last executing test programs: 18.864564268s ago: executing program 3 (id=263): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x30, 0x10, 0x403, 0x70bd27, 0x3, {0x0, 0x0, 0x0, 0x0, 0x90446}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x7b6b}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000600}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x8008, 0x4408}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 18.773261108s ago: executing program 3 (id=264): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x5, 0x69, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x8}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x4000000}, 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x121) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8, &(0x7f0000000080)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0/file1\x00', 0x700, 0x186) openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x111000, 0x0) 18.711336395s ago: executing program 3 (id=268): openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x80, 0x0) 18.64454206s ago: executing program 3 (id=269): r0 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{0x0}], 0x1}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) close(0x3) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r2, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='trace/events/sched/sched_switch/filter\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='prev_state.function ~', 0x15) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000440)=@newae={0x158, 0x1e, 0x6, 0x70bd2b, 0x25dfdbfe, {{@in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0x4d2, 0x6, 0x32}, @in=@remote, 0x1, 0x3502}, [@migrate={0xe8, 0x11, [{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast2, @in=@remote, 0xff, 0x1, 0x0, 0x3507, 0x2, 0xa}, {@in6=@dev={0xfe, 0x80, '\x00', 0x26}, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x3c, 0x4, 0x0, 0x3500, 0x2, 0x2}, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0xf}, 0x32, 0x1, 0x0, 0x0, 0x2, 0xa}]}, @srcaddr={0x14, 0xd, @in6=@private1={0xfc, 0x1, '\x00', 0x1}}, @sec_ctx={0x13, 0x8, {0xf, 0x8, 0x1, 0x81, 0x7, "e804401a86b4cb"}}, @sa_dir={0x5, 0x21, 0x3}]}, 0x158}}, 0x8811) recvmsg(r0, &(0x7f0000001d00)={&(0x7f0000000240)=@generic, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000340)=""/150, 0x96}, {&(0x7f00000005c0)=""/149, 0x95}, {&(0x7f0000000680)=""/239, 0xef}, {&(0x7f0000000b80)=""/4096, 0x1000}, {&(0x7f0000001b80)=""/78, 0x4e}, {&(0x7f0000001c00)=""/106, 0x6a}], 0x6}, 0x10040) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$setregs(0xd, r6, 0x2, 0x0) ptrace$cont(0x21, r6, 0x80000001, 0x4) sendmsg$nl_xfrm(r1, 0x0, 0x0) 17.783722541s ago: executing program 3 (id=287): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(r0) syz_usb_connect(0x2, 0x36, &(0x7f0000000200)=ANY=[], 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x0, 0x101c80) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)) syz_open_dev$sndpcmp(&(0x7f0000000340), 0x0, 0x0) close(r2) r4 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r4, 0x65, 0x7, &(0x7f00000001c0)=0x8, 0x4) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f00000003c0)=0x1, 0x4) fsopen(&(0x7f0000000100)='configfs\x00', 0x0) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000240), &(0x7f00000002c0)=0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) r6 = memfd_create(&(0x7f0000000040)='rootmode', 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x3fc, 0x0, 0xd2}, 0x9c) bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback, 0x6}, 0x1c) r8 = memfd_create(&(0x7f0000000540)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1[\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\x00\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0\xber\xa6\xec\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\v)\x06B\xf0\xed\x91 )y\xb4\xba\xba\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\x13]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\xb8\xfa\xbbb\xb1\x03\xb5pe,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0\b\x00\x00\x00\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x05x\x1a\x90\xf4\x03\xe7\xe9\xa9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\r\xcd\xf0\xad\x97uh\xb2\xb8\x17S~R\x19\xa9\xc3x\xb8l\xed\xbdz#6\x9f\x94\xba[xC\xed\x12}f\x0f\xc5', 0x3) fcntl$addseals(r8, 0x409, 0xe) fallocate(r8, 0x0, 0x0, 0x400001) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f0000000340)={0x0, 0x4, 0x8001, 0x3}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000001000100020000000a00000001000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000000240), &(0x7f0000001780), 0x8, r9}, 0x38) sendto$inet6(r7, &(0x7f0000847fff)='X', 0x1, 0x10000864, &(0x7f000005ffe4)={0xa, 0x4e03, 0x0, @private2}, 0x1c) readv(r7, &(0x7f0000001640)=[{&(0x7f0000000640)=""/4096, 0x1000}], 0x1) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x0) 16.923295774s ago: executing program 3 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x4, 0x401, 0x13, r3, 0xffffffffffffffff, 0x1000, '\x00', 0x6, 0x7, 0x0, 0x2, {0x40, 0x9}, {0x4000000000006, 0xfffffffa}, {0x2000001, 0xc}, {0x2a, 0x9fc}, 0x1, 0x6, 0x1, 0x7}}}}) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x2810901, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07}}, 0x50) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0x3000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x9, 0x2, 0x42, 0x9, 0x7f, 0x3, 0x5, 0x5, 0x3}, {0x54000, 0x4000, 0xe, 0x3, 0x1, 0x9, 0x7, 0x60, 0x0, 0xa7, 0x8, 0x5}, {0x8000000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x60000, 0x70000, 0xc, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xfec00000, 0x8, 0xa0, 0xb1, 0x8, 0x7, 0x9, 0x7, 0x13, 0x8, 0xf}, {0x1111d004, 0x1, 0xa, 0x5, 0x3, 0x5, 0x40, 0x3, 0x3, 0x84, 0x3, 0x79}, {0xffffffff, 0x5000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x1000, 0x2f}, {0x3000, 0xfffd}, 0xc0000031, 0x0, 0x6000, 0x2024, 0x7, 0x0, 0x3000, [0x7, 0x4, 0x60, 0x4132]}) close_range(r4, 0xffffffffffffffff, 0x0) 16.898181145s ago: executing program 32 (id=300): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000008340)="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", 0x2000, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x130, 0x0, 0x2, {0x0, 0x3, 0x0, '\x00', {0x7ff, 0x4, 0x401, 0x13, r3, 0xffffffffffffffff, 0x1000, '\x00', 0x6, 0x7, 0x0, 0x2, {0x40, 0x9}, {0x4000000000006, 0xfffffffa}, {0x2000001, 0xc}, {0x2a, 0x9fc}, 0x1, 0x6, 0x1, 0x7}}}}) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x2810901, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc07}}, 0x50) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000880)={{0x80e3000, 0x3000, 0x8, 0xd, 0x3, 0x0, 0x45, 0x5, 0x0, 0x2e, 0x19}, {0x5000, 0x2, 0x9, 0x2, 0x42, 0x9, 0x7f, 0x3, 0x5, 0x5, 0x3}, {0x54000, 0x4000, 0xe, 0x3, 0x1, 0x9, 0x7, 0x60, 0x0, 0xa7, 0x8, 0x5}, {0x8000000, 0x10000, 0xa, 0x6, 0x4, 0x2, 0x1, 0xf8, 0x9, 0x9, 0xf}, {0x60000, 0x70000, 0xc, 0x2, 0x15, 0x6, 0xab, 0x7c, 0x1, 0x83, 0xf7, 0x6}, {0x1000, 0xfec00000, 0x8, 0xa0, 0xb1, 0x8, 0x7, 0x9, 0x7, 0x13, 0x8, 0xf}, {0x1111d004, 0x1, 0xa, 0x5, 0x3, 0x5, 0x40, 0x3, 0x3, 0x84, 0x3, 0x79}, {0xffffffff, 0x5000, 0xc, 0x5, 0xf, 0x7, 0x1, 0xe2, 0x2, 0x8, 0xf0, 0x7}, {0x1000, 0x2f}, {0x3000, 0xfffd}, 0xc0000031, 0x0, 0x6000, 0x2024, 0x7, 0x0, 0x3000, [0x7, 0x4, 0x60, 0x4132]}) close_range(r4, 0xffffffffffffffff, 0x0) 16.222781581s ago: executing program 1 (id=315): r0 = openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10d103, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0xfffff34, 0x0, [{0xf88e470f, 0xed}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000000000)={0xf0f027, 0x1}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000800000000000000", @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400000004000000000000000000000000000000000000000000007a"], 0x50) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000740)=ANY=[@ANYRES8=r0, @ANYRES32=r3, @ANYBLOB="0d8e91638b007d9cb9000000", @ANYBLOB="5f3bc01d5108500038b0349caa74b09c2470342a8e3391b78a7d19d0da615b29f8146abd0e35c21ff3033caf5e777bb34e5b9330e269c21e034d3e10b85f8cc48204af0c0000004f0b75db7c8801793bd375cefc10cd78f229b4ec8acfe6a0b2eee867f0eb4af3ccaa038886fd9e498acceab3a9faa3008d5216e6a27c7b1afb223ea417e14d187d014b570f748b610767813e1f642d01e7ddbebab52754b8543d9cf340cc7259c68762abf2182477c32c6f2874ca7f27a5252fe8f80ca80568caf0974ea7bb27b80ffce3ad14526400bf037e4ffbf9a103c4706cc9d288e42ea69729b8d94ea9447a4b1e7f74", @ANYBLOB="a37e29ca41b75b81dfa30a559d53c35cce60b356371c21bb6b09390def16964adc274464da12f0c649c275844719d09df79ec814ad5725b31a7fa373f8c85b314732b75ecea06fca46ca7fff89f964e36d54a11f65e250f39a3da13442de32d4e0a8a48d62b092cad800819873e5aabf23d0182846551fda8d71c872d793d38812fbcca4b26e5b750782692c6a12e52edba90ddb289321bde4140614b4e2afafad769c735e36b91ffede5538", @ANYRES64=r0], 0x20) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x71, 0x2, 0x2, 0x2d7, 0x8000000000000000, 0x8000000000000000, 0x5, 0x0, 0x4, 0x401, 0x2, 0x5, 0x8d], 0xeeee8000, 0x284e97}) r5 = io_uring_setup(0x70c1, &(0x7f0000000180)={0x0, 0x2c41, 0x2, 0x20002, 0x2}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000000b00010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f0000000380)) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000800000000020000002c0004802800018011000100666c6f775f6f66666c6f616400000000100002800900010073797a30000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x2000094}, 0x80) close_range(r5, 0xffffffffffffffff, 0x0) socket(0x25, 0x0, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x4a282, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000180)={0x28, 0x0, 0x2711, @local}, 0x10) listen(r8, 0x0) accept4(r8, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r7, 0x540f, &(0x7f0000000100)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r11 = epoll_create1(0x0) kcmp$KCMP_EPOLL_TFD(r9, r10, 0x7, r7, &(0x7f0000000340)={r11, r2, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.092344495s ago: executing program 1 (id=318): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) read(r5, &(0x7f0000000440)=""/247, 0x26) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) tkill(r4, 0x7) sendmmsg$unix(r3, &(0x7f00000bd000), 0x400000000000247, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) close(r2) recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r6, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2404, 0x9}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x4) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) gettid() (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x4) (async) read(r5, &(0x7f0000000440)=""/247, 0x26) (async) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000040)={0x31, @tick=0xfffff797, 0x0, {0xfd, 0x2}, 0x0, 0x0, 0x4}) (async) tkill(r4, 0x7) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x400000000000247, 0x0) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000ec0)=[{{&(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) (async) close(r2) (async) recvmmsg(r1, &(0x7f00000034c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) (async) close_range(r6, 0xffffffffffffffff, 0x0) (async) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x40d, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2404, 0x9}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) (async) 15.834693733s ago: executing program 1 (id=320): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000fff6ffffffffff7f000000000000000000000000000000000400000000000000ffffffffffffffff070000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff00000000010006"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x3, 0x80000000, @rand_addr=' \x01\x00', 0x9}, 0x1c) (async) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)=ANY=[@ANYBLOB="3800000010000108fdffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000008001b000000000010001a800c002d80080001"], 0x38}}, 0x0) (async, rerun: 64) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) (async, rerun: 64) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 15.832674074s ago: executing program 1 (id=321): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x154}}, 0x0) 15.764551272s ago: executing program 1 (id=322): r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000005180)={0x2020}, 0x2020) ioctl$SNDCTL_TMR_TIMEBASE(r0, 0xc0045401, &(0x7f0000000000)=0x239) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000ac0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'vlan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000780)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100d2f2d16eb32902ce2f0000000c00018008000100", @ANYRES32=r4], 0x20}}, 0x0) 15.693773211s ago: executing program 1 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a21600", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00']}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4880) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x175e40, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) write$P9_RVERSION(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="15000008000000c2c1bd0700000000000000d4fed1f359373ec4c71eb78e02090b419e746dbfc3b6272cf424abbe35021ccbb58c4b91b3f44fecc1f3372ac45032f0fafa2d47deff143aaa4be982108bef541d3c1c8057cf3fe44b7494b4737ef1e37c48613194dc7f31c3bec83a0de05ed8b6571ef18859ae8716282e335bfd12fa5251c59ed0733039b091a6a64220ba3a27f87f5429212c", @ANYBLOB="5384d609a1bf59e893d0ba8df1e4d0bfeb37ab98faa3253ed677e3280b28a930d7a59a34e5c4d5f9376b4691a1eac48a755ddda59777b34e1275a413f2b6d7bedb185d86d44d28"], 0x15) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002500)={0x4, 0x0, [{0xf001, 0xef, &(0x7f0000000340)=""/239}, {0xf000, 0x1000, &(0x7f0000001380)=""/4096}, {0xfec00000, 0xec, &(0x7f0000002380)=""/236}, {0xf000, 0x5b, &(0x7f0000002480)=""/91}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002500)={0x4, 0x0, [{0xf001, 0xef, &(0x7f0000000340)=""/239}, {0xf000, 0x1000, &(0x7f0000001380)=""/4096}, {0xfec00000, 0xec, &(0x7f0000002380)=""/236}, {0xf000, 0x5b, &(0x7f0000002480)=""/91}]}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/fs/bcache/register\x00', 0x404040, 0x0) write(r9, &(0x7f0000000300)='/dev/loop0', 0xa) 6.652588173s ago: executing program 4 (id=425): socket(0x40000000015, 0x5, 0x0) madvise(&(0x7f0000000000/0x1000)=nil, 0x1000, 0xc) 6.652274525s ago: executing program 4 (id=426): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0xa, 0x3, 0x10000) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d0007012bbd7000fedbdf25047c0000080001800400dd800c000380080001"], 0x28}}, 0x4008030) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0xfffffed3) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f0000000280)={@local, 0x2}) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) close_range(r0, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket(0x28, 0x5, 0x0) (async) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) (async) listen(r1, 0x0) (async) socket(0xa, 0x3, 0x10000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002d0007012bbd7000fedbdf25047c0000080001800400dd800c000380080001"], 0x28}}, 0x4008030) (async) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) (async) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0xfffffed3) (async) openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) (async) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000) (async) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@my=0x0}) (async) ioctl$IOCTL_VMCI_CTX_REMOVE_NOTIFICATION(r4, 0x7b0, &(0x7f0000000280)={@local, 0x2}) (async) sendmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 6.572696866s ago: executing program 4 (id=428): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0x40, 0x0, 0x2, 0x301, 0x0, 0x0, {0x2, 0x0, 0x10}, [@CTA_EXPECT_NAT={0x10, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x4}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_EXPECT_NAT={0x1c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @private=0xa010101}, {0x8, 0x2, @local}}}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40810}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000004, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0xd50, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67b2, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x5, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0xfffffff7, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='/dev/loop0,65', 0xd) (async) write(r2, &(0x7f0000000700)='/dev/loop0,65', 0xd) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x4}]}) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) (async) ioctl$TUNGETVNETLE(r4, 0x40107446, &(0x7f0000000180)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r6, 0x4004743d, 0x110e22fff6) write$cgroup_type(r6, &(0x7f0000000280), 0x9) (async) write$cgroup_type(r6, &(0x7f0000000280), 0x9) r7 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000100)={0x5, 0x0, [{0x2fc, 0x0, 0x81}, {0xbf3, 0x0, 0xa56}, {0x81d, 0x0, 0x4}, {0xaa2, 0x0, 0x7}, {0xb46, 0x0, 0xfa}]}) (async) ioctl$KVM_GET_MSRS_cpu(r7, 0xc008ae88, &(0x7f0000000100)={0x5, 0x0, [{0x2fc, 0x0, 0x81}, {0xbf3, 0x0, 0xa56}, {0x81d, 0x0, 0x4}, {0xaa2, 0x0, 0x7}, {0xb46, 0x0, 0xfa}]}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 6.464086614s ago: executing program 4 (id=430): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000000), 0x44080, &(0x7f0000000380)={[], [{@subj_type={'subj_type', 0x3d, 'metacopy=off'}}], 0x2c}) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSBRK(r0, 0x5427) (async) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) (async) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r3 = socket(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ipvlan1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bc26, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000040)={0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r10, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newtfilter={0x24, 0x11, 0x1, 0x691522eb, 0x0, {0x0, 0x0, 0x74, r8, {0x10, 0x7}, {}, {0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x80}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x6}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4044000}, 0x8000) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r2, 0xc01064c7, &(0x7f0000000100)={0x0, 0x0, 0x0}) (async) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x2) (async) getdents64(r1, &(0x7f0000000300)=""/98, 0x62) 6.38457997s ago: executing program 4 (id=431): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregset(0x4204, r0, 0x4, &(0x7f0000000040)={0x0}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/graphics/fbcon/rotate\x00', 0x1, 0x0) write(r4, &(0x7f0000000300)='1\x00', 0x2) ioctl$TIOCL_UNBLANKSCREEN(r3, 0x541c, &(0x7f0000000400)) r5 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r5, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) r6 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x3) syz_clone(0x88200, 0x0, 0x0, 0x0, 0x0, 0x0) execveat(r6, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000000500)={0x2, {0x2, 0x0, 0x0, 0xa, 0xa}}) write(r3, &(0x7f0000000600)='hello\n\x00', 0x6) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="141b00000102010100000000001f000005000005"], 0x14}, 0x1, 0x0, 0x0, 0x4811}, 0x0) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x6c, r7, 0xa05, 0x70bd2a, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffff80}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x1b1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfffffffa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20040014}, 0x24040000) socket$netlink(0x10, 0x3, 0x8) 6.256224742s ago: executing program 4 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newtaction={0x74, 0x30, 0xb, 0x5, 0x0, {}, [{0x60, 0x1, [@m_ct={0x5c, 0x1, 0x0, 0x0, {{0x7}, {0x34, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x80000001, 0x0, 0x3, 0x0, 0x400}}, @TCA_CT_ACTION={0x6, 0x3, 0x19}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @rand_addr=0x64010101}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8890}, 0x40) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'erspan0\x00', &(0x7f0000000240)=@ethtool_coalesce={0xe, 0x5ed4, 0x7, 0x5, 0x2, 0x2, 0x10000, 0x40, 0x3, 0x4, 0x80000a, 0xd59, 0x9, 0x9, 0x0, 0x2, 0x2, 0x4, 0x10000, 0x1000, 0x0, 0x7, 0x7}}) (async) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000800)={0xffffffffffffffff, 0x0, 0x25, 0x12, @void}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}, 0x1c) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0xeed7e89f6334d838}) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0) poll(&(0x7f00000002c0)=[{r5, 0x80ad}], 0x1, 0x2) (async) exit(0xffff) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x0}) (async) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000240)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) (async) read$FUSE(r3, &(0x7f0000008080)={0x2020}, 0x2020) (async) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) (async) r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) mount$9p_virtio(&(0x7f0000000100), &(0x7f00000000c0)='.\x00', &(0x7f0000000000), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=virtio,dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c001e3a87a787d434f592a16ec10b8689b5149cb11cfe73f4f0c2b6039371bbfb8383a4feaca099e7534fac620bf43d7f41e5cb107c4acaa91f2caaa69feedabf7d6fb332a6a72fee47006c5138f1b2e4ec31b89ce8b547b39c2e59f98198462a41dc18cd9f04090741668b55e4307a3ea4378cd9f80726c5eb701dc4e2c8a8039753a4b3342e6b3d91b0ccc225056afd84407051028497dd793e8c791ca08326a209a124c797fffb5b0b743d07dc7f3b72aee8f9804ba193638713bc72f5183afefd43cd8ebf0008eb5dff9bef4350b7f4"]) (async) r7 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') (async, rerun: 64) mkdirat(r3, &(0x7f0000000340)='./dev\x00', 0x21) (rerun: 64) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) (async, rerun: 64) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) (async, rerun: 64) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$FUSE_INIT(r8, &(0x7f00000024c0)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x15dc, 0x10123881, 0x9, 0x8, 0x3, 0x5, 0x0, 0x0, 0x8, 0x8006}}, 0x50) (async, rerun: 64) read$FUSE(r7, &(0x7f0000002540)={0x2020}, 0x2020) (async, rerun: 64) write(r6, &(0x7f0000000100)="436f5e29b6bb500e7f6b8c1e3b2ea7da76a6236f14a4ec74161e4d3cc2436ec474b691ebbb49818f43a6a580924d6f1d068c7f3827e3d4ae60aa3e6c927ae86dc969b7053a2d8c8e9e93d7d147b0bd687f371f96c4a9f262d4f945c14e0c4773368aece8138582e6fe3dc12349c04ca1bae7f2c7df319fb4db874a6b24e40882", 0x80) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010004000000fedbdf250e00000008000300", @ANYRES32=0x0, @ANYBLOB="0c00990100000000fdffffff14000e001c", @ANYRES16], 0x3c}}, 0x10) 1.353367949s ago: executing program 0 (id=485): r0 = inotify_init() r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) listen(r1, 0x401) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000540)="b0", 0x1a000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x7, @loopback, 0x4}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCOUTQNSD(r3, 0x8905, &(0x7f0000000040)) 1.262831548s ago: executing program 0 (id=488): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x3ff}, 0x1c) (async) sendto$inet6(r0, &(0x7f00000001c0)='O', 0x1, 0x4000c01, &(0x7f0000000280)={0xa, 0x400, 0xfffffffe, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c) (async) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000000)={0x8, '\x00', {'bridge0\x00'}, 0x2ca}) (async) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x137b, 0x30802}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x5}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x5}]}, 0x30}}, 0x40800) 1.199348979s ago: executing program 0 (id=490): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0x10, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x7, 0x0, 0x5, 0x9, 0x0, 0x0, 0xfc7cce807af2adb8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x8}, 0x94) write(r0, &(0x7f0000000140)="44ee189f845d9852dd8920ede61cf1eaef06fd682bf6b9ceb38194eb09e6626249197539f5", 0x25) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (rerun: 64) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c2f2, 0xffffffffffffffff, 0x0) (async, rerun: 32) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) (rerun: 32) write$binfmt_script(r4, &(0x7f0000000000), 0x208e24b) (async, rerun: 64) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x28011, r4, 0x0) (rerun: 64) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), r1) sendmsg$TIPC_CMD_SET_NETID(r4, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x24, r5, 0x400, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x200008d0}, 0x800) (async) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000240), r1) sendmsg$BATADV_CMD_TP_METER_CANCEL(r7, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x34, r8, 0x800, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x2084}, 0x800) r9 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) (async) ioctl$KVM_RUN(r10, 0xae80, 0x0) (async) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x18, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000001c40)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfdbff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24044811}, 0x0) (async, rerun: 32) r11 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$inet(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.124421799s ago: executing program 0 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) write(r0, &(0x7f0000000200)='lazy', 0x4) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'sit0\x00', &(0x7f0000000280)={'gre0\x00', 0x0, 0x20, 0x1, 0x5, 0xc54, {{0x22, 0x4, 0x3, 0x3d, 0x88, 0x67, 0x0, 0x3, 0x29, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@cipso={0x86, 0x14, 0x3, [{0x2, 0xc, "1d3b616d03527740e994"}, {0x2, 0x2}]}, @lsrr={0x83, 0x7, 0x36, [@rand_addr=0x64010102]}, @cipso={0x86, 0x56, 0x0, [{0x6, 0xc, "e911651b7f8d43b34304"}, {0x1, 0x3, "d7"}, {0x0, 0x6, "6ef40db0"}, {0x2, 0x7, "bb94315680"}, {0x0, 0x11, "86177c7aa64163999ab48872d7c0c5"}, {0x1, 0xd, "4cdec428a0ed34a70de214"}, {0x6, 0x8, "3d13f2166beb"}, {0x5, 0xe, "f7a25e1fa68f8e92a618e503"}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000400)={'gretap0\x00', &(0x7f0000000380)={'ip_vti0\x00', 0x0, 0x8, 0x40, 0x8, 0x1bedc64d, {{0x13, 0x4, 0x1, 0x38, 0x4c, 0x66, 0x0, 0x1, 0x29, 0x0, @empty, @loopback, {[@ra={0x94, 0x4, 0x1}, @ssrr={0x89, 0xf, 0x26, [@empty, @loopback, @multicast2]}, @generic={0x83, 0x9, "c6e39fd968bb28"}, @cipso={0x86, 0x14, 0x3, [{0x6, 0xb, "bcaf5c06ba4c399ad1"}, {0x7, 0x3, "d7"}]}, @rr={0x7, 0x7, 0xa4, [@empty]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0}, &(0x7f0000000600)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'sit0\x00', &(0x7f0000000640)={'erspan0\x00', 0x0, 0x8000, 0x40, 0x3, 0x1fddc5b3, {{0x1f, 0x4, 0x0, 0x24, 0x7c, 0x64, 0x0, 0x2, 0x2, 0x0, @loopback, @multicast1, {[@timestamp_addr={0x44, 0x54, 0x94, 0x1, 0xb, [{@rand_addr=0x64010102, 0x10}, {@rand_addr=0x64010100, 0x6}, {@private=0xa010102}, {@broadcast, 0xc82}, {@empty, 0x5}, {@broadcast, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}, {@remote, 0xd6}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xb}, {@empty, 0x200}]}, @end, @generic={0x83, 0x10, "6d27a6eec0b8cb0dcc586f26bed1"}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f00000007c0)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000001bc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001b80)={&(0x7f0000000800)={0x1344, r1, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@ETHTOOL_A_WOL_SOPASS={0x1004, 0x3, "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"}, @ETHTOOL_A_WOL_SOPASS={0xba, 0x3, "147e48292c9972b1fcfc6e692c32fee42cf7ef53e6d447711f7313a4d6f08a86f06e8fbade92e5ac2345e3f54807d155b97149b8faa87877434815fdb0b1315d2ac7d2212544ce759a281218a012b8f295d702c4846c7f4820407065f01178d49cbbc3941543a7cb5800b61cf796d6eb7262affa487fec60d66c32b8191f047aaa14037848e9b8663599fb8103b62a9d75ce02449ba43f81dffdf1640ac4ce132ae177eb38243cc2877ac8133dcd043dc0d25d4e30ea"}, @ETHTOOL_A_WOL_SOPASS={0xae, 0x3, "6bdc93d84125d47cb7031b461d3a50e60cc65059493e4145a5f7903a086b2d7b1869e60ed4b7a95bd82f01151c9506bd25c10834497f5c3b07dfc2ec73a388faed51d6d2d8a94ded7c4b0b63d910976ca478d1a8d2fcc47df2c5071630929229bf78ba7e71f50315a1f98e82cbb982e8aea9887a5fc9ae2b75b7790b74c454eb68c9baba16850b019c02eb9db4a31c235e9429bf0cfd9f3faf04591c28c0f6e6ccb56443a578c29cc9c7"}, @ETHTOOL_A_WOL_SOPASS={0x8b, 0x3, "f695ffec8e8183db1ea654fb059e977f2577b42c0b6c1c5adcd1eb5102aa6930f8701a33a09a13d1d5ee5d8483ae7e6f8545142e8e85df3b00633d1838d5ef3dd193596d2e33d82f95c29111afff87f76dc8d0a137a2530932ec2e6a389c75d63cf46059f09468912bd145f29116b8de06b80ab98613e40f65f5a7198a169c7c958670d210879f"}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_WOL_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @ETHTOOL_A_WOL_HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6erspan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x1344}, 0x1, 0x0, 0x0, 0x8041}, 0x44084) setns(0xc9, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r11) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(r11, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, r12, 0x1, 0x70bd28, 0x25dfdbfa, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./my_configfs/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/midi2.usb0/ep.0/block.0/num_groups\x00', 0x103040, 0x0) 1.118762693s ago: executing program 0 (id=493): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newqdisc={0x150, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {0x0, 0x1}, {0xffff, 0xfff2}}, [@qdisc_kind_options=@q_red={{0x8}, {0x124, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x1000, 0x10, 0x80, 0x8, 0x8, 0x8}}, @TCA_RED_STAB={0x104}, @TCA_RED_EARLY_DROP_BLOCK={0x8, 0x5, 0x1}]}}]}, 0x150}}, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x1bd, @empty}, 0x10) listen(r1, 0x6) r3 = accept(r1, 0x0, 0x0) write(r3, &(0x7f0000000240)="00000080fe534d42400000008c010000000001000100020000000000000000000000000000000000000000000000009e00000000000000000000000000000000000000004100010000030000800000000000000000000041310000000000000000000000100000001000000010000000000000860000000000000000000080000000000013ce19e4bb06b06cce8eea96abaf6ca585ff735dcb2e", 0x9a) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0xffffff5d, 0x10}, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r5 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_TRY_FMT(r5, 0xc0d05640, &(0x7f0000000800)={0xa, @pix_mp={0x0, 0x0, 0x0, 0x0, 0x0, [{0x4}, {}, {}, {0xe5, 0xfffffffc}, {}, {}, {0x0, 0x8c7}], 0xfc, 0xf2, 0x7}}) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) write$sysctl(r6, &(0x7f0000000000)='2\x00', 0x2) r7 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_RESTRICTIONS(r7, 0xb, &(0x7f0000000340), 0x0) ioctl$PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r7, 0xc, 0x0, 0x0) io_uring_enter(r7, 0x2e6f, 0x8555, 0x2, 0x0, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140400001000e1ffffffffffffff00000000000a14000000000a0102000000000000000001ffffffff000000000a01080000000000000000010000000900030073797a3200000000040004800900010073797a3000000000140000003004e2b410142a718d79b5760fbdf61e1100010000000000000000000000000a"], 0x6c}, 0x1, 0x0, 0x0, 0x40046}, 