last executing test programs: 2m2.598239924s ago: executing program 3 (id=714): r0 = timerfd_create(0x8, 0x1000) fanotify_init(0x2, 0x800) socket$nl_route(0x10, 0x3, 0x0) timerfd_settime(r0, 0x3, &(0x7f00000000c0)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffff0000000000000800450000bc0000000000019078ac1e0001ac1414bb0c00907800000000480000000000000000110000e0000002ac1414aa01000dee0dd9de36ed4bcc5b4e23440c00030000000000000000890f0000000000ffffffffffffffff444c0001ac1e00010000000000000000000000000000000000000000ac1414aa000000207f000001000000000000000000000000e000000200000000ffffffff00000000ffffffff00000000441400"/202], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000001f00)={0x30, r2, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x80000000, 0x1, 0x1, 0x5}}}}, 0x30}}, 0x0) timerfd_settime(r0, 0x1, &(0x7f0000000000)={{0x0, 0x3938700}}, 0x0) 2m2.528481164s ago: executing program 3 (id=715): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000000000006100000000000000f36d470fc7baef600000c48389cf8ac912401c040f0010260f01cbc744240021010000c74424020a000000ff1c24c48215b7db66b8e4008ee003756966baf80cb8c0110f85ef66bafc0c66b800b166ef06f1f835597c2a76091147f5c604ccd298a21dfa326ed7406a519730515a22a6b8b5ebb729474e12b7e31e5fa7bda41517eb83b85e030db2f698d269aa354cc373e27f6fdb09fc1b6c6b0041de75a0de8c493e71dcb3970108b86745935b7b041bea3974724ec7d41fc08b83b2aaa57cd3e4bbf897df353766de9edf8028e7a601c27bbf8e5f8db6bef10ea293798b4a5b522f700314"], 0x61}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x6, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd8, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r5}, 0x10) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r4, @ANYRESDEC=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000280)) (async) r7 = openat$pmem0(0xffffff9c, &(0x7f0000000000), 0x20140, 0x0) ioctl$IOC_PR_REGISTER(r7, 0x401870c8, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r6}, 0x10) io_setup(0x3, &(0x7f0000000340)) r8 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_NMI(r8, 0xae9a) (async) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) (async) r11 = eventfd2(0x5, 0x801) ioctl$KVM_IOEVENTFD(r10, 0x4040ae79, &(0x7f0000000080)={0xa, 0x2, 0x0, r11}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000001000/0x2000)=nil}) (async) r12 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) ioctl$KVM_RUN(r12, 0xae80, 0x0) (async) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="f7ffffffffffaaaaaaaaaa9dbc5b3912000800103afffe8000000000000000000000000000bbff02000000000000000000000000000186009078010002000000000000000000"], 0x0) (async) r13 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r13, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000005"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) syz_emit_ethernet(0x34e, &(0x7f0000000780)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "00cd04", 0x318, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x5a, 0x1, 0x0, 0x0, [{0x3, 0xa, "a78c000005dc8080a2030003004003493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34060600000000000000dac15084dbaf736b41e5af0502"}, {0x0, 0x2000000000000199, "000005000000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf3915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea468000000000054740a5d4901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2bce9ac946a3f0e2bc4000091394c02bcfbbb7d71138537d68e2d2c6393a9f3cc271a9ff09a48b5b303f4f0"}, {0xe, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0xc, "5e14ccb44d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d260600aa89c8f267d76ece1c9f6ae2e1eb3d8bf9c6ab2642c4808298e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c"}]}}}}}}, 0x0) (async) ioctl$KVM_SET_REGS(r12, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x10000000000000, 0x180, 0x4, 0x10, 0x81, 0xfffffffffffffffd, 0x7fffffffffffe, 0x3, 0x0, 0x9, 0x80000000003872, 0x5, 0xfffffffffffffffc, 0xbdb], 0xdddd0000, 0x3c4210}) 2m2.308361112s ago: executing program 3 (id=717): openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x195901, 0x0) 2m2.307968482s ago: executing program 3 (id=718): mkdir(&(0x7f0000000400)='./file0\x00', 0x99) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001b40)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) inotify_init() mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000940)='./file0/file0\x00', 0x0, 0x2125095, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./bus/../file0\x00', &(0x7f0000002100), 0x40002, &(0x7f00000006c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}], [{@context={'context', 0x3d, 'staff_u'}}]}}) r1 = memfd_secret(0x80000) syz_emit_vhci(&(0x7f00000002c0)=@HCI_EVENT_PKT={0x4, @hci_ev_le_meta={{0x3e, 0xb}, @hci_ev_le_remote_conn_param_req={{}, {0xc9, 0x4, 0x2, 0x46, 0x7fff}}}}, 0xe) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, 0x0) ioctl$BSG_GET_COMMAND_Q(r1, 0x2270, &(0x7f0000000680)) truncate(&(0x7f0000000000)='./bus\x00', 0x8001) syz_open_dev$evdev(&(0x7f0000001e00), 0x1, 0x80) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = openat$binfmt(0xffffffffffffff9c, r3, 0x42, 0x1ff) close(r4) r5 = openat$binfmt(0xffffffffffffff9c, r3, 0x2, 0x0) write(r5, &(0x7f0000000180)="01", 0x1) close(r5) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) wait4(r2, 0x0, 0x80000000, 0x0) 2m2.058379483s ago: executing program 3 (id=721): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x50, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf, 0x1c}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8ba}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x65e}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xa11}, @NL80211_ATTR_CRIT_PROT_ID={0x6}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0xaf6}]}, 0x50}, 0x1, 0x0, 0x0, 0xd0}, 0x20040013) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="1f7b07edc697156f14fca9be9b6b50c63da700ab33342c87d340ea56a3818f056e5a2dc18719fce768de5460a83c6b8cb6316ebb5a9813aa82ba6384be9f4996b74f70304fac64d2694e36fb15e5fd0edfbdf7bff6b213fb15ddc8e8992d6144e9c46a840dc9cce382bfe661d7cf640f1fdc00cce9968a3670b57703411181d66e2cee8862a25595830e5ea0c0e23e1eec962d7051d2a6770d3daf2e701d2d0a3855fed657378de4776689", 0xab}], 0x1}, 0x8c0) r4 = socket$igmp(0x2, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x50) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, 0x0, &(0x7f0000000040)) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000c00000095"], &(0x7f0000000240)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='i2c_result\x00', r6}, 0x18) r7 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x101182) ioctl$I2C_RDWR(r7, 0x707, &(0x7f0000000380)={&(0x7f0000000040)=[{0x1, 0x1001, 0x0, 0x0}], 0x1}) recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0) 2m1.78737531s ago: executing program 3 (id=725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0xc040) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20084084) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x40408b0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x66, 0x19, "507c16120534ed1dac6c85032c1e2bb519e79da178a0a08383b23262595f5dcf9ac6aab430da447323a017aa082917172ff2679b7869eacfe1414b9690ad98cdcd2f0a1b6b641e6e44d0e34110ecc168e6c28c7292f15e9a74f4a050ccce35b4c9aa"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async, rerun: 64) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040881}, 0x4) (rerun: 64) 2m1.73766753s ago: executing program 32 (id=725): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NFNL_MSG_ACCT_GET(0xffffffffffffffff, 0x0, 0xc040) (async) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x5d, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20084084) (async) sendmsg$DEVLINK_CMD_RATE_DEL(0xffffffffffffffff, 0x0, 0x40408b0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000005c0), r0) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r3, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001680)=@ipv4_newroute={0x3c, 0x18, 0x35f32a6dfa748ddd, 0x70bd2a, 0x2, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x4}, @RTA_ENCAP={0x18, 0x16, 0x0, 0x1, @SEG6_LOCAL_NH6={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}}]}, 0x3c}}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r0) sendmsg$NFC_CMD_SE_IO(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x84, r4, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@NFC_ATTR_SE_APDU={0x66, 0x19, "507c16120534ed1dac6c85032c1e2bb519e79da178a0a08383b23262595f5dcf9ac6aab430da447323a017aa082917172ff2679b7869eacfe1414b9690ad98cdcd2f0a1b6b641e6e44d0e34110ecc168e6c28c7292f15e9a74f4a050ccce35b4c9aa"}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) (async, rerun: 64) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040881}, 0x4) (rerun: 64) 1m37.587811182s ago: executing program 1 (id=839): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x2, 0x8, &(0x7f0000000000)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xad}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r1, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x11}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@timestamping={{0x14, 0x1, 0x25, 0x2}}], 0x18}, 0x0) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2040) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="660a0000000000006110740000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00'}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001ec0)={{r0}, &(0x7f0000001e40), &(0x7f0000001e80)=r2}, 0x20) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240), 0x10980, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2c, r6, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}]}, 0x2c}}, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000280)={r4}, 0x8) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x20, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x4, 0x0, 0x1, [@typed={0x2c, 0x6, 0x0, 0x0, @str='\x8e\n'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) r7 = socket$nl_generic(0x10, 0x3, 0x10) setresuid(0x0, 0xee00, 0x0) setfsuid(0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f00000002c0), 0x12) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x24, r9, 0x1, 0x70bd29, 0x0, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x20049040}, 0x5080) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000003c0)={0x5, &(0x7f00000002c0)=[{0x6, 0x8, 0x2d, 0x9d82}, {0x5, 0x7, 0x2, 0x100}, {0xb91, 0x8, 0x1, 0x10}, {0x3ff, 0x40}, {0x3, 0x7, 0x6, 0xc86}]}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x64, r9, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x4}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xdc75}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3b3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r11}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x62}]}, 0x64}, 0x1, 0x0, 0x0, 0x50}, 0x40088d4) 1m37.525096658s ago: executing program 1 (id=841): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, &(0x7f0000000340)=0x7, 0x4) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000004000000080000000400000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000100000000000000000009d260000000000"], 0x50) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000540)={r0, 0x0, 0x0}, 0x20) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x7, 0x6576, 0x3}) r2 = open$dir(&(0x7f0000000400)='./file1\x00', 0xa5c0, 0x1db) lsm_get_self_attr(0x67, &(0x7f0000000340)={0x0, 0x0, 0x94, 0x74, ""/116}, &(0x7f0000000100)=0x94, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1f, 0x12, r2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0xea0c1, 0x19d) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000000) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x8500, 0x0) ioctl$BLKTRACESTART(r4, 0x1274, 0x0) r5 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) r7 = creat(&(0x7f0000000440)='./file0\x00', 0x1d9) write$UHID_INPUT(r7, &(0x7f0000000540)={0x8, {"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", 0x1000}}, 0x1006) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x2d, &(0x7f00000001c0)={0x5, {{0xa, 0x4e20, 0x3, @empty, 0xffff}}}, 0x88) r8 = fsopen(&(0x7f0000000180)='adfs\x00', 0x1) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r9, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r9) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r10, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001700)={&(0x7f0000001780)=ANY=[@ANYBLOB="14010000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fcdbdf2513000000180001801400020000000000000000000000000000000000400001800800030002000000140002006e69637666300000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000000000008000300020000001800018014000200626f6e645f736c6176655f310000000020000180140002006970366772653000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="70000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="080003000200000008000100", @ANYRES32=0x0, @ANYBLOB="0800030066c86c96000a64cd0300000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="140002006c6f00000000000000000000000000000800030044e346fb08000100", @ANYRES32=r10, @ANYBLOB], 0x114}, 0x1, 0x0, 0x0, 0x20000040}, 0xc000) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f00000002c0), 0x81, &(0x7f0000000000)={[{@mpol={'mpol', 0x3d, {'default', '=relative'}}}]}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r6, 0x0) bind$phonet(0xffffffffffffffff, 0x0, 0x0) 1m37.398350106s ago: executing program 1 (id=842): migrate_pages(0x0, 0x8001, &(0x7f0000000800)=0x3, &(0x7f0000000840)=0xffffffffffffffff) unshare(0x8000000) r0 = semget$private(0x0, 0x4000, 0x555) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) r2 = getuid() mount$fuseblk(&(0x7f0000002440), &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x200840c, &(0x7f0000000440)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0xe1}}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x8}}, {@allow_other}, {@blksize}, {@blksize={'blksize', 0x3d, 0x1000}}]}}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000580)={0x50, 0x0, r4, {0x7, 0x28, 0xffff, 0x200800, 0x0, 0x0, 0x1e0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, r6, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r3, &(0x7f0000006680)="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", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0xc, {0x3, 0x1, 0x13, 0x0, 0x9, 0x0, {0x2, 0xa417, 0x20003, 0x8, 0x800000000006, 0x100000000000008, 0x80000008, 0x3, 0x6, 0x1000, 0x2, r5, r6, 0x0, 0x4c}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000080)=0xc) statx(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x400, 0x100, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r0, 0x0, 0x1, &(0x7f0000000200)={{0x2, r2, r6, r7, r8, 0x0, 0x7}, 0x2, 0xbfdc, 0x0, 0x0, 0x0, 0x0, 0x9}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r9, 0x84, 0x22, &(0x7f0000000240)={0x3, 0x200, 0x0, 0x7fff}, 0x10) semtimedop(0x0, &(0x7f0000000040)=[{0x3, 0x8, 0x1800}, {0x3, 0xfffb, 0xc00}], 0x2, 0x0) unshare(0x2c040000) 1m37.395982851s ago: executing program 1 (id=843): mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000120000007f00000001"], 0x48) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') read$FUSE(r1, &(0x7f00000020c0)={0x2020}, 0x2020) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98000000100001002abd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="a009000000000000140003006e657464657673696d3000000000000008002800babc00005c001680580001"], 0x98}}, 0x40000) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) unshare(0x2a020400) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.procs\x00', 0xa000, 0x1da) unshare(0x2000400) close(r3) (async) close(r3) socket$pppoe(0x18, 0x1, 0x0) (async) r4 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r4, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008863d0a70ca9c1aa1ce8a6da90ccbda8f008bae1d6a7a8c4dc29fe931dc58c7a40d3231efe9c86e03d7661c7ad20ecc350e98fe92ff2602c90e852d83d7aa2fdf639d958eae23b4936adbae97ed656d69cb58da6c428cc6b37f854b2a2dda44dc9a3fd94b6a71d450720443424b03e8d51781640ff623629a2734070fa545109"], 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) (async) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) move_pages(0x0, 0x1, &(0x7f00000001c0)=[&(0x7f0000000000/0x800000)=nil], &(0x7f0000000200)=[0x1], &(0x7f0000000240), 0x2) read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020) 1m37.328009878s ago: executing program 1 (id=844): r0 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x1) ioctl$TIOCGPTPEER(r0, 0x40140921, 0x8) 1m37.078307616s ago: executing program 1 (id=845): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x101000) syz_usb_connect_ath9k(0x3, 0x65, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000001ac0)={{0x12, 0x1, 0x712, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x27, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0xd8, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) 1m37.069401996s ago: executing program 33 (id=845): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109802, 0x0) ioctl$SNDCTL_DSP_NONBLOCK(r0, 0x500e, 0x0) r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000240)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) syz_open_dev$evdev(&(0x7f00000005c0), 0x0, 0x101000) syz_usb_connect_ath9k(0x3, 0x65, &(0x7f0000000600)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000001ac0)={{0x12, 0x1, 0x712, 0x0, 0x0, 0x0, 0x10, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x27, 0xb0, 0x9, [{{0x9, 0x4, 0x0, 0xd8, 0x1, 0x7, 0x1, 0x3, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x0, 0x6}}}}}]}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) 3.425898043s ago: executing program 5 (id=1982): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x240080d4}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000120, 0x4aa52520f215cfe4, {0x2}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) 3.174380779s ago: executing program 2 (id=1988): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004040)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0) write$cgroup_int(r3, &(0x7f00000003c0)=0x2, 0x12) 3.174061672s ago: executing program 5 (id=1990): socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) prlimit64(0x0, 0xe, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0x3, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, 0x0, 0x4000040) socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x2, &(0x7f0000000040)={0x0, 0x2400000}) mprotect(&(0x7f000033a000/0x4000)=nil, 0x4000, 0x3) syz_open_procfs(0x0, &(0x7f0000000200)='net/udplite\x00') r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000003c0), 0x1, 0x0) write$binfmt_register(r4, &(0x7f0000000400)={0x3a, 'syz2', 0x3a, 'M', 0x3a, 