last executing test programs: 16.627885897s ago: executing program 1 (id=1850): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x1) (async) r2 = socket(0x10, 0x3, 0x1) r3 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0) syz_usb_disconnect(r3) syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) (async) ioctl$EVIOCRMFF(r3, 0x550c, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) (async) bind$alg(r5, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f000000c3c0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)="94", 0x1}], 0x1}}], 0x1, 0x8001) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYRESOCT=r4, @ANYRES32=r4, @ANYBLOB="ca9ec3f33f5100bba0b8293d34cf77b8b79bf4846b8fc65500641b9e212341a1e0f07473513a5a82fbca3e361055c49b2a5561c3d748cd58c93d91ac14ea38ef8262cdd3cc69f062abcd5e11068ac86a63147339019fea356a2f232d68f663766c224812f9debd02f33dcb16a1138fb6d561ddcfe866f12d453af4cbe449eaa92494752e760452a293f5bddb194a9a7d856c29166fd5e4198167f98038f6012db3d02f6a6a791ee4e4be61770565b53a108e4e3cff4f", @ANYRESOCT=r6], 0x50}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x1a}]}, 0x18}], 0x1}, 0x0) (async) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x4, 0x1a}]}, 0x18}], 0x1}, 0x0) 15.889922377s ago: executing program 3 (id=1866): mkdir(&(0x7f0000000000)='./file1\x00', 0x81) mknod(&(0x7f0000000080)='./bus\x00', 0xc000, 0x0) (async) r0 = syz_open_dev$radio(&(0x7f0000000100), 0x3, 0x2) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000280)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000580), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f00000005c0)='cgroup.procs\x00', 0x2, 0x0) sendfile(r4, r2, 0x0, 0x3ff) (async) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x1, 0x2}) openat$cgroup_procs(r3, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) (async) mount(&(0x7f0000000040)=@sg0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000180)='gfs2\x00', 0x80, &(0x7f00000001c0)='discard') r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0xa0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @exit, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x47, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) (async) mount$9p_virtio(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', &(0x7f0000000140), 0xc40a, &(0x7f0000000080)=ANY=[@ANYRESDEC=r5]) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x46, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) (async) listen(r6, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f47773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000000", 0x58}], 0x1) (async) read$FUSE(r5, &(0x7f0000003040)={0x2020}, 0x2020) 15.889664836s ago: executing program 3 (id=1867): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000002640)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff3}, {}, {0x1c, 0xfff2}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x16}]}}]}, 0x3c}}, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 15.830062967s ago: executing program 2 (id=1869): r0 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = dup(r3) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x58, 0x2, 0x6, 0x3, 0x0, 0xf0ffff, {0x0, 0x0, 0x4}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x6}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000008}, 0x4000) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r4, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r5, 0x1, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x10000, @link='broadcast-link\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x20004000) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) (async, rerun: 32) openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000), 0x8) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e06000d08"], 0x9) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0xb0, 0x10, 0x403, 0x600, 0x0, {}, [@IFLA_LINKINFO={0x80, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x70, 0x2, 0x0, 0x1, [@IFLA_VLAN_INGRESS_QOS={0x4, 0x3}, @IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4, 0xd6a8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0x9138c3d1c6600e1e, 0x1, {0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x1, 0x5}}]}, @IFLA_VLAN_FLAGS={0xc, 0x2, {0xa52, 0x18}}, @IFLA_VLAN_ID={0x6}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0xb0}, 0x1, 0xba01}, 0x800) 15.829688556s ago: executing program 3 (id=1870): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c000100000000000000000004000e8010000c"], 0x24}], 0x1}, 0x0) 15.760534411s ago: executing program 3 (id=1871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0xfffc, 0x0, @empty, 0x4}, {0xa, 0x0, 0x0, @empty, 0xfffffffc}, r2}}, 0x48) r3 = dup2(r1, r1) write$RDMA_USER_CM_CMD_JOIN_MCAST(r3, &(0x7f00000008c0)={0x16, 0x98, 0xfa00, {0x0, 0x2, r2, 0x10, 0x0, @in={0x2, 0x4e22, @loopback}}}, 0xa0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r5, 0x303, 0x0, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) r7 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x0) fcntl$setlease(r7, 0x400, 0x1) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 15.650674123s ago: executing program 2 (id=1872): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r0, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @connect}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @result}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @control}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time}], 0x70) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000140)={r2}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2f00020b, 0x809, 0x2f000000, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2b8, 0xffffffff, 0x98, 0x188, 0x188, 0xffffffff, 0xffffffff, 0x220, 0x220, 0x220, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x1000000, 0xff, 'wg1\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}, {{@uncond, 0x287, 0xc8, 0xf0, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@unspec=@cpu={{0x28}, {0x3}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) 15.57029695s ago: executing program 2 (id=1873): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x0, 0x328, 0x328, 0x3f8, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@ipv6={@private0, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00', {}, {0xff}, 0x0, 0xff, 0x1}, 0x0, 0xa8, 0xf0, 0x0, {0x0, 0x3a010000}}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@local, @ipv6=@empty, 0xd, 0x30, 0xe}}}, {{@ipv6={@private1, @loopback, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0x0, 0x0, 0xffffffff], 'tunl0\x00', 'bridge_slave_1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x0, 0x4}, {0x4, 0x6, 0x4}, 0xe, 0x1}}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00'}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x3, 0x0, 0x0, @loopback, @local, @mcast2, [], [0x0, 0x0, 0xff]}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x0, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0x160, 0x1a8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x5e, 0x0, 0x0, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x3c}, @private0, @local, [0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff]}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}, 'vlan0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r1, &(0x7f00000077c0)={0x0, 0x0, &(0x7f0000007780)={&(0x7f0000007740)={0x14, r2, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x0) openat$sndtimer(0xffffffffffffff9c, 0x0, 0x900) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r4 = memfd_create(&(0x7f0000000800)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) ioctl$TUNSETLINK(r5, 0x400454cd, 0x313) r7 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000140)=0x80, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r7, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r9, 0x4, 0x1, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x4000040) pwritev(r4, &(0x7f00000007c0)=[{&(0x7f0000000040)="3f9e", 0x2}], 0x1, 0x81806, 0x0) r10 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x480882, 0x0) ioctl$CDROM_TIMED_MEDIA_CHANGE(r10, 0x5396, &(0x7f0000000080)={0x10000}) sendfile(r3, r4, 0x0, 0x100000000000042) 15.569972416s ago: executing program 3 (id=1874): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = io_uring_setup(0x497c, &(0x7f00000001c0)) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0x5e) close_range(r2, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'erspan0\x00', 0x0}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100"]) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r4, @ANYBLOB="020000000000000024001280110001006272696467655f736c617665000000000c00058005002b"], 0x44}}, 0x0) 15.510374873s ago: executing program 3 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) syz_open_procfs(0x0, &(0x7f0000000240)='maps\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x33) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x800, 0x0, 0x4, 0x3}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x10012, r5, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0x2]}, 0x0, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) write$P9_RREADDIR(r5, &(0x7f00000000c0)={0xb, 0x29, 0x1, {0xe0}}, 0xb) write(r4, &(0x7f0000001fc0)="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", 0xfc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff}, {0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063510800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x323000, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) accept4$alg(r6, 0x0, 0x0, 0x0) 15.509971355s ago: executing program 2 (id=1876): syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x16b601, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800, 0x0, 0x3}, 0x20) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x36) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000000180)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x0, r3}, 0x10) write$sequencer(r0, &(0x7f0000000100)=[@generic={0x2}, @v={0x93, 0x0, 0x0, 0x0, @generic}], 0x9) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) write$sequencer(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="04000000000000007582446dbf6b97337c301da4cab03d4567be217715a7369d8098b5d9e05b7486078227faaa7b6987b98156e16ae2667589dd5034466eaf2d561257d952c17b3591f4b0b19e9559c67e482c416992bc2a24629a05285d8a857dd276dbc2eb8aa9a29841ad054e6aad057c971ce57b60cd440cc60b217e3e8ffbe00d2910a9645c00000000"], 0x8) 15.188710386s ago: executing program 1 (id=1877): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x90) 14.678881863s ago: executing program 0 (id=1882): r0 = syz_io_uring_complete(0x0) sendmsg$NL80211_CMD_DISCONNECT(r0, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x18}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2e}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2a}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x100) ioctl$KIOCSOUND(r0, 0x4b2f, 0x1) r1 = syz_open_dev$vivid(&(0x7f0000000100), 0x3, 0x2) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xf8, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x40400}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xffff9547}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}]}, 0xf8}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040015) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r0) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000004c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xf8, r3, 0x0, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xfffff000}]}, @TIPC_NLA_SOCK={0x74, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0xe}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x40}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1ff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffffffff}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xf}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_LINK={0x64, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x800}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x401}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0xf8}}, 0x24000081) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000500)=0x8, 0x2) getsockname$packet(r0, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, r0, 0xfffffff7, '\x00', r4, 0xffffffffffffffff, 0x1, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) ioctl$HIDIOCGSTRING(r0, 0x81044804, &(0x7f0000000640)={0x25, "aeb3cd2ffa6abc79dae7778c012a5c3bf05b84f4048d176fbd692f45baac235da96b185229"}) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000680)=@null) arch_prctl$ARCH_GET_CPUID(0x1011) socket$key(0xf, 0x3, 0x2) r5 = openat2(0xffffffffffffffff, &(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001700)={0x1, 0x5, 0x1d}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000017c0)={r5, 0x58, &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0x7, &(0x7f0000001800)={0x5, 0x7, 0x7}, 0x10) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000001840)={0x1, 0x4}, 0x8) r8 = getpid() ptrace$cont(0x9, r8, 0x7, 0x8000000000000000) getresuid(&(0x7f00000018c0)=0x0, &(0x7f0000001900), &(0x7f0000001940)) sendmsg$nl_generic(r7, &(0x7f0000003a00)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000039c0)={&(0x7f0000001980)={0x203c, 0x42, 0x10, 0x70bd2b, 0x25dfdbfc, {0x11}, [@nested={0x200c, 0x1b, 0x0, 0x1, [@typed={0x8, 0xc6, 0x0, 0x0, @uid=0xee00}, @generic="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", @generic="5217c98896ffed132f393e95dfc6da037e80ccccfae56f413b283c2f94d51a65b904a3c674782232758590241921b9f97ce12b13ebfaa2aac11a59e932ab544419bc266c37e24bdb7dc550a8a083ab26f5de21da2dd854715e8fc6cc38f81f361c9019267fd660d49bf6516b8b3ab4201849e6c38826b680ade1da21a9f1f188329193ad8f646c4a5ea42aab9db9f5df112f1e5329fd2ef9d4390803c3d8b072361440166a3adf191e6581539b45a8015197264b0798c1f6b273fb462bf6c0ec79416617523ce4cfbb3f9f180695ea57fdf1ac287b17afe8a34a1accffb6e34c01b8b2981b49c7114913ade10602b8a230d7b0b3edde7887df01271cbc20c078ad82b7a487576675cd8135db3e8cb728aec51450fd36cb5857644fcb67ce21b5b39822aee94343fd29b4007951d372a40bff9c4186d45563e5a34ad22e5aedddb349ba53a5756c076d15427ab49978e0221e1639c301138d328b9e84db2539b8b6c8fc38518ba272064cea863538b5122f5d01d46b5b054288d8f4e8e182d18b48ee17fd522126972a5de8c79f734f5687a893ecabc1458673e4dccf8355a86b9775c0ba5670bb94ad696505a64faaae507ecc1c44483660abc296ff5e3181f4e93ac6dd96bd9687f98f478aef655def74a42e3b94bb8d33266f12c96d58c6ac34aab3be8deb34b942066f2e8eff78058d9e977334958d8bdb8ccdcbb92af05c0529ba9131595612daf0e5fe14b096981c57d69d658cef4f468267cab5740c95603b662cf3a9851f7a2d53e3b05fcdc037255b396e5ed452aa9cb50eda8a1f6f07f49c5381d440684c7e1ebdf940dee99a9f97ffa8f6d11371a538852696cecaf8eba6ad39b01543c670207d4ab528b8388295f61dc0cddd9b437b7e5b509d6f16d224754d8e8e7bc718fd0d0a9a7b4e6d730103f8f5cbe7b183461a73f3b76912ae14cacff79dc24bc48c7d522f7b9d49b850ed92aae11a2474369efec685c73e6aa54bf3a51dd157fc2d223913529a3ecffe4e034c3e4368d4b1f07be1ed8f800752bd9f0006ecd8501baf836338d7db52feddbbbbe509f24b0933063e71ae19ceb502ad13afacf05cdf6810612b41f42b75c22af2500986d53710f5d59d10d9826e29da495cab8fe69a6d5fa0cc09860c64e244a292296a95fa539a94abcf78e9bd7683356f1d66587dbb11922d5047b7a88932f95b1f6a739adbdebab98c6c51441e560f6b9f95a7807711debf7c900c3ba4e304086ca7153c884c6c6bdc515a307e3a61bef6929bbccd52cef5a86fb313ab4aa2f1731e12eb2b68f7782f9828c7a67964fc39fdf3fefbb4ebd4da8729e7d8cbe384cf4de94867a38ce7316645f1a179341de8660efa6cd6b4d8b525403e11a7f8e7a5aa4ce40fa40b9e9a8956cd50702ae368a0519b5164cb37753714f3fd7ee48779d0b51f9f042bcecf4d9b0d544d774f92735850b082b1ecc22de6eaf94ae3745a6f875b3e9a9256157bbb080b7fc07a4998cd60267652c411b407bd03e5677d821ba1af08c6254c00b43acaf1ce795cd42fd9c389521299396e0f5cf20c11c04aa9332337e601ef32790149d9e3890c36104f72af8c7552d5e343efa9ab465eb222fc7236eb1e731fb7f6392e4d6924839afbf9ece71a2ca201ac949edc0eb4689247aa9657713efd9d0b07957f8a0b3ef23dcfe56c46e112ce2f27709d4a786ede3679249282b6ccc52ed62188e1264b406e67931dcc451fb4fc3c0e624612b82be18d56bd7324ef874ab68c9f3573aebea759efa9205a0c0e8a59c6453b1195ece76b0e451c354a234cdec3f41ba7d33d5d3272ce80c917879d899ffe2f917407aaf74f7608792b2cd331de9e68b5cb579da99551ec2d94e5790a0c57bd03e21d4abedc0763e2451806c55d04eb5355d33651336bfefd2853b21786acb3834f1f390dcac7c4c1b30723110905bbbdb1a7899b34991242e35eeec373cc3492920c4760688429852c57516cc9f308f2ee98bc69d2d6b728fa2c1bd97dd1df928e18954e938092e9a58cbf2317d34c2b1ac01003bb2985c185b545953a8edba975b18d18ae9f25d24e64124e7d7f09ea0d165ead8b0351fe46d901d3ba26914dce617cf6b30088a9967ae47a7670203ca553e8afe024b21c93a39bf5002e91a992c1aad3c2e6214ff334d630d22b42750f89ebe220fa1af6bd730b24aaa678ebf4bd86c5d6ffb6b2305d793e02d41b18f7830216cd044ebd9e6b6be4d9d6850e5f173cac4ea0f087b6ebb3ca7a363b26a433b99b22a83fd81a590c0443418b64240af3d6565e39cd4ac3600665fdfc46f6a870e98f7bb486ef99f21c5ced7a162d3802c735c7ef27be9e66fa4334467e2b606c6dd6ba483a3a3415545230708a0d8f48c530f823b8dc34f70da7f72eb4c268dc1ea1a61acc57b4e9b12f289497d54de447eabd18b73b86fe1f79c39b12b9c5233ca423f2fab69153bcfac4debb0c0a889499a97771b63c122f20234a15e8ca5a69ddcd2d2bab430e8357842488ceedfe7f065162afb99faa31758a3acf9bd0908f3f08c8341e225b46cd1da3b15345020f74a2b0e7bbeb4a2cad8bcdc32c63251ae3a244d6662c9988a048e6d443d91158d341283e45e821f7830e4934cc07712b556efbfc9641447910b647d0138c9fc8e03edd89fb6638cff85fe85fa2823d65a5d6285155e74c0005948e704da09fc05f97f5dfb3c2cbd0bac4a2466dcae2971822f5840c38a972510138299c751e4975399d8d5241f972583d84c65d44e07b302ef54b0c8e4b7eb95a7a7dd4fb75a7e66667cdd37ac5f3b7ebe6453e5ee819e0fc00fc152a4a72ebad552d1e01258cc1cea81f5207fe1caf02b6cc54c9745b6b50d1719dd216900100b6d92e7e19eeea70b7d2b86a672657a3b03e49dff0b9a88c13e764fe35e5c05034af8028e83f2f64db16983071d9c6d608b1c8b2f38d13c5a1f7c0bcbe04523fd99c24a859d81a6b4cdb514ba610f8c0848b282c88f17c865dbce1e1de212614b8dcf577db331277beee306c7116a4532b5759fe6ebfc3fa349afd078be276714add1c284713645b8958aecf264fd421ad86f34fb76dc4ae55934b1fa6a4a640d2015da977313808a9ac6fbf0223a98d28dd5d551141f2b412b7e75e453db4e4a2a9d0511a36da6afc400f6d94b17bb5a1702644e405239aed5667c59721e03101137e41251de0d024be9b7c248ea6322b818d8b6efc470908e253685c504d208cc45c9c8ea4538e09ada595dfbd872fb578420a9cbb94043c0e87a11c964feb3a868b2d27da77c1434f6e631daea85b62ee74a4658d62225f91a8eced6b9ea49214bc51478c378a365734d2ecdf289d54c2677f1237a64897f71e60cefd941c49537826ab8f43df36165b8c1253ac60e454ac86071a3cdaabdc118cb33f3448057f9d5c0ee36273e1f0864733396e4435764041432ab6a932ef854857c697baf5f15f04a88baeeded9a7c6c172ab2f0749f09cfd4cda0340440edb43913daf15d3c69fc1ef180cf3d0e1e1f2e3e9d9c43442b0eb6bf0d02bc52285b6d9a460a25ee11c504449d187aa119329551e582776ede60d83e3fd65431f744ef768fde5bc8f6acd5e336e4975a244ddbb58dd2e6ea083c18bfd248da153cf113991802ad8973b8b18321fcd20f894c95d381353179e4744608d777bd5979b8d5095cfe8881ef9a30265b0b41b299a6099c6d5471e6de30acb2dc08fbd4294a63ede0de778240806dfca75e1b4f62868626a1455b923369df541b56c69b159072d2a4e010647c95c5377f18f1440d836579163cfacd3290ea22a9036aa2ac454c867848e1591f991a5e960284833b2c584f871c461d1de7f525120ca9cf7c5a8e3d3f6bcd6a16e403e6445e2335ad5fcade660648b73ad8bce1ecb46a3b15aa02a5afe87a606d73211b1b965b6a214eaa41bbf390193ec933c9f3f2abc5c0bfd63c91b884d51755911146e982c4f1f9689803b8bbb81d07eec798489c7eb9698b8f99307bb73b2373f32acf89e982d1a28e4eb972d3ce58bdd41d0e5339d5206e75058249afba0a9127d8fb3659d69e477c3b887f160c5d96773063ee941af5f656bdfa19cd836dd4ff41e6b6a1690907eb1d9656b98cdd3b0101e36da2f17e1cd511dbcbe7bf5a4457165ea535fe333e1a2d07cf8509e2222859dfaa9930faef041ea851b61f791c21acdf5a9f7599257524cc0a48d831d0c1a62efaa3e30a29ed6cd070bf43c97738044822045c8eae3b9e23bf79f01dff40c1ef3b35c1609eff266b85e51449bb1e55cea5f18249e370eae45fbaa2b09ed8c44d86e0b2781542fcb0e4ef1de654e1b6e08d2832d7ea892d06578ea5eb2231464b2a70782a0d438961f425b53cf96e96d656ba9ee8a8282bdd75a7c5f2e280f6e621b145f06be89974a88499d29d5bec97af6c6c6b7254f87df0270f9248d1fe2d2c2d9dc515d65a975076c3e241cd5cc8be12e2f5ab8328a3e5210a9c2da7481cfbf2937da21fedcb1fca713e605cfed3f2f6ef87529e0b4254b05b06621bced4b81feed43c9b19b688be1f3a097e339a91443f39975c588f8f2fe6cb2cf92aa8b484e9d88606539b4e4bc8462e781fc17e5c296a30cb32c762a329231e928fcbe33895ce61521bae883c0fb6557e59b23448b827d9b43b2039b875fe6b6421c0705137cfcf5bb9cb3e7e54bd0e34db49d0c10c0ac89c5f43ce01d7130b66ed60b00a82c01529f5fa706d72a8d267906980d8cf43087349d2182ffd711de52301116b65a08e5811a63ee21ae70efe1651514200f03126dc298de64dcc9c904e985d6f2c43a7040c7d53087da1a48fbb81f11d27065e188f16506e7eb1a9da15f847787c6d8544b4a45a21457d8f5776d1057ec3360cf1d8609fed222f137e6b520dc8175dfd582154f20fbaed2e3a17052d8ebe3550782399cd951cb6b239e2212fac3935905457715d129cbacb6ddfe04a1e8ef0c3a49caa55db2804482f5b8c6470db464042a7feaf22fe6d7a34f13500e26bd4e98f5aeb33911e32deae5e034b6443a72bf75d8cd65831922018447c5fe5ea5c44f428c31417b0257eb563d5ecb4cb36f7346dcf0212cb4e4b10ae10650c9831fcb34cb474618b72e99356cb9f42386d422edecfb82d78b98f72b4c8f394b54811793d7060e093b8c0d34b9d3104bb15332ed7c019abcda2ae5371dbc08f4717cdd50a630bf8f49fd3eadae6f16a473449e87a833c05aa782040b06cb3e5612496b122294b201328fd853e97834b6e2e1fa56681e439c0bf8a00161abf7a3389b2f6d5127b01a203bf2d684333ca54d30cab10731090775e830e01a13312a2e5b9b9f83c9367afc961138adbd2dd9b3010b170bc74c61a896046024e8353f72de44b85fcae0a2960894908a955eeb6a86f0245e2a953cc27b01149f0478b9edb048487ecbcbd245d8b4ac0f80048be7163988f760fdd5ddf9d9e77e132161efc012afcd0732c35e9e1dbdb9249fadafa831762d4f08317e0f142458a13576a12227e4f18872e2be41eb132241a2a6385a4ca457befb59da2ed9b1c1c5e3e0f83b29271a5c2f0bed9089cb321e543505c40c2cf7bd17ea1c60663545bbec0ae50a892ba93b33976c75e4341c1d81885ef7ca757610b6607212614d68fda833ca055fbcef36832065d50d899738aecbddb8dbe73281af9a346927bae5a605bd1b2ec9bc260e18e42203899074819af7f272a6d5d535dd8e53e21d8e58f5a9614a722e9110fa997f62d08cb9910169ab1f485069f770b69f8589ba04e35381324"]}, @typed={0x8, 