0x0) r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x4010, r8, 0xdad59000) 872.967801ms ago: executing program 2 (id=500): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) setrlimit(0x7, &(0x7f0000000400)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080)=r2, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000140)="66baf80cb8044fdc87efed660f388059e0b805000000b91e4200000f01c10f20c035000000200f22c0f20fa20f01cb36263e660f381efc660f7c150c000000b805000000b9210000000f01c1c4e17929d8", 0xfffffffffffffed0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r5, r5) r6 = syz_open_procfs(r5, &(0x7f0000000240)='net/hci\x00') r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r8, &(0x7f0000000240)='0000:00:1d.7', 0xc) r9 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r9, &(0x7f00000002c0)='0000:00:1d.7', 0xc) r10 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0) r12 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r12, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r13, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f00008c9000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x48, 0x0, 0x0) 764.492413ms ago: executing program 2 (id=501): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$SIOCSIFHWADDR(r0, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) (async) ioctl$TUNSETLINK(r1, 0x400454cd, 0x308) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) (async) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000ffdbdf25010000004c0002803c00018008000100040000000800010002000000080001000600000008000100070000000800010006000000080001000700000008000100080000000c0001800800010005000000100002800c0001"], 0x70}, 0x1, 0x0, 0x0, 0x40005}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000340)=ANY=[@ANYBLOB="1801000030"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r3) (async) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x380, 0xffffffff, 0x210, 0x210, 0x210, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xc0, 0xe8, 0x0, {0x100000000000000}, [@common=@inet=@socket2={{0x28}, 0x2}, @common=@ttl={{0x28}, {0x2, 0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xc8, 0x128, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e20], [0x4e23, 0x4e21], 0x5, 0x10, 0x1a7, 0x1}}, @common=@icmp={{0x28}, {0x0, "54e9", 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x2, 0x4, 0x6, 0x2, 0x4, 0x6], 0x6, 0x4}, {0x1, [0x1, 0x2, 0x1, 0x1, 0x2, 0x4], 0x3, 0x7}}}}, {{@uncond, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@unspec=@cpu={{0x28}, {0xff}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x8, 0x5}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3e0) 642.469915ms ago: executing program 33 (id=323): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "a21600", 0x30, 0x2b, 0x0, @remote, @local, {[@routing={0x3a, 0x2, 0x2, 0x1, 0x0, [@rand_addr=' \x01\x00']}], {0x4e22, 0x0, 0x18, 0x0, @wg=@data}}}}}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x4880) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = dup(r2) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}], 0x10) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e24, @remote}], 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e23, 0xdb, @empty, 0x8}}, 0xffb, 0x203, 0xffff18b6, 0x6, 0x330, 0x80000005, 0xdb}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90) sendmsg$inet6(r3, &(0x7f0000000540)={&(0x7f00000000c0)={0xa, 0x4e24, 0x8004, @loopback, 0x7fff}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)="f0", 0x1}], 0x1}, 0x400d4) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e24, 0x42, @loopback, 0x8000}}, 0xabb6, 0x67, 0xa4f, 0xc4, 0xa, 0x0, 0xa9}, 0x9c) r4 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x175e40, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) r8 = fsopen(&(0x7f0000000080)='omfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r8, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010001fff000000008100000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f0000200012800b00010067656e657665000010000280060005004e24000004000e0008000a00", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x40000) write$P9_RVERSION(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="15000008000000c2c1bd0700000000000000d4fed1f359373ec4c71eb78e02090b419e746dbfc3b6272cf424abbe35021ccbb58c4b91b3f44fecc1f3372ac45032f0fafa2d47deff143aaa4be982108bef541d3c1c8057cf3fe44b7494b4737ef1e37c48613194dc7f31c3bec83a0de05ed8b6571ef18859ae8716282e335bfd12fa5251c59ed0733039b091a6a64220ba3a27f87f5429212c", @ANYBLOB="5384d609a1bf59e893d0ba8df1e4d0bfeb37ab98faa3253ed677e3280b28a930d7a59a34e5c4d5f9376b4691a1eac48a755ddda59777b34e1275a413f2b6d7bedb185d86d44d28"], 0x15) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002500)={0x4, 0x0, [{0xf001, 0xef, &(0x7f0000000340)=""/239}, {0xf000, 0x1000, &(0x7f0000001380)=""/4096}, {0xfec00000, 0xec, &(0x7f0000002380)=""/236}, {0xf000, 0x5b, &(0x7f0000002480)=""/91}]}) (async) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000002500)={0x4, 0x0, [{0xf001, 0xef, &(0x7f0000000340)=""/239}, {0xf000, 0x1000, &(0x7f0000001380)=""/4096}, {0xfec00000, 0xec, &(0x7f0000002380)=""/236}, {0xf000, 0x5b, &(0x7f0000002480)=""/91}]}) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) (async) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/fs/bcache/register\x00', 0x404040, 0x0) write(r9, &(0x7f0000000300)='/dev/loop0', 0xa) 591.840982ms ago: executing program 2 (id=503): mmap(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x1, 0x20031, 0xffffffffffffffff, 0xb9dde000) mbind(&(0x7f0000ff8000/0x8000)=nil, 0x8000, 0x8001, &(0x7f0000000180)=0x3ff, 0xc, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x4}]}) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0xfffffffffffffff7, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0xd653, 0x400, 0x20363159, 0x4, 0x8, 0xa457, 0x8, 0x3, 0x1, 0x7, 0x0, 0x7}}) (async) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) (async) r3 = syz_open_dev$evdev(&(0x7f0000001040), 0x1, 0x181080) ioctl$EVIOCSMASK(r3, 0x40104593, &(0x7f0000000380)={0x4, 0x3, &(0x7f0000000300)="583ec3"}) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TUNSETOFFLOAD(r4, 0x4004743d, 0x110e22fff6) (async) write$cgroup_type(r4, &(0x7f0000000280), 0x9) (async) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x20042, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) (async) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ppoll(&(0x7f0000000080)=[{r7, 0x210a}, {r7, 0x120}], 0x2, 0x0, 0x0, 0x0) (async) r8 = dup(r6) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) (async) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000240)="1858b036410f017d0048b8dc4b13b61e0b813a0f23d80f21f835c00000a00f23f8660f2263c4c17c77fa3e3e6767450f01cf6536460f01f8c422d1b7900000c0fe", 0x41}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r6, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) add_key$user(0x0, &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_RUN(r9, 0xae80, 0x0) 374.246626ms ago: executing program 2 (id=504): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x19) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r1, 0x205, 0xfffffffc, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x1}, @ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x34}}, 0x0) 294.311397ms ago: executing program 2 (id=505): mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000005e0001"], 0x1c}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'ipvlan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0xd, r4, 0x1, 0xff, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}}, 0x14) bind$packet(r0, &(0x7f0000000300)={0x11, 0x2, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) lseek(r0, 0x2000, 0x0) r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCOUTQ(r6, 0x5411, &(0x7f0000000300)) ioctl$XFS_IOC_GETBMAP(r5, 0xc0205826, &(0x7f0000000080)={0x10000, 0x7, 0x800, 0x5, 0xfff}) r7 = accept$packet(r2, &(0x7f0000000180), &(0x7f00000001c0)=0x14) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setns(0xc9, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) r10 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET_DEF(r10, 0x4b72, &(0x7f00000005c0)={0x2, 0x0, 0xb, 0x19, 0x36, 0x0}) ioctl$TUNSETLINK(r9, 0x400454cd, 0x10f) r11 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r9, &(0x7f0000000100)=ANY=[@ANYBLOB="000008050000010b13"], 0xb) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x14, 0x1, 0x800001, 0x0, "", [@nested={0x4}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x144}]}]}, 0x1c}], 0x1}, 0x0) bind$packet(r7, &(0x7f0000000240)={0x11, 0xf6, r4, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) 204.364219ms ago: executing program 0 (id=506): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x4}, 0x94) fanotify_init(0x40, 0x80000) openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80000, 0x8000000) r0 = socket$nl_generic(0x10, 0x3, 0x10) preadv(r0, &(0x7f0000003f40)=[{&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/168, 0xa8}, {&(0x7f0000002e80)=""/4096, 0x1000}, {&(0x7f0000003e80)=""/164, 0xa4}], 0x4, 0x0, 0xfff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="00221c00000096230800e5052fdfef6ec1e0326d070c0000002a9000070901be0083000000000b09007a1522d47fd25d2699bb1fa749783f609607fdd7f03cc1314a44488b53ee396732be830172f3f02d505628bd1fc12c31d3c5d5d6089c60bf586fa5f7515b40cb39fe64adabed62c948234fbb321e941873f8e1d334b0bb95e0d85f58669e4ce097862daa135cbc4a18484d84621422a9b60afb7201e64c8e281cfbf42d22dc2d7f9bacab7004c1b95f01c2c49f2780549f9974434c271a75f62c486ebcd721b9c3b1cc5c1e352cfa23559f4b703cf9298841db9d1166166397b8c42cbdc2344b9a06eb27"], 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r3, @ANYBLOB="080006"], 0x24}}, 0x4) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/sys/net/ipv4/route/flush\x00', 0x1, 0x0) write(r9, &(0x7f0000000280), 0x0) openat(r8, &(0x7f00000000c0)='./proc/sys/net/ipv4/route/flush\x00', 0x8800, 0x40) syz_ublk_setup_queues(r8, r6, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x2f9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x34c}}], 0x1, 0x0, 0x0) 0s ago: executing program 2 (id=507): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='vfat\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/netdevsim/devices/netdevsim0/sriov_numvfs\x00', 0x1, 0x0) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x20040, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r2, 0x400448dd, &(0x7f0000001500)) (async) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) (async) write$sysctl(r1, &(0x7f0000000040)='2\x00', 0x2) 0s ago: executing program 0 (id=508): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_GET_PROPERTY(r0, 0x80106f53, &(0x7f0000000000)={0x20, &(0x7f0000001240)=[{0x19, '\x00', @buffer={"f8c042d7a8781c094069bb0ebdee0ef4186c06dcf1c52699f69880b0d7000004", 0x20}, 0x6}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff000000070581024000000705020240000007058303"], 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) recvmsg(r2, &(0x7f0000004940)={0x0, 0x0, 0x0}, 0x40002000) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f0000000700)={0x88, 0x20, '\x00', [@jumbo={0xc2, 0x4, 0x4}, @pad1, @enc_lim={0x4, 0x1, 0x6}, @pad1, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @local}}, @jumbo={0xc2, 0x4, 0x8}, @pad1, @generic={0xe, 0xcc, "70930d2c5dd85db45428fa48a6520c7e7d36fd7ef68d342919e96d0362bed6d0ffcbeb0a3875fd0a8b31484d7285ba036b93a33eeb7829621a9879a5ddab3f0da092515af4cb5d48e0e592e6d9e8d2a3277434d7ef57e70d90d9a3df7c3d1d8ced6f00a65d6afb2ac7e50f2e5c52cf8b4e6aded2c48618b5c0c90b1e6f29fd5ac302922f772244708e0d4033087ca0549613ea3d301a3b77c950df77a0b40c6e9a756f58e15603706334dd2d0cc6b71f8395ababd2a7d22fc418172509d0737f0550a5823cc52eaa7c73bab9"}, @pad1, @jumbo={0xc2, 0x4, 0x1000}]}, 0x110) setsockopt(r3, 0x1, 0x81, &(0x7f00000001c0)="1a00000002000000", 0x8) setsockopt(r3, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x4000, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}], 0x1c) sendto$inet6(r3, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x38}}}}, 0x84) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000000100)={0x0, @in={{0x2, 0x4e23, @loopback}}}, 0x84) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x48, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x18, 0x1c, 0x0, 0x1, [@typed={0x14, 0x3, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}]}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000003c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @loopback, 0x3ff}}}, 0x84) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) write(r6, &(0x7f0000000200)="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", 0xfffffdd6) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaabb86dd6000000000303afffe880000000000000000000000000001ff0200000000000000000000000000018900907800000000fe8000000000000000000000fc0000000000000000000000000000010201703b744dc5c600000000"], 0x0) kernel console output (not intermixed with test programs): ntext=system_u:object_r:tmpfs_t tclass=file permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 42.852237][ T5700] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.863952][ T65] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 45.870846][ T5735] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 45.871118][ T5731] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 45.871562][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 45.871860][ T5737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 45.872685][ T5734] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 45.872870][ T5734] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 45.873221][ T5734] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 45.873835][ T5734] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 45.874355][ T5735] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 45.874573][ T5735] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 45.874949][ T5735] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 45.875186][ T5735] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 45.875904][ T5732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 45.876430][ T5735] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 45.879019][ T5732] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 45.883661][ T5735] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 45.887287][ T65] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 45.909931][ T65] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 45.912972][ T65] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 46.397153][ T5736] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.400430][ T5736] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.403142][ T5736] bridge_slave_0: entered allmulticast mode [ 46.405999][ T5736] bridge_slave_0: entered promiscuous mode [ 46.410149][ T5736] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.412457][ T5736] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.414846][ T5736] bridge_slave_1: entered allmulticast mode [ 46.417502][ T5736] bridge_slave_1: entered promiscuous mode [ 46.496606][ T5736] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.499863][ T5729] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.502385][ T5729] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.504848][ T5729] bridge_slave_0: entered allmulticast mode [ 46.507425][ T5729] bridge_slave_0: entered promiscuous mode [ 46.522853][ T5736] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.526682][ T5729] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.529013][ T5729] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.531387][ T5729] bridge_slave_1: entered allmulticast