0x6, 0x3a, '&', 0x3a, '\\', 0x3a, './file0'}, 0x29) socket$nl_rdma(0x10, 0x3, 0x14) 2.255861027s ago: executing program 2 (id=1996): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000200)="be61b9d8d0058d6842a990482b288b346112a6469c47ad7377813979778fd8f8ae76c76ba9a816f533364fa45cd9713abd09e41e46164c8f", 0x38}], 0x1, 0x0, 0x0, 0x4080}, 0x8000) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$unix(r2, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, 0x8044010) 2.255607676s ago: executing program 5 (id=1997): socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_PCM_IOCTL_RESET(0xffffffffffffffff, 0x4141, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000002c0), 0x80, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r5}) ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000180)={0x28, 0x2, r5, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x100000000}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0xffffffffffffffff) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) r6 = syz_io_uring_setup(0x9e, 0x0, &(0x7f00000006c0), &(0x7f0000000280)) io_uring_enter(r6, 0x100847c0, 0x0, 0x10, 0x0, 0x0) 2.255529086s ago: executing program 2 (id=1998): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000280)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0xf, {[@local=@item_4={0x3, 0x2, 0x0, "2e2b5aa4"}, @local=@item_4={0x3, 0x2, 0x0, "f85edaca"}, @main=@item_4={0x3, 0x0, 0x8}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(r1, 0xc00c4809, 0x0) 1.737075598s ago: executing program 0 (id=2007): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001000018470052200000000000a"], 0x20}}, 0x0) 1.736805714s ago: executing program 0 (id=2008): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x100) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) utimensat(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020) 1.340428002s ago: executing program 5 (id=2011): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280), 0x0) socket$tipc(0x1e, 0x5, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) kcmp(r1, r1, 0x2, r3, r2) socket$tipc(0x1e, 0x2, 0x0) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f00000000c0)="0100", 0x2, 0xfffffffffffffffd) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x1, &(0x7f00000003c0)=""/204, &(0x7f0000000000)=0xcc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000010c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x460, 0x280, 0x268, 0x300, 0x280, 0x268, 0x390, 0x460, 0x460, 0x390, 0x460, 0x9, 0x0, {[{{@uncond, 0x0, 0x240, 0x280, 0x0, {0x9401}, [@common=@inet=@hashlimit2={{0x150}, {'hsr0\x00', {0x0, 0xb, 0x0, 0x3, 0x0, 0x5, 0x9}}}, @common=@unspec=@limit={{0x48}, {0xfff, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0x21, "6bb6778f9bdec125b0fb4f26be757b1e6f2fb8e9079627dc6726c4bc85e9"}}}, {{@ipv6={@private2, @remote, [], [], 'ip6gretap0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x511) syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x4802) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "b81923", 0x8, 0x0, 0x0, @local, @local, {[@dstopts]}}}}}, 0x0) 1.276001362s ago: executing program 4 (id=2013): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x8100, r1}, 0x14) ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, &(0x7f0000000180)={0x1, 0x14, 0x4, 0xfffd, 0xa2, 0x40, &(0x7f0000000480)="c9ea87d1c0e550f1a28fbc590fe3489fc3b1fa4828b551545d337b76b362d12de25d965d8ebc69c08ff64b72f94c9fde5b730f488f9a6f961aead38ece4e5a72e772805d1e5192819db1d15a6571e6c30246899c933f27eb61a36c978d828f5b691493d08ade579aa4dd705321af6e52887f1952b34e55ded07093432234ba4fbfe9bee9fc7fb0a78c7b852d6d75192a0338e929ed579b39161524e66360b5f1f882"}) r2 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) r3 = add_key$user(&(0x7f00000001c0), &(0x7f0000000300)={'syz', 0x1}, &(0x7f0000000080)="bc5d", 0x2, r2) r4 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r3, r4, r3}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) 1.275111994s ago: executing program 4 (id=2014): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) mlock2(&(0x7f0000018000/0x2000)=nil, 0x2000, 0x0) syz_usb_connect(0x0, 0x1b, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6b, 0xf6, 0x18, 0x20, 0x6615, 0x12, 0x1166, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x0, 0x0, 0xc0, 0x5}}]}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000500), 0xa0201, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x1, 0x103001) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x9e74, 0x0, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x8, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}) io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0) 716.283224ms ago: executing program 4 (id=2015): r0 = socket$kcm(0x10, 0x2, 0x0) accept4(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4, 0x80000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000000abc0)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x801, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x200}]}}]}, @IFLA_GROUP={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008040) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x0, 0x0, 0x0}, 0x94) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r3 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) 716.15824ms ago: executing program 4 (id=2016): statx(0xffffffffffffff9c, 0x0, 0x6000, 0x7ff, 0x0) 666.632595ms ago: executing program 4 (id=2017): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, &(0x7f00000001c0)=@broute={'broute\x00', 0x4000, 0x0, 0x90, [], 0x2, 0x0, 0x0}, 0xd2) ioctl$int_in(0xffffffffffffffff, 0x5421, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$xdp(0x2c, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f28000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a30000000003000"], 0xe8}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[], 0xe8}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=@newsa={0x10c, 0x1a, 0x7, 0x0, 0x0, {{@in6=@mcast2, @in=@multicast2, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2}, {0x0, 0x200000, 0x7}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}, @etimer_thresh={0x8, 0xc, 0x3}]}, 0x10c}}, 0x0) ioctl$F2FS_IOC_FLUSH_DEVICE(0xffffffffffffffff, 0x4008f50a, &(0x7f0000000000)={0x2, 0x5}) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'pimreg\x00', 0x1}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1e, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x61800, 0x49, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 666.343666ms ago: executing program 4 (id=2018): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_SET_IO_FLUSHER(0x41, 0x0) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000a80)={{0x2, 0xffff, @private=0xa010100}, {0x0, @local}, 0x0, {0x2, 0x4e23, @multicast1}, 'wg1\x00'}) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) preadv(r1, &(0x7f0000000040)=[{&(0x7f0000000200)=""/233, 0xe9}], 0x1, 0xfff, 0x0) 447.547635ms ago: executing program 5 (id=2019): unshare(0x24020400) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0) 447.095597ms ago: executing program 2 (id=2020): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x6}, 0x18) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x10003, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x8, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x80000003}, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) close(r1) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 446.825412ms ago: executing program 5 (id=2021): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0xff, 0xff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 316.89944ms ago: executing program 0 (id=2022): openat$sequencer2(0xffffffffffffff9c, 0x0, 0x80383, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff6ffc}]}) pidfd_send_signal(0xffffffffffffffff, 0x10000032, 0x0, 0x4) 316.614606ms ago: executing program 0 (id=2023): r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, 0x0) 215.75253ms ago: executing program 0 (id=2024): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001780)='/dev/comedi4\x00', 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000001840)={0x1, 0x20000, 0x100, 0x6, 0x0, 0x2, 0xffffff2f, 0x6, 0x4, 0x4, 0x1, 0x2, 0x0, 0x0, 0x0}) 215.571006ms ago: executing program 0 (id=2025): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x18) r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)=ANY=[], 0x48) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xf59}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x6) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, &(0x7f0000000080)=[0xfff, 0x6], 0x2) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) timerfd_create(0x7, 0x81000) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x48) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x38, 0x1403, 0x1, 0x70bd29, 0x25dfdbff, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x20000010) 147.020364ms ago: executing program 2 (id=2026): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x15, &(0x7f0000000300)={@random="6ea88d319b8c", @multicast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@x25={0x805, {0x0, 0x1, 0x5e25ed804c4cd5b4}}}}, 0x0) 0s ago: executing program 2 (id=2027): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007", @ANYBLOB, @ANYRES32=0x0], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001640)=@newtaction={0xf0, 0x30, 0x1, 0x2, 0x25dfdbfc, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x2, 0x0, 0x446, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, 0xfffffffd}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, 0x401}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x8010}, 0x2000000) fchownat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2e8, 0x150, 0x11, 0x148, 0x150, 0x10, 0x250, 0x2a8, 0x2a8, 0x250, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@broadcast, @remote, 0xffffff00, 0xffffff00, 'nicvf0\x00', 'bridge_slave_1\x00', {0xff}, {}, 0x84, 0x3, 0x18}, 0x10, 0xe8, 0x150, 0x1c, {}, [@inet=@rpfilter={{0x28}, {0x7}}, @common=@osf={{0x50}, {'syz1\x00', 0x0, 0x8, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@ip={@loopback, @rand_addr=0x10, 0x0, 0x0, 'syzkaller0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x1}, 0x0, 0xc0, 0x100, 0x0, {}, [@common=@osf={{0x50}, {'syz1\x00', 0x0, 0x1, 0x2}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x8, 0xa, "602c4e1da4b651d69f61fd40e9985933ad459f3d59ccf16f0d0ef758ba42"}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x348) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x1, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r9, {0x0, 0xf}, {0xfff2, 0xa}, {0x7}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x7, 0x8, 0x400004, 0x0, 0x7}, 0xf0, 0x0, 0x31a, 0x3, 0x88a, 0x0, 0x8e, 0x1f, 0x5, 0xff, {0x6696, 0x2, 0x800, 0x5, 0x0, 0x5}}}}]}, 0x78}}, 0x4000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r11, &(0x7f0000000080), 0x0}, 0x20) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d0f65acc0d06d1a1434e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab0300817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c690220b87b20581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697a8ad004eea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014751c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc518afc9ffc2cc788bee1b47683db01a2f9398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa407e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a0c93d47018c12e7ba8188a22e8b15c3e233db00002e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab188dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b4896c7aabf4df517d90bdc01e73835d50200a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987595ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e547f7ad33850d9feccd0111a2e3700845dee734fe7da3770845cf442d488afd80e17000000000000000000000000000000000000000000000000000005202000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a12489c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db08407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07af14915f29b719f54926fc32468f65bd06b4092140faed0c329be610c3082d43e121861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b4c8787361f3289f86ae826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa520000afe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da357f9e93ce055019c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137ff47257f164391c672b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8bc410d9f48bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85e9bb70a3009a5d30f479e293a3302e11350ea857b37e76ca2f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f981fd9086e4000000000000646174b55d251f7f8ca5ccc22a5efb33b237eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4445eef08401cd1a3e266db41474e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24c5efd5c8495c1ccd580033c55725f2d60354f8ad5914a0155eaa743350ddb388f486b6de0549ef3b1b3c3b7d4d3a830ff39885776119408029be3788dd8422b1ab7b4c9d5b7d8682fd759c713108e1bdfc64b9121bbf07099def5c0ce3c861ae4b5cad8bba5a0b6059b9ef90c2f96a59320309e25df89484522bb1d6eaa92164f9e4042cb689a45a898354c17b08705205a9189772bcbcb6414e44b33a2470d3bc16f761c33f565b9da5e7991ad8482579cc1b16c1fcec815a5482ae8b1779c5e339971a6ec1217bcfd1ef24284de8a0a9f068f297037d6478c2434a9a18dcc6c7c791e444a79d7ce37f9cf2826b47ad8ca6a2fa254aa02cd098026798a6d336348af0fc11fa2809a5ebbe17ca4d0f889d518f64ee50f562b5fdb1f76d4a7fe14701f8ed0c6a55d66a6efea3e449e6b478abc5b196dd5308cb20c4e2a0bd702651bb39f10523102dcd8ece692159028f314e0d6bfa400475c6699fdc40efe0948e3cef7419a7f113134e5ee20fd87c4521ccfbd32d6f147f743d30866bdd86ca8bf0c7bcc475f4ed53517aaa51f1c151d859a7f0b53abd332c84bdad313e82ac3777a6f7f649ff8a25f6dfe09cb29213896b49a825257bf143e9fa3bbd47009e66fe5705b3ef2b40a182e408c680727d64e00e1ce508f8fd64ac6c84ccc28fc333067de63b9bb5daaa12ce60ee3779ded79651be69d2a413cd948a873dd7ad7017b150828cf100d3df8537f22aff58343c9ee966fceb594bbe10b911427f76a25a219be2f85287b7f83d323a30991067ad1369792166062085ff20c5fb9f6e4f78dd09c7d2d6ca3c8a5d0d26ccbe576f44a1bc94194817"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r12, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e088641100050000210283ac141440e0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs(0x0, &(0x7f0000000380)='coredump_filter\x00') kernel console output (not intermixed with test programs): ice=61.23 [ 139.118487][ T1472] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 139.124552][ T1472] usbtmc 9-1:16.0: bulk endpoints not found [ 139.137803][ T9442] netlink: 'syz.2.907': attribute type 8 has an invalid length. [ 139.140445][ T9442] netlink: 8 bytes leftover after parsing attributes in process `syz.2.907'. [ 139.144243][ T9442] bridge0: port 2(dummy0) entered disabled state [ 139.146577][ T9442] bridge0: port 3(syz_tun) entered disabled state [ 139.149074][ T9442] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.154050][ T9442] bridge0: entered allmulticast mode [ 139.217167][ T40] audit: type=1400 audit(1751765826.635:647): avc: denied { bind } for pid=9448 comm="syz.0.910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 139.441611][ T34] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 139.581692][ T34] usb 7-1: device descriptor read/64, error -71 [ 139.769588][ T9485] macvlan0: entered promiscuous mode [ 139.771450][ T9485] macvlan0: entered allmulticast mode [ 139.774770][ T9485] veth1_vlan: entered allmulticast mode [ 139.831641][ T34] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 139.971557][ T34] usb 7-1: device descriptor read/64, error -71 [ 140.081966][ T34] usb usb7-port1: attempt power cycle [ 140.172469][ T5964] Bluetooth: hci3: command tx timeout [ 140.183781][ T9488] syzkaller1: entered promiscuous mode [ 140.186074][ T9488] syzkaller1: entered allmulticast mode [ 140.431570][ T34] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 140.455143][ T34] usb 7-1: device descriptor read/8, error -71 [ 140.625188][ T40] audit: type=1400 audit(1751765828.045:648): avc: denied { write } for pid=9505 comm="syz.5.926" path="socket:[32793]" dev="sockfs" ino=32793 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 140.670462][ T9509] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 140.699881][ T34] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 140.722816][ T34] usb 7-1: device descriptor read/8, error -71 [ 140.727776][ T9504] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1038 sclass=netlink_route_socket pid=9504 comm=syz.0.925 [ 140.832949][ T34] usb usb7-port1: unable to enumerate USB device [ 141.262996][ T9520] usb usb8: usbfs: process 9520 (syz.5.930) did not claim interface 0 before use [ 141.549982][ T40] audit: type=1400 audit(1751765828.965:649): avc: denied { create } for pid=9526 comm="syz.5.932" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 141.644771][ T9532] __nla_validate_parse: 6 callbacks suppressed [ 141.644784][ T9532] netlink: 36 bytes leftover after parsing attributes in process `syz.5.933'. [ 141.696929][ T6018] usb 9-1: USB disconnect, device number 4 [ 141.745449][ T9544] netlink: 'syz.4.938': attribute type 21 has an invalid length. [ 141.745506][ T9544] netlink: 'syz.4.938': attribute type 6 has an invalid length. [ 141.745519][ T9544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.938'. [ 141.801652][ T40] audit: type=1400 audit(1751765829.205:650): avc: denied { lock } for pid=9554 comm="syz.4.940" path="socket:[30424]" dev="sockfs" ino=30424 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 141.814872][ T40] audit: type=1400 audit(1751765829.235:651): avc: denied { module_load } for pid=9557 comm="syz.5.