0x8, 0x0, 0x0, @uid=r9}, @typed={0x11, 0x14b, 0x0, 0x0, @str='0000:00:10.0\x00'}]}, 0x203c}, 0x1, 0x0, 0x0, 0x4041}, 0x4000004) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000003a80)={&(0x7f0000003a40)='dax_insert_mapping\x00', r5, 0x0, 0x9}, 0x18) r10 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003b00), r5) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000003c00)={'sit0\x00', &(0x7f0000003b40)={'erspan0\x00', r6, 0x1, 0x10, 0x1, 0x9, {{0x28, 0x4, 0x1, 0x5, 0xa0, 0x66, 0x0, 0x8, 0x4, 0x0, @loopback, @local, {[@lsrr={0x83, 0xb, 0xe6, [@rand_addr=0x64010101, @private=0xa010100]}, @timestamp_addr={0x44, 0x3c, 0x8c, 0x1, 0x2, [{@private=0xa010100, 0xfffffff8}, {@multicast2, 0x10001}, {@remote, 0x7}, {@remote, 0x5}, {@local, 0x3}, {@local, 0x9}, {@empty, 0xffff}]}, @timestamp_prespec={0x44, 0x44, 0xd2, 0x3, 0xa, [{@empty, 0xced}, {@remote, 0x1ff}, {@multicast2, 0x1ff}, {@local, 0x3}, {@private=0xa010100, 0x6}, {@private=0xa010100, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1d20000}, {@multicast2, 0x7}]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003f00)={&(0x7f0000003ac0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000003ec0)={&(0x7f0000003c40)={0x264, r10, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x140}, 0x20000850) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000004200)={r0, 0x0, 0xa5, 0xc3, &(0x7f0000003f40)="709f4e66cb50bba63c41d9a4b7adcdcace15da09a3d0a294158d3db926beb6698f793a4e6131db875d39547782394dbfdef58f1b910a06b1322b8be48fd119d0e649c56f20e0d2475ef76aa60e3d9bfcaeda37ba7d38ad8240dc55cf843ba79a27b9ea25fbd38878186add7818da55db4ea7beea718b1f555f38db68174d6cab35b43595e7a5983134beaad2c6a6ef15f00a208d353ade708b22ff6cfc8a0c4c926d3fd8d2", &(0x7f0000004000)=""/195, 0x5, 0x0, 0x7b, 0x4f, &(0x7f0000004100)="8f7a6422f3cd2065869f9379d052af9a2fcfeda82e8133ec5742be4a6b3cf4a8d2a77cb4e6830740eb07f2fef60686e8701b9d51ad7c5e91c2ab0a893b9b616607c115dcba09ad0741637574c7758522e01624d45d1c88f0f5b4d187e6ab47dc29f64caf2c232db1cd1ea761352898648e9240d2ef5431b92582ab", &(0x7f0000004180)="b42f9b14122bb79dc65036e8407f8f15172c43619da070e794e16ebafba208cd5b022b02bee3100f35b04c3d6e99ccde1bb081fcef071d1c090b9d8909839ccb1e987db486f3a5d0cd3fec2ca376f5", 0x5, 0x0, 0x25ea}, 0x50) accept$inet6(r5, &(0x7f0000004280)={0xa, 0x0, 0x0, @private2}, &(0x7f00000042c0)=0x1c) 14.677188375s ago: executing program 0 (id=1883): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x80000}, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x25dfdbfb}, 0xc) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000340)={0xff00, 0x0, 0x0, 0x86fe, 0x0, "8b711000"}) ioctl$TIOCL_GETMOUSEREPORTING(r1, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000040)=0xcd) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x7) 14.608760527s ago: executing program 0 (id=1884): openat$sndtimer(0xffffffffffffff9c, 0x0, 0x900) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000001c0), 0x75f, 0x103382) r2 = memfd_create(&(0x7f0000000800)='U\xffA\x05\xd6\xe7\xfc\xa3\xb0\x04\xe2\x1b\\by\xdc2\xe3ZoL\x14\xa7\x8c\'\xa7\xcf\xff\xf0+9\xac\\\xa4\xa5=\\\xcc\xf6\xc4R\x88A\x94\xe0\xff\xff\xffX\x91\x1au\x83V\xc1H\xd3\rZ\x01!b\xc0\xaeW\xc5\x1f\xec\xfd\xe3\xc1\a\xeb\\,\x98P \xf2\xfe\xc5\xf9\xd4\x9a\x16\xa6\xb2\xde\x82\xa8\xf9\xcb{\xa9m\x83\xfb\x84\x8e\xef\xe3#\xcf$Df\x89\xe2?`\x96E=-\xd6\x91,4yEE\x1d\x81\x9c\x00\x00\x00\x00\x00\x001N\x1a\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\xcc\xb8o7\t\x0e4$Lb\xf9e\x8dv\xd0Y\x86\x18\v\xd6\xf9\\-\xdc\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a4\xf2\x8c\x19\x1e\xf0\xb5_\x93\x98\xb8\xcc\xc2\xc6\x15?\xa44\xd4\x12\xed\xa1\xf1!\xbch\x94\xd6\xf0\x98u\xd0#\x95y\x10\x06^\xdf\x0563\x9dX\xdcI\x06\xfe6\x1e^\"\x90\xbf\xa7&\xa3\xb5\x8d\\\xcf\xa1T\v\xd1\x92oV\x8d\xbcGd\x82\xaeD\xe0D\x10\xa9\xdb[\\eN\xbc\xb26-\xcd\xeat\xfa)\xc8\x00\x91<0\xbcf\x8b\xd5\xdb\xd9AC\xf5Z4h\x1a', 0x0) pwritev(r2, &(0x7f00000007c0)=[{&(0x7f0000000040)="3f9e", 0x2}], 0x1, 0x81806, 0x0) sendfile(r1, r2, 0x0, 0x100000000000042) 14.280519942s ago: executing program 1 (id=1885): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x5c, r4, 0x1, 0x0, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r5}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x4044040}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1020}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000030c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000003140)={0x28, r9, 0x1, 0x70bd26, 0x25dfdbff, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 14.219138947s ago: executing program 1 (id=1886): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = io_uring_setup(0x6d9a, &(0x7f0000000340)={0x0, 0xd132, 0x20, 0x1, 0x49}) r3 = io_uring_setup(0x3eaf, &(0x7f0000000240)={0x0, 0x0, 0x800, 0x103, 0x158, 0x0, r2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r5, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181000b00000000010000000000000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x0) listen(r4, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xff}, 0xf}, 0x1c) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r7 = accept4(r4, 0x0, 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/150, 0x96}], 0x5}, 0x0) socket$inet6(0xa, 0x2, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) socket$phonet(0x23, 0x2, 0x1) close_range(r9, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000100001040100"/20, @ANYRES32=0x0, @ANYBLOB="7b130000000000003800128008000100677470002c000280080001", @ANYBLOB], 0x60}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r3, @ANYRESOCT=r1], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 14.090743388s ago: executing program 1 (id=1887): r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r0, 0x4068aea3, &(0x7f0000000000)) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) copy_file_range(r1, &(0x7f0000000800)=0x4000000000000, r0, 0x0, 0xffffffffa003e45b, 0x700000000000000) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_int(r2, 0x29, 0x7, 0x0, &(0x7f0000000380)) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r3, &(0x7f00000003c0)=[{&(0x7f0000000140)="f8c21f4bc6399e4abef3caa95c18e756720b0e0d2ca0dfc6a7764ee163ed9b27210966662239d539b0b8979c58453bfe87a23b32e26af342b545adecbb34d6ec75fe8b831db2d585923e3ef4d58489bad96e5c71f3dee89d89fe1aaf5eb7199ac9c0da47a2ee58c7efa44ec58ce18a4ef43112bd575a539b40", 0x79}], 0x1) 14.089151335s ago: executing program 1 (id=1888): r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000900)={0x1000, 0x0, 0x1, r4, 0x1}) ioctl$KVM_IOEVENTFD(r3, 0x4040ae79, &(0x7f0000000080)={0x1000, 0x0, 0x1, r4, 0x1}) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) r6 = socket$inet(0x2, 0x3, 0x4) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0xcc, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x7c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x3, 0x0, 0x5000000}}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3a4}}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}, @TCA_HTB_INIT={0x18}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xcc}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@multicast2, @empty, 0x0}, &(0x7f00000001c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'tunl0\x00', &(0x7f0000000200)={'tunl0\x00', 0x0, 0x20, 0x8000, 0x3, 0xff4, {{0x10, 0x4, 0x3, 0x12, 0x40, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x2c, 0xe, 0x3, 0x8, [{@rand_addr=0x64010101, 0x78a}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x4}, {@private=0xa010101, 0x25d5}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x4}, {@local, 0x2}]}]}}}}}) r11 = socket(0x11, 0x800000003, 0x0) r12 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r11, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r13, {}, {0xffff, 0xffff}, {0xf}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x0, [0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3dc], [0x0, 0x4]}}}}]}, 0x88}}, 0x40) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'tunl0\x00', 0x0, 0x20, 0x50, 0x1, 0x7, {{0x15, 0x4, 0x1, 0x2c, 0x54, 0x67, 0x0, 0x1, 0x29, 0x0, @empty, @multicast1, {[@cipso={0x86, 0x3f, 0x3, [{0x6, 0xe, "12cdf72dce5811f24c5b63c9"}, {0x5, 0x7, '>O*mp'}, {0x2, 0xa, "990420b759a452a2"}, {0x7, 0xc, "9c73a872f1dfaa52f5d7"}, {0x2, 0xe, "999b8986eded8f7817034b48"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x5, &(0x7f00000003c0)=[0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x42, &(0x7f0000000440)=[{}], 0x8, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x37, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f0000000a40)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x810200}, 0xc, &(0x7f0000000580)={&(0x7f0000000700)={0x304, r5, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_WANTED={0xa8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xa1, 0x4, "3d22ce9a0fc2038bd1499945a59daedb7eaad0482797f523da33f99fafc3a46b81b657c5a0a906916bcd22e15573bc4f1ee567ef8121266047023113141de6965f232f25a03a478458741b24d29ee9e52f26a7cfa93a25988ae85d3df523f3262c78a8ccb28c4e7e03e9049104664b5ecd95ff784cc40e2ee74402b8ffa99c4be18cc6e246148a2cae538d95bbb27f0aa3fd7766e7caeea266c517c436"}]}, @ETHTOOL_A_FEATURES_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_FEATURES_WANTED={0x7c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x72, 0x4, "782aa7c3018b77b6932dc5b7f05a5a75f9a4c3cc439e2f6e9008e3bb61dd22ed7135ca0e1dcd71c201997ef7f9dcbd926b3809261d872b60180ff31c6de7ec9e960af78f05c8ae01f639ff49a862d0cdfe19de08665f933065861271bd9196a3d8f01d47ce77f8de8a2efb308ccc"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_FEATURES_WANTED={0x10c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xcc, 0x4, "ab4e916ab519e04894e2ccf5c1896e3d17aa64062551634a7cb8da8febc705738ec530a0df7130f51094697d6f1982e7186c210dee2b89296014a863d19a8d0c028f25c0013200b3b9a7eb1547df0b0dcfe659f62fc01b583dc73e2982563f2a9be1ca62b6b97d5c574c893164d5e8bff921bee51995a150d3ccbb64b40efc547b03f268418e5ce1064b7e5531549951b0f0d9c3095ec9e536ef37a0a4d056a497c02f86940b37d12f54da1bbdd1a33e3579c1f8fa887c172354acac5a2dcdea4a1bf20970c5e21b"}, @ETHTOOL_A_BITSET_MASK={0x3a, 0x5, "767fe72e3dce67cde70557f01139e69821ea257132212cdae8aee4b11007e770e525c00320c47ee7224d85249d53df8f0bd11e400954"}]}, @ETHTOOL_A_FEATURES_HEADER={0x4}]}, 0x304}, 0x1, 0x0, 0x0, 0x1}, 0x4004000) r16 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r16, 0x0, &(0x7f00000000c0)=0x0) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000100)=@nfc_llcp={0x27, r17, 0x1, 0x1, 0x1, 0x5, "3e2ab13e66a47db44e4f1c22fb8927af442a82de8679304a3565d3111f2be70e0207751d8dd9c1421630a57cde2eba8495df66f163d19e750ad56fa1abe896", 0x1a}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000001600)=[{0x1010, 0x10e, 0x2, "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"}, {0x50, 0x104, 0x5, "f53727b6819a685ff9c3fff7d82fa56a3efa53f8162052a8d21cd67fedb694b89f029aaede7040ce4cca50cb3b960465e957caf80c307a73df640e917f"}, {0x48, 0x88, 0x6, "e87b45948bbd3e31d2d4f35be0e835f6b490dfd9ac925164c3182e2c3006f05cdb08eb53b467d6dd80f8680ad1617d430e0988769b581cc2"}], 0x10a8}}], 0x1, 0x4000000) 13.880472179s ago: executing program 2 (id=1889): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x20}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x44050) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 13.88003845s ago: executing program 2 (id=1890): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) (async) dup(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r1, 0x0) (async) syz_usb_connect(0x6, 0x24, &(0x7f0000000040)=ANY=[], 0x0) (async) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000040)) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) (async) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) (async) 13.120492863s ago: executing program 0 (id=1891): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400288010000c"], 0x24}], 0x1}, 0x0) 13.037319633s ago: executing program 0 (id=1892): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000000)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={0x0}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r2, r1], 0x2, 0x0, 0x0, 0xffffffffffffffff}) ioctl$sock_bt_bnep_BNEPGETSUPPFEAT(r3, 0x800442d4, &(0x7f0000000080)=0x2) 13.037062317s ago: executing program 0 (id=1893): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000340)=[{0x1, 0x2, 0xf, 0x2}, {0x5, 0x5, 0x5, 0x9}], 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f0000002540)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2) syz_init_net_socket$ax25(0x3, 0x2, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_CHANNEL(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_CHANNEL={0x5}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x90) 0s ago: executing program 32 (id=1875): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000040)={{0x3}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) syz_open_procfs(0x0, &(0x7f0000000240)='maps\x00') r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x33) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x800, 0x0, 0x4, 0x3}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.kill\x00', 0x275a, 0x0) write$UHID_INPUT(r5, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x10012, r5, 0x0) rt_sigprocmask(0x2, &(0x7f0000000340)={[0x2]}, 0x0, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x65) write$P9_RREADDIR(r5, &(0x7f00000000c0)={0xb, 0x29, 0x1, {0xe0}}, 0xb) write(r4, &(0x7f0000001fc0)="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", 0xfc) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0xff}, {0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x5}]}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="b4050000000000006110b0000000000063510800000000009500090000000000827573595f16aaba19dee4850fad9dc34ae0ec78734eb5ff8c80d4457498c5a7b0c59abd315c61996d140187d64787b68c0a1b3e361a405ed57dc367c33abfd46e35"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xb8, &(0x7f000000cf3d)=""/184, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000280), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1000000}, 0x10, 0x0, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x323000, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000180)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x10) accept4$alg(r6, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): for pid=6707 comm="syz.3.162" path="/syzcgroup/unified/syz3" dev="cgroup2" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 55.238505][ T6712] kvm: pic: non byte write [ 55.244635][ T39] audit: type=1400 audit(1733166643.801:297): avc: denied { connect } for pid=6711 comm="syz.1.163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 55.259697][ T39] audit: type=1400 audit(1733166643.811:298): avc: denied { create } for pid=6716 comm="syz.3.166" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 55.279641][ T6723] netlink: 'syz.0.167': attribute type 12 has an invalid length. [ 55.296695][ T5944] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 55.492366][ T6738] binder: 6737:6738 ioctl c0306201 200002c0 returned -14 [ 55.516728][ T6743] netlink: 96 bytes leftover after parsing attributes in process `syz.0.171'. [ 55.529549][ T6744] netlink: 96 bytes leftover after parsing attributes in process `syz.0.171'. [ 55.593788][ T6749] ======================================================= [ 55.593788][ T6749] WARNING: The mand mount option has been deprecated and [ 55.593788][ T6749] and is ignored by this kernel. Remove the mand [ 55.593788][ T6749] option from the mount to silence this warning. [ 55.593788][ T6749] ======================================================= [ 55.605282][ T6749] netlink: 28 bytes leftover after parsing attributes in process `syz.0.172'. [ 55.726570][ T6767] netlink: 'syz.1.177': attribute type 12 has an invalid length. [ 55.734334][ T6769] affs: No valid root block on device nullb0 [ 55.771757][ T6769] xt_HMARK: spi-set and port-set can't be combined [ 55.827310][ T6780] capability: warning: `syz.2.180' uses 32-bit capabilities (legacy support in use) [ 55.862427][ T6784] mmap: syz.1.181 (6784) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device Dec 2 19:10:44 syzkaller daemon.err dhcpcd[5652]: libudev: received NULL device [ 57.087055][ T6844] futex_wake_op: syz.0.203 tries to shift op by -1; fix this program [ 58.577233][ T6944] capability: warning: `syz.3.244' uses deprecated v2 capabilities in a way that may be insecure [ 59.756142][ T7027] pim6reg1: entered promiscuous mode [ 59.757946][ T7027] pim6reg1: entered allmulticast mode [ 59.851150][ T7034] ip6t_srh: unknown srh match flags B153 [ 59.959729][ T39] kauditd_printk_skb: 4684 callbacks suppressed [ 59.959740][ T39] audit: type=1400 audit(1733166648.511:4833): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.959759][ T39] audit: type=1400 audit(1733166648.511:4834): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 59.973561][ T39] audit: type=1400 audit(1733166648.511:4835): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.979122][ T39] audit: type=1400 audit(1733166648.511:4836): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 59.979140][ T39] audit: type=1400 audit(1733166648.511:4837): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.979154][ T39] audit: type=1400 audit(1733166648.511:4838): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 