mode [ 46.534118][ T5729] bridge_slave_1: entered promiscuous mode [ 46.536582][ T5724] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.538835][ T5724] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.541065][ T5724] bridge_slave_0: entered allmulticast mode [ 46.543763][ T5724] bridge_slave_0: entered promiscuous mode [ 46.546756][ T5724] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.548993][ T5724] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.551173][ T5724] bridge_slave_1: entered allmulticast mode [ 46.553818][ T5724] bridge_slave_1: entered promiscuous mode [ 46.556333][ T5723] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.558504][ T5723] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.560643][ T5723] bridge_slave_0: entered allmulticast mode [ 46.563113][ T5723] bridge_slave_0: entered promiscuous mode [ 46.587344][ T5723] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.589773][ T5723] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.592139][ T5723] bridge_slave_1: entered allmulticast mode [ 46.595093][ T5723] bridge_slave_1: entered promiscuous mode [ 46.604674][ T5736] team0: Port device team_slave_0 added [ 46.619514][ T5729] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.623177][ T5736] team0: Port device team_slave_1 added [ 46.632627][ T5724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.641392][ T5724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.645540][ T5729] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.659703][ T5723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 46.664128][ T5723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 46.678221][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.680395][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.688375][ T5736] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.713591][ T5729] team0: Port device team_slave_0 added [ 46.715749][ T5736] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.718443][ T5736] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.728325][ T5736] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.733887][ T5724] team0: Port device team_slave_0 added [ 46.737264][ T5723] team0: Port device team_slave_0 added [ 46.739944][ T5729] team0: Port device team_slave_1 added [ 46.753178][ T5724] team0: Port device team_slave_1 added [ 46.757102][ T5723] team0: Port device team_slave_1 added [ 46.765629][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.767883][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.775752][ T5729] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.780445][ T5729] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.782636][ T5729] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.790776][ T5729] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.824556][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.826750][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.834753][ T5723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.853766][ T5736] hsr_slave_0: entered promiscuous mode [ 46.856113][ T5736] hsr_slave_1: entered promiscuous mode [ 46.858656][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 46.860818][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.868609][ T5724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 46.872452][ T5723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.874753][ T5723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.882545][ T5723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.890452][ T5724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 46.892659][ T5724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 46.900589][ T5724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 46.931548][ T5729] hsr_slave_0: entered promiscuous mode [ 46.934883][ T5729] hsr_slave_1: entered promiscuous mode [ 46.937486][ T5729] debugfs: 'hsr0' already exists in 'hsr' [ 46.939772][ T5729] Cannot create hsr debugfs directory [ 46.989034][ T5723] hsr_slave_0: entered promiscuous mode [ 46.991186][ T5723] hsr_slave_1: entered promiscuous mode [ 46.993213][ T5723] debugfs: 'hsr0' already exists in 'hsr' [ 46.995077][ T5723] Cannot create hsr debugfs directory [ 46.999326][ T5724] hsr_slave_0: entered promiscuous mode [ 47.001524][ T5724] hsr_slave_1: entered promiscuous mode [ 47.003575][ T5724] debugfs: 'hsr0' already exists in 'hsr' [ 47.005345][ T5724] Cannot create hsr debugfs directory [ 47.215336][ T5729] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 47.224024][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.226613][ T5729] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 47.231680][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.234968][ T5729] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 47.238623][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.241223][ T5729] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 47.245808][ T5729] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.294370][ T5736] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 47.300665][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.304321][ T5736] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 47.308317][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.311616][ T5736] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 47.316421][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.323178][ T5736] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 47.329030][ T5736] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.378326][ T5724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.383716][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.386766][ T5724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.390376][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.398348][ T5724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.402242][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.405971][ T5724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.409724][ T5724] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.466216][ T5729] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.500456][ T5723] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 47.506298][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 47.509819][ T5723] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 47.515226][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 47.518871][ T5723] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 47.525516][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 47.528632][ T5723] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 47.534274][ T5723] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 47.550672][ T5729] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.571379][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.574830][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.594050][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.596547][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.604438][ T5736] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.630693][ T5736] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.650667][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.653595][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.661730][ T5724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.676743][ T5729] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 47.682839][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.685760][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.709583][ T5723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.715502][ T5724] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.725225][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.727514][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.740814][ T5723] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.745466][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.747713][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.760660][ T1159] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.762904][ T1159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.774787][ T1159] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.777071][ T1159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.884888][ T5727] Bluetooth: hci2: command tx timeout [ 47.886960][ T65] Bluetooth: hci3: command tx timeout [ 47.931320][ T5729] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.963548][ T65] Bluetooth: hci0: command tx timeout [ 47.968393][ T5736] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 47.972197][ T5729] veth0_vlan: entered promiscuous mode [ 47.974064][ T65] Bluetooth: hci1: command tx timeout [ 47.984689][ T5729] veth1_vlan: entered promiscuous mode [ 48.001646][ T5724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.013613][ T5729] veth0_macvtap: entered promiscuous mode [ 48.019079][ T5729] veth1_macvtap: entered promiscuous mode [ 48.034113][ T5736] veth0_vlan: entered promiscuous mode [ 48.041907][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.052206][ T5729] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.059189][ T5724] veth0_vlan: entered promiscuous mode [ 48.061484][ T5736] veth1_vlan: entered promiscuous mode [ 48.071824][ T5724] veth1_vlan: entered promiscuous mode [ 48.077093][ T5723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.114280][ T5736] veth0_macvtap: entered promiscuous mode [ 48.128683][ T5736] veth1_macvtap: entered promiscuous mode [ 48.134272][ T5774] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.147503][ T5723] veth0_vlan: entered promiscuous mode [ 48.154209][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.158008][ T5724] veth0_macvtap: entered promiscuous mode [ 48.162117][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.164985][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.165255][ T5724] veth1_macvtap: entered promiscuous mode [ 48.178398][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.180988][ T5723] veth1_vlan: entered promiscuous mode [ 48.198164][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.201096][ T5736] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.205349][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.208028][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.214997][ T42] kauditd_printk_skb: 15 callbacks suppressed [ 48.215007][ T42] audit: type=1400 audit(1787650364.313:166): avc: denied { mount } for pid=5729 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 48.224068][ T42] audit: type=1400 audit(1787650364.313:167): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/syzkaller.cc1SoW/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 48.225820][ T5724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.232234][ T42] audit: type=1400 audit(1787650364.313:168): avc: denied { mount } for pid=5729 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 48.232258][ T42] audit: type=1400 audit(1787650364.313:169): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/syzkaller.cc1SoW/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 48.249399][ T42] audit: type=1400 audit(1787650364.313:170): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/syzkaller.cc1SoW/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=9363 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 48.256872][ T5723] veth0_macvtap: entered promiscuous mode [ 48.257615][ T42] audit: type=1400 audit(1787650364.323:171): avc: denied { unmount } for pid=5729 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 48.266801][ T42] audit: type=1400 audit(1787650364.333:172): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 48.274730][ T42] audit: type=1400 audit(1787650364.333:173): avc: denied { mount } for pid=5729 comm="syz-executor" name="/" dev="gadgetfs" ino=7948 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 48.278243][ T5723] veth1_macvtap: entered promiscuous mode [ 48.279185][ T5729] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 48.281463][ T42] audit: type=1400 audit(1787650364.333:174): avc: denied { mount } for pid=5729 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 48.294348][ T42] audit: type=1400 audit(1787650364.333:175): avc: denied { mounton } for pid=5729 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 48.301995][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.304810][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.319228][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.337471][ T5723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.354053][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.354538][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.361703][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.390547][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.394412][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.428791][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.431468][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.456461][ T168] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.459430][ T168] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.477045][ T168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.480248][ T168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.494404][ T5802] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.501277][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.501874][ T5884] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5'. [ 48.524089][ T5774] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.529608][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.538393][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.546627][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.549565][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.552386][ T5774] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.555340][ T5774] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.558027][ T5774] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.560692][ T5774] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.564033][ T5774] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.566809][ T5774] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.583831][ T5891] hfsplus: unable to find HFS+ superblock [ 48.628234][ T5897] macvlan1: mtu less than device minimum [ 48.645440][ T5901] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 48.705166][ T5913] bond1: entered allmulticast mode [ 48.712320][ T5916] hub 8-0:1.0: USB hub found [ 48.714011][ T5916] hub 8-0:1.0: 1 port detected [ 48.738506][ T5920] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 48.746898][ T5920] CIFS mount error: No usable UNC path provided in device string! [ 48.746898][ T5920] [ 48.750089][ T5920] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 48.785868][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18'. [ 48.789101][ T5931] netlink: 20 bytes leftover after parsing attributes in process `syz.3.18'. [ 48.820892][ T5937] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 48.827253][ T5937] CIFS: Attempting to mount //127.0.0.1/share [ 48.951278][ T5941] Zero length message leads to an empty skb [ 49.126678][ T5961] Bluetooth: MGMT ver 1.23 [ 49.361787][ T5974] ======================================================= [ 49.361787][ T5974] WARNING: The mand mount option has been deprecated and [ 49.361787][ T5974] and is ignored by this kernel. Remove the mand [ 49.361787][ T5974] option from the mount to silence this warning. [ 49.361787][ T5974] ======================================================= [ 49.384202][ T5974] overlayfs: failed lookup in lower (newroot/10, name='bus', err=-40): overlapping layers [ 49.465044][ T5978] comedi