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 141.820939][ T40] audit: type=1400 audit(1751765829.235:652): avc: denied { setopt } for pid=9557 comm="syz.5.941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 141.858066][ T5964] Bluetooth: hci0: unexpected event for opcode 0x0401 [ 141.862135][ C2] Illegal XDP return value 16128 on prog (id 186) dev bond_slave_0, expect packet loss! [ 142.213916][ T9576] binder: 9575:9576 ioctl c0306201 0 returned -14 [ 142.242918][ T5964] Bluetooth: hci3: command tx timeout [ 142.573578][ T9586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53 sclass=netlink_route_socket pid=9586 comm=syz.4.947 [ 142.581561][ T10] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 142.691596][ T112] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 142.695804][ T9592] netlink: 108 bytes leftover after parsing attributes in process `syz.4.949'. [ 142.698649][ T9592] netlink: 8 bytes leftover after parsing attributes in process `syz.4.949'. [ 142.731639][ T10] usb 7-1: Using ep0 maxpacket: 8 [ 142.735483][ T10] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 142.738040][ T10] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 142.741712][ T10] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 142.744885][ T10] usb 7-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 142.748836][ T10] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 142.751879][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.760740][ T10] usbtmc 7-1:16.0: bulk endpoints not found [ 142.840230][ T9606] netlink: 72 bytes leftover after parsing attributes in process `syz.5.952'. [ 142.842824][ T112] usb 5-1: Using ep0 maxpacket: 32 [ 142.846718][ T112] usb 5-1: config 1 has an invalid descriptor of length 147, skipping remainder of the config [ 142.849921][ T112] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 142.853827][ T112] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 142.860353][ T112] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 142.863553][ T112] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.866047][ T112] usb 5-1: Product: 嶔à®ê® êšŠî½±ê¹•í¶é¯µà €é°œì≻ҕ㔑裘嫩龹뒖邕駑㥧㲛塠酒鎡⹆玜塬昷ҭ駺ㄼ䫖漦렖ؗ沒ḷ쫡쭞鈑씭岋丶᢬ⅎꪯヷ蓨è¢ë­¾è–“í–˜é®»î²žå¡›ìžæ«³é¸ã¬“뉙軤蒭붃໸掿䒰韛ç™î³¹ÅŒá¯¶î“ƒë”žå¼Šê²“ìŸµî²¢á›«êš [ 142.876045][ T112] usb 5-1: Manufacturer: ؾ僇㽎汔é»å´ºä³°ì£˜é¥¥æ»½á™„砶鋚≰㞡⠷挙呆㙄亗쑷ﭸ뮺㊂뀆å­ä—œá´°ã¬¯Ù½å—¥â½§å† åƒ¬îµ¹ã±²ç­Žå¯’Õ¡âµá µä¼â“±è´¡å˜¤á†³çáºá„®ï»¶ì‡–ᒋᡒ蚀㡟厰얹á²êƒªä‹¥ç½”詂ꔙέ罡⾤ﭱ顨A䮫岫檃홹宙$î°ˆë‹â·ì±ê©•體ꑲ췌ᑿ韤⽼좇å¡ê¤šë€í”Šï¦‡ë¾žç´˜é¦‹ä¨³èŠ¿H뿑늇箧䴞竚嶩咕娦纇ϗ뺡⑊﷒䜇镌쭂怆ⅿ藙霙 [ 142.889916][ T112] usb 5-1: SerialNumber: በ[ 142.894413][ T9614] netlink: 12 bytes leftover after parsing attributes in process `syz.5.954'. [ 142.911679][ T9614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.922243][ T9614] 8021q: adding VLAN 0 to HW filter on device bond1 [ 142.924518][ T9614] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 142.929311][ T9614] bond1: (slave vcan1): Error -95 calling set_mac_address [ 142.981330][ T9619] netlink: 4 bytes leftover after parsing attributes in process `syz.5.954'. [ 142.985313][ T9619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=9619 comm=syz.5.954 [ 143.102917][ T9580] netlink: 76 bytes leftover after parsing attributes in process `syz.0.946'. [ 143.128562][ T112] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 143.130785][ T112] cdc_ncm 5-1:1.0: bind() failure [ 143.135767][ T112] usb 5-1: USB disconnect, device number 22 [ 143.162198][ T5964] Bluetooth: hci3: ACL packet for unknown connection handle 457 [ 143.328117][ T9635] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 143.334940][ T9635] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 143.571585][ T6018] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 143.702686][ T6018] usb 10-1: device descriptor read/64, error -71 [ 143.749731][ T9643] netlink: 60 bytes leftover after parsing attributes in process `syz.0.960'. [ 143.752768][ T9643] unsupported nlmsg_type 40 [ 143.942678][ T6018] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 143.989030][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 143.989041][ T40] audit: type=1400 audit(1751765831.405:656): avc: denied { map } for pid=9661 comm="syz.4.965" path="pipe:[31211]" dev="pipefs" ino=31211 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 143.997939][ T9664] netlink: 'syz.0.966': attribute type 11 has an invalid length. [ 143.997952][ T9664] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.966'. [ 143.998614][ T9664] netlink: 'syz.0.966': attribute type 10 has an invalid length. [ 144.007850][ T9663] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.071561][ T6018] usb 10-1: device descriptor read/64, error -71 [ 144.107118][ T9676] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 144.179653][ T40] audit: type=1400 audit(1751765831.595:657): avc: denied { map } for pid=9682 comm="syz.4.972" path="socket:[33032]" dev="sockfs" ino=33032 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 144.189290][ T6018] usb usb10-port1: attempt power cycle [ 144.243564][ T9689] input: syz0 as /devices/virtual/input/input11 [ 144.308704][ T40] audit: type=1400 audit(1751765831.725:658): avc: denied { getopt } for pid=9694 comm="syz.4.976" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 144.551553][ T6018] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 144.572603][ T6018] usb 10-1: device descriptor read/8, error -71 [ 144.821623][ T6018] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 144.842103][ T6018] usb 10-1: device descriptor read/8, error -71 [ 144.961840][ T6018] usb usb10-port1: unable to enumerate USB device [ 145.201574][ T63] Bluetooth: hci3: command tx timeout [ 145.205093][ T40] audit: type=1400 audit(1751765832.625:659): avc: denied { ioctl } for pid=9753 comm="syz.0.985" path="socket:[32617]" dev="sockfs" ino=32617 ioctlcmd=0x743f scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 145.254002][ T9583] usb 7-1: USB disconnect, device number 18 [ 145.932310][ T5964] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 145.935197][ T5964] Bluetooth: hci0: Injecting HCI hardware error event [ 145.938275][ T5964] Bluetooth: hci0: hardware error 0x00 [ 146.321791][ T112] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 146.324337][ T112] Bluetooth: hci0: Error when powering off device on rfkill (-110) [ 146.449261][ T9775] xt_hashlimit: size too large, truncated to 1048576 [ 146.541436][ T9779] netlink: 'syz.5.991': attribute type 1 has an invalid length. [ 147.291680][ T5964] Bluetooth: hci3: command 0x0406 tx timeout [ 148.194436][ T40] audit: type=1400 audit(1751765835.615:660): avc: denied { setattr } for pid=9798 comm="syz.4.993" name="/" dev="9p" ino=35913813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.401647][ T5964] Bluetooth: hci1: command 0x0c1a tx timeout [ 148.402041][ T112] Bluetooth: hci1: Opcode 0x0c1a failed: -110 [ 148.406160][ T112] Bluetooth: hci1: Error when powering off device on rfkill (-110) [ 150.482450][ T5964] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.485744][ T112] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 150.487680][ T112] Bluetooth: hci2: Error when powering off device on rfkill (-110) [ 152.562045][ T5964] Bluetooth: hci3: command 0x0406 tx timeout [ 152.562056][ T112] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 152.562073][ T112] Bluetooth: hci3: Error when powering off device on rfkill (-110) [ 152.681598][ T9858] bond0: entered promiscuous mode [ 152.683769][ T9858] bond_slave_0: entered promiscuous mode [ 152.686258][ T9858] bond_slave_1: entered promiscuous mode [ 152.688615][ T9858] bond0: entered allmulticast mode [ 152.690609][ T9858] bond_slave_0: entered allmulticast mode [ 152.695768][ T40] audit: type=1400 audit(1751765840.115:661): avc: denied { execute } for pid=9861 comm="syz.2.996" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=34097 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 152.696778][ T9858] bond_slave_1: entered allmulticast mode [ 152.758776][ T9877] __nla_validate_parse: 2 callbacks suppressed [ 152.758786][ T9877] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1001'. [ 153.106091][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1008'. [ 153.114400][ T9910] GUP no longer grows the stack in syz.5.1008 (9910): 200000004000-20000000a000 (200000002000) [ 153.121776][ T9910] CPU: 3 UID: 0 PID: 9910 Comm: syz.5.1008 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 153.121792][ T9910] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 153.121799][ T9910] Call Trace: [ 153.121803][ T9910] [ 153.121807][ T9910] dump_stack_lvl+0x16c/0x1f0 [ 153.121841][ T9910] gup_vma_lookup+0x1d2/0x220 [ 153.121861][ T9910] __get_user_pages+0x271/0x3b80 [ 153.121879][ T9910] ? __pfx___get_user_pages+0x10/0x10 [ 153.121896][ T9910] get_user_pages_remote+0x258/0xb20 [ 153.121909][ T9910] ? __pfx_mtree_load+0x10/0x10 [ 153.121925][ T9910] ? __pfx_get_user_pages_remote+0x10/0x10 [ 153.121942][ T9910] __access_remote_vm+0x246/0x810 [ 153.121961][ T9910] ? do_raw_spin_lock+0x12c/0x2b0 [ 153.121975][ T9910] ? __pfx___access_remote_vm+0x10/0x10 [ 153.121995][ T9910] proc_pid_cmdline_read+0x4de/0x900 [ 153.122016][ T9910] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 153.122031][ T9910] ? rw_verify_area+0xcf/0x680 [ 153.122045][ T9910] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 153.122064][ T9910] vfs_readv+0x5be/0x8b0 [ 153.122081][ T9910] ? __pfx_vfs_readv+0x10/0x10 [ 153.122095][ T9910] ? kmem_cache_free+0x2d1/0x4d0 [ 153.122119][ T9910] ? __fget_files+0x20e/0x3c0 [ 153.122139][ T9910] ? do_preadv+0x1a6/0x270 [ 153.122152][ T9910] do_preadv+0x1a6/0x270 [ 153.122166][ T9910] ? __pfx_do_preadv+0x10/0x10 [ 153.122184][ T9910] do_syscall_64+0xcd/0x4c0 [ 153.122202][ T9910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.122213][ T9910] RIP: 0033:0x7f0ab3b8e929 [ 153.122222][ T9910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.122233][ T9910] RSP: 002b:00007f0ab4a43038 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 153.122243][ T9910] RAX: ffffffffffffffda RBX: 00007f0ab3db5fa0 RCX: 00007f0ab3b8e929 [ 153.122250][ T9910] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 000000000000000d [ 153.122256][ T9910] RBP: 00007f0ab3c10b39 R08: 00000000fffffff9 R09: 0000000000000000 [ 153.122263][ T9910] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 153.122269][ T9910] R13: 0000000000000000 R14: 00007f0ab3db5fa0 R15: 00007ffc54184618 [ 153.122282][ T9910] [ 153.126073][ T9910] program syz.5.1008 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 153.163537][ T112] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 153.250744][ T40] audit: type=1400 audit(1751765840.665:662): avc: denied { connect } for pid=9920 comm="syz.5.1012" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 153.317772][ T9934] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1014'. [ 153.320550][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1014'. [ 153.329996][ T9934] netlink: 'syz.4.1014': attribute type 15 has an invalid length. [ 153.330103][ T9930] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1015'. [ 153.338806][ T9929] block nbd5: shutting down sockets [ 153.361666][ T112] usb 5-1: Using ep0 maxpacket: 8 [ 153.364943][ T112] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 153.371613][ T112] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 153.374969][ T112] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 153.378023][ T112] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 26232, setting to 64 [ 153.381450][ T112] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 153.386593][ T112] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 153.389428][ T112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.390550][ T9943] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 153.394351][ T112] usbtmc 5-1:16.0: bulk endpoints not found [ 153.415706][ T9946] PM: Enabling pm_trace changes system date and time during resume. [ 153.415706][ T9946] PM: Correct system time has to be restored manually after resume. [ 153.424248][ T9945] PM: Enabling pm_trace changes system date and time during resume. [ 153.424248][ T9945] PM: Correct system time has to be restored manually after resume. [ 153.545744][ T9961] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1025'. [ 153.594073][ T9965] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 153.611545][ T40] audit: type=1400 audit(1751765841.025:663): avc: denied { name_bind } for pid=9964 comm="syz.5.1028" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 153.649778][ T9969] batadv0: entered promiscuous mode [ 153.653394][ T9969] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 153.658351][ T9969] batadv0: left promiscuous mode [ 153.701188][ T9971] xt_CT: You must specify a L4 protocol and not use inversions on it [ 153.801667][ T112] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 153.832194][ T9980] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1031'. [ 153.857164][ T9982] syz.5.1033: attempt to access beyond end of device [ 153.857164][ T9982] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 153.871149][ T9986] x_tables: ip_tables: udp match: only valid for protocol 17 [ 153.965819][ T9997] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 153.969185][ T9997] netlink: 'syz.2.1038': attribute type 4 has an invalid length. [ 153.971546][ T112] usb 9-1: Using ep0 maxpacket: 8 [ 153.977650][ T112] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 153.980228][ T112] usb 9-1: config 179 has no interface number 0 [ 153.982624][ T112] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 153.982913][ T9997] ext4: Unknown parameter 'dé˜Ärd' [ 153.986090][ T112] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 153.986107][ T112] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 153.986120][ T112] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 154.001048][ T112] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 154.009578][ T112] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 154.018648][ T9963] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 154.144092][T10011] input: syz1 as /devices/virtual/input/input12 [ 154.150525][T10011] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1042'. [ 154.157042][ T8962] udevd[8962]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory [ 154.198641][ T40] audit: type=1400 audit(1751765841.615:664): avc: denied { ioctl } for pid=10013 comm="syz.5.1043" path="socket:[34441]" dev="sockfs" ino=34441 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 154.233363][ T112] input: Generic X-Box pad as /devices/platform/dummy_hcd.4/usb9/9-1/9-1:179.65/input/input13 [ 154.428165][ T6018] usb 9-1: USB disconnect, device number 5 [ 154.428174][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 154.479420][T10028] tmpfs: Bad value for 'mpol' [ 154.729150][T10032] program syz.5.1049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.908177][T10040] block device autoloading is deprecated and will be removed. [ 155.103138][T10062] netlink: 'syz.2.1058': attribute type 39 has an invalid length. [ 155.118345][T10062] syz_tun (unregistering): left allmulticast mode [ 155.121166][T10062] syz_tun (unregistering): left promiscuous mode [ 155.123616][T10062] bridge0: port 3(syz_tun) entered disabled state [ 155.237221][T10068] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 155.242745][ T40] audit: type=1400 audit(1751765842.665:665): avc: denied { bind } for pid=10072 comm="syz.5.1061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 155.249321][ T40] audit: type=1400 audit(1751765842.665:666): avc: denied { node_bind } for pid=10072 comm="syz.5.1061" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 155.539613][T10091] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.542861][T10091] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1066'. [ 155.545718][T10091] netlink: 'syz.5.1066': attribute type 19 has an invalid length. [ 155.606754][T10091] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 155.664300][ T40] audit: type=1400 audit(1751765844.079:667): avc: denied { setopt } for pid=10098 comm="syz.2.1069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 155.675284][T10099] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer. [ 155.692373][T10099] netlink: 'syz.2.1069': attribute type 5 has an invalid length. [ 155.771986][ T40] audit: type=1400 audit(1751765844.189:668): avc: denied { setopt } for pid=10094 comm="syz.4.1068" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 155.849457][T10106] netlink: 'syz.2.1070': attribute type 3 has an invalid length. [ 155.852907][T10106] netlink: 'syz.2.1070': attribute type 3 has an invalid length. [ 155.938029][ T112] usb 5-1: USB disconnect, device number 23 [ 156.028416][T10112] lo speed is unknown, defaulting to 1000 [ 156.030352][T10112] lo speed is unknown, defaulting to 1000 [ 156.031326][T10112] lo speed is unknown, defaulting to 1000 [ 156.078231][T10113] fuse: Unknown parameter '000000000000000000040x0000000000000004' [ 156.081520][ T40] audit: type=1400 audit(1751765844.489:669): avc: denied { setopt } for pid=10111 comm="syz.0.1073" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 156.130059][T10112] infiniband syz0: set active [ 156.131021][ T6018] lo speed is unknown, defaulting to 1000 [ 156.131722][T10112] infiniband syz0: added lo [ 156.177174][T10112] RDS/IB: syz0: added [ 156.177461][T10112] smc: adding ib device syz0 with port count 1 [ 156.177519][T10112] smc: ib device syz0 port 1 has pnetid [ 156.179701][T10112] lo speed is unknown, defaulting to 1000 [ 156.187807][ T6018] lo speed is unknown, defaulting to 1000 [ 156.266718][T10112] lo speed is unknown, defaulting to 1000 [ 156.345307][T10112] lo speed is unknown, defaulting to 1000 [ 156.422733][T10112] lo speed is unknown, defaulting to 1000 [ 156.595221][ T40] audit: type=1400 audit(1751765845.009:670): avc: denied { getopt } for pid=10117 comm="syz.5.1075" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 156.911181][T10147] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 157.395915][T10167] SELinux: security_context_str_to_sid (root) failed with errno=-22 [ 157.453989][T10171] kthread_run failed with err -4 [ 157.667538][T10188] netlink: 'syz.4.1095': attribute type 23 has an invalid length. [ 157.667715][ T5748] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 157.749836][T10192] loop3: detected capacity change from 0 to 1 [ 157.754082][T10192] Dev loop3: unable to read RDB block 1 [ 157.755926][T10192] loop3: unable to read partition table [ 157.757825][T10192] loop3: partition table beyond EOD, truncated [ 157.759813][T10192] loop_reread_partitions: partition scan of loop3 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.822788][ T5748] usb 10-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 157.826413][ T5748] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 157.829909][ T5748] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 157.833345][ T5748] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 157.838789][ T5748] usb 10-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 157.842056][ T5748] usb 10-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 157.847125][ T5748] usb 10-1: Manufacturer: syz [ 157.850968][ T5748] usb 10-1: config 0 descriptor?? [ 158.188069][ T40] kauditd_printk_skb: 7 callbacks suppressed [ 158.188084][ T40] audit: type=1400 audit(1751765846.599:678): avc: denied { accept } for pid=10210 comm="syz.2.1100" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 158.261334][ T5748] appleir 0003:05AC:8243.0005: unknown main item tag 0x0 [ 158.268725][ T5748] appleir 0003:05AC:8243.0005: hiddev0,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 158.341303][T10124] netlink: 