59.979169][ T39] audit: type=1400 audit(1733166648.511:4839): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.979183][ T39] audit: type=1400 audit(1733166648.511:4840): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 59.979198][ T39] audit: type=1400 audit(1733166648.511:4841): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 59.979212][ T39] audit: type=1400 audit(1733166648.511:4842): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 60.885590][ T7143] kAFS: unparsable volume name [ 60.887098][ T7153] kAFS: unparsable volume name [ 61.009344][ T7176] pim6reg1: entered promiscuous mode [ 61.016113][ T7176] pim6reg1: entered allmulticast mode [ 61.153374][ T7181] mkiss: ax0: crc mode is auto. [ 61.258405][ T7202] syz.1.338 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 62.151146][ T7291] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7291 comm=syz.0.367 [ 62.517096][ T7281] syz.3.362 (7281): drop_caches: 2 [ 62.521971][ T7281] syz.3.362 (7281): drop_caches: 2 [ 63.184291][ T7351] ALSA: seq fatal error: cannot create timer (-22) [ 63.297724][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2019 [ 63.533793][ T7396] SELinux: security_context_str_to_sid (ramfs) failed with errno=-22 [ 63.700698][ T7406] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 63.700710][ T7406] CIFS: Unable to determine destination address [ 63.808972][ T5944] Bluetooth: hci3: unexpected event for opcode 0x0c22 [ 64.246851][ T7483] xt_hashlimit: invalid rate [ 64.550482][ T7524] can0: slcan on ptm1. [ 64.610833][ T7524] can0 (unregistered): slcan off ptm1. [ 64.969638][ T39] kauditd_printk_skb: 24370 callbacks suppressed [ 64.969649][ T39] audit: type=1400 audit(1733166653.531:28911): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.978791][ T39] audit: type=1400 audit(1733166653.531:28912): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 64.986162][ T39] audit: type=1400 audit(1733166653.541:28913): avc: denied { create } for pid=7547 comm="syz.3.445" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 64.993018][ T39] audit: type=1400 audit(1733166653.541:28914): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 64.998916][ T39] audit: type=1400 audit(1733166653.541:28915): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 64.998937][ T39] audit: type=1400 audit(1733166653.551:28916): avc: denied { create } for pid=7547 comm="syz.3.445" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 65.004614][ T39] audit: type=1400 audit(1733166653.551:28917): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 65.019247][ T39] audit: type=1400 audit(1733166653.571:28918): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 65.025617][ T39] audit: type=1400 audit(1733166653.581:28919): avc: denied { create } for pid=7549 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 65.025636][ T39] audit: type=1400 audit(1733166653.581:28920): avc: denied { create } for pid=7549 comm="syz.3.446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 65.301713][ T7593] veth1_macvtap: left promiscuous mode [ 65.303891][ T7593] macsec0: entered promiscuous mode [ 65.303907][ T7593] macsec0: entered allmulticast mode [ 65.305968][ T7593] veth1_macvtap: entered promiscuous mode [ 65.305983][ T7593] veth1_macvtap: entered allmulticast mode [ 65.306108][ T7593] macsec0: left promiscuous mode [ 65.306159][ T7593] macsec0: left allmulticast mode [ 65.306166][ T7593] veth1_macvtap: left allmulticast mode [ 65.387573][ T7616] xt_l2tp: unknown flags: 17 [ 65.423950][ T35] IPVS: starting estimator thread 0... [ 65.529972][ T7626] IPVS: using max 39 ests per chain, 93600 per kthread [ 65.922098][ T6004] IPVS: starting estimator thread 0... [ 65.932285][ T7659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7659 comm=syz.1.476 [ 65.935622][ T7659] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7659 comm=syz.1.476 [ 66.019643][ T7657] IPVS: using max 39 ests per chain, 93600 per kthread [ 66.370489][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 66.618350][ T7704] xt_l2tp: v2 tid > 0xffff: 150994944 [ 67.761135][ T7813] binfmt_misc: register: failed to install interpreter file ./file0 [ 68.210983][ T7854] syz.0.547 (7854): drop_caches: 2 [ 68.471354][ T7869] trusted_key: encrypted_key: master key parameter '' is invalid [ 68.602948][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 69.075384][ T7946] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 69.077335][ T7946] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 69.080502][ T7946] vhci_hcd vhci_hcd.0: Device attached [ 69.082805][ T7947] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 69.086668][ T1227] vhci_hcd: stop threads [ 69.088540][ T1227] vhci_hcd: release socket [ 69.088564][ T1227] vhci_hcd: disconnect device [ 69.302913][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 69.651224][ T5944] Bluetooth: hci3: unexpected event for opcode 0x2024 [ 69.896105][ T8048] Cannot find add_set index 0 as target [ 69.979968][ T39] kauditd_printk_skb: 25456 callbacks suppressed [ 69.979980][ T39] audit: type=1400 audit(1733166658.541:54227): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 69.984234][ T39] audit: type=1400 audit(1733166658.541:54228): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 69.996541][ T39] audit: type=1400 audit(1733166658.551:54229): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 69.996574][ T39] audit: type=1400 audit(1733166658.551:54230): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.012995][ T39] audit: type=1400 audit(1733166658.561:54231): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 70.013029][ T39] audit: type=1400 audit(1733166658.561:54232): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 70.013055][ T39] audit: type=1400 audit(1733166658.561:54233): avc: denied { read write } for pid=5945 comm="syz-executor" name="loop1" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 70.013085][ T39] audit: type=1400 audit(1733166658.571:54234): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 70.013113][ T39] audit: type=1400 audit(1733166658.571:54235): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 70.053466][ T39] audit: type=1400 audit(1733166658.571:54236): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 71.147711][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.153976][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.012793][ T5944] Bluetooth: hci3: Malformed HCI Event: 0x22 [ 74.403222][ T8192] gfs2: gfs2 mount does not exist [ 74.415996][ T8193] tc_dump_action: action bad kind [ 74.719270][ T8215] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=24460 sclass=netlink_route_socket pid=8215 comm=syz.1.686 [ 74.989515][ T39] kauditd_printk_skb: 21873 callbacks suppressed [ 74.989580][ T39] audit: type=1400 audit(1733166663.541:75984): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 74.999021][ T39] audit: type=1400 audit(1733166663.541:75985): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.007916][ T39] audit: type=1400 audit(1733166663.551:75986): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 75.016101][ T39] audit: type=1400 audit(1733166663.571:75987): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 75.024743][ T39] audit: type=1400 audit(1733166663.581:75988): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.032555][ T39] audit: type=1400 audit(1733166663.581:75989): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 75.042222][ T39] audit: type=1400 audit(1733166663.601:75990): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 75.048480][ T39] audit: type=1400 audit(1733166663.601:75991): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 75.054761][ T39] audit: type=1400 audit(1733166663.601:75992): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 75.063364][ T39] audit: type=1400 audit(1733166663.621:75993): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 75.186025][ T8227] pim6reg1: entered promiscuous mode [ 75.187800][ T8227] pim6reg1: entered allmulticast mode [ 76.263090][ T1019] cfg80211: failed to load regulatory.db [ 76.292885][ T8277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5125 sclass=netlink_route_socket pid=8277 comm=syz.1.707 [ 76.716367][ T8322] IPVS: sh: UDP 0.0.0.0:0 - no destination available [ 76.719286][ T8322] xt_hashlimit: overflow, try lower: 0/0 [ 77.182328][ T8343] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 77.350280][ T1117] sr 2:0:0:0: [sr0] tag#29 FAILED Result: hostbyte=DID_OK driverbyte=DRIVER_OK cmd_age=0s [ 77.353014][ T1117] sr 2:0:0:0: [sr0] tag#29 Sense Key : Illegal Request [current] [ 77.353046][ T1117] sr 2:0:0:0: [sr0] tag#29 Add. Sense: Invalid command operation code [ 77.353075][ T1117] sr 2:0:0:0: [sr0] tag#29 CDB: Write(10) 2a 00 00 00 00 00 00 00 04 00 [ 77.353277][ T1117] critical target error, dev sr0, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 2 prio class 0 [ 77.363048][ T1117] Buffer I/O error on dev sr0, logical block 0, lost async page write [ 77.366742][ T1117] Buffer I/O error on dev sr0, logical block 1, lost async page write [ 77.765709][ T8408] FAULT_INJECTION: forcing a failure. [ 77.765709][ T8408] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.769524][ T8408] CPU: 2 UID: 0 PID: 8408 Comm: syz.2.763 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 77.769539][ T8408] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.769546][ T8408] Call Trace: [ 77.769550][ T8408] [ 77.769554][ T8408] dump_stack_lvl+0x16c/0x1f0 [ 77.778270][ T8408] should_fail_ex+0x497/0x5b0 [ 77.778306][ T8408] _copy_to_user+0x32/0xd0 [ 77.778318][ T8408] simple_read_from_buffer+0xd0/0x160 [ 77.778335][ T8408] proc_fail_nth_read+0x198/0x270 [ 77.778350][ T8408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.778365][ T8408] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 77.778379][ T8408] vfs_read+0x1df/0xbe0 [ 77.778390][ T8408] ? __fget_files+0x1fc/0x3a0 [ 77.778401][ T8408] ? __pfx___mutex_lock+0x10/0x10 [ 77.778436][ T8408] ? __pfx_vfs_read+0x10/0x10 [ 77.778456][ T8408] ? __fget_files+0x206/0x3a0 [ 77.778470][ T8408] ksys_read+0x12b/0x250 [ 77.778479][ T8408] ? __pfx_ksys_read+0x10/0x10 [ 77.778493][ T8408] do_syscall_64+0xcd/0x250 [ 77.778507][ T8408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.799636][ T8408] RIP: 0033:0x7fdfedd7e92c [ 77.799655][ T8408] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 77.799665][ T8408] RSP: 002b:00007fdfeeaec050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 77.799677][ T8408] RAX: ffffffffffffffda RBX: 00007fdfedf45fa0 RCX: 00007fdfedd7e92c [ 77.799685][ T8408] RDX: 000000000000000f RSI: 00007fdfeeaec0b0 RDI: 0000000000000003 [ 77.799691][ T8408] RBP: 00007fdfeeaec0a0 R08: 0000000000000000 R09: 0000000000000000 [ 77.799697][ T8408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.799704][ T8408] R13: 0000000000000000 R14: 00007fdfedf45fa0 R15: 00007ffcd5c06998 [ 77.799716][ T8408] [ 78.519800][ T8465] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 78.519822][ T8465] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.519895][ T8465] vhci_hcd vhci_hcd.0: Device attached [ 78.531342][ T8466] vhci_hcd: cannot find a urb of seqnum 41945088 max seqnum 0 [ 78.539236][ T1171] vhci_hcd: stop threads [ 78.542527][ T1171] vhci_hcd: release socket [ 78.543742][ T1171] vhci_hcd: disconnect device [ 78.592052][ T8471] mkiss: ax1: crc mode is auto. [ 78.655551][ T8475] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 78.658588][ T8475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.660638][ T8475] vhci_hcd vhci_hcd.0: Device attached [ 78.665572][ T8475] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(5) [ 78.668078][ T8475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.669654][ T8475] vhci_hcd vhci_hcd.0: Device attached [ 78.673685][ T8475] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(7) [ 78.675580][ T8475] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 78.675632][ T8475] vhci_hcd vhci_hcd.0: Device attached [ 78.679285][ T8475] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 78.682573][ T8475] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 78.683864][ T8475] vhci_hcd vhci_hcd.0: Device attached [ 78.687987][ T8482] vhci_hcd: connection closed [ 78.688057][ T8480] vhci_hcd: connection closed [ 78.688594][ T8478] vhci_hcd: connection closed [ 78.688695][ T8476] vhci_hcd: connection closed [ 78.688880][ T1171] vhci_hcd: stop threads [ 78.688893][ T1171] vhci_hcd: release socket [ 78.688903][ T1171] vhci_hcd: disconnect device [ 78.689103][ T1171] vhci_hcd: stop threads [ 78.704834][ T1171] vhci_hcd: release socket [ 78.706786][ T1171] vhci_hcd: disconnect device [ 78.708405][ T1171] vhci_hcd: stop threads [ 78.708421][ T1171] vhci_hcd: release socket [ 78.708435][ T1171] vhci_hcd: disconnect device [ 78.708562][ T1171] vhci_hcd: stop threads [ 78.708570][ T1171] vhci_hcd: release socket [ 78.708583][ T1171] vhci_hcd: disconnect device [ 79.390387][ T5944] Bluetooth: hci3: command 0x0405 tx timeout [ 79.813330][ T8544] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 79.815590][ T8544] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 79.828247][ T8544] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 79.831496][ T8544] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 79.841217][ T8544] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 79.843294][ T8544] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 79.861652][ T8544] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 79.863481][ T8544] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 79.999534][ T39] kauditd_printk_skb: 24623 callbacks suppressed [ 79.999546][ T39] audit: type=1400 audit(1733166668.551:100360): avc: denied { search } for pid=8564 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 80.010766][ T39] audit: type=1400 audit(1733166668.551:100361): avc: denied { search } for pid=8564 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 80.017252][ T39] audit: type=1400 audit(1733166668.551:100362): avc: denied { search } for pid=8564 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 80.026230][ T39] audit: type=1400 audit(1733166668.551:100363): avc: denied { search } for pid=8564 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 80.026256][ T39] audit: type=1400 audit(1733166668.551:100364): avc: denied { search } for pid=8564 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 80.026272][ T39] audit: type=1400 audit(1733166668.551:100365): avc: denied { search } for pid=8564 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 80.026289][ T39] audit: type=1400 audit(1733166668.571:100366): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 80.026305][ T39] audit: type=1400 audit(1733166668.571:100367): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 80.026321][ T39] audit: type=1400 audit(1733166668.581:100368): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 80.031011][ T39] audit: type=1400 audit(1733166668.591:100369): avc: denied { search } for pid=8567 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 81.690355][ T8768] FAULT_INJECTION: forcing a failure. [ 81.690355][ T8768] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 81.693840][ T8768] CPU: 0 UID: 0 PID: 8768 Comm: syz.0.860 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 81.697064][ T8768] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 81.701495][ T8768] Call Trace: [ 81.701509][ T8768] [ 81.701516][ T8768] dump_stack_lvl+0x16c/0x1f0 [ 81.701544][ T8768] should_fail_ex+0x497/0x5b0 [ 81.706498][ T8768] _copy_to_user+0x32/0xd0 [ 81.706524][ T8768] simple_read_from_buffer+0xd0/0x160 [ 81.706549][ T8768] proc_fail_nth_read+0x198/0x270 [ 81.706570][ T8768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.706592][ T8768] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 81.714092][ T8768] vfs_read+0x1df/0xbe0 [ 81.714123][ T8768] ? __fget_files+0x1fc/0x3a0 [ 81.717110][ T8768] ? __pfx___mutex_lock+0x10/0x10 [ 81.717145][ T8768] ? __pfx_vfs_read+0x10/0x10 [ 81.717174][ T8768] ? __fget_files+0x206/0x3a0 [ 81.717204][ T8768] ksys_read+0x12b/0x250 [ 81.717225][ T8768] ? __pfx_ksys_read+0x10/0x10 [ 81.717255][ T8768] do_syscall_64+0xcd/0x250 [ 81.717210][ T8772] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=262 sclass=netlink_route_socket pid=8772 comm=syz.1.862 [ 81.717297][ T8768] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.717330][ T8768] RIP: 0033:0x7f072f77e92c [ 81.717349][ T8768] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 81.717369][ T8768] RSP: 002b:00007f073064c050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 81.717392][ T8768] RAX: ffffffffffffffda RBX: 00007f072f945fa0 RCX: 00007f072f77e92c [ 81.717407][ T8768] RDX: 000000000000000f RSI: 00007f073064c0b0 RDI: 0000000000000003 [ 81.717421][ T8768] RBP: 00007f073064c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 81.717435][ T8768] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.717448][ T8768] R13: 0000000000000000 R14: 00007f072f945fa0 R15: 00007ffcd80dc028 [ 81.717476][ T8768] [ 82.894583][ T832] IPVS: starting estimator thread 0... [ 82.992754][ T8914] IPVS: using max 39 ests per chain, 93600 per kthread [ 83.205210][ T8967] kernel profiling enabled (shift: 0) [ 83.514076][ T9006] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 83.516543][ T9006] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 83.523175][ T9006] vhci_hcd vhci_hcd.0: Device attached [ 83.529952][ T9007] vhci_hcd: connection closed [ 83.532049][ T1171] vhci_hcd: stop threads [ 83.534955][ T1171] vhci_hcd: release socket [ 83.536409][ T1171] vhci_hcd: disconnect device [ 84.422940][ T9063] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9063 comm=syz.3.934 [ 84.766107][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 84.960664][ T9136] syzkaller0: entered promiscuous mode [ 84.967100][ T9136] syzkaller0: entered allmulticast mode [ 84.972633][ T74] syzkaller0: tun_net_xmit 48 [ 84.974471][ T9136] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 84.976298][ T9136] syzkaller0: Linktype set failed because interface is up [ 85.015395][ T39] kauditd_printk_skb: 5638 callbacks suppressed [ 85.015407][ T39] audit: type=1400 audit(1733166673.571:105909): avc: denied { getattr } for pid=9140 comm="mkdir" path="/run" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 85.026929][ T39] audit: type=1400 audit(1733166673.581:105910): avc: denied { search } for pid=9138 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 85.033832][ T39] audit: type=1400 audit(1733166673.581:105911): avc: denied { search } for pid=9138 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 85.042105][ T39] audit: type=1400 audit(1733166673.581:105912): avc: denied { search } for pid=9138 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 85.048413][ T39] audit: type=1400 audit(1733166673.581:105913): avc: denied { search } for pid=9138 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 85.057541][ T39] audit: type=1400 audit(1733166673.581:105914): avc: denied { search } for pid=9138 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 85.065493][ T39] audit: type=1400 audit(1733166673.581:105915): avc: denied { search } for pid=9138 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 85.072262][ T39] audit: type=1400 audit(1733166673.581:105916): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 85.078470][ T39] audit: type=1400 audit(1733166673.581:105917): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 85.087067][ T39] audit: type=1400 audit(1733166673.591:105918): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 86.839133][ T9228] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9228 comm=syz.3.981 [ 86.844386][ T9228] netlink: 'syz.3.981': attribute type 4 has an invalid length. [ 87.109929][ T9266] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(6) [ 87.112149][ T9266] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 87.114792][ T9266] vhci_hcd vhci_hcd.0: Device attached [ 87.119034][ T9270] vhci_hcd: connection closed [ 87.119906][ T1139] vhci_hcd: stop threads [ 87.122609][ T1139] vhci_hcd: release socket [ 87.123821][ T1139] vhci_hcd: disconnect device [ 87.424931][ T9310] xt_hashlimit: max too large, truncated to 1048576 [ 87.431206][ T9310] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 88.781001][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1054'. [ 88.785198][ T9459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1054'. [ 88.795304][ T9459] gtp0: entered promiscuous mode [ 88.797268][ T9459] gtp0: entered allmulticast mode [ 88.938863][ T9479] netlink: 'syz.2.1059': attribute type 12 has an invalid length. [ 88.965660][ T9450] usb usb7: usbfs: process 9450 (syz.1.1051) did not claim interface 0 before use [ 89.561051][ T9539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1071'. [ 89.600880][ T9542] netlink: 'syz.1.1072': attribute type 12 has an invalid length. [ 90.089549][ T69] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 90.133102][ T39] kauditd_printk_skb: 8021 callbacks suppressed [ 90.133115][ T39] audit: type=1326 audit(1733166678.691:113734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9575 comm="syz.0.1080" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f072f77ff19 code=0x0 [ 90.247156][ T9577] tap0: tun_chr_ioctl cmd 1074025677 [ 90.248698][ T9577] tap0: linktype set to 805 [ 90.271714][ T69] usb 6-1: config 0 has an invalid interface number: 55 but max is 0 [ 90.274373][ T69] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 90.277760][ T69] usb 6-1: config 0 has no interface number 0 [ 90.289583][ T69] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 90.292095][ T69] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.297202][ T69] usb 6-1: config 0 descriptor?? [ 90.302605][ T69] ldusb 6-1:0.55: Interrupt in endpoint not found [ 90.340323][ T9579] netlink: 'syz.3.1081': attribute type 12 has an invalid length. [ 90.429704][ T39] audit: type=1400 audit(1733166678.991:113735): avc: denied { read } for pid=9581 comm="syz.3.1082" name="ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.439893][ T39] audit: type=1400 audit(1733166678.991:113736): avc: denied { open } for pid=9581 comm="syz.3.1082" path="/dev/ptp1" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.451853][ T39] audit: type=1400 audit(1733166679.001:113737): avc: denied { ioctl } for pid=9581 comm="syz.3.1082" path="/dev/ptp1" dev="devtmpfs" ino=1288 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 90.494939][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.497311][ T39] audit: type=1400 audit(1733166679.051:113738): avc: denied { map } for pid=9586 comm="syz.3.1083" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 90.500603][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.508928][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.516879][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.522125][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.526045][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.528538][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.533774][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.536371][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.538849][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.543156][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.545795][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.548838][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.554512][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.557207][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.560714][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.564044][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.565878][ T39] audit: type=1400 audit(1733166679.121:113739): avc: denied { read } for pid=9552 comm="syz.1.1074" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.566343][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.576242][ T39] audit: type=1400 audit(1733166679.131:113740): avc: denied { open } for pid=9552 comm="syz.1.1074" path="/dev/sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.579620][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.584350][ T39] audit: type=1400 audit(1733166679.131:113741): avc: denied { ioctl } for pid=9552 comm="syz.1.1074" path="/dev/sg0" dev="devtmpfs" ino=721 ioctlcmd=0x2285 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.586659][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.598368][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.604846][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.607683][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.610486][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.613585][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.616139][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.618684][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.621347][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.624352][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.626956][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.630860][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.633746][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.636616][ T9587] binder: 9586:9587 ioctl c0306201 20000080 returned -22 [ 90.720185][ T9594] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1085'. [ 90.753328][ T39] audit: type=1400 audit(1733166679.311:113742): avc: denied { write } for pid=9595 comm="syz.3.1086" name="sg0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.767725][ T39] audit: type=1400 audit(1733166679.321:113743): avc: denied { attach_queue } for pid=9595 comm="syz.3.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 90.770156][ T9596] bpf: Bad value for 'uid' [ 90.776081][ T9596] program syz.3.1086 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 90.909018][ T9598] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 90.910895][ T9598] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 90.913577][ T9598] vhci_hcd vhci_hcd.0: Device attached [ 91.038129][ T9602] syzkaller0: entered promiscuous mode [ 91.041557][ T9602] syzkaller0: entered allmulticast mode [ 91.065035][ C2] ata1: illegal qc_active transition (00000000->00100000) [ 91.090237][ T35] vhci_hcd: vhci_device speed not set [ 91.159548][ T69] usb 8-1: new low-speed USB device number 3 using dummy_hcd [ 91.162587][ T35] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 91.186663][ T9611] netlink: 'syz.0.1091': attribute type 12 has an invalid length. [ 91.309601][ T69] usb 8-1: device descriptor read/64, error -71 [ 91.394712][ T1108] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 91.416066][ T1108] ata1.00: configured for UDMA/100 [ 91.616287][ T69] usb 8-1: new low-speed USB device number 4 using dummy_hcd [ 91.750808][ T69] usb 8-1: device descriptor read/64, error -71 [ 91.864886][ T69] usb usb8-port1: attempt power cycle [ 92.222717][ T69] usb 8-1: new low-speed USB device number 5 using dummy_hcd [ 92.266336][ T69] usb 8-1: device descriptor read/8, error -71 [ 92.509742][ T69] usb 8-1: new low-speed USB device number 6 using dummy_hcd [ 92.530721][ T69] usb 8-1: device descriptor read/8, error -71 [ 92.641755][ T69] usb usb8-port1: unable to enumerate USB device [ 92.787969][ T8] usb 6-1: USB disconnect, device number 2 [ 93.044317][ T9648] netlink: 'syz.2.1099': attribute type 10 has an invalid length. [ 93.047671][ T9648] geneve0: entered promiscuous mode [ 93.053400][ T9648] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 93.110114][ T9650] netlink: 'syz.2.1100': attribute type 12 has an invalid length. [ 93.343294][ T9666] block nbd2: not configured, cannot reconfigure [ 93.497103][ T9687] netlink: 'syz.2.1110': attribute type 12 has an invalid length. [ 93.543831][ T9688] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 93.543831][ T9688] The task syz.1.1109 (9688) triggered the difference, watch for misbehavior. [ 93.575045][ T9691] netlink: 1268 bytes leftover after parsing attributes in process `syz.2.1111'. [ 93.910748][ T9599] vhci_hcd: connection reset by peer [ 93.912733][ T1171] vhci_hcd: stop threads [ 93.913868][ T1171] vhci_hcd: release socket [ 93.916624][ T1171] vhci_hcd: disconnect device [ 93.972818][ T9719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1117'. [ 94.015317][ T9721] netlink: 'syz.0.1120': attribute type 12 has an invalid length. [ 94.133420][ T9737] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 94.148356][ T9737] usb usb7: usbfs: process 9737 (syz.0.1125) did not claim interface 0 before use [ 94.167623][ T9737] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 94.317417][ T9760] IPVS: persistence engine module ip_vs_pe_" not found [ 94.331204][ T9758] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=18209 sclass=netlink_route_socket pid=9758 comm=syz.2.1129 [ 94.525798][ T9791] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1141'. [ 94.533262][ T9791] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1141'. [ 94.609545][ T69] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 94.737312][ T9810] bpf: Bad value for 'mode' [ 94.779611][ T69] usb 6-1: Using ep0 maxpacket: 16 [ 94.783005][ T69] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.785779][ T69] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 94.789005][ T69] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 94.793452][ T69] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 94.796952][ T69] usb 6-1: config 0 descriptor?? [ 94.915986][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1148'. [ 95.023973][ T69] usbhid 6-1:0.0: can't add hid device: -71 [ 95.025686][ T69] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 95.029976][ T69] usb 6-1: USB disconnect, device number 3 [ 95.055883][ T9820] usb usb7: usbfs: process 9820 (syz.1.1149) did not claim interface 0 before use [ 95.097147][ T9823] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 95.157121][ T39] kauditd_printk_skb: 82 callbacks suppressed [ 95.157131][ T39] audit: type=1400 audit(1733166683.711:113826): avc: denied { nlmsg_read } for pid=9826 comm="syz.1.1152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.163417][ T9827] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1152'. [ 95.197367][ T39] audit: type=1400 audit(6028133975.764:113827): avc: denied { ioctl } for pid=9831 comm="syz.1.1153" path="socket:[23466]" dev="sockfs" ino=23466 ioctlcmd=0x48cc scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.204973][ T39] audit: type=1400 audit(6028133975.764:113828): avc: denied { read append } for pid=9831 comm="syz.1.1153" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.211546][ T39] audit: type=1400 audit(6028133975.764:113829): avc: denied { open } for pid=9831 comm="syz.1.1153" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 95.243979][ T39] audit: type=1400 audit(6028133975.804:113830): avc: denied { create } for pid=9838 comm="syz.1.1155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 95.282001][ T39] audit: type=1400 audit(6028133975.844:113831): avc: denied { write } for pid=9844 comm="syz.1.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 95.334611][ T39] audit: type=1400 audit(6028133975.894:113832): avc: denied { mounton } for pid=9846 comm="syz.1.1157" path="/304/file0" dev="tmpfs" ino=1616 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 95.347802][ T9847] 9p filesystem being mounted at /304/file0 supports timestamps until 2106-02-07 (0xffffffff) [ 95.354761][ T39] audit: type=1400 audit(6028133975.914:113833): avc: denied { read write } for pid=9846 comm="syz.1.1157" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 95.361139][ T39] audit: type=1400 audit(6028133975.914:113834): avc: denied { append } for pid=9848 comm="syz.3.1158" name="card2" dev="devtmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 95.367227][ T39] audit: type=1400 audit(6028133975.914:113835): avc: denied { create } for pid=9848 comm="syz.3.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 95.510330][ T9853] usb usb7: usbfs: process 9853 (syz.0.1160) did not claim interface 0 before use [ 95.582048][ T9858] xt_CT: You must specify a L4 protocol and not use inversions on it [ 95.653592][ T9862] gfs2: gfs2 mount does not exist [ 95.657542][ T9860] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.657812][ T9862] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.660439][ T9860] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.664612][ T9860] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.666884][ T9860] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 95.670539][ T9860] geneve2: entered promiscuous mode [ 95.671887][ T9860] geneve2: entered allmulticast mode [ 95.819985][ T9876] ptrace attach of "/syz-executor exec"[9877] was attempted by "/syz-executor exec"[9876] [ 95.888081][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 95.890738][ T9881] netlink: 'syz.2.1170': attribute type 18 has an invalid length. [ 95.892962][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 95.900528][ T9881] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1170'. [ 95.949599][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 96.120386][ T30] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 96.123613][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.126321][ T30] usb 6-1: Product: syz [ 96.127723][ T30] usb 6-1: Manufacturer: syz [ 96.129393][ T30] usb 6-1: SerialNumber: syz [ 96.135393][ T30] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 96.176695][ T30] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 96.340722][ T35] vhci_hcd: vhci_device speed not set [ 96.479715][ T62] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 96.529556][ T9882] syz.0.1169 (9882): drop_caches: 1 [ 96.563237][ T9882] syz.0.1169 (9882): drop_caches: 1 [ 96.600896][ T1019] usb 6-1: USB disconnect, device number 4 [ 96.639651][ T62] usb 8-1: Using ep0 maxpacket: 32 [ 96.642879][ T62] usb 8-1: config 0 has no interfaces? [ 96.644520][ T62] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 96.647326][ T62] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.651699][ T62] usb 8-1: config 0 descriptor?? [ 96.860641][ T62] usb 8-1: USB disconnect, device number 7 [ 97.165402][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1182'. [ 97.320806][ T9941] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1187'. [ 97.349840][ T9947] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9947 comm=syz.2.1189 [ 97.368937][ T9945] netlink: 'syz.1.1188': attribute type 10 has an invalid length. [ 97.378447][ T9945] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.381877][ T9945] bond0: (slave team0): Enslaving as an active interface with an up link [ 97.469662][ T30] usb 6-1: Service connection timeout for: 256 [ 97.471464][ T30] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 97.475143][ T30] ath9k_htc: Failed to initialize the device [ 97.477597][ T1019] usb 6-1: ath9k_htc: USB layer deinitialized [ 97.940711][ T1019] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 98.089586][ T1019] usb 6-1: Using ep0 maxpacket: 8 [ 98.092402][ T1019] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 98.095366][ T1019] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 98.097918][ T1019] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 568 [ 98.101506][ T1019] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 98.104879][ T1019] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 98.110463][ T1019] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 98.112958][ T1019] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 98.115791][ T1019] usb 6-1: Product: syz [ 98.116862][ T1019] usb 6-1: Manufacturer: syz [ 98.118196][ T1019] usb 6-1: SerialNumber: syz [ 98.327368][ T1019] cdc_ncm 6-1:1.0: bind() failure [ 98.331827][ T1019] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 98.334567][ T1019] cdc_ncm 6-1:1.1: bind() failure [ 98.341837][ T1019] usb 6-1: USB disconnect, device number 5 [ 98.587899][T10014] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 98.658811][T10018] syz.1.1214 uses old SIOCAX25GETINFO [ 98.757647][T10022] kvm: pic: non byte read [ 98.863041][T10029] syz.3.1218 (10029) used greatest stack depth: 21232 bytes left [ 99.232919][T10048] __nla_validate_parse: 4 callbacks suppressed [ 99.232937][T10048] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1225'. [ 99.269215][T10048] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.345516][T10048] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.414947][T10048] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.487333][T10048] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.571176][T10048] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.584741][T10048] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.590528][T10048] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.598370][T10048] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.871765][T10066] overlayfs: conflicting lowerdir path [ 100.353427][ T39] kauditd_printk_skb: 37 callbacks suppressed [ 100.353439][ T39] audit: type=1400 audit(6028133980.914:113873): avc: denied { write } for pid=10083 comm="syz.0.1236" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.361678][ T39] audit: type=1400 audit(6028133980.924:113874): avc: denied { map } for pid=10083 comm="syz.0.1236" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.367880][ T39] audit: type=1400 audit(6028133980.924:113875): avc: denied { execute } for pid=10083 comm="syz.0.1236" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 100.438907][ T39] audit: type=1400 audit(6028133980.994:113876): avc: denied { ioctl } for pid=10086 comm="syz.2.1237" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=26240 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 100.456683][ T39] audit: type=1400 audit(6028133981.014:113877): avc: denied { block_suspend } for pid=10086 comm="syz.2.1237" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 100.536043][ T39] audit: type=1400 audit(6028133981.094:113878): avc: denied { create } for pid=10091 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.541634][T10093] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1238'. [ 100.559664][ T39] audit: type=1400 audit(6028133981.094:113879): avc: denied { setopt } for pid=10091 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.579358][ T39] audit: type=1400 audit(6028133981.094:113880): avc: denied { watch watch_reads } for pid=10091 comm="syz.1.1238" path="/322" dev="tmpfs" ino=1707 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 100.587609][ T39] audit: type=1400 audit(6028133981.104:113881): avc: denied { write } for pid=10091 comm="syz.1.1238" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.594183][ T39] audit: type=1400 audit(6028133981.104:113882): avc: denied { ioctl } for pid=10091 comm="syz.1.1238" path="socket:[26928]" dev="sockfs" ino=26928 ioctlcmd=0x9377 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 100.774498][T10102] netlink: 'syz.3.1242': attribute type 12 has an invalid length. [ 100.784910][T10104] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 100.788316][T10104] overlayfs: missing 'lowerdir' [ 101.036698][T10121] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1247'. [ 101.039846][T10121] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1247'. [ 101.193311][T10125] trusted_key: syz.3.1248 sent an empty control message without MSG_MORE. [ 101.474073][T10138] virtio-fs: tag <(null)> not found [ 101.485384][T10135] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 101.968146][T10171] Bluetooth: MGMT ver 1.23 [ 101.968738][T10169] bridge0: port 3(vlan2) entered blocking state [ 101.972536][T10169] bridge0: port 3(vlan2) entered disabled state [ 101.974948][T10169] vlan2: entered allmulticast mode [ 101.978642][T10169] vlan2: left allmulticast mode [ 102.023995][T10172] fuseblk: Unknown parameter 'F0x0000000000000008' [ 102.076472][T10174] syzkaller0: entered promiscuous mode [ 102.078281][T10174] syzkaller0: entered allmulticast mode [ 102.083213][T10174] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 102.314396][T10178] tmpfs: Bad value for 'mpol' [ 102.329270][T10178] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1265'. [ 102.970643][T10209] trusted_key: encrypted_key: insufficient parameters specified [ 103.828074][T10229] FAULT_INJECTION: forcing a failure. [ 103.828074][T10229] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.831677][T10229] CPU: 0 UID: 0 PID: 10229 Comm: syz.1.1277 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 103.834396][T10229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 103.837078][T10229] Call Trace: [ 103.837967][T10229] [ 103.838721][T10229] dump_stack_lvl+0x16c/0x1f0 [ 103.839993][T10229] should_fail_ex+0x497/0x5b0 [ 103.841210][T10229] _copy_to_user+0x32/0xd0 [ 103.842384][T10229] simple_read_from_buffer+0xd0/0x160 [ 103.843870][T10229] proc_fail_nth_read+0x198/0x270 [ 103.845388][T10229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.846999][T10229] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 103.848475][T10229] vfs_read+0x1df/0xbe0 [ 103.849577][T10229] ? __fget_files+0x1fc/0x3a0 [ 103.850843][T10229] ? __pfx___mutex_lock+0x10/0x10 [ 103.852528][T10229] ? __pfx_vfs_read+0x10/0x10 [ 103.854143][T10229] ? __fget_files+0x206/0x3a0 [ 103.855866][T10229] ksys_read+0x12b/0x250 [ 103.857314][T10229] ? __pfx_ksys_read+0x10/0x10 [ 103.858981][T10229] do_syscall_64+0xcd/0x250 [ 103.860857][T10229] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.863058][T10229] RIP: 0033:0x7fd2a097e92c [ 103.864791][T10229] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 103.871407][T10229] RSP: 002b:00007fd29e7f6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 103.873911][T10229] RAX: ffffffffffffffda RBX: 00007fd2a0b45fa0 RCX: 00007fd2a097e92c [ 103.876107][T10229] RDX: 000000000000000f RSI: 00007fd29e7f60b0 RDI: 0000000000000004 [ 103.878176][T10229] RBP: 00007fd29e7f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 103.880419][T10229] R10: 0100000000000042 R11: 0000000000000246 R12: 0000000000000001 [ 103.882512][T10229] R13: 0000000000000000 R14: 00007fd2a0b45fa0 R15: 00007ffd323debb8 [ 103.884549][T10229] [ 105.367908][ T39] kauditd_printk_skb: 208 callbacks suppressed [ 105.367924][ T39] audit: type=1400 audit(6028133985.924:114091): avc: denied { read write } for pid=5941 comm="syz-executor" name="loop3" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 105.379959][ T39] audit: type=1400 audit(6028133985.934:114092): avc: denied { read } for pid=10332 comm="syz.1.1316" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 105.388025][ T39] audit: type=1400 audit(6028133985.934:114093): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 105.396675][ T39] audit: type=1400 audit(6028133985.934:114094): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 105.404614][ T39] audit: type=1400 audit(6028133985.944:114095): avc: denied { read } for pid=10331 comm="syz.0.1317" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 105.412818][ T39] audit: type=1400 audit(6028133985.964:114096): avc: denied { read write } for pid=10335 comm="syz.3.1318" name="vbi2" dev="devtmpfs" ino=990 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=0 [ 105.412854][ T39] audit: type=1400 audit(6028133985.964:114097): avc: denied { create } for pid=10335 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 105.412882][ T39] audit: type=1400 audit(6028133985.964:114098): avc: denied { map_create } for pid=10335 comm="syz.3.1318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 105.412910][ T39] audit: type=1400 audit(6028133985.964:114099): avc: denied { read open } for pid=10331 comm="syz.0.1317" path="net:[4026533164]" dev="nsfs" ino=4026533164 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 105.412941][ T39] audit: type=1400 audit(6028133985.964:114100): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 105.643609][T10372] tc_dump_action: action bad kind [ 106.095414][T10398] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 106.097204][T10398] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 106.100754][T10398] vhci_hcd vhci_hcd.0: Device attached [ 106.104880][T10399] vhci_hcd: unknown pdu 1 [ 106.106764][ T96] vhci_hcd: stop threads [ 106.108078][ T96] vhci_hcd: release socket [ 106.109238][ T96] vhci_hcd: disconnect device [ 106.844249][T10485] i2c i2c-1: Invalid block write size 34 [ 108.683526][T10593] sp0: Synchronizing with TNC [ 110.369663][ T39] kauditd_printk_skb: 11377 callbacks suppressed [ 110.369674][ T39] audit: type=1400 audit(110.245:124867): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.384366][ T39] audit: type=1400 audit(110.245:124868): avc: denied { read } for pid=5334 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=0 [ 110.384404][ T39] audit: type=1400 audit(110.245:124869): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.396539][ T39] audit: type=1400 audit(110.245:124870): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.401947][ T39] audit: type=1400 audit(110.245:124871): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.401965][ T39] audit: type=1400 audit(110.245:124872): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.401980][ T39] audit: type=1400 audit(110.245:124873): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.401995][ T39] audit: type=1400 audit(110.245:124874): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.402010][ T39] audit: type=1400 audit(110.245:124875): avc: denied { read } for pid=5652 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 110.438032][ T5334] audit: audit_backlog=66 > audit_backlog_limit=64 [ 111.351151][T10789] FAULT_INJECTION: forcing a failure. [ 111.351151][T10789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.356684][T10789] CPU: 1 UID: 0 PID: 10789 Comm: syz.0.1476 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 111.356701][T10789] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.356708][T10789] Call Trace: [ 111.356712][T10789] [ 111.356717][T10789] dump_stack_lvl+0x16c/0x1f0 [ 111.365643][T10789] should_fail_ex+0x497/0x5b0 [ 111.365673][T10789] _copy_from_user+0x2e/0xd0 [ 111.365685][T10789] __sys_bpf+0x21c/0x49c0 [ 111.365700][T10789] ? __pfx_lock_release+0x10/0x10 [ 111.365713][T10789] ? __pfx___sys_bpf+0x10/0x10 [ 111.365726][T10789] ? vfs_write+0x306/0x1150 [ 111.365739][T10789] ? __mutex_unlock_slowpath+0x164/0x690 [ 111.374787][T10789] ? fput+0x67/0x440 [ 111.374808][T10789] ? ksys_write+0x1ba/0x250 [ 111.377647][T10789] ? __pfx_ksys_write+0x10/0x10 [ 111.377670][T10789] __x64_sys_bpf+0x78/0xc0 [ 111.380288][T10789] ? lockdep_hardirqs_on+0x7c/0x110 [ 111.381692][T10789] do_syscall_64+0xcd/0x250 [ 111.382952][T10789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.382970][T10789] RIP: 0033:0x7f072f77ff19 [ 111.382981][T10789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.382991][T10789] RSP: 002b:00007f073064c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.383002][T10789] RAX: ffffffffffffffda RBX: 00007f072f945fa0 RCX: 00007f072f77ff19 [ 111.383009][T10789] RDX: 0000000000000011 RSI: 0000000020000140 RDI: 0000000000000009 [ 111.383016][T10789] RBP: 00007f073064c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.383023][T10789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.383030][T10789] R13: 0000000000000000 R14: 00007f072f945fa0 R15: 00007ffcd80dc028 [ 111.383042][T10789] [ 111.529822][T10830] FAULT_INJECTION: forcing a failure. [ 111.529822][T10830] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.534032][T10830] CPU: 0 UID: 0 PID: 10830 Comm: syz.0.1492 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 111.534047][T10830] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.534054][T10830] Call Trace: [ 111.534059][T10830] [ 111.534065][T10830] dump_stack_lvl+0x16c/0x1f0 [ 111.534083][T10830] should_fail_ex+0x497/0x5b0 [ 111.534101][T10830] _copy_to_user+0x32/0xd0 [ 111.534136][T10830] simple_read_from_buffer+0xd0/0x160 [ 111.534164][T10830] proc_fail_nth_read+0x198/0x270 [ 111.534187][T10830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.551290][T10830] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 111.551316][T10830] vfs_read+0x1df/0xbe0 [ 111.551328][T10830] ? __fget_files+0x1fc/0x3a0 [ 111.551340][T10830] ? __pfx___mutex_lock+0x10/0x10 [ 111.551354][T10830] ? __pfx_vfs_read+0x10/0x10 [ 111.551367][T10830] ? __fget_files+0x206/0x3a0 [ 111.551381][T10830] ksys_read+0x12b/0x250 [ 111.560496][T10830] ? __pfx_ksys_read+0x10/0x10 [ 111.560518][T10830] do_syscall_64+0xcd/0x250 [ 111.563061][T10830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.563082][T10830] RIP: 0033:0x7f072f77e92c [ 111.563092][T10830] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 111.563102][T10830] RSP: 002b:00007f073064c050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 111.563113][T10830] RAX: ffffffffffffffda RBX: 00007f072f945fa0 RCX: 00007f072f77e92c [ 111.563121][T10830] RDX: 000000000000000f RSI: 00007f073064c0b0 RDI: 0000000000000004 [ 111.563127][T10830] RBP: 00007f073064c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.563133][T10830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.563139][T10830] R13: 0000000000000000 R14: 00007f072f945fa0 R15: 00007ffcd80dc028 [ 111.563152][T10830] [ 112.076648][T10879] xt_l2tp: missing protocol rule (udp|l2tpip) [ 112.257791][T10906] trusted_key: encrypted_key: insufficient parameters specified [ 112.294448][T10913] xt_l2tp: v2 doesn't support IP mode [ 112.374250][T10926] CUSE: unknown device info "ts_offset" [ 112.375808][T10926] CUSE: DEVNAME unspecified [ 112.437770][T10941] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 112.525185][T10948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1543'. [ 112.888276][T10979] netlink: 'syz.2.1552': attribute type 12 has an invalid length. [ 112.889569][ T1019] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 113.049747][ T1019] usb 8-1: Using ep0 maxpacket: 8 [ 113.054011][ T1019] usb 8-1: config 1 has an invalid interface number: 119 but max is 2 [ 113.056648][ T1019] usb 8-1: config 1 has an invalid interface number: 188 but max is 2 [ 113.059197][ T1019] usb 8-1: config 1 has an invalid interface association descriptor of length 2, skipping [ 113.063346][ T1019] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 113.064709][T10993] input: syz0 as /devices/virtual/input/input6 [ 113.068090][ T1019] usb 8-1: config 1 has an invalid descriptor of length 219, skipping remainder of the config [ 113.072409][ T1019] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 113.075024][ T1019] usb 8-1: config 1 has no interface number 0 [ 113.076774][ T1019] usb 8-1: config 1 has no interface number 1 [ 113.080690][ T1019] usb 8-1: config 1 interface 119 altsetting 4 has a duplicate endpoint with address 0x8, skipping [ 113.083854][ T1019] usb 8-1: config 1 interface 119 altsetting 4 has a duplicate endpoint with address 0x1, skipping [ 113.086719][ T1019] usb 8-1: config 1 interface 119 altsetting 4 endpoint 0xD has invalid maxpacket 512, setting to 64 [ 113.089940][ T1019] usb 8-1: config 1 interface 119 altsetting 4 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 113.092880][ T1019] usb 8-1: config 1 interface 119 altsetting 4 endpoint 0x5 has invalid maxpacket 398, setting to 64 [ 113.095818][ T1019] usb 8-1: config 1 interface 119 altsetting 4 has an invalid descriptor for endpoint zero, skipping [ 113.101067][ T1019] usb 8-1: config 1 interface 119 altsetting 4 endpoint 0xE has invalid maxpacket 32639, setting to 64 [ 113.104200][ T1019] usb 8-1: config 1 interface 119 altsetting 4 has a duplicate endpoint with address 0xE, skipping [ 113.107295][ T1019] usb 8-1: config 1 interface 119 altsetting 4 endpoint 0x3 has invalid maxpacket 55496, setting to 64 [ 113.111272][ T1019] usb 8-1: config 1 interface 188 altsetting 8 endpoint 0xA has invalid maxpacket 1024, setting to 64 [ 113.114113][ T1019] usb 8-1: config 1 interface 188 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 113.116967][ T1019] usb 8-1: config 1 interface 188 altsetting 8 has a duplicate endpoint with address 0xE, skipping [ 113.119844][ T1019] usb 8-1: config 1 interface 188 altsetting 8 has 4 endpoint descriptors, different from the interface descriptor's value: 12 [ 113.123213][ T1019] usb 8-1: config 1 interface 119 has no altsetting 0 [ 113.125015][ T1019] usb 8-1: config 1 interface 188 has no altsetting 0 [ 113.129924][ T1019] usb 8-1: New USB device found, idVendor=0e8d, idProduct=00a4, bcdDevice=fd.66 [ 113.132709][ T1019] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.135098][ T1019] usb 8-1: Product: syz [ 113.136207][ T1019] usb 8-1: Manufacturer: syz [ 113.137448][ T1019] usb 8-1: SerialNumber: syz [ 113.189261][T10997] tmpfs: Bad value for 'mpol' [ 113.192442][T10997] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1558'. [ 113.325650][T11005] netlink: 'syz.0.1561': attribute type 12 has an invalid length. [ 113.344473][T11008] syz.2.1562: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.346413][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.350696][T11008] CPU: 2 UID: 0 PID: 11008 Comm: syz.2.1562 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 113.355803][T11008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 113.358596][T11008] Call Trace: [ 113.359501][T11008] [ 113.360296][T11008] dump_stack_lvl+0x16c/0x1f0 [ 113.361577][T11008] warn_alloc+0x24d/0x3a0 [ 113.362742][T11008] ? __pfx_warn_alloc+0x10/0x10 [ 113.364029][T11008] ? __get_vm_area_node+0x1b0/0x2f0 [ 113.365559][T11008] ? __get_vm_area_node+0x1dc/0x2f0 [ 113.366936][T11008] __vmalloc_node_range_noprof+0x1105/0x1530 [ 113.368531][T11008] ? __lock_acquire+0x15a9/0x3c40 [ 113.369876][T11008] ? drm_property_create_blob+0x74/0x330 [ 113.369905][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.371364][T11008] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.371385][T11008] ? rcu_is_watching+0x12/0xc0 [ 113.376635][T11008] ? trace_kmalloc+0x2d/0xd0 [ 113.377863][T11008] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 113.379419][T11008] ? find_held_lock+0x2d/0x110 [ 113.380474][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.380719][T11008] ? drm_property_create_blob+0x74/0x330 [ 113.380736][T11008] __kvmalloc_node_noprof+0x14f/0x1a0 [ 113.380749][T11008] ? drm_property_create_blob+0x74/0x330 [ 113.387573][T11008] drm_property_create_blob+0x74/0x330 [ 113.389277][T11008] drm_mode_createblob_ioctl+0x10d/0x440 [ 113.390066][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.390821][T11008] drm_ioctl_kernel+0x1e6/0x3d0 [ 113.394193][T11008] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 113.395748][T11008] ? __pfx_drm_ioctl_kernel+0x10/0x10 [ 113.397091][T11008] ? _copy_from_user+0x95/0xd0 [ 113.398344][T11008] drm_ioctl+0x5d6/0xc00 [ 113.399463][T11008] ? __pfx_drm_mode_createblob_ioctl+0x10/0x10 [ 113.400585][T10972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 113.401066][T11008] ? __pfx_drm_ioctl+0x10/0x10 [ 113.401083][T11008] ? __pfx_lock_release+0x10/0x10 [ 113.401099][T11008] ? selinux_file_ioctl+0x180/0x270 [ 113.403479][T10972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 113.404531][T11008] ? selinux_file_ioctl+0xb4/0x270 [ 113.410664][T11008] ? __pfx_drm_ioctl+0x10/0x10 [ 113.412036][T11008] __x64_sys_ioctl+0x190/0x200 [ 113.413290][T11008] do_syscall_64+0xcd/0x250 [ 113.414502][T11008] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.416059][T11008] RIP: 0033:0x7fdfedd7ff19 [ 113.417213][T11008] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.417780][ T1019] option 8-1:1.119: GSM modem (1-port) converter detected [ 113.422134][T11008] RSP: 002b:00007fdfebb76058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 113.422158][T11008] RAX: ffffffffffffffda RBX: 00007fdfedf46080 RCX: 00007fdfedd7ff19 [ 113.422166][T11008] RDX: 0000000020000000 RSI: 00000000c01064bd RDI: 0000000000000004 [ 113.422172][T11008] RBP: 00007fdfeddf3986 R08: 0000000000000000 R09: 0000000000000000 [ 113.422179][T11008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.431159][ T1019] usb 8-1: USB disconnect, device number 8 [ 113.432809][T11008] R13: 0000000000000000 R14: 00007fdfedf46080 R15: 00007ffcd5c06998 [ 113.438395][ T1019] option 8-1:1.119: device disconnected [ 113.438598][T11008] [ 113.446499][T11008] Mem-Info: [ 113.447705][T11008] active_anon:3508 inactive_anon:4899 isolated_anon:0 [ 113.447705][T11008] active_file:282 inactive_file:3718 isolated_file:0 [ 113.447705][T11008] unevictable:1768 dirty:104 writeback:0 [ 113.447705][T11008] slab_reclaimable:7362 slab_unreclaimable:77689 [ 113.447705][T11008] mapped:24416 shmem:4317 pagetables:1002 [ 113.447705][T11008] sec_pagetables:302 bounce:0 [ 113.447705][T11008] kernel_misc_reclaimable:0 [ 113.447705][T11008] free:515087 free_pcp:2305 free_cma:0 [ 113.469730][T11008] Node 0 active_anon:14136kB inactive_anon:19596kB active_file:1128kB inactive_file:14816kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:97616kB dirty:416kB writeback:0kB shmem:13732kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12272kB pagetables:4008kB sec_pagetables:1208kB all_unreclaimable? no [ 113.478411][T11008] Node 1 active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:56kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:48kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:80kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 113.478636][T11016] overlayfs: failed to resolve './file1': -2 [ 113.488999][T11008] Node 0 DMA free:15140kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:220kB local_pcp:12kB free_cma:0kB [ 113.505315][T11008] lowmem_reserve[]: 0 1212 0 0 0 [ 113.506997][T11008] Node 0 DMA32 free:465128kB boost:0kB min:27608kB low:34508kB high:41408kB reserved_highatomic:0KB active_anon:14384kB inactive_anon:19596kB active_file:1128kB inactive_file:14816kB unevictable:3536kB writepending:416kB present:2080628kB managed:1269940kB mlocked:0kB bounce:0kB free_pcp:7292kB local_pcp:684kB free_cma:0kB [ 113.524212][T11008] lowmem_reserve[]: 0 0 0 0 0 [ 113.525505][T11008] Node 1 Normal free:1580584kB boost:0kB min:39632kB low:49540kB high:59448kB reserved_highatomic:0KB active_anon:20kB