last executing test programs: 18.851457816s ago: executing program 1 (id=1060): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800010009000000000000000a00000005000000080001000200000004000b"], 0x24}}, 0x0) 18.849398863s ago: executing program 1 (id=1062): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0xffff, 0x8011, 0x31324d59, 0x7, 0x9, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x5, 0x4018}, {0x0, 0x8}, {0x6}, {0x0, 0x9}, {0xaa}], 0x7f, 0x0, 0x1, 0x0, 0x2}}) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket(0x28, 0x5, 0x0) sendmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4008084) r3 = dup(r1) write$UHID_INPUT(r3, &(0x7f0000000a00)={0xf, {"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", 0x1000}}, 0xffffffffffffff34) 18.849265155s ago: executing program 1 (id=1063): r0 = socket(0x10, 0x3, 0xc) write(r0, &(0x7f0000000040)="effd00001000f500fd4344c007110000f3050a00dbfd010000000001ffdf00", 0xfe00) 18.778045996s ago: executing program 1 (id=1065): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) umount2(&(0x7f00000001c0)='./file0\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000200), 0x0) openat$audio1(0xffffffffffffff9c, &(0x7f0000001b00), 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) stat(&(0x7f0000000400)='./file1\x00', &(0x7f0000000440)) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xc1) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="740000002000000100000000fbdbdf270a000000080000000000000005001500000000000000ffff0000000014000100fe88000000000000000000000000010114000200ff02000000000000000000000000000114dc98e8c202000001000000000000000000000100"/116], 0x74}, 0x1, 0x0, 0x0, 0x8010}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="940000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0300000000000000640012800b0001006970366772650000540002800800150061db0a0008000100", @ANYRES32, @ANYBLOB="14000700fe8000000000000000000000000000aa08000d005fe1ffff060010004e22000008000500200c000014000600"], 0x94}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)=@newtclass={0x55c, 0x28, 0x1, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0x2, 0x1}, {0x7, 0x7}, {0x8, 0xe}}, [@c_atm={{0x8}, {0x8c, 0x2, [@TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x2b, 0x3, "63e5de9f7dbe907116ee9a9206cdd1c157c9c16a546bee6189e977d1d040732ba8c05b72fac47b"}, @TCA_ATM_EXCESS={0x8, 0x4, {0x6, 0x8}}, @TCA_ATM_EXCESS={0x8, 0x4, {0x5fd8d7eec63ec148, 0xffe0}}, @TCA_ATM_HDR={0x34, 0x3, "67972193f47f2bd22f17e571d35e74075ff5856535eb39629c79b23233048f8c011c46695c1ea6c576e12ed6c1339ce7"}, @TCA_ATM_EXCESS={0x8, 0x4, {0xa, 0xfff3}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5}}}, @c_atm={{0x8}, {0x14, 0x2, [@TCA_ATM_FD={0x8, 0x1, r2}, @TCA_ATM_HDR={0x8, 0x3, "625ca898"}]}}, @c_cbq={{0x8}, {0x468, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0xffffffff, 0x67, 0x3, 0x4, 0x2, 0x5, 0x7, 0x8001, 0x6, 0x5e, 0x81a, 0x3, 0x2, 0x3, 0x9d68, 0x8001, 0x200, 0x0, 0xc0, 0xc6, 0xcf8, 0x81, 0x61b4, 0x3, 0x3, 0xc9f4, 0x9, 0x3, 0x1ff, 0x9b4, 0x6, 0x4, 0x80000000, 0x7, 0x9, 0x4, 0x8, 0x6, 0x4, 0x8, 0x0, 0x12b, 0xde, 0x81, 0xcb, 0x0, 0xfff, 0x80000000, 0x8, 0x1, 0x2, 0xc4c, 0x2, 0x6, 0xe4, 0x9, 0xfffffffd, 0xc3c, 0x7f, 0x5, 0x6, 0x10000, 0x9, 0x10000, 0xfffffff5, 0x5, 0x5, 0xb, 0x40, 0xfffffffc, 0x8, 0x10000, 0x380000, 0x9, 0x79769a14, 0x4, 0x0, 0x7d, 0x7fff, 0x2, 0x4, 0x0, 0x4, 0x5, 0x5, 0x8, 0x8, 0x1, 0x8, 0x5, 0x10001, 0x9, 0xd, 0x1, 0xffffffff, 0x1000, 0xc0000000, 0x7, 0x3, 0x5bd2, 0x40, 0xfffffba7, 0x6, 0x200, 0xfffffff7, 0x2, 0x7, 0xb7c9, 0x4, 0x6, 0xcb2, 0x9, 0x4, 0x4, 0x9e4, 0x7, 0x9000000, 0x9, 0x5, 0x5590, 0x40, 0x1, 0x2, 0x3, 0x100, 0xfff, 0xba3, 0x10, 0xdbbb, 0x4, 0x6, 0xa, 0xb, 0x4, 0x9, 0x0, 0x9, 0x0, 0x8, 0xcc8d, 0x5, 0x80, 0x2, 0x8, 0xd9e5, 0x2f18, 0x0, 0xa, 0x6, 0x2, 0xd07, 0x8c26, 0x8, 0xb4fa, 0x0, 0x9, 0x8, 0x3, 0x8001, 0xff, 0x40000, 0x3, 0x10001, 0x8, 0x5, 0x6, 0x6, 0x10001, 0x3, 0x9, 0x10000, 0xca3, 0x5, 0x1000, 0x800, 0x1, 0xfff, 0x6, 0x6, 0x401, 0x32, 0x5, 0x7, 0x6, 0x0, 0x7a0, 0x5, 0xfba, 0x5d14, 0xea87, 0x50af, 0x6c4bc3d3, 0x0, 0x2, 0xff, 0xb, 0xc, 0x4, 0x0, 0x9, 0x7, 0x5, 0x3, 0xfffffffe, 0x2, 0x8000000, 0x800, 0x5, 0xc, 0x9, 0x1b, 0x1, 0x2, 0x600, 0x0, 0x7, 0x5, 0x5, 0x2a, 0xf494, 0x0, 0x8, 0x9df, 0x6, 0x4, 0x9, 0x6, 0x7fff, 0xfffff294, 0x6, 0x4, 0x3, 0x7f, 0x67, 0x87, 0x3, 0xda, 0x10001, 0x0, 0x6, 0xac1, 0x5, 0xfffffffb, 0x5, 0x3, 0x23e9432e, 0xa, 0xf29, 0x0, 0x0, 0x0, 0x4, 0x5, 0x8, 0x8001, 0x2]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x6f, 0x4, 0x8, 0x1, 0x0, 0x9}}, @TCA_CBQ_RATE={0x10, 0x5, {0xcb, 0x1, 0x1, 0xffff, 0x0, 0x3}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0xb}, 0x7, 0x8}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffff, 0xf}, 0x4, 0xffffffff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x75, 0x1, 0x63, 0x52fb, 0x8171, 0x7}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x80, 0x7, 0xf8, 0x5, 0xe, 0x9}}]}}]}, 0x55c}, 0x1, 0x0, 0x0, 0x20004000}, 0x40c0) 18.776511744s ago: executing program 1 (id=1067): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="b400f6ac0b000000791048000000000061000400000000009500000000000000db74589d4b38cc306ac390649f72dea0e50e2317db042855d6c74ff3493c7e31e3f6c643155a8e2e01d50bc3347475750472719cc516fa14b769e7f385ba72c60242263c05ddab05e37efe81b8bffc35cdf2ac0d93263ff755d611c4cca1684b1470af6a83366aa430ad2d700b186da622d6fba70000000000000000000000000200"/173], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, @sk_msg}, 0x48) 18.451006142s ago: executing program 1 (id=1074): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x2000, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xc00, 0x0, 0x80d1}, 0x3000001c) 18.415494558s ago: executing program 32 (id=1074): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd2b, 0x2000, {0x60, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xc}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0xc00, 0x0, 0x80d1}, 0x3000001c) 2.130521674s ago: executing program 0 (id=1401): syz_open_dev$sndpcmp(&(0x7f0000000000), 0xb, 0x101000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x2000) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000040)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x22000) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r2, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f00000000c0), 0x3, r1}) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r4 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r5 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r4, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r3, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r6, {0x7}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@bcast, @null, 0x3, [@default, @default, @null, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) 2.07948604s ago: executing program 0 (id=1404): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f00000002c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @remote}, 0x10) syz_init_net_socket$llc(0x1a, 0x3, 0x0) r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1106d20, 0x400) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}]}) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0xf000000) r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x1, 0x0) ioctl$X86_IOC_RDMSR_REGS(r2, 0xc02063a0, &(0x7f0000000000)=[0x3, 0x1fc, 0x2, 0x3, 0x3, 0x3, 0x6, 0xfffffffa]) close_range(r0, r0, 0x2) madvise(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x200000, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') preadv(r6, &(0x7f0000001400)=[{&(0x7f0000001ac0)=""/209, 0xd1}], 0x1, 0xc1, 0x0) 1.950804476s ago: executing program 0 (id=1415): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x0, 'fo\x00', 0xd, 0x9f5, 0x4a}, 0x2c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x20, 0x301, 0xfffffffc, 0x0, {0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x3}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x3b}]}, 0x24}}, 0x42094) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x2e, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1303}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @multicast1}]}}}]}, 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000002b80)={&(0x7f0000002980)=@dellink={0x34, 0x11, 0x1, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0xc0, 0x1400}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'wg2\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000100}, 0x40004) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r4, @ANYRES16=r2, @ANYRES16=r0], 0x54}}, 0x0) 1.756503694s ago: executing program 0 (id=1421): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf250800010000000000050054"], 0x20}, 0x1, 0xfffffffffffffff0, 0x0, 0x24000841}, 0x20000000) 1.756313884s ago: executing program 0 (id=1422): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000008"], 0x50) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x2, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f0000000280)=[{{&(0x7f0000000700)=@xdp={0x2c, 0xdd86, r2}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)='O', 0x1}], 0x1, 0x0, 0x0, 0x2f00}}], 0x1, 0x6000000000000000) 1.680096263s ago: executing program 0 (id=1424): semtimedop(0x0, &(0x7f00000003c0)=[{0x2, 0x4, 0x1800}], 0x1, 0x0) semop(0x0, &(0x7f00000000c0)=[{0x4, 0xb}, {}], 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000400)={0xf0f016, 0x2}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(0xffffffffffffffff, 0x1, &(0x7f00000002c0)={0x0, 0xa, 0x47}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r3) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) fsopen(&(0x7f00000003c0)='omfs\x00', 0x0) r4 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) r5 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r6, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0x58}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) socket(0x10, 0x3, 0x0) 1.590999498s ago: executing program 3 (id=1427): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_FLAGS={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x4}, {}, {0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x9, 0x9, 0x1, 0x80000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'batadv_slave_0\x00', 0x0}) sendmsg$inet(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)="e0aab93d697900e4573245dd2454c1c49f639716984502d75d", 0x19}, {&(0x7f00000000c0)="866682869e1a7f50596eecac94462ea669b9058f28b888bd70a49f80a2c5aad647bd0169bc8e5dc9ed21d3e297625d66824b604d2567d617edec5bf26923a5e862bc53728c5932cc6c7b3cdc0e1ee3fe7359e4501ce08c7130ce2990f2021d57026dac2a4a2e662f13a405462eb3d662c8c7aef29a847864db5ecd332fc390caba1220a79e01195d4628", 0x8a}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000180)="c5d622e478c62d80e785995904151816f283b118c89c2bd0819a429c96be22dc41984a2746e784c20387899de63fb684987d382763d02f75632ecfedde31d0719353baa0e029b4ac3151d95b487aa849d9e64228978b75f7e7429839c9988b6847787edd09ab7d4cbead7aae0018c52f57b7ef369ffc074c76769971ceee2c64", 0x80}], 0x4, &(0x7f0000000500)=[@ip_tos_int={{0x14}}, @ip_retopts={{0x68, 0x0, 0x7, {[@noop, @noop, @timestamp={0x44, 0x8, 0x89, 0x0, 0x4, [0x8]}, @timestamp_prespec={0x44, 0x4c, 0xa2, 0x3, 0x2, [{@local, 0x1ff}, {@multicast1, 0x5}, {@private=0xa010101, 0xfffffff9}, {@dev={0xac, 0x14, 0x14, 0x20}, 0x38e}, {@dev={0xac, 0x14, 0x14, 0x2c}, 0x1}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@rand_addr=0x64010101, 0x7}, {@private=0xa010101, 0x9}, {@empty, 0x80}]}]}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_retopts={{0x94, 0x0, 0x7, {[@end, @generic={0x88, 0x4, "e07f"}, @cipso={0x86, 0x2e, 0x2, [{0x7, 0x2}, {0x3, 0xe, "f0a16ba0afd9ce71d97c0410"}, {0x5, 0x5, "135f00"}, {0x1, 0x4, "5eea"}, {0x2, 0x6, "cea21b7a"}, {0x4, 0x9, "814847f01ed994"}]}, @ra={0x94, 0x4, 0x1}, @end, @timestamp={0x44, 0x18, 0x73, 0x0, 0x9, [0x52, 0x3, 0x816c, 0x3, 0x4]}, @rr={0x7, 0xf, 0xfc, [@dev={0xac, 0x14, 0x14, 0x2a}, @rand_addr=0x64010102, @loopback]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0xb, 0x2f, [@multicast2, @private=0xa010102]}, @timestamp_addr={0x44, 0x14, 0x38, 0x1, 0x7, [{@local, 0x7}, {@loopback, 0x69}]}]}}}, @ip_retopts={{0x94, 0x0, 0x7, {[@ra={0x94, 0x4}, @ssrr={0x89, 0xb, 0xfc, [@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}]}, @ssrr={0x89, 0x17, 0xe7, [@dev={0xac, 0x14, 0x14, 0x25}, @local, @private=0xa010102, @loopback, @remote]}, @timestamp_prespec={0x44, 0x24, 0x39, 0x3, 0x6, [{@multicast2, 0x7}, {@local, 0x3}, {@local, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x9}]}, @timestamp={0x44, 0x18, 0xc7, 0x0, 0xd, [0x6, 0x9, 0x5, 0xf0, 0x34dde670]}, @ra={0x94, 0x4}, @ssrr={0x89, 0x17, 0x15, [@empty, @remote, @multicast1, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @ssrr={0x89, 0x7, 0xda, [@remote]}]}}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ssrr={0x89, 0x17, 0x10, [@remote, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x35}, @rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x14, 0xab, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@multicast2, 0x8}]}, @generic={0x86, 0x4, "d564"}, @rr={0x7, 0x7, 0xf6, [@initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2}}}, @ip_retopts={{0x11c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x34, 0x66, 0x1, 0x4, [{@dev={0xac, 0x14, 0x14, 0x22}, 0x9}, {@remote, 0x966}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3ff}, {@remote, 0x4700}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}, {@rand_addr=0x64010101, 0x6}]}, @cipso={0x86, 0x40, 0x3, [{0x2, 0x12, "d0e8eb2df309274927ff8050fae7ee62"}, {0x5, 0x6, "d404031b"}, {0x0, 0xc, "e4f8420517fe0d8a2260"}, {0x2, 0x5, "cba3ca"}, {0x5, 0x11, "56ab2b1afaaa32d84d572cd18f75a3"}]}, @end, @timestamp={0x44, 0x14, 0x21, 0x0, 0x8, [0xf, 0x2e50, 0xfffffffe, 0x80000000]}, @lsrr={0x83, 0x7, 0x8e, [@multicast1]}, @ssrr={0x89, 0x17, 0x97, [@broadcast, @private=0xa010101, @empty, @remote, @loopback]}, @lsrr={0x83, 0x1b, 0x5a, [@private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast1]}, @timestamp_prespec={0x44, 0x24, 0xf6, 0x3, 0x2, [{@loopback, 0x3}, {@local, 0x6}, {@private=0xa010101, 0x8000}, {@rand_addr=0x64010100}]}, @timestamp_addr={0x44, 0x24, 0xdf, 0x1, 0x0, [{@remote, 0x5}, {@local, 0x7}, {@local, 0x5}, {@multicast2, 0x6}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @dev={0xac, 0x14, 0x14, 0x3d}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x388}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000340)={{0x1, 0x1, 0x18, r2, {0x2}}, './file0\x00'}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r6 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8001) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r8, 0x4090ae82, &(0x7f0000000100)={[0xd45, 0x1000009, 0xffffeffffffffffb, 0x10000000, 0x10000, 0x3, 0x4002004c1, 0xa, 0x9, 0xfffffffffffffffe, 0x1, 0x0, 0xcf, 0x0, 0x9, 0x8d], 0xddcd0000, 0x4880}) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x37) 1.420700311s ago: executing program 3 (id=1431): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) request_key(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f0000002980)='V\\@[\x01\x00\x1b\x00\xaaJ&\xd0\xc5cC\xf4\x16NGY\x8c\x8dAt\x8e\x17iN\x1bd\xcc\xef\xec\x1a\']\x05\xec3\xdb=\xab\x13\xf2<]x\xca\xb30\xb7\xff~C_v\xca\xed\x12\x8d\x88\xc6\x02\x00\x00\x00\\$p\xa4\xe9x\\W\x00<#hyWF\a\x1a\xca9s\x97\x03\xf2\xf9\x9c?w}m\xb29w.#\xe4\xf0,|\xce\xa5\x8a<\x00\xba\x1c\x05\xc8\xe7R\x85\xf5+\xab_bo\x02\xcb\x17\x95C\x024?\x1cqJ?\xd3\x8d\x81', 0xfffffffffffffffe) r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0xffff, 0x8011, 0x31324d59, 0x7, 0x9, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x5, 0x4018}, {0x0, 0x8}, {0x6}, {0x0, 0x9}, {0xaa}], 0x7f, 0x0, 0x1, 0x0, 0x2}}) 1.348566747s ago: executing program 3 (id=1434): read$FUSE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, 0x0, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="31040108000e030000001600000018000180140002006e657464657673696d3000000000000005000300010000000500040001000000050002"], 0x44}}, 0x8000) 1.27112995s ago: executing program 3 (id=1437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000100000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000040000000a34000000140a070300000000000000000200000908000340f4ff000a0900010073797a30000000000c000640000000000000000214000000020a01"], 0x70}}, 0x0) 1.221301248s ago: executing program 3 (id=1441): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x1, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x3438a}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xd13d}, @IFLA_IFNAME={0x14, 0x3, 'batadv_slave_0\x00'}]}, 0x3c}, 0x1, 0x0, 0xfff0, 0x884}, 0x4004004) 1.171889739s ago: executing program 3 (id=1442): connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) fsopen(&(0x7f0000000580)='overlay\x00', 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x81) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0xf}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x28, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000001}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f40}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x2}]}]}]}}]}, 0x58}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000000)=0x3) socket(0x10, 0x3, 0x0) 396.685835ms ago: executing program 2 (id=1458): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000070004000000200001800d0001007564703a73"], 0x34}}, 0x4040) 341.51927ms ago: executing program 2 (id=1459): r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c00000014001105000000000000000f2b0000014e2200000000000000000000000000000000000000000000000000000000000003000000", @ANYRES32=0x0, @ANYBLOB="00000000000000000400000000000000a9dfde9c7eb154abde6bb27f0323d612c7e7183939a6ae57589b470ab9ed7674c03b36d9602dea7312a0d8ec0026f09f198436854e867b0848783ed34c38fb71ea5d39f6539a039af598eedacdf30199787190b5"], 0x4c}, 0x1, 0x0, 0x0, 0x4000840}, 0x8004) 340.996492ms ago: executing program 2 (id=1461): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f00000001c0), 0x1, 0x200) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f00000000c0)) keyctl$instantiate(0xc, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="6ce1c194c543d52e95ff9d516f61642064656661756c7420747275737465b73a737d3030303400"/53], 0x35, 0xfffffffffffffffa) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) read(r1, 