'syz.0.1076': attribute type 2 has an invalid length. [ 158.512274][T10169] netlink: 'syz.5.1090': attribute type 4 has an invalid length. [ 158.516734][ T5748] usb 10-1: USB disconnect, device number 7 [ 158.671725][ T6018] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 158.841608][ T6018] usb 7-1: Using ep0 maxpacket: 16 [ 158.844699][ T6018] usb 7-1: config 0 has no interfaces? [ 158.847257][ T6018] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 158.850349][ T6018] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 158.853569][ T6018] usb 7-1: SerialNumber: syz [ 158.856429][ T6018] usb 7-1: config 0 descriptor?? [ 158.892595][ T40] audit: type=1400 audit(1751765847.309:679): avc: denied { bind } for pid=10238 comm="syz.0.1107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 159.059580][ T6018] usb 7-1: USB disconnect, device number 19 [ 159.102246][T10246] __nla_validate_parse: 7 callbacks suppressed [ 159.102262][T10246] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1110'. [ 159.215927][T10246] veth1_vlan (unregistering): left allmulticast mode [ 159.419811][ T40] audit: type=1400 audit(1751765847.829:680): avc: denied { setattr } for pid=10260 comm="syz.5.1114" name="RAW" dev="sockfs" ino=37970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 159.420711][T10262] IPVS: set_ctl: invalid protocol: 8 172.20.20.170:20004 [ 159.571641][ T112] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 159.725434][ T112] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 159.729383][ T112] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 159.732823][ T112] usb 9-1: Product: syz [ 159.734563][ T112] usb 9-1: Manufacturer: syz [ 159.736471][ T112] usb 9-1: SerialNumber: syz [ 159.745205][ T112] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 159.793362][ T10] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 159.853780][T10277] lo speed is unknown, defaulting to 1000 [ 160.002424][T10252] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 160.006437][T10252] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 160.010285][T10281] tipc: Started in network mode [ 160.013670][T10281] tipc: Node identity 4, cluster identity 4711 [ 160.015762][T10281] tipc: Node number set to 4 [ 160.111016][ T40] audit: type=1400 audit(1751765848.519:681): avc: denied { write } for pid=10283 comm="syz.0.1120" lport=42083 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 160.361749][ T1472] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 160.455069][T10288] sd 0:0:0:0: PR command failed: 1026 [ 160.456836][T10288] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 160.459003][T10288] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 160.521747][ T1472] usb 5-1: Using ep0 maxpacket: 16 [ 160.531558][ T1472] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 160.533813][ T34] usb 9-1: USB disconnect, device number 6 [ 160.534579][ T1472] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 255, changing to 11 [ 160.542008][ T1472] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 160.545718][ T1472] usb 5-1: config 0 interface 0 has no altsetting 0 [ 160.549371][ T1472] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 160.552371][ T1472] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.554804][ T1472] usb 5-1: Product: syz [ 160.556119][ T1472] usb 5-1: Manufacturer: syz [ 160.557548][ T1472] usb 5-1: SerialNumber: syz [ 160.560264][ T1472] usb 5-1: config 0 descriptor?? [ 160.563858][T10284] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 160.820168][T10312] bpf: Bad value for 'uid' [ 160.853381][T10284] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 160.858511][ T1472] input: syz syz as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/input/input14 [ 160.882478][ T10] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive [ 160.885610][ T10] ath9k_htc: Failed to initialize the device [ 160.891589][ T34] usb 9-1: ath9k_htc: USB layer deinitialized [ 160.939911][T10273] Set syz1 is full, maxelem 65536 reached [ 161.023877][T10322] ip6erspan0: entered promiscuous mode [ 161.060064][ T6037] usb 5-1: USB disconnect, device number 24 [ 161.172188][T10332] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1129'. [ 161.229463][ T40] audit: type=1400 audit(1751765849.639:682): avc: denied { map } for pid=10333 comm="syz.4.1131" path="/proc/351/net/pfkey" dev="proc" ino=4026533907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 161.357869][ T40] audit: type=1400 audit(1751765849.769:683): avc: denied { transfer } for pid=10346 comm="syz.4.1136" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 161.566493][T10284] syz.0.1120 (10284) used greatest stack depth: 19800 bytes left [ 161.574102][T10353] smc: net device bond0 applied user defined pnetid SYZ0 [ 161.611599][ T40] audit: type=1400 audit(1751765850.019:684): avc: denied { write } for pid=10354 comm="syz.0.1140" name="mouse0" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 161.616015][T10355] MINIX-fs: blocksize too small for device [ 161.628459][T10355] program syz.0.1140 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.687478][T10362] IPv6: NLM_F_CREATE should be specified when creating new route [ 178.006031][ T40] audit: type=1400 audit(1751765866.419:685): avc: denied { nlmsg_write } for pid=10379 comm="syz.0.1143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 178.012966][ T40] audit: type=1107 audit(1751765866.419:686): pid=10379 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 178.065327][T10396] input: syz1 as /devices/virtual/input/input15 [ 178.164850][ T40] audit: type=1400 audit(1751765866.579:687): avc: denied { map } for pid=10398 comm="syz.5.1149" path="/dev/pts/1" dev="devpts" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_devpts_t tclass=chr_file permissive=1 [ 178.231891][T10416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1153'. [ 178.252520][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.297740][T10419] bridge_slave_0: default FDB implementation only supports local addresses [ 178.304804][ T40] audit: type=1400 audit(1751765866.719:688): avc: denied { mounton } for pid=10418 comm="syz.4.1154" path="/123/file0" dev="hugetlbfs" ino=38192 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=dir permissive=1 [ 178.305213][T10419] overlayfs: maximum fs stacking depth exceeded [ 178.308139][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.359264][T10414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.470761][ T40] audit: type=1400 audit(1751765866.879:689): avc: denied { getopt } for pid=10423 comm="syz.4.1156" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 178.476951][ T40] audit: type=1400 audit(1751765866.879:690): avc: denied { append } for pid=10423 comm="syz.4.1156" name="loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.481961][T10424] loop6: detected capacity change from 0 to 63 [ 178.489161][ T40] audit: type=1400 audit(1751765866.899:691): avc: denied { map } for pid=10423 comm="syz.4.1156" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.491144][T10392] buffer_io_error: 23 callbacks suppressed [ 178.491153][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.497124][ T40] audit: type=1400 audit(1751765866.899:692): avc: denied { execute } for pid=10423 comm="syz.4.1156" path="/dev/loop6" dev="devtmpfs" ino=664 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 178.502275][T10424] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.513348][T10424] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.516740][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.519516][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.522364][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.525125][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 178.603071][T10429] No source specified [ 178.894274][T10432] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 179.106018][ T40] audit: type=1400 audit(1751765867.519:693): avc: denied { bind } for pid=10449 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 179.173580][T10471] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1169'. [ 179.207176][ T40] audit: type=1400 audit(1751765867.619:694): avc: denied { execute_no_trans } for pid=10474 comm="syz.0.1170" path=2F6D656D66643AA39F6EB4645204693502ACCEE1889D5B4038D7CE1F2039497F151D933DB5E75C274CE6D28EBC294A7454447181CF81BAE531F520C8103EC95C85174CBFCF91DF4DF3025E542A202864656C6574656429 dev="hugetlbfs" ino=38268 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 179.247560][T10479] mac80211_hwsim hwsim16 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 179.370538][T10488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.411248][T10497] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1176'. [ 179.453149][T10488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=10488 comm=syz.0.1174 [ 179.478868][T10504] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1178'. [ 179.507420][T10504] binder: 10503:10504 ioctl 400c620e 200000001580 returned -22 [ 179.681832][ T5748] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 179.831586][ T5748] usb 10-1: Using ep0 maxpacket: 8 [ 179.834887][ T5748] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 179.837547][ T5748] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 179.841002][ T5748] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 179.844684][ T5748] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 179.848131][ T5748] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 179.851402][ T5748] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 179.862728][ T5748] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 179.866361][ T5748] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.896602][T10536] sctp: [Deprecated]: syz.0.1191 (pid 10536) Use of int in maxseg socket option. [ 179.896602][T10536] Use struct sctp_assoc_value instead [ 180.006809][T10542] 9p: Unknown access argument 18446744073709551615: -34 [ 180.072962][ T5748] usb 10-1: GET_CAPABILITIES returned 0 [ 180.074750][ T5748] usbtmc 10-1:16.0: can't read capabilities [ 180.278433][ T5748] usb 10-1: USB disconnect, device number 8 [ 180.324054][T10579] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1204'. [ 180.540481][T10585] can0: slcan on ptm1. [ 180.543658][T10585] Bluetooth: MGMT ver 1.23 [ 180.597847][T10587] ptm ptm2: ldisc open failed (-12), clearing slot 2 [ 180.612130][T10585] can0 (unregistered): slcan off ptm1. [ 180.746262][T10593] loop2: detected capacity change from 0 to 7 [ 180.750317][T10392] Dev loop2: unable to read RDB block 7 [ 180.752348][T10392] loop2: AHDI p1 p2 p3 [ 180.753995][T10392] loop2: partition table partially beyond EOD, truncated [ 180.756344][T10392] loop2: p1 start 1601398130 is beyond EOD, truncated [ 180.758722][T10392] loop2: p2 start 1702059890 is beyond EOD, truncated [ 180.786567][T10598] tmpfs: Bad value for 'mpol' [ 180.836752][T10600] geneve2: entered promiscuous mode [ 180.838506][T10600] geneve2: entered allmulticast mode [ 180.938624][T10609] overlayfs: failed to resolve './file1': -2 [ 181.069015][T10614] random: crng reseeded on system resumption [ 181.082645][T10614] program syz.4.1215 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.196381][T10630] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 181.212034][T10633] overlayfs: failed to resolve './file1': -2 [ 181.265569][T10640] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1224'. [ 181.350773][T10647] tipc: Enabling of bearer rejected, failed to enable media [ 181.353708][T10648] cgroup: Unknown subsys name 'cpuset' [ 181.387728][T10648] wg2: entered promiscuous mode [ 181.389320][T10648] wg2: entered allmulticast mode [ 181.426913][T10651] vim2m vim2m.0: vidioc_s_fmt queue busy [ 181.448819][T10650] netlink: 'syz.0.1225': attribute type 11 has an invalid length. [ 181.458886][T10661] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10661 comm=syz.2.1230 [ 181.495745][T10664] ISOFS: Unable to identify CD-ROM format. [ 181.630866][T10670] netlink: 'syz.5.1233': attribute type 10 has an invalid length. [ 181.633714][T10670] hsr_slave_0: entered allmulticast mode [ 181.636738][T10670] team0: Device hsr_slave_0 is up. Set it down before adding it as a team port [ 182.109995][T10677] overlay: filesystem on ./bus not supported as upperdir [ 182.112817][T10677] overlay: filesystem on ./bus not supported as upperdir [ 182.178569][T10685] netlink: 'syz.0.1239': attribute type 4 has an invalid length. [ 182.198965][ T6018] lo speed is unknown, defaulting to 1000 [ 182.200754][ T6018] syz0: Port: 1 Link DOWN [ 182.202603][ T6018] lo speed is unknown, defaulting to 1000 [ 182.202643][T10685] netlink: 'syz.0.1239': attribute type 4 has an invalid length. [ 182.209669][ T6037] lo speed is unknown, defaulting to 1000 [ 182.212353][ T6037] syz0: Port: 1 Link ACTIVE [ 182.214373][ T6037] lo speed is unknown, defaulting to 1000 [ 182.219202][T10687] tmpfs: Unknown parameter 'usrquota_inoimit' [ 182.228505][T10687] netfs: Couldn't get user pages (rc=-14) [ 182.274161][T10694] CIFS mount error: No usable UNC path provided in device string! [ 182.274161][T10694] [ 182.277375][T10694] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 182.402577][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 182.447868][T10719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1249'. [ 182.450580][T10719] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 182.511391][T10728] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 182.528402][T10731] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1253'. [ 182.554057][T10734] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1254'. [ 182.562863][ T24] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 182.565961][ T24] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 182.569299][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 182.573391][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 182.576744][ T24] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 182.581432][ T24] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 182.585460][ T24] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 182.588482][ T24] usb 7-1: Product: syz [ 182.590010][ T24] usb 7-1: Manufacturer: syz [ 182.596238][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 182.598105][ T24] cdc_wdm 7-1:1.0: skipping garbage [ 182.607350][ T24] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 182.609505][ T24] cdc_wdm 7-1:1.0: Unknown control protocol [ 182.752654][T10751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1259'. [ 182.760911][T10751] team0: entered promiscuous mode [ 182.763663][T10751] team_slave_0: entered promiscuous mode [ 182.766549][T10751] team_slave_1: entered promiscuous mode [ 182.771444][T10751] batadv_slave_1: entered promiscuous mode [ 182.795291][T10755] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 182.803444][ T6037] usb 7-1: USB disconnect, device number 20 [ 182.884234][T10767] netlink: 'syz.0.1263': attribute type 5 has an invalid length. [ 183.049411][ T40] kauditd_printk_skb: 16 callbacks suppressed [ 183.049424][ T40] audit: type=1400 audit(1751765871.459:711): avc: denied { create } for pid=10778 comm="syz.0.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.058492][ T40] audit: type=1400 audit(1751765871.459:712): avc: denied { create } for pid=10778 comm="syz.0.1268" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 183.105211][ T40] audit: type=1400 audit(1751765871.519:713): avc: denied { write } for pid=10783 comm="syz.0.1270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 183.255000][T10792] tmpfs: Bad value for 'mpol' [ 183.281167][T10796] __nla_validate_parse: 3 callbacks suppressed [ 183.281183][T10796] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1273'. [ 183.317666][T10800] fuse: Bad value for 'user_id' [ 183.319292][T10800] fuse: Bad value for 'user_id' [ 183.456115][T10811] xt_CT: No such helper "pptp" [ 183.664126][T10829] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 183.674914][T10829] tmpfs: Unknown parameter 'usrquota' [ 183.878864][T10845] ufs: You didn't specify the type of your ufs filesystem [ 183.878864][T10845] [ 183.878864][T10845] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 183.878864][T10845] [ 183.878864][T10845] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 183.889045][T10845] ufs: ufstype=old is supported read-only [ 183.891087][T10845] ufs: ufs_fill_super(): bad magic number [ 183.932116][ T10] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 183.933012][T10851] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6) [ 183.936363][T10851] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.938760][T10850] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 183.940780][T10850] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 183.944075][T10851] vhci_hcd vhci_hcd.0: Device attached [ 183.944476][T10850] vhci_hcd vhci_hcd.0: Device attached [ 183.948689][T10852] vhci_hcd: connection closed [ 183.948822][T10853] vhci_hcd: connection closed [ 183.948906][ T7319] vhci_hcd: stop threads [ 183.953962][ T7319] vhci_hcd: release socket [ 183.955274][ T7319] vhci_hcd: disconnect device [ 183.956760][ T7319] vhci_hcd: stop threads [ 183.958076][ T7319] vhci_hcd: release socket [ 183.959420][ T7319] vhci_hcd: disconnect device [ 183.981632][ T5950] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 184.101670][ T10] usb 9-1: Using ep0 maxpacket: 8 [ 184.105765][ T10] usb 9-1: config index 0 descriptor too short (expected 74, got 45) [ 184.109142][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 184.113731][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 184.117656][ T10] usb 9-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 184.122205][ T10] usb 9-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 184.125615][ T10] usb 9-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 184.130039][ T10] usb 9-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 184.133390][ T10] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 184.164036][ T5950] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024 [ 184.168100][ T5950] usb 7-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 32 [ 184.172099][ T5950] usb 7-1: config 1 interface 0 has no altsetting 0 [ 184.176546][ T5950] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 184.179326][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.181786][ T5950] usb 7-1: Product: ԩힲ긟æ°ã©­ [ 184.183354][ T5950] usb 7-1: Manufacturer: ഹ譄㷮ࡒ䰺餢쎗ᰞ铵堑랅䭸맭ංﻬä“ᩴ昶闄蘤꼂伕᩻ൈᥡè†î¡®æ´ã­äµ¶æŠæ€Œì€Þ¾ï‚€Û«æª€â‹˜ã«¡å˜”ã¾ë¬“ [ 184.189057][ T5950] usb 7-1: SerialNumber: Ⴧä¼ìš«î¥–埡ﲵ℈ê‰ë‹‡à¸£ïƒ•㪮⟻㉼ភ畽î£ï¡¢æŽ’ä›´á“綖䞤㘱軣䮱ℋ鋒囹呇몴秚횤唛䞨y삪⸎賵è—ꂾڄ鳙礋朊殯⾮ï·è¥¸ê§¾ï¨ë‘¸å¶žé«ªà¤¡éº«ë¯‰â›…ﭧ焟䫅礻瓒೼驒蓆è¹â‚¦è‹ƒèœç‹ä¦¯áµ å¹†ã¸¤âŒ²ä‚©ã¿œíµïˆ±æ‘ê®í›¶â«¤ä¨©â· ã¨é¥§ï¿²ì³©å¸»å´²æƒ±î¦¬ [ 184.203428][T10837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.206298][T10837] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 184.340089][ T10] usb 9-1: GET_CAPABILITIES returned 0 [ 184.341898][ T10] usbtmc 9-1:16.0: can't read capabilities [ 184.485375][T10874] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 184.498608][T10874] qnx6: unable to set blocksize [ 184.544019][ T6037] usb 9-1: USB disconnect, device number 7 [ 184.613913][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 184.616609][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 184.621036][ T5950] cdc_ether 7-1:1.0: probe with driver cdc_ether failed with error -71 [ 184.624831][ T40] audit: type=1400 audit(1751765873.039:714): avc: denied { setopt } for pid=10883 comm="syz.5.1297" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 184.633532][ T5950] usb 7-1: USB disconnect, device number 21 [ 184.716928][T10887] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1298'. [ 184.734624][T10887] 8021q: adding VLAN 0 to HW filter on device bond3 [ 185.085529][T10904] overlayfs: conflicting options: userxattr,metacopy=on [ 185.137030][T10912] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1306'. [ 185.184117][T10918] netlink: 'syz.2.1307': attribute type 2 has an invalid length. [ 185.248294][ T40] audit: type=1400 audit(1751765873.659:715): avc: denied { getopt } for pid=10930 comm="syz.2.1310" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 185.287738][ T40] audit: type=1400 audit(1751765873.699:716): avc: denied { bind } for pid=10939 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.296150][ T40] audit: type=1400 audit(1751765873.699:717): avc: denied { listen } for pid=10939 comm="syz.4.1311" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 185.581322][T10967] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1319'. [ 185.586216][T10967] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 185.627904][ T40] audit: type=1400 audit(1751765874.039:718): avc: denied { append } for pid=10972 comm="syz.0.1321" name="video7" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 185.641586][ T112] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 185.696095][T10977] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1323'. [ 185.702350][T10977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.713858][T10977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.791748][ T112] usb 7-1: Using ep0 maxpacket: 8 [ 185.795207][ T112] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 185.798467][ T112] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 185.802771][ T112] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 185.806116][ T112] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 185.810200][ T112] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 185.814250][ T112] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 185.818370][ T112] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 185.821112][ T112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.923325][T10983] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1324'. [ 185.942724][T10983] 8021q: adding VLAN 0 to HW filter on device bond2 [ 185.971996][T10987] Cannot find del_set index 128 as target [ 185.981353][T10987] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1325'. [ 185.998156][ T40] audit: type=1400 audit(1751765874.409:719): avc: denied { getattr } for pid=10986 comm="syz.0.1325" name="/" dev="9p" ino=35913813 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 185.999088][T10987] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 186.018439][ T40] audit: type=1400 audit(1751765874.429:720): avc: denied { mounton } for pid=10988 comm="syz.4.1326" path="/162/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 186.028797][ T112] usb 7-1: GET_CAPABILITIES returned 0 [ 186.030678][ T112] usbtmc 7-1:16.0: can't read capabilities [ 186.066930][T10989] lo speed is unknown, defaulting to 1000 [ 186.234591][ T24] usb 7-1: USB disconnect, device number 22 [ 186.278835][T11007] overlayfs: failed to resolve './file2': -2 [ 186.340810][T11009] xt_l2tp: unknown flags: f1 [ 186.635629][T11020] fuse: Bad value for 'fd' [ 186.724319][T11027] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 186.836915][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1341'. [ 186.840615][T11035] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1341'. [ 186.984095][T11050] netlink: 'syz.0.1347': attribute type 1 has an invalid length. [ 186.987345][T11050] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1347'. [ 187.066552][T11056] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 187.068657][T11056] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 187.072605][T11056] vhci_hcd vhci_hcd.0: Device attached [ 187.077228][T11057] vhci_hcd: connection closed [ 187.077395][ T7330] vhci_hcd: stop threads [ 187.081253][ T7330] vhci_hcd: release socket [ 187.083167][ T7330] vhci_hcd: disconnect device [ 187.760654][T11076] overlayfs: failed to resolve './file1': -2 [ 187.941720][T11092] delete_channel: no stack [ 187.994960][T11102] netlink: 'syz.5.1363': attribute type 1 has an invalid length. [ 188.024720][T11102] bond4: entered promiscuous mode [ 188.027115][T11102] 8021q: adding VLAN 0 to HW filter on device bond4 [ 188.092807][T11122] overlayfs: failed to clone upperpath [ 188.139682][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 188.139695][ T40] audit: type=1400 audit(1751765876.549:731): avc: denied { ioctl } for pid=11117 comm="syz.5.1367" path="pid:[4026532877]" dev="nsfs" ino=4026532877 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 188.323032][T11137] __nla_validate_parse: 4 callbacks suppressed [ 188.323049][T11137] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1371'. [ 188.580896][T11145] fuseblk: Bad value for 'fd' [ 188.583865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 188.614722][ T40] audit: type=1400 audit(1751765877.029:732): avc: denied { bind } for pid=11146 comm="syz.0.1375" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 188.740779][T11154] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1377'. [ 188.871853][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 189.006023][T11171] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1382'. [ 189.250223][T11185] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 189.257811][T11185] fuse: Bad value for 'user_id' [ 189.259786][T11185] fuse: Bad value for 'user_id' [ 189.263130][T11187] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1387'. [ 189.304918][T11189] fuse: Bad value for 'fd' [ 189.411163][T11199] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11199 comm=syz.4.1391 [ 189.425848][T11199] 8021q: adding VLAN 0 to HW filter on device bond3 [ 189.507748][T11206] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1394'. [ 189.510737][T11206] tipc: Invalid UDP bearer configuration [ 189.510763][T11206] tipc: Enabling of bearer rejected, failed to enable media [ 189.524852][T11212] netlink: 'syz.4.1396': attribute type 21 has an invalid length. [ 189.697173][T11227] netlink: 'syz.0.1401': attribute type 10 has an invalid length. [ 189.704386][T11227] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 189.760110][ T40] audit: type=1400 audit(1751765878.169:733): avc: denied { setopt } for pid=11234 comm="syz.4.1402" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 189.816588][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 189.819344][T11242] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1404'. [ 189.876354][T11245] ptrace attach of "/syz-executor exec"[8620] was attempted by " b\x0aøÿ\x0c !¿¡ \x07 øÿÿÿ·  ½ … Ð · • ?ºj}6Ù±ŽØ¢âÄž€ ¦ôàä©Dl¢µñÌ\x0ašö˜9: óˆœ$ªVñQ™úÐ\x09dÂ'ÉZ ·„bWðzr‘„QëÜôÎ÷ù``Vþ\x5c4fL\x0aù6\x0az^k`q0ÈŸÀ [ 189.882153][T11242] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 189.909667][ C2] vkms_vblank_simulate: vblank timer overrun [ 190.073407][T11263] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1411'. [ 190.079943][T11263] netlink: 'syz.4.1411': attribute type 1 has an invalid length. [ 190.083352][T11263] netlink: 'syz.4.1411': attribute type 2 has an invalid length. [ 190.247197][ T40] audit: type=1400 audit(1751765878.649:734): avc: denied { setattr } for pid=11290 comm="syz.2.1419" name="dlm-control" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 190.339323][ T40] audit: type=1400 audit(1751765878.749:735): avc: denied { validate_trans } for pid=11300 comm="syz.2.1421" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 190.485298][T11309] fuse: Bad value for 'fd' [ 190.500525][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.505036][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x1 [ 190.508659][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.511930][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.515053][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.518146][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.521295][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.529100][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.534106][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.537151][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.539991][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.543311][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.545631][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.547930][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.554511][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.557630][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.560763][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.568360][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.571302][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.575810][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.582493][ T40] audit: type=1400 audit(1751765878.999:736): avc: denied { create } for pid=11320 comm="syz.4.1430" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 190.584260][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.592590][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.595506][ T40] audit: type=1400 audit(1751765879.009:737): avc: denied { ioctl } for pid=11320 comm="syz.4.1430" path="socket:[39889]" dev="sockfs" ino=39889 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 190.595619][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.606991][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.610174][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.613687][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.616771][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.619701][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.622419][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.624833][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.627150][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.631159][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x4 [ 190.634889][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.637262][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.639613][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.642532][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.645027][ T24] hid-generic 0000:007F:FFFFFFFE.0006: unknown main item tag 0x0 [ 190.653928][ T24] hid-generic 0000:007F:FFFFFFFE.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 190.686502][T11326] fido_id[11326]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 190.688747][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1433'. [ 190.701711][T11328] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1433'. [ 190.801804][ T9] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 190.920233][T11353] block device autoloading is deprecated and will be removed. [ 190.962916][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 190.967010][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 190.970433][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 190.974339][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 190.978328][ T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 190.981143][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.985097][ T9] usb 5-1: config 0 descriptor?? [ 191.060020][T11357] netlink: 'syz.5.1440': attribute type 5 has an invalid length. [ 191.158933][T11368] input: syz1 as /devices/virtual/input/input17 [ 191.196092][ T9] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 191.213536][T11375] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 191.218351][T11375] program syz.5.1446 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 191.358368][T11391] fuse: Bad value for 'fd' [ 191.398982][T11393] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 191.452244][T11318] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 191.455193][T11318] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 191.463040][ T40] audit: type=1400 audit(1751765879.879:738): avc: denied { accept } for pid=11315 comm="syz.0.1427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 191.663337][ T29] usb 5-1: USB disconnect, device number 25 [ 192.018615][ T40] audit: type=1400 audit(1751765880.429:739): avc: denied { write } for pid=11409 comm="syz.2.1458" name="autofs" dev="devtmpfs" ino=104 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 192.129659][ T40] audit: type=1326 audit(1751765880.539:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11422 comm="syz.5.1460" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0ab3b8e929 code=0x0 [ 192.719645][T11440] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 193.025151][T11469] netlink: 'syz.4.1474': attribute type 23 has an invalid length. [ 193.081228][T11473] vxcan2: entered promiscuous mode [ 193.207558][T11491] netlink: 'syz.5.1482': attribute type 1 has an invalid length. [ 193.223909][T11491] mkiss: ax0: crc mode is auto. [ 193.363752][ T40] audit: type=1400 audit(1751765881.779:741): avc: denied { lock } for pid=11492 comm="syz.2.1483" path="socket:[44275]" dev="sockfs" ino=44275 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 193.386596][ T40] audit: type=1326 audit(1751765881.799:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.5.1484" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x0 [ 193.438723][ T40] audit: type=1326 audit(1751765881.849:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11494 comm="syz.5.1484" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x0 [ 193.470480][T11499] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 193.476355][T11499] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 193.582730][ T5964] block nbd0: Receive control failed (result -32) [ 193.583003][T11442] block nbd0: shutting down sockets [ 193.642980][T11504] __nla_validate_parse: 8 callbacks suppressed [ 193.642992][T11504] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1486'. [ 193.694309][T11505] trusted_key: encrypted_key: keyword 'update' not allowed when called from .instantiate method [ 193.701763][ T6037] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 193.831651][ T6037] usb 7-1: device descriptor read/64, error -71 [ 194.006466][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.009204][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.072838][ T6037] usb 7-1: new full-speed USB device number 24 using dummy_hcd [ 194.204007][T11520] tipc: Started in network mode [ 194.206038][T11520] tipc: Node identity 4, cluster identity 4711 [ 194.208568][T11520] tipc: Node number set to 4 [ 194.222416][ T6037] usb 7-1: device descriptor read/64, error -71 [ 194.242874][T11526] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null. [ 194.246151][T11526] overlayfs: overlapping lowerdir path [ 194.309082][T11535] tmpfs: Unknown parameter 'usrquota_inde_hárdlimit' [ 194.314132][T11535] nbd: couldn't find device at index -1605786504 [ 194.332682][ T6037] usb usb7-port1: attempt power cycle [ 194.399868][T11542] input: syz1 as /devices/virtual/input/input19 [ 194.559521][ T40] audit: type=1400 audit(1751765882.969:744): avc: denied { append } for pid=11547 comm="syz.5.1501" name="btrfs-control" dev="devtmpfs" ino=1342 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 194.608757][T11557] program syz.0.1504 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.664584][T11562] overlayfs: failed to clone upperpath [ 194.692276][ T6037] usb 7-1: new full-speed USB device number 25 using dummy_hcd [ 194.709023][ T40] audit: type=1400 audit(1751765883.119:745): avc: denied { write } for pid=11565 comm="syz.4.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 194.732251][ T6037] usb 7-1: device descriptor read/8, error -71 [ 194.756957][T11578] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1511'. [ 194.785847][ T40] audit: type=1400 audit(1751765883.199:746): avc: denied { create } for pid=11581 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 194.793311][ T40] audit: type=1400 audit(1751765883.199:747): avc: denied { bind } for pid=11581 comm="syz.0.