inactive_anon:0kB active_file:0kB inactive_file:56kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781924kB mlocked:0kB bounce:0kB free_pcp:6012kB local_pcp:5212kB free_cma:0kB [ 113.533114][T11008] lowmem_reserve[]: 0 0 0 0 0 [ 113.534558][T11008] Node 0 DMA: 7*4kB (U) 5*8kB (U) 6*16kB (U) 4*32kB (U) 4*64kB (U) 2*128kB (U) 2*256kB (U) 1*512kB (U) 3*1024kB (U) 1*2048kB (U) 2*4096kB (U) = 15140kB [ 113.538679][T11008] Node 0 DMA32: 651*4kB (UME) 1390*8kB (UME) 913*16kB (UME) 591*32kB (UME) 567*64kB (UME) 223*128kB (UME) 120*256kB (UM) 80*512kB (UME) 62*1024kB (UM) 22*2048kB (UM) 42*4096kB (UM) = 464332kB [ 113.544183][T11008] Node 1 Normal: 35*4kB (UM) 30*8kB (UME) 41*16kB (UE) 193*32kB (UE) 76*64kB (UME) 28*128kB (UE) 11*256kB (UE) 17*512kB (UME) 9*1024kB (UME) 12*2048kB (UME) 371*4096kB (UM) = 1580588kB [ 113.549005][T11008] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.551585][T11008] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.553983][T11008] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 113.556456][T11008] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 113.559210][T11008] 8333 total pagecache pages [ 113.560488][T11008] 0 pages in swap cache [ 113.561678][T11008] Free swap = 124060kB [ 113.562770][T11008] Total swap = 124996kB [ 113.564011][T11008] 1048443 pages RAM [ 113.565031][T11008] 0 pages HighMem/MovableOnly [ 113.566273][T11008] 281637 pages reserved [ 113.567359][T11008] 0 pages cma reserved [ 113.613045][T11031] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1569'. [ 114.089313][T11041] netlink: 'syz.2.1572': attribute type 12 has an invalid length. [ 114.177398][T11054] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1575'. [ 114.304631][T11069] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 114.403139][T11084] netlink: 'syz.3.1583': attribute type 12 has an invalid length. [ 114.458938][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1584'. [ 114.572280][T11105] FAULT_INJECTION: forcing a failure. [ 114.572280][T11105] name failslab, interval 1, probability 0, space 0, times 0 [ 114.575395][T11105] CPU: 2 UID: 0 PID: 11105 Comm: syz.0.1588 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 114.578191][T11105] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.580916][T11105] Call Trace: [ 114.581838][T11105] [ 114.582663][T11105] dump_stack_lvl+0x16c/0x1f0 [ 114.583948][T11105] should_fail_ex+0x497/0x5b0 [ 114.585230][T11105] ? fs_reclaim_acquire+0xae/0x150 [ 114.586618][T11105] should_failslab+0xc2/0x120 [ 114.587872][T11105] __kmalloc_noprof+0xcb/0x510 [ 114.589142][T11105] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 114.590539][T11106] netlink: 'syz.1.1589': attribute type 5 has an invalid length. [ 114.590625][T11105] tomoyo_realpath_from_path+0xb9/0x720 [ 114.594362][T11105] ? tomoyo_path_number_perm+0x235/0x590 [ 114.595862][T11105] ? tomoyo_path_number_perm+0x235/0x590 [ 114.597344][T11105] tomoyo_path_number_perm+0x248/0x590 [ 114.598814][T11105] ? tomoyo_path_number_perm+0x235/0x590 [ 114.600305][T11105] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.602499][T11105] ? __pfx_lock_release+0x10/0x10 [ 114.603968][T11105] ? trace_lock_acquire+0x14e/0x1f0 [ 114.605353][T11105] ? lock_acquire+0x2f/0xb0 [ 114.606560][T11105] ? __fget_files+0x40/0x3a0 [ 114.607780][T11105] ? __fget_files+0x206/0x3a0 [ 114.609019][T11105] security_file_ioctl+0x9b/0x240 [ 114.610410][T11105] __x64_sys_ioctl+0xb7/0x200 [ 114.611957][T11105] do_syscall_64+0xcd/0x250 [ 114.613247][T11105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.614834][T11105] RIP: 0033:0x7f072f77ff19 [ 114.616134][T11105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 114.621363][T11105] RSP: 002b:00007f073064c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 114.623581][T11105] RAX: ffffffffffffffda RBX: 00007f072f945fa0 RCX: 00007f072f77ff19 [ 114.625700][T11105] RDX: 0000000020000200 RSI: 0000000000001277 RDI: 0000000000000003 [ 114.627888][T11105] RBP: 00007f073064c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 114.628762][T11109] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1591'. [ 114.629961][T11105] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.629971][T11105] R13: 0000000000000000 R14: 00007f072f945fa0 R15: 00007ffcd80dc028 [ 114.629985][T11105] [ 114.630046][ C2] vkms_vblank_simulate: vblank timer overrun [ 114.640378][T11105] ERROR: Out of memory at tomoyo_realpath_from_path. [ 114.646266][T11109] overlayfs: failed to resolve './file0': -2 [ 114.648917][T11109] openvswitch: netlink: Duplicate key (type 32). [ 114.699814][T11112] ALSA: mixer_oss: invalid OSS volume '' [ 114.731816][T11120] netlink: 'syz.1.1595': attribute type 12 has an invalid length. [ 114.868082][T11135] sch_tbf: burst 6758 is lower than device lo mtu (65550) ! [ 114.957248][T11143] FAULT_INJECTION: forcing a failure. [ 114.957248][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 114.961055][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.0.1602 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 114.963711][T11143] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 114.966693][T11143] Call Trace: [ 114.967577][T11143] [ 114.968322][T11143] dump_stack_lvl+0x16c/0x1f0 [ 114.969496][T11143] should_fail_ex+0x497/0x5b0 [ 114.970712][T11143] ? fs_reclaim_acquire+0xae/0x150 [ 114.972014][T11143] should_failslab+0xc2/0x120 [ 114.973192][T11143] __kmalloc_noprof+0xcb/0x510 [ 114.974402][T11143] ? d_absolute_path+0x137/0x1b0 [ 114.975785][T11143] ? rcu_is_watching+0x12/0xc0 [ 114.977204][T11143] tomoyo_encode2+0x100/0x3e0 [ 114.978609][T11143] tomoyo_encode+0x29/0x50 [ 114.979857][T11143] tomoyo_realpath_from_path+0x19d/0x720 [ 114.981368][T11143] tomoyo_path_number_perm+0x248/0x590 [ 114.982917][T11143] ? tomoyo_path_number_perm+0x235/0x590 [ 114.984396][T11143] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 114.986007][T11143] ? __pfx_lock_release+0x10/0x10 [ 114.987386][T11143] ? trace_lock_acquire+0x14e/0x1f0 [ 114.988771][T11143] ? lock_acquire+0x2f/0xb0 [ 114.989967][T11143] ? __fget_files+0x40/0x3a0 [ 114.991203][T11143] ? __fget_files+0x206/0x3a0 [ 114.992452][T11143] security_file_ioctl+0x9b/0x240 [ 114.993786][T11143] __x64_sys_ioctl+0xb7/0x200 [ 114.995044][T11143] do_syscall_64+0xcd/0x250 [ 114.996436][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.998224][T11143] RIP: 0033:0x7f072f77ff19 [ 114.999549][T11143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.004756][T11143] RSP: 002b:00007f073064c058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.006874][T11143] RAX: ffffffffffffffda RBX: 00007f072f945fa0 RCX: 00007f072f77ff19 [ 115.008856][T11143] RDX: 0000000020000200 RSI: 0000000000001277 RDI: 0000000000000003 [ 115.010903][T11143] RBP: 00007f073064c0a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.012903][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.014969][T11143] R13: 0000000000000000 R14: 00007f072f945fa0 R15: 00007ffcd80dc028 [ 115.017331][T11143] [ 115.018595][T11143] ERROR: Out of memory at tomoyo_realpath_from_path. [ 115.261927][ T62] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 115.293734][T11159] netlink: 'syz.2.1609': attribute type 12 has an invalid length. [ 115.392224][T11173] FAULT_INJECTION: forcing a failure. [ 115.392224][T11173] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 115.395506][T11173] CPU: 3 UID: 0 PID: 11173 Comm: syz.2.1613 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 115.399080][T11173] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 115.401026][ T39] kauditd_printk_skb: 13499 callbacks suppressed [ 115.401036][ T39] audit: type=1400 audit(115.265:138106): avc: denied { write } for pid=11167 comm="syz.0.1611" name="mice" dev="devtmpfs" ino=939 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 115.401864][T11173] Call Trace: [ 115.401872][T11173] [ 115.412641][T11173] dump_stack_lvl+0x16c/0x1f0 [ 115.413876][T11173] should_fail_ex+0x497/0x5b0 [ 115.415072][T11173] _copy_from_user+0x2e/0xd0 [ 115.416405][T11173] blkdev_common_ioctl+0xefc/0x2220 [ 115.418206][T11173] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 115.419773][T11173] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 115.421169][T11173] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 115.422427][T11173] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 115.424204][T11173] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 115.425889][T11173] blkdev_ioctl+0x1cd/0x6d0 [ 115.427211][T11173] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.428473][T11173] ? selinux_file_ioctl+0x180/0x270 [ 115.429805][T11173] ? selinux_file_ioctl+0xb4/0x270 [ 115.431132][T11173] ? __pfx_blkdev_ioctl+0x10/0x10 [ 115.432457][T11173] __x64_sys_ioctl+0x190/0x200 [ 115.433714][T11173] do_syscall_64+0xcd/0x250 [ 115.434921][T11173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 115.436488][T11173] RIP: 0033:0x7fdfedd7ff19 [ 115.437652][T11173] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.442321][ T62] usb 6-1: config 0 has no interfaces? [ 115.442798][T11173] RSP: 002b:00007fdfeeaec058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 115.446866][T11173] RAX: ffffffffffffffda RBX: 00007fdfedf45fa0 RCX: 00007fdfedd7ff19 [ 115.447603][ T62] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 115.448990][T11173] RDX: 0000000020000200 RSI: 0000000000001277 RDI: 0000000000000003 [ 115.450382][ T39] audit: type=1400 audit(115.325:138107): avc: denied { ioctl } for pid=11167 comm="syz.0.1611" path="/dev/input/mice" dev="devtmpfs" ino=939 ioctlcmd=0x9373 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 115.453199][ T62] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.454262][T11173] RBP: 00007fdfeeaec0a0 R08: 0000000000000000 R09: 0000000000000000 [ 115.461353][ T62] usb 6-1: Product: syz [ 115.463826][T11173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 115.463842][T11173] R13: 0000000000000000 R14: 00007fdfedf45fa0 R15: 00007ffcd5c06998 [ 115.463856][T11173] [ 115.480112][ T62] usb 6-1: Manufacturer: syz [ 115.481372][ T62] usb 6-1: SerialNumber: syz [ 115.488219][ T62] usb 6-1: config 0 descriptor?? [ 115.694446][ T39] audit: type=1400 audit(115.565:138108): avc: denied { read append } for pid=11186 comm="syz.0.1617" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.696928][T11126] ebt_among: dst integrity fail: 200 [ 115.702097][ T39] audit: type=1400 audit(115.565:138109): avc: denied { open } for pid=11186 comm="syz.0.1617" path="/dev/nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.709106][ T39] audit: type=1400 audit(115.575:138110): avc: denied { ioctl } for pid=11186 comm="syz.0.1617" path="/dev/nvram" dev="devtmpfs" ino=631 ioctlcmd=0x7040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 115.713148][ T62] usb 6-1: USB disconnect, device number 6 [ 115.718811][ T39] audit: type=1400 audit(115.575:138111): avc: denied { setopt } for pid=11125 comm="syz.1.1597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 115.782309][T11193] netlink: 'syz.2.1620': attribute type 12 has an invalid length. [ 115.979511][ T6004] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 116.129625][ T6004] usb 5-1: Using ep0 maxpacket: 16 [ 116.134131][ T6004] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 116.136763][ T6004] usb 5-1: config 0 has no interface number 0 [ 116.139748][ T6004] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 116.143578][ T6004] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 116.148546][ T6004] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 116.152439][ T6004] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 116.155282][ T6004] usb 5-1: Product: syz [ 116.156726][ T6004] usb 5-1: SerialNumber: syz [ 116.161013][ T6004] usb 5-1: config 0 descriptor?? [ 116.164559][ T6004] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 116.167883][ T6004] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.8/input/input8 [ 116.346955][T11208] FAULT_INJECTION: forcing a failure. [ 116.346955][T11208] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 116.351542][T11208] CPU: 1 UID: 0 PID: 11208 Comm: syz.1.1624 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 116.355370][T11208] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 116.359189][T11208] Call Trace: [ 116.360419][T11208] [ 116.361530][T11208] dump_stack_lvl+0x16c/0x1f0 [ 116.363291][T11208] should_fail_ex+0x497/0x5b0 [ 116.365022][T11208] _copy_to_user+0x32/0xd0 [ 116.366595][T11208] simple_read_from_buffer+0xd0/0x160 [ 116.368416][T11208] proc_fail_nth_read+0x198/0x270 [ 116.370232][T11208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.372192][T11208] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 116.374155][T11208] vfs_read+0x1df/0xbe0 [ 116.375645][T11208] ? __fget_files+0x1fc/0x3a0 [ 116.377675][T11208] ? __pfx___mutex_lock+0x10/0x10 [ 116.379655][T11208] ? __pfx_vfs_read+0x10/0x10 [ 116.381516][T11208] ? __fget_files+0x206/0x3a0 [ 116.383580][T11208] ksys_read+0x12b/0x250 [ 116.385258][T11208] ? __pfx_ksys_read+0x10/0x10 [ 116.387052][T11208] do_syscall_64+0xcd/0x250 [ 116.388654][T11208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.390829][T11208] RIP: 0033:0x7fd2a097e92c [ 116.392377][T11208] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 116.399399][T11208] RSP: 002b:00007fd29e7f6050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 116.402687][T11208] RAX: ffffffffffffffda RBX: 00007fd2a0b45fa0 RCX: 00007fd2a097e92c [ 116.405558][T11208] RDX: 000000000000000f RSI: 00007fd29e7f60b0 RDI: 0000000000000004 [ 116.408429][T11208] RBP: 00007fd29e7f60a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.411092][T11208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.413114][T11208] R13: 0000000000000000 R14: 00007fd2a0b45fa0 R15: 00007ffd323debb8 [ 116.415152][T11208] [ 116.420838][ T39] audit: type=1400 audit(116.295:138112): avc: denied { write } for pid=11188 comm="syz.0.1618" name="001" dev="devtmpfs" ino=767 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 116.428838][ T1019] usb 5-1: USB disconnect, device number 2 [ 116.428931][ C2] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 116.432625][ C2] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 116.441336][ T1019] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 116.963627][T11213] overlayfs: missing 'lowerdir' [ 117.091192][ T39] audit: type=1400 audit(116.965:138113): avc: denied { read } for pid=11221 comm="syz.0.1630" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.097482][ T39] audit: type=1400 audit(116.965:138114): avc: denied { open } for pid=11221 comm="syz.0.1630" path="/dev/snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.201869][ T39] audit: type=1400 audit(117.075:138115): avc: denied { ioctl } for pid=11221 comm="syz.0.1630" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 117.201944][T11222] Restarting kernel threads ... done. [ 117.344928][T11227] binder: 11226:11227 ioctl c0306201 20000300 returned -22 [ 118.124728][T11252] netlink: 'syz.0.1641': attribute type 12 has an invalid length. [ 118.335070][T11272] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1646'. [ 118.749596][ T832] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 118.755435][T11288] netlink: 'syz.1.1651': attribute type 12 has an invalid length. [ 118.920192][ T832] usb 5-1: Using ep0 maxpacket: 8 [ 118.922683][T11301] binder: 11299:11301 ioctl c0306201 200002c0 returned -14 [ 118.927297][ T832] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.932546][ T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.935230][ T832] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.938130][ T832] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.942238][ T832] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 118.945091][ T832] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.053621][T11315] netlink: 'syz.1.1661': attribute type 12 has an invalid length. [ 119.108834][T11320] netlink: 'syz.2.1664': attribute type 2 has an invalid length. [ 119.171026][ T832] usb 5-1: GET_CAPABILITIES returned 0 [ 119.173612][ T832] usbtmc 5-1:16.0: can't read capabilities [ 119.225304][T11339] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2576 sclass=netlink_route_socket pid=11339 comm=syz.3.1668 [ 119.272851][T11346] SELinux: security_context_str_to_sid () failed with errno=-22 [ 119.312780][T11349] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 119.372446][T11277] usb 5-1: usbtmc_ioctl_clear_out_halt returned -32 [ 119.375577][T11277] wg1: entered promiscuous mode [ 119.598467][T11361] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1674'. [ 119.683749][T11365] netlink: 'syz.1.1676': attribute type 12 has an invalid length. [ 119.778284][T11372] netlink: 'syz.1.1678': attribute type 3 has an invalid length. [ 119.780968][T11372] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1678'. [ 119.984359][T11387] netlink: zone id is out of range [ 119.985763][T11387] netlink: zone id is out of range [ 119.987349][T11387] netlink: zone id is out of range [ 119.988817][T11387] netlink: zone id is out of range [ 119.990679][T11387] netlink: zone id is out of range [ 119.992242][T11387] netlink: zone id is out of range [ 119.993541][T11387] netlink: zone id is out of range [ 119.994881][T11387] netlink: zone id is out of range [ 119.996229][T11387] netlink: del zone limit has 4 unknown bytes [ 120.003225][T11390] binder: BINDER_SET_CONTEXT_MGR already set [ 120.005667][T11390] binder: 11389:11390 ioctl 4018620d 20000100 returned -16 [ 120.008592][T11392] binder_alloc: binder_alloc_mmap_handler: 11389 20ffe000-20fff000 already mapped failed -16 [ 120.013038][T11387] fuse: Bad value for 'fd' [ 120.013195][T11390] binder_alloc: 11389: binder_alloc_buf, no vma [ 120.099625][ T30] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 120.163935][T11401] netlink: 'syz.2.1686': attribute type 12 has an invalid length. [ 120.261749][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 120.264970][ T30] usb 8-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 120.267425][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 120.286101][ T30] usb 8-1: config 0 descriptor?? [ 120.493896][ T30] usbhid 8-1:0.0: can't add hid device: -71 [ 120.498112][ T30] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 120.501635][ T30] usb 8-1: USB disconnect, device number 9 [ 120.674278][T11431] netlink: 'syz.2.1693': attribute type 29 has an invalid length. [ 121.038767][T11445] netlink: 'syz.3.1697': attribute type 12 has an invalid length. [ 121.058840][T11447] xt_CONNSECMARK: invalid mode: 0 [ 121.064589][T11447] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1698'. [ 121.179174][ T39] kauditd_printk_skb: 58 callbacks suppressed [ 121.179186][ T39] audit: type=1400 audit(121.049:138174): avc: denied { mount } for pid=11459 comm="syz.2.1702" name="/" dev="rpc_pipefs" ino=31589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 121.188503][ T39] audit: type=1400 audit(121.059:138175): avc: denied { watch } for pid=11459 comm="syz.2.1702" path="/426/file0" dev="rpc_pipefs" ino=31589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=dir permissive=1 [ 121.194676][ T39] audit: type=1400 audit(121.069:138176): avc: denied { unmount } for pid=11459 comm="syz.2.1702" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 121.226361][ T39] audit: type=1400 audit(121.099:138177): avc: denied { ioctl } for pid=11451 comm="syz.3.1700" path="socket:[32942]" dev="sockfs" ino=32942 