comedi3: comedi_test: 4 microvolt, 2 microsecond waveform attached [ 49.549146][ T5988] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 49.609104][ T5992] netlink: 40 bytes leftover after parsing attributes in process `syz.0.38'. [ 49.610543][ T5993] netlink: 100 bytes leftover after parsing attributes in process `syz.0.38'. [ 49.614165][ T5992] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0 [ 49.643159][ T6000] netlink: 48 bytes leftover after parsing attributes in process `syz.1.40'. [ 49.655948][ T5937] CIFS: VFS: cifs_mount failed w/return code = -512 [ 49.806899][ T6017] trusted_key: encrypted_key: insufficient parameters specified [ 49.811880][ T6018] trusted_key: encrypted_key: insufficient parameters specified [ 49.834834][ T29] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 49.847839][ T6022] netlink: 52 bytes leftover after parsing attributes in process `syz.1.46'. [ 49.860739][ T6020] netlink: 196 bytes leftover after parsing attributes in process `syz.2.45'. [ 49.867009][ T6020] netlink: 196 bytes leftover after parsing attributes in process `syz.2.45'. [ 49.870349][ T6020] netlink: 19 bytes leftover after parsing attributes in process `syz.2.45'. [ 49.875961][ T6022] ptrace attach of "/syz-executor exec"[5723] was attempted by "/syz-executor exec"[6022] [ 49.946045][ T6028] jffs2: notice: (6028) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 49.967801][ T65] Bluetooth: hci3: command tx timeout [ 49.969919][ T65] Bluetooth: hci2: command tx timeout [ 50.043692][ T5727] Bluetooth: hci0: command tx timeout [ 50.045450][ T65] Bluetooth: hci1: command tx timeout [ 50.271956][ T6065] netlink: 'syz.1.60': attribute type 1 has an invalid length. [ 50.364849][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 50.634958][ T6077] omfs: Unknown parameter ':!' [ 50.641306][ T6077] overlayfs: upper fs does not support file handles, falling back to index=off. [ 50.644519][ T6077] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 50.933774][ T6085] jffs2: notice: (6085) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 1 of xref (0 dead, 0 orphan) found. [ 51.034782][ T6096] tipc: Enabling not permitted [ 51.041665][ T6096] tipc: Enabling of bearer rejected, failed to enable media [ 51.196541][ T6108] comedi comedi1: Minor 0 could not be opened [ 51.262148][ T6113] bridge_slave_0: left allmulticast mode [ 51.265238][ T6113] bridge_slave_0: left promiscuous mode [ 51.267905][ T6113] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.274016][ T6113] bridge_slave_1: left allmulticast mode [ 51.278416][ T6113] bridge_slave_1: left promiscuous mode [ 51.280309][ T6113] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.293293][ T6113] bond0: (slave bond_slave_0): Releasing backup interface [ 51.305344][ T6113] bond0: (slave bond_slave_1): Releasing backup interface [ 51.318347][ T6113] team0: Port device team_slave_0 removed [ 51.322194][ T6113] team0: Port device team_slave_1 removed [ 51.325367][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.327716][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.332034][ T6113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.334543][ T6113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.337776][ T6113] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 51.358402][ T6117] team0: Mode changed to "loadbalance" [ 51.403824][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.406401][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 51.446612][ T36] IPVS: starting estimator thread 0... [ 51.547548][ T6134] bridge_slave_1: left allmulticast mode [ 51.549345][ T6134] bridge_slave_1: left promiscuous mode [ 51.551934][ T6134] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.553402][ T6130] IPVS: using max 45 ests per chain, 108000 per kthread [ 51.560330][ T6134] bridge_slave_0: left allmulticast mode [ 51.564014][ T6134] bridge_slave_0: left promiscuous mode [ 51.566030][ T6134] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.595284][ T6089] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.607184][ T6139] e1000e 0000:00:02.0 eth1: removed PHC [ 51.734940][ T6139] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 51.857170][ T6151] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 51.875055][ T6158] dlm: Unknown command passed to DLM device : 33 [ 51.875055][ T6158] [ 51.978098][ T6172] syzkaller1: tun_chr_ioctl cmd 1074025678 [ 51.980000][ T6172] syzkaller1: group set to 0 [ 52.053428][ T5727] Bluetooth: hci3: command tx timeout [ 52.055129][ T65] Bluetooth: hci2: command tx timeout [ 52.123968][ T65] Bluetooth: hci1: command tx timeout [ 52.124809][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.125977][ T65] Bluetooth: hci0: command tx timeout [ 52.204204][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.243456][ T34] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 52.393409][ T34] usb 7-1: device descriptor read/64, error -71 [ 52.445114][ T10] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.454664][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 52.643430][ T34] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 52.690418][ T6226] comedi comedi1: Minor 0 could not be opened [ 52.692937][ T6226] 9pnet_virtio: no channels available for device 127.0.0.1 [ 52.783462][ T34] usb 7-1: device descriptor read/64, error -71 [ 52.895551][ T34] usb usb7-port1: attempt power cycle [ 53.092872][ T6276] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 53.095198][ T6276] overlayfs: failed to set xattr on upper [ 53.096937][ T6276] overlayfs: ...falling back to redirect_dir=nofollow. [ 53.098928][ T6276] overlayfs: ...falling back to index=off. [ 53.100665][ T6276] overlayfs: ...falling back to uuid=null. [ 53.253415][ T34] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 53.274101][ T34] usb 7-1: device descriptor read/8, error -71 [ 53.283422][ T850] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.434122][ T850] usb 5-1: New USB device found, idVendor=1df7, idProduct=2500, bcdDevice= 1.00 [ 53.439881][ T850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.444005][ T850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.505466][ T850] msi2500 5-1:1.0: Registered as swradio24 [ 53.507953][ T850] msi2500 5-1:1.0: SDR API is still slightly experimental and functionality changes may follow [ 53.513445][ T34] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 53.535362][ T34] usb 7-1: device descriptor read/8, error -71 [ 53.644121][ T34] usb usb7-port1: unable to enumerate USB device [ 53.655588][ T42] kauditd_printk_skb: 32746 callbacks suppressed [ 53.655604][ T42] audit: type=1400 audit(1787650369.753:32921): avc: denied { mounton } for pid=6271 comm="syz.0.106" path="/14/mydev" dev="tmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 53.707223][ T42] audit: type=1400 audit(1787650369.803:32922): avc: denied { create } for pid=6271 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.713430][ T42] audit: type=1400 audit(1787650369.803:32923): avc: denied { getopt } for pid=6271 comm="syz.0.106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.813854][ C1] net_ratelimit: 1 callbacks suppressed [ 53.813868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 53.867527][ T42] audit: type=1400 audit(1787650369.963:32924): avc: denied { read write } for pid=5729 comm="syz-executor" name="loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.874999][ T42] audit: type=1400 audit(1787650369.963:32925): avc: denied { open } for pid=5729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.882329][ T42] audit: type=1400 audit(1787650369.963:32926): avc: denied { ioctl } for pid=5729 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=659 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 53.939764][ T42] audit: type=1400 audit(1787650370.033:32927): avc: denied { create } for pid=6289 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.945859][ T42] audit: type=1400 audit(1787650370.033:32928): avc: denied { getopt } for pid=6289 comm="syz.3.109" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 53.967196][ T6293] __nla_validate_parse: 12 callbacks suppressed [ 53.967206][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.3.110'. [ 53.973560][ T42] audit: type=1400 audit(1787650370.073:32929): avc: denied { create } for pid=6292 comm="syz.3.110" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 54.133504][ T5727] Bluetooth: hci3: command tx timeout [ 54.133803][ T65] Bluetooth: hci2: command tx timeout [ 54.204032][ T5727] Bluetooth: hci1: command tx timeout [ 54.204656][ T65] Bluetooth: hci0: command tx timeout [ 54.524039][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 54.666644][ T6298] BIDI support in bsg has been removed. [ 54.770724][ T42] audit: type=1400 audit(1787650370.863:32930): avc: denied { mount } for pid=6303 comm="syz.1.113" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 55.163673][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.387855][ T6304] Dynamic Preempt: lazy [ 55.430757][ T6314] netlink: 'syz.1.115': attribute type 11 has an invalid length. [ 55.477033][ T6316] input: syz0 as /devices/virtual/input/input5 [ 55.563604][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 55.723988][ T6273] msi2500 5-1:1.0: failed -110, cmd 41, data 0e09 [ 55.727380][ T6273] spi_master spi0: failed to transfer one message from queue [ 55.729768][ T6273] spi_master spi0: noqueue transfer failed [ 55.733596][ T6273] msi2500 5-1:1.0: failed -32, cmd 41, data 608008 [ 55.743232][ T62] usb 5-1: USB disconnect, device number 2 [ 56.120143][ T6327] program syz.2.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.127810][ T6327] program syz.2.120 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 56.261716][ T6336] MTRR 1 not used [ 56.427205][ T6358] /dev/sr0: Can't open blockdev [ 56.442118][ T6362] jffs2: notice: (6362) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 56.462557][ T6364] netlink: Failed to add helper -22 [ 56.464947][ T6364] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 56.475129][ T6369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 56.529886][ T6382] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 56.532488][ T6382] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 56.538906][ T6382] vhci_hcd vhci_hcd.0: Device attached [ 56.548819][ T6386] netlink: 'syz.2.140': attribute type 4 has an invalid length. [ 56.551860][ T6386] netlink: 17 bytes leftover after parsing attributes in process `syz.2.140'. [ 56.558526][ T6386] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.140'. [ 56.566739][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.2.140'. [ 56.571356][ T6386] IPv6: sit1: Disabled Multicast RS [ 56.574443][ T6386] sit1: entered allmulticast mode [ 56.599088][ T6388] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 56.613590][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 56.747589][ T6402] jffs2: notice: (6402) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 56.779987][ T6414] netlink: 'syz.1.146': attribute type 1 has an invalid length. [ 56.782340][ T6414] netlink: 'syz.1.146': attribute type 3 has an invalid length. [ 56.786408][ T6414] netlink: 224 bytes leftover after parsing attributes in process `syz.1.146'. [ 56.793550][ T850] usb 37-1: new high-speed USB device number 2 using vhci_hcd [ 56.816057][ T6403] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.819799][ T6402] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 56.860802][ T6420] warning: `syz.1.147' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 57.173779][ T6441] netlink: 'syz.3.156': attribute type 11 has an invalid length. [ 57.188343][ T6444] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0 [ 57.212774][ T6442] 8021q: adding VLAN 0 to HW filter on device bond1 [ 57.353035][ T6383] vhci_hcd: connection reset by peer [ 57.356274][ T5774] vhci_hcd vhci_hcd.0: stop threads [ 57.359109][ T5774] vhci_hcd vhci_hcd.0: release socket [ 57.361322][ T5774] vhci_hcd vhci_hcd.0: disconnect device [ 57.644380][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 57.894138][ T6463] comedi: valid board names for 8255 driver are: [ 57.896233][ T6463] 8255 [ 57.897127][ T6463] comedi: valid board names for vmk80xx driver are: [ 57.899453][ T6463] vmk80xx [ 57.900593][ T6463] comedi: valid board names for usbduxsigma driver are: [ 57.903194][ T6463] usbduxsigma [ 57.904671][ T6463] comedi: valid board names for usbduxfast driver are: [ 57.906955][ T6463] usbduxfast [ 57.908023][ T6463] comedi: valid board names for usbdux driver are: [ 57.910005][ T6463] usbdux [ 57.910935][ T6463] comedi: valid board names for ni6501 driver are: [ 57.912947][ T6463] ni6501 [ 57.914439][ T6463] comedi: valid board names for dt9812 driver are: [ 57.917356][ T6463] dt9812 [ 57.918653][ T6463] comedi: valid board names for ni_labpc_cs driver are: [ 57.921423][ T6463] ni_labpc_cs [ 57.922810][ T6463] comedi: valid board names for ni_daq_700 driver are: [ 57.925760][ T6463] ni_daq_700 [ 57.927109][ T6463] comedi: valid board names for labpc_pci driver are: [ 57.929896][ T6463] labpc_pci [ 57.931279][ T6463] comedi: valid board names for adl_pci9118 driver are: [ 57.935077][ T6463] pci9118dg [ 57.936178][ T6463] pci9118hg [ 57.937228][ T6463] pci9118hr [ 57.938240][ T6463] comedi: valid board names for 8255_pci driver are: [ 57.940329][ T6463] 8255_pci [ 57.941288][ T6463] comedi: valid board names for s526 driver are: [ 57.943130][ T6463] s526 [ 57.944231][ T6463] comedi: valid board names for multiq3 driver are: [ 57.946180][ T6463] multiq3 [ 57.947158][ T6463] comedi: valid board names for pcmuio driver are: [ 57.950168][ T6463] pcmuio48 [ 57.951255][ T6463] pcmuio96 [ 57.952259][ T6463] comedi: valid board names for pcmmio driver are: [ 57.954523][ T6463] pcmmio [ 57.955513][ T6463] comedi: valid board names for pcmda12 driver are: [ 57.957612][ T6463] pcmda12 [ 57.958612][ T6463] comedi: valid board names for pcmad driver are: [ 57.960866][ T6463] pcmad12 [ 57.961812][ T6463] pcmad16 [ 57.962705][ T6463] comedi: valid board names for ni_labpc driver are: [ 57.965378][ T6463] lab-pc-1200 [ 57.966539][ T6463] lab-pc-1200ai [ 57.967727][ T6463] lab-pc+ [ 57.968710][ T6463] comedi: valid board names for atmio16 driver are: [ 57.970788][ T6463] atmio16 [ 57.971805][ T6463] atmio16d [ 57.972809][ T6463] comedi: valid board names for ni_at_ao driver are: [ 57.974962][ T6463] at-ao-6 [ 57.975969][ T6463] at-ao-10 [ 57.976975][ T6463] comedi: valid board names for ni_at_a2150 driver are: [ 57.979110][ T6463] ni_at_a2150 [ 57.980194][ T6463] comedi: valid board names for adq12b driver are: [ 57.982189][ T6463] adq12b [ 57.983122][ T6463] comedi: valid board names for mpc624 driver are: [ 57.986643][ T6463] mpc624 [ 57.987600][ T6463] comedi: valid board names for c6xdigio driver are: [ 57.989809][ T6463] c6xdigio [ 57.990940][ T6463] comedi: valid board names for aio_iiro_16 driver are: [ 57.993149][ T6463] aio_iiro_16 [ 57.994299][ T6463] comedi: valid board names for aio_aio12_8 driver are: [ 57.996368][ T6463] aio_aio12_8 [ 57.997488][ T6463] aio_ai12_8 [ 57.998547][ T6463] aio_ao12_4 [ 57.999533][ T6463] comedi: valid board names for fl512 driver are: [ 58.001476][ T6463] fl512 [ 58.002385][ T6463] comedi: valid board names for dmm32at driver are: [ 58.004607][ T6463] dmm32at [ 58.005606][ T6463] comedi: valid board names for dt282x driver are: [ 58.007603][ T6463] dt2821 [ 58.008549][ T6463] dt2821-f [ 58.009580][ T6463] dt2821-g [ 58.010621][ T6463] dt2823 [ 58.011566][ T6463] dt2824-pgh [ 58.012647][ T6463] dt2824-pgl [ 58.013793][ T6463] dt2825 [ 58.014778][ T6463] dt2827 [ 58.015718][ T6463] dt2828 [ 58.016665][ T6463] dt2829 [ 58.017597][ T6463] dt21-ez [ 58.018597][ T6463] dt23-ez [ 58.019600][ T6463] dt24-ez [ 58.020586][ T6463] dt24-ez-pgl [ 58.021707][ T6463] comedi: valid board names for dt2817 driver are: [ 58.023903][ T6463] dt2817 [ 58.024834][ T6463] comedi: valid board names for dt2815 driver are: [ 58.026889][ T6463] dt2815 [ 58.027833][ T6463] comedi: valid board names for dt2814 driver are: [ 58.029858][ T6463] dt2814 [ 58.030788][ T6463] comedi: valid board names for dt2811 driver are: [ 58.032793][ T6463] dt2811-pgh [ 58.034007][ T6463] dt2811-pgl [ 58.035068][ T6463] comedi: valid board names for dt2801 driver are: [ 58.037154][ T6463] dt2801 [ 58.038095][ T6463] comedi: valid board names for das6402 driver are: [ 58.040138][ T6463] das6402-12 [ 58.041190][ T6463] das6402-16 [ 58.042268][ T6463] comedi: valid board names for das1800 driver are: [ 58.044436][ T6463] das-1701st [ 58.045487][ T6463] das-1701st-da [ 58.047126][ T6463] das-1702st [ 58.048201][ T6463] das-1702st-da [ 58.049405][ T6463] das-1702hr [ 58.050519][ T6463] das-1702hr-da [ 58.051652][ T6463] das-1701ao [ 58.052710][ T6463] das-1702ao [ 58.053847][ T6463] das-1801st [ 58.054906][ T6463] das-1801st-da [ 58.056060][ T6463] das-1802st [ 58.057124][ T6463] das-1802st-da [ 58.058248][ T6463] das-1802hr [ 58.059310][ T6463] das-1802hr-da [ 58.060442][ T6463] das-1801hc [ 58.061516][ T6463] das-1802hc [ 58.062716][ T6463] das-1801ao [ 58.063874][ T6463] das-1802ao [ 58.064931][ T6463] comedi: valid board names for das800 driver are: [ 58.066918][ T6463] das-800 [ 58.067906][ T6463] cio-das800 [ 58.068969][ T6463] das-801 [ 58.069937][ T6463] cio-das801 [ 58.070981][ T6463] das-802 [ 58.071975][ T6463] cio-das802 [ 58.073029][ T6463] cio-das802/16 [ 58.074226][ T6463] comedi: valid board names for isa-das08 driver are: [ 58.076316][ T6463] isa-das08 [ 58.077380][ T6463] das08-pgm [ 58.078408][ T6463] das08-pgh [ 58.079447][ T6463] das08-pgl [ 58.080486][ T6463] das08-aoh [ 58.081514][ T6463] das08-aol [ 58.082542][ T6463] das08-aom [ 58.083655][ T6463] das08/jr-ao [ 58.084740][ T6463] das08jr-16-ao [ 58.085871][ T6463] pc104-das08 [ 58.086944][ T6463] das08jr/16 [ 58.088000][ T6463] comedi: valid board names for das16m1 driver are: [ 58.090070][ T6463] das16m1 [ 58.091051][ T6463] comedi: valid board names for dac02 driver are: [ 58.093043][ T6463] dac02 [ 58.094026][ T6463] comedi: valid board names for rti802 driver are: [ 58.096036][ T6463] rti802 [ 58.096969][ T6463] comedi: valid board names for rti800 driver are: [ 58.099013][ T6463] rti800 [ 58.099968][ T6463] rti815 [ 58.100904][ T6463] comedi: valid board names for pcm3724 driver are: [ 58.102935][ T6463] pcm3724 [ 58.104011][ T6463] comedi: valid board names for pcl818 driver are: [ 58.106024][ T6463] pcl818l [ 58.106986][ T6463] pcl818h [ 58.107951][ T6463] pcl818hd [ 58.108950][ T6463] pcl818hg [ 58.109945][ T6463] pcl818 [ 58.110869][ T6463] pcl718 [ 58.111818][ T6463] pcm3718 [ 58.112806][ T6463] comedi: valid board names for pcl816 driver are: [ 58.114907][ T6463] pcl816 [ 58.115870][ T6463] pcl814b [ 58.116899][ T6463] comedi: valid board names for pcl812 driver are: [ 58.118902][ T6463] pcl812 [ 58.119847][ T6463] pcl812pg [ 58.120852][ T6463] acl8112pg [ 58.121893][ T6463] acl8112dg [ 58.122918][ T6463] acl8112hg [ 58.124184][ T6463] a821pgl [ 58.125173][ T6463] a821pglnda [ 58.126823][ T6463] a821pgh [ 58.127850][ T6463] a822pgl [ 58.128893][ T6463] a822pgh [ 58.129870][ T6463] a823pgl [ 58.130881][ T6463] a823pgh [ 58.131819][ T6463] pcl813 [ 58.132751][ T6463] pcl813b [ 58.133887][ T6463] acl8113 [ 58.134864][ T6463] iso813 [ 58.135805][ T6463] acl8216 [ 58.136893][ T6463] a826pg [ 58.137825][ T6463] comedi: valid board names for pcl730 driver are: [ 58.139864][ T6463] pcl730 [ 58.140798][ T6463] iso730 [ 58.141733][ T6463] acl7130 [ 58.142705][ T6463] pcm3730 [ 58.143861][ T6463] pcl725 [ 58.144815][ T6463] p8r8dio [ 58.145801][ T6463] acl7225b [ 58.146820][ T6463] p16r16dio [ 58.147868][ T6463] pcl733 [ 58.148854][ T6463] pcl734 [ 58.149794][ T6463] opmm-1616-xt [ 58.150889][ T6463] pearl-mm-p [ 58.151960][ T6463] ir104-pbf [ 58.152984][ T6463] comedi: valid board names for pcl726 driver are: [ 58.155066][ T6463] pcl726 [ 58.156009][ T6463] pcl727 [ 58.156982][ T6463] pcl728 [ 58.157909][ T6463] acl6126 [ 58.158907][ T6463] acl6128 [ 58.159896][ T6463] comedi: valid board names for pcl724 driver are: [ 58.161871][ T6463] pcl724 [ 58.162794][ T6463] pcl722 [ 58.163445][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 58.163789][ T6463] pcl731 [ 58.167825][ T6463] acl7122 [ 58.168795][ T6463] acl7124 [ 58.169741][ T6463] pet48dio [ 58.170780][ T6463] pcmio48 [ 58.171748][ T6463] onyx-mm-dio [ 58.172762][ T6463] comedi: valid board names for pcl711 driver are: [ 58.174084][ C0] vcan0: j1939_tp_rxtimer: 0xffff88803e367c00: rx timeout, send abort [ 58.174697][ T6463] pcl711 [ 58.178920][ T6463] pcl711b [ 58.179379][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88803e367c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 58.179881][ T6463] acl8112hg [ 58.179889][ T6463] acl8112dg [ 58.179894][ T6463] comedi: valid board names for amplc_pc263 driver are: [ 58.189838][ T6463] pc263 [ 58.190751][ T6463] comedi: valid board names for amplc_pc236 driver are: [ 58.192900][ T6463] pc36at [ 58.193915][ T6463] comedi: valid board names for amplc_dio200 driver are: [ 58.196069][ T6463] pc212e [ 58.197041][ T6463] pc214e [ 58.197957][ T6463] pc215e [ 58.198864][ T6463] pc218e [ 58.199773][ T6463] pc272e [ 58.200695][ T6463] comedi: valid board names for comedi_parport driver are: [ 58.202857][ T6463] comedi_parport [ 58.204190][ T6463] comedi: valid board names for comedi_test driver are: [ 58.204401][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.207003][ T6463] comedi_test [ 58.207012][ T6463] comedi: valid board names for comedi_bond driver are: [ 58.207017][ T6463] comedi_bond [ 58.214968][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 58.315125][ T6476] capability: warning: `syz.3.167' uses deprecated v2 capabilities in a way that may be insecure [ 58.333764][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 59.236184][ T42] kauditd_printk_skb: 62 callbacks suppressed [ 59.236196][ T42] audit: type=1400 audit(1787650375.333:32993): avc: denied { write } for pid=6485 comm="syz.3.170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 59.565389][ T24] net_ratelimit: 4 callbacks suppressed [ 59.565401][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 59.723537][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.123482][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 60.123622][ T6466] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 60.208278][ T48] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.212452][ T34] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.216720][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.763596][ T5810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.846280][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 60.880964][ T6466] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.887956][ T6466] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.891677][ T6466] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.893817][ T6466] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.897620][ T6466] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.901877][ T6466] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.904713][ T6466] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.908896][ T6466] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.912981][ T6466] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.914929][ T6466] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.917939][ T6466] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.944350][ T9] usb 6-1: unable to get BOS descriptor or descriptor too short [ 60.946561][ T9] usb 6-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 60.949148][ T9] usb 6-1: no configurations [ 60.950463][ T9] usb 6-1: can't read configurations, error -22 [ 60.965263][ T6493] netlink: 'syz.2.171': attribute type 1 has an invalid length. [ 60.969788][ T42] audit: type=1400 audit(1787650377.063:32994): avc: denied { write } for pid=6494 comm="syz.1.173" name="uinput" dev="devtmpfs" ino=942 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 60.978290][ T42] audit: type=1400 audit(1787650377.073:32995): avc: denied { read append } for pid=6494 comm="syz.1.173" name="fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.988159][ T42] audit: type=1400 audit(1787650377.073:32996): avc: denied { open } for pid=6494 comm="syz.1.173" path="/dev/fb0" dev="devtmpfs" ino=638 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 60.995570][ T6493] bond2: (slave geneve2): making interface the new active one [ 60.998499][ T6493] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 61.013544][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 61.018598][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 61.023902][ T42] audit: type=1400 audit(1787650377.113:32997): avc: denied { setopt } for pid=6492 comm="syz.3.172" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 61.024187][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 61.033695][ T42] audit: type=1400 audit(1787650377.123:32998): avc: denied { create } for pid=6494 comm="syz.1.173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 61.048615][ T42] audit: type=1400 audit(1787650377.143:32999): avc: denied { map } for pid=6494 comm="syz.1.173" path="socket:[14425]" dev="sockfs" ino=14425 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 61.053439][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 61.058027][ T42] audit: type=1400 audit(1787650377.143:33000): avc: denied { append } for pid=6504 comm="syz.0.175" name="usbmon0" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.070197][ T42] audit: type=1400 audit(1787650377.143:33001): avc: denied { ioctl } for pid=6504 comm="syz.0.175" path="/dev/usbmon0" dev="devtmpfs" ino=736 ioctlcmd=0x9201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 61.074590][ T42] audit: type=1400 audit(1787650377.173:33002): avc: denied { setopt } for pid=6507 comm="syz.2.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 61.220010][ T6522] process 'syz.2.180' launched './file0' with NULL argv: empty string added [ 61.804149][ T62] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 61.873487][ T850] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 62.070353][ T6571] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6571 comm=syz.0.197 [ 62.193453][ T41] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 62.203444][ T65] Bluetooth: hci0: command 0x0c1a tx timeout [ 62.205721][ T6575] netlink: 156 bytes leftover after parsing attributes in process `syz.0.199'. [ 62.259335][ T6585] tipc: Enabling not permitted [ 62.261172][ T6585] tipc: Enabling of bearer rejected, failed to enable media [ 62.291423][ T6591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 62.297427][ T6591] SELinux: security_context_str_to_sid (unconfined_u) failed with errno=-22 [ 62.334309][ T41] usb 6-1: device descriptor read/64, error -71 [ 62.532490][ T6612] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3856 sclass=netlink_route_socket pid=6612 comm=syz.2.212 qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 62.593430][ T41] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 62.614232][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.721125][ T6616] netlink: 1047 bytes leftover after parsing attributes in process `syz.2.214'. [ 62.724329][ T41] usb 6-1: device descriptor read/64, error -71 [ 62.724745][ T6616] veth0_to_bond: default FDB implementation only supports local addresses [ 62.760567][ T6618] netlink: 'syz.2.215': attribute type 10 has an invalid length. [ 62.763905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 62.766791][ T6618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.770073][ T6618] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 62.793515][ T5810] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 62.819227][ T6620] smpboot: CPU 1 is now offline [ 62.835739][ T41] usb usb6-port1: attempt power cycle [ 62.846969][ T6620] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 62.862174][ T6620] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'. [ 62.923510][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 62.923589][ T5727] Bluetooth: hci2: command 0x0c1a tx timeout [ 62.923606][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 62.944101][ T5810] usb 5-1: New USB device found, idVendor=0763, idProduct=0150, bcdDevice= 0.40 [ 62.948178][ T5810] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 1040, setting to 1023 [ 62.954624][ T5810] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.961629][ T5810] usb 5-1: Product: Є [ 62.962922][ T5810] usb 5-1: Manufacturer: à¡  [ 62.964644][ T5810] usb 5-1: SerialNumber: ূ㦼極﭂鋠幉쒻潤酳鱶㉠॔骭뀛댃Ꭳ﫧ﷶ䘡㇥ؗὅሆ뷣ಧë±ï”­ã¿ªà¼‚둔貳ꪌ輷魃䓵â´î™ç»®ì¯¼á®“월슮á€è¸„쟼í¨â¦É î´œáœ è‘¾ë·¥â¨¾ç‰ä¼›èºµê–”梵èšå³¨ç´€ë›©ã„šî²¿é˜…徭 [ 62.982709][ T6622] ªªªªªª: renamed from vlan0 (while UP) [ 63.003436][ T5774] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.006548][ T5774] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 63.173464][ T41] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 63.184195][ T6614] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.187234][ T6614] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.197147][ T5810] usb 5-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 63.204093][ T41] usb 6-1: device descriptor read/8, error -71 [ 63.219929][ T5810] usb 5-1: USB disconnect, device number 3 [ 63.245314][ T5728] udevd[5728]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 63.443601][ T41] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 63.465768][ T41] usb 6-1: device descriptor read/8, error -71 [ 63.574068][ T41] usb usb6-port1: unable to enumerate USB device [ 63.725127][ T6625] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 63.728636][ T6625] netlink: 'syz.0.218': attribute type 30 has an invalid length. [ 63.740256][ T6624] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 63.742923][ T6624] netlink: 'syz.0.218': attribute type 30 has an invalid length. [ 63.747050][ T6624] binfmt_misc: register: failed to install interpreter ./file0 [ 63.753436][ T5774] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.756442][ T5774] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.759019][ T5774] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.761732][ T5774] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.849757][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 63.856837][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz.0.222'. [ 63.859784][ T6634] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 63.935203][ T6636] nbd0: detected capacity change from 0 to 2 [ 63.965982][ T6636] nvme_fc: nvme_fc_parse_traddr: bad traddr string [ 63.970331][ T66] block nbd0: Receive control failed (result -104) [ 64.083440][ T5810] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.234003][ T5810] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 64.239994][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.243127][ T5810] usb 7-1: Product: syz [ 64.244796][ T5810] usb 7-1: Manufacturer: syz [ 64.246636][ T5810] usb 7-1: SerialNumber: syz [ 64.283517][ T5727] Bluetooth: hci0: command 0x0c1a tx timeout [ 64.373649][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 64.478530][ T5810] rtl8150 7-1:1.0: couldn't reset the device [ 64.481783][ T5810] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 