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 194.800829][T11584] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1513'. [ 194.807514][T11584] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1513'. [ 194.834587][T11590] netlink: 'syz.0.1515': attribute type 1 has an invalid length. [ 194.837188][T11590] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1515'. [ 194.914008][T11597] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1517'. [ 194.975379][T11602] lo speed is unknown, defaulting to 1000 [ 194.990691][T11596] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1518'. [ 194.991700][ T6037] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 194.996623][T11596] fuse: Unknown parameter 'sroup_id' [ 195.012372][ T6037] usb 7-1: device descriptor read/8, error -71 [ 195.018646][T11607] binder: 11601:11607 ioctl c0306201 200000000640 returned -22 [ 195.072481][ T40] audit: type=1400 audit(1751765883.489:748): avc: denied { node_bind } for pid=11611 comm="syz.4.1522" saddr=::1 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 195.122834][ T6037] usb usb7-port1: unable to enumerate USB device [ 195.147690][T11616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1523'. [ 195.152365][T11616] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1523'. [ 195.301112][T11626] netlink: 'syz.5.1525': attribute type 13 has an invalid length. [ 195.430712][T11628] 9pnet_fd: Insufficient options for proto=fd [ 195.482364][T11630] veth1_to_batadv: entered promiscuous mode [ 195.636813][T11644] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1532'. [ 195.646045][T11644] syz.5.1532: attempt to access beyond end of device [ 195.646045][T11644] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 195.650007][T11644] (syz.5.1532,11644,2):ocfs2_get_sector:1714 ERROR: status = -5 [ 195.652790][T11644] (syz.5.1532,11644,2):ocfs2_sb_probe:753 ERROR: status = -5 [ 195.655104][T11644] (syz.5.1532,11644,2):ocfs2_fill_super:989 ERROR: superblock probe failed! [ 195.657854][T11644] (syz.5.1532,11644,2):ocfs2_fill_super:1177 ERROR: status = -5 [ 195.724962][ T40] audit: type=1400 audit(1751765884.139:749): avc: denied { lock } for pid=11649 comm="syz.5.1534" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=41794 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 196.267754][ T40] audit: type=1400 audit(1751765884.679:750): avc: denied { getopt } for pid=11668 comm="syz.4.1540" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 196.294505][T11669] veth4: entered promiscuous mode [ 196.427791][T11676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 196.719609][T11715] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.722363][T11715] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.724865][T11715] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.727351][T11715] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 196.731183][T11715] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.734018][T11715] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.736772][T11715] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.739356][T11715] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.831311][T11724] netlink: 'syz.4.1560': attribute type 1 has an invalid length. [ 197.069135][T11737] loop2: detected capacity change from 0 to 7 [ 197.072494][T10392] Dev loop2: unable to read RDB block 7 [ 197.074868][T10392] loop2: unable to read partition table [ 197.077540][T10392] loop2: partition table beyond EOD, truncated [ 197.085511][T11737] Dev loop2: unable to read RDB block 7 [ 197.087233][T11737] loop2: unable to read partition table [ 197.089088][T11737] loop2: partition table beyond EOD, truncated [ 197.090976][T11737] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 197.898804][T11737] overlayfs: statfs failed on './file0' [ 198.106149][T11761] bond0: (slave bond_slave_1): Releasing backup interface [ 198.165440][T11769] tipc: Enabled bearer , priority 0 [ 198.416240][ T40] kauditd_printk_skb: 3 callbacks suppressed [ 198.416252][ T40] audit: type=1400 audit(1751765886.829:754): avc: denied { getattr } for pid=11787 comm="syz.0.1582" name="[io_uring]" dev="anon_inodefs" ino=46128 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 198.661588][ T1472] usb 5-1: new full-speed USB device number 26 using dummy_hcd [ 198.794766][ T1472] usb 5-1: device descriptor read/64, error -71 [ 198.917026][T11795] __nla_validate_parse: 8 callbacks suppressed [ 198.917043][T11795] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1584'. [ 199.041586][ T1472] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 199.145668][T11803] JFS: discard option not supported on device [ 199.148669][T11803] syz.5.1585: attempt to access beyond end of device [ 199.148669][T11803] nbd5: rw=0, sector=64, nr_sectors = 8 limit=0 [ 199.152854][T11803] syz.5.1585: attempt to access beyond end of device [ 199.152854][T11803] nbd5: rw=0, sector=120, nr_sectors = 8 limit=0 [ 199.156736][T11803] Mount JFS Failure: -5 [ 199.181622][ T1472] usb 5-1: device descriptor read/64, error -71 [ 199.309060][ T1472] usb usb5-port1: attempt power cycle [ 199.403408][T11827] overlayfs: missing 'lowerdir' [ 199.484759][ T40] audit: type=1400 audit(1751765887.899:755): avc: denied { write } for pid=11845 comm="syz.5.1598" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 199.555995][T11859] bond0: (slave bond_slave_0): Releasing backup interface [ 199.564219][T11859] bond0: (slave bond_slave_1): Releasing backup interface [ 199.570085][T11859] team_slave_0: left promiscuous mode [ 199.587143][T11859] team0: Port device team_slave_0 removed [ 199.589693][T11859] team_slave_1: left promiscuous mode [ 199.597072][T11859] team0: Port device team_slave_1 removed [ 199.598166][T11861] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1602'. [ 199.599390][T11859] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.605525][T11859] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.608489][T11859] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.611027][T11859] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.624915][ T1148] tipc: Resetting bearer [ 199.641556][ T1472] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 199.653834][ T40] audit: type=1400 audit(1751765888.069:756): avc: denied { setattr } for pid=11868 comm="syz.4.1603" name="SCTPv6" dev="sockfs" ino=46253 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 199.662051][ T1472] usb 5-1: device descriptor read/8, error -71 [ 199.667002][ T40] audit: type=1326 audit(1751765888.079:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11860 comm="syz.5.1602" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x0 [ 199.689362][T11871] overlayfs: missing 'lowerdir' [ 199.770747][T11873] lo speed is unknown, defaulting to 1000 [ 199.911875][ T1472] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 199.925293][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'. [ 199.928046][T11880] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1607'. [ 199.933376][T11888] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1609'. [ 199.946299][ T1472] usb 5-1: device descriptor read/8, error -71 [ 199.963854][ T40] audit: type=1326 audit(1751765888.379:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11889 comm="syz.5.1610" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x0 [ 199.994425][T11892] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 199.998001][T11892] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 200.002911][T11892] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1611'. [ 200.015951][ T40] audit: type=1400 audit(1751765888.429:759): avc: denied { listen } for pid=11891 comm="syz.4.1611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 200.057508][ T1472] usb usb5-port1: unable to enumerate USB device [ 200.133694][T11899] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 200.136562][T11899] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 200.175315][T11902] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 200.177518][T11902] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 200.178452][T11903] gfs2: path_lookup on ™6(ï+‰d‹QÌnB´!eU‚çVè!š`:Ñ 8×DSEíÄðÃÄèÎ Áy|YT¢®{-€íê°”,mb/ returned error -2 [ 200.181145][T11902] vhci_hcd vhci_hcd.0: Device attached [ 200.186964][T11904] vhci_hcd: cannot find a urb of seqnum 200 max seqnum 0 [ 200.189446][ T1148] vhci_hcd: stop threads [ 200.190767][ T1148] vhci_hcd: release socket [ 200.192350][ T1148] vhci_hcd: disconnect device [ 201.074924][ T1472] usb 10-1: new high-speed USB device number 9 using dummy_hcd [ 201.118069][T11920] netlink: 144 bytes leftover after parsing attributes in process `syz.4.1619'. [ 201.223764][ T1472] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 152, changing to 11 [ 201.227376][ T1472] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 201.230408][ T1472] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0 [ 201.233564][ T1472] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8 [ 201.238139][ T1472] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 201.241055][ T1472] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.243701][ T1472] usb 10-1: Product: 嚄ꇿ겗꜀匿ꪠ鵽ﳸ敹â§èªƒå©„ྣ✤闾ᗨ뙩ᑸ懎ãšç¾œí•¼Ç¸ä®‚ﻵæ¯à®‘ï‹è‘„â®ì–˜å±´ì¤‡ì³‚拌푫懞çºï™¹â·ºÞ¶ï‚˜æ§‰ãˆ±ì¶™ì¡žå‚¼ì‚°ïµ«ä¥œå²˜î‰¶ìŒ ê¼…ç«íš“ë½ëºè¸˜å‹‹èˆŒæ”ƒåŠ¸é¨‰å‡‡ã˜Œä ‚èªŽè…©åš»ì·ì«½è•»â â¶¸ìœ©îƒšá„‹ãž€î“ªé¾¨ê‹Žá†ŒïŽä†•ã…ºï¬ì£Ä¬ì—œìŸ¾î¼ï”¼ã¶„ハ뭋봇忷짴鼀➦怊⇨嶈冾Ꜿ孼ࣨゎ㮲팂ä‰ì­© [ 201.254440][ T1472] usb 10-1: Manufacturer: ꛙɿ繦䗩귅倊⬻⬘ỔçŠë¦‘ÇæšŸæ›‘╊é‘ˡṌ芰ë£ïµ£è¦¼æ£ã„™å¸à²¼Ê§â™ƒÃŒî„îœã¹…陉ァⲔ쬤ážë®“î®è£¤ê¯”舜ᷪ᷃뛚ﰧïšä•¸å€ˆâº†ä³çŽƒí– îµŠî·¹å±µßšã¼—â¹•å‰·å±½áƒéº€È嶞冩蹩與췻 [ 201.261421][ T1472] usb 10-1: SerialNumber:   [ 201.436208][T11922] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 201.471018][ T1472] cdc_ncm 10-1:1.0: bind() failure [ 201.477320][ T1472] cdc_ncm 10-1:1.1: CDC Union missing and no IAD found [ 201.477714][T11924] bond0: (slave veth0_to_hsr): Enslaving as an active interface with an up link [ 201.480280][ T1472] cdc_ncm 10-1:1.1: bind() failure [ 201.486237][ T40] audit: type=1400 audit(1751765889.909:760): avc: denied { unmount } for pid=11923 comm="syz.0.1621" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 201.488145][ T10] Process accounting resumed [ 201.496434][ T1472] usb 10-1: USB disconnect, device number 9 [ 201.536450][T11926] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 201.539991][T11926] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 201.574548][ T40] audit: type=1400 audit(1751765889.989:761): avc: denied { ioctl } for pid=11927 comm="syz.0.1623" path="socket:[46361]" dev="sockfs" ino=46361 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 201.657110][T11935] netlink: 14560 bytes leftover after parsing attributes in process `syz.4.1624'. [ 201.673491][T11935] lo speed is unknown, defaulting to 1000 [ 201.768964][T11939] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1626'. [ 202.087334][T11965] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 202.090237][T11965] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 202.118087][T11960] loop6: detected capacity change from 0 to 63 [ 202.123824][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.129871][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.134657][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.139048][T11960] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.143358][T11960] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.146677][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.150529][T10392] Buffer I/O error on dev loop6, logical block 0, async page read [ 202.169560][T11968] netlink: 'syz.4.1632': attribute type 1 has an invalid length. [ 202.249261][ T40] audit: type=1400 audit(1751765890.659:762): avc: denied { accept } for pid=11969 comm="syz.4.1633" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 202.424695][T11993] overlayfs: missing 'lowerdir' [ 202.438894][T11997] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 202.483204][T12005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=16 sclass=netlink_audit_socket pid=12005 comm=syz.5.1645 [ 202.487007][T12005] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=17 sclass=netlink_audit_socket pid=12005 comm=syz.5.1645 [ 202.517158][T12011] netlink: 'syz.0.1647': attribute type 1 has an invalid length. [ 202.522944][T12014] netlink: 'syz.0.1647': attribute type 1 has an invalid length. [ 202.525512][T12012] tipc: Started in network mode [ 202.527435][T12012] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 202.530708][T12012] tipc: Enabling of bearer rejected, failed to enable media [ 202.565835][ T40] audit: type=1400 audit(1751765890.979:763): avc: denied { accept } for pid=12019 comm="syz.0.1649" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 202.622829][T12025] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1646'. [ 202.924418][T12036] tmpfs: Bad value for 'mpol' [ 203.161720][ T5950] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 203.333353][ T5950] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 203.337881][ T5950] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 203.342004][ T5950] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 203.345083][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.355564][T12035] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 203.364328][ T5950] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 203.566367][ T40] kauditd_printk_skb: 2 callbacks suppressed [ 203.566383][ T40] audit: type=1400 audit(1751765891.979:766): avc: denied { connect } for pid=12034 comm="syz.0.1653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.571123][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.580971][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.588046][ T10] usb 5-1: USB disconnect, device number 30 [ 203.793180][ T40] audit: type=1400 audit(1751765892.209:767): avc: denied { read write } for pid=12034 comm="syz.0.1653" dev="sockfs" ino=43706 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 203.801642][T12042] can0: slcan on ttyS3. [ 203.862603][T12042] can0 (unregistered): slcan off ttyS3. [ 203.930718][ T40] audit: type=1400 audit(1751765892.339:768): avc: denied { map } for pid=12043 comm="syz.2.1657" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.933100][T12044] __nla_validate_parse: 1 callbacks suppressed [ 203.933114][T12044] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1657'. [ 203.937743][ T40] audit: type=1400 audit(1751765892.339:769): avc: denied { execute } for pid=12043 comm="syz.2.1657" path="/dev/iommu" dev="devtmpfs" ino=632 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 203.998300][T12052] netdevsim netdevsim5: Direct firmware load for . [ 203.998300][T12052] failed with error -2 [ 204.006996][T12052] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 204.006996][T12052] [ 204.007002][ T40] audit: type=1400 audit(1751765892.419:770): avc: denied { firmware_load } for pid=12051 comm="syz.5.1659" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 204.031966][T12054] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=29 sclass=netlink_audit_socket pid=12054 comm=syz.2.1660 [ 204.037011][T12054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1660'. [ 204.049005][T12056] overlayfs: failed to resolve './file1': -2 [ 204.110126][T12065] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1662'. [ 204.130537][T12068] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1663'. [ 204.173046][T12073] netlink: 'syz.2.1664': attribute type 7 has an invalid length. [ 204.191211][ T40] audit: type=1400 audit(1751765892.599:771): avc: denied { map } for pid=12072 comm="syz.2.1664" path="/proc/1004/task/1005/fd" dev="proc" ino=44907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 204.265476][ T40] audit: type=1400 audit(1751765892.679:772): avc: denied { read } for pid=12083 comm="syz.4.1666" path="socket:[43741]" dev="sockfs" ino=43741 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 204.310254][ T40] audit: type=1326 audit(1751765892.719:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12090 comm="syz.4.1667" exe="/syz-executor" sig=31 arch=c000003e syscall=317 compat=0 ip=0x7f580178e929 code=0x0 [ 204.322874][ T40] audit: type=1400 audit(1751765892.729:774): avc: denied { mount } for pid=12090 comm="syz.4.1667" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 204.353604][T12097] netlink: 'syz.0.1669': attribute type 4 has an invalid length. [ 204.355999][T12097] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.1669'. [ 204.461826][T12112] netlink: 'syz.4.1674': attribute type 4 has an invalid length. [ 204.468131][T12112] Invalid source name [ 204.469454][T12112] UBIFS error (pid: 12112): cannot open "./file0", error -22 [ 204.556624][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1679'. [ 204.590135][T12131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1680'. [ 204.659164][ T40] audit: type=1400 audit(1751765893.069:775): avc: denied { map } for pid=12137 comm="syz.0.1683" path="/dev/usbmon0" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.695374][T12150] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1685'. [ 204.702419][T12150] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1685'. [ 204.709663][T12148] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.1684'. [ 204.925130][T12166] netlink: 'syz.5.1689': attribute type 27 has an invalid length. [ 204.959741][T12166] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.963963][T12166] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.973066][T12166] bond0: left promiscuous mode [ 204.974997][T12166] bond_slave_0: left promiscuous mode [ 204.977223][T12166] bond_slave_1: left promiscuous mode [ 204.979472][T12166] bond0: left allmulticast mode [ 204.981422][T12166] bond_slave_0: left allmulticast mode [ 204.985346][T12166] bond_slave_1: left allmulticast mode [ 204.991789][T12166] dummy0: left promiscuous mode [ 205.058576][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.069377][T12166] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.078980][T12166] hsr_slave_0: left allmulticast mode [ 205.114820][T12166] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.117528][T12166] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.120159][T12166] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.129826][T12166] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.164127][T12166] bond4: left promiscuous mode [ 205.166182][T12166] vxcan2: left promiscuous mode [ 205.194486][T12167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.197501][T12167] 8021q: adding VLAN 0 to HW filter on device team0 [ 205.201054][T12167] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 205.289503][ T6037] libceph: connect (1)[c::]:6789 error -22 [ 205.291790][ T6037] libceph: mon0 (1)[c::]:6789 connect error [ 205.330539][T12198] ceph: No mds server is up or the cluster is laggy [ 205.502617][T12206] ipvlan1: entered promiscuous mode [ 205.504804][T12206] 8021q: adding VLAN 0 to HW filter on device ipvlan1 [ 205.507096][T12206] bond0: (slave ipvlan1): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 205.548151][T12205] afs: Unknown parameter 'dyn$B©{®T›ü0^Ö}0õ¶z†¡²Ó´+ÓÞº¤È^žWlÆviQ­ÆŸ ¬Û»Výã*9†ýÉîåÃ' [ 205.551648][ T5950] usb 10-1: new high-speed USB device number 10 using dummy_hcd [ 205.597121][T12208] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 205.704787][ T5950] usb 10-1: Using ep0 maxpacket: 8 [ 205.712078][ T5950] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 205.715353][ T5950] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 205.719358][ T5950] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 205.723887][ T5950] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 205.728433][ T5950] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 205.732792][ T5950] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.738065][ T5950] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 205.742014][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.950790][ T5950] usb 10-1: GET_CAPABILITIES returned 0 [ 205.952794][ T5950] usbtmc 10-1:16.0: can't read capabilities [ 205.979414][T12220] netfs: Couldn't get user pages (rc=-14) [ 206.118616][T12238] syz_tun: entered allmulticast mode [ 206.158102][ C2] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 206.163622][T12202] usbtmc 10-1:16.0: Unable to send data, error -71 [ 206.434601][T12274] fuse: Bad value for 'user_id' [ 206.436704][T12274] fuse: Bad value for 'user_id' [ 206.518462][T12277] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 206.521390][T12277] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 206.720755][T12296] Cannot find add_set index 4 as target [ 207.011172][T12309] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 207.112545][T12314] BTRFS info: 'norecovery' is for compatibility only, recommended to use 'rescue=nologreplay' [ 207.288441][T12321] netlink: 'syz.4.1740': attribute type 7 has an invalid length. [ 207.291120][T12321] netlink: 'syz.4.1740': attribute type 8 has an invalid length. [ 207.480942][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.486092][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.488292][T12345] bridge2: entered promiscuous mode [ 207.491021][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.493719][T12345] bridge2: entered allmulticast mode [ 207.497874][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.505618][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.511293][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.516359][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.521127][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.528554][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.533409][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.541633][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.545567][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.549469][T12344] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=57 sclass=netlink_route_socket pid=12344 comm=syz.2.1746 [ 207.561152][T12354] fuse: Bad value for 'group_id' [ 207.563433][T12354] fuse: Bad value for 'group_id' [ 207.592960][T12358] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 207.652883][T12367] nbd: must specify a size in bytes for the device [ 208.109480][T12381] netlink: 'syz.2.1758': attribute type 11 has an invalid length. [ 208.202508][T12385] fuse: Bad value for 'group_id' [ 208.204705][T12385] fuse: Bad value for 'group_id' [ 208.264529][T12387] fuse: Bad value for 'fd' [ 208.281585][ T112] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 208.313965][ T9] usb 10-1: USB disconnect, device number 10 [ 208.431667][ T112] usb 5-1: Using ep0 maxpacket: 16 [ 208.438248][ T112] usb 5-1: config 1 has an invalid descriptor of length 213, skipping remainder of the config [ 208.443398][ T112] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 208.449778][ T112] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 208.454129][ T112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 208.457418][ T112] usb 5-1: SerialNumber: syz [ 208.466295][ T112] hub 5-1:1.0: bad descriptor, ignoring hub [ 208.468826][ T112] hub 5-1:1.0: probe with driver hub failed with error -5 [ 208.472536][ T112] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 210.740521][T12400] __nla_validate_parse: 14 callbacks suppressed [ 210.740532][T12400] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1764'. [ 210.798746][ T5748] usb 5-1: USB disconnect, device number 31 [ 210.803267][T12406] 9pnet_fd: Insufficient options for proto=fd [ 210.809917][T12406] xt_bpf: check failed: parse error [ 210.940872][T12436] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 211.061122][T12452] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1779'. [ 211.101628][ T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 211.153855][T12454] overlayfs: failed to clone upperpath [ 211.261649][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 211.267694][ T9] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 211.270452][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 211.274318][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 211.278795][ T9] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 211.286349][ T9] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 211.292597][ T9] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 211.299199][ T9] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 211.306328][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.314955][T12457] kvm: MWAIT instruction emulated as NOP! [ 211.456624][T12469] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1784'. [ 211.523609][ T9] usb 7-1: GET_CAPABILITIES returned 0 [ 211.525986][ T9] usbtmc 7-1:16.0: can't read capabilities [ 211.566314][T12473] xt_recent: Unsupported userspace flags (000000c7) [ 211.566440][T12474] xt_recent: Unsupported userspace flags (000000c7) [ 211.581531][T12473] gtp0: entered promiscuous mode [ 211.615993][T12477] : entered promiscuous mode [ 211.724686][T12487] netlink: 'syz.4.1789': attribute type 4 has an invalid length. [ 211.727119][T12487] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1789'. [ 211.727734][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 211.733516][T12487] : renamed from bond0 (while UP) [ 211.734757][T12418] usbtmc 7-1:16.0: Unable to send data, error -71 [ 212.374867][T12503] xt_TCPMSS: Only works on TCP SYN packets [ 212.434699][T12512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1793'. [ 212.589180][T12527] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 212.627895][T12531] netlink: zone id is out of range [ 212.629583][T12531] netlink: zone id is out of range [ 212.631161][T12531] netlink: zone id is out of range [ 212.632917][T12531] netlink: zone id is out of range [ 212.634700][T12531] netlink: zone id is out of range [ 212.636838][T12531] netlink: zone id is out of range [ 212.639060][T12531] netlink: zone id is out of range [ 212.642991][T12531] netlink: zone id is out of range [ 212.648827][T12531] netlink: set zone limit has 4 unknown bytes [ 213.255075][T12549] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1807'. [ 213.489479][T12570] netfs: Couldn't get user pages (rc=-14) [ 213.635920][T12583] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1817'. [ 213.662583][T12583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.681998][T12583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.685100][T12583] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 213.690219][T12583] bond0: (slave vti0): Error -95 calling set_mac_address [ 213.723821][T12585] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1817'. [ 213.779149][T12593] lo speed is unknown, defaulting to 1000 [ 213.823075][T12596] CIFS mount error: No usable UNC path provided in device string! [ 213.823075][T12596] [ 213.826233][T12596] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 213.871967][ T5950] usb 7-1: USB disconnect, device number 27 [ 213.928223][T12610] random: crng reseeded on system resumption [ 214.017854][T12614] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1827'. [ 214.020625][T12614] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1827'. [ 214.164198][T12621] netlink: 'syz.4.1830': attribute type 21 has an invalid length. [ 214.164923][T12624] netlink: 'syz.4.1830': attribute type 21 has an invalid length. [ 214.631632][ T9] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 214.721724][ T5950] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 214.791697][ T9] usb 10-1: Using ep0 maxpacket: 8 [ 214.795513][ T9] usb 10-1: config index 0 descriptor too short (expected 74, got 45) [ 214.799614][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 214.804467][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 214.807778][ T9] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 214.811352][ T9] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 214.814693][ T9] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.818698][ T9] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.821746][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.881638][ T5950] usb 5-1: Using ep0 maxpacket: 8 [ 214.885042][ T5950] usb 5-1: config index 0 descriptor too short (expected 74, got 45) [ 214.887606][ T5950] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 214.891119][ T5950] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 214.894384][ T5950] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 214.898941][ T5950] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 214.902294][ T5950] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 214.907461][ T5950] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 214.910998][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 214.991041][T12641] fuse: Bad value for 'rootmode' [ 214.994822][T12641] 0·: renamed from hsr0 (while UP) [ 214.998367][T12641] 0·: entered allmulticast mode [ 214.999983][T12641] hsr_slave_0: entered allmulticast mode [ 215.002197][T12641] hsr_slave_1: entered allmulticast mode [ 215.004986][T12641] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 215.022544][T12643] geneve3: entered promiscuous mode [ 215.024879][T12643] geneve3: entered allmulticast mode [ 215.030110][ T9] usb 10-1: GET_CAPABILITIES returned 0 [ 215.031873][ T9] usbtmc 10-1:16.0: can't read capabilities [ 215.116973][ T5950] usb 5-1: GET_CAPABILITIES returned 0 [ 215.118749][ T5950] usbtmc 5-1:16.0: can't read capabilities [ 215.233515][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 215.237473][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 215.241357][ C1] usbtmc 10-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 215.245702][T12637] usbtmc 10-1:16.0: Unable to send data, error -71 [ 215.249227][ T9] usb 10-1: USB disconnect, device number 11 [ 215.261641][ T112] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 215.321647][T12639] FAULT_INJECTION: forcing a failure. [ 215.321647][T12639] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 215.325660][T12639] CPU: 3 UID: 0 PID: 12639 Comm: syz.0.1835 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 215.325675][T12639] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 215.325682][T12639] Call Trace: [ 215.325686][T12639] [ 215.325690][T12639] dump_stack_lvl+0x16c/0x1f0 [ 215.325727][T12639] should_fail_ex+0x512/0x640 [ 215.325754][T12639] _copy_from_user+0x2e/0xd0 [ 215.325772][T12639] do_sys_poll+0x1d5/0xdf0 [ 215.325787][T12639] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 215.325805][T12639] ? kernel_text_address+0x8d/0x100 [ 215.325818][T12639] ? __kernel_text_address+0xd/0x40 [ 215.325831][T12639] ? __pfx_do_sys_poll+0x10/0x10 [ 215.325857][T12639] ? find_held_lock+0x2b/0x80 [ 215.325895][T12639] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 215.325914][T12639] ? set_user_sigmask+0x21b/0x2b0 [ 215.325927][T12639] ? __pfx_set_user_sigmask+0x10/0x10 [ 215.325939][T12639] ? __fget_files+0x20e/0x3c0 [ 215.325953][T12639] ? __pfx_rcu_is_watching+0x10/0x10 [ 215.325970][T12639] __x64_sys_ppoll+0x254/0x2d0 [ 215.325986][T12639] ? __pfx___x64_sys_ppoll+0x10/0x10 [ 215.326001][T12639] ? ksys_write+0x1ac/0x250 [ 215.326015][T12639] ? __pfx_ksys_write+0x10/0x10 [ 215.326033][T12639] do_syscall_64+0xcd/0x4c0 [ 215.326050][T12639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.326061][T12639] RIP: 0033:0x7fd52ab8e929 [ 215.326070][T12639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.326081][T12639] RSP: 002b:00007fd52ba77038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 215.326091][T12639] RAX: ffffffffffffffda RBX: 00007fd52adb5fa0 RCX: 00007fd52ab8e929 [ 215.326098][T12639] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 00002000000000c0 [ 215.326104][T12639] RBP: 00007fd52ba77090 R08: 0000000000000000 R09: 0000000000000000 [ 215.326111][T12639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.326117][T12639] R13: 0000000000000000 R14: 00007fd52adb5fa0 R15: 00007fff420485b8 [ 215.326130][T12639] [ 215.326712][ T5950] usb 5-1: USB disconnect, device number 32 [ 215.333194][T12656] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.403055][T12656] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.405846][T12656] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.408671][T12656] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 215.412895][T12656] netdevsim netdevsim4 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.415683][T12656] netdevsim netdevsim4 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.418520][T12656] netdevsim netdevsim4 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.421294][T12656] netdevsim netdevsim4 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 215.424642][T12656] geneve4: entered promiscuous mode [ 215.426296][T12656] geneve4: entered allmulticast mode [ 215.481578][ T112] usb 7-1: Using ep0 maxpacket: 8 [ 215.484475][ T112] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 215.487118][ T112] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 215.490587][ T112] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 215.494353][ T112] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 3 [ 215.497767][ T112] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 215.502428][ T112] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 215.505334][ T112] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.523017][T12659] sctp: [Deprecated]: syz.4.1842 (pid 12659) Use of struct sctp_assoc_value in delayed_ack socket option. [ 215.523017][T12659] Use struct sctp_sack_info instead [ 215.711982][ T112] usb 7-1: GET_CAPABILITIES returned 0 [ 215.713769][ T112] usbtmc 7-1:16.0: can't read capabilities [ 215.779834][T12666] __nla_validate_parse: 9 callbacks suppressed [ 215.779850][T12666] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1844'. [ 215.836328][T12668] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1845'. [ 215.841245][T12669] /dev/sg0: Can't lookup blockdev [ 215.852956][T12668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 215.855805][T12668] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 215.914584][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 215.918472][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 215.922379][ C0] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 215.932427][T12641] usbtmc 7-1:16.0: Unable to send data, error -71 [ 215.937158][ T24] usb 7-1: USB disconnect, device number 28 [ 216.101540][ T5950] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 216.251558][ T5950] usb 10-1: Using ep0 maxpacket: 8 [ 216.261627][ T5950] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 216.265669][ T5950] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 216.269376][ T5950] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 216.273147][ T5950] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.277380][ T5950] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.279360][T12690] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 216.280168][ T5950] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.285370][T12690] vlan2: left promiscuous mode [ 216.286975][T12690] bridge0: left promiscuous mode [ 216.289036][T12690] veth5: left promiscuous mode [ 216.485268][ T5950] usb 10-1: GET_CAPABILITIES returned 0 [ 216.487363][ T5950] usbtmc 10-1:16.0: can't read capabilities [ 216.571742][ T5748] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 216.649991][T12708] overlayfs: failed to clone upperpath [ 216.690848][ T112] usb 10-1: USB disconnect, device number 12 [ 216.723669][ T1472] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 216.725865][ T5748] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 216.730094][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 216.734698][ T5748] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 216.737986][ T5748] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 216.744067][ T5748] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 216.747275][ T5748] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 216.749870][ T5748] usb 5-1: Manufacturer: syz [ 216.754901][ T5748] usb 5-1: config 0 descriptor?? [ 216.829006][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1860'. [ 216.832421][T12717] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1860'. [ 216.871573][ T1472] usb 7-1: Using ep0 maxpacket: 8 [ 216.874859][T12722] bond0: entered promiscuous mode [ 216.876579][ T1472] usb 7-1: config index 0 descriptor too short (expected 74, got 45) [ 216.879032][ T1472] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 216.882465][ T1472] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 216.885701][ T1472] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 216.889123][ T1472] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 216.893099][ T1472] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 216.897840][ T1472] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 216.901054][ T1472] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.037821][T12730] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1864'. [ 217.037855][T12731] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1864'. [ 217.108887][ T1472] usb 7-1: GET_CAPABILITIES returned 0 [ 217.110601][ T1472] usbtmc 7-1:16.0: can't read capabilities [ 217.164770][ T5748] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 217.170003][ T5748] appleir 0003:05AC:8243.0008: hiddev1,hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.0-1/input0 [ 217.199829][T12735] overlayfs: failed to clone upperpath [ 217.305547][ T40] kauditd_printk_skb: 44 callbacks suppressed [ 217.305558][ T40] audit: type=1400 audit(1751765905.719:820): avc: denied { write } for pid=12750 comm="syz.4.1870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 217.318071][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 217.321351][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 217.324323][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 217.327145][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 217.330030][ C3] usbtmc 7-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 217.334692][T12701] usbtmc 7-1:16.0: Unable to send data, error -71 [ 217.337778][ T5950] usb 7-1: USB disconnect, device number 29 [ 217.416812][T12766] netlink: 'syz.5.1873': attribute type 10 has an invalid length. [ 217.425233][T12766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.428148][T12766] team0: Port device bond0 added [ 217.447034][T12771] overlayfs: failed to clone upperpath [ 217.519999][ T40] audit: type=1400 audit(1751765905.929:821): avc: denied { create } for pid=12772 comm="syz.5.1875" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:fusefs_t tclass=chr_file permissive=1 [ 217.530593][T12773] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 217.958075][T12783] netlink: 666 bytes leftover after parsing attributes in process `syz.2.1879'. [ 217.963877][T12783] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1879'. [ 218.109752][T12786] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1880'. [ 218.290723][T12773] overlayfs: statfs failed on './file0' [ 218.373874][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.377111][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.403033][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 218.406480][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.455917][T12809] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1887'. [ 218.477824][ T7347] Bluetooth: hci4: Frame reassembly failed (-84) [ 218.843100][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.861622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!! [ 218.882636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 218.885343][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 219.023843][T12829] 8021q: adding VLAN 0 to HW filter on device  [ 219.026899][T12829] tipc: Resetting bearer [ 219.030028][T12829] tipc: Resetting bearer [ 219.034631][T12829] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 219.343108][ T6037] usb 5-1: USB disconnect, device number 33 [ 220.481685][ T5964] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 220.482262][ T63] Bluetooth: hci4: command 0x1003 tx timeout [ 220.758667][T12867] syz.2.1908 (12867): drop_caches: 2 [ 220.761238][T12867] syz.2.1908 (12867): drop_caches: 2 [ 220.785989][ T40] audit: type=1326 audit(1751765909.199:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.5.