 0x70, 0x2, 0x6000, 0xe, r10, r11, 0x9, 0x4}}, {0x6, 0x8, 0x0, 0xba}}, {{0x0, 0x3, 0xa, 0x80000001, 0x9, 0x100, {0x3, 0x1, 0x2, 0x5, 0x3ff, 0xb3, 0xc, 0x7, 0x5, 0x6000, 0x3, r12, r13, 0x80, 0xfffffffb}}, {0x0, 0x6, 0x2, 0x4, '-}'}}, {{0x1, 0x0, 0x2, 0x4, 0x3, 0x1, {0x1, 0xb182, 0x4, 0x3, 0x6, 0x30b, 0x3, 0xffff79b6, 0x7, 0x2000, 0x754, r14, r15, 0x80000000, 0x7}}, {0x4, 0x9, 0x3, 0xe, '++#'}}, {{0x3, 0x3, 0x100000000, 0x182, 0x1, 0xe27, {0x3, 0x4, 0x2212, 0x8, 0x4b11c39c, 0x2, 0x8, 0x4, 0x7, 0x8000, 0x2, r17, r18, 0x400, 0x9c02}}, {0x4, 0x5e7141b5, 0x4, 0x7fffffff, '!,^('}}, {{0x4, 0x1, 0x1, 0x644, 0x400, 0x5, {0x1, 0xffffffffffffff00, 0x9, 0x7, 0x523d, 0x80000001, 0x0, 0x1, 0x3cd0000, 0x4000, 0x8, r19, r20, 0xfffffff9, 0x2}}, {0x4, 0x2, 0xc, 0x0, '*\\)^}(,::/F\xa8'}}, {{0x1, 0x3, 0x6, 0x8018819, 0x8, 0x6003, {0x1, 0xbfdb, 0x70e, 0x6, 0x280000, 0x9d, 0x6, 0x9, 0x3, 0x2000, 0x6, 0x0, r21, 0x401}}, {0x0, 0x9, 0x2, 0xfffffffb, '\x1a$'}}, {{0x0, 0x1, 0xa, 0x3, 0x40, 0x1, {0x4, 0x0, 0x0, 0x3ff, 0x81, 0x4, 0xbb, 0xe205, 0x4, 0x4000, 0xffff, 0xee00, r22, 0x4, 0x2}}, {0x0, 0x0, 0x1, 0x800, '%'}}]}, &(0x7f0000009a80)={0xa0, 0x24, 0x8, {{0x0, 0x3, 0x8, 0x5, 0x3, 0xa070, {0x2, 0xfffffffffffffff2, 0x9, 0x1, 0x9, 0x5, 0x80000001, 0x4, 0x84b, 0x1000, 0x401, r24, r26, 0x7, 0x400}}, {0x0, 0x11}}}, &(0x7f0000009b40)={0x20, 0x0, 0x8, {0x8, 0x4, 0x7fff, 0x4}}, &(0x7f000000bd00)={0x130, 0x0, 0x2, {0x1, 0x80000001, 0x0, '\x00', {0x4000, 0x3, 0x2, 0x5, r27, r28, 0xa000, '\x00', 0x8, 0xffffffffffffffff, 0x7c, 0x100000000, {0x8, 0x8}, {0x3ff, 0x7}, {0x1000, 0x8}, {0x319e, 0x10}, 0x9, 0xec05, 0x0, 0xe}}}}) r29 = openat2(r23, &(0x7f000000bf00)='./file0\x00', &(0x7f000000bf40)={0x450141, 0x21, 0x2}, 0x18) getresuid(&(0x7f000000bf80), &(0x7f000000bfc0)=0x0, &(0x7f000000c000)) write$FUSE_DIRENTPLUS(r29, &(0x7f000000c040)={0x148, 0x0, r25, [{{0x4, 0x0, 0x9, 0x0, 0x9, 0x9, {0x5, 0x0, 0x9, 0x7, 0xd948, 0x5, 0xa439, 0x4, 0x4, 0x0, 0x5, r30, r16, 0x8001, 0xc0d}}, {0x0, 0x895b, 0x0, 0x6}}, {{0x3, 0x2, 0xf, 0x80000000, 0xc, 0x0, {0x5, 0x200, 0xfffffffffffffffe, 0x7b, 0x1, 0x2, 0x9eb7, 0x8, 0x8, 0xc000, 0x7e7, r24, r22, 0x6, 0x6}}, {0x1, 0x202, 0x2, 0xfffff9d2, '\x1a$'}}]}, 0x148) 595.872µs ago: executing program 1 (id=1093): r0 = socket(0x10, 0x803, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)) (async) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x2, 0x1, 0x7fff, 0x2e}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x2, {0x0, 0x0, 0x0, r4, {0xffff, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x3}]}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x0) 0s ago: executing program 2 (id=1094): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x84100, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = dup(r4) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) r6 = syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r7 = syz_pidfd_open(r6, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0xff05) ioctl$KVM_RUN(r4, 0xae80, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001380)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) (async) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) (async) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) (async) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x84100, 0x0) (async) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) (async) dup(r4) (async) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x42, 0x0, 0x0) (async) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) (async) syz_clone3(&(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) syz_pidfd_open(r6, 0x0) (async) ioctl$EXT4_IOC_SWAP_BOOT(r7, 0xff05) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000001380)={0x1c, r8, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004}, 0x10) (async) kernel console output (not intermixed with test programs): ring): Released all slaves [ 57.672256][ T6744] bond1 (unregistering): Released all slaves [ 57.722873][ T6744] bond2 (unregistering): Released all slaves [ 57.785079][ T6898] netfs: Couldn't get user pages (rc=-14) [ 57.859083][ T6859] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 57.866569][ T6859] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 57.873703][ T6859] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 57.878351][ T6859] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 57.896469][ T6910] trusted_key: syz.0.241 sent an empty control message without MSG_MORE. [ 57.925206][ T6859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.942543][ T6859] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.950504][ T6913] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 57.958290][ T220] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.960410][ T220] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.967793][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.969844][ T6740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.989418][ T6744] hsr_slave_0: left promiscuous mode [ 57.989840][ T6917] syz.0.243: attempt to access beyond end of device [ 57.989840][ T6917] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 57.996250][ T6744] hsr_slave_1: left promiscuous mode [ 57.999006][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 58.001700][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 58.003942][ T6916] syz.0.243: attempt to access beyond end of device [ 58.003942][ T6916] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 58.004395][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 58.009885][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 58.029430][ T6744] veth1_macvtap: left promiscuous mode [ 58.031586][ T6744] veth0_macvtap: left promiscuous mode [ 58.033192][ T6744] veth1_vlan: left promiscuous mode [ 58.035354][ T6744] veth0_vlan: left promiscuous mode [ 58.136822][ T6927] xt_recent: hitcount (4294967295) is larger than allowed maximum (65535) [ 58.451182][ T1490] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.512948][ T6744] team0 (unregistering): Port device team_slave_1 removed [ 58.563797][ T6744] team0 (unregistering): Port device team_slave_0 removed [ 58.600281][ T1490] usb 7-1: Using ep0 maxpacket: 8 [ 58.604229][ T1490] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.606354][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 58.609394][ T1490] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.613004][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.616161][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.620059][ T1490] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.622206][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 58.625331][ T1490] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.628557][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.631716][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.635633][ T1490] usb 7-1: config 168 descriptor has 1 excess byte, ignoring [ 58.637752][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 58.640975][ T1490] usb 7-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 58.644278][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 58.647407][ T1490] usb 7-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 58.658143][ T1490] usb 7-1: string descriptor 0 read error: -22 [ 58.659961][ T1490] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 58.662611][ T1490] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.698374][ T1490] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 58.883562][ T5996] usb 7-1: USB disconnect, device number 2 [ 58.994567][ T6942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.247'. [ 58.997485][ T6942] netlink: 12 bytes leftover after parsing attributes in process `syz.0.247'. [ 59.047500][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.091897][ T6938] adutux: No device or device unplugged -19 [ 59.110377][ T5941] Bluetooth: hci1: command tx timeout [ 59.150686][ T6859] veth0_vlan: entered promiscuous mode [ 59.154876][ T6859] veth1_vlan: entered promiscuous mode [ 59.169543][ T6967] ptrace attach of "/syz-executor exec"[5937] was attempted by "/syz-executor exec"[6967] [ 59.173166][ T6859] veth0_macvtap: entered promiscuous mode [ 59.176014][ T6859] veth1_macvtap: entered promiscuous mode [ 59.183568][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.186533][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.189300][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.196347][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.197903][ T39] kauditd_printk_skb: 54684 callbacks suppressed [ 59.197911][ T39] audit: type=1400 audit(1736864786.703:91702): avc: denied { write } for pid=5334 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.202714][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.208670][ T39] audit: type=1400 audit(1736864786.703:91703): avc: denied { remove_name } for pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.213806][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.215971][ T39] audit: type=1400 audit(1736864786.703:91704): avc: denied { rename } for pid=5334 comm="syslogd" name="messages" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.218898][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.225477][ T39] audit: type=1400 audit(1736864786.703:91705): avc: denied { add_name } for pid=5334 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.227988][ T6859] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.234458][ T39] audit: type=1400 audit(1736864786.703:91706): avc: denied { unlink } for pid=5334 comm="syslogd" name="messages.0" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.237138][ T6859] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.243442][ T39] audit: type=1400 audit(1736864786.703:91707): avc: denied { create } for pid=5334 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 59.248928][ T6859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.259545][ T6859] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.264522][ T6859] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.267005][ T6859] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.269508][ T6859] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.272432][ T5941] Bluetooth: hci4: command 0xfc11 tx timeout [ 59.275180][ T5939] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 59.328437][ T1143] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.331873][ T1143] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.346631][ T1143] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.349263][ T1143] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.351162][ T6985] kAFS: unparsable volume name [ 59.353444][ T39] audit: type=1400 audit(1736864786.863:91708): avc: denied { mounton } for pid=6859 comm="syz-executor" path="/syzkaller.SryRwh/syz-tmp" dev="sda1" ino=1942 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.360473][ T39] audit: type=1400 audit(1736864786.863:91709): avc: denied { mount } for pid=6859 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 59.360491][ T39] audit: type=1400 audit(1736864786.863:91710): avc: denied { mounton } for pid=6859 comm="syz-executor" path="/syzkaller.SryRwh/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=14057 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 59.362372][ T39] audit: type=1400 audit(1736864786.873:91711): avc: denied { mounton } for pid=6859 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2774 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 59.499033][ T7025] netlink: 16 bytes leftover after parsing attributes in process `syz.4.257'. [ 59.502842][ T7025] CUSE: zero length info key specified [ 59.506759][ T7026] overlayfs: missing 'workdir' [ 59.510049][ T7026] netlink: 8 bytes leftover after parsing attributes in process `syz.0.256'. [ 59.896708][ T7118] program syz.1.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 59.896731][ T7119] program syz.1.264 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 60.017499][ T7129] CUSE: zero length info key specified [ 60.112923][ T7140] bond0: entered promiscuous mode [ 60.114447][ T7140] bond_slave_0: entered promiscuous mode [ 60.116096][ T7140] bond_slave_1: entered promiscuous mode [ 60.118511][ T7140] batadv0: entered promiscuous mode [ 60.125937][ T7140] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 60.183686][ T7146] 9p: Unknown uid 00000000004294967295 [ 60.312219][ T5939] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 60.315563][ T5939] Bluetooth: hci3: Injecting HCI hardware error event [ 60.319875][ T5939] Bluetooth: hci3: hardware error 0x00 [ 60.377251][ T7165] CUSE: zero length info key specified [ 61.190325][ T5941] Bluetooth: hci1: command tx timeout [ 61.475794][ T7226] mmap: syz.4.296 (7226) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 61.510269][ T7229] tipc: Started in network mode [ 61.512255][ T7229] tipc: Node identity ac14140f, cluster identity 4711 [ 61.515088][ T7229] tipc: New replicast peer: 255.255.255.255 [ 61.516958][ T7229] tipc: Enabled bearer , priority 10 [ 61.564634][ T7236] ieee802154 phy0 wpan0: encryption failed: -22 [ 61.682280][ T7248] __nla_validate_parse: 5 callbacks suppressed [ 61.682291][ T7248] netlink: 10 bytes leftover after parsing attributes in process `syz.1.304'. [ 62.390344][ T5939] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 62.641803][ T5994] tipc: Node number set to 2886997007 [ 62.676461][ T7270] ipvlan2: entered allmulticast mode [ 62.678042][ T7270] mac80211_hwsim hwsim8 wlan0: entered allmulticast mode [ 62.681789][ T7270] batman_adv: batadv0: Adding interface: ipvlan2 [ 62.683589][ T7270] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.690757][ T7270] batman_adv: batadv0: Interface activated: ipvlan2 [ 62.717137][ T7274] sg_write: data in/out 43/14 bytes for SCSI command 0x9-- guessing data in; [ 62.717137][ T7274] program syz.0.313 not setting count and/or reply_len properly [ 62.723631][ T7274] program syz.0.313 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 62.749061][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'. [ 62.751407][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.316'. [ 62.754900][ T7278] CUSE: zero length info key specified [ 62.910382][ T7285] @: renamed from vlan0 (while UP) [ 63.020636][ T5996] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 63.172008][ T5996] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 63.175559][ T5996] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 63.179304][ T5996] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 63.183059][ T5996] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 63.187074][ T5996] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 63.195012][ T5996] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 63.198461][ T5996] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 63.201744][ T5996] usb 7-1: Product: syz [ 63.203382][ T5996] usb 7-1: Manufacturer: syz [ 63.209144][ T5996] cdc_wdm 7-1:1.0: skipping garbage [ 63.211313][ T5996] cdc_wdm 7-1:1.0: skipping garbage [ 63.215002][ T5996] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 63.217271][ T5996] cdc_wdm 7-1:1.0: Unknown control protocol [ 63.270325][ T5939] Bluetooth: hci1: command tx timeout [ 63.323655][ T6744] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.378755][ T6744] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.411832][ T5941] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.413940][ T7280] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.414708][ T5941] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.416831][ T7280] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.419535][ T5941] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.424648][ T5941] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.425407][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.426884][ T5941] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.431567][ T5941] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.460871][ T6744] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.521162][ T7295] chnl_net:caif_netlink_parms(): no params data found [ 63.564668][ T6744] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.600455][ T7226] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 63.610909][ T7295] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.613086][ T7295] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.615192][ T7295] bridge_slave_0: entered allmulticast mode [ 63.617410][ T7295] bridge_slave_0: entered promiscuous mode [ 63.622683][ T7295] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.624695][ T7295] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.626110][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.626688][ T7295] bridge_slave_1: entered allmulticast mode [ 63.628501][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.630703][ T7295] bridge_slave_1: entered promiscuous mode [ 63.631959][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.635223][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.637115][ C3] cdc_wdm 7-1:1.0: nonzero urb status received: -71 [ 63.639050][ C3] cdc_wdm 7-1:1.0: wdm_int_callback - 0 bytes [ 63.642127][ T35] usb 7-1: USB disconnect, device number 3 [ 63.670119][ T7295] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.674816][ T7295] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.716757][ T7295] team0: Port device team_slave_0 added [ 63.718680][ T6744] bridge_slave_1: left allmulticast mode [ 63.721552][ T6744] bridge_slave_1: left promiscuous mode [ 63.723266][ T6744] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.727910][ T6744] bridge_slave_0: left allmulticast mode [ 63.729797][ T6744] bridge_slave_0: left promiscuous mode [ 63.733894][ T6744] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.964520][ T6744] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.968144][ T6744] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.971901][ T6744] bond0 (unregistering): Released all slaves [ 63.976278][ T7295] team0: Port device team_slave_1 added [ 64.001294][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.003279][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.010446][ T7295] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.014203][ T7295] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.016176][ T7295] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.028766][ T7295] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.076881][ T7295] hsr_slave_0: entered promiscuous mode [ 64.078998][ T7295] hsr_slave_1: entered promiscuous mode [ 64.140071][ T7304] netlink: 8 bytes leftover after parsing attributes in process `syz.4.324'. [ 64.177956][ T7295] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 64.182477][ T7295] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 64.185981][ T7295] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 64.189287][ T7295] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 64.226412][ T6744] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 64.242695][ T6744] batman_adv: batadv0: Removing interface: ipvlan2 [ 64.263751][ T7295] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.273321][ T7295] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.279105][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.281091][ T6740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.286499][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.288481][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.325507][ T6744] hsr_slave_0: left promiscuous mode [ 64.327620][ T6744] hsr_slave_1: left promiscuous mode [ 64.330223][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.332289][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.338837][ T6744] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.341535][ T6744] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.358294][ T6744] veth1_macvtap: left promiscuous mode [ 64.362058][ T6744] veth0_macvtap: left promiscuous mode [ 64.364285][ T6744] veth1_vlan: left promiscuous mode [ 64.366244][ T6744] veth0_vlan: left promiscuous mode [ 64.372343][ T7326] program syz.4.329 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 64.733493][ T39] kauditd_printk_skb: 25 callbacks suppressed [ 64.733503][ T39] audit: type=1400 audit(1736864792.243:91737): avc: denied { accept } for pid=7340 comm="syz.4.333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.745612][ T39] audit: type=1400 audit(1736864792.253:91738): avc: denied { ioctl } for pid=7340 comm="syz.4.333" path="socket:[17747]" dev="sockfs" ino=17747 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 64.762897][ T39] audit: type=1400 audit(1736864792.273:91739): avc: denied { ioctl } for pid=7347 comm="syz.1.335" path="/dev/vhost-net" dev="devtmpfs" ino=1300 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 64.833627][ T7351] netlink: 8 bytes leftover after parsing attributes in process `syz.4.336'. [ 64.840320][ T39] audit: type=1400 audit(1736864792.353:91740): avc: denied { read } for pid=7350 comm="syz.4.336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 64.891855][ T7355] tipc: Trying to set illegal importance in message [ 64.935895][ T6744] team0 (unregistering): Port device team_slave_1 removed [ 64.992082][ T6744] team0 (unregistering): Port device team_slave_0 removed [ 65.325208][ T7359] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 65.333335][ T7359] CIFS mount error: No usable UNC path provided in device string! [ 65.333335][ T7359] [ 65.339538][ T7359] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 65.353024][ T5939] Bluetooth: hci1: command tx timeout [ 65.369758][ T7361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.338'. [ 65.448319][ T7295] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.459594][ T7370] netlink: 24 bytes leftover after parsing attributes in process `syz.1.340'. [ 65.480214][ T220] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.511828][ T5939] Bluetooth: hci2: command tx timeout [ 65.564580][ T7295] veth0_vlan: entered promiscuous mode [ 65.572970][ T7295] veth1_vlan: entered promiscuous mode [ 65.592876][ T7389] program syz.1.343 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 65.593085][ T7295] veth0_macvtap: entered promiscuous mode [ 65.595468][ T7389] ata1.00: invalid command format 0 [ 65.598365][ T7295] veth1_macvtap: entered promiscuous mode [ 65.605116][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.608142][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.611569][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.614441][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.617687][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.631248][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.634592][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.637489][ T7295] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.640127][ T39] audit: type=1326 audit(1736864793.143:91741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7397 comm="syz.1.344" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7700f85d29 code=0x0 [ 65.640453][ T7295] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.652394][ T7295] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.659677][ T7295] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.662988][ T7295] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.665468][ T7295] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.668480][ T7295] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.679520][ T7402] tmpfs: Bad value for 'mpol' [ 65.685035][ T39] audit: type=1400 audit(1736864793.183:91742): avc: denied { mounton } for pid=7401 comm="syz.4.345" path="/syzcgroup/unified/syz4" dev="cgroup2" ino=183 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 65.723014][ T7402] netlink: 100 bytes leftover after parsing attributes in process `syz.4.345'. [ 65.733359][ T220] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.735584][ T220] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.747619][ T220] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.749841][ T220] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.760756][ T57] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.788979][ T39] audit: type=1400 audit(1736864793.293:91743): avc: denied { bind } for pid=7413 comm="syz.5.323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 65.802504][ T6744] IPVS: stop unused estimator thread 0... [ 65.879321][ T39] audit: type=1400 audit(1736864793.383:91744): avc: denied { write } for pid=7408 comm="syz.4.346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 65.885014][ T39] audit: type=1400 audit(1736864793.393:91745): avc: denied { write } for pid=7408 comm="syz.4.346" laddr=::1 lport=20000 faddr=::1 fport=51708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.885178][ T7419] dccp_check_seqno: Step 6 failed for RESET packet, (LSWL(143636846890011) <= P.seqno(0) <= S.SWH(143636846890085)) and (P.ackno exists or LAWL(137952903738543) <= P.ackno(137952903738544) <= S.AWH(137952903738544), sending SYNC... [ 65.900146][ T39] audit: type=1400 audit(1736864793.403:91746): avc: denied { read } for pid=7408 comm="syz.4.346" laddr=::1 lport=20000 faddr=::1 fport=51708 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 65.920397][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 65.923004][ T57] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 65.925682][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 65.930645][ T57] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 65.933369][ T57] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 65.934946][ T7430] xt_hashlimit: size too large, truncated to 1048576 [ 65.936902][ T57] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 65.936916][ T57] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.986983][ T7428] overlayfs: cannot append lower layer [ 65.993359][ T5939] Bluetooth: hci2: unexpected cc 0x2039 length: 4 > 1 [ 65.993582][ T7428] IPv6: NLM_F_CREATE should be specified when creating new route [ 66.152101][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.157009][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.159670][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.163856][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.166397][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.168749][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.171513][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.173940][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.176402][ T7382] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.178809][ T7382] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.187006][ T57] usb 7-1: GET_CAPABILITIES returned 0 [ 66.188581][ T57] usbtmc 7-1:16.0: can't read capabilities [ 66.411459][ T832] usb 7-1: USB disconnect, device number 4 [ 66.439574][ T7463] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 66.466938][ T7469] netlink: 'syz.2.349': attribute type 2 has an invalid length. [ 66.469174][ T7469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.349'. [ 66.473298][ T7470] tty tty1: ldisc open failed (-12), clearing slot 0 [ 66.502435][ T7474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.350'. [ 66.505569][ T7474] CUSE: zero length info key specified [ 66.566483][ T6740] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.569133][ T6744] Bluetooth: hci4: Frame reassembly failed (-84) [ 66.572021][ T7479] Bluetooth: hci4: received HCILL_GO_TO_SLEEP_ACK in state 2 [ 66.756384][ T7494] tipc: Enabling of bearer rejected, failed to enable media [ 66.803589][ T7502] netlink: 12 bytes leftover after parsing attributes in process `syz.4.359'. [ 66.843107][ T7504] netlink: 16 bytes leftover after parsing attributes in process `syz.4.360'. [ 66.846116][ T7504] CUSE: zero length info key specified [ 67.129006][ T7517] Unsupported ieee802154 address type: 0 [ 67.134500][ T7517] xt_hashlimit: size too large, truncated to 1048576 [ 67.532344][ T7528] usb usb4: usbfs: interface 0 claimed by hub while 'syz.5.367' sets config #1 [ 68.058322][ T7562] evm: overlay not supported [ 68.070851][ T5941] Bluetooth: hci2: command tx timeout [ 68.127960][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.130570][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.132699][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.134875][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.137666][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.141212][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.143421][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.145509][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.147749][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.149937][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.153416][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.155794][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.158112][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.161163][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.163692][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.166090][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.168436][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.171277][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.173581][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.175904][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.178187][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.181067][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.183421][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.185757][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.188084][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.190810][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.193149][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.195500][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.197823][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.200143][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.202650][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.204726][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.206835][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.208917][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.211518][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.213577][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.215761][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.217871][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.219978][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.222121][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.224192][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.226259][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.228340][ T6173] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 68.234619][ T6173] hid-generic 0000:0000:0000.0002: hidraw1: HID v0.00 Device [syz0] on syz0 [ 68.243754][ T7578] IPv6: Can't replace route, no match found [ 68.289089][ T7588] netlink: 24 bytes leftover after parsing attributes in process `syz.4.383'. [ 68.466009][ T7599] macvlan1: entered promiscuous mode [ 68.471307][ T7598] macvlan1: left promiscuous mode [ 68.494842][ T7601] xt_hashlimit: size too large, truncated to 1048576 [ 68.550461][ T57] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 68.630408][ T5941] Bluetooth: hci4: command 0x1003 tx timeout [ 68.630428][ T5939] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 68.680287][ T57] usb 7-1: device descriptor read/64, error -71 [ 68.755524][ T7608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.388'. [ 68.793784][ T7610] sch_tbf: peakrate 64 is lower than or equals to rate 256 ! [ 68.847558][ T7616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.391'. [ 68.851581][ T7616] netlink: 32 bytes leftover after parsing attributes in process `syz.1.391'. [ 68.920245][ T57] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 68.932051][ T7623] netlink: 24 bytes leftover after parsing attributes in process `syz.1.393'. [ 68.967029][ T7626] use of bytesused == 0 is deprecated and will be removed in the future, [ 68.969577][ T7626] use the actual size instead. [ 69.004890][ T7631] netlink: 'syz.4.396': attribute type 1 has an invalid length. [ 69.007117][ T7631] netlink: 'syz.4.396': attribute type 3 has an invalid length. [ 69.009230][ T7631] netlink: 224 bytes leftover after parsing attributes in process `syz.4.396'. [ 69.070356][ T57] usb 7-1: device descriptor read/64, error -71 [ 69.108023][ T7646] netlink: 2036 bytes leftover after parsing attributes in process `syz.4.397'. [ 69.111535][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.397'. [ 69.190661][ T57] usb usb7-port1: attempt power cycle [ 69.321863][ T7658] tipc: Enabled bearer , priority 0 [ 69.531529][ T57] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 69.550753][ T57] usb 7-1: device descriptor read/8, error -71 [ 69.800279][ T57] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 69.820722][ T57] usb 7-1: device descriptor read/8, error -71 [ 69.930959][ T57] usb usb7-port1: unable to enumerate USB device [ 69.949059][ T7671] fuse: Bad value for 'fd' [ 69.950043][ T7678] netlink: 'syz.1.408': attribute type 13 has an invalid length. [ 69.952899][ T7678] syz_tun: refused to change device tx_queue_len [ 69.954648][ T7678] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 69.988294][ T7678] (unnamed net_device) (uninitialized): (slave geneve0): Device is not bonding slave [ 69.991105][ T7678] (unnamed net_device) (uninitialized): option active_slave: invalid value (geneve0) [ 70.109604][ T7705] CUSE: zero length info key specified [ 70.160318][ T5939] Bluetooth: hci2: command tx timeout [ 70.193515][ T39] kauditd_printk_skb: 12 callbacks suppressed [ 70.193525][ T39] audit: type=1400 audit(1736864797.703:91759): avc: denied { connect } for pid=7711 comm="syz.5.415" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 70.215505][ T39] audit: type=1400 audit(1736864797.723:91760): avc: denied { mounton } for pid=7714 comm="syz.1.416" path="/95/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 70.230358][ T6188] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 70.263260][ T39] audit: type=1400 audit(1736864797.773:91761): avc: denied { ioctl } for pid=7718 comm="syz.5.418" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 70.271305][ T39] audit: type=1400 audit(1736864797.773:91762): avc: denied { ioctl } for pid=7718 comm="syz.5.418" path="/dev/btrfs-control" dev="devtmpfs" ino=1335 ioctlcmd=0x9427 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 70.276104][ T7715] erofs (device erofs): cannot read erofs superblock [ 70.308577][ T39] audit: type=1400 audit(1736864797.813:91763): avc: denied { getopt } for pid=7724 comm="syz.1.420" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 70.361110][ T7723] fuse: Bad value for 'fd' [ 70.390343][ T6188] usb 9-1: Using ep0 maxpacket: 8 [ 70.393293][ T6188] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 70.396383][ T6188] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 70.396685][ T39] audit: type=1400 audit(1736864797.903:91764): avc: denied { setopt } for pid=7731 comm="syz.1.422" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 70.398913][ T6188] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.408966][ T6188] usb 9-1: config 0 descriptor?? [ 70.439731][ T7734] mkiss: ax0: crc mode is auto. [ 70.610863][ T7756] netlink: 'syz.5.427': attribute type 9 has an invalid length. [ 70.656599][ T7684] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 70.659126][ T7684] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 70.670781][ T39] audit: type=1400 audit(1736864798.183:91765): avc: denied { accept } for pid=7755 comm="syz.5.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 70.673783][ T7756] netlink: 'syz.5.427': attribute type 13 has an invalid length. [ 70.678874][ T39] audit: type=1400 audit(1736864798.183:91766): avc: denied { listen } for pid=7755 comm="syz.5.427" lport=45669 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.685533][ T39] audit: type=1400 audit(1736864798.183:91767): avc: denied { read } for pid=7755 comm="syz.5.427" name="loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.686621][ T6188] iowarrior 9-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 70.694329][ T39] audit: type=1400 audit(1736864798.183:91768): avc: denied { open } for pid=7755 comm="syz.5.427" path="/dev/loop-control" dev="devtmpfs" ino=657 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 70.704986][ T6188] usb 9-1: USB disconnect, device number 2 [ 70.753287][ T7779] delete_channel: no stack [ 70.755090][ T7779] netlink: 'syz.4.430': attribute type 10 has an invalid length. [ 70.761435][ T7778] binder: BINDER_SET_CONTEXT_MGR already set [ 70.763303][ T7778] binder: 7776:7778 ioctl 4018620d 200002c0 returned -16 [ 70.766121][ T7778] binder: 7776:7778 ioctl c0306201 20000680 returned -22 [ 70.769598][ T7778] netlink: 'syz.5.429': attribute type 4 has an invalid length. [ 70.790462][ T7778] block device autoloading is deprecated and will be removed. [ 70.881138][ T7801] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 71.061795][ T7829] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 71.115624][ T1414] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.117440][ T1414] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.811266][ T7854] netlink: 'syz.5.448': attribute type 1 has an invalid length. [ 72.263612][ T7868] __nla_validate_parse: 10 callbacks suppressed [ 72.263623][ T7868] netlink: 60 bytes leftover after parsing attributes in process `syz.5.452'. [ 72.303299][ T7888] netlink: 24 bytes leftover after parsing attributes in process `syz.2.457'. [ 72.353308][ T7894] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 72.355900][ T7893] netlink: 12 bytes leftover after parsing attributes in process `syz.1.459'. [ 72.413058][ T7894] process 'syz.1.459' launched './file0' with NULL argv: empty string added [ 72.462305][ T6742] Bluetooth: (null): Invalid header checksum [ 72.464859][ T6742] Bluetooth: (null): Invalid header checksum [ 72.466768][ T6742] Bluetooth: (null): Invalid header checksum [ 72.571961][ T6741] Bluetooth: (null): Invalid header checksum [ 72.682151][ T6743] Bluetooth: (null): Invalid header checksum [ 72.700708][ T6173] usb 7-1: new full-speed USB device number 9 using dummy_hcd [ 72.790545][ T6743] Bluetooth: (null): Invalid header checksum [ 72.866339][ T6173] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 72.869361][ T6173] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 72.872686][ T6173] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 72.875695][ T6173] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 72.891387][ T6173] usb 7-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 72.893942][ T6173] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.896123][ T6173] usb 7-1: Product: syz [ 72.897271][ T6173] usb 7-1: Manufacturer: syz [ 72.898569][ T6173] usb 7-1: SerialNumber: syz [ 72.900967][ T6173] usb 7-1: config 0 descriptor?? [ 72.901335][ T6741] Bluetooth: (null): Invalid header checksum [ 72.903891][ T7891] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 72.907813][ T6173] input: KB Gear Tablet as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.0/input/input6 [ 72.951653][ C2] kbtab 7-1:0.0: kbtab_irq - usb_submit_urb failed with result -1 [ 73.011102][ T6742] Bluetooth: (null): Invalid header checksum [ 73.130475][ T6740] Bluetooth: (null): Invalid header checksum [ 73.305702][ T7911] kvm: emulating exchange as write [ 73.525988][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 73.529736][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz.4.465'. [ 73.533361][ T7924] netlink: 'syz.4.465': attribute type 4 has an invalid length. [ 73.549657][ T7924] serio: Serial port ptm0 [ 73.551268][ T7926] netlink: 24 bytes leftover after parsing attributes in process `syz.5.466'. [ 73.669322][ T7941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 73.770651][ T5995] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: None [ 74.382723][ T7963] netlink: 'syz.4.471': attribute type 3 has an invalid length. [ 74.385673][ T7963] netlink: 'syz.4.471': attribute type 1 has an invalid length. [ 74.388552][ T7963] netlink: 216 bytes leftover after parsing attributes in process `syz.4.471'. [ 74.392218][ T7963] NCSI netlink: No device for ifindex 33022 [ 74.466076][ T7965] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 74.504915][ T7968] netlink: 48 bytes leftover after parsing attributes in process `syz.1.473'. [ 74.632119][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.1.475'. [ 74.675373][ T7978] macvtap0: Device is already in use. [ 75.358469][ T6188] usb 7-1: USB disconnect, device number 9 [ 76.235228][ T56] cfg80211: failed to load regulatory.db [ 83.958066][ T8053] __nla_validate_parse: 1 callbacks suppressed [ 83.958076][ T8053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.481'. [ 83.961932][ T39] kauditd_printk_skb: 21 callbacks suppressed [ 83.961941][ T39] audit: type=1400 audit(1736864811.463:91790): avc: denied { getopt } for pid=8050 comm="syz.5.478" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 83.979171][ T8053] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.982217][ T8053] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.984741][ T8053] bridge0: entered allmulticast mode [ 83.986905][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 83.989486][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 83.992201][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 83.994728][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 83.997452][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 84.000065][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 84.003090][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 84.005885][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 84.008539][ T8062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.482'. [ 84.129649][ T8084] geneve0: entered allmulticast mode [ 84.213634][ T8096] syz.4.492: attempt to access beyond end of device [ 84.213634][ T8096] loop4: rw=0, sector=64, nr_sectors = 1 limit=0 [ 84.217401][ T8096] syz.4.492: attempt to access beyond end of device [ 84.217401][ T8096] loop4: rw=0, sector=256, nr_sectors = 1 limit=0 [ 84.221828][ T8096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 84.224817][ T8096] syz.4.492: attempt to access beyond end of device [ 84.224817][ T8096] loop4: rw=0, sector=512, nr_sectors = 1 limit=0 [ 84.228393][ T8096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 84.231980][ T8096] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 84.234153][ T8096] UDF-fs: Scanning with blocksize 512 failed [ 84.236457][ T8096] syz.4.492: attempt to access beyond end of device [ 84.236457][ T8096] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 84.239931][ T8096] syz.4.492: attempt to access beyond end of device [ 84.239931][ T8096] loop4: rw=0, sector=512, nr_sectors = 2 limit=0 [ 84.241472][ T8101] macvlan2: entered promiscuous mode [ 84.244640][ T8096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 84.245366][ T8101] vlan1: entered promiscuous mode [ 84.247950][ T8096] syz.4.492: attempt to access beyond end of device [ 84.247950][ T8096] loop4: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 84.249493][ T8101] macvlan2: entered allmulticast mode [ 84.253018][ T8096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 84.253032][ T8096] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 84.253039][ T8096] UDF-fs: Scanning with blocksize 1024 failed [ 84.253273][ T8096] syz.4.492: attempt to access beyond end of device [ 84.253273][ T8096] loop4: rw=0, sector=64, nr_sectors = 4 limit=0 [ 84.254897][ T8101] vlan1: entered allmulticast mode [ 84.257950][ T8096] syz.4.492: attempt to access beyond end of device [ 84.257950][ T8096] loop4: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 84.260032][ T8101] veth0_vlan: entered allmulticast mode [ 84.261855][ T8096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 84.261912][ T8096] syz.4.492: attempt to access beyond end of device [ 84.261912][ T8096] loop4: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 84.261932][ T8096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 84.283767][ T8096] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 84.286760][ T8096] UDF-fs: Scanning with blocksize 2048 failed [ 84.289474][ T8096] syz.4.492: attempt to access beyond end of device [ 84.289474][ T8096] loop4: rw=0, sector=64, nr_sectors = 8 limit=0 [ 84.294593][ T8096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 84.298363][ T8096] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512 [ 84.302122][ T8096] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 84.305075][ T8096] UDF-fs: Scanning with blocksize 4096 failed [ 84.307418][ T8096] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1) [ 84.440866][ T8110] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 84.473261][ T8115] can0: slcan on ptm0. [ 84.530385][ T5995] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 84.540488][ T8111] can0 (unregistered): slcan off ptm0. [ 84.692122][ T5995] usb 7-1: config index 0 descriptor too short (expected 45, got 36) [ 84.692524][ T39] audit: type=1400 audit(1736864812.203:91791): avc: denied { relabelfrom } for pid=8124 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.694419][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 84.700043][ T39] audit: type=1400 audit(1736864812.203:91792): avc: denied { relabelto } for pid=8124 comm="syz.4.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 84.703555][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 84.711837][ T5995] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 84.714869][ T5995] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 84.718329][ T5995] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 84.722898][ T5995] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.727141][ T39] audit: type=1400 audit(1736864812.233:91793): avc: denied { getopt } for pid=8127 comm="syz.5.