64.490044][ T5810] usb 7-1: USB disconnect, device number 6 [ 64.524038][ T24] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 64.527898][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.531432][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 64.534657][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.538657][ T24] usb 5-1: config 0 descriptor?? [ 64.745421][ T6656] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 64.748330][ T6656] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 64.749376][ T24] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 64.753765][ T24] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0 [ 64.759142][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb5/5-1/5-1:0.0/0003:0D8C:0022.0002/input/input6 [ 64.769524][ T42] kauditd_printk_skb: 55 callbacks suppressed [ 64.769534][ T42] audit: type=1400 audit(1787650380.863:33058): avc: denied { read } for pid=5121 comm="acpid" name="event4" dev="devtmpfs" ino=2872 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.778645][ T42] audit: type=1400 audit(1787650380.863:33059): avc: denied { open } for pid=5121 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2872 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.785514][ T24] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw1: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0 [ 64.824679][ T42] audit: type=1400 audit(1787650380.923:33060): avc: denied { ioctl } for pid=5121 comm="acpid" path="/dev/input/event4" dev="devtmpfs" ino=2872 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 64.895262][ T41] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 64.903891][ T6661] futex_wake_op: syz.1.227 tries to shift op by 32; fix this program [ 64.923532][ T850] net_ratelimit: 2 callbacks suppressed [ 64.923544][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.003468][ T5727] Bluetooth: hci3: command 0x0c1a tx timeout [ 65.003703][ T65] Bluetooth: hci2: command 0x0c1a tx timeout [ 65.004948][ T5731] Bluetooth: hci1: command 0x0c1a tx timeout [ 65.036722][ T6666] i2c i2c-0: new_device: Invalid device name [ 65.054478][ T41] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 65.067749][ T41] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.070422][ T41] usb 7-1: Product: syz [ 65.071840][ T41] usb 7-1: Manufacturer: syz [ 65.074181][ T41] usb 7-1: SerialNumber: syz [ 65.078160][ T6670] exFAT-fs (nullb0): invalid boot record signature [ 65.081003][ T6670] exFAT-fs (nullb0): failed to read boot sector [ 65.084667][ T6670] exFAT-fs (nullb0): failed to recognize exfat type [ 65.179944][ T6676] netlink: 36 bytes leftover after parsing attributes in process `syz.1.232'. [ 65.284894][ T6631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 65.288500][ T6631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.292978][ T42] audit: type=1400 audit(1787650381.383:33061): avc: denied { ioctl } for pid=6629 comm="syz.2.221" path="socket:[14560]" dev="sockfs" ino=14560 ioctlcmd=0x54a5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 65.343964][ T41] rtl8150 7-1:1.0: couldn't reset the device [ 65.345912][ T41] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 65.350693][ T41] usb 7-1: USB disconnect, device number 7 [ 65.433469][ T9] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 65.584852][ T9] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 65.590858][ T9] usb 6-1: config index 0 descriptor too short (expected 45, got 36) [ 65.594568][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 65.599091][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 65.602778][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 65.606969][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 65.610873][ T9] usb 6-1: config 0 descriptor?? [ 65.644080][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.858747][ T42] audit: type=1400 audit(1787650381.953:33062): avc: denied { setopt } for pid=6678 comm="syz.2.233" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 65.940329][ T42] audit: type=1400 audit(1787650382.033:33063): avc: denied { read write } for pid=6682 comm="syz.2.235" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.949951][ T42] audit: type=1400 audit(1787650382.033:33064): avc: denied { open } for pid=6682 comm="syz.2.235" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.959864][ T42] audit: type=1400 audit(1787650382.033:33065): avc: denied { ioctl } for pid=6682 comm="syz.2.235" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.964620][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 65.970109][ T42] audit: type=1400 audit(1787650382.043:33066): avc: denied { set_context_mgr } for pid=6682 comm="syz.2.235" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 65.980848][ T42] audit: type=1400 audit(1787650382.043:33067): avc: denied { map } for pid=6682 comm="syz.2.235" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 65.993838][ T41] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 66.020757][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.023142][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.026440][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.028802][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.030364][ T6691] netlink: 44 bytes leftover after parsing attributes in process `syz.2.237'. [ 66.031037][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.036746][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.038805][ T6692] netlink: 44 bytes leftover after parsing attributes in process `syz.2.237'. [ 66.039044][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.045295][ T9] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 66.052861][ T9] plantronics 0003:047F:FFFF.0003: hiddev1,hidraw2: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 66.124041][ T41] usb 5-1: device descriptor read/64, error -32 [ 66.226209][ T6713] overlayfs: failed to resolve './file0': -2 [ 66.231289][ T6713] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 66.233380][ T6713] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 66.236170][ T6713] vhci_hcd vhci_hcd.0: Device attached [ 66.238878][ T6714] vhci_hcd: connection closed [ 66.240154][ T5832] vhci_hcd vhci_hcd.2: stop threads [ 66.243425][ T5832] vhci_hcd vhci_hcd.2: release socket [ 66.245093][ T5832] vhci_hcd vhci_hcd.2: disconnect device [ 66.329323][ T5831] usb 6-1: USB disconnect, device number 8 [ 66.394164][ T41] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 66.523696][ T41] usb 5-1: device descriptor read/64, error -32 [ 66.754543][ T5831] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 66.783480][ T41] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 66.803860][ T41] usb 5-1: device descriptor read/8, error -32 [ 66.883482][ T5831] usb 6-1: device descriptor read/64, error -71 [ 66.930727][ T6730] netlink: 'syz.2.248': attribute type 10 has an invalid length. [ 66.939667][ T6730] team0: Device wg2 is of different type [ 67.004338][ T850] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 67.043547][ T41] usb 5-1: reset high-speed USB device number 4 using dummy_hcd [ 67.063933][ T41] usb 5-1: device descriptor read/8, error -32 [ 67.083600][ T65] Bluetooth: hci3: command 0x0c1a tx timeout [ 67.083649][ T5727] Bluetooth: hci1: command 0x0c1a tx timeout [ 67.093466][ T5727] Bluetooth: hci2: command 0x0c1a tx timeout [ 67.143470][ T5831] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 67.198173][ T24] usb 5-1: USB disconnect, device number 4 [ 67.293452][ T5831] usb 6-1: device descriptor read/64, error -71 [ 67.413622][ T5831] usb usb6-port1: attempt power cycle [ 67.583483][ T5810] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 67.733448][ T5810] usb 7-1: Using ep0 maxpacket: 16 [ 67.736343][ T5810] usb 7-1: New USB device found, idVendor=045e, idProduct=0437, bcdDevice=63.a7 [ 67.740032][ T5810] usb 7-1: config 9 has an invalid interface number: 39 but max is 0 [ 67.742984][ T5810] usb 7-1: config 9 has no interface number 0 [ 67.745531][ T5810] usb 7-1: config 9 interface 39 has no altsetting 0 [ 67.749294][ T5810] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.752262][ T5810] usb 7-1: Product: 《 [ 67.753423][ T5831] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 67.754123][ T5810] usb 7-1: Manufacturer: Г [ 67.758211][ T5810] usb 7-1: SerialNumber: Ñ— [ 67.774938][ T5831] usb 6-1: device descriptor read/8, error -71 [ 68.013430][ T5831] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 68.033929][ T5831] usb 6-1: device descriptor read/8, error -71 [ 68.043689][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 68.145465][ T5831] usb usb6-port1: unable to enumerate USB device [ 68.683590][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.083709][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 69.728472][ T6819] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 69.742725][ T6819] syz.1.260 uses obsolete (PF_INET,SOCK_PACKET) [ 69.804077][ T1489] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.046583][ T42] kauditd_printk_skb: 5 callbacks suppressed [ 70.046595][ T42] audit: type=1400 audit(1787650386.143:33073): avc: denied { write } for pid=6824 comm="syz.1.262" name="snapshot" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 70.046694][ T6825] random: crng reseeded on system resumption [ 70.069089][ T42] audit: type=1400 audit(1787650386.163:33074): avc: denied { bind } for pid=6824 comm="syz.1.262" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 70.076954][ T42] audit: type=1400 audit(1787650386.163:33075): avc: denied { name_connect } for pid=6824 comm="syz.1.262" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 70.125044][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.125811][ T6827] netlink: 'syz.3.263': attribute type 1 has an invalid length. [ 70.150526][ T6827] 8021q: adding VLAN 0 to HW filter on device bond2 [ 70.170016][ T6827] bond2: (slave geneve2): making interface the new active one [ 70.173280][ T6789] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 70.176956][ T6827] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 70.223556][ T6825] Unrecognized hibernate image header format! [ 70.225201][ T5810] usb 7-1: USB disconnect, device number 8 [ 70.236948][ T6825] PM: hibernation: Image mismatch: architecture specific data [ 70.254741][ T6831] evm: overlay not supported [ 70.372428][ T6847] __nla_validate_parse: 2 callbacks suppressed [ 70.372445][ T6847] netlink: 60 bytes leftover after parsing attributes in process `syz.0.270'. [ 70.379663][ T6847] unsupported nlmsg_type 40 [ 70.386125][ T42] audit: type=1400 audit(1787650386.483:33076): avc: denied { bind } for pid=6846 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.392912][ T42] audit: type=1400 audit(1787650386.483:33077): avc: denied { setopt } for pid=6846 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.399067][ T42] audit: type=1400 audit(1787650386.483:33078): avc: denied { accept } for pid=6846 comm="syz.0.270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 70.405480][ T42] audit: type=1400 audit(1787650386.493:33079): avc: denied { write } for pid=6842 comm="syz.3.269" name="filter" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 70.412942][ T42] audit: type=1400 audit(1787650386.503:33080): avc: denied { read } for pid=6842 comm="syz.3.269" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 70.436499][ T42] audit: type=1400 audit(1787650386.533:33081): avc: denied { create } for pid=6857 comm="syz.1.273" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.448962][ T42] audit: type=1400 audit(1787650386.533:33082): avc: denied { read write } for pid=6857 comm="syz.1.273" name="file0" dev="tmpfs" ino=415 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 70.448996][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.642806][ T6866] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 70.770939][ T6877] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 70.775478][ T6877] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 70.822948][ T6883] netlink: 8 bytes leftover after parsing attributes in process `syz.0.279'. [ 70.827093][ T6883] netlink: 12 bytes leftover after parsing attributes in process `syz.0.279'. [ 70.983519][ T6890] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 70.988232][ T6890] block device autoloading is deprecated and will be removed. [ 71.031250][ T6887] block device autoloading is deprecated and will be removed. [ 71.050025][ T6893] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 71.084290][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.097560][ T1436] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.100396][ T1436] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.175304][ T24] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.262901][ T41] logitech-hidpp-device 0005:046D:B012.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 71.312698][ T6903] fido_id[6903]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 71.666152][ T6915] openvswitch: netlink: Missing key (keys=c0, expected=20100) [ 71.671234][ T6915] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 71.677463][ T6915] overlayfs: missing 'lowerdir' [ 71.881676][ T6923] Illegal XDP return value 3047209692 on prog (id 34) dev syz_tun, expect packet loss! [ 71.940740][ T6927] overlayfs: overlapping lowerdir path [ 71.940844][ T6928] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.946905][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 71.961383][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.296'. [ 72.042614][ T6934] serial 00:04: in use; can't configure [ 72.065966][ T5832] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.152289][ T6938] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 72.154829][ T6938] netlink: 224 bytes leftover after parsing attributes in process `syz.1.301'. [ 72.212208][ T5832] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.216956][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.221151][ T65] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.228646][ T5831] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 72.229844][ T65] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.235308][ T65] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.239520][ T65] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.242663][ T65] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.250241][ T6950] Bluetooth: MGMT ver 1.23 [ 72.313299][ T6957] loop4: detected capacity change from 0 to 7 [ 72.317952][ T5832] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.325522][ T6808] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.332533][ T6808] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.336530][ T6808] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.339368][ T6808] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.342568][ T6808] Buffer I/O error on dev loop4, logical block 0, async page read [ 72.393165][ T5832] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.404721][ T5831] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 72.408494][ T5831] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 72.410902][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 72.414358][ T5831] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.417862][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 72.421325][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 72.426190][ T5831] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 72.429064][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 72.432773][ T5831] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.436996][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 