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 220.803335][ T40] audit: type=1326 audit(1751765909.199:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.5.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab3b2ab19 code=0x7ffc0000 [ 220.805402][T12874] sp0: Synchronizing with TNC [ 220.810723][ T40] audit: type=1326 audit(1751765909.199:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.5.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 220.822205][T12873] [U] è [ 220.825614][ T40] audit: type=1326 audit(1751765909.209:825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.5.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 220.834480][ T40] audit: type=1326 audit(1751765909.209:826): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.5.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 220.846728][ T40] audit: type=1326 audit(1751765909.209:827): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.5.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0ab3b8e929 code=0x7ffc0000 [ 220.857303][ T40] audit: type=1326 audit(1751765909.209:828): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.5.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab3b2ab19 code=0x7ffc0000 [ 220.866403][ T40] audit: type=1326 audit(1751765909.209:829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12871 comm="syz.5.1910" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0ab3b2ab19 code=0x7ffc0000 [ 221.532397][T12901] could not allocate digest TFM handle cryptd(blake2b-160) [ 221.622221][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 221.832719][ T24] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 221.835557][ T24] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 221.838864][ T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 221.842029][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 221.845449][ T24] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 221.850104][ T24] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 221.853896][ T24] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 221.856570][ T24] usb 5-1: Product: syz [ 221.857900][ T24] usb 5-1: Manufacturer: syz [ 221.864314][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 221.865969][ T24] cdc_wdm 5-1:1.0: skipping garbage [ 221.868570][ T24] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 221.870458][ T24] cdc_wdm 5-1:1.0: Unknown control protocol [ 222.044611][T12919] __nla_validate_parse: 2 callbacks suppressed [ 222.044628][T12919] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1926'. [ 222.115891][ C1] cdc_wdm 5-1:1.0: nonzero urb status received: -71 [ 222.115932][ T24] usb 5-1: USB disconnect, device number 34 [ 222.118138][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - 0 bytes [ 222.122194][ C1] cdc_wdm 5-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19 [ 222.950303][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1934'. [ 222.962737][T12938] team0: entered promiscuous mode [ 222.964605][T12938] team0: entered allmulticast mode [ 224.281239][ T40] kauditd_printk_skb: 10 callbacks suppressed [ 224.288389][ T40] audit: type=1400 audit(1751765912.689:840): avc: denied { setcurrent } for pid=12975 comm="syz.0.1948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 225.510928][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1960'. [ 225.514747][T13007] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1960'. [ 225.856657][T13017] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 227.572905][T13068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1986'. [ 228.133772][ T40] audit: type=1326 audit(1751765916.549:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.0.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52ab8e929 code=0x7ffc0000 [ 228.140968][ T40] audit: type=1326 audit(1751765916.549:842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.0.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52ab8e929 code=0x7ffc0000 [ 228.148305][ T40] audit: type=1326 audit(1751765916.549:843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.0.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7fd52ab8e929 code=0x7ffc0000 [ 228.155271][ T40] audit: type=1326 audit(1751765916.549:844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.0.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52ab8e929 code=0x7ffc0000 [ 228.162398][ T40] audit: type=1326 audit(1751765916.549:845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13087 comm="syz.0.1993" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd52ab8e929 code=0x7ffc0000 [ 228.568435][T13095] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 228.575334][T13095] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 229.061636][ T5748] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 229.212786][ T5748] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 229.216428][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 229.219902][ T5748] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 229.223791][ T5748] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 229.227817][ T5748] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 229.230682][ T5748] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 229.234945][ T5748] usb 7-1: config 0 descriptor?? [ 229.417035][T13128] syz.4.2009 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 229.653459][ T5748] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 229.903804][ T24] usb 7-1: USB disconnect, device number 30 [ 230.195187][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 230.198825][T13147] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2017'. [ 230.607254][T13154] kvm: pic: non byte write [ 230.742812][T13173] siw: device registration error -23 [ 231.003967][T13178] x_tables: ip_tables: osf match: only valid for protocol 6 [ 231.008730][T13178] Oops: general protection fault, probably for non-canonical address 0xdffffc000000005d: 0000 [#1] SMP KASAN NOPTI [ 231.013453][T13178] KASAN: null-ptr-deref in range [0x00000000000002e8-0x00000000000002ef] [ 231.017678][T13178] CPU: 3 UID: 0 PID: 13178 Comm: syz.2.2027 Not tainted 6.16.0-rc4-syzkaller-00308-ga79a588fc176 #0 PREEMPT(full) [ 231.022887][T13178] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 231.027109][T13178] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 231.029366][T13178] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 50 18 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 231.036904][T13178] RSP: 0018:ffffc900047ff330 EFLAGS: 00010203 [ 231.039322][T13178] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90025db3000 [ 231.042462][T13178] RDX: 000000000000005d RSI: ffffffff898f0830 RDI: 00000000000002ec [ 231.045601][T13178] RBP: 00000000000afff2 R08: 0000000000000005 R09: 0000000000000000 [ 231.048739][T13178] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce89320 [ 231.051875][T13178] R13: 0000000000000000 R14: ffffffff8ce89300 R15: ffff88802591c000 [ 231.055012][T13178] FS: 00007fe0e86486c0(0000) GS:ffff8880d6a15000(0000) knlGS:0000000000000000 [ 231.058543][T13178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.061172][T13178] CR2: 0000000000000000 CR3: 000000005296d000 CR4: 0000000000352ef0 [ 231.064321][T13178] Call Trace: [ 231.065682][T13178] [ 231.066885][T13178] qdisc_tree_reduce_backlog+0x224/0x500 [ 231.069168][T13178] sfq_init+0x88a/0x2540 [ 231.070893][T13178] ? __pfx_sfq_init+0x10/0x10 [ 231.072799][T13178] ? qdisc_alloc+0x94f/0xc50 [ 231.074667][T13178] ? __pfx_sfq_init+0x10/0x10 [ 231.076583][T13178] qdisc_create+0x457/0xfc0 [ 231.078420][T13178] tc_modify_qdisc+0x12bb/0x2130 [ 231.080429][T13178] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 231.082555][T13178] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 231.084684][T13178] rtnetlink_rcv_msg+0x3c9/0xe90 [ 231.086679][T13178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.088869][T13178] ? ref_tracker_free+0x37c/0x830 [ 231.090912][T13178] netlink_rcv_skb+0x158/0x420 [ 231.092854][T13178] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 231.095041][T13178] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 231.097167][T13178] ? netlink_deliver_tap+0x1ae/0xd30 [ 231.099303][T13178] netlink_unicast+0x53a/0x7f0 [ 231.101238][T13178] ? __pfx_netlink_unicast+0x10/0x10 [ 231.103368][T13178] netlink_sendmsg+0x8d1/0xdd0 [ 231.105303][T13178] ? __pfx_netlink_sendmsg+0x10/0x10 [ 231.107421][T13178] ____sys_sendmsg+0xa95/0xc70 [ 231.109369][T13178] ? copy_msghdr_from_user+0x10a/0x160 [ 231.111543][T13178] ? __pfx_____sys_sendmsg+0x10/0x10 [ 231.113660][T13178] ? __pfx_futex_wake_mark+0x10/0x10 [ 231.115769][T13178] ___sys_sendmsg+0x134/0x1d0 [ 231.117691][T13178] ? __pfx____sys_sendmsg+0x10/0x10 [ 231.119776][T13178] ? __lock_acquire+0x622/0x1c90 [ 231.121787][T13178] __sys_sendmsg+0x16d/0x220 [ 231.123656][T13178] ? __pfx___sys_sendmsg+0x10/0x10 [ 231.125724][T13178] ? __x64_sys_futex+0x1e0/0x4c0 [ 231.127719][T13178] do_syscall_64+0xcd/0x4c0 [ 231.129581][T13178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.131929][T13178] RIP: 0033:0x7fe0e778e929 [ 231.133731][T13178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.139827][ T40] audit: type=1400 audit(1751765919.549:846): avc: denied { read } for pid=5343 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 231.140424][T13178] RSP: 002b:00007fe0e8648038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 231.140440][T13178] RAX: ffffffffffffffda RBX: 00007fe0e79b6160 RCX: 00007fe0e778e929 [ 231.140448][T13178] RDX: 0000000000004000 RSI: 0000200000000040 RDI: 000000000000000d [ 231.140455][T13178] RBP: 00007fe0e7810b39 R08: 0000000000000000 R09: 0000000000000000 [ 231.140462][T13178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 231.140469][T13178] R13: 0000000000000000 R14: 00007fe0e79b6160 R15: 00007fffaecb4288 [ 231.140481][T13178] [ 231.140485][T13178] Modules linked in: [ 231.140527][T13178] ---[ end trace 0000000000000000 ]--- [ 231.140534][T13178] RIP: 0010:hfsc_qlen_notify+0x28/0x180 [ 231.140555][T13178] Code: 90 90 f3 0f 1e fa 41 54 55 53 48 89 f3 e8 50 18 2d f8 48 8d bb ec 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 08 [ 231.149014][ T40] audit: type=1400 audit(1751765919.549:847): avc: denied { search } for pid=5343 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.150111][T13178] RSP: 0018:ffffc900047ff330 EFLAGS: 00010203 [ 231.150124][T13178] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90025db3000 [ 231.150132][T13178] RDX: 000000000000005d RSI: ffffffff898f0830 RDI: 00000000000002ec [ 231.150139][T13178] RBP: 00000000000afff2 R08: 0000000000000005 R09: 0000000000000000 [ 231.150146][T13178] R10: 00000000000afff2 R11: 0000000000000001 R12: ffffffff8ce89320 [ 231.150153][T13178] R13: 0000000000000000 R14: ffffffff8ce89300 R15: ffff88802591c000 [ 231.150160][T13178] FS: 00007fe0e86486c0(0000) GS:ffff8880d6a15000(0000) knlGS:0000000000000000 [ 231.150182][T13178] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 231.150192][T13178] CR2: 0000000000000000 CR3: 000000005296d000 CR4: 0000000000352ef0 [ 231.150200][T13178] Kernel panic - not syncing: Fatal exception in interrupt [ 231.150871][T13178] Kernel Offset: disabled VM DIAGNOSIS: 01:38:38 Registers: info registers vcpu 0 CPU#0 RAX=000000000007ffff RBX=ffff888056e32940 RCX=ffffc9000ca61000 RDX=0000000000080000 RSI=ffffffff895d8fad RDI=0000000000000005 RBP=ffff888056e32adc RSP=ffffc90004017780 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000000 R11=ffff88806a53ab88 R12=0000000000000000 R13=ffff888056e32eb0 R14=ffff888056e32a28 R15=ffffc900040178f8 RIP=ffffffff81bc20d6 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c01300 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c01300 FS =0000 00007fe0e86696c0 ffffffff 00c00000 GS =0000 ffff8880d6715000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c423161 CR3=000000005296d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=3a810b1eb6134bdc DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5801811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5801811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5801811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5801811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5801811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5801811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5801985488 00007f5801985480 00007f5801985478 00007f5801985450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f58024ed100 00007f5801985440 00007f5801980004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5801985498 00007f5801985490 00007f5801985488 00007f5801985480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000001 RBX=ffff88801dec2440 RCX=ffffffff81c3f02f RDX=0000000000000000 RSI=ffffffff8c158760 RDI=ffffffff8189dde1 RBP=ffffc90000177c28 RSP=ffffc90000177be0 R8 =0000000000000000 R9 =0000000000000000 R10=ffffffff90a97557 R11=0000000000000001 R12=ffff88806a53a2c0 R13=ffff8880358a4880 R14=ffff8880267d0000 R15=ffff88806a53b130 RIP=ffffffff8189ddea RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6815000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007fe0e8668f98 CR3=000000005296d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fcffc200 Opmask01=000000000000ffff Opmask02=00000000ffffffff Opmask03=0000000010000000 Opmask04=0000000000000000 Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000001a4 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000001df8a 0000002c00000012 0004000000080024 0000000000280030 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00000000000007f3 0000001000000000 0000000000000000 0000000000000015 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0018420800030004 0890030a08000888 0322080008800306 0000016e00000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 8003000000000000 0000000000000000 000001ffffffffff ffffffdf0808e003 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00080008d8030008 0008d0030fffffff ffffff0408c00300 080008b803080800 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 08b0030072656c6c 616b7a797301ffff ffffffffffffeb08 02800302800408a0 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0395000000070000 0085000000070000 00850bfffff90000 0000000020000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0008000aa0030008 000a98032008000a 90030fffffffffff ff040a80030fffff ZMM25=d77f00fbd77f00fb d77f00fbd77f00fb d77f00fbd77f00fb d77f00fbd77f00fb d77f00fbd77f00fb d77f00fbd77f00fb d77f00fbd77f00fb d77f00fbd77f00fb ZMM26=f2c3b7cdf2c3b7cd f2c3b7cdf2c3b7cd f2c3b7cdf2c3b7cd f2c3b7cdf2c3b7cd f2c3b7cdf2c3b7cd f2c3b7cdf2c3b7cd f2c3b7cdf2c3b7cd f2c3b7cdf2c3b7cd ZMM27=00acac0500acac05 00acac0500acac05 00acac0500acac05 00acac0500acac05 00acac0500acac05 00acac0500acac05 00acac0500acac05 00acac0500acac05 ZMM28=000000100000000f 0000000e0000000d 0000000c0000000b 0000000a00000009 0000000800000007 0000000600000005 0000000400000003 0000000200000001 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=4909000049090000 4909000049090000 4909000049090000 4909000049090000 4909000049090000 4909000049090000 4909000049090000 4909000049090000 info registers vcpu 2 CPU#2 RAX=00000000001b6f6c RBX=0000000000000002 RCX=ffffffff8b884c69 RDX=ffffed100d4c6646 RSI=ffffffff8c158760 RDI=ffffffff8191fc61 RBP=ffffed1003bd8910 RSP=ffffc90000187df8 R8 =0000000000000000 R9 =ffffed100d4c6645 R10=ffff88806a63322b R11=0000000000000001 R12=0000000000000002 R13=ffff88801dec4880 R14=ffffffff90a97550 R15=0000000000000000 RIP=ffffffff8b8837cf RFL=00000286 [--S--P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d6915000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c39d53d CR3=0000000033ddc000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000006f6c ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0000000b000c000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff855bee55 RDI=ffffffff9b0c52e0 RBP=ffffffff9b0c52a0 RSP=ffffc900047feca0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=552033203a555043 R12=0000000000000000 R13=0000000000000037 R14=ffffffff9b0c52a0 R15=ffffffff855bedf0 RIP=ffffffff855bee7f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007fe0e86486c0 ffffffff 00c00000 GS =0000 ffff8880d6a15000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=0000000000000000 CR3=000000005296d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000000 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811b12 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811b1f ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811b19 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811b2d ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811bb3 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7811c91 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7985488 00007fe0e7985480 00007fe0e7985478 00007fe0e7985450 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e84ed100 00007fe0e7985440 00007fe0e7985458 00007fe0e79854a0 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fe0e7985498 00007fe0e7985490 00007fe0e7985488 00007fe0e7985480 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000