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[]) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000540)=ANY=[@ANYBLOB="1200000002000000080000000200000004120000", @ANYRES32, @ANYBLOB="0000000000009200000000000000000000000000889d31222609e51e459daca49f060f6de7a4ee5fca4ae4cad30fb0ec853272a7f6e0c72cd5918732411d2d5266e7daf5239a539d811c849c57ed87c3198568918d335caeb7d509a948d1af61dc43f838d70bb1ea09ba843ac0786ac8ec4937a0cf1d96554f190ea3176e77c49f5954bc84d44789c76c66f120db60abff6bf6368d7922feb208c063588eb388a4b15c89bc2fdf36aec062b9927da410", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/28], 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001440)={@map=r2, 0x26, 0x0, 0x800, &(0x7f0000001340)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffffffff3f, 0x0, 0x2}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000740)=@newtaction={0x190, 0x30, 0x9, 0x0, 0x0, {}, [{0x17c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {}, {0x3}, {}, {0x0, 0x0, 0xfe}, {}, {0x6, 0x4}]}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0xf0, 0x2, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x3}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xc4, 0x81, 0x5, 0x9, 0x5}}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file2\x00'}]}, {0x8b, 0x6, "34cd612c7a0ab41aeee4f2749c717405930291dd10c14ec41a0491357d7c632f458556e624bdab00958fafb08c18760601b0943a67d82a91d915c3984342a367d3b2e58cea49cb7452d570292ec56138e6a1ba36da3d664c8523216a7b39db943810932dbdc81b60f442a6febd49c70976736c5a483baea68dd16a08fa7222f24f93b11f380ddb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x5}}}}]}]}, 0x190}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000280)='rpcgss_svc_accept_upcall\x00'}, 0x18) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r4 = syz_open_dev$sndctrl(&(0x7f0000000200), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000003c0)={{0x7, 0x0, 0x3, 0x1, 'syz0\x00', 0x9}, 0x3, 0x30, 0x1, 0x0, 0x0, 0x7fff, 'syz0\x00', 0x0}) syz_open_dev$evdev(&(0x7f0000000040), 0x100, 0x1a1481) ioctl$EVIOCSKEYCODE_V2(r1, 0x40284504, &(0x7f0000000000)={0x4, 0x2, 0x3, 0x5, "4620f63a4e6b5c12020e589e0e549fcfdeb92566761ad1c34caca1abe476fa96"}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x4c, 0x20, 0x1, 0x70bd2a, 0x0, {0xa, 0x20, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10013}, [@FRA_DST={0x14, 0x1, @empty}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x4c}}, 0x4c000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000940)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0xa, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8}, @btf_id={0x18, 0xd, 0x3, 0x0, 0x4}, @cb_func={0x18, 0xb}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @jmp={0x5, 0x0, 0x3, 0x0, 0x2, 0xfffffffffffffffc, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x40202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r6, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r6, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2}) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/19, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) syz_open_dev$vcsu(&(0x7f0000000040), 0x5, 0x480000) 271.631727ms ago: executing program 2 (id=1463): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x1000000, 0x0, {0x2, 0x0, 0x0, 0x0, 0x20, 0xc}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) mkdir(&(0x7f0000000140)='./control\x00', 0x8) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1f, 0x10, &(0x7f0000000400)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = inotify_init1(0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x47d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) close(r4) inotify_add_watch(r3, &(0x7f0000000180)='./control\x00', 0xa6000160) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000500000000000000000000851000000600000018020000", @ANYRES32, @ANYBLOB="0000000000000000660002000000000018000000ffffffd000000000000000009500040000000000360a020000000000180100002020782500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b50a000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x48, &(0x7f0000000340)=""/222}, 0x90) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000b00)={0xa, @pix_mp={0xffff, 0x8011, 0x31324d59, 0x7, 0x9, [{0x2319, 0x81}, {0xfffffffd, 0x7}, {0x4, 0xadf}, {0x5, 0x4018}, {0x0, 0x8}, {0x6}, {0x0, 0x9}, {0xaa}], 0x7f, 0x0, 0x1, 0x0, 0x2}}) 271.355578ms ago: executing program 4 (id=1464): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x3000003, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = fanotify_init(0x200, 0x40000) fanotify_mark(r1, 0x1, 0x8000018, r0, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x14, 0x52, 0x109, 0x0, 0x0, {0x1c}}, 0x14}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x25dfdbfc, {0x60, 0x0, 0x0, r5, {0x0, 0x6}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x5}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000840}, 0x0) r6 = open(&(0x7f0000000300)='./bus\x00', 0x82342, 0x1d6) ftruncate(r6, 0x2007ffb) sendfile(r0, r6, 0x0, 0x3) r7 = io_uring_setup(0x16dd, &(0x7f0000000000)={0x0, 0xc5e, 0x10000, 0x0, 0x3e, 0x0, r6}) r8 = io_uring_setup(0x1694, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, r7}) io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 269.119795ms ago: executing program 4 (id=1465): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=ANY=[@ANYBLOB="bc0000002b00010000faffffffffffffa9000080"], 0xbc}], 0x1}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) (async) r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x2}, 0x18, 0x0) (async, rerun: 64) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 64) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (rerun: 64) mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x803400, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x84022, &(0x7f0000000280)={[{@nr_inodes={'nr_inodes', 0x3d, [0x32]}}]}) (async) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000000000084000040"]) (async) landlock_restrict_self(r0, 0x0) (async) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x8, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056842bb002552d215f6", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e00000018000280140011"], 0x48}}, 0x0) (async) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080), 0x44101, 0x0) syz_emit_ethernet(0x19e, &(0x7f0000000480)={@local, @random="706ab144ffe0", @val={@void, {0x8100, 0x3, 0x0, 0x2}}, {@ipv4={0x800, @gre={{0x52, 0x4, 0x0, 0x0, 0x18c, 0x0, 0x0, 0x0, 0x2f, 0x0, @remote, @remote, {[@rr={0x7, 0x1f, 0xb3, [@local, @rand_addr=0x64010100, @multicast1, @multicast2, @multicast1, @private=0xa010101, @loopback]}, @noop, @cipso={0x86, 0x14, 0x0, [{0x1, 0x3, "89"}, {0x0, 0xb, "f78ec4aa1c6b3781fe"}]}, @timestamp_addr={0x44, 0x4c, 0xd2, 0x1, 0x8, [{@multicast2, 0xf}, {@multicast1, 0x6}, {@multicast2, 0x3}, {@private=0xa010100, 0x78}, {@remote, 0x8}, {@private=0xa010100, 0xd6}, {@dev={0xac, 0x14, 0x14, 0x39}, 0x5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x4}]}, @timestamp_prespec={0x44, 0x44, 0x36, 0x3, 0x7, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x1}, {@private=0xa010102, 0x7}, {@multicast2, 0x2}, {@rand_addr=0x64010101, 0xa}, {@loopback, 0x8e8}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x29}, 0x2}, {@multicast1, 0x4}]}, @ssrr={0x89, 0x7, 0x68, [@remote]}, @lsrr={0x83, 0x2b, 0xb1, [@broadcast, @broadcast, @broadcast, @dev={0xac, 0x14, 0x14, 0x1b}, @rand_addr=0x64010102, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x34}, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local]}, @timestamp_prespec={0x44, 0x3c, 0x65, 0x3, 0x6, [{@local, 0x5}, {@empty, 0x3}, {@broadcast, 0x5}, {@private=0xa010100, 0xff}, {@local, 0x7857}, {@rand_addr=0x64010101, 0x1}, {@remote, 0x6}]}]}}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x1, 0x0, 0x4}, {}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4}}}}}}}}, 0x0) (async) lseek(r4, 0x4, 0x1) r5 = socket(0x10, 0x3, 0x0) (async) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x2, 0x80800) (async) r7 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r8, 0x2, {0x1, 0xff}, 0x1}, 0x18) (async) sendmsg$inet(r7, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000780)="8a", 0x1}], 0x1}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x6}) (async, rerun: 64) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) (rerun: 64) 121.75041ms ago: executing program 4 (id=1466): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000021401002cbd7000fddbdf250800010000000000050054"], 0x20}, 0x1, 0x0, 0x3f00, 0x24000841}, 0x20000000) 121.592415ms ago: executing program 2 (id=1467): r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) quotactl_fd$Q_GETQUOTA(r0, 0xffffffff80000701, 0xee00, &(0x7f0000000040)) syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) 71.820876ms ago: executing program 4 (id=1468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100280000000000090004000000200001800d0001007564703a73"], 0x34}}, 0x4040) 71.659765ms ago: executing program 2 (id=1469): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(0xffffffffffffffff, &(0x7f0000006300)={0x2020}, 0x2020) fstat(r0, &(0x7f0000000a80)) stat(&(0x7f0000000c40)='./file0/../file0/file0\x00', &(0x7f0000000c80)) lstat(&(0x7f0000000e00)='./file0/../file0/file0\x00', &(0x7f0000000e40)) 71.457741ms ago: executing program 4 (id=1470): syz_open_dev$sndpcmp(&(0x7f0000000000), 0xb, 0x101000) mkdir(&(0x7f0000000380)='./file1\x00', 0xa) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189378, &(0x7f0000000280)={{0x1, 0x1, 0x18, r3, {0x7}}, './file1\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) ioctl$sock_ax25_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={@bcast, @null, 0x3, [@default, @default, @null, @bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast]}) 0s ago: executing program 4 (id=1471): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0) r1 = dup(r0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x121003, 0x0) ioctl$FS_IOC_SETFLAGS(r2, 0x40081271, &(0x7f0000000980)=0x4000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x2c93a000) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r3 = openat$pmem0(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) readv(r3, &(0x7f0000000180)=[{&(0x7f0000000040)=""/97, 0x61}], 0x1) r4 = socket(0x10, 0x3, 0x9) connect$netlink(r4, &(0x7f00000014c0)=@kern={0x10, 0x0, 0x0, 0x10000000}, 0xc) getpeername$packet(r4, 0x0, &(0x7f0000000640)) readv(r3, &(0x7f00000025c0)=[{&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/239, 0xffffffda}, {&(0x7f00000013c0)=""/195, 0xc3}, {&(0x7f0000000100)=""/62, 0x3e}, {&(0x7f00000014c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/15, 0xf}, {&(0x7f00000024c0)=""/251, 0xfb}, {&(0x7f00000001c0)=""/6, 0x6}, {&(0x7f0000000240)=""/56, 0x38}], 0x9) kernel console output (not intermixed with test programs): nterface: batadv_slave_0 [ 53.917919][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.926521][ T5974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.963620][ T5974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.965761][ T5974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.973649][ T5974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.994362][ T5970] hsr_slave_0: entered promiscuous mode [ 53.996581][ T5970] hsr_slave_1: entered promiscuous mode [ 54.001815][ T5975] hsr_slave_0: entered promiscuous mode [ 54.004001][ T5975] hsr_slave_1: entered promiscuous mode [ 54.006058][ T5975] debugfs: 'hsr0' already exists in 'hsr' [ 54.008150][ T5975] Cannot create hsr debugfs directory [ 54.097565][ T5974] hsr_slave_0: entered promiscuous mode [ 54.099765][ T5974] hsr_slave_1: entered promiscuous mode [ 54.101808][ T5974] debugfs: 'hsr0' already exists in 'hsr' [ 54.103577][ T5974] Cannot create hsr debugfs directory [ 54.156567][ T5982] hsr_slave_0: entered promiscuous mode [ 54.160492][ T5982] hsr_slave_1: entered promiscuous mode [ 54.162946][ T5982] debugfs: 'hsr0' already exists in 'hsr' [ 54.165154][ T5982] Cannot create hsr debugfs directory [ 54.408013][ T5973] Bluetooth: hci2: command tx timeout [ 54.478367][ T5975] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 54.486691][ T5975] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 54.489867][ T5973] Bluetooth: hci3: command tx timeout [ 54.495255][ T5975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 54.497550][ T5973] Bluetooth: hci0: command tx timeout [ 54.497875][ T5985] Bluetooth: hci1: command tx timeout [ 54.511508][ T5975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 54.551265][ T5970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.556296][ T5970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.564110][ T5970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 54.568400][ T5970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 54.622770][ T5974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.631037][ T5974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.640830][ T5974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.650440][ T5974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.720766][ T5982] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.725523][ T5982] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.729842][ T5982] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.738327][ T5975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.742519][ T5982] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.789320][ T5975] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.807539][ T5970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.812232][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.814586][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.829778][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.832055][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.853129][ T5974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.873899][ T5970] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.889104][ T1237] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.891966][ T1237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.897232][ T1237] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.899812][ T1237] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.908656][ T5974] 8021q: adding VLAN 0 to HW filter on device team0 [ 54.922112][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.924402][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.928775][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.931042][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.966031][ T5982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 54.968014][ T40] audit: type=1400 audit(1757360396.537:89): avc: denied { sys_module } for pid=5975 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.998699][ T5982] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.014759][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.017824][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.023724][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.026292][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.056968][ T5982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 55.060305][ T5982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.084635][ T5975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.114275][ T5970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.122687][ T5975] veth0_vlan: entered promiscuous mode [ 55.132347][ T5975] veth1_vlan: entered promiscuous mode [ 55.152242][ T5974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.172252][ T5970] veth0_vlan: entered promiscuous mode [ 55.174419][ T5975] veth0_macvtap: entered promiscuous mode [ 55.181539][ T5975] veth1_macvtap: entered promiscuous mode [ 55.188237][ T5982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 55.199626][ T5970] veth1_vlan: entered promiscuous mode [ 55.223585][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.226187][ T5974] veth0_vlan: entered promiscuous mode [ 55.241301][ T5975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.244931][ T5974] veth1_vlan: entered promiscuous mode [ 55.255422][ T1144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.263652][ T5982] veth0_vlan: entered promiscuous mode [ 55.265639][ T1144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.269101][ T1144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.276310][ T5970] veth0_macvtap: entered promiscuous mode [ 55.285276][ T1144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.291267][ T5970] veth1_macvtap: entered promiscuous mode [ 55.298435][ T5982] veth1_vlan: entered promiscuous mode [ 55.317719][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.335134][ T5970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.340679][ T5974] veth0_macvtap: entered promiscuous mode [ 55.368647][ T5974] veth1_macvtap: entered promiscuous mode [ 55.372372][ T1144] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.375897][ T1144] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.382315][ T5982] veth0_macvtap: entered promiscuous mode [ 55.386895][ T5982] veth1_macvtap: entered promiscuous mode [ 55.389801][ T1144] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.392544][ T1144] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.396218][ T1237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.399181][ T1237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.433128][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.439379][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 55.448080][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.450271][ T5974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.451032][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.457707][ T5982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 55.486161][ T1144] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.487217][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.494959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.497060][ T1144] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.506906][ T1144] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.510822][ T1144] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.522751][ T5975] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 55.524769][ T1144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.532264][ T1144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.548144][ T1144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.551279][ T1144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 55.562598][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.565051][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.601977][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.604959][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.628944][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.632360][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.652815][ T6064] SELinux: Context system_u:object_r:clock_device_t:s0 is not valid (left unmapped). [ 55.676692][ T61] Bluetooth: hci4: Frame reassembly failed (-84) [ 55.676851][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.683746][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.705504][ T1157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 55.708600][ T1157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 55.796108][ T6083] random: crng reseeded on system resumption [ 55.932202][ T6024] IPVS: starting estimator thread 0... [ 56.018027][ T6097] IPVS: using max 43 ests per chain, 103200 per kthread [ 56.048040][ T34] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 56.090639][ T6100] Zero length message leads to an empty skb [ 56.195758][ T6114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.22'. [ 56.217502][ T34] usb 6-1: Invalid ep0 maxpacket: 64 [ 56.264889][ T6116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.23'. [ 56.369052][ T34] usb 6-1: new low-speed USB device number 3 using dummy_hcd [ 56.464815][ T6128] netlink: 4 bytes leftover after parsing attributes in process `syz.3.27'. [ 56.467672][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 56.470263][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 56.474541][ T6128] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 56.479123][ T6128] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 56.497714][ T5985] Bluetooth: hci2: command tx timeout [ 56.534226][ T6132] netlink: 8 bytes leftover after parsing attributes in process `syz.0.29'. [ 56.538519][ T34] usb 6-1: Invalid ep0 maxpacket: 64 [ 56.541073][ T34] usb usb6-port1: attempt power cycle [ 56.541853][ T6132] openvswitch: netlink: Unknown nsh attribute 0 [ 56.545593][ T6132] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.567645][ T5985] Bluetooth: hci0: command tx timeout [ 56.570650][ T5985] Bluetooth: hci3: command tx timeout [ 56.572960][ T5985] Bluetooth: hci1: command tx timeout [ 56.605677][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 56.611361][ T6134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.30'. [ 56.617810][ T6134] netlink: 24 bytes leftover after parsing attributes in process `syz.0.30'. [ 56.695815][ T6136] syz.0.31 (6136) used greatest stack depth: 19736 bytes left [ 56.897954][ T34] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 56.920371][ T34] usb 6-1: Invalid ep0 maxpacket: 64 [ 56.936368][ T6144] capability: warning: `syz.0.35' uses 32-bit capabilities (legacy support in use) [ 57.057592][ T34] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 57.078338][ T34] usb 6-1: Invalid ep0 maxpacket: 64 [ 57.081512][ T34] usb usb6-port1: unable to enumerate USB device [ 57.083536][ T40] kauditd_printk_skb: 94 callbacks suppressed [ 57.083543][ T40] audit: type=1400 audit(1757360398.647:184): avc: denied { mount } for pid=6150 comm="syz.0.38" name="/" dev="ramfs" ino=9763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 57.090899][ T6151] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 57.093664][ T40] audit: type=1400 audit(1757360398.647:185): avc: denied { mounton } for pid=6150 comm="syz.0.38" path="/file0" dev="ramfs" ino=10751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 57.095158][ T6151] overlayfs: failed to set xattr on upper [ 57.095168][ T6151] overlayfs: ...falling back to redirect_dir=nofollow. [ 57.095176][ T6151] overlayfs: ...falling back to index=off. [ 57.107881][ T6151] overlayfs: ...falling back to uuid=null. [ 57.110679][ T40] audit: type=1400 audit(1757360398.677:186): avc: denied { mount } for pid=6150 comm="syz.0.38" name="/" dev="overlay" ino=9029 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 57.124343][ T6151] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 57.167803][ T40] audit: type=1400 audit(1757360398.737:187): avc: denied { read } for pid=6152 comm="syz.0.39" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.176595][ T40] audit: type=1400 audit(1757360398.737:188): avc: denied { open } for pid=6152 comm="syz.0.39" path="/dev/dri/card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.184190][ T6153] xfs: Unknown parameter 'norecovery Status [ 57.184190][ T6153] mux 0 0 0 0 - - - - KCMs: 1' [ 57.190786][ T40] audit: type=1400 audit(1757360398.737:189): avc: denied { ioctl } for pid=6152 comm="syz.0.39" path="/dev/dri/card1" dev="devtmpfs" ino=636 ioctlcmd=0x64c7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 57.200320][ T40] audit: type=1400 audit(1757360398.737:190): avc: denied { create } for pid=6152 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.207603][ T40] audit: type=1400 audit(1757360398.747:191): avc: denied { write } for pid=6152 comm="syz.0.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.213826][ T40] audit: type=1400 audit(1757360398.747:192): avc: denied { connect } for pid=6152 comm="syz.0.39" lport=6 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.221295][ T40] audit: type=1400 audit(1757360398.747:193): avc: denied { ioctl } for pid=6152 comm="syz.0.39" path="socket:[7888]" dev="sockfs" ino=7888 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 57.687612][ T5973] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 57.819497][ T6161] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 57.985946][ T6172] Mount JFS Failure: -22 [ 57.990932][ T6173] Mount JFS Failure: -22 [ 58.034211][ T6175] tmpfs: Unknown parameter 'usrquota0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] 0 [ 58.034211][ T6175] ' [ 58.183482][ T6179] netlink: 'syz.0.49': attribute type 1 has an invalid length. [ 58.376191][ T6209] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 58.382710][ T6209] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 58.393846][ T6211] netlink: 4 bytes leftover after parsing attributes in process `syz.0.62'. [ 58.463143][ T6213] netlink: 'syz.3.63': attribute type 1 has an invalid length. [ 58.515784][ T6219] mac80211_hwsim hwsim4 wlan0: entered promiscuous mode [ 58.567694][ T5973] Bluetooth: hci2: command tx timeout [ 58.592066][ T6227] netlink: 4 bytes leftover after parsing attributes in process `syz.0.69'. [ 58.647891][ T5985] Bluetooth: hci0: command tx timeout [ 58.649503][ T5973] Bluetooth: hci1: command tx timeout [ 58.650419][ T63] Bluetooth: hci3: command tx timeout [ 58.810357][ T6243] program syz.0.74 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 58.813757][ T6243] ata1.00: non-matching transfer count (0/2304) [ 58.847482][ T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 58.874655][ T6248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 58.884008][ T6248] ref_ctr going negative. vaddr: 0x200000ffc002, curr val: -29824, delta: 1 [ 58.888274][ T6248] ref_ctr increment failed for inode: 0x21 offset: 0x7 ref_ctr_offset: 0x2 of mm: 0xffff88803358c080 [ 58.893750][ T6248] ======================================================= [ 58.893750][ T6248] WARNING: The mand mount option has been deprecated and [ 58.893750][ T6248] and is ignored by this kernel. Remove the mand [ 58.893750][ T6248] option from the mount to silence this warning. [ 58.893750][ T6248] ======================================================= [ 58.997447][ T9] usb 8-1: device descriptor read/64, error -71 [ 59.247526][ T9] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 59.377442][ T9] usb 8-1: device descriptor read/64, error -71 [ 59.497710][ T9] usb usb8-port1: attempt power cycle [ 59.543607][ T6260] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 59.602569][ T6266] pimreg3: entered allmulticast mode [ 59.711438][ T6279] syz_tun: entered allmulticast mode [ 59.863954][ T6302] netlink: 'syz.1.98': attribute type 21 has an invalid length. [ 59.868338][ T9] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 59.899677][ T9] usb 8-1: device descriptor read/8, error -71 [ 59.960514][ T6320] ceph: Path missing in source [ 60.137432][ T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 60.157917][ T9] usb 8-1: device descriptor read/8, error -71 [ 60.277672][ T9] usb usb8-port1: unable to enumerate USB device [ 60.477518][ T6352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.481308][ T6352] IPv6: NLM_F_CREATE should be set when creating new route [ 60.484925][ T6352] IPv6: NLM_F_CREATE should be set when creating new route [ 60.488516][ T6352] IPv6: NLM_F_CREATE should be set when creating new route [ 60.494731][ T6352] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 60.523619][ T6352] process 'syz.2.116' launched '/dev/fd/12' with NULL argv: empty string added [ 60.658051][ T63] Bluetooth: hci2: command tx timeout [ 60.691616][ T6358] 8021q: adding VLAN 0 to HW filter on device bond1 [ 60.705047][ T6359] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 60.728257][ T63] Bluetooth: hci3: command tx timeout [ 60.728397][ T5973] Bluetooth: hci1: command tx timeout [ 60.730131][ T5985] Bluetooth: hci0: command tx timeout [ 60.755075][ T6362] bridge0: entered promiscuous mode [ 60.757998][ T6362] macsec1: entered promiscuous mode [ 60.798459][ T61] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 60.907892][ T61] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 61.193004][ T6403] SELinux: policydb version 800 does not match my version range 15-35 [ 61.196263][ T6403] SELinux: failed to load policy [ 61.315035][ T6401] __nla_validate_parse: 4 callbacks suppressed [ 61.315051][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 61.321706][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 61.335579][ T1144] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.338914][ T6401] netlink: 8 bytes leftover after parsing attributes in process `syz.0.135'. [ 61.341726][ T6401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.135'. [ 61.341754][ T1144] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.347811][ T1144] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.354840][ T1144] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 61.449034][ T6423] block nbd1: shutting down sockets [ 61.609199][ T6443] tmpfs: Bad value for 'mpol' [ 61.678406][ T6449] netlink: 'syz.3.153': attribute type 1 has an invalid length. [ 61.681103][ T6449] netlink: 224 bytes leftover after parsing attributes in process `syz.3.153'. [ 61.730332][ T6452] netlink: 48 bytes leftover after parsing attributes in process `syz.3.153'. [ 61.779330][ T6449] tipc: Started in network mode [ 61.781864][ T6449] tipc: Node identity 4206e155bd4b, cluster identity 4711 [ 61.785350][ T6449] tipc: Enabled bearer , priority 0 [ 61.796234][ T6448] tipc: Disabling bearer [ 62.104576][ T6472] netlink: zone id is out of range [ 62.106199][ T6472] netlink: zone id is out of range [ 62.161913][ T6479] fuse: Bad value for 'fd' [ 62.164820][ T40] kauditd_printk_skb: 89 callbacks suppressed [ 62.164829][ T40] audit: type=1400 audit(1757360403.727:283): avc: denied { create } for pid=6476 comm="syz.2.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 62.178039][ T40] audit: type=1400 audit(1757360403.727:284): avc: denied { write } for pid=6476 comm="syz.2.164" path="socket:[12420]" dev="sockfs" ino=12420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 62.253237][ T40] audit: type=1400 audit(1757360403.817:285): avc: denied { ioctl } for pid=6491 comm="syz.3.172" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 62.263496][ T40] audit: type=1400 audit(1757360403.817:286): avc: denied { set_context_mgr } for pid=6491 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 62.266753][ T6493] ref_ctr_offset mismatch. inode: 0xdf offset: 0x0 ref_ctr_offset(old): 0x200000000180 ref_ctr_offset(new): 0x0 [ 62.270165][ T6495] netlink: 20 bytes leftover after parsing attributes in process `syz.2.168'. [ 62.275377][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.2.168'. [ 62.297276][ T6495] ip6gretap2: entered promiscuous mode [ 62.300070][ T6495] ip6gretap2: entered allmulticast mode [ 62.332902][ T6499] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.336988][ T40] audit: type=1400 audit(1757360403.897:287): avc: denied { bind } for pid=6498 comm="syz.0.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 62.342387][ T6493] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.350882][ T40] audit: type=1400 audit(1757360403.917:288): avc: denied { mount } for pid=6498 comm="syz.0.174" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.386969][ T40] audit: type=1400 audit(1757360403.947:289): avc: denied { unmount } for pid=5982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 62.430775][ T40] audit: type=1400 audit(1757360403.997:290): avc: denied { bind } for pid=6510 comm="syz.1.178" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 62.455087][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz.0.179'. [ 62.455220][ T40] audit: type=1400 audit(1757360404.017:291): avc: denied { mount } for pid=6500 comm="syz.2.175" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 62.476610][ T40] audit: type=1400 audit(1757360404.037:292): avc: denied { create } for pid=6517 comm="syz.1.180" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 62.488822][ T6493] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.511340][ T6522] netlink: 12 bytes leftover after parsing attributes in process `syz.2.182'. [ 62.556747][ T6531] tmpfs: Bad value for 'mpol' [ 62.574851][ T6493] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.590079][ T6531] tmpfs: Bad value for 'mpol' [ 62.672076][ T6493] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.783976][ T13] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.796914][ T13] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.807965][ T1145] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.815711][ T13] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.821668][ T6558] netlink: 'syz.2.191': attribute type 10 has an invalid length. [ 63.070719][ T6576] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 63.077050][ T6576] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 63.081773][ T6576] bond0 (unregistering): Released all slaves [ 63.383657][ T6608] input: syz1 as /devices/virtual/input/input6 [ 63.433010][ T6614] netlink: 'syz.1.214': attribute type 64 has an invalid length. [ 63.435514][ T6614] netlink: 'syz.1.214': attribute type 4 has an invalid length. [ 63.690757][ T6636] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 63.698880][ T6636] CIFS mount error: No usable UNC path provided in device string! [ 63.698880][ T6636] [ 63.702179][ T6636] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 63.997176][ T6662] 9pnet: Unknown protocol version 9p20\++} [ 64.048433][ T6666] netdevsim netdevsim2: Direct firmware load for þ failed with error -2 [ 64.051639][ T6666] netdevsim netdevsim2: Falling back to sysfs fallback for: þ [ 64.072886][ T6673] IPv6: addrconf: prefix option has invalid lifetime [ 64.076636][ T6670] ata1.00: invalid multi_count 1 ignored [ 64.139184][ T6678] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 64.139440][ T6679] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 64.190444][ T6683] netlink: 'syz.0.242': attribute type 2 has an invalid length. [ 64.230848][ T6677] afs: Unknown parameter 'ãÿÿÿÒ•wÝ“²Ž5ò›J6½D}0WG [ 65.342292][ T6721] dump_stack_lvl+0x16c/0x1f0 [ 65.342315][ T6721] warn_alloc+0x248/0x3a0 [ 65.342331][ T6721] ? __pfx_warn_alloc+0x10/0x10 [ 65.342342][ T6721] ? lockdep_hardirqs_on+0x7c/0x110 [ 65.342366][ T6721] ? kasan_save_stack+0x42/0x60 [ 65.342379][ T6721] ? kasan_save_stack+0x33/0x60 [ 65.342391][ T6721] ? kasan_save_track+0x14/0x30 [ 65.342405][ T6721] ? vb2_vmalloc_alloc+0xf9/0x3f0 [ 65.342446][ T6721] ? __vb2_queue_alloc+0x8c6/0x1280 [ 65.342465][ T6721] ? vb2_core_create_bufs+0x559/0xab0 [ 65.342489][ T6721] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 65.342512][ T6721] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 65.342541][ T6721] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 65.342566][ T6721] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 65.342593][ T6721] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 65.342614][ T6721] vmalloc_user_noprof+0x9e/0xe0 [ 65.342635][ T6721] ? vb2_vmalloc_alloc+0x135/0x3f0 [ 65.342659][ T6721] vb2_vmalloc_alloc+0x135/0x3f0 [ 65.342684][ T6721] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 65.342709][ T6721] __vb2_queue_alloc+0x8c6/0x1280 [ 65.342742][ T6721] vb2_core_create_bufs+0x559/0xab0 [ 65.342769][ T6721] ? __pfx_vb2_core_create_bufs+0x10/0x10 [ 65.342800][ T6721] ? __mutex_trylock_common+0xe9/0x250 [ 65.342829][ T6721] vb2_create_bufs+0x5e8/0x840 [ 65.342854][ T6721] ? __pfx_vb2_create_bufs+0x10/0x10 [ 65.342876][ T6721] ? v4l_sanitize_colorspace+0x213/0x400 [ 65.342902][ T6721] vb2_ioctl_create_bufs+0x244/0x3e0 [ 65.342924][ T6721] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 65.342945][ T6721] vidioc_create_bufs+0x7d/0xf0 [ 65.342966][ T6721] v4l_create_bufs+0x159/0x270 [ 65.342984][ T6721] __video_do_ioctl+0xb3d/0xfc0 [ 65.343005][ T6721] ? __might_fault+0xe3/0x190 [ 65.343021][ T6721] ? __pfx___video_do_ioctl+0x10/0x10 [ 65.343048][ T6721] video_usercopy+0x4cd/0x1720 [ 65.343069][ T6721] ? __pfx___video_do_ioctl+0x10/0x10 [ 65.343087][ T6721] ? selinux_kernel_read_file+0xd0/0x130 [ 65.343111][ T6721] ? __pfx_video_usercopy+0x10/0x10 [ 65.343151][ T6721] v4l2_ioctl+0x1ba/0x250 [ 65.343168][ T6721] ? __pfx_v4l2_ioctl+0x10/0x10 [ 65.343187][ T6721] __x64_sys_ioctl+0x18b/0x210 [ 65.343214][ T6721] do_syscall_64+0xcd/0x4c0 [ 65.343237][ T6721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.343253][ T6721] RIP: 0033:0x7fa66178ebe9 [ 65.343266][ T6721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 65.343280][ T6721] RSP: 002b:00007fa66265b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 65.343295][ T6721] RAX: ffffffffffffffda RBX: 00007fa6619c5fa0 RCX: 00007fa66178ebe9 [ 65.343305][ T6721] RDX: 0000200000000280 RSI: 00000000c100565c RDI: 0000000000000003 [ 65.343314][ T6721] RBP: 