ioctlcmd=0x4942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 121.393200][ T833] usb 5-1: USB disconnect, device number 3 [ 121.454515][T11468] binder: 11467:11468 ioctl c0306201 0 returned -14 [ 121.461070][T11468] binder: 11467:11468 ioctl 4018620d 0 returned -22 [ 121.494807][T11470] input: syz0 as /devices/virtual/input/input10 [ 121.500942][ T39] audit: type=1400 audit(121.379:138178): avc: denied { setopt } for pid=11469 comm="syz.0.1705" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 121.566868][T11476] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1708'. [ 121.607059][T11478] netlink: 'syz.1.1709': attribute type 12 has an invalid length. [ 121.670777][ T39] audit: type=1400 audit(121.549:138179): avc: denied { remount } for pid=11482 comm="syz.0.1711" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 122.001361][T11513] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1720'. [ 122.171699][ T39] audit: type=1400 audit(122.049:138180): avc: denied { bind } for pid=11530 comm="syz.0.1726" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 122.224911][ T39] audit: type=1400 audit(122.099:138181): avc: denied { mount } for pid=11534 comm="syz.3.1727" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 122.231647][T11532] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.234170][T11532] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.236164][ T39] audit: type=1400 audit(122.109:138182): avc: denied { remount } for pid=11534 comm="syz.3.1727" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 122.245662][T11532] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.248021][ T39] audit: type=1400 audit(122.119:138183): avc: denied { unmount } for pid=5941 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 122.249647][T11532] Buffer I/O error on dev loop7, logical block 1, async page read [ 122.256776][T11537] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.270403][T11532] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.272861][T11532] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.275084][T11532] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.277394][T11532] Buffer I/O error on dev loop7, logical block 1, async page read [ 122.280748][T11532] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.284186][T11532] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.286427][T11532] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.288877][T11532] Buffer I/O error on dev loop7, logical block 1, async page read [ 122.291116][T11532] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.293793][T11532] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.295850][T11532] I/O error, dev loop7, sector 4 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.298651][T11532] Buffer I/O error on dev loop7, logical block 1, async page read [ 122.308934][T11532] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.312277][T11532] Buffer I/O error on dev loop7, logical block 0, async page read [ 122.315317][T11532] Buffer I/O error on dev loop7, logical block 1, async page read [ 122.325151][T11532] ldm_validate_partition_table(): Disk read failed. [ 122.328444][T11532] loop7: unable to read partition table [ 122.330777][T11532] loop_reread_partitions: partition scan of loop7 (K>i) /480# $qZI[u@3bj!5MM]z) failed (rc=-5) [ 122.674982][T11557] xt_hashlimit: size too large, truncated to 1048576 [ 122.682492][T11558] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1734'. [ 122.881145][T11573] vivid-000: ================= START STATUS ================= [ 122.884262][T11573] vivid-000: Test Pattern: 75% Colorbar [ 122.887466][T11573] vivid-000: Fill Percentage of Frame: 100 [ 122.890344][T11573] vivid-000: Horizontal Movement: No Movement [ 122.892543][T11573] vivid-000: Vertical Movement: No Movement [ 122.894708][T11573] vivid-000: OSD Text Mode: All [ 122.896532][T11573] vivid-000: Show Border: false [ 122.898555][T11573] vivid-000: Show Square: false [ 122.900066][T11573] vivid-000: Sensor Flipped Horizontally: false [ 122.901821][T11573] vivid-000: Sensor Flipped Vertically: false [ 122.903394][T11573] vivid-000: Insert SAV Code in Image: false [ 122.905236][T11573] vivid-000: Insert EAV Code in Image: false [ 122.907301][T11573] vivid-000: Insert Video Guard Band: false [ 122.909081][T11573] vivid-000: Reduced Framerate: false [ 122.910817][T11573] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator [ 122.912936][T11573] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator [ 122.915049][T11573] vivid-000: Enable Capture Cropping: true [ 122.916831][T11573] vivid-000: Enable Capture Composing: true [ 122.918596][T11573] vivid-000: Enable Capture Scaler: true [ 122.920884][T11573] vivid-000: Timestamp Source: End of Frame [ 122.922536][T11573] vivid-000: Colorspace: sRGB [ 122.923747][T11573] vivid-000: Transfer Function: Default [ 122.925194][T11573] vivid-000: Y'CbCr Encoding: Default [ 122.927113][T11573] vivid-000: HSV Encoding: Hue 0-179 [ 122.931427][T11573] vivid-000: Quantization: Default [ 122.932951][T11573] vivid-000: Apply Alpha To Red Only: false [ 122.934666][T11573] vivid-000: Standard Aspect Ratio: 4x3 [ 122.936275][T11573] vivid-000: DV Timings Signal Mode: Current DV Timings inactive [ 122.938516][T11573] vivid-000: DV Timings: 640x480p59 inactive [ 122.941007][T11573] vivid-000: DV Timings Aspect Ratio: Source Width x Height [ 122.942816][T11575] /dev/nbd1: Can't open blockdev [ 122.945894][T11573] vivid-000: Maximum EDID Blocks: 2 [ 122.949315][T11573] vivid-000: Limited RGB Range (16-235): false [ 122.951014][T11573] vivid-000: Rx RGB Quantization Range: Automatic [ 122.952724][T11573] vivid-000: Power Present: 0x00000001 [ 122.954397][T11573] tpg source WxH: 320x180 (R'G'B) [ 122.955834][T11573] tpg field: 1 [ 122.956846][T11573] tpg crop: 320x180@0x0 [ 122.958219][T11573] tpg compose: 320x180@0x0 [ 122.967030][T11573] tpg colorspace: 8 [ 122.968304][T11573] tpg transfer function: 0/0 [ 122.975063][T11573] tpg quantization: 0/0 [ 122.976312][T11573] tpg RGB range: 0/2 [ 122.977406][T11573] vivid-000: ================== END STATUS ================== [ 122.989672][ T6004] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 123.008169][T11578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.094336][T11578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.147146][T11593] wg2: entered promiscuous mode [ 123.148985][T11593] wg2: entered allmulticast mode [ 123.161801][ T6004] usb 8-1: Using ep0 maxpacket: 8 [ 123.166871][ T6004] usb 8-1: New USB device found, idVendor=0bed, idProduct=1101, bcdDevice=7c.68 [ 123.169262][ T6004] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.171699][ T6004] usb 8-1: Product: syz [ 123.172994][ T6004] usb 8-1: Manufacturer: syz [ 123.174232][ T6004] usb 8-1: SerialNumber: syz [ 123.178712][ T6004] usb 8-1: config 0 descriptor?? [ 123.182193][T11578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.184913][ T6004] cp210x 8-1:0.0: cp210x converter detected [ 123.206130][T11595] input: syz0 as /devices/virtual/input/input11 [ 123.251437][T11578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.331297][T11578] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.340537][T11578] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.348743][T11578] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.358923][T11578] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.394957][ T6004] cp210x 8-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 123.396866][ T6004] cp210x 8-1:0.0: querying part number failed [ 123.406541][ T6004] usb 8-1: cp210x converter now attached to ttyUSB0 [ 123.426082][ T6004] usb 8-1: USB disconnect, device number 10 [ 123.433395][ T6004] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 123.435621][ T6004] cp210x 8-1:0.0: device disconnected [ 123.588754][T11608] validate_nla: 3 callbacks suppressed [ 123.588766][T11608] netlink: 'syz.2.1752': attribute type 12 has an invalid length. [ 123.651847][T11612] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1753'. [ 123.654110][T11612] tipc: Invalid UDP bearer configuration [ 123.654132][T11612] tipc: Enabling of bearer rejected, failed to enable media [ 124.220444][T11636] xt_l2tp: v2 doesn't support IP mode [ 124.224020][T11638] netlink: 'syz.3.1762': attribute type 12 has an invalid length. [ 124.354386][T11648] Bluetooth: MGMT ver 1.23 [ 124.360539][T11648] dccp_invalid_packet: P.Data Offset(0) too small [ 125.146191][T11667] tipc: Started in network mode [ 125.147590][T11667] tipc: Node identity ff010000000000000000000000000001, cluster identity 2 [ 125.149969][T11667] tipc: Enabling of bearer rejected, failed to enable media [ 125.167684][T11669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51219 sclass=netlink_route_socket pid=11669 comm=syz.3.1771 [ 125.212934][T11672] netlink: 'syz.3.1773': attribute type 12 has an invalid length. [ 125.300165][T11677] netlink: 'syz.3.1774': attribute type 10 has an invalid length. [ 125.302758][T11676] netlink: 'syz.3.1774': attribute type 10 has an invalid length. [ 125.305899][T11676] syz_tun: entered promiscuous mode [ 125.312893][T11676] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 125.649721][ T5985] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 125.804645][ T5985] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.808071][ T5985] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 125.811601][ T5985] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 125.814687][ T5985] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 125.820464][ T5985] usb 6-1: config 0 descriptor?? [ 125.824121][ T5985] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 125.826642][ T5985] dvb-usb: bulk message failed: -22 (3/0) [ 125.834876][ T5985] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 125.843369][ T5985] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 125.845827][ T5985] usb 6-1: media controller created [ 125.848627][ T5985] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 125.858355][ T5985] dvb-usb: bulk message failed: -22 (6/0) [ 125.861575][ T5985] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 125.865589][ T5985] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb6/6-1/input/input12 [ 125.873677][ T5985] dvb-usb: schedule remote query interval to 150 msecs. [ 125.875717][ T5985] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 126.024491][T11682] dibusb: i2c wr: len=61 is too big! [ 126.024491][T11682] [ 126.041704][ T5985] dvb-usb: bulk message failed: -22 (1/0) [ 126.043323][ T5985] dvb-usb: error while querying for an remote control event. [ 126.078443][ T1019] usb 6-1: USB disconnect, device number 7 [ 126.097185][ T1019] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 126.297606][ T39] kauditd_printk_skb: 55 callbacks suppressed [ 126.297618][ T39] audit: type=1400 audit(126.169:138239): avc: denied { getopt } for pid=11702 comm="syz.3.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 126.388158][ T39] audit: type=1400 audit(126.259:138240): avc: denied { create } for pid=11707 comm="syz.0.1782" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 126.443651][T11712] netlink: 'syz.3.1784': attribute type 12 has an invalid length. [ 126.482787][ T39] audit: type=1400 audit(126.359:138241): avc: denied { load_policy } for pid=11709 comm="syz.0.1783" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 126.482965][T11713] SELinux: truncated policydb string identifier [ 126.491354][T11713] SELinux: failed to load policy [ 126.522173][T11715] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.562557][T11715] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.626427][T11715] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.686485][T11715] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.695872][T11732] Invalid source name [ 126.719759][ T39] audit: type=1400 audit(126.589:138242): avc: denied { map } for pid=11730 comm="syz.2.1789" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 126.779199][T11715] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.786175][T11715] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.797210][T11715] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.802332][T11715] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.866051][ T39] audit: type=1400 audit(126.739:138243): avc: denied { setcheckreqprot } for pid=11735 comm="syz.3.1792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 126.879586][ T39] audit: type=1400 audit(126.739:138244): avc: denied { write } for pid=11736 comm="syz.2.1791" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 126.904427][T11741] netlink: 'syz.3.1793': attribute type 12 has an invalid length. [ 126.943981][T11742] virtio-pci 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 127.011383][ T39] audit: type=1400 audit(126.889:138245): avc: denied { validate_trans } for pid=11745 comm="syz.3.1794" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 127.342938][ T39] audit: type=1400 audit(127.219:138246): avc: denied { create } for pid=11770 comm="syz.3.1800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.396704][ T39] audit: type=1400 audit(127.269:138247): avc: denied { ioctl } for pid=11770 comm="syz.3.1800" path="socket:[33787]" dev="sockfs" ino=33787 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 127.508698][T11779] netlink: 'syz.0.1803': attribute type 12 has an invalid length. [ 127.652084][T11789] pim6reg1: entered promiscuous mode [ 127.653490][T11789] pim6reg1: entered allmulticast mode [ 127.715721][ T39] audit: type=1400 audit(127.589:138248): avc: denied { mount } for pid=11798 comm="syz.3.1809" name="/" dev="hugetlbfs" ino=34360 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 127.715870][T11799] hugetlbfs: Unknown parameter 'zode' [ 127.758440][T11805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1808'. [ 127.762971][T11805] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1808'. [ 127.765528][T11805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1808'. [ 127.767703][T11805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1808'. [ 127.783371][T11812] random: crng reseeded on system resumption [ 127.840514][T11817] netlink: 'syz.3.1814': attribute type 12 has an invalid length. [ 128.401556][T11841] netlink: 'syz.2.1821': attribute type 2 has an invalid length. [ 128.403510][T11841] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1821'. [ 128.440018][T11843] mmap: syz.2.1822 (11843): VmData 37462016 exceed data ulimit 4. Update limits or use boot option ignore_rlimit_data. [ 128.444077][T11843] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1822'. [ 128.484243][T11845] MTD: Attempt to mount non-MTD device "/dev/sr0" [ 128.499379][T11845] cramfs: wrong magic [ 128.505844][T11847] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1824'. [ 128.633372][T11863] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3349 sclass=netlink_route_socket pid=11863 comm=syz.2.1830 [ 128.661280][T11869] validate_nla: 2 callbacks suppressed [ 128.661292][T11869] netlink: 'syz.1.1831': attribute type 5 has an invalid length. [ 128.665023][T11869] netlink: 'syz.1.1831': attribute type 33 has an invalid length. [ 128.888224][T11891] fuse: Bad value for 'group_id' [ 128.890482][T11891] fuse: Bad value for 'group_id' [ 128.989550][ T56] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.139587][ T56] usb 5-1: Using ep0 maxpacket: 8 [ 129.142448][ T56] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 129.144686][ T56] usb 5-1: config 179 has no interface number 0 [ 129.146262][ T56] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 129.149167][ T56] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 129.152167][ T56] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 129.154993][ T56] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 129.158140][ T56] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 129.161639][ T56] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 129.163895][ T56] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.167301][T11882] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.388117][ T56] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:179.65/input/input13 [ 129.574953][T11906] netlink: 'syz.2.1839': attribute type 12 has an invalid length. [ 129.579697][ T6004] usb 5-1: USB disconnect, device number 4 [ 129.579699][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 129.579736][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 129.597227][ T6004] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 129.835077][T11928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1844'. [ 129.892368][T11938] netlink: 'syz.3.1848': attribute type 12 has an invalid length. [ 130.333071][T11977] netlink: 'syz.3.1860': attribute type 12 has an invalid length. [ 130.377321][T11979] netlink: 'syz.0.1861': attribute type 28 has an invalid length. [ 130.379791][T11979] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1861'. [ 130.405790][T11982] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1862'. [ 130.411450][T11982] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1862'. [ 130.419633][ T5985] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 130.561687][T11997] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1865'. [ 130.564453][T11999] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1865'. [ 130.570663][ T5985] usb 6-1: config 0 has no interfaces? [ 130.573739][ T5985] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.576047][ T5985] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.578060][ T5985] usb 6-1: Product: syz [ 130.579143][ T5985] usb 6-1: Manufacturer: syz [ 130.589611][ T5985] usb 6-1: SerialNumber: syz [ 130.591941][ T5985] usb 6-1: config 0 descriptor?? [ 130.628045][T12002] /dev/sg0: Can't lookup blockdev [ 130.686891][T12014] netlink: 'syz.3.1870': attribute type 12 has an invalid length. [ 130.774745][T12021] pim6reg1: entered promiscuous mode [ 130.776218][T12021] pim6reg1: entered allmulticast mode [ 130.795937][ T1019] usb 6-1: USB disconnect, device number 8 [ 130.869351][T12028] dlm: no locking on control device [ 130.912137][T12028] ipt_REJECT: TCP_RESET invalid for non-tcp [ 131.040014][T12035] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 131.049607][ T11] Bluetooth: hci4: Frame reassembly failed (-84) [ 131.665488][ T39] kauditd_printk_skb: 26 callbacks suppressed [ 131.665499][ T39] audit: type=1400 audit(131.539:138275): avc: denied { write } for pid=12050 comm="syz.0.1880" name="hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.675335][ T39] audit: type=1400 audit(131.539:138276): avc: denied { open } for pid=12050 comm="syz.0.1880" path="/dev/hpet" dev="devtmpfs" ino=630 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 131.680302][ T25] hid-generic 091A:0008:000C.0003: unknown main item tag 0x7 [ 131.683328][ T39] audit: type=1400 audit(131.549:138277): avc: denied { read write } for pid=12050 comm="syz.0.1880" name="uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.685146][ T25] hid-generic 091A:0008:000C.0003: unknown main item tag 0x7 [ 131.685165][ T25] hid-generic 091A:0008:000C.0003: unknown main item tag 0x0 [ 131.685178][ T25] hid-generic 091A:0008:000C.0003: unknown main item tag 0xe [ 131.692060][ T39] audit: type=1400 audit(131.549:138278): avc: denied { open } for pid=12050 comm="syz.0.1880" path="/dev/uhid" dev="devtmpfs" ino=1296 