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 84.731200][ T5995] usb 7-1: config 0 descriptor?? [ 84.736250][ T8104] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 84.754933][ T39] audit: type=1400 audit(1736864812.263:91794): avc: denied { watch watch_reads } for pid=8124 comm="syz.4.501" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=1039 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 85.146972][ T5995] plantronics 0003:047F:FFFF.0003: unknown main item tag 0xd [ 85.150258][ T5995] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 85.200968][ T5995] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 85.449296][ T25] usb 7-1: USB disconnect, device number 10 [ 85.906876][ T8159] tty tty29: ldisc open failed (-12), clearing slot 28 [ 85.976453][ T39] audit: type=1400 audit(1736864813.482:91795): avc: denied { listen } for pid=8166 comm="syz.1.513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 85.983857][ T39] audit: type=1400 audit(1736864813.482:91796): avc: denied { connect } for pid=8170 comm="syz.4.515" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 86.028756][ T8177] sg_write: process 150 (syz.5.517) changed security contexts after opening file descriptor, this is not allowed. [ 86.060407][ T8179] xt_hashlimit: size too large, truncated to 1048576 [ 86.095981][ T8185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.097916][ T8186] ptrace attach of "/syz-executor exec"[6859] was attempted by "/syz-executor exec"[8186] [ 86.099134][ T8185] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.146974][ T39] audit: type=1400 audit(1736864813.641:91797): avc: denied { watch } for pid=8192 comm="syz.5.521" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 86.153829][ T39] audit: type=1400 audit(1736864813.641:91798): avc: denied { watch_sb watch_reads } for pid=8192 comm="syz.5.521" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 86.304498][ T39] audit: type=1400 audit(1736864813.790:91799): avc: denied { read } for pid=8171 comm="syz.2.514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 86.628832][ T8222] netlink: 'syz.5.529': attribute type 11 has an invalid length. [ 86.698947][ T8229] gfs2: error -5 reading superblock [ 86.708869][ T8231] openvswitch: netlink: Missing key (keys=40, expected=80) [ 86.869594][ T5939] block nbd4: Receive control failed (result -32) [ 86.869891][ T8172] block nbd4: shutting down sockets [ 87.064515][ T8267] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 87.782006][ T8279] vcan0: tx drop: invalid da for name 0xfffffffffffffffc [ 87.984569][ T8263] bridge0: port 3(syz_tun) entered blocking state [ 87.987107][ T8263] bridge0: port 3(syz_tun) entered disabled state [ 87.989146][ T8263] syz_tun: entered allmulticast mode [ 87.991751][ T8263] syz_tun: entered promiscuous mode [ 87.993999][ T8263] bridge0: port 3(syz_tun) entered blocking state [ 87.996033][ T8263] bridge0: port 3(syz_tun) entered forwarding state [ 88.042902][ T8287] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.095591][ T8299] pimreg11: entered allmulticast mode [ 88.180768][ T8307] xt_hashlimit: size too large, truncated to 1048576 [ 88.684792][ T8335] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=42421 sclass=netlink_route_socket pid=8335 comm=syz.4.562 [ 89.085113][ T8362] kvm: pic: single mode not supported [ 89.086894][ T8362] kvm: pic: non byte read [ 89.095419][ T8362] kvm: pic: non byte read [ 89.097353][ T8362] kvm: pic: non byte write [ 89.098950][ T8362] kvm: pic: single mode not supported [ 89.099209][ T8362] kvm: pic: non byte write [ 89.102533][ T8362] kvm: pic: non byte write [ 89.104630][ T8362] kvm: pic: non byte write [ 89.106494][ T8362] kvm: pic: non byte write [ 89.108476][ T8362] kvm: pic: non byte write [ 89.110288][ T8362] kvm: pic: non byte write [ 89.112225][ T8362] kvm: pic: non byte write [ 89.119783][ T8368] capability: warning: `syz.5.572' uses 32-bit capabilities (legacy support in use) [ 89.163937][ T8371] ptrace attach of "/syz-executor exec"[8372] was attempted by "/syz-executor exec"[8371] [ 89.202920][ T39] kauditd_printk_skb: 16 callbacks suppressed [ 89.202931][ T39] audit: type=1400 audit(1736864816.503:91816): avc: denied { watch watch_reads } for pid=8373 comm="syz.5.574" path="pipe:[24186]" dev="pipefs" ino=24186 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.212542][ T39] audit: type=1400 audit(1736864816.503:91817): avc: denied { relabelfrom } for pid=8373 comm="syz.5.574" name="" dev="pipefs" ino=24187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 89.225663][ T39] audit: type=1400 audit(1736864816.522:91818): avc: denied { map } for pid=8373 comm="syz.5.574" path="/67" dev="tmpfs" ino=402 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 89.233951][ T8329] overlayfs: statfs failed on './file0' [ 89.288264][ T8380] netlink: 'syz.5.577': attribute type 2 has an invalid length. [ 89.336440][ T8382] xt_SECMARK: invalid mode: 0 [ 89.360882][ T8387] __nla_validate_parse: 73 callbacks suppressed [ 89.360892][ T8387] netlink: 24 bytes leftover after parsing attributes in process `syz.1.580'. [ 89.375637][ T8385] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.448657][ T8385] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.480009][ T8398] 9pnet_fd: Insufficient options for proto=fd [ 89.521666][ T39] audit: type=1400 audit(1736864816.802:91819): avc: denied { ioctl } for pid=8399 comm="syz.1.584" path="socket:[23180]" dev="sockfs" ino=23180 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 89.531499][ T8400] netlink: 12 bytes leftover after parsing attributes in process `syz.1.584'. [ 89.542318][ T39] audit: type=1400 audit(1736864816.802:91820): avc: denied { write } for pid=8399 comm="syz.1.584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 89.547689][ T39] audit: type=1400 audit(1736864816.812:91821): avc: denied { map } for pid=8399 comm="syz.1.584" path="socket:[23184]" dev="sockfs" ino=23184 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 89.567388][ T8385] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.648506][ T8385] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.657705][ T39] audit: type=1400 audit(1736864816.924:91822): avc: denied { append } for pid=8405 comm="syz.1.586" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 89.744737][ T8385] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.753941][ T8385] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.760630][ T8385] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.765558][ T8385] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.787446][ T8413] FAULT_INJECTION: forcing a failure. [ 89.787446][ T8413] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 89.793003][ T8413] CPU: 3 UID: 0 PID: 8413 Comm: syz.1.589 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 89.795928][ T8413] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 89.798938][ T8413] Call Trace: [ 89.799883][ T8413] [ 89.800708][ T8413] dump_stack_lvl+0x16c/0x1f0 [ 89.802060][ T8413] should_fail_ex+0x497/0x5b0 [ 89.803391][ T8413] _copy_from_user+0x2e/0xd0 [ 89.804706][ T8413] __sys_bpf+0x21c/0x49c0 [ 89.805914][ T8413] ? __pfx_lock_release+0x10/0x10 [ 89.807327][ T8413] ? __pfx___sys_bpf+0x10/0x10 [ 89.808671][ T8413] ? vfs_write+0x306/0x1150 [ 89.809960][ T8413] ? __mutex_unlock_slowpath+0x164/0x690 [ 89.811541][ T8413] ? fput+0x67/0x440 [ 89.812650][ T8413] ? ksys_write+0x1ba/0x250 [ 89.813929][ T8413] ? __pfx_ksys_write+0x10/0x10 [ 89.815298][ T8413] __x64_sys_bpf+0x78/0xc0 [ 89.816527][ T8413] ? lockdep_hardirqs_on+0x7c/0x110 [ 89.817985][ T8413] do_syscall_64+0xcd/0x250 [ 89.819259][ T8413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.820909][ T8413] RIP: 0033:0x7f7700f85d29 [ 89.822172][ T8413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 89.827476][ T8413] RSP: 002b:00007f7701cf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 89.829786][ T8413] RAX: ffffffffffffffda RBX: 00007f7701175fa0 RCX: 00007f7700f85d29 [ 89.831965][ T8413] RDX: 0000000000000048 RSI: 0000000020000840 RDI: 0000000000000000 [ 89.834164][ T8413] RBP: 00007f7701cf0090 R08: 0000000000000000 R09: 0000000000000000 [ 89.836358][ T8413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 89.838535][ T8413] R13: 0000000000000000 R14: 00007f7701175fa0 R15: 00007fff5ae8b4a8 [ 89.840755][ T8413] [ 89.943372][ T39] audit: type=1400 audit(1736864817.195:91823): avc: denied { write } for pid=8433 comm="syz.4.595" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.016319][ T39] audit: type=1400 audit(1736864817.261:91824): avc: denied { create } for pid=8443 comm="syz.1.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 90.059967][ T39] audit: type=1400 audit(1736864817.298:91825): avc: denied { map } for pid=8445 comm="syz.5.598" path="socket:[24683]" dev="sockfs" ino=24683 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 90.115502][ T8457] fuse: Bad value for 'user_id' [ 90.116958][ T8457] fuse: Bad value for 'user_id' [ 90.327053][ T8499] bio_check_eod: 3 callbacks suppressed [ 90.327063][ T8499] syz.2.616: attempt to access beyond end of device [ 90.327063][ T8499] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 90.334645][ T8499] syz.2.616: attempt to access beyond end of device [ 90.334645][ T8499] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 90.336598][ T8495] netlink: 40 bytes leftover after parsing attributes in process `syz.1.614'. [ 90.339984][ T8499] syz.2.616: attempt to access beyond end of device [ 90.339984][ T8499] nbd2: rw=0, sector=0, nr_sectors = 2 limit=0 [ 90.347812][ T8499] syz.2.616: attempt to access beyond end of device [ 90.347812][ T8499] nbd2: rw=0, sector=18, nr_sectors = 2 limit=0 [ 90.351952][ T8499] syz.2.616: attempt to access beyond end of device [ 90.351952][ T8499] nbd2: rw=0, sector=30, nr_sectors = 2 limit=0 [ 90.356455][ T8499] syz.2.616: attempt to access beyond end of device [ 90.356455][ T8499] nbd2: rw=0, sector=36, nr_sectors = 2 limit=0 [ 90.359845][ T8499] VFS: unable to find oldfs superblock on device nbd2 [ 90.417685][ T8504] input: syz0 as /devices/virtual/input/input9 [ 90.430930][ T8504] sctp: [Deprecated]: syz.2.618 (pid 8504) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.430930][ T8504] Use struct sctp_sack_info instead [ 90.549157][ T8516] vxcan1: tx address claim with dest, not broadcast [ 90.585507][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.2.626'. [ 90.602575][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.1.627'. [ 90.609630][ T8512] netlink: 16 bytes leftover after parsing attributes in process `syz.5.619'. [ 90.672203][ T8532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.628'. [ 90.733845][ T8540] netlink: 'syz.2.631': attribute type 10 has an invalid length. [ 90.745159][ T8540] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.748155][ T8540] bond0: (slave team0): Enslaving as an active interface with an up link [ 90.783423][ T8542] nbd5: detected capacity change from 0 to 67108884 [ 90.793456][ T8066] block nbd5: Send control failed (result -89) [ 90.796074][ T8066] block nbd5: Request send failed, requeueing [ 90.805386][ T1160] block nbd5: Dead connection, failed to find a fallback [ 90.806438][ T5939] block nbd5: Receive control failed (result -32) [ 90.809563][ T1160] block nbd5: shutting down sockets [ 90.812412][ T1160] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.817364][ T1160] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.841673][ T8555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.636'. [ 90.847021][ T8553] nbd5: detected capacity change from 67108884 to 254 [ 90.850343][ T8066] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.853547][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.854137][ T8542] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 90.856063][ T8066] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.861905][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.864142][ T8066] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.866713][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.869113][ T8066] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.871638][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.873798][ T8066] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.876291][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.878648][ T8066] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.881179][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.883392][ T8066] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.885919][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.888102][ T8066] ldm_validate_partition_table(): Disk read failed. [ 90.890322][ T8066] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 90.892821][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.895010][ T8066] Buffer I/O error on dev nbd5, logical block 0, async page read [ 90.897261][ T8066] Dev nbd5: unable to read RDB block 0 [ 90.899001][ T8066] nbd5: unable to read partition table [ 90.905270][ T8066] ldm_validate_partition_table(): Disk read failed. [ 90.909104][ T8066] Dev nbd5: unable to read RDB block 0 [ 90.911123][ T8066] nbd5: unable to read partition table [ 90.917366][ T8066] ldm_validate_partition_table(): Disk read failed. [ 90.920660][ T8066] Dev nbd5: unable to read RDB block 0 [ 90.923499][ T8066] nbd5: unable to read partition table [ 90.928986][ T8066] ldm_validate_partition_table(): Disk read failed. [ 90.931335][ T8066] Dev nbd5: unable to read RDB block 0 [ 90.931708][ T8569] No source specified [ 90.933179][ T8066] nbd5: unable to read partition table [ 90.956380][ T8573] jffs2: Unknown parameter 'grpquota' [ 90.961509][ T8573] jffs2: Unknown parameter 'grpquota' [ 90.992787][ T8584] netlink: 'syz.2.646': attribute type 10 has an invalid length. [ 90.996906][ T8584] bridge0: port 3(syz_tun) entered disabled state [ 90.998853][ T8584] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.007246][ T8584] bridge0: port 3(syz_tun) entered blocking state [ 91.009188][ T8584] bridge0: port 3(syz_tun) entered forwarding state [ 91.011093][ T8584] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.013083][ T8584] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.014720][ T8589] netlink: 24 bytes leftover after parsing attributes in process `syz.1.647'. [ 91.020142][ T8584] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 91.045909][ T8591] ipvlan2: entered promiscuous mode [ 91.089618][ T8596] SELinux: policydb magic number 0x3a000 does not match expected magic number 0xf97cff8c [ 91.093133][ T8596] SELinux: failed to load policy [ 91.181748][ T8607] netlink: 36 bytes leftover after parsing attributes in process `syz.1.655'. [ 91.191456][ T8607] rdma_op ffff88804a3d29f0 conn xmit_rdma 0000000000000000 [ 91.254209][ T8620] xt_cgroup: xt_cgroup: no path or classid specified [ 91.518703][ T8641] random: crng reseeded on system resumption [ 91.725391][ T8653] syzkaller0: entered promiscuous mode [ 91.726998][ T8653] syzkaller0: entered allmulticast mode [ 91.739287][ T57] hid-generic 0005:0B57:05DF.0004: item fetching failed at offset 0/1 [ 91.742424][ T57] hid-generic 0005:0B57:05DF.0004: probe with driver hid-generic failed with error -22 [ 92.528652][ T8683] sp0: Synchronizing with TNC [ 92.560569][ T8685] [U] è [ 92.662945][ T8697] syz.4.691[8697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.663007][ T8697] syz.4.691[8697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 92.670519][ T8697] syz.4.691[8697] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 93.005712][ T8721] xt_hashlimit: size too large, truncated to 1048576 [ 93.123754][ T6173] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 93.317876][ T6173] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 93.322074][ T6173] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 93.325748][ T6173] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 93.329333][ T6173] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 93.333782][ T6173] usb 7-1: config 0 descriptor?? [ 93.509007][ T8731] bridge0: port 3(syz_tun) entered blocking state [ 93.511015][ T8731] bridge0: port 3(syz_tun) entered disabled state [ 93.513557][ T8731] syz_tun: entered allmulticast mode [ 93.516389][ T8731] syz_tun: entered promiscuous mode [ 93.519019][ T8731] bridge0: port 3(syz_tun) entered blocking state [ 93.521422][ T8731] bridge0: port 3(syz_tun) entered forwarding state [ 93.557516][ T6173] usbhid 7-1:0.0: can't add hid device: -71 [ 93.559273][ T6173] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 93.563395][ T6173] usb 7-1: USB disconnect, device number 11 [ 93.569436][ T8740] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 93.622807][ T8744] 9pnet_virtio: no channels available for device syz [ 93.674909][ T8748] veth0_to_hsr: entered promiscuous mode [ 94.487630][ T8843] syz_tun: left allmulticast mode [ 94.489370][ T8843] syz_tun: left promiscuous mode [ 94.490844][ T8843] bridge0: port 3(syz_tun) entered disabled state [ 94.495717][ T8843] bridge_slave_1: left promiscuous mode [ 94.497330][ T8843] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.500760][ T8843] bridge_slave_0: left allmulticast mode [ 94.502310][ T8843] bridge_slave_0: left promiscuous mode [ 94.504710][ T8843] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.532428][ T8840] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8840 comm=syz.2.736 [ 94.584755][ T8848] can0: slcan on ttyS3. [ 94.708309][ T8853] can0 (unregistered): slcan off ttyS3. [ 94.739979][ T8865] /dev/sg0: Can't lookup blockdev [ 94.741723][ T8865] /dev/sg0: Can't lookup blockdev [ 94.742854][ T8864] __nla_validate_parse: 19 callbacks suppressed [ 94.742863][ T8864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.741'. [ 94.743337][ T8865] /dev/sg0: Can't lookup blockdev [ 94.749634][ T8865] /dev/sg0: Can't lookup blockdev [ 94.751330][ T8865] /dev/sg0: Can't lookup blockdev [ 94.752999][ T8865] /dev/sg0: Can't lookup blockdev [ 94.754700][ T8865] /dev/sg0: Can't lookup blockdev [ 94.759500][ T8865] /dev/sg0: Can't lookup blockdev [ 94.761093][ T8865] /dev/sg0: Can't lookup blockdev [ 94.762649][ T8865] /dev/sg0: Can't lookup blockdev [ 94.764233][ T8865] /dev/sg0: Can't lookup blockdev [ 94.765852][ T8865] /dev/sg0: Can't lookup blockdev [ 94.767680][ T8865] /dev/sg0: Can't lookup blockdev [ 94.769246][ T8865] /dev/sg0: Can't lookup blockdev [ 94.771196][ T8865] /dev/sg0: Can't lookup blockdev [ 94.773017][ T8865] /dev/sg0: Can't lookup blockdev [ 94.774700][ T8865] /dev/sg0: Can't lookup blockdev [ 94.776468][ T8865] /dev/sg0: Can't lookup blockdev [ 94.778123][ T8865] /dev/sg0: Can't lookup blockdev [ 94.779835][ T8865] /dev/sg0: Can't lookup blockdev [ 94.782043][ T8865] /dev/sg0: Can't lookup blockdev [ 94.783622][ T8865] /dev/sg0: Can't lookup blockdev [ 94.785169][ T8865] /dev/sg0: Can't lookup blockdev [ 94.786816][ T8865] /dev/sg0: Can't lookup blockdev [ 94.788344][ T8865] /dev/sg0: Can't lookup blockdev [ 94.789893][ T8865] /dev/sg0: Can't lookup blockdev [ 94.792005][ T8865] /dev/sg0: Can't lookup blockdev [ 94.793795][ T8865] /dev/sg0: Can't lookup blockdev [ 94.795337][ T8865] /dev/sg0: Can't lookup blockdev [ 94.796881][ T8865] /dev/sg0: Can't lookup blockdev [ 94.798494][ T8865] /dev/sg0: Can't lookup blockdev [ 94.800043][ T8865] /dev/sg0: Can't lookup blockdev [ 94.801585][ T8865] /dev/sg0: Can't lookup blockdev [ 94.803731][ T8865] /dev/sg0: Can't lookup blockdev [ 94.805453][ T8865] /dev/sg0: Can't lookup blockdev [ 94.807241][ T8865] /dev/sg0: Can't lookup blockdev [ 94.808928][ T8865] /dev/sg0: Can't lookup blockdev [ 94.810671][ T8865] /dev/sg0: Can't lookup blockdev [ 94.813409][ T8865] /dev/sg0: Can't lookup blockdev [ 94.814995][ T8865] /dev/sg0: Can't lookup blockdev [ 94.816520][ T8865] /dev/sg0: Can't lookup blockdev [ 94.818101][ T8865] /dev/sg0: Can't lookup blockdev [ 94.819683][ T8865] /dev/sg0: Can't lookup blockdev [ 94.821335][ T8865] /dev/sg0: Can't lookup blockdev [ 94.822916][ T8865] /dev/sg0: Can't lookup blockdev [ 94.824654][ T8865] /dev/sg0: Can't lookup blockdev [ 94.826252][ T8865] /dev/sg0: Can't lookup blockdev [ 94.827830][ T8865] /dev/sg0: Can't lookup blockdev [ 94.829387][ T8865] /dev/sg0: Can't lookup blockdev [ 94.830939][ T8865] /dev/sg0: Can't lookup blockdev [ 94.831943][ T8871] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 94.832585][ T8865] /dev/sg0: Can't lookup blockdev [ 94.836487][ T8865] /dev/sg0: Can't lookup blockdev [ 94.838083][ T8865] /dev/sg0: Can't lookup blockdev [ 94.839754][ T8865] /dev/sg0: Can't lookup blockdev [ 94.841290][ T8865] /dev/sg0: Can't lookup blockdev [ 94.842880][ T8865] /dev/sg0: Can't lookup blockdev [ 94.844910][ T8865] /dev/sg0: Can't lookup blockdev [ 94.846478][ T8865] /dev/sg0: Can't lookup blockdev [ 94.848048][ T8865] /dev/sg0: Can't lookup blockdev [ 94.849604][ T8865] /dev/sg0: Can't lookup blockdev [ 94.851179][ T8865] /dev/sg0: Can't lookup blockdev [ 94.852739][ T8865] /dev/sg0: Can't lookup blockdev [ 94.854303][ T8865] /dev/sg0: Can't lookup blockdev [ 94.856007][ T8865] /dev/sg0: Can't lookup blockdev [ 94.857592][ T8865] /dev/sg0: Can't lookup blockdev [ 94.868137][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.951803][ T56] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 95.001258][ T8873] xt_cgroup: xt_cgroup: no path or classid specified [ 95.034047][ T8876] mkiss: ax0: crc mode is auto. [ 95.115186][ T56] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 95.118324][ T56] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 95.124779][ T56] usb 6-1: New USB device found, idVendor=056a, idProduct=0018, bcdDevice= 0.00 [ 95.127376][ T56] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.131008][ T56] usb 6-1: config 0 descriptor?? [ 95.354679][ T56] usbhid 6-1:0.0: can't add hid device: -71 [ 95.356456][ T56] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 95.360230][ T56] usb 6-1: USB disconnect, device number 6 [ 95.480296][ T39] kauditd_printk_skb: 52 callbacks suppressed [ 95.480308][ T39] audit: type=1400 audit(1736864822.368:91878): avc: denied { validate_trans } for pid=8888 comm="syz.4.751" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 95.524237][ T8898] netlink: 16 bytes leftover after parsing attributes in process `syz.5.754'. [ 95.535536][ T39] audit: type=1400 audit(1736865277.420:91879): avc: denied { create } for pid=8893 comm="syz.2.753" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.541558][ T39] audit: type=1400 audit(1736865277.420:91880): avc: denied { link } for pid=8893 comm="syz.2.753" name="file1" dev="overlay" ino=858 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.548546][ T39] audit: type=1400 audit(1736865277.429:91881): avc: denied { setattr } for pid=8893 comm="syz.2.753" name="#22" dev="tmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.555279][ T39] audit: type=1400 audit(1736865277.439:91882): avc: denied { rename } for pid=8893 comm="syz.2.753" name="#22" dev="tmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.570879][ T8898] bond_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 95.578874][ T8903] netlink: 24 bytes leftover after parsing attributes in process `syz.4.756'. [ 95.671377][ T8916] block device autoloading is deprecated and will be removed. [ 95.674162][ T8916] syz.5.762: attempt to access beyond end of device [ 95.674162][ T8916] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 95.681715][ T39] audit: type=1400 audit(1736865277.560:91883): avc: denied { unlink } for pid=5935 comm="syz-executor" name="file1" dev="tmpfs" ino=859 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 95.700391][ T8919] netlink: 48 bytes leftover after parsing attributes in process `syz.5.764'. [ 95.708929][ T8919] netlink: 'syz.5.764': attribute type 1 has an invalid length. [ 95.737599][ T8922] netlink: 24 bytes leftover after parsing attributes in process `syz.5.765'. [ 95.758871][ T8924] netlink: 92 bytes leftover after parsing attributes in process `syz.2.763'. [ 95.793149][ T39] audit: type=1400 audit(1736865277.663:91884): avc: denied { getopt } for pid=8930 comm="syz.5.768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 95.799093][ T8931] syzkaller0: entered promiscuous mode [ 95.800674][ T8931] syzkaller0: entered allmulticast mode [ 95.887371][ T8945] netlink: 24 bytes leftover after parsing attributes in process `syz.2.774'. [ 95.909516][ T8948] block device autoloading is deprecated and will be removed. [ 95.913291][ T39] audit: type=1400 audit(1736865277.776:91885): avc: denied { ioctl } for pid=8935 comm="syz.5.772" path="/102/file0/file0" dev="fuse" ino=64 ioctlcmd=0x92b scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 95.924496][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.777'. [ 95.941089][ T39] audit: type=1400 audit(1736865277.804:91886): avc: denied { connect } for pid=8953 comm="syz.1.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 96.009939][ T6740] tipc: Subscription rejected, illegal request [ 96.129437][ T8976] netlink: 8 bytes leftover after parsing attributes in process `syz.2.783'. [ 96.293057][ T8985] netlink: 24 bytes leftover after parsing attributes in process `syz.4.786'. [ 96.310683][ T6173] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 96.318518][ T8992] netlink: 'syz.4.788': attribute type 10 has an invalid length. [ 96.325796][ T8992] macvlan0: entered promiscuous mode [ 96.327428][ T8992] macvlan0: entered allmulticast mode [ 96.332829][ T8992] veth1_vlan: entered allmulticast mode [ 96.335556][ T8992] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 96.366949][ T8998] xt_hashlimit: size too large, truncated to 1048576 [ 96.409571][ T39] audit: type=1400 audit(1736865278.243:91887): avc: denied { mounton } for pid=9006 comm="syz.5.793" path="/106/file0/bus" dev="ramfs" ino=26852 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 96.419311][ T9007] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 96.421533][ T9007] overlayfs: failed to set xattr on upper [ 96.421785][ T9008] netlink: 'syz.2.791': attribute type 2 has an invalid length. [ 96.423198][ T9007] overlayfs: ...falling back to redirect_dir=nofollow. [ 96.423218][ T9007] overlayfs: ...falling back to index=off. [ 96.423222][ T9007] overlayfs: ...falling back to uuid=null. [ 96.474486][ T9010] syzkaller0: entered promiscuous mode [ 96.476243][ T9010] syzkaller0: entered allmulticast mode [ 96.492420][ T6173] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 96.495918][ T6173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 96.498985][ T6173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 96.501738][ T6173] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.506863][ T6173] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.509502][ T6173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.513669][ T6173] usb 6-1: config 0 descriptor?? [ 96.546181][ T9010] kvm: pic: non byte write [ 96.743743][ T6173] usbhid 6-1:0.0: can't add hid device: -71 [ 96.745796][ T6173] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 96.750702][ T6173] usb 6-1: USB disconnect, device number 7 [ 96.764446][ T9016] netlink: 'syz.1.795': attribute type 30 has an invalid length. [ 96.884719][ T9024] netlink: 'syz.1.797': attribute type 3 has an invalid length. [ 96.895764][ T5935] cgroup: fork rejected by pids controller in /syz2 [ 96.946187][ T5999] bridge0: port 3(syz_tun) entered disabled state [ 96.954293][ T5999] syz_tun (unregistering): left allmulticast mode [ 96.956143][ T5999] syz_tun (unregistering): left promiscuous mode [ 96.957984][ T5999] bridge0: port 3(syz_tun) entered disabled state [ 96.964140][ T9026] random: crng reseeded on system resumption [ 97.100365][ T9024] xt_hashlimit: size too large, truncated to 1048576 [ 97.379252][ T6743] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.470026][ T5941] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.487191][ T5941] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.491296][ T5941] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.495068][ T5941] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.497497][ T5941] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.503943][ T5941] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.451953][ T6743] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.461725][ T9044] trusted_key: encrypted_key: hex blob is missing [ 98.598766][ T6743] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.607541][ T9041] chnl_net:caif_netlink_parms(): no params data found [ 98.664921][ T9041] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.667059][ T9041] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.669131][ T9041] bridge_slave_0: entered allmulticast mode [ 98.671378][ T9041] bridge_slave_0: entered promiscuous mode [ 98.674675][ T9041] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.676756][ T9041] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.678828][ T9041] bridge_slave_1: entered allmulticast mode [ 98.680963][ T9041] bridge_slave_1: entered promiscuous mode [ 98.694277][ T6743] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.716934][ T9041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.720616][ T9041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.763885][ T9041] team0: Port device team_slave_0 added [ 98.770146][ T9041] team0: Port device team_slave_1 added [ 98.789415][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.793710][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.801934][ T9041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.807092][ T9041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.810375][ T9041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.818211][ T9041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.857503][ T9041] hsr_slave_0: entered promiscuous mode [ 98.859627][ T9041] hsr_slave_1: entered promiscuous mode [ 98.861565][ T9041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.863685][ T9041] Cannot create hsr debugfs directory [ 98.948335][ T6743] bridge_slave_1: left allmulticast mode [ 98.950934][ T6743] bridge_slave_1: left promiscuous mode [ 98.953470][ T6743] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.964761][ T6743] bridge_slave_0: left allmulticast mode [ 98.966646][ T6743] bridge_slave_0: left promiscuous mode [ 98.968439][ T6743] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.103585][ T6743] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 99.111458][ T42] Bluetooth: (null): Too short H5 packet [ 99.113260][ T42] Bluetooth: (null): Invalid header checksum [ 99.117286][ T42] Bluetooth: (null): Invalid header checksum [ 99.229122][ T6295] Bluetooth: (null): Invalid header checksum [ 99.317385][ T6743] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 99.321789][ T6743] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.326361][ T6743] bond0 (unregistering): (slave macvlan0): Releasing backup interface [ 99.329324][ T6743] veth1_vlan: left allmulticast mode [ 99.332593][ T6743] bond0 (unregistering): (slave team0): Releasing backup interface [ 99.340149][ T6743] bond0 (unregistering): Released all slaves [ 99.356576][ T6740] Bluetooth: (null): Invalid header checksum [ 99.435824][ T6743] tipc: Disabling bearer [ 99.441720][ T6743] tipc: Left network mode [ 99.474093][ T1178] Bluetooth: (null): Invalid header checksum [ 99.592979][ T69] Bluetooth: (null): Invalid header checksum [ 99.677632][ T5941] Bluetooth: hci0: command tx timeout [ 99.690407][ T6743] hsr_slave_0: left promiscuous mode [ 99.692493][ T6743] hsr_slave_1: left promiscuous mode [ 99.710985][ T6743] vlan1: left allmulticast mode [ 99.712411][ T6743] veth0_vlan: left allmulticast mode [ 99.714009][ T6743] vlan1: left promiscuous mode [ 99.715663][ T6743] veth1_macvtap: left promiscuous mode [ 99.717373][ T6743] veth0_macvtap: left promiscuous mode [ 99.718949][ T6743] veth1_vlan: left promiscuous mode [ 99.719984][ T1178] Bluetooth: (null): Invalid header checksum [ 99.720950][ T6743] veth0_vlan: left promiscuous mode [ 99.837586][ T1178] Bluetooth: (null): Invalid header checksum [ 100.232938][ T25] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 100.356373][ T6743] team0 (unregistering): Port device team_slave_1 removed [ 100.372317][ T25] usb 9-1: device descriptor read/64, error -71 [ 100.421602][ T6743] team0 (unregistering): Port device team_slave_0 removed [ 100.628630][ T25] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 100.781311][ T25] usb 9-1: device descriptor read/64, error -71 [ 100.896024][ T25] usb usb9-port1: attempt power cycle [ 101.088653][ T9041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.093179][ T39] kauditd_printk_skb: 7 callbacks suppressed [ 101.093187][ T39] audit: type=1400 audit(1736865282.621:91895): avc: denied { name_bind } for pid=9129 comm="syz.5.821" src=516 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hi_reserved_port_t tclass=udp_socket permissive=1 [ 101.104989][ T9041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.110525][ T9041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.113945][ T9041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.149888][ T9041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.162895][ T9041] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.165173][ T9136] syz.5.822: attempt to access beyond end of device [ 101.165173][ T9136] loop5: rw=0, sector=6, nr_sectors = 2 limit=0 [ 101.168197][ T1178] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.169609][ T9136] ADFS-fs (loop5): error: unable