00007fa661811e19 R08: 0000000000000000 R09: 0000000000000000 [ 65.343323][ T6721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.343332][ T6721] R13: 00007fa6619c6038 R14: 00007fa6619c5fa0 R15: 00007fff67a6b258 [ 65.343353][ T6721] [ 65.343498][ T6721] Mem-Info: [ 65.430993][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88802845dc00: rx timeout, send abort [ 65.435690][ T6721] active_anon:8311 inactive_anon:0 isolated_anon:0 [ 65.435690][ T6721] active_file:11894 inactive_file:41001 isolated_file:0 [ 65.435690][ T6721] unevictable:1768 dirty:1816 writeback:0 [ 65.435690][ T6721] slab_reclaimable:12007 slab_unreclaimable:67822 [ 65.435690][ T6721] mapped:24503 shmem:2408 pagetables:1189 [ 65.435690][ T6721] sec_pagetables:303 bounce:0 [ 65.435690][ T6721] kernel_misc_reclaimable:0 [ 65.435690][ T6721] free:462094 free_pcp:13889 free_cma:0 [ 65.440448][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88802845dc00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 65.443456][ T6721] Node 0 active_anon:33244kB inactive_anon:0kB active_file:47576kB inactive_file:163800kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:98012kB dirty:7264kB writeback:0kB shmem:6096kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:12784kB pagetables:4532kB sec_pagetables:1212kB all_unreclaimable? no Balloon:0kB [ 65.497771][ T6721] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:3536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:112kB pagetables:224kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 65.509387][ T6721] Node 0 DMA free:15360kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 65.520613][ T6721] lowmem_reserve[]: 0 1233 1233 1233 1233 [ 65.522972][ T6721] Node 0 DMA32 free:235412kB boost:0kB min:27516kB low:34392kB high:41268kB reserved_highatomic:0KB free_highatomic:0KB active_anon:33132kB inactive_anon:0kB active_file:47576kB inactive_file:163800kB unevictable:3536kB writepending:7264kB present:2080628kB managed:1263444kB mlocked:0kB bounce:0kB free_pcp:40168kB local_pcp:5072kB free_cma:0kB [ 65.535140][ T6721] lowmem_reserve[]: 0 0 0 0 0 [ 65.537066][ T6721] Node 1 Normal free:1597604kB boost:0kB min:39720kB low:49648kB high:59576kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:3536kB writepending:0kB present:2097152kB managed:1781892kB mlocked:0kB bounce:0kB free_pcp:16200kB local_pcp:7104kB free_cma:0kB [ 65.549456][ T6721] lowmem_reserve[]: 0 0 0 0 0 [ 65.551399][ T6721] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 65.556323][ T6721] Node 0 DMA32: 558*4kB (UM) 846*8kB (UM) 701*16kB (UME) 638*32kB (UME) 249*64kB (UME) 93*128kB (UME) 18*256kB (UME) 14*512kB (UM) 7*1024kB (M) 6*2048kB (UME) 33*4096kB (UM) = 234872kB [ 65.563291][ T6721] Node 1 Normal: 35*4kB (UE) 27*8kB (UME) 32*16kB (UME) 40*32kB (UME) 17*64kB (UME) 14*128kB (UME) 5*256kB (UE) 4*512kB (UM) 2*1024kB (UE) 1*2048kB (M) 387*4096kB (M) = 1597604kB [ 65.570161][ T6721] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.573334][ T6721] Node 0 hugepages_total=6 hugepages_free=6 hugepages_surp=4 hugepages_size=2048kB [ 65.577241][ T6721] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 65.581362][ T6721] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 65.584784][ T6721] 55281 total pagecache pages [ 65.586409][ T6721] 0 pages in swap cache [ 65.587921][ T6721] Free swap = 124996kB [ 65.589343][ T6721] Total swap = 124996kB [ 65.590742][ T6721] 1048443 pages RAM [ 65.592042][ T6721] 0 pages HighMem/MovableOnly [ 65.593624][ T6721] 283269 pages reserved [ 65.595037][ T6721] 0 pages cma reserved [ 65.804666][ T6753] netlink: 'syz.1.269': attribute type 1 has an invalid length. [ 65.831910][ T6757] capability: warning: `syz.1.271' uses deprecated v2 capabilities in a way that may be insecure [ 65.837042][ T6757] 9pnet_fd: Insufficient options for proto=fd [ 66.248674][ T6791] netlink: 'syz.0.284': attribute type 1 has an invalid length. [ 66.935482][ T6813] option changes via remount are deprecated (pid=6812 comm=syz.3.292) [ 66.945978][ T6815] __nla_validate_parse: 49 callbacks suppressed [ 66.945994][ T6815] netlink: 12 bytes leftover after parsing attributes in process `syz.1.293'. [ 67.065956][ T6825] mmap: syz.1.298 (6825) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 67.137058][ T6827] loop6: detected capacity change from 0 to 63 [ 67.143411][ T5971] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.147477][ T6827] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.150558][ T5971] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.153920][ T6827] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.157038][ T6827] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.160301][ T5971] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.163392][ T6827] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.166828][ T5971] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.171446][ T6827] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.174748][ T6827] Buffer I/O error on dev loop6, logical block 0, async page read [ 67.191024][ T6835] warning: `syz.1.301' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.359444][ T6837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.302'. [ 67.363599][ T40] kauditd_printk_skb: 62 callbacks suppressed [ 67.363609][ T40] audit: type=1400 audit(1757360408.927:355): avc: denied { create } for pid=6836 comm="syz.3.302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 67.402019][ T6839] loop7: detected capacity change from 0 to 7 [ 67.437653][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 67.457406][ T6839] Dev loop7: unable to read RDB block 7 [ 67.459453][ T6839] loop7: unable to read partition table [ 67.461283][ T6839] loop7: partition table beyond EOD, truncated [ 67.463286][ T6839] loop_reread_partitions: partition scan of loop7 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 67.495504][ T40] audit: type=1400 audit(1757360409.057:356): avc: denied { execute } for pid=6841 comm="syz.0.304" path="/dev/dsp" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 67.503268][ T40] audit: type=1400 audit(1757360409.067:357): avc: denied { shutdown } for pid=6841 comm="syz.0.304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 67.592507][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 67.601657][ T9] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 67.605543][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.609439][ T9] usb 6-1: Product: syz [ 67.611268][ T9] usb 6-1: Manufacturer: syz [ 67.613089][ T9] usb 6-1: SerialNumber: syz [ 67.620128][ T9] usb 6-1: config 0 descriptor?? [ 67.705159][ T40] audit: type=1400 audit(1757360409.267:358): avc: denied { execute_no_trans } for pid=6857 comm="syz.3.310" path="/71/file0" dev="tmpfs" ino=387 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 67.754928][ T6864] netlink: 28 bytes leftover after parsing attributes in process `syz.3.312'. [ 67.805425][ T6868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.314'. [ 67.813326][ T1157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.816270][ T1157] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.834667][ T6870] netlink: 28 bytes leftover after parsing attributes in process `syz.3.315'. [ 67.839435][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 67.862760][ T6872] netlink: 4 bytes leftover after parsing attributes in process `syz.3.316'. [ 67.926110][ T40] audit: type=1400 audit(1757360409.487:359): avc: denied { map } for pid=6877 comm="syz.3.318" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.933685][ T40] audit: type=1400 audit(1757360409.487:360): avc: denied { execute } for pid=6877 comm="syz.3.318" path="/dev/nvme-fabrics" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 68.007525][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.033282][ T40] audit: type=1400 audit(1757360409.597:361): avc: denied { listen } for pid=6834 comm="syz.1.301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 68.041940][ T9] usb 6-1: USB disconnect, device number 6 [ 68.417580][ T34] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 68.474225][ T6881] netlink: 'syz.0.319': attribute type 1 has an invalid length. [ 68.502243][ T40] audit: type=1400 audit(1757360410.067:362): avc: denied { read } for pid=6880 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.509933][ T40] audit: type=1400 audit(1757360410.067:363): avc: denied { getopt } for pid=6880 comm="syz.0.319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 68.675008][ T6895] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 68.679997][ T6895] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 68.710535][ T6899] netlink: 8 bytes leftover after parsing attributes in process `syz.0.327'. [ 68.724677][ T6899] netlink: 4 bytes leftover after parsing attributes in process `syz.0.327'. [ 68.776584][ T40] audit: type=1326 audit(1757360410.337:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6898 comm="syz.0.327" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb7418ebe9 code=0x0 [ 68.874025][ T6916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.334'. [ 68.938874][ T6922] netlink: 1464 bytes leftover after parsing attributes in process `syz.1.337'. [ 68.943745][ T6922] xt_socket: unknown flags 0x20 [ 69.955500][ T6976] /dev/sg0: Can't lookup blockdev [ 70.352753][ T6989] netlink: 'syz.3.361': attribute type 16 has an invalid length. [ 70.356194][ T6989] netlink: 'syz.3.361': attribute type 17 has an invalid length. [ 70.431916][ T6989] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.435945][ T6989] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.695262][ T6989] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 70.715470][ T13] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.719237][ T13] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.723754][ T13] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.727242][ T13] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.819933][ T29] hid (null): report_id 0 is invalid [ 70.825678][ T7010] netlink: 'syz.3.368': attribute type 12 has an invalid length. [ 70.831954][ T29] hid-generic 0081:0002:0003.0002: unknown main item tag 0x0 [ 70.834500][ T29] hid-generic 0081:0002:0003.0002: report_id 0 is invalid [ 70.836701][ T29] hid-generic 0081:0002:0003.0002: item 0 0 1 8 parsing failed [ 70.846003][ T29] hid-generic 0081:0002:0003.0002: probe with driver hid-generic failed with error -22 [ 70.949182][ T7030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.075293][ T7047] block nbd0: Attempted send on invalid socket [ 71.090924][ T7047] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 2 [ 71.108973][ T7047] XFS (nbd0): SB validate failed with error -5. [ 71.147499][ T7060] nbd: couldn't find a device at index -1605786504 [ 71.273146][ T7072] batadv_slave_0: entered promiscuous mode [ 71.278696][ T7072] batadv_slave_0: entered allmulticast mode [ 71.314394][ T7077] random: crng reseeded on system resumption [ 71.365490][ T7085] /dev/sg0: Can't lookup blockdev [ 71.371997][ T1426] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.527326][ T7098] tmpfs: Bad value for 'gid' [ 71.529799][ T7098] tmpfs: Bad value for 'gid' [ 71.757560][ T6055] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 71.777388][ T7104] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 71.909089][ T6055] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 71.914009][ T6055] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 71.917174][ T6055] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 71.920532][ T6055] usb 8-1: Product: syz [ 71.921861][ T6055] usb 8-1: Manufacturer: syz [ 71.923667][ T6055] usb 8-1: SerialNumber: syz [ 71.926914][ T6055] usb 8-1: config 0 descriptor?? [ 72.136156][ T7114] __nla_validate_parse: 4 callbacks suppressed [ 72.136168][ T7114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.399'. [ 72.136251][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 72.227040][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 72.230845][ T7123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.401'. [ 72.234888][ T7123] netlink: 68 bytes leftover after parsing attributes in process `syz.0.401'. [ 72.267433][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.401'. [ 72.273776][ T7123] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.277299][ T7123] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.349903][ T7128] netlink: 4 bytes leftover after parsing attributes in process `syz.2.403'. [ 72.454761][ T40] kauditd_printk_skb: 19 callbacks suppressed [ 72.454776][ T40] audit: type=1400 audit(1757360414.017:384): avc: denied { relabelfrom } for pid=7133 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.465580][ T40] audit: type=1400 audit(1757360414.017:385): avc: denied { relabelto } for pid=7133 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 72.490765][ T7126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.402'. [ 72.493159][ T40] audit: type=1400 audit(1757360414.057:386): avc: denied { setopt } for pid=7133 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.494340][ T7126] netlink: 64 bytes leftover after parsing attributes in process `syz.0.402'. [ 72.524342][ T40] audit: type=1400 audit(1757360414.087:387): avc: denied { bind } for pid=7133 comm="syz.2.406" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 72.595530][ T40] audit: type=1400 audit(1757360414.157:388): avc: denied { write } for pid=7136 comm="syz.0.407" name="nvram" dev="devtmpfs" ino=631 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 72.836160][ T40] audit: type=1400 audit(1757360414.397:389): avc: denied { create } for pid=7144 comm="syz.0.411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.843539][ T40] audit: type=1400 audit(1757360414.397:390): avc: denied { bind } for pid=7140 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 72.850553][ T40] audit: type=1400 audit(1757360414.397:391): avc: denied { ioctl } for pid=7144 comm="syz.0.411" path="socket:[14082]" dev="sockfs" ino=14082 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 72.859116][ T40] audit: type=1400 audit(1757360414.407:392): avc: denied { write } for pid=7140 comm="syz.1.409" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 73.362911][ T7145] bond0: Error: Cannot enslave bond to itself. [ 73.370173][ T7151] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 73.391823][ T7153] netlink: 'syz.0.412': attribute type 4 has an invalid length. [ 73.426158][ T40] audit: type=1400 audit(1757360414.987:393): avc: denied { setopt } for pid=7156 comm="syz.2.414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 73.428831][ T7157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.414'. [ 73.481740][ T7162] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.485570][ T7162] batadv_slave_0: entered promiscuous mode [ 73.488528][ T7162] batadv_slave_0: entered allmulticast mode [ 73.639840][ T61] nci: nci_rsp_packet: unsupported rsp opcode 0xf21 [ 73.763672][ T7198] SELinux: policydb version 631084173 does not match my version range 15-35 [ 73.766782][ T7198] SELinux: failed to load policy [ 73.839317][ T7198] tmpfs: Unknown parameter 'mpO' [ 73.841805][ T7198] SELinux: policydb magic number 0x69662f2e does not match expected magic number 0xf97cff8c [ 73.846038][ T7198] SELinux: failed to load policy [ 74.451035][ T9] usb 8-1: USB disconnect, device number 6 [ 74.744802][ T7263] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 74.805916][ T7269] tipc: Enabling of bearer rejected, failed to enable media [ 74.838941][ T7274] bridge_slave_0: left allmulticast mode [ 74.840782][ T7274] bridge_slave_0: left promiscuous mode [ 74.842795][ T7274] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.854661][ T7274] bridge_slave_1: left allmulticast mode [ 74.856835][ T7274] bridge_slave_1: left promiscuous mode [ 74.859972][ T7274] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.888949][ T7274] team0: Port device team_slave_0 removed [ 74.905428][ T7274] team0: Port device team_slave_1 removed [ 74.913437][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 74.920312][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 74.931286][ T7274] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.934256][ T7274] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 75.015422][ T7303] netlink: 'syz.2.468': attribute type 11 has an invalid length. [ 75.021766][ T7303] netlink: 'syz.2.468': attribute type 11 has an invalid length. [ 75.041117][ T7303] tmpfs: Unknown parameter 'grpquota_7*I}Þ­mÿ:block_jvY¸Ýš|YˆeVxMhardlimit' [ 75.116605][ T7324] program syz.3.467 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 75.120788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 75.127790][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.437883][ T53] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 75.494778][ T7351] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 75.498938][ T7351] batadv_slave_0: entered promiscuous mode [ 75.500830][ T7351] batadv_slave_0: entered allmulticast mode [ 75.507761][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.577023][ T7357] SELinux: policydb magic number 0x4007 does not match expected magic number 0xf97cff8c [ 75.581682][ T7357] SELinux: failed to load policy [ 75.621926][ T53] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 75.633515][ T53] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 75.636549][ T53] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.640317][ T53] usb 8-1: Product: syz [ 75.641662][ T53] usb 8-1: Manufacturer: syz [ 75.643110][ T53] usb 8-1: SerialNumber: syz [ 75.646743][ T53] usb 8-1: config 0 descriptor?? [ 75.757566][ T7379] batadv_slave_0: entered promiscuous mode [ 75.760144][ T7379] batadv_slave_0: entered allmulticast mode [ 75.867859][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 75.889217][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.181354][ T7407] netlink: 'syz.1.513': attribute type 5 has an invalid length. [ 76.293802][ T7412] binder: Bad value for 'max' [ 76.293802][ T7411] binder: Bad value for 'max' [ 76.599556][ T7422] /dev/sr0: Can't open blockdev [ 76.658750][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.758500][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.771703][ T7439] 9pnet: Unknown protocol version 9 [ 76.784973][ T7441] FAULT_INJECTION: forcing a