72.440368][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 72.444914][ T5831] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 72.447217][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 72.450657][ T5831] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 72.454374][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 72.457733][ T5831] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 72.463476][ T5831] usb 5-1: string descriptor 0 read error: -22 [ 72.465453][ T5831] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.478121][ T5831] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 72.546091][ T6984] xt_hashlimit: size too large, truncated to 1048576 [ 72.844917][ T5832] bond2 (unregistering): (slave geneve2): Releasing active interface [ 72.845813][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 72.879778][ T5832] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.887480][ T5832] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.897297][ T5832] bond0 (unregistering): Released all slaves [ 72.904452][ T5832] bond1 (unregistering): Released all slaves [ 72.911648][ T5832] bond2 (unregistering): Released all slaves [ 72.920762][ T5438] 8021q: adding VLAN 0 to HW filter on device eth1 [ 72.936975][ T7011] netlink: 8 bytes leftover after parsing attributes in process `syz.2.317'. [ 72.978173][ T6945] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.981034][ T6945] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.983464][ T6945] bridge_slave_0: entered allmulticast mode [ 72.988238][ T6945] bridge_slave_0: entered promiscuous mode [ 72.991576][ T6945] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.994485][ T6945] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.997447][ T6945] bridge_slave_1: entered allmulticast mode [ 73.000915][ T6945] bridge_slave_1: entered promiscuous mode [ 73.025383][ T6945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.029764][ T6945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.034875][ T5832] IPVS: stopping backup sync thread 6444 ... [ 73.044732][ T6945] team0: Port device team_slave_0 added [ 73.092966][ T6945] team0: Port device team_slave_1 added [ 73.106972][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.109148][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.117784][ T6945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.122004][ T6945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.125112][ T6945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.132715][ T6945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.139755][ T5438] 8021q: adding VLAN 0 to HW filter on device eth2 [ 73.146750][ T7028] netlink: 68 bytes leftover after parsing attributes in process `syz.1.320'. [ 73.164081][ T6945] hsr_slave_0: entered promiscuous mode [ 73.167113][ T6945] hsr_slave_1: entered promiscuous mode [ 73.169158][ T6945] debugfs: 'hsr0' already exists in 'hsr' [ 73.170917][ T6945] Cannot create hsr debugfs directory [ 73.368121][ T5832] hsr_slave_0: left promiscuous mode [ 73.370254][ T5832] hsr_slave_1: left promiscuous mode [ 73.372351][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.375894][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.381342][ T5832] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.383770][ T5832] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.391267][ T5832] veth1_macvtap: left promiscuous mode [ 73.393834][ T5832] veth0_macvtap: left promiscuous mode [ 73.395690][ T5832] veth1_vlan: left promiscuous mode [ 73.397379][ T5832] veth0_vlan: left promiscuous mode [ 73.501952][ T7054] netlink: 'syz.2.325': attribute type 1 has an invalid length. [ 73.526892][ T5832] team0 (unregistering): Port device team_slave_1 removed [ 73.533862][ T5832] team0 (unregistering): Port device team_slave_0 removed [ 73.619076][ T5438] 8021q: adding VLAN 0 to HW filter on device eth3 [ 73.630318][ T7054] bond3: entered promiscuous mode [ 73.632145][ T7054] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.641790][ T7056] 8021q: adding VLAN 0 to HW filter on device bond3 [ 73.644592][ T7056] bond3: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 73.648227][ T7056] bond3: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 73.652882][ T7056] bond3: (slave ip6gre1): making interface the new active one [ 73.656425][ T7056] ip6gre1: entered promiscuous mode [ 73.659999][ T7056] bond3: (slave ip6gre1): Enslaving as an active interface with an up link [ 73.698055][ T7059] CUSE: unknown device info "" [ 73.699849][ T7059] CUSE: unknown device info "" [ 73.701639][ T7059] CUSE: unknown device info "" [ 73.703629][ T7059] CUSE: unknown device info "" [ 73.705607][ T7059] CUSE: zero length info key specified [ 73.761947][ T6945] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 73.780901][ T6945] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.789298][ T6945] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 73.800312][ T6945] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.805077][ T6945] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 73.809175][ T6945] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.812147][ T6945] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 73.817030][ T6945] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.875246][ T5438] 8021q: adding VLAN 0 to HW filter on device eth4 [ 73.983168][ T5832] IPVS: stop unused estimator thread 0... [ 74.283459][ T5727] Bluetooth: hci0: command 0x0c1a tx timeout [ 74.283753][ T65] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 74.284575][ T5731] Bluetooth: hci2: command tx timeout [ 74.596709][ T7064] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 74.653895][ T6945] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.662925][ T6945] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.667807][ T6742] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.670090][ T6742] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.676420][ T6742] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.678691][ T6742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.777158][ T5810] usb 5-1: USB disconnect, device number 5 [ 74.893998][ T1489] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 74.912238][ T7108] geneve2: entered promiscuous mode [ 74.922219][ T6945] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.045431][ T1489] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 75.050352][ T1489] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.057288][ T1489] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 75.067389][ T1489] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.070472][ T6945] veth0_vlan: entered promiscuous mode [ 75.072664][ T1489] usb 7-1: Product: syz [ 75.074094][ T1489] usb 7-1: Manufacturer: syz [ 75.077874][ T1489] usb 7-1: SerialNumber: syz [ 75.082394][ T6945] veth1_vlan: entered promiscuous mode [ 75.088190][ T1489] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 75.090381][ T7121] kvm: kvm [7120]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 75.094894][ T1489] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 75.095373][ T7121] kvm: kvm [7120]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 75.099126][ T6945] veth0_macvtap: entered promiscuous mode [ 75.099170][ T1489] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 75.108785][ T6945] veth1_macvtap: entered promiscuous mode [ 75.119651][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.125416][ T6945] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.132901][ T5832] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.137997][ T5832] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.153757][ T5802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.156865][ T5802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.187464][ T6781] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.189969][ T6781] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.221109][ T6745] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.223808][ T6745] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.239778][ T42] kauditd_printk_skb: 242 callbacks suppressed [ 75.239794][ T42] audit: type=1400 audit(1787650391.333:33325): avc: denied { mounton } for pid=6945 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.279839][ T42] audit: type=1400 audit(1787650391.373:33326): avc: denied { execute } for pid=7128 comm="syz.4.305" name="cgroup" dev="tmpfs" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=lnk_file permissive=1 [ 75.325339][ T5875] net_ratelimit: 2 callbacks suppressed [ 75.325351][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.410748][ T7136] netlink: 20 bytes leftover after parsing attributes in process `syz.0.334'. [ 75.417350][ T42] audit: type=1400 audit(1787650391.513:33327): avc: denied { mounton } for pid=7139 comm="syz.4.335" path="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 75.427399][ T7140] futex_wake_op: syz.4.335 tries to shift op by 144; fix this program [ 75.431529][ T7140] futex_wake_op: syz.4.335 tries to shift op by 144; fix this program [ 75.446005][ T42] audit: type=1400 audit(1787650391.543:33328): avc: denied { unmount } for pid=6945 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 75.479010][ T7142] ublk1: read batch cmd buffer failed [ 75.481322][ T7142] ublk1: read batch cmd buffer failed [ 75.560742][ T7148] overlayfs: unescaped trailing colons in lowerdir mount option. [ 75.601006][ T7151] netlink: 'syz.0.339': attribute type 1 has an invalid length. [ 75.614031][ T7151] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 75.616607][ T7151] overlayfs: overlapping lowerdir path [ 75.624889][ T7151] bond2: (slave geneve3): making interface the new active one [ 75.628216][ T7151] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.631560][ T7151] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 75.643585][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 75.646834][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 75.669816][ T7155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 75.672313][ T7155] batadv_slave_1: entered promiscuous mode [ 75.693469][ T5802] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 75.696483][ T5802] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 75.833529][ T9] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 75.883531][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.946658][ T7093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.953139][ T7157] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 75.954733][ T7093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 75.956928][ T7157] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.004828][ T9] usb 9-1: New USB device found, idVendor=abcd, idProduct=ef01, bcdDevice= 1.00 [ 76.009604][ T9] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 76.013871][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 76.018214][ T9] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 76.022130][ T9] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 76.029412][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.032669][ T9] usb 9-1: Product: syz [ 76.034530][ T9] usb 9-1: Manufacturer: syz [ 76.036456][ T9] usb 9-1: SerialNumber: syz [ 76.256872][ T42] audit: type=1400 audit(1787650392.353:33329): avc: denied { map } for pid=7150 comm="syz.4.340" path="pipe:[15486]" dev="pipefs" ino=15486 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 76.269962][ T5875] usb 9-1: USB disconnect, device number 2 [ 76.331297][ T7159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 76.364015][ T65] Bluetooth: hci2: command tx timeout [ 76.364912][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.685533][ T7175] netlink: 'syz.0.344': attribute type 21 has an invalid length. [ 76.928286][ T42] audit: type=1400 audit(1787650393.023:33330): avc: denied { bind } for pid=7188 comm="syz.0.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.068232][ T7198] tmpfs: Unknown parameter 'sze' [ 77.405102][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 77.415486][ T7204] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7204 comm=syz.4.353 [ 77.473724][ T1489] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 77.558178][ T42] audit: type=1400 audit(1787650393.653:33331): avc: denied { nlmsg_read } for pid=7206 comm="syz.4.354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 77.558988][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 77.626752][ T42] audit: type=1400 audit(1787650393.723:33332): avc: denied { accept } for pid=7208 comm="syz.4.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 77.636599][ T1489] usb 5-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 77.641489][ T1489] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.649375][ T1489] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 77.653264][ T1489] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 77.658399][ T1489] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 77.660927][ T7211] capability: warning: `syz.4.356' uses 32-bit capabilities (legacy support in use) [ 77.667557][ T1489] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.671845][ T1489] usb 5-1: Product: syz [ 77.673424][ T1489] usb 5-1: Manufacturer: syz [ 77.674929][ T1489] usb 5-1: SerialNumber: syz [ 77.683610][ T1489] usbserial_generic 5-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 77.689315][ T1489] usbserial_generic 5-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 77.694013][ T1489] usbserial_generic 5-1:1.0: generic converter detected [ 77.700708][ T1489] usb 5-1: generic converter now attached to ttyUSB2 [ 77.815511][ T7092] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send start command (2), -110 [ 77.821699][ T9] usb 7-1: USB disconnect, device number 9 [ 77.830799][ T9] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 77.836092][ T9] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 77.842058][ T9] ti_usb_3410_5052 7-1:2.0: device disconnected [ 77.887076][ T7201] tmpfs: Bad value for 'mpol' [ 77.892848][ T5831] usb 5-1: USB disconnect, device number 6 [ 77.904393][ T5831] generic ttyUSB2: generic converter now disconnected from ttyUSB2 [ 77.907716][ T5831] usbserial_generic 5-1:1.0: device disconnected [ 77.929519][ T7221] vlan2: entered promiscuous mode [ 77.931644][ T7221] hsr0: entered promiscuous mode [ 77.934398][ T7221] vlan2: entered allmulticast mode [ 77.936512][ T7221] hsr0: entered allmulticast mode [ 77.938557][ T7221] hsr_slave_0: entered allmulticast mode [ 77.940854][ T7221] hsr_slave_1: entered allmulticast mode [ 77.958523][ T7221] netlink: 4 bytes leftover after parsing attributes in process `syz.4.359'. [ 77.962314][ T7221] hsr_slave_0: left promiscuous mode [ 77.966363][ T7221] hsr_slave_1: left promiscuous mode [ 78.386002][ T42] audit: type=1400 audit(1787650394.483:33333): avc: denied { read } for pid=7225 comm="syz.2.361" name="ndctl0" dev="devtmpfs" ino=109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 78.438153][ T7230] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 78.441162][ T7230] PKCS7: Only support pkcs7_signedData type [ 78.444236][ T65] Bluetooth: hci2: command tx timeout [ 78.444636][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 78.475703][ T7235] netlink: 'syz.2.364': attribute type 12 has an invalid length. [ 78.479016][ T7235] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 78.481870][ T7235] netlink: 148 bytes leftover after parsing attributes in process `syz.2.364'. [ 78.485659][ T7235] netlink: 'syz.2.364': attribute type 3 has an invalid length. [ 78.488663][ T7235] netlink: 'syz.2.