to read block 3, try 0 [ 101.170983][ T1178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.178392][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.180439][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.251124][ T5995] usb 6-1: new low-speed USB device number 8 using dummy_hcd [ 101.275108][ T9041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.280685][ T25] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 101.288600][ T9041] veth0_vlan: entered promiscuous mode [ 101.292726][ T9041] veth1_vlan: entered promiscuous mode [ 101.303689][ T25] usb 9-1: device descriptor read/8, error -71 [ 101.304880][ T9041] veth0_macvtap: entered promiscuous mode [ 101.308427][ T9041] veth1_macvtap: entered promiscuous mode [ 101.314024][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.317019][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.319786][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.322756][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.325665][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.328630][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.332389][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.335594][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.338571][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.341330][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.344304][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.347405][ T9041] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.350370][ T9041] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.353762][ T9041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.358438][ T9041] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.360934][ T9041] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.363403][ T9041] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.365900][ T9041] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.397297][ T1178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.399939][ T1178] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.413596][ T6740] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.415861][ T6740] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.428755][ T5995] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 101.431499][ T5995] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 101.433690][ T5995] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 101.436325][ T5995] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 101.439614][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 101.445739][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 101.449099][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 101.454284][ T5995] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 101.456878][ T5995] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 101.459178][ T5995] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 101.461991][ T5995] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 101.463945][ T9154] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9154 comm=syz.5.827 [ 101.465994][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 101.472158][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 101.475612][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 101.479218][ T5995] usb 6-1: config 246 has too many interfaces: 42, using maximum allowed: 32 [ 101.481724][ T5995] usb 6-1: config 246 descriptor has 1 excess byte, ignoring [ 101.484157][ T5995] usb 6-1: config 246 has 1 interface, different from the descriptor's value: 42 [ 101.487346][ T5995] usb 6-1: config 246 interface 0 altsetting 0 has an endpoint descriptor with address 0x3F, changing to 0xF [ 101.490671][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 77, setting to 8 [ 101.491903][ T9160] __nla_validate_parse: 10 callbacks suppressed [ 101.491912][ T9160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.828'. [ 101.493676][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 101.493691][ T5995] usb 6-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 101.496210][ T5995] usb 6-1: string descriptor 0 read error: -22 [ 101.506486][ T5995] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 101.509090][ T5995] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.514856][ T5995] adutux 6-1:246.0: ADU100 now attached to /dev/usb/adutux0 [ 101.569358][ T25] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 101.602220][ T25] usb 9-1: device descriptor read/8, error -71 [ 101.684642][ T39] audit: type=1400 audit(1736865283.173:91896): avc: denied { setcurrent } for pid=9169 comm="syz.2.830" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 101.690190][ T39] audit: type=1401 audit(1736865283.173:91897): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 101.715346][ T39] audit: type=1400 audit(1736865283.201:91898): avc: denied { accept } for pid=9171 comm="syz.2.831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.722603][ T39] audit: type=1400 audit(1736865283.201:91899): avc: denied { write } for pid=9171 comm="syz.2.831" path="socket:[28304]" dev="sockfs" ino=28304 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 101.729167][ T9115] IPv6: NLM_F_CREATE should be specified when creating new route [ 101.732195][ T25] usb usb9-port1: unable to enumerate USB device [ 101.872718][ T832] usb 6-1: USB disconnect, device number 8 [ 101.900763][ T5941] Bluetooth: hci0: command tx timeout [ 102.497119][ T9195] netlink: 24 bytes leftover after parsing attributes in process `syz.1.838'. [ 102.832398][ T9227] netlink: 24 bytes leftover after parsing attributes in process `syz.1.847'. [ 102.868116][ T9239] tipc: Enabling of bearer rejected, already enabled [ 102.870586][ T9240] tipc: Enabling of bearer rejected, already enabled [ 102.909987][ T9241] openvswitch: netlink: IPv4 tun info is not correct [ 103.086029][ T9255] cgroup2: Unknown parameter 'euid' [ 103.129074][ T9257] netlink: 40 bytes leftover after parsing attributes in process `syz.1.853'. [ 103.218101][ T9261] FAULT_INJECTION: forcing a failure. [ 103.218101][ T9261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.222037][ T9261] CPU: 1 UID: 0 PID: 9261 Comm: syz.4.855 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 103.225055][ T9261] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.228145][ T9261] Call Trace: [ 103.229132][ T9261] [ 103.230037][ T9261] dump_stack_lvl+0x16c/0x1f0 [ 103.231418][ T9261] should_fail_ex+0x497/0x5b0 [ 103.232794][ T9261] _copy_from_user+0x2e/0xd0 [ 103.234141][ T9261] kstrtouint_from_user+0xd7/0x1c0 [ 103.235543][ T9261] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 103.237198][ T9261] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 103.238796][ T9261] proc_fail_nth_write+0x84/0x250 [ 103.240206][ T9261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.241824][ T9261] ? ksys_write+0x12b/0x250 [ 103.243112][ T9261] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 103.244667][ T9261] vfs_write+0x24c/0x1150 [ 103.245971][ T9261] ? __fget_files+0x1fc/0x3a0 [ 103.247333][ T9261] ? __pfx___mutex_lock+0x10/0x10 [ 103.248761][ T9261] ? __pfx_vfs_write+0x10/0x10 [ 103.250115][ T9261] ? __fget_files+0x206/0x3a0 [ 103.251473][ T9261] ksys_write+0x12b/0x250 [ 103.252722][ T9261] ? __pfx_ksys_write+0x10/0x10 [ 103.254133][ T9261] do_syscall_64+0xcd/0x250 [ 103.255450][ T9261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.257166][ T9261] RIP: 0033:0x7f69187847df [ 103.258478][ T9261] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 103.263984][ T9261] RSP: 002b:00007f691958e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 103.266409][ T9261] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f69187847df [ 103.268691][ T9261] RDX: 0000000000000001 RSI: 00007f691958e0a0 RDI: 0000000000000003 [ 103.270997][ T9261] RBP: 00007f691958e090 R08: 0000000000000000 R09: 0000000000000000 [ 103.273269][ T9261] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 103.275551][ T9261] R13: 0000000000000000 R14: 00007f6918975fa0 R15: 00007ffc959d9df8 [ 103.277841][ T9261] [ 103.278806][ C1] vkms_vblank_simulate: vblank timer overrun [ 103.308949][ T39] audit: type=1400 audit(1736865284.698:91900): avc: denied { ioctl } for pid=9265 comm="syz.4.856" path="socket:[25592]" dev="sockfs" ino=25592 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 103.309476][ T9266] netlink: 'syz.4.856': attribute type 3 has an invalid length. [ 103.318461][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.4.856'. [ 103.366849][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.4.857'. [ 103.631191][ T39] audit: type=1400 audit(1736865284.997:91901): avc: denied { read } for pid=9279 comm="syz.2.860" path="socket:[29706]" dev="sockfs" ino=29706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 103.689627][ T9281] netlink: 8 bytes leftover after parsing attributes in process `syz.2.860'. [ 103.815147][ T9292] delete_channel: no stack [ 103.816343][ T39] audit: type=1400 audit(1736865285.165:91902): avc: denied { view } for pid=9292 comm="syz.4.863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 103.825805][ T39] audit: type=1400 audit(1736865285.165:91903): avc: denied { setopt } for pid=9292 comm="syz.4.863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 103.841963][ T9297] qrtr: Invalid version 0 [ 103.928027][ T9306] netlink: 24 bytes leftover after parsing attributes in process `syz.4.866'. [ 103.964146][ T9312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 103.973129][ T9312] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.092306][ T9317] netlink: 'syz.4.870': attribute type 10 has an invalid length. [ 104.095183][ T9317] bridge0: left allmulticast mode [ 104.096934][ T39] audit: type=1400 audit(1736865285.436:91904): avc: denied { setopt } for pid=9318 comm="syz.1.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 104.098097][ T9317] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.104685][ T9317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.107272][ T9317] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.109267][ T9317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.112728][ T9317] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 104.117943][ T9317] netlink: 4 bytes leftover after parsing attributes in process `syz.4.870'. [ 104.121196][ T9317] bridge_slave_1: left allmulticast mode [ 104.123027][ T9317] bridge_slave_1: left promiscuous mode [ 104.125092][ T9317] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.132988][ T9317] bridge_slave_0: left allmulticast mode [ 104.134621][ T9317] bridge_slave_0: left promiscuous mode [ 104.136266][ T5941] Bluetooth: hci0: command tx timeout [ 104.138317][ T9317] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.151114][ T9317] bond0: (slave bridge0): Releasing backup interface [ 104.277094][ T9316] delete_channel: no stack [ 104.451762][ T9349] netlink: 24 bytes leftover after parsing attributes in process `syz.4.878'. [ 104.615290][ T9359] bridge0: entered promiscuous mode [ 104.617859][ T9359] macvlan3: entered promiscuous mode [ 104.620131][ T9359] bridge0: port 3(macvlan3) entered blocking state [ 104.627583][ T9359] bridge0: port 3(macvlan3) entered disabled state [ 104.629763][ T9359] macvlan3: entered allmulticast mode [ 104.631502][ T9359] bridge0: entered allmulticast mode [ 104.639440][ T9359] macvlan3: left allmulticast mode [ 104.641039][ T9359] bridge0: left allmulticast mode [ 104.643361][ T9359] bridge0: left promiscuous mode [ 105.333434][ T9387] vlan2: entered allmulticast mode [ 105.781405][ T6188] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 105.952428][ T6188] usb 9-1: Using ep0 maxpacket: 8 [ 105.959245][ T6188] usb 9-1: config 2 interface 0 has no altsetting 0 [ 105.963804][ T6188] usb 9-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 105.966398][ T6188] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.968649][ T6188] usb 9-1: Product: syz [ 105.969833][ T6188] usb 9-1: Manufacturer: syz [ 105.971162][ T6188] usb 9-1: SerialNumber: syz [ 106.063487][ T832] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 106.197690][ T6188] usb 9-1: USB disconnect, device number 7 [ 106.231015][ T832] usb 10-1: Using ep0 maxpacket: 8 [ 106.237260][ T832] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 106.239757][ T832] usb 10-1: config 0 has no interface number 0 [ 106.241669][ T832] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 106.244720][ T832] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 106.247206][ T832] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.253627][ T832] usb 10-1: config 0 descriptor?? [ 106.262337][ T832] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 106.319114][ T9406] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 106.348883][ T5941] Bluetooth: hci0: command tx timeout [ 106.590649][ T25] usb 10-1: USB disconnect, device number 2 [ 106.778393][ T9445] program syz.4.908 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 106.929329][ T9450] __nla_validate_parse: 5 callbacks suppressed [ 106.929339][ T9450] netlink: 24 bytes leftover after parsing attributes in process `syz.4.909'. [ 107.052117][ T9459] ata1.00: invalid cdb length 6 [ 107.088928][ T39] kauditd_printk_skb: 6 callbacks suppressed [ 107.088937][ T39] audit: type=1400 audit(1736865288.233:91911): avc: denied { ioctl } for pid=9463 comm="syz.1.912" path="/232/file0/file0" dev="9p" ino=37618206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 107.206701][ T9482] netlink: 24 bytes leftover after parsing attributes in process `syz.5.920'. [ 107.256141][ T9492] syz.5.922: attempt to access beyond end of device [ 107.256141][ T9492] loop5: rw=0, sector=64, nr_sectors = 1 limit=0 [ 107.260210][ T9492] syz.5.922: attempt to access beyond end of device [ 107.260210][ T9492] loop5: rw=0, sector=256, nr_sectors = 1 limit=0 [ 107.263448][ T39] audit: type=1400 audit(1736865288.392:91912): avc: denied { mount } for pid=9494 comm="syz.4.923" name="/" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.263781][ T9492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 107.264435][ T9492] syz.5.922: attempt to access beyond end of device [ 107.264435][ T9492] loop5: rw=0, sector=512, nr_sectors = 1 limit=0 [ 107.265973][ T9495] overlayfs: invalid redirect ((null)) [ 107.272221][ T39] audit: type=1400 audit(1736865288.392:91913): avc: denied { search } for pid=9494 comm="syz.4.923" name="/" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.273674][ T9492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 107.277597][ T39] audit: type=1400 audit(1736865288.392:91914): avc: denied { mounton } for pid=9494 comm="syz.4.923" path="/" dev="configfs" ino=3084 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 107.280440][ T9492] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 107.297336][ T9492] UDF-fs: Scanning with blocksize 512 failed [ 107.299342][ T9492] syz.5.922: attempt to access beyond end of device [ 107.299342][ T9492] loop5: rw=0, sector=64, nr_sectors = 2 limit=0 [ 107.299526][ T39] audit: type=1400 audit(1736865288.420:91915): avc: denied { unmount } for pid=6859 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 107.302961][ T9492] syz.5.922: attempt to access beyond end of device [ 107.302961][ T9492] loop5: rw=0, sector=512, nr_sectors = 2 limit=0 [ 107.313537][ T9492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 107.316225][ T9492] syz.5.922: attempt to access beyond end of device [ 107.316225][ T9492] loop5: rw=0, sector=1024, nr_sectors = 2 limit=0 [ 107.319731][ T9492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 107.322412][ T9492] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 107.324494][ T9492] UDF-fs: Scanning with blocksize 1024 failed [ 107.326444][ T9492] syz.5.922: attempt to access beyond end of device [ 107.326444][ T9492] loop5: rw=0, sector=64, nr_sectors = 4 limit=0 [ 107.330146][ T9492] syz.5.922: attempt to access beyond end of device [ 107.330146][ T9492] loop5: rw=0, sector=1024, nr_sectors = 4 limit=0 [ 107.333960][ T9492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 107.336738][ T9492] syz.5.922: attempt to access beyond end of device [ 107.336738][ T9492] loop5: rw=0, sector=2048, nr_sectors = 4 limit=0 [ 107.340299][ T9492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 107.344237][ T9492] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 107.346755][ T9492] UDF-fs: Scanning with blocksize 2048 failed [ 107.349349][ T9492] syz.5.922: attempt to access beyond end of device [ 107.349349][ T9492] loop5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 107.353144][ T9492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 107.355894][ T9492] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 107.358541][ T9492] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 107.360632][ T9492] UDF-fs: Scanning with blocksize 4096 failed [ 107.362313][ T9492] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 107.381703][ T9502] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.384522][ T39] audit: type=1400 audit(1736865288.505:91916): avc: denied { ioctl } for pid=9501 comm="syz.4.926" path="/dev/ndctl0" dev="devtmpfs" ino=109 ioctlcmd=0x640a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 107.393721][ T9502] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 107.472425][ T39] audit: type=1400 audit(1736865288.579:91917): avc: denied { getopt } for pid=9511 comm="syz.5.929" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 107.527320][ T9521] netlink: 188 bytes leftover after parsing attributes in process `syz.4.932'. [ 107.531711][ T9523] netlink: 24 bytes leftover after parsing attributes in process `syz.5.931'. [ 107.569508][ T9528] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.616895][ T9528] netlink: 76 bytes leftover after parsing attributes in process `syz.5.934'. [ 107.623743][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz.1.935'. [ 107.641145][ T39] audit: type=1400 audit(1736865288.748:91918): avc: denied { accept } for pid=9534 comm="syz.1.935" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 107.715292][ T39] audit: type=1400 audit(1736865288.813:91919): avc: denied { create } for pid=9546 comm="syz.2.939" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 107.732197][ T9549] openvswitch: netlink: nsh attr 0 has unexpected len 96 expected 0 [ 107.733526][ T9551] netlink: 12 bytes leftover after parsing attributes in process `syz.4.941'. [ 107.738279][ T9549] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.741739][ T9549] xt_hashlimit: size too large, truncated to 1048576 [ 107.755093][ T9554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.942'. [ 107.761301][ T39] audit: type=1400 audit(1736865288.860:91920): avc: denied { map } for pid=9556 comm="syz.5.943" path="socket:[30920]" dev="sockfs" ino=30920 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 107.761350][ T9551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.780725][ T9551] 8021q: adding VLAN 0 to HW filter on device bond1 [ 107.782761][ T9551] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address [ 107.786110][ T9551] bond1: (slave wireguard0): Error -95 calling set_mac_address [ 107.808559][ T9566] netlink: 8 bytes leftover after parsing attributes in process `syz.2.945'. [ 107.811923][ T9566] netlink: 24 bytes leftover after parsing attributes in process `syz.2.945'. [ 107.859423][ T9567] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=514 sclass=netlink_route_socket pid=9567 comm=syz.4.941 [ 107.975172][ T9572] ipvlan2: entered promiscuous mode [ 108.760727][ T9589] No such timeout policy "syz0" [ 108.797045][ T5941] Bluetooth: hci2: unexpected event 0x06 length: 11 > 3 [ 109.050088][ T9602] netlink: 'syz.1.955': attribute type 1 has an invalid length. [ 109.110793][ T9607] mkiss: ax0: crc mode is auto. [ 109.138244][ T57] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 109.298611][ T57] usb 7-1: Using ep0 maxpacket: 8 [ 109.301182][ T57] usb 7-1: config 0 has an invalid interface number: 52 but max is 0 [ 109.303482][ T57] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 109.306273][ T57] usb 7-1: config 0 has no interface number 0 [ 109.307981][ T57] usb 7-1: config 0 interface 52 altsetting 1 has an endpoint descriptor with address 0xFB, changing to 0x8B [ 109.312345][ T57] usb 7-1: config 0 interface 52 altsetting 1 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 109.315408][ T57] usb 7-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 109.319010][ T57] usb 7-1: config 0 interface 52 has no altsetting 0 [ 109.322110][ T57] usb 7-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00 [ 109.324628][ T57] usb 7-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35 [ 109.326950][ T57] usb 7-1: Product: syz [ 109.328139][ T57] usb 7-1: SerialNumber: syz [ 109.331885][ T57] usb 7-1: config 0 descriptor?? [ 109.555512][ T57] input: syz (Stick) as /devices/platform/dummy_hcd.2/usb7/7-1/7-1:0.52/input/input10 [ 109.710644][ T9636] input: syz1 as /devices/virtual/input/input11 [ 109.735063][ T9633] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.826544][ T9642] program syz.5.968 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.847744][ T6188] usb 7-1: USB disconnect, device number 12 [ 109.919941][ T9590] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 110.577293][ T9674] netlink: 'syz.1.977': attribute type 10 has an invalid length. [ 110.649225][ T9683] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 110.690761][ T9691] bond0: entered promiscuous mode [ 110.692219][ T9691] bond_slave_0: entered promiscuous mode [ 110.693873][ T9691] bond_slave_1: entered promiscuous mode [ 110.852190][ T9713] netlink: 'syz.2.991': attribute type 10 has an invalid length. [ 110.854940][ T9713] syz_tun: entered promiscuous mode [ 110.858576][ T9713] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 110.895807][ T9720] CUSE: zero length info key specified [ 110.959200][ T9723] Bluetooth: MGMT ver 1.23 [ 110.964094][ T9723] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.022913][ T9723] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.075460][ T9723] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.118478][ T9723] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.171025][ T9723] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.176440][ T9723] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.181461][ T9723] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.186666][ T9723] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.447710][ T9730] 8021q: VLANs not supported on ipvlan0 [ 111.714819][ T9741] overlay: ./file0 is not a directory [ 111.971240][ T832] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 112.143938][ T832] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 112.148348][ T832] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 112.152341][ T832] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 112.155934][ T832] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 112.160696][ T9743] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 112.167517][ T832] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 112.379558][ T9743] overlay: Unknown parameter 'uid' [ 112.572005][ T39] kauditd_printk_skb: 13 callbacks suppressed [ 112.572015][ T39] audit: type=1400 audit(1736865293.359:91934): avc: denied { accept } for pid=9745 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.581315][ T39] audit: type=1400 audit(1736865293.359:91935): avc: denied { listen } for pid=9745 comm="syz.2.1003" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 112.604209][ T9749] __nla_validate_parse: 143 callbacks suppressed [ 112.604219][ T9749] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1004'. [ 112.609349][ T9749] CUSE: zero length info key specified [ 112.790344][ T9757] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1006'. [ 112.818418][ T9760] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1007'. [ 112.850975][ T39] audit: type=1400 audit(1736865293.621:91936): avc: denied { bind } for pid=9761 comm="syz.2.1008" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 112.913134][ T39] audit: type=1400 audit(1736865293.687:91937): avc: denied { write } for pid=9767 comm="syz.2.1010" path="socket:[32393]" dev="sockfs" ino=32393 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 112.920193][ T9768] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1010'. [ 113.112508][ T9782] (syz.2.1014,9782,3):ocfs2_fill_super:990 ERROR: superblock probe failed! [ 113.115283][ T9782] (syz.2.1014,9782,3):ocfs2_fill_super:1178 ERROR: status = -22 [ 113.122857][ T9782] pim6reg1: entered promiscuous mode [ 113.124422][ T9782] pim6reg1: entered allmulticast mode [ 113.127709][ T9782] program syz.2.1014 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 113.440113][ T9792] xt_HMARK: spi-set and port-set can't be combined [ 113.510887][ T9795] netlink: 'syz.2.1018': attribute type 10 has an invalid length. [ 113.518304][ T9795] veth0_vlan: left promiscuous mode [ 113.523379][ T9795] veth0_vlan: entered promiscuous mode [ 113.526589][ T9795] team0: Device veth0_vlan failed to register rx_handler [ 113.617664][ T5939] Bluetooth: hci4: command 0x1003 tx timeout [ 113.620795][ T5941] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 113.704348][ T1116] sr 2:0:0:0: [sr0] tag#15 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 113.708123][ T1116] sr 2:0:0:0: [sr0] tag#15 Sense Key : Illegal Request [current] [ 113.710405][ T1116] sr 2:0:0:0: [sr0] tag#15 Add. Sense: Invalid command operation code [ 113.712761][ T1116] sr 2:0:0:0: [sr0] tag#15 CDB: Write(10) 2a 00 00 00 00 00 00 00 02 00 [ 113.715529][ T1116] blk_print_req_error: 65 callbacks suppressed [ 113.715538][ T1116] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x208800 phys_seg 1 prio class 0 [ 113.731720][ T39] audit: type=1400 audit(1736865294.444:91938): avc: denied { unmount } for pid=9041 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 113.803034][ T5995] usb 6-1: USB disconnect, device number 9 [ 113.880635][ T9808] ubi0: attaching mtd0 [ 113.884633][ T9809] IPv6: addrconf: prefix option has invalid lifetime [ 113.889864][ T9808] ubi0: scanning is finished [ 113.891326][ T9808] ubi0: empty MTD device detected [ 113.973567][ T9808] ubi0 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt0d", error -4 [ 114.006642][ T39] audit: type=1400 audit(1736865294.706:91939): avc: denied { getopt } for pid=9816 comm="syz.2.1026" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 114.137652][ T6173] IPVS: starting estimator thread 0... [ 114.139472][ T9826] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 114.151263][ T9831] Cannot find del_set index 128 as target [ 114.230433][ T39] audit: type=1400 audit(1736865294.912:91940): avc: denied { setattr } for pid=9834 comm="syz.2.1031" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 114.248405][ T9827] IPVS: using max 41 ests per chain, 98400 per kthread [ 114.255521][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1030'. [ 114.521266][ T9866] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1039'. [ 114.552291][ T39] audit: type=1400 audit(1736865295.211:91941): avc: denied { append } for pid=9867 comm="syz.2.1041" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 114.554969][ T9868] netlink: 'syz.2.1041': attribute type 1 has an invalid length. [ 114.561338][ T9868] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.1041'. [ 114.593779][ T9871] overlay: filesystem on ./bus not supported as upperdir [ 114.793674][ T6173] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 114.848792][ T9873] Illegal XDP return value 268435456 on prog (id 152) dev syz_tun, expect packet loss! [ 114.976901][ T6173] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 114.979396][ T6173] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 114.982291][ T6173] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 114.984814][ T6173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 114.987977][ T6173] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 114.992272][ T6173] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 114.994820][ T6173] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 114.997211][ T6173] usb 6-1: Product: syz [ 114.998413][ T6173] usb 6-1: Manufacturer: syz [ 115.001878][ T6173] cdc_wdm 6-1:1.0: skipping garbage [ 115.003419][ T6173] cdc_wdm 6-1:1.0: skipping garbage [ 115.005383][ T6173] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 115.007143][ T6173] cdc_wdm 6-1:1.0: Unknown control protocol [ 115.141755][ T9876] Cannot find del_set index 4 as target [ 115.219132][ T9866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 115.222183][ T9866] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.225923][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 115.251809][ T39] audit: type=1326 audit(1736865295.866:91942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f72c6785d29 code=0x7ffc0000 [ 115.260267][ T39] audit: type=1326 audit(1736865295.866:91943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9878 comm="syz.5.1045" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f72c6785d29 code=0x7ffc0000 [ 115.451451][ C0] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 115.451588][ T9422] usb 6-1: USB disconnect, device number 10 [ 115.453369][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 115.456895][ C0] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 115.548301][ T9900] 9pnet_virtio: no channels available for device syz [ 116.235295][ T9905] netlink: 344 bytes leftover after parsing attributes in process `syz.1.1052'. [ 116.386045][ T9917] sp0: Synchronizing with TNC [ 116.649693][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1061'. [ 116.674023][ T9934] netlink: 'syz.5.1062': attribute type 9 has an invalid length. [ 116.676448][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1062'. [ 116.714921][ T9936] mkiss: ax0: crc mode is auto. [ 117.341518][ T9976] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 117.343347][ T9976] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 117.345391][ T9976] vhci_hcd vhci_hcd.0: Device attached [ 117.428345][ T9969] binfmt_misc: register: failed to install interpreter file ./file0 [ 117.531035][ T5995] vhci_hcd: vhci_device speed not set [ 117.594616][ T5995] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 117.617573][ T5994] usb 9-1: new low-speed USB device number 8 using dummy_hcd [ 117.788101][ T5994] usb 9-1: config 0 has no interfaces? [ 117.789753][ T5994] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 117.792304][ T5994] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.795415][ T5994] usb 9-1: config 0 descriptor?? [ 117.883466][ T9986] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 117.981713][ T9991] __nla_validate_parse: 37 callbacks suppressed [ 117.981724][ T9991] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1081'. [ 117.987127][ T9993] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1081'. [ 118.015043][ T39] kauditd_printk_skb: 107 callbacks suppressed [ 118.015052][ T39] audit: type=1400 audit(1736865298.457:92051): avc: denied { accept } for pid=9975 comm="syz.4.1076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 118.040823][T10011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1086'. [ 118.043570][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1086'. [ 118.173624][ T5977] usb 9-1: USB disconnect, device number 8 [ 118.176593][ T9977] vhci_hcd: connection reset by peer [ 118.179128][ T6743] vhci_hcd: stop threads [ 118.180404][ T6743] vhci_hcd: release socket [ 118.186018][ T6743] vhci_hcd: disconnect device [ 118.213315][T10020] program syz.5.1089 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 118.221894][T10022] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1090'. [ 118.224716][T10022] bond0: option ad_select: unable to set because the bond device is up [ 118.273326][T10033] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1089'. [ 118.287735][T10020] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 118.289117][ T25] [ 118.290879][ T25] ====================================================== [ 118.292851][ T25] WARNING: possible circular locking dependency detected [ 118.294832][ T25] 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 Not tainted [ 118.297342][ T25] ------------------------------------------------------ [ 118.300051][ T25] kworker/2:0/25 is trying to acquire lock: [ 118.301727][ T25] ffff888026a40aa8 (&q->q_usage_counter(queue)#51){++++}-{0:0}, at: blk_mq_alloc_request+0x59b/0x950 [ 118.304789][ T25] [ 118.304789][ T25] but task is already holding lock: [ 118.306848][ T25] ffff888026a410c0 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 118.309703][ T25] [ 118.309703][ T25] which lock already depends on the new lock. [ 118.309703][ T25] [ 118.312500][ T25] [ 118.312500][ T25] the existing dependency chain (in reverse order) is: [ 118.314939][ T25] [ 118.314939][ T25] -> #5 (&q->limits_lock){+.