failure. [ 76.784973][ T7441] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 76.789990][ T7441] CPU: 3 UID: 0 PID: 7441 Comm: syz.2.524 Not tainted syzkaller #0 PREEMPT(full) [ 76.790003][ T7441] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 76.790009][ T7441] Call Trace: [ 76.790013][ T7441] [ 76.790018][ T7441] dump_stack_lvl+0x16c/0x1f0 [ 76.790055][ T7441] should_fail_ex+0x512/0x640 [ 76.790075][ T7441] _copy_from_user+0x2e/0xd0 [ 76.790091][ T7441] do_seccomp+0x1ff/0x26d0 [ 76.790106][ T7441] ? __fget_files+0x20e/0x3c0 [ 76.790119][ T7441] ? __pfx_do_seccomp+0x10/0x10 [ 76.790133][ T7441] ? fput+0x9b/0xd0 [ 76.790146][ T7441] ? ksys_write+0x1ac/0x250 [ 76.790157][ T7441] ? __pfx_ksys_write+0x10/0x10 [ 76.790174][ T7441] do_syscall_64+0xcd/0x4c0 [ 76.790200][ T7441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 76.790215][ T7441] RIP: 0033:0x7f3f26b8ebe9 [ 76.790229][ T7441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 76.790244][ T7441] RSP: 002b:00007f3f24df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 76.790260][ T7441] RAX: ffffffffffffffda RBX: 00007f3f26dc5fa0 RCX: 00007f3f26b8ebe9 [ 76.790270][ T7441] RDX: 0000200000000040 RSI: 0000000000000008 RDI: 0000000000000001 [ 76.790280][ T7441] RBP: 00007f3f24df6090 R08: 0000000000000000 R09: 0000000000000000 [ 76.790289][ T7441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 76.790297][ T7441] R13: 00007f3f26dc6038 R14: 00007f3f26dc5fa0 R15: 00007fff8291a8a8 [ 76.790313][ T7441] [ 76.797543][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 76.860334][ C1] vkms_vblank_simulate: vblank timer overrun [ 77.064834][ T7462] SELinux: Context Ü is not valid (left unmapped). [ 77.068720][ T7462] libceph: resolve '4' (ret=-3): failed [ 77.073056][ T7462] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7462 comm=syz.0.534 [ 77.147913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.150622][ T9] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 77.152555][ T7468] __nla_validate_parse: 14 callbacks suppressed [ 77.152570][ T7468] netlink: 24 bytes leftover after parsing attributes in process `syz.0.537'. [ 77.188480][ T7468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.537'. [ 77.277436][ T9] usb 7-1: device descriptor read/64, error -71 [ 77.309981][ T7481] netlink: 4 bytes leftover after parsing attributes in process `syz.1.542'. [ 77.325928][ T7483] 9pnet: Unknown protocol version 9p200 [ 77.370232][ T7488] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 77.405142][ T7488] 8021q: adding VLAN 0 to HW filter on device bond2 [ 77.409447][ T7488] bond1: (slave bond2): making interface the new active one [ 77.412209][ T7488] bond1: (slave bond2): Enslaving as an active interface with an up link [ 77.517900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 77.521647][ T9] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 77.657474][ T9] usb 7-1: device descriptor read/64, error -71 [ 77.750015][ T7532] 9pnet: Unknown protocol version 9p200 [ 77.770260][ T9] usb usb7-port1: attempt power cycle [ 77.784801][ T7534] FAULT_INJECTION: forcing a failure. [ 77.784801][ T7534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 77.789267][ T7534] CPU: 0 UID: 0 PID: 7534 Comm: syz.0.564 Not tainted syzkaller #0 PREEMPT(full) [ 77.789282][ T7534] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 77.789288][ T7534] Call Trace: [ 77.789291][ T7534] [ 77.789295][ T7534] dump_stack_lvl+0x16c/0x1f0 [ 77.789312][ T7534] should_fail_ex+0x512/0x640 [ 77.789328][ T7534] _copy_from_user+0x2e/0xd0 [ 77.789343][ T7534] copy_msghdr_from_user+0x98/0x160 [ 77.789357][ T7534] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 77.789376][ T7534] ___sys_sendmsg+0xfe/0x1d0 [ 77.789389][ T7534] ? __pfx____sys_sendmsg+0x10/0x10 [ 77.789417][ T7534] __sys_sendmsg+0x16d/0x220 [ 77.789430][ T7534] ? __pfx___sys_sendmsg+0x10/0x10 [ 77.789459][ T7534] do_syscall_64+0xcd/0x4c0 [ 77.789480][ T7534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.789498][ T7534] RIP: 0033:0x7feb7418ebe9 [ 77.789513][ T7534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 77.789526][ T7534] RSP: 002b:00007feb74f4a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 77.789536][ T7534] RAX: ffffffffffffffda RBX: 00007feb743c5fa0 RCX: 00007feb7418ebe9 [ 77.789542][ T7534] RDX: 0000000000008004 RSI: 0000200000000040 RDI: 0000000000000003 [ 77.789548][ T7534] RBP: 00007feb74f4a090 R08: 0000000000000000 R09: 0000000000000000 [ 77.789554][ T7534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 77.789559][ T7534] R13: 00007feb743c6038 R14: 00007feb743c5fa0 R15: 00007ffe5374d9b8 [ 77.789572][ T7534] [ 78.033620][ T53] usb 8-1: USB disconnect, device number 7 [ 78.107582][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 78.129026][ T9] usb 7-1: device descriptor read/8, error -71 [ 78.370839][ T9] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 78.388297][ T9] usb 7-1: device descriptor read/8, error -71 [ 78.502519][ T9] usb usb7-port1: unable to enumerate USB device [ 78.542537][ T7546] netlink: 'syz.3.569': attribute type 3 has an invalid length. [ 78.660692][ T7554] syzkaller1: entered promiscuous mode [ 78.663066][ T7554] syzkaller1: entered allmulticast mode [ 78.680072][ T7558] netlink: 'syz.0.570': attribute type 10 has an invalid length. [ 78.715310][ T7560] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.722736][ T40] kauditd_printk_skb: 28 callbacks suppressed [ 78.722746][ T40] audit: type=1400 audit(1757360420.287:422): avc: denied { name_bind } for pid=7559 comm="syz.0.575" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 78.738873][ T40] audit: type=1400 audit(1757360420.287:423): avc: denied { node_bind } for pid=7559 comm="syz.0.575" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 78.772828][ T7565] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 78.772861][ T40] audit: type=1400 audit(1757360420.337:424): avc: denied { read } for pid=7564 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 78.781526][ T40] audit: type=1400 audit(1757360420.337:425): avc: denied { getopt } for pid=7564 comm="syz.0.577" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 78.875431][ T7570] comedi comedi3: comedi_config --init_data is deprecated [ 78.947526][ T5978] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 79.027995][ T34] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 79.104188][ T40] audit: type=1400 audit(1757360420.667:426): avc: denied { sqpoll } for pid=7582 comm="syz.0.585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 79.109093][ T5978] usb 6-1: config 0 has no interfaces? [ 79.114442][ T5978] usb 6-1: New USB device found, idVendor=0c45, idProduct=608f, bcdDevice=b5.55 [ 79.118456][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.121295][ T5978] usb 6-1: Product: syz [ 79.122715][ T5978] usb 6-1: Manufacturer: syz [ 79.124250][ T5978] usb 6-1: SerialNumber: syz [ 79.127137][ T5978] usb 6-1: config 0 descriptor?? [ 79.169458][ T7588] block nbd0: NBD_DISCONNECT [ 79.188984][ T34] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 79.194157][ T34] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 79.195052][ T7590] netlink: 256 bytes leftover after parsing attributes in process `syz.0.588'. [ 79.197950][ T34] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.200666][ T7590] unsupported nlmsg_type 40 [ 79.204049][ T34] usb 8-1: Product: syz [ 79.206658][ T34] usb 8-1: Manufacturer: syz [ 79.208825][ T34] usb 8-1: SerialNumber: syz [ 79.211997][ T34] usb 8-1: config 0 descriptor?? [ 79.333448][ T40] audit: type=1800 audit(1757360420.897:427): pid=7554 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.573" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 79.511178][ T34] usb 6-1: USB disconnect, device number 7 [ 79.915739][ T7630] program syz.1.606 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 79.950682][ T7638] FAULT_INJECTION: forcing a failure. [ 79.950682][ T7638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 79.954896][ T7638] CPU: 3 UID: 0 PID: 7638 Comm: syz.2.608 Not tainted syzkaller #0 PREEMPT(full) [ 79.954909][ T7638] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 79.954915][ T7638] Call Trace: [ 79.954919][ T7638] [ 79.954924][ T7638] dump_stack_lvl+0x16c/0x1f0 [ 79.954941][ T7638] should_fail_ex+0x512/0x640 [ 79.954956][ T7638] _copy_from_user+0x2e/0xd0 [ 79.954972][ T7638] do_seccomp+0x1ff/0x26d0 [ 79.954988][ T7638] ? __fget_files+0x20e/0x3c0 [ 79.955007][ T7638] ? __pfx_do_seccomp+0x10/0x10 [ 79.955021][ T7638] ? fput+0x9b/0xd0 [ 79.955035][ T7638] ? ksys_write+0x1ac/0x250 [ 79.955045][ T7638] ? __pfx_ksys_write+0x10/0x10 [ 79.955059][ T7638] do_syscall_64+0xcd/0x4c0 [ 79.955074][ T7638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.955084][ T7638] RIP: 0033:0x7f3f26b8ebe9 [ 79.955093][ T7638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.955103][ T7638] RSP: 002b:00007f3f24df6038 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 79.955113][ T7638] RAX: ffffffffffffffda RBX: 00007f3f26dc5fa0 RCX: 00007f3f26b8ebe9 [ 79.955119][ T7638] RDX: 0000200000000100 RSI: 0000000000000007 RDI: 0000000000000001 [ 79.955125][ T7638] RBP: 00007f3f24df6090 R08: 0000000000000000 R09: 0000000000000000 [ 79.955130][ T7638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 79.955136][ T7638] R13: 00007f3f26dc6038 R14: 00007f3f26dc5fa0 R15: 00007fff8291a8a8 [ 79.955148][ T7638] [ 79.977428][ T40] audit: type=1400 audit(1757360421.527:428): avc: denied { create } for pid=7635 comm="syz.0.610" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 80.174923][ T7663] (syz.0.621,7663,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 80.178813][ T7663] (syz.0.621,7663,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 80.233288][ T40] audit: type=1400 audit(1757360421.797:429): avc: denied { setopt } for pid=7673 comm="syz.2.624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.239872][ T40] audit: type=1400 audit(1757360421.797:430): avc: denied { read } for pid=7673 comm="syz.2.624" path="socket:[18696]" dev="sockfs" ino=18696 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 80.253208][ T7657] f2fs: Unknown parameter '/dev/video#' [ 80.321386][ T40] audit: type=1326 audit(1757360421.887:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7685 comm="syz.2.626" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3f26b8ebe9 code=0x0 [ 80.415435][ T7700] loop2: detected capacity change from 0 to 7 [ 80.420627][ T7700] loop2: p1 [ 80.421716][ T7700] loop2: partition table partially beyond EOD, truncated [ 80.424475][ T7700] loop2: p1 size 1919251295 extends beyond EOD, truncated [ 80.456135][ T5971] udevd[5971]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 80.520554][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.639'. [ 80.522363][ T10] kernel write not supported for file /580/attr/prev (pid: 10 comm: kworker/0:1) [ 80.534453][ T7714] binder: 7712:7714 ioctl c0306201 2000000001c0 returned -14 [ 80.556199][ T7717] IPVS: set_ctl: invalid protocol: 43 100.1.1.1:20000 [ 80.676527][ T7727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 80.766559][ T7737] binder: 7736:7737 ioctl c018620c 200000000240 returned -22 [ 80.953158][ T7756] bond3: entered promiscuous mode [ 80.990655][ T7767] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 81.115528][ T7772] bond0: entered promiscuous mode [ 81.131195][ T7781] netlink: 'syz.2.668': attribute type 5 has an invalid length. [ 81.134676][ T7781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.668'. [ 81.212022][ T7794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.672'. [ 81.252154][ T7798] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1540 sclass=netlink_route_socket pid=7798 comm=syz.0.675 [ 81.252718][ T7799] netlink: 'syz.0.675': attribute type 9 has an invalid length. [ 81.352213][ T7807] all: renamed from lo (while UP) [ 81.390700][ T7815] bridge3: entered promiscuous mode [ 81.609562][ T838] cfg80211: failed to load regulatory.db [ 81.620223][ T7837] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(5) [ 81.622447][ T7837] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 81.625787][ T7837] vhci_hcd vhci_hcd.0: Device attached [ 81.652546][ T7835] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 89f1, magic 89 != 6b] [ 81.699086][ T6055] usb 8-1: USB disconnect, device number 8 [ 81.738404][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 81.866884][ T7858] netlink: 'syz.1.700': attribute type 11 has an invalid length. [ 81.875087][ T7858] bridge: RTM_NEWNEIGH with invalid ether address [ 81.877477][ T838] usb 41-1: new high-speed USB device number 2 using vhci_hcd [ 82.255786][ T7897] __nla_validate_parse: 3 callbacks suppressed [ 82.255796][ T7897] netlink: 8 bytes leftover after parsing attributes in process `syz.2.716'. [ 82.260708][ T7897] netlink: 24 bytes leftover after parsing attributes in process `syz.2.716'. [ 82.369138][ T7902] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 82.371593][ T7902] netlink: 224 bytes leftover after parsing attributes in process `syz.2.718'. [ 82.470420][ T7922] syzkaller0: tun_chr_ioctl cmd 1074025672 [ 82.472326][ T7922] syzkaller0: ignored: set checksum enabled [ 82.489737][ T7922] syzkaller0: tun_chr_ioctl cmd 1076925456 [ 82.516961][ T7927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'. [ 82.519825][ T7927] netlink: 'syz.2.726': attribute type 30 has an invalid length. [ 82.526944][ T1144] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.530072][ T1144] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.539161][ T1144] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.543390][ T1144] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 82.707262][ T7957] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=7957 comm=syz.1.736 [ 82.723647][ T7958] (syz.0.737,7958,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 82.726422][ T7958] (syz.0.737,7958,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 82.855669][ T7971] netlink: 8 bytes leftover after parsing attributes in process `syz.0.741'. [ 82.859422][ T7971] netlink: 40 bytes leftover after parsing attributes in process `syz.0.741'. [ 82.954131][ T7983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.746'. [ 83.001890][ T7985] (syz.1.748,7985,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 83.004579][ T7985] (syz.1.748,7985,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 83.146947][ T7989] syz.1.749 (7989) used greatest stack depth: 19576 bytes left [ 83.344363][ T8019] netlink: 12 bytes leftover after parsing attributes in process `syz.0.762'. [ 83.382046][ T8021] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8021 comm=syz.0.763 [ 83.481958][ T8035] netlink: 36 bytes leftover after parsing attributes in process `syz.2.761'. [ 83.512665][ T8036] block device autoloading is deprecated and will be removed. [ 83.529365][ T8038] (syz.0.768,8038,1):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 83.532618][ T8038] (syz.0.768,8038,1):ocfs2_fill_super:1177 ERROR: status = -22 [ 83.549480][ T5384] udevd[5384]: worker [6232] terminated by signal 33 (Unknown signal 33) [ 83.549896][ T8044] netlink: 12 bytes leftover after parsing attributes in process `syz.1.771'. [ 83.552961][ T5384] udevd[5384]: worker [6232] failed while handling '/devices/virtual/block/ram201' [ 83.580510][ T8049] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8049 comm=syz.1.772 [ 83.808817][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 83.808826][ T40] audit: type=1400 audit(1757360425.377:466): avc: denied { ioctl } for pid=8051 comm="syz.2.774" path="socket:[18309]" dev="sockfs" ino=18309 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 83.874777][ T8086] (syz.2.786,8086,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 83.878771][ T8086] (syz.2.786,8086,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 83.882833][ T40] audit: type=1400 audit(1757360425.447:467): avc: denied { bind } for pid=8087 comm="syz.0.787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 84.022400][ T8111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=8111 comm=syz.3.795 [ 84.028749][ T8111] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=8111 comm=syz.3.795 [ 84.055399][ T40] audit: type=1400 audit(1757360425.617:468): avc: denied { read open } for pid=8113 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.076317][ T40] audit: type=1400 audit(1757360425.617:469): avc: denied { getattr } for pid=8113 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1902 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.087067][ T40] audit: type=1400 audit(1757360425.637:470): avc: denied { add_name } for pid=8112 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.108256][ T40] audit: type=1400 audit(1757360425.637:471): avc: denied { create } for pid=8112 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.117218][ T40] audit: type=1400 audit(1757360425.637:472): avc: denied { write } for pid=8112 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.wlan2.link" dev="tmpfs" ino=4780 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.129454][ T40] audit: type=1400 audit(1757360425.637:473): avc: denied { append } for pid=8112 comm="dhcpcd-run-hook" name="resolv.conf.wlan2.link" dev="tmpfs" ino=4780 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 84.136909][ T40] audit: type=1400 audit(1757360425.647:474): avc: denied { listen } for pid=8120 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.143132][ T40] audit: type=1400 audit(1757360425.647:475): avc: denied { accept } for pid=8120 comm="syz.0.800" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 84.164121][ T8132] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 84.532992][ T8173] sctp: [Deprecated]: syz.2.819 (pid 8173) Use of int in maxseg socket option. [ 84.532992][ T8173] Use struct sctp_assoc_value instead [ 84.768831][ T8192] (syz.1.825,8192,3):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 84.771529][ T8192] (syz.1.825,8192,3):ocfs2_fill_super:1177 ERROR: status = -22 [ 85.203665][ T8211] SELinux: policydb magic number 0x4007 does not match expected magic number 0xf97cff8c [ 85.206886][ T8211] SELinux: failed to load policy [ 85.366726][ T8227] (syz.0.840,8227,0):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 85.377469][ T8227] (syz.0.840,8227,0):ocfs2_fill_super:1177 