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.695701][ T25] hid-generic 091A:0008:000C.0003: item fetching failed at offset 24/160 [ 131.697699][ T39] audit: type=1400 audit(131.569:138279): avc: denied { write } for pid=12050 comm="syz.0.1880" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 131.703963][ T25] hid-generic 091A:0008:000C.0003: probe with driver hid-generic failed with error -22 [ 131.771832][T12053] netlink: 'syz.0.1881': attribute type 12 has an invalid length. [ 132.159600][ T35] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 132.309562][ T35] usb 5-1: Using ep0 maxpacket: 8 [ 132.314718][ T35] usb 5-1: config index 0 descriptor too short (expected 5924, got 36) [ 132.317454][ T35] usb 5-1: config 250 has an invalid interface number: 228 but max is -1 [ 132.320493][ T35] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0 [ 132.324184][ T35] usb 5-1: config 250 has no interface number 0 [ 132.326657][ T35] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024 [ 132.330900][ T35] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024 [ 132.334665][ T35] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0 [ 132.338288][ T35] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0 [ 132.342253][ T35] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17 [ 132.342393][T12069] netlink: 'syz.1.1886': attribute type 10 has an invalid length. [ 132.347170][ T35] usb 5-1: config 250 interface 228 has no altsetting 0 [ 132.354023][ T35] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07 [ 132.357235][ T35] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59 [ 132.360667][ T35] usb 5-1: Product: syz [ 132.362237][ T35] usb 5-1: SerialNumber: syz [ 132.367753][T12069] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 132.368635][ T35] hub 5-1:250.228: bad descriptor, ignoring hub [ 132.370302][T12069] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1886'. [ 132.372371][ T35] hub 5-1:250.228: probe with driver hub failed with error -5 [ 132.582243][ T1418] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.584145][ T1418] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.586146][ T35] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292 [ 132.672204][ T39] audit: type=1400 audit(132.549:138280): avc: denied { read write } for pid=12080 comm="syz.2.1890" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.680639][ T39] audit: type=1400 audit(132.549:138281): avc: denied { open } for pid=12080 comm="syz.2.1890" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.680675][ T39] audit: type=1400 audit(132.549:138282): avc: denied { map } for pid=12080 comm="syz.2.1890" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.680706][ T39] audit: type=1400 audit(132.549:138283): avc: denied { execute } for pid=12080 comm="syz.2.1890" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 132.782219][ T39] audit: type=1400 audit(132.659:138284): avc: denied { read write } for pid=12064 comm="syz.0.1884" name="lp0" dev="devtmpfs" ino=3024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 132.891074][ T35] usb 5-1: USB disconnect, device number 5 [ 132.898833][ T35] usblp0: removed [ 133.060829][ T5957] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 133.405450][T12087] netlink: 'syz.0.1891': attribute type 12 has an invalid length. [ 146.553327][ T39] kauditd_printk_skb: 1 callbacks suppressed [ 146.553340][ T39] audit: type=1400 audit(146.429:138286): avc: denied { execute } for pid=12101 comm="syz-executor" name="syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 146.571282][ T39] audit: type=1400 audit(146.429:138287): avc: denied { execute_no_trans } for pid=12101 comm="syz-executor" path="/syz-executor" dev="sda1" ino=1924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 146.572305][ T1418] ================================================================== [ 146.579785][ T1418] BUG: KASAN: slab-use-after-free in handle_tx+0x5a5/0x630 [ 146.581674][ T1418] Read of size 8 at addr ffff8880256ce020 by task aoe_tx0/1418 [ 146.583255][ T39] audit: type=1400 audit(146.459:138288): avc: denied { write } for pid=5927 comm="syz-executor" path="pipe:[6364]" dev="pipefs" ino=6364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 146.584998][ T1418] [ 146.585010][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 146.598044][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.602491][ T1418] Call Trace: [ 146.603702][ T1418] [ 146.604758][ T1418] dump_stack_lvl+0x116/0x1f0 [ 146.606786][ T1418] print_report+0xc3/0x620 [ 146.608382][ T1418] ? __virt_addr_valid+0x5e/0x590 [ 146.610230][ T1418] ? __phys_addr+0xc6/0x150 [ 146.611914][ T1418] kasan_report+0xd9/0x110 [ 146.613564][ T1418] ? handle_tx+0x5a5/0x630 [ 146.615148][ T1418] ? handle_tx+0x5a5/0x630 [ 146.616802][ T1418] handle_tx+0x5a5/0x630 [ 146.618406][ T1418] dev_hard_start_xmit+0x9a/0x7b0 [ 146.620333][ T1418] __dev_queue_xmit+0x7f0/0x43e0 [ 146.622232][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 146.624244][ T1418] ? __pfx___lock_acquire+0x10/0x10 [ 146.626077][ T1418] ? __pfx___lock_acquire+0x10/0x10 [ 146.627963][ T1418] ? lock_acquire.part.0+0x11b/0x380 [ 146.629908][ T1418] ? find_held_lock+0x2d/0x110 [ 146.631644][ T1418] ? find_held_lock+0x2d/0x110 [ 146.633341][ T1418] ? tx+0xa8/0x190 [ 146.635085][ T1418] ? __pfx_lock_release+0x10/0x10 [ 146.636995][ T1418] ? lock_acquire+0x2f/0xb0 [ 146.638682][ T1418] tx+0xcc/0x190 [ 146.639990][ T1418] ? __pfx_tx+0x10/0x10 [ 146.641516][ T1418] kthread+0x1e7/0x3c0 [ 146.642983][ T1418] ? __pfx_kthread+0x10/0x10 [ 146.644665][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 146.646554][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.648389][ T1418] ? __kthread_parkme+0x148/0x220 [ 146.650183][ T1418] ? __pfx_kthread+0x10/0x10 [ 146.652028][ T1418] kthread+0x2c1/0x3a0 [ 146.653464][ T1418] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.655025][ T1418] ? __pfx_kthread+0x10/0x10 [ 146.656246][ T1418] ret_from_fork+0x45/0x80 [ 146.657401][ T1418] ? __pfx_kthread+0x10/0x10 [ 146.658616][ T1418] ret_from_fork_asm+0x1a/0x30 [ 146.659984][ T1418] [ 146.660799][ T1418] [ 146.661429][ T1418] Allocated by task 7740: [ 146.662580][ T1418] kasan_save_stack+0x33/0x60 [ 146.663818][ T1418] kasan_save_track+0x14/0x30 [ 146.665068][ T1418] __kasan_kmalloc+0xaa/0xb0 [ 146.666295][ T1418] alloc_tty_struct+0x98/0x8d0 [ 146.667549][ T1418] tty_init_dev.part.0+0x1e/0x660 [ 146.668863][ T1418] tty_open+0xac1/0xf80 [ 146.670156][ T1418] chrdev_open+0x237/0x6a0 [ 146.671787][ T1418] do_dentry_open+0xf59/0x1ea0 [ 146.673394][ T1418] vfs_open+0x82/0x3f0 [ 146.674423][ T1418] path_openat+0x1e6a/0x2d60 [ 146.675613][ T1418] do_filp_open+0x20c/0x470 [ 146.676842][ T1418] do_sys_openat2+0x17a/0x1e0 [ 146.678151][ T1418] __x64_sys_openat+0x175/0x210 [ 146.679856][ T1418] do_syscall_64+0xcd/0x250 [ 146.681185][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.682904][ T1418] [ 146.683543][ T1418] Freed by task 35: [ 146.684572][ T1418] kasan_save_stack+0x33/0x60 [ 146.685832][ T1418] kasan_save_track+0x14/0x30 [ 146.687173][ T1418] kasan_save_free_info+0x3b/0x60 [ 146.688491][ T1418] __kasan_slab_free+0x51/0x70 [ 146.689761][ T1418] kfree+0x14f/0x4b0 [ 146.691177][ T1418] process_one_work+0x9c5/0x1ba0 [ 146.692905][ T1418] worker_thread+0x6c8/0xf00 [ 146.694458][ T1418] kthread+0x2c1/0x3a0 [ 146.695947][ T1418] ret_from_fork+0x45/0x80 [ 146.697494][ T1418] ret_from_fork_asm+0x1a/0x30 [ 146.699141][ T1418] [ 146.700180][ T1418] Last potentially related work creation: [ 146.702443][ T1418] kasan_save_stack+0x33/0x60 [ 146.704511][ T1418] __kasan_record_aux_stack+0xba/0xd0 [ 146.706468][ T1418] insert_work+0x36/0x230 [ 146.708042][ T1418] __queue_work+0x97e/0x1080 [ 146.709903][ T1418] queue_work_on+0x11a/0x140 [ 146.711748][ T1418] release_tty+0x4de/0x5d0 [ 146.713389][ T1418] tty_release_struct+0xb7/0xe0 [ 146.715187][ T1418] tty_release+0xe25/0x1410 [ 146.716891][ T1418] __fput+0x3f8/0xb60 [ 146.718379][ T1418] task_work_run+0x14e/0x250 [ 146.720012][ T1418] do_exit+0xadd/0x2d70 [ 146.721467][ T1418] do_group_exit+0xd3/0x2a0 [ 146.722713][ T1418] get_signal+0x24ed/0x26c0 [ 146.723887][ T1418] arch_do_signal_or_restart+0x90/0x7e0 [ 146.725345][ T1418] syscall_exit_to_user_mode+0x150/0x2a0 [ 146.726843][ T1418] do_syscall_64+0xda/0x250 [ 146.728026][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.729595][ T1418] [ 146.730487][ T1418] The buggy address belongs to the object at ffff8880256ce000 [ 146.730487][ T1418] which belongs to the cache kmalloc-cg-2k of size 2048 [ 146.734916][ T1418] The buggy address is located 32 bytes inside of [ 146.734916][ T1418] freed 2048-byte region [ffff8880256ce000, ffff8880256ce800) [ 146.738521][ T1418] [ 146.739149][ T1418] The buggy address belongs to the physical page: [ 146.740840][ T1418] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x256c8 [ 146.743125][ T1418] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 146.745309][ T1418] memcg:ffff888031380881 [ 146.746418][ T1418] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 146.748439][ T1418] page_type: f5(slab) [ 146.749544][ T1418] raw: 00fff00000000040 ffff88801b050140 0000000000000000 dead000000000001 [ 146.751738][ T1418] raw: 0000000000000000 0000000000080008 00000001f5000000 ffff888031380881 [ 146.753939][ T1418] head: 00fff00000000040 ffff88801b050140 0000000000000000 dead000000000001 [ 146.756127][ T1418] head: 0000000000000000 0000000000080008 00000001f5000000 ffff888031380881 [ 146.758367][ T1418] head: 00fff00000000003 ffffea000095b201 ffffffffffffffff 0000000000000000 [ 146.761095][ T1418] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 146.764517][ T1418] page dumped because: kasan: bad access detected [ 146.766362][ T1418] page_owner tracks the page as allocated [ 146.767881][ T1418] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5652, tgid 5652 (dhcpcd), ts 53939339252, free_ts 53813040943 [ 146.773461][ T1418] post_alloc_hook+0x2d1/0x350 [ 146.774751][ T1418] get_page_from_freelist+0xfce/0x2f80 [ 146.776196][ T1418] __alloc_pages_noprof+0x223/0x25b0 [ 146.777601][ T1418] alloc_pages_mpol_noprof+0x2c9/0x610 [ 146.779050][ T1418] new_slab+0x2c9/0x410 [ 146.780173][ T1418] ___slab_alloc+0xdac/0x1870 [ 146.781419][ T1418] __slab_alloc.constprop.0+0x56/0xb0 [ 146.782994][ T1418] __kmalloc_node_track_caller_noprof+0x2f1/0x510 [ 146.784746][ T1418] kmemdup_noprof+0x29/0x60 [ 146.786020][ T1418] neigh_sysctl_register+0xb3/0x640 [ 146.787436][ T1418] devinet_sysctl_register+0xb6/0x200 [ 146.789005][ T1418] inetdev_init+0x2b8/0x5a0 [ 146.790619][ T1418] inetdev_event+0xc61/0x18a0 [ 146.792368][ T1418] notifier_call_chain+0xb7/0x410 [ 146.793892][ T1418] call_netdevice_notifiers_info+0xbe/0x140 [ 146.795440][ T1418] register_netdevice+0x17a0/0x1e90 [ 146.796798][ T1418] page last free pid 5945 tgid 5945 stack trace: [ 146.798482][ T1418] free_unref_page+0x661/0x1080 [ 146.799849][ T1418] __put_partials+0x14c/0x170 [ 146.801101][ T1418] qlist_free_all+0x4e/0x120 [ 146.802339][ T1418] kasan_quarantine_reduce+0x195/0x1e0 [ 146.803796][ T1418] __kasan_slab_alloc+0x69/0x90 [ 146.805111][ T1418] kmem_cache_alloc_noprof+0x226/0x3d0 [ 146.806551][ T1418] alloc_empty_file+0x73/0x1e0 [ 146.807810][ T1418] alloc_file_pseudo+0x147/0x210 [ 146.809096][ T1418] sock_alloc_file+0x50/0x1d0 [ 146.810662][ T1418] __sys_socket+0x1c2/0x260 [ 146.812305][ T1418] __x64_sys_socket+0x72/0xb0 [ 146.813836][ T1418] do_syscall_64+0xcd/0x250 [ 146.815010][ T1418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.816915][ T1418] [ 146.817562][ T1418] Memory state around the buggy address: [ 146.819500][ T1418] ffff8880256cdf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.821926][ T1418] ffff8880256cdf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 146.824033][ T1418] >ffff8880256ce000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.826161][ T1418] ^ [ 146.827585][ T1418] ffff8880256ce080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.829921][ T1418] ffff8880256ce100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 146.832118][ T1418] ================================================================== [ 146.834286][ T1418] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 146.836155][ T1418] CPU: 0 UID: 0 PID: 1418 Comm: aoe_tx0 Not tainted 6.13.0-rc1-syzkaller-00001-ge70140ba0d2b #0 [ 146.838820][ T1418] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 146.841736][ T1418] Call Trace: [ 146.842646][ T1418] [ 146.843429][ T1418] dump_stack_lvl+0x3d/0x1f0 [ 146.844666][ T1418] panic+0x71d/0x800 [ 146.845701][ T1418] ? __pfx_panic+0x10/0x10 [ 146.846882][ T1418] ? check_panic_on_warn+0x1f/0xb0 [ 146.848287][ T1418] check_panic_on_warn+0xab/0xb0 [ 146.849752][ T1418] end_report+0x117/0x180 [ 146.850955][ T1418] kasan_report+0xe9/0x110 [ 146.852174][ T1418] ? handle_tx+0x5a5/0x630 [ 146.853373][ T1418] ? handle_tx+0x5a5/0x630 [ 146.854630][ T1418] handle_tx+0x5a5/0x630 [ 146.855827][ T1418] dev_hard_start_xmit+0x9a/0x7b0 [ 146.857204][ T1418] __dev_queue_xmit+0x7f0/0x43e0 [ 146.858545][ T1418] ? __pfx___dev_queue_xmit+0x10/0x10 [ 146.859945][ T1418] ? __pfx___lock_acquire+0x10/0x10 [ 146.861278][ T1418] ? __pfx___lock_acquire+0x10/0x10 [ 146.862639][ T1418] ? lock_acquire.part.0+0x11b/0x380 [ 146.864043][ T1418] ? find_held_lock+0x2d/0x110 [ 146.865222][ T1418] ? find_held_lock+0x2d/0x110 [ 146.866486][ T1418] ? tx+0xa8/0x190 [ 146.867477][ T1418] ? __pfx_lock_release+0x10/0x10 [ 146.868737][ T1418] ? lock_acquire+0x2f/0xb0 [ 146.869895][ T1418] tx+0xcc/0x190 [ 146.870852][ T1418] ? __pfx_tx+0x10/0x10 [ 146.872020][ T1418] kthread+0x1e7/0x3c0 [ 146.873096][ T1418] ? __pfx_kthread+0x10/0x10 [ 146.874343][ T1418] ? __pfx_default_wake_function+0x10/0x10 [ 146.875907][ T1418] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.877250][ T1418] ? __kthread_parkme+0x148/0x220 [ 146.878574][ T1418] ? __pfx_kthread+0x10/0x10 [ 146.879798][ T1418] kthread+0x2c1/0x3a0 [ 146.880861][ T1418] ? _raw_spin_unlock_irq+0x23/0x50 [ 146.882223][ T1418] ? __pfx_kthread+0x10/0x10 [ 146.883418][ T1418] ret_from_fork+0x45/0x80 [ 146.884595][ T1418] ? __pfx_kthread+0x10/0x10 [ 146.885790][ T1418] ret_from_fork_asm+0x1a/0x30 [ 146.887075][ T1418] [ 146.888818][ T1418] Kernel Offset: disabled [ 146.889908][ T1418] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:12:15 Registers: info registers vcpu 0 CPU#0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff851c9a10 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc90006b7f400 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000060 R14=fffffbfff35621ce R15=dffffc0000000000 RIP=ffffffff851c9a37 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c294f34 CR3=000000000df7e000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000040002 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a09f4830 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a09f483d ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a09f4837 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a09f484b ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a09f48d1 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a09f49af ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a0b10488 00007fd2a0b10480 00007fd2a0b10478 00007fd2a0b10450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a167d100 00007fd2a0b10440 00007fd2a0b10458 00007fd2a0b104a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd2a0b10498 00007fd2a0b10490 00007fd2a0b10488 00007fd2a0b10480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff851c9955 RDI=ffffffff9ab10be0 RBP=ffffffff9ab10ba0 RSP=ffffc900007778d0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000004 R12=0000000000000000 R13=0000000000000035 R14=ffffffff851c98f0 R15=0000000000000000 RIP=ffffffff851c997f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a700000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fffbc0a7940 CR3=0000000029104000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000044402 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fd1afb106a3 00007fd1afb106a3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbc0a9b40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000300000014 0000000200000021 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000500000007 0000000400000017 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556c86cb1a 000055556c86c750 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffbc0a9fa4 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 616e676973206e77 6f6e6b6e75000a29 7325203a6425206f 6e7272652820000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 444b424c56054b52 4a4b4e4b50000a0c 5600051f4100054a 4b5757400d05000a ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 ffffffffffffffed 0801c38003001000 0a8004010000001c 0606014400000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 01c5a00304ddfeef fe080001c5980307 85f4cc080001c590 030204000000001f ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000001200000000 880350080001c580 0301c5800401c780 0301c7800000001e ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0300080000000000 03ffffffff0401c8 800301080001c380 0404124d0000001d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3132303800000000 ffffffffffffffed 0801c38003001000 0a8004010000001c ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=000000222137c1b5 RBX=ffffc900047d7698 RCX=0000002295b04589 RDX=000000222137c1b5 RSI=0000000000000001 RDI=0000000000002dc2 RBP=ffffea00016fbc80 RSP=ffffc900047d7698 R8 =0000160000000000 R9 =0000000000000000 R10=ffffed100b7de400 R11=dffffc0000000000 R12=0000000000002dc2 R13=0000000000002dc2 R14=dffffc0000000000 R15=dffffc0000000000 RIP=ffffffff820659f7 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555584082500 ffffffff 00c00000 GS =0000 ffff88806a800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f41cb346038 CR3=00000000301f8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffc0000 Opmask01=000000000000000f Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 20303d766765735f 656c646e61683d53 4e4f4954504f5f4e 4153410063657865 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f41cbe7d100 00007f41cb310440 00007f41cb310458 00007f41cb3104a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 3d534e4f4954504f 5f4e415341006365 786500726f747563 6578652d7a79732f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000137e3b RBX=0000000000000003 RCX=ffffffff8b29c759 RDX=0000000000000000 RSI=ffffffff8b6cd840 RDI=ffffffff8bd1b460 RBP=ffffed1003ad4488 RSP=ffffc900001a7e08 R8 =0000000000000001 R9 =ffffed100d526fed R10=ffff88806a937f6b R11=0000000000000000 R12=0000000000000003 R13=ffff88801d6a2440 R14=ffffffff905f0410 R15=0000000000000000 RIP=ffffffff8b29db3f RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88806a900000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00005555941105c8 CR3=00000000281de000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000ffffffff Opmask01=00000000ffffffff Opmask02=00000000fff80000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef04bb490 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c5f5f0045544156 4952505f4342494c ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000042494c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6362696c5f5f0045 5441564952505f43 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000a6974 6e75725f6374653a 725f7463656a626f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000