+.}-{4:4}: [ 118.317042][ T25] __mutex_lock+0x19b/0xa60 [ 118.318477][ T25] __nbd_set_size+0x2c0/0x730 [ 118.319924][ T25] nbd_start_device+0x8fd/0xd70 [ 118.321394][ T25] nbd_ioctl+0x21a/0xfd0 [ 118.322712][ T25] blkdev_ioctl+0x276/0x6d0 [ 118.324128][ T25] __x64_sys_ioctl+0x190/0x200 [ 118.325609][ T25] do_syscall_64+0xcd/0x250 [ 118.326991][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.328784][ T25] [ 118.328784][ T25] -> #4 (&q->q_usage_counter(io)#54){++++}-{0:0}: [ 118.331141][ T25] __bio_queue_enter+0x4c6/0x740 [ 118.332639][ T25] blk_mq_submit_bio+0x7ca/0x24c0 [ 118.334150][ T25] __submit_bio+0x384/0x540 [ 118.335548][ T25] submit_bio_noacct_nocheck+0x698/0xd70 [ 118.337243][ T25] submit_bio_noacct+0x93a/0x1e20 [ 118.338773][ T25] mpage_readahead+0x41d/0x590 [ 118.340255][ T25] read_pages+0x1a8/0xdc0 [ 118.341651][ T25] page_cache_ra_unbounded+0x3dc/0x750 [ 118.343398][ T25] page_cache_sync_ra+0x8bd/0x9c0 [ 118.344914][ T25] filemap_get_pages+0xd7b/0x1be0 [ 118.346433][ T25] filemap_read+0x3ca/0xd70 [ 118.347836][ T25] blkdev_read_iter+0x187/0x480 [ 118.349406][ T25] do_iter_readv_writev+0x614/0x7f0 [ 118.350968][ T25] vfs_readv+0x4cf/0x890 [ 118.352280][ T25] do_preadv+0x1b1/0x270 [ 118.353632][ T25] do_syscall_64+0xcd/0x250 [ 118.355061][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.356819][ T25] [ 118.356819][ T25] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 118.359161][ T25] down_read+0x9a/0x330 [ 118.360468][ T25] filemap_fault+0x62c/0x2820 [ 118.361922][ T25] __do_fault+0x10a/0x490 [ 118.363275][ T25] do_pte_missing+0xebd/0x3e00 [ 118.364763][ T25] __handle_mm_fault+0x103c/0x2a40 [ 118.366305][ T25] handle_mm_fault+0x3fa/0xaa0 [ 118.367761][ T25] __get_user_pages+0x8d9/0x3b50 [ 118.369325][ T25] populate_vma_page_range+0x27f/0x3a0 [ 118.370981][ T25] __mm_populate+0x1d6/0x380 [ 118.372425][ T25] do_mlock+0x40a/0x7d0 [ 118.373929][ T25] __x64_sys_mlock+0x59/0x80 [ 118.375347][ T25] do_syscall_64+0xcd/0x250 [ 118.376762][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.378527][ T25] [ 118.378527][ T25] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 118.380600][ T25] __might_fault+0x11b/0x190 [ 118.381993][ T25] _copy_from_user+0x29/0xd0 [ 118.383390][ T25] __blk_trace_setup+0xa8/0x180 [ 118.384839][ T25] blk_trace_setup+0x47/0x70 [ 118.386256][ T25] sg_ioctl+0x65e/0x2750 [ 118.387568][ T25] __x64_sys_ioctl+0x190/0x200 [ 118.389165][ T25] do_syscall_64+0xcd/0x250 [ 118.390588][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.392350][ T25] [ 118.392350][ T25] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 118.394481][ T25] __mutex_lock+0x19b/0xa60 [ 118.395868][ T25] blk_mq_init_sched+0x42b/0x640 [ 118.397342][ T25] elevator_init_mq+0x2cd/0x420 [ 118.398811][ T25] add_disk_fwnode+0x113/0x1300 [ 118.400282][ T25] sd_probe+0xa86/0x1000 [ 118.401611][ T25] really_probe+0x23e/0xa90 [ 118.402995][ T25] __driver_probe_device+0x1de/0x440 [ 118.404618][ T25] driver_probe_device+0x4c/0x1b0 [ 118.406151][ T25] __device_attach_driver+0x1df/0x310 [ 118.407805][ T25] bus_for_each_drv+0x157/0x1e0 [ 118.409331][ T25] __device_attach_async_helper+0x1d3/0x290 [ 118.411090][ T25] async_run_entry_fn+0x9c/0x530 [ 118.412627][ T25] process_one_work+0x9c5/0x1ba0 [ 118.414136][ T25] worker_thread+0x6c8/0xf00 [ 118.415549][ T25] kthread+0x2c1/0x3a0 [ 118.416837][ T25] ret_from_fork+0x45/0x80 [ 118.418256][ T25] ret_from_fork_asm+0x1a/0x30 [ 118.419721][ T25] [ 118.419721][ T25] -> #0 (&q->q_usage_counter(queue)#51){++++}-{0:0}: [ 118.422155][ T25] __lock_acquire+0x249e/0x3c40 [ 118.423612][ T25] lock_acquire.part.0+0x11b/0x380 [ 118.425142][ T25] blk_queue_enter+0x50f/0x640 [ 118.426606][ T25] blk_mq_alloc_request+0x59b/0x950 [ 118.428194][ T25] scsi_execute_cmd+0x1eb/0xf40 [ 118.429694][ T25] read_capacity_16+0x213/0xe10 [ 118.431179][ T25] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 118.432939][ T25] scsi_rescan_device+0x243/0x340 [ 118.434489][ T25] ata_scsi_dev_rescan+0x1cb/0x470 [ 118.436037][ T25] process_one_work+0x9c5/0x1ba0 [ 118.437664][ T25] worker_thread+0x6c8/0xf00 [ 118.439079][ T25] kthread+0x2c1/0x3a0 [ 118.440364][ T25] ret_from_fork+0x45/0x80 [ 118.441750][ T25] ret_from_fork_asm+0x1a/0x30 [ 118.443229][ T25] [ 118.443229][ T25] other info that might help us debug this: [ 118.443229][ T25] [ 118.446018][ T25] Chain exists of: [ 118.446018][ T25] &q->q_usage_counter(queue)#51 --> &q->q_usage_counter(io)#54 --> &q->limits_lock [ 118.446018][ T25] [ 118.450162][ T25] Possible unsafe locking scenario: [ 118.450162][ T25] [ 118.452230][ T25] CPU0 CPU1 [ 118.453751][ T25] ---- ---- [ 118.455281][ T25] lock(&q->limits_lock); [ 118.456569][ T25] lock(&q->q_usage_counter(io)#54); [ 118.458803][ T25] lock(&q->limits_lock); [ 118.460700][ T25] rlock(&q->q_usage_counter(queue)#51); [ 118.462297][ T25] [ 118.462297][ T25] *** DEADLOCK *** [ 118.462297][ T25] [ 118.464581][ T25] 5 locks held by kworker/2:0/25: [ 118.466038][ T25] #0: ffff88801b088948 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 118.469023][ T25] #1: ffffc9000063fd80 ((work_completion)(&(&ap->scsi_rescan_task)->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 118.472543][ T25] #2: ffff888026f84358 (&ap->scsi_scan_mutex){+.+.}-{4:4}, at: ata_scsi_dev_rescan+0x3e/0x470 [ 118.475380][ T25] #3: ffff88810767c378 (&dev->mutex){....}-{4:4}, at: scsi_rescan_device+0x27/0x340 [ 118.478071][ T25] #4: ffff888026a410c0 (&q->limits_lock){+.+.}-{4:4}, at: sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 118.481054][ T25] [ 118.481054][ T25] stack backtrace: [ 118.482744][ T25] CPU: 2 UID: 0 PID: 25 Comm: kworker/2:0 Not tainted 6.13.0-rc7-syzkaller-00019-gc45323b7560e #0 [ 118.485642][ T25] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 118.488732][ T25] Workqueue: events ata_scsi_dev_rescan [ 118.490319][ T25] Call Trace: [ 118.491279][ T25] [ 118.492122][ T25] dump_stack_lvl+0x116/0x1f0 [ 118.493477][ T25] print_circular_bug+0x419/0x5d0 [ 118.494899][ T25] check_noncircular+0x31a/0x400 [ 118.496252][ T25] ? __pfx_check_noncircular+0x10/0x10 [ 118.497772][ T25] ? lockdep_lock+0xc6/0x200 [ 118.499102][ T25] ? __pfx_lockdep_lock+0x10/0x10 [ 118.500550][ T25] __lock_acquire+0x249e/0x3c40 [ 118.501948][ T25] ? __pfx___lock_acquire+0x10/0x10 [ 118.503432][ T25] lock_acquire.part.0+0x11b/0x380 [ 118.504891][ T25] ? blk_mq_alloc_request+0x59b/0x950 [ 118.506386][ T25] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 118.507936][ T25] ? rcu_is_watching+0x12/0xc0 [ 118.509347][ T25] ? trace_lock_acquire+0x14e/0x1f0 [ 118.510844][ T25] ? blk_mq_alloc_request+0x59b/0x950 [ 118.512415][ T25] ? lock_acquire+0x2f/0xb0 [ 118.513752][ T25] ? blk_mq_alloc_request+0x59b/0x950 [ 118.515313][ T25] blk_queue_enter+0x50f/0x640 [ 118.516695][ T25] ? blk_mq_alloc_request+0x59b/0x950 [ 118.518202][ T25] ? __pfx_blk_queue_enter+0x10/0x10 [ 118.519655][ T25] ? save_trace+0x53/0xb60 [ 118.520911][ T25] ? lockdep_lock+0xc6/0x200 [ 118.522254][ T25] ? add_lock_to_list+0x17d/0x390 [ 118.523700][ T25] blk_mq_alloc_request+0x59b/0x950 [ 118.525187][ T25] ? __pfx_blk_mq_alloc_request+0x10/0x10 [ 118.526823][ T25] ? __pfx___lock_acquire+0x10/0x10 [ 118.528343][ T25] ? find_held_lock+0x2d/0x110 [ 118.529655][ T25] scsi_execute_cmd+0x1eb/0xf40 [ 118.531026][ T25] ? lock_acquire.part.0+0x11b/0x380 [ 118.532534][ T25] ? __pfx_scsi_execute_cmd+0x10/0x10 [ 118.534059][ T25] ? sd_revalidate_disk.isra.0+0x52c/0xa8d0 [ 118.535739][ T25] read_capacity_16+0x213/0xe10 [ 118.537128][ T25] ? __pfx_read_capacity_16+0x10/0x10 [ 118.538658][ T25] ? __pfx___mutex_lock+0x10/0x10 [ 118.540041][ T25] sd_revalidate_disk.isra.0+0x1a06/0xa8d0 [ 118.541655][ T25] ? mark_held_locks+0x9f/0xe0 [ 118.542985][ T25] ? __pfx_sd_revalidate_disk.isra.0+0x10/0x10 [ 118.544684][ T25] ? kasan_save_stack+0x33/0x60 [ 118.546058][ T25] ? kasan_save_track+0x14/0x30 [ 118.547405][ T25] ? kasan_save_free_info+0x3b/0x60 [ 118.548889][ T25] ? __kasan_slab_free+0x51/0x70 [ 118.550305][ T25] ? kfree+0x14f/0x4b0 [ 118.551490][ T25] ? scsi_attach_vpd+0x4dc/0x580 [ 118.552891][ T25] ? scsi_rescan_device+0xf5/0x340 [ 118.554340][ T25] ? ata_scsi_dev_rescan+0x1cb/0x470 [ 118.555796][ T25] ? process_one_work+0x9c5/0x1ba0 [ 118.557205][ T25] ? worker_thread+0x6c8/0xf00 [ 118.558584][ T25] ? kthread+0x2c1/0x3a0 [ 118.559748][ T25] ? hlock_class+0x4e/0x130 [ 118.561018][ T25] ? mark_lock+0xb5/0xc60 [ 118.562233][ T25] ? mark_held_locks+0x9f/0xe0 [ 118.563577][ T25] ? kasan_quarantine_put+0x10a/0x240 [ 118.565065][ T25] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.566533][ T25] ? kfree+0x14f/0x4b0 [ 118.567667][ T25] ? lockdep_hardirqs_on+0x7c/0x110 [ 118.569164][ T25] ? scsi_attach_vpd+0x4dc/0x580 [ 118.570557][ T25] ? scsi_attach_vpd+0x4dc/0x580 [ 118.571924][ T25] ? __pfx_sd_rescan+0x10/0x10 [ 118.573221][ T25] scsi_rescan_device+0x243/0x340 [ 118.574621][ T25] ata_scsi_dev_rescan+0x1cb/0x470 [ 118.576048][ T25] process_one_work+0x9c5/0x1ba0 [ 118.577421][ T25] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 118.578968][ T25] ? __pfx_process_one_work+0x10/0x10 [ 118.580447][ T25] ? rcu_is_watching+0x12/0xc0 [ 118.581776][ T25] ? assign_work+0x1a0/0x250 [ 118.583069][ T25] worker_thread+0x6c8/0xf00 [ 118.584380][ T25] ? __pfx_worker_thread+0x10/0x10 [ 118.585843][ T25] kthread+0x2c1/0x3a0 [ 118.586985][ T25] ? _raw_spin_unlock_irq+0x23/0x50 [ 118.588480][ T25] ? __pfx_kthread+0x10/0x10 [ 118.589783][ T25] ret_from_fork+0x45/0x80 [ 118.591014][ T25] ? __pfx_kthread+0x10/0x10 [ 118.592307][ T25] ret_from_fork_asm+0x1a/0x30 [ 118.593645][ T25] [ 123.100277][ T5995] vhci_hcd: vhci_device speed not set VM DIAGNOSIS: 14:27:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000006 RBX=ffff888024347800 RCX=0000000000000006 RDX=0000000000000000 RSI=0000000000000020 RDI=ffff88801b08a978 RBP=ffff8880343072d0 RSP=ffffc900055afcc8 R8 =0000000000000000 R9 =fffffbfff3548b9e R10=ffffffff9aa45cf3 R11=0000000000000b92 R12=0000000000000000 R13=ffff88806a63db4c R14=ffff88801b08a978 R15=ffff88801b0b8000 RIP=ffffffff8162cfcd RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000020002080 CR3=000000004e078000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000004390010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c74ad100 00007f72c694b440 00007f72c6940004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c694b498 00007f72c694b490 00007f72c694b488 00007f72c694b480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000048c183d7a0 RBX=ffff88806a728400 RCX=00000000000006e0 RDX=0000000000000048 RSI=ffff88806a728400 RDI=00000000000533f4 RBP=00000000000533f4 RSP=ffffc90006f3fb20 R8 =0000000000000005 R9 =000000000000003f R10=0000000000000019 R11=0000000000000000 R12=0000000000000001 R13=0000000000000019 R14=0000000000000001 R15=ffff88806a72ca00 RIP=ffffffff8146c0c5 RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555577c9c500 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000562caa153908 CR3=00000000356ae000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000c0fffc00 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000014 000000000001df8a ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577d23b1b 0000555577d23a20 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000555577d28aee 0000555577d27f60 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0005ba8008000100 0008080606011acc 0002000707fc8a08 000100000e080604 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffef080d800301 80c0100001878004 0100000208060601 3e9a000200070010 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1080030108000d80 0404015dd0000200 070031313230386c 6e01ffffffffffff ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 88033808004e8003 4e80040f80030f80 0410a00300080010 900303ffffffff04 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0120100010800401 0000000806060149 d400020007018088 080010e003001000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 10d00300100010c0 0302100010b00338 10000f9003040800 4eb00302b404004e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ac031004004ea803 0004004ea4030002 004ea2033602004e a00304ddfeeffc08 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 004e98030785f4d0 08004e9003020400 4e8c030000001004 064e88033808004e ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000000020 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c0d65 RDI=ffffffff9ab11b20 RBP=ffffffff9ab11ae0 RSP=ffffc9000063ea68 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=2d2d2d2d2d2d2d2d R12=0000000000000000 R13=0000000000000020 R14=ffffffff851c0d00 R15=0000000000000000 RIP=ffffffff851c0d8f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f72c7638568 CR3=00000000283e6000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 58b989eb54e63579 7b14d318d50f52b5 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 9ab3bcdc7bc8a4b4 1a088258a56468e5 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 3077e3b1e6f0f4a7 76423f78e2ca9576 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7a26f76972d17525 c2d672efd80cb119 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000007300 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000040 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 4e8e0080dc640080 0048bfe60048bfe6 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 01000000efc20000 de0e00800048bff1 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0048bfe501000000 11b200800048bfe3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0b42008001000000 0100000001000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6451ef20f8f70c1c c698fea21edc1063 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 062bec668575ed1a e3134499c0220853 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 a54ff53a3c6ef372 bb67ae856a09e667 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5be0cd191f83d9ab 9b05688c510e527f ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000bf2ac RBX=0000000000000003 RCX=ffffffff8b2a17c9 RDX=ffffed100d526fee RSI=ffffffff8bd1eea0 RDI=ffffffff8170a6b9 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000000 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f4990 R15=0000000000000000 RIP=ffffffff8b2a2baf RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f72c7639f98 CR3=0000000050486000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008000 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffceb9d6200 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802a9a ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802aa7 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802aa1 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802ab5 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802b3b ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f72c6802c19 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000