ERROR: status = -22 [ 85.422408][ T8233] Bluetooth: MGMT ver 1.23 [ 85.424787][ T8233] Bluetooth: hci0: unsupported parameter 28 [ 85.426731][ T8233] Bluetooth: hci0: unsupported parameter 1028 [ 85.430461][ T8233] Bluetooth: hci0: unsupported parameter 28 [ 85.432420][ T8233] Bluetooth: hci0: unsupported parameter 1028 [ 85.441907][ T8233] A: renamed from vlan0 [ 86.012195][ T8301] vxcan1: tx drop: invalid da for name 0x0000000000000016 [ 86.133755][ T8327] kAFS: No cell specified [ 86.136070][ T8331] kAFS: No cell specified [ 86.192007][ T8335] delete_channel: no stack [ 86.284035][ T8342] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.286782][ T8342] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.363912][ T8342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.455085][ T12] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.461350][ T12] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.505208][ T12] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.512580][ T12] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.595867][ T8370] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode [ 86.857676][ T5978] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 86.872052][ T8391] CUSE: unknown device info "" [ 86.874268][ T8391] CUSE: zero length info key specified [ 86.921673][ T8393] mkiss: ax0: crc mode is auto. [ 86.962370][ T8393] netlink: 'syz.2.903': attribute type 5 has an invalid length. [ 86.965084][ T8393] netlink: 'syz.2.903': attribute type 1 has an invalid length. [ 87.027520][ T5978] usb 5-1: Using ep0 maxpacket: 8 [ 87.031230][ T5978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 87.035456][ T5978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 87.039318][ T8403] 9pnet_virtio: no channels available for device syz [ 87.045600][ T5978] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 65535, setting to 1024 [ 87.051079][ T5978] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 87.055038][ T5978] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 87.061871][ T5978] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 87.064896][ T5978] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.153891][ T8408] (syz.1.907,8408,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 87.159873][ T8408] (syz.1.907,8408,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 87.276007][ T8420] __nla_validate_parse: 19 callbacks suppressed [ 87.276018][ T8420] netlink: 4 bytes leftover after parsing attributes in process `syz.3.911'. [ 87.277656][ T5978] usb 5-1: GET_CAPABILITIES returned 0 [ 87.284830][ T5978] usbtmc 5-1:16.0: can't read capabilities [ 87.500836][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 87.504488][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 87.508245][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 87.511473][ T8431] netlink: 8 bytes leftover after parsing attributes in process `syz.3.916'. [ 87.648522][ T8433] input: syz1 as /devices/virtual/input/input9 [ 87.663795][ T8433] 9pnet_virtio: no channels available for device syz [ 87.730169][ T8434] wg1: entered promiscuous mode [ 87.732061][ T8434] wg1: entered allmulticast mode [ 87.855929][ T8440] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 87.859125][ T8440] tipc: Enabling of bearer rejected, failed to enable media [ 88.082738][ T8463] (syz.1.929,8463,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 88.086327][ T8463] (syz.1.929,8463,2):ocfs2_fill_super:1177 ERROR: status = -22 [ 88.182549][ T8471] netlink: 4 bytes leftover after parsing attributes in process `syz.1.932'. [ 88.257237][ T8475] syzkaller0: entered promiscuous mode [ 88.259699][ T8475] syzkaller0: entered allmulticast mode [ 88.264061][ T8475] tipc: Started in network mode [ 88.266184][ T8475] tipc: Node identity 526303056c79, cluster identity 4711 [ 88.269789][ T8475] tipc: Enabled bearer , priority 0 [ 88.274189][ T8475] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 88.286614][ T8475] tipc: Resetting bearer [ 88.292549][ T8475] bpf: Bad value for 'uid' [ 88.295743][ T8474] tipc: Resetting bearer [ 88.306932][ T8474] tipc: Disabling bearer [ 88.413415][ T8481] netlink: 20 bytes leftover after parsing attributes in process `syz.2.937'. [ 88.468416][ T8487] FAULT_INJECTION: forcing a failure. [ 88.468416][ T8487] name failslab, interval 1, probability 0, space 0, times 0 [ 88.473064][ T8487] CPU: 3 UID: 0 PID: 8487 Comm: syz.1.940 Not tainted syzkaller #0 PREEMPT(full) [ 88.473085][ T8487] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 88.473094][ T8487] Call Trace: [ 88.473100][ T8487] [ 88.473106][ T8487] dump_stack_lvl+0x16c/0x1f0 [ 88.473151][ T8487] should_fail_ex+0x512/0x640 [ 88.473176][ T8487] ? fs_reclaim_acquire+0xae/0x150 [ 88.473199][ T8487] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 88.473223][ T8487] should_failslab+0xc2/0x120 [ 88.473240][ T8487] __kmalloc_noprof+0xd2/0x510 [ 88.473262][ T8487] tomoyo_realpath_from_path+0xc2/0x6e0 [ 88.473286][ T8487] ? tomoyo_profile+0x47/0x60 [ 88.473304][ T8487] tomoyo_path_number_perm+0x245/0x580 [ 88.473322][ T8487] ? tomoyo_path_number_perm+0x237/0x580 [ 88.473344][ T8487] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 88.473365][ T8487] ? find_held_lock+0x2b/0x80 [ 88.473421][ T8487] ? find_held_lock+0x2b/0x80 [ 88.473439][ T8487] ? hook_file_ioctl_common+0x145/0x410 [ 88.473461][ T8487] ? __fget_files+0x20e/0x3c0 [ 88.473483][ T8487] security_file_ioctl+0x9b/0x240 [ 88.473507][ T8487] __x64_sys_ioctl+0xb7/0x210 [ 88.473532][ T8487] do_syscall_64+0xcd/0x4c0 [ 88.473560][ T8487] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.473575][ T8487] RIP: 0033:0x7fc0a8f8ebe9 [ 88.473588][ T8487] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.473602][ T8487] RSP: 002b:00007fc0a9dab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 88.473617][ T8487] RAX: ffffffffffffffda RBX: 00007fc0a91c5fa0 RCX: 00007fc0a8f8ebe9 [ 88.473627][ T8487] RDX: 000020000004e540 RSI: 0000000080306403 RDI: 0000000000000003 [ 88.473637][ T8487] RBP: 00007fc0a9dab090 R08: 0000000000000000 R09: 0000000000000000 [ 88.473645][ T8487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.473655][ T8487] R13: 00007fc0a91c6038 R14: 00007fc0a91c5fa0 R15: 00007fffa8634e38 [ 88.473677][ T8487] [ 88.473722][ T8487] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.485017][ T8488] netlink: 'syz.2.937': attribute type 1 has an invalid length. [ 88.529591][ T8490] netlink: 4 bytes leftover after parsing attributes in process `syz.1.942'. [ 88.734207][ T8507] netlink: 'syz.3.949': attribute type 3 has an invalid length. [ 88.745466][ T8481] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 88.865161][ T8512] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 88.957487][ T5978] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 88.969930][ T8516] netlink: 4 bytes leftover after parsing attributes in process `syz.2.951'. [ 89.111965][ T5978] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 89.118847][ T5978] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 89.121816][ T5978] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.124509][ T5978] usb 6-1: Product: syz [ 89.125858][ T5978] usb 6-1: Manufacturer: syz [ 89.128594][ T5978] usb 6-1: SerialNumber: syz [ 89.132018][ T5978] usb 6-1: config 0 descriptor?? [ 89.203697][ T40] kauditd_printk_skb: 34 callbacks suppressed [ 89.203713][ T40] audit: type=1400 audit(1757360430.767:510): avc: denied { nlmsg_read } for pid=8532 comm="syz.2.959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 89.584190][ T34] usb 5-1: USB disconnect, device number 2 [ 90.496117][ T40] audit: type=1400 audit(1757360432.057:511): avc: denied { read } for pid=8593 comm="syz.2.984" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 90.577527][ T24] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 90.738202][ T40] audit: type=1400 audit(1757360432.307:512): avc: denied { create } for pid=8606 comm="syz.0.989" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.741173][ T8607] fuse: Bad value for 'fd' [ 90.744772][ T40] audit: type=1400 audit(1757360432.307:513): avc: denied { mounton } for pid=8606 comm="syz.0.989" path="/333/file0" dev="tmpfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 90.748537][ T24] usb 8-1: Using ep0 maxpacket: 32 [ 90.758404][ T8607] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow [ 90.763995][ T24] usb 8-1: unable to get BOS descriptor or descriptor too short [ 90.766957][ T24] usb 8-1: unable to read config index 0 descriptor/start: -71 [ 90.769848][ T24] usb 8-1: can't read configurations, error -71 [ 91.243272][ T8628] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 91.252694][ T40] audit: type=1400 audit(1757360432.817:514): avc: denied { connect } for pid=8627 comm="syz.0.998" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 91.492818][ T40] audit: type=1400 audit(1757360433.057:515): avc: denied { append } for pid=8646 comm="syz.2.1006" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 91.719311][ T5978] usb 6-1: USB disconnect, device number 8 [ 91.753906][ T8678] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 91.756481][ T8678] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 91.802531][ T8684] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=23 sclass=netlink_route_socket pid=8684 comm=syz.0.1023 [ 91.831789][ T8693] 9pnet_virtio: no channels available for device syz [ 91.847692][ T40] audit: type=1400 audit(1757360433.407:516): avc: denied { append } for pid=8694 comm="syz.1.1028" name="card1" dev="devtmpfs" ino=636 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 91.934117][ T8711] 9pnet_virtio: no channels available for device syz [ 91.960541][ T8716] 9pnet_virtio: no channels available for device syz [ 92.049248][ T8716] netlink: 'syz.1.1035': attribute type 1 has an invalid length. [ 92.235714][ T8747] team0: Device gtp0 is of different type [ 92.378409][ T8766] program syz.0.1050 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 92.418170][ T40] audit: type=1400 audit(1757360433.967:517): avc: denied { open } for pid=8767 comm="syz.1.1054" path="/dev/ptyq6" dev="devtmpfs" ino=133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 92.425874][ T40] audit: type=1400 audit(1757360433.977:518): avc: denied { mount } for pid=8767 comm="syz.1.1054" name="/" dev="autofs" ino=23436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 92.432278][ T8775] __nla_validate_parse: 17 callbacks suppressed [ 92.432288][ T8775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1057'. [ 92.433541][ T40] audit: type=1400 audit(1757360433.977:519): avc: denied { setopt } for pid=8767 comm="syz.1.1054" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 92.540933][ T8787] netlink: 'syz.1.1063': attribute type 1 has an invalid length. [ 92.566634][ T8791] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1065'. [ 92.573960][ T1237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.576456][ T1237] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.586166][ T8794] fuse: Bad value for 'group_id' [ 92.587845][ T8794] fuse: Bad value for 'group_id' [ 92.597772][ T10] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 92.627469][ T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 92.652853][ T8768] netlink: 'syz.3.1053': attribute type 1 has an invalid length. [ 92.655797][ T8768] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1053'. [ 92.699666][ T8799] overlay: ./file1 is not a directory [ 92.793481][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 92.801202][ T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.804054][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.806656][ T24] usb 5-1: Product: syz [ 92.810176][ T24] usb 5-1: Manufacturer: syz [ 92.811980][ T24] usb 5-1: SerialNumber: syz [ 92.814935][ T24] usb 5-1: config 0 descriptor?? [ 92.896779][ T8810] vim2m vim2m.0: Fourcc format (0x31384142) invalid. [ 93.078247][ T8821] overlayfs: overlapping lowerdir path [ 93.089645][ T5973] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.097595][ T5973] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.101323][ T5973] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.104092][ T5973] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.109649][ T5973] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.221725][ T8823] chnl_net:caif_netlink_parms(): no params data found [ 93.257433][ T56] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 93.339918][ T8823] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.343188][ T8823] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.345578][ T8823] bridge_slave_0: entered allmulticast mode [ 93.348815][ T8823] bridge_slave_0: entered promiscuous mode [ 93.352010][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.354962][ T8823] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.357303][ T8823] bridge_slave_1: entered allmulticast mode [ 93.360350][ T8823] bridge_slave_1: entered promiscuous mode [ 93.369041][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.406848][ T8823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.409409][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 93.413696][ T8823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.415004][ T56] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 93.420356][ T56] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.422934][ T56] usb 7-1: Product: syz [ 93.424476][ T56] usb 7-1: Manufacturer: syz [ 93.425952][ T56] usb 7-1: SerialNumber: syz [ 93.428924][ T56] usb 7-1: config 0 descriptor?? [ 93.463555][ T8823] team0: Port device team_slave_0 added [ 93.468616][ T8823] team0: Port device team_slave_1 added [ 93.514708][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.519035][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.528007][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 93.528836][ T8823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.538627][ T8823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.541292][ T8823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 93.553567][ T8823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.617831][ T8823] hsr_slave_0: entered promiscuous mode [ 93.620702][ T8823] hsr_slave_1: entered promiscuous mode [ 93.623286][ T8823] debugfs: 'hsr0' already exists in 'hsr' [ 93.625385][ T8823] Cannot create hsr debugfs directory [ 93.778509][ T8823] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.782570][ T8823] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.787103][ T8823] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.791197][ T8823] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.805388][ T8823] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.808560][ T8823] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.811334][ T8823] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.813501][ T8823] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.819330][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.824130][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.839741][ T6055] usb 7-1: USB disconnect, device number 6 [ 93.873875][ T8823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.885838][ T8823] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.892693][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.894962][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.903298][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.906163][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.043219][ T8823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.220711][ T8823] veth0_vlan: entered promiscuous mode [ 94.226831][ T8823] veth1_vlan: entered promiscuous mode [ 94.251235][ T8823] veth0_macvtap: entered promiscuous mode [ 94.257338][ T8823] veth1_macvtap: entered promiscuous mode [ 94.274028][ T8823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.284749][ T8823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.292947][ T1237] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.296131][ T1237] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.300291][ T1145] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.304355][ T1145] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.351071][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.354070][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.382605][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.386723][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.404049][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 94.404063][ T40] audit: type=1400 audit(1757360435.967:523): avc: denied { mounton } for pid=8823 comm="syz-executor" path="/syzkaller.QGVt1s/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 94.456495][ T8874] program syz.2.1088 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 94.493267][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1089'. [ 94.509965][ T57] IPVS: starting estimator thread 0... [ 94.511604][ T8876] x_tables: ip6_tables: quota.0 match: invalid size 24 (kernel) != (user) 144 [ 94.545991][ T8880] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1090'. [ 94.596390][ T40] audit: type=1400 audit(1757360436.157:524): avc: denied { ioctl } for pid=8881 comm="syz.4.1091" path="socket:[24851]" dev="sockfs" ino=24851 ioctlcmd=0x937b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 94.609484][ T8878] IPVS: using max 45 ests per chain, 108000 per kthread [ 94.846782][ T8906] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1102'. [ 95.041532][ T40] audit: type=1400 audit(1757360436.607:525): avc: denied { create } for pid=8912 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.049320][ T40] audit: type=1400 audit(1757360436.607:526): avc: denied { write } for pid=8912 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.057242][ T40] audit: type=1400 audit(1757360436.607:527): avc: denied { nlmsg_write } for pid=8912 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 95.114713][ T8916] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1106'. [ 95.127549][ T5985] Bluetooth: hci1: command tx timeout [ 95.141976][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1107'. [ 95.307463][ T24] usb 5-1: USB disconnect, device number 3 [ 95.348056][ T8931] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=10990 sclass=netlink_xfrm_socket pid=8931 comm=syz.2.1113 [ 95.355369][ T8931] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1113'. [ 95.484344][ T40] audit: type=1400 audit(1757360437.047:528): avc: denied { ioctl } for pid=8944 comm="syz.2.1121" path="socket:[25778]" dev="sockfs" ino=25778 ioctlcmd=0x9424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 95.713595][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'. [ 95.769830][ T8960] IPVS: ovf: FWM 3 0x00000003 - no destination available [ 95.772194][ T24] IPVS: starting estimator thread 0... [ 95.837468][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 95.867686][ T8961] IPVS: using max 26 ests per chain, 62400 per kthread [ 95.990553][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 95.997322][ T9] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 96.001024][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.004189][ T9] usb 5-1: Product: syz [ 96.005977][ T9] usb 5-1: Manufacturer: syz [ 96.010352][ T9] usb 5-1: SerialNumber: syz [ 96.014262][ T9] usb 5-1: config 0 descriptor?? [ 96.277860][ T8982] binder: BC_ACQUIRE_RESULT not supported [ 96.279879][ T8982] binder: 8981:8982 ioctl c0306201 200000000500 returned -22 [ 96.385934][ T8993] netlink: 'syz.3.1136': attribute type 11 has an invalid length. [ 96.388813][ T8993] netlink: 'syz.3.1136': attribute type 13 has an invalid length. [ 96.478322][ T9003] bond0: option use_carrier: invalid value (84) [ 96.481077][ T9003] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 96.483476][ T9003] IPv6: NLM_F_CREATE should be set when creating new route [ 96.487548][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 96.940765][ T9028] 8021q: adding VLAN 0 to HW filter on device bond2 [ 96.951654][ T9028] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 97.019951][ T9032] netlink: 'syz.2.1151': attribute type 9 has an invalid length. [ 97.023432][ T9032] netlink: 'syz.2.1151': attribute type 9 has an invalid length. [ 97.026968][ T9032] netlink: 'syz.2.1151': attribute type 9 has an invalid length. [ 97.027108][ T9028] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 97.031029][ T9032] netlink: 'syz.2.1151': attribute type 9 has an invalid length. [ 97.036019][ T9032] netlink: 'syz.2.1151': attribute type 9 has an invalid length. [ 97.037934][ T9028] bond2 (unregistering): Released all slaves [ 97.141933][ T9040] 9pnet_fd: Insufficient options for proto=fd [ 97.208984][ T5985] Bluetooth: hci1: command tx timeout [ 97.269171][ T40] audit: type=1400 audit(1757360438.837:529): avc: denied { append } for pid=9051 comm="syz.3.1159" name="fb0" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 97.278692][ T9053] program syz.3.1159 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.601714][ T40] audit: type=1400 audit(1757360439.167:530): avc: denied { execmem } for pid=9074 comm="syz.4.1168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 97.617960][ T6055] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 97.687489][ T56] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 97.774896][ T6055] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 97.782802][ T6055] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 97.786140][ T6055] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.789413][ T6055] usb 8-1: Product: syz [ 97.791213][ T6055] usb 8-1: Manufacturer: syz [ 97.793347][ T6055] usb 8-1: SerialNumber: syz [ 97.799206][ T6055] usb 8-1: config 0 descriptor?? [ 97.837625][ T56] usb 7-1: Using ep0 maxpacket: 32 [ 97.841416][ T56] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 97.844671][ T56] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 97.848482][ T56] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 97.852071][ T56] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 97.855806][ T56] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 97.860008][ T56] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 97.865395][ T56] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 97.869500][ T56] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.875060][ T56] usb 7-1: config 0 descriptor?? [ 97.954146][ T9082] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=29970 sclass=netlink_route_socket pid=9082 comm=syz.4.1170 [ 98.084088][ T56] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.091784][ T56] usb 7-1: USB disconnect, device number 7 [ 98.096806][ T56] usblp0: removed [ 98.145403][ T40] audit: type=1400 audit(1757360439.707:531): avc: denied { read write } for pid=9084 comm="syz.4.1171" name="nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.153458][ T40] audit: type=1400 audit(1757360439.707:532): avc: denied { open } for pid=9084 comm="syz.4.1171" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 98.215855][ T6055] usb 8-1: USB disconnect, device number 11 [ 98.232242][ T9086] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9) [ 98.234984][ T9086] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 98.239490][ T9086] vhci_hcd vhci_hcd.0: Device attached [ 98.243886][ T9088] usbip_core: unknown command [ 98.245818][ T9088] vhci_hcd: unknown pdu 0 [ 98.248932][ T9088] usbip_core: unknown command [ 98.252739][ T12] vhci_hcd: stop threads [ 98.254116][ T12] vhci_hcd: release socket [ 98.255523][ T12] vhci_hcd: disconnect device [ 98.498861][ T57] usb 5-1: USB disconnect, device number 4 [ 98.517456][ T53] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 98.551582][ T9091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.554957][ T9091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.604900][ T9091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.609512][ T9091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.677507][ T53] usb 7-1: Using ep0 maxpacket: 32 [ 98.681293][ T9091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.681538][ T53] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 98.685153][ T9091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.692949][ T53] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 98.696542][ T53] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 98.700441][ T53] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 98.704453][ T53] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 98.708376][ T53] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 98.713517][ T53] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 98.717179][ T53] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.722502][ T53] usb 7-1: config 0 descriptor?? [ 98.754318][ T9096] __nla_validate_parse: 11 callbacks suppressed [ 98.754333][ T9096] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1173'. [ 98.783159][ T9091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 98.788843][ T9091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.880501][ T1157] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.884044][ T1157] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.893264][ T13] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.896786][ T13] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.904229][ T13] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.908047][ T13] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.916409][ T13] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.919898][ T13] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.931881][ T53] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 98.972105][ T9101] netlink: 120 bytes leftover after parsing attributes in process `syz.0.1175'. [ 99.043310][ T9105] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 99.055999][ T9105] team0: Mode changed to "loadbalance" [ 99.059377][ T9105] validate_nla: 60 callbacks suppressed [ 99.059390][ T9105] netlink: 'syz.0.1177': attribute type 10 has an invalid length. [ 99.065339][ T9105] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1177'. [ 99.242364][ T53] usb 7-1: USB disconnect, device number 8 [ 99.247848][ T53] usblp0: removed [ 99.288018][ T5985] Bluetooth: hci1: command tx timeout [ 99.566291][ T40] kauditd_printk_skb: 4 callbacks suppressed [ 99.566306][ T40] audit: type=1400 audit(1757360441.127:537): avc: denied { mounton } for pid=9108 comm="syz.4.1178" path="/16/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 100.171871][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1188'. [ 100.206441][ T9136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1189'. [ 100.434800][ T9144] netlink: 'syz.2.1193': attribute type 1 has an invalid length. [ 100.497619][ T839] usb 8-1: new high-speed USB device number 12 using dummy_hcd [ 100.568546][ T9151] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1196'. [ 100.604670][ T9153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 100.653775][ T839] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 100.660096][ T839] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 100.663773][ T839] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.667032][ T839] usb 8-1: Product: syz [ 100.669170][ T839] usb 8-1: Manufacturer: syz [ 100.671100][ T839] usb 8-1: SerialNumber: syz [ 100.674890][ T839] usb 8-1: config 0 descriptor?? [ 101.087635][ T24] usb 8-1: USB disconnect, device number 12 [ 101.367650][ T5985] Bluetooth: hci1: command tx timeout [ 101.496034][ T9172] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1204'. [ 101.627442][ T40] audit: type=1400 audit(1757360443.187:538): avc: denied { getopt } for pid=9178 comm="syz.3.1207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 101.683987][ T9188] netlink: 'syz.2.1211': attribute type 2 has an invalid length. [ 101.687099][ T9190] netlink: 'syz.4.1212': attribute type 6 has an invalid length. [ 101.735240][ T40] audit: type=1400 audit(1757360443.297:539): avc: denied { ioctl } for pid=9194 comm="syz.4.1214" path="socket:[26363]" dev="sockfs" ino=26363 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 101.987495][ T6055] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 102.157864][ T6055] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 102.162882][ T6055] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 102.165963][ T6055] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.168650][ T6055] usb 7-1: Product: syz [ 102.169541][ T9209] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1219'. [ 102.169971][ T6055] usb 7-1: Manufacturer: syz [ 102.174274][ T6055] usb 7-1: SerialNumber: syz [ 102.176899][ T6055] usb 7-1: config 0 descriptor?? [ 102.477493][ T839] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 102.585396][ T6055] usb 7-1: USB disconnect, device number 9 [ 102.627471][ T839] usb 9-1: Using ep0 maxpacket: 32 [ 102.631258][ T839] usb 9-1: config 0 has an invalid interface number: 12 but max is 0 [ 102.633809][ T839] usb 9-1: config 0 has an invalid descriptor of length 154, skipping remainder of the config [ 102.637257][ T839] usb 9-1: config 0 has no interface number 0 [ 102.640881][ T839] usb 9-1: config 0 interface 12 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 102.644886][ T839] usb 9-1: config 0 interface 12 has no altsetting 0 [ 102.649088][ T839] usb 9-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 102.651928][ T839] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.654453][ T839] usb 9-1: Product: syz [ 102.655790][ T839] usb 9-1: Manufacturer: syz [ 102.657262][ T839] usb 9-1: SerialNumber: syz [ 102.661435][ T839] usb 9-1: config 0 descriptor?? [ 102.664729][ T839] f81534 9-1:0.12: required endpoints missing [ 102.865530][ T72] usb 9-1: USB disconnect, device number 2 [ 102.963454][ T40] audit: type=1400 audit(1757360444.527:540): avc: denied { bind } for pid=9219 comm="syz.0.1224" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 102.969055][ T9223] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=55 sclass=netlink_route_socket pid=9223 comm=syz.0.1224 [ 102.970293][ T40] audit: type=1400 audit(1757360444.527:541): avc: denied { name_bind } for pid=9219 comm="syz.0.1224" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 102.980918][ T40] audit: type=1400 audit(1757360444.527:542): avc: denied { node_bind } for pid=9219 comm="syz.0.1224" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 103.467431][ T57] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 103.640390][ T57] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 103.650133][ T57] usb 8-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 103.653109][ T57] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.656131][ T57] usb 8-1: Product: syz [ 103.657877][ T57] usb 8-1: Manufacturer: syz [ 103.659693][ T57] usb 8-1: SerialNumber: syz [ 103.667239][ T57] usb 8-1: config 0 descriptor?? [ 103.757084][ T9252] tipc: Started in network mode [ 103.759387][ T9252] tipc: Node identity ac14140f, cluster identity 4711 [ 103.762708][ T9252] tipc: New replicast peer: 255.255.255.255 [ 103.765856][ T9252] tipc: Enabled bearer , priority 10 [ 103.925293][ T40] audit: type=1400 audit(1757360445.487:543): avc: denied { getopt } for pid=9268 comm="syz.4.1241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 104.030804][ T9273] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1242'. [ 104.117776][ T839] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 104.119851][ T40] audit: type=1400 audit(1757360445.687:544): avc: denied { ioctl } for pid=9274 comm="syz.4.1243" path="socket:[24498]" dev="sockfs" ino=24498 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 104.223214][ T9290] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1248'. [ 104.269275][ T839] usb 5-1: Using ep0 maxpacket: 32 [ 104.275948][ T839] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 104.280216][ T839] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 104.283752][ T839] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 104.292716][ T839] usb 5-1: config 1 has no interface number 0 [ 104.293974][ T40] audit: type=1400 audit(1757360445.857:545): avc: denied { setopt } for pid=9297 comm="syz.2.1251" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 104.302686][ T839] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 104.314034][ T839] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 104.321025][ T839] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 104.326227][ T839] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.339263][ T839] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 104.510433][ T40] audit: type=1400 audit(1757360446.077:546): avc: denied { ioctl } for pid=9312 comm="syz.4.1257" path="/dev/cpu/1/msr" dev="devtmpfs" ino=89 ioctlcmd=0x63a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 104.657547][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 104.674902][ T40] audit: type=1400 audit(1757360446.237:547): avc: denied { ioctl } for pid=9317 comm="syz.4.1259" path="socket:[26615]" dev="sockfs" ino=26615 ioctlcmd=0xf509 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 104.713491][ T9320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1260'. [ 104.744696][ T839] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 104.768751][ T56] tipc: Node number set to 2886997007 [ 104.942994][ T839] usb 5-1: USB disconnect, device number 5 [ 104.946767][ T839] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 105.588758][ T40] audit: type=1400 audit(1757360447.147:548): avc: denied { unmount } for pid=5982 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 105.596452][ T40] audit: type=1400 audit(1757360447.157:549): avc: denied { connect } for pid=9351 comm="syz.2.1273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 105.653149][ T9358] IPVS: set_ctl: invalid protocol: 0 0.20.20.11:21 [ 105.932272][ T40] audit: type=1400 audit(1757360447.497:550): avc: denied { create } for pid=9375 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.939227][ T40] audit: type=1400 audit(1757360447.497:551): avc: denied { setopt } for pid=9375 comm="syz.2.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 105.980309][ T9387] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1287'. [ 105.985395][ T9388] No control pipe specified [ 106.038772][ T9395] netlink: 'syz.4.1290': attribute type 7 has an invalid length. [ 106.041276][ T9394] netlink: 'syz.4.1290': attribute type 7 has an invalid length. [ 106.089197][ T9394] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 106.091695][ T9394] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1290'. [ 106.094568][ T9394] netlink: 'syz.4.1290': attribute type 2 has an invalid length. [ 106.097042][ T9394] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 106.099969][ T9395] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 106.102383][ T9395] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1290'. [ 106.105181][ T9395] netlink: 'syz.4.1290': attribute type 2 has an invalid length. [ 106.107681][ T9395] netlink: 'syz.4.1290': attribute type 1 has an invalid length. [ 106.172529][ T24] usb 8-1: USB disconnect, device number 13 [ 106.205163][ T9402] netlink: 'syz.0.1293': attribute type 1 has an invalid length. [ 106.345707][ T40] audit: type=1400 audit(1757360447.907:552): avc: denied { bind } for pid=9415 comm="syz.3.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 106.358449][ T9417] netlink: 'syz.3.1301': attribute type 10 has an invalid length. [ 106.360876][ T9417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1301'. [ 106.364007][ T9417] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 106.366310][ T9417] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 106.373702][ T9417] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 106.570398][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1307'. [ 106.613657][ T9436] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.625813][ T9436] vlan2: entered promiscuous mode [ 106.629525][ T9436] bond1: entered promiscuous mode [ 106.631585][ T9436] vlan2: entered allmulticast mode [ 106.634087][ T9436] bond1: entered allmulticast mode [ 106.762404][ T40] audit: type=1400 audit(1757360448.327:553): avc: denied { name_bind 0x1000000 } for pid=9448 comm="syz.2.1315" path="socket:[27408]" dev="sockfs" ino=27408 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 106.777558][ T9448] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 106.834144][ T9458] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1318'. [ 106.837269][ T9452] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1316'. [ 106.948392][ T9481] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 107.229059][ T9] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 107.347592][ T24] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 107.368325][ T9] usb 7-1: device descriptor read/64, error -71 [ 107.498890][ T24] usb 8-1: Using ep0 maxpacket: 8 [ 107.502254][ T24] usb 8-1: config 2 interface 0 has no altsetting 0 [ 107.506633][ T24] usb 8-1: New USB device found, idVendor=04e2, idProduct=1412, bcdDevice=ca.10 [ 107.510320][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.513330][ T24] usb 8-1: Product: syz [ 107.514925][ T24] usb 8-1: Manufacturer: syz [ 107.516685][ T24] usb 8-1: SerialNumber: syz [ 107.607140][ T9] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 107.731565][ T24] usb 8-1: USB disconnect, device number 14 [ 107.737134][ T9] usb 7-1: device descriptor read/64, error -71 [ 107.858435][ T9] usb usb7-port1: attempt power cycle [ 108.120030][ T9534] unknown channel width for channel at 909000KHz? [ 108.207674][ T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 108.228035][ T9] usb 7-1: device descriptor read/8, error -71 [ 108.394498][ T9559] team0: Cannot enslave team device to itself [ 108.476992][ T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 108.508338][ T9] usb 7-1: device descriptor read/8, error -71 [ 108.573877][ T40] audit: type=1804 audit(1757360450.138:554): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.1371" name="/newroot/423/file0" dev="tmpfs" ino=2230 res=1 errno=0 [ 108.580905][ T40] audit: type=1800 audit(1757360450.148:555): pid=9575 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.1371" name="file0" dev="tmpfs" ino=2230 res=0 errno=0 [ 108.627858][ T9] usb usb7-port1: unable to enumerate USB device [ 108.814186][ T9590] openvswitch: netlink: VXLAN extension 149 out of range max 1 [ 109.224488][ T9636] __nla_validate_parse: 7 callbacks suppressed [ 109.224504][ T9636] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1399'. [ 109.383559][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1411'. [ 109.422177][ T34] IPVS: starting estimator thread 0... [ 109.517135][ T9673] IPVS: using max 44 ests per chain, 105600 per kthread [ 109.521397][ T9681] CIFS: Unable to determine destination address [ 109.568300][ T9685] nd_bus ndbus0: __nd_ioctl:bus unknown input size cmd: cmd_call field: 1 [ 109.838704][ T9711] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.1429'. [ 110.102701][ T9730] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1437'. [ 110.318014][ T57] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 110.329254][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 110.332245][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1444'. [ 110.416983][ T24] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 110.478962][ T57] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 110.483966][ T57] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 110.486974][ T57] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.489983][ T57] usb 5-1: Product: syz [ 110.491468][ T57] usb 5-1: Manufacturer: syz [ 110.493112][ T57] usb 5-1: SerialNumber: syz [ 110.496037][ T57] usb 5-1: config 0 descriptor?? [ 110.566950][ T24] usb 8-1: device descriptor read/64, error -71 [ 110.595224][ T9759] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1448'. [ 110.644734][ T40] audit: type=1400 audit(1757360452.208:556): avc: denied { listen } for pid=9760 comm="syz.2.1449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 110.649038][ T9761] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1449'. [ 110.655497][ T9761] macvtap0: entered allmulticast mode [ 110.659109][ T9761] veth0_macvtap: entered allmulticast mode [ 110.661768][ T9761] A link change request failed with some changes committed already. Interface macvtap0 may have been left with an inconsistent configuration, please check. [ 110.806960][ T24] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 110.936988][ T24] usb 8-1: device descriptor read/64, error -71 [ 110.939530][ T9777] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1457'. [ 110.978815][ T9779] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1458'. [ 111.040518][ T9785] trusted_key: encrypted_key: insufficient parameters specified [ 111.057902][ T24] usb usb8-port1: attempt power cycle [ 111.352706][ T40] audit: type=1400 audit(1757360452.918:557): avc: denied { ioctl } for pid=9809 comm="syz.4.1471" path="/dev/nullb0" dev="devtmpfs" ino=707 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 111.409796][ T9811] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x1a1 pfn:0x40fa1 [ 111.413335][ T9811] memcg:ffff88802af79a00 [ 111.414903][ T9811] flags: 0xfff00000000001(locked|node=0|zone=1|lastcpupid=0x7ff) [ 111.417953][ T24] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 111.419359][ T9811] raw: 00fff00000000001 0000000000000000 dead000000000122 0000000000000000 [ 111.423165][ T9811] raw: 00000000000001a1 0000000000000000 00000001ffffffff ffff88802af79a00 [ 111.425811][ T9811] page dumped because: VM_BUG_ON_FOLIO(folio_order(folio) < mapping_min_folio_order(mapping)) [ 111.429716][ T9811] page_owner tracks the page as allocated [ 111.431713][ T9811] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 9811, tgid 9809 (syz.4.1471), ts 111409759658, free_ts 111407993114 [ 111.439196][ T9811] post_alloc_hook+0x1c0/0x230 [ 111.441244][ T9811] get_page_from_freelist+0x132b/0x38e0 [ 111.443432][ T9811] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 111.445690][ T9811] alloc_pages_mpol+0x1fb/0x550 [ 111.447374][ T24] usb 8-1: device descriptor read/8, error -71 [ 111.448240][ T9811] folio_alloc_noprof+0x20/0x2d0 [ 111.452157][ T9811] filemap_alloc_folio_noprof+0x3a1/0x470 [ 111.454485][ T9811] page_cache_ra_order+0x4e1/0xd70 [ 111.457031][ T9811] filemap_fault+0x152e/0x2930 [ 111.459073][ T9811] __do_fault+0x10d/0x490 [ 111.461116][ T9811] do_pte_missing+0xf50/0x3ba0 [ 111.463237][ T9811] __handle_mm_fault+0x152a/0x2a50 [ 111.465473][ T9811] handle_mm_fault+0x589/0xd10 [ 111.467572][ T9811] __get_user_pages+0x551/0x34a0 [ 111.469742][ T9811] populate_vma_page_range+0x267/0x3f0 [ 111.472118][ T9811] __mm_populate+0x1d8/0x380 [ 111.474168][ T9811] vm_mmap_pgoff+0x37f/0x470 [ 111.475685][ T9811] page last free pid 9810 tgid 9809 stack trace: [ 111.477815][ T9811] free_unref_folios+0xa61/0x16b0 [ 111.479496][ T9811] folios_put_refs+0x56f/0x740 [ 111.481047][ T9811] truncate_inode_pages_range+0x311/0xe50 [ 111.482865][ T9811] set_blocksize+0x2b8/0x500 [ 111.484514][ T9811] blkdev_bszset+0x19b/0x240 [ 111.486047][ T9811] blkdev_ioctl+0x44e/0x6d0 [ 111.487577][ T9811] __x64_sys_ioctl+0x18b/0x210 [ 111.489161][ T9811] do_syscall_64+0xcd/0x4c0 [ 111.490622][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.493790][ T9811] ------------[ cut here ]------------ [ 111.495449][ T9811] kernel BUG at mm/filemap.c:867! [ 111.497133][ T9811] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 111.499172][ T9811] CPU: 0 UID: 0 PID: 9811 Comm: syz.4.1471 Not tainted syzkaller #0 PREEMPT(full) [ 111.503558][ T9811] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 111.507046][ T9811] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 111.508953][ T9811] Code: 77 c8 ff 48 c7 c6 20 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 a5 77 c8 ff 48 c7 c6 80 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 8e 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 80 77 c8 ff 48 [ 111.515472][ T9811] RSP: 0018:ffffc90006967460 EFLAGS: 00010283 [ 111.517951][ T9811] RAX: 0000000000035e10 RBX: 0000000000000000 RCX: ffffc90030827000 [ 111.521129][ T9811] RDX: 0000000000080000 RSI: ffffffff81f3173a RDI: ffff88802cc6a884 [ 111.524294][ T9811] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 111.527331][ T9811] R10: ffffffff90ab6b97 R11: 0000000000000001 R12: 0000000000000002 [ 111.529728][ T9811] R13: ffffea000103e840 R14: 0000000000000000 R15: 000000000002c928 [ 111.532111][ T9811] FS: 00007fb464cd06c0(0000) GS:ffff8880d66b5000(0000) knlGS:0000000000000000 [ 111.534741][ T9811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.536716][ T9811] CR2: 00007fb464ccff98 CR3: 0000000036049000 CR4: 0000000000352ef0 [ 111.539105][ T9811] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 111.541430][ T9811] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 111.543827][ T9811] Call Trace: [ 111.544875][ T9811] [ 111.545772][ T9811] ? rcu_is_watching+0x12/0xc0 [ 111.547280][ T9811] ? __pfx___filemap_add_folio+0x10/0x10 [ 111.549087][ T9811] filemap_add_folio+0x10e/0x220 [ 111.550644][ T9811] ? __pfx_filemap_add_folio+0x10/0x10 [ 111.552323][ T9811] ? css_rstat_updated+0x1c2/0x510 [ 111.553895][ T9811] page_cache_ra_order+0x5a7/0xd70 [ 111.555462][ T9811] filemap_fault+0x152e/0x2930 [ 111.557001][ T9811] ? __pfx_filemap_fault+0x10/0x10 [ 111.558622][ T9811] ? __pfx_filemap_map_pages+0x10/0x10 [ 111.560348][ T9811] __do_fault+0x10d/0x490 [ 111.561726][ T9811] ? __pfx_filemap_map_pages+0x10/0x10 [ 111.563426][ T9811] do_pte_missing+0xf50/0x3ba0 [ 111.564967][ T9811] ? mtree_range_walk+0x718/0xc00 [ 111.566458][ T9811] ? find_held_lock+0x2b/0x80 [ 111.567931][ T9811] __handle_mm_fault+0x152a/0x2a50 [ 111.569484][ T9811] ? __pfx___handle_mm_fault+0x10/0x10 [ 111.571093][ T9811] handle_mm_fault+0x589/0xd10 [ 111.572520][ T9811] __get_user_pages+0x551/0x34a0 [ 111.574016][ T9811] ? __pfx___get_user_pages+0x10/0x10 [ 111.575606][ T9811] populate_vma_page_range+0x267/0x3f0 [ 111.577295][ T9811] ? __pfx_populate_vma_page_range+0x10/0x10 [ 111.579079][ T9811] ? __pfx_find_vma_intersection+0x10/0x10 [ 111.580813][ T9811] ? do_mmap+0x69c/0x1210 [ 111.582143][ T9811] __mm_populate+0x1d8/0x380 [ 111.583536][ T9811] ? __pfx___mm_populate+0x10/0x10 [ 111.585114][ T9811] ? up_write+0x1b2/0x520 [ 111.586415][ T9811] vm_mmap_pgoff+0x37f/0x470 [ 111.587902][ T9811] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 111.589599][ T9811] ? __fget_files+0x20e/0x3c0 [ 111.591012][ T9811] ksys_mmap_pgoff+0x32c/0x5c0 [ 111.592521][ T9811] __x64_sys_mmap+0x125/0x190 [ 111.594038][ T9811] do_syscall_64+0xcd/0x4c0 [ 111.595416][ T9811] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.597181][ T9811] RIP: 0033:0x7fb463d8ebe9 [ 111.598526][ T9811] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.604354][ T9811] RSP: 002b:00007fb464cd0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 111.606879][ T9811] RAX: ffffffffffffffda RBX: 00007fb463fc6090 RCX: 00007fb463d8ebe9 [ 111.609204][ T9811] RDX: 0000000001000002 RSI: 0000000000b36000 RDI: 0000200000000000 [ 111.611604][ T9811] RBP: 00007fb463e11e19 R08: 0000000000000004 R09: 000000002c93a000 [ 111.613958][ T9811] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000 [ 111.616432][ T9811] R13: 00007fb463fc6128 R14: 00007fb463fc6090 R15: 00007fff7bb35f08 [ 111.618845][ T9811] [ 111.619750][ T9811] Modules linked in: [ 111.621328][ T9811] ---[ end trace 0000000000000000 ]--- [ 111.624916][ T9811] RIP: 0010:__filemap_add_folio+0xf5b/0x11e0 [ 111.637175][ T9811] Code: 77 c8 ff 48 c7 c6 20 24 b9 8b 4c 89 ef e8 9d 28 11 00 90 0f 0b e8 a5 77 c8 ff 48 c7 c6 80 24 b9 8b 4c 89 ef e8 86 28 11 00 90 <0f> 0b e8 8e 77 c8 ff 90 0f 0b 90 e9 f2 fb ff ff e8 80 77 c8 ff 48 [ 111.651350][ T9811] RSP: 0018:ffffc90006967460 EFLAGS: 00010283 [ 111.657903][ T9811] RAX: 0000000000035e10 RBX: 0000000000000000 RCX: ffffc90030827000 [ 111.658358][ T839] usb 5-1: USB disconnect, device number 6 [ 111.681656][ T9811] RDX: 0000000000080000 RSI: ffffffff81f3173a RDI: ffff88802cc6a884 [ 111.684080][ T9811] RBP: 0000000000112cc0 R08: 0000000000000001 R09: 0000000000000001 [ 111.686511][ T9811] R10: ffffffff90ab6b97 R11: 0000000000000001 R12: 0000000000000002 [ 111.689522][ T9811] R13: ffffea000103e840 R14: 0000000000000000 R15: 000000000002c928 [ 111.691883][ T9811] FS: 00007fb464cd06c0(0000) GS:ffff8880d66b5000(0000) knlGS:0000000000000000 [ 111.694617][ T9811] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 111.697190][ T9811] CR2: 00007fb463fb0002 CR3: 0000000036049000 CR4: 0000000000352ef0 [ 111.700263][ T9811] DR0: 0000000000000007 DR1: 000000000000000b DR2: 0000000000000002 [ 111.702706][ T9811] DR3: 0000000000000009 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 111.705190][ T9811] Kernel panic - not syncing: Fatal exception [ 111.707764][ T9811] Kernel Offset: disabled [ 111.709081][ T9811] Rebooting in 86400 seconds.. VM DIAGNOSIS: 19:40:53 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000039 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85646ef5 RDI=ffffffff9b1150a0 RBP=ffffffff9b115060 RSP=ffffc90006966d88 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552030203a555043 R12=0000000000000000 R13=0000000000000039 R14=ffffffff9b115060 R15=ffffffff85646e90 RIP=ffffffff85646f1f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb464cd06c0 ffffffff 00c00000 GS =0000 ffff8880d66b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fb464ccff98 CR3=0000000036049000 CR4=00352ef0 DR0=0000000000000007 DR1=000000000000000b DR2=0000000000000002 DR3=0000000000000009 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000004090001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8291adb6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff8291adb6 00007fff8291adbc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f26c12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f26c12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f26c12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f26c12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f26c12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f26c12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f26d974a8 00007f3f26d974a0 00007f3f26d97498 00007f3f26d97470 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f278fd100 00007f3f26d97460 00007f3f26d97478 00007f3f26d974c0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f3f26d974b8 00007f3f26d974b0 00007f3f26d974a8 00007f3f26d974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=00000000d890cadf RBX=000000000cf44c4a RCX=ffffc9000338f2a0 RDX=ffffffff8b93f0cd RSI=0000000000000008 RDI=00000000f2bd9bf7 RBP=0000000000000010 RSP=ffffc9000338f1c8 R8 =ffffffff913b689a R9 =00000000774ee24e R10=00000000817bcd13 R11=0000000000002c25 R12=0000000000000001 R13=0000000000002000 R14=0000000000000010 R15=ffffc9000338f240 RIP=ffffffff851726a6 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d67b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f88b7af7d60 CR3=000000000e380000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=000000000000e58e DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000002020004 Opmask01=0000000000000054 Opmask02=00000000000000ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f88b6f976c3 00007f88b6f976c3 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fffc0507e40 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e2fd2d6 000055556e2fccf0 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e2f798a 000055556e2f7580 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055556e2fb344 000055556e2fb340 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000003bf12 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 474553474953006c 616e676973206e77 6f6e6b6e75000a29 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 5355424749530056 4745534749530049 444b424c56054b52 4a4b4e4b50000a0c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0001989003538004 019880037c100001 97f0030480040197 e003038610000197 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0112100001978004 0100000608060601 56c2701000019990 0309800401998003 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0c10000198f00307 80040198e00303f6 10000198d0030193 80040198c0031e10 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000198b003058004 0198a00340801000 0198900353800401 9880037c10000197 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0030480040197e0 03038610000197d0 034f80040197c003 1fffffffb4100001 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000080000 RBX=ffff88806a441e80 RCX=ffffc90025061000 RDX=0000000000080000 RSI=ffffffff81af8efb RDI=0000000000000005 RBP=0000000000000003 RSP=ffffc90006856b10 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000001 R12=dffffc0000000000 R13=ffffed100d4883d1 R14=0000000000000001 R15=0000000000000000 RIP=ffffffff81af8efd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fb464cf16c0 ffffffff 00c00000 GS =0000 ffff8880d68b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000001b33f1fff8 CR3=0000000036049000 CR4=00352ef0 DR0=0000000000001782 DR1=0000000000000800 DR2=0000000000000094 DR3=0000000000000007 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000030646e6f62 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5374dec6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5374dec6 00007ffe5374decc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0905090020290101 0000040900000000 01001b0209010302 01990b0283045e40 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74efd100 00007feb74397460 00007feb74390004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb743974b8 00007feb743974b0 00007feb743974a8 00007feb743974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=000000000008c554 RBX=0000000000000003 RCX=ffffffff8b945c29 RDX=ffffed100d4e6656 RSI=ffffffff8c162c80 RDI=ffffffff81913111 RBP=ffffed1003c57000 RSP=ffffc90000197df8 R8 =0000000000000000 R9 =ffffed100d4e6655 R10=ffff88806a7332ab R11=0000000000000001 R12=0000000000000003 R13=ffff88801e2b8000 R14=ffffffff90ab6b90 R15=0000000000000000 RIP=ffffffff8b94478f RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d69b5000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005330a000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000030646e6f62 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5374dec6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe5374dec6 00007ffe5374decc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74212fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0905090020290101 0000040900000000 01001b0209010302 01990b0283045e40 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb74efd100 00007feb74397460 00007feb74390004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007feb743974b8 00007feb743974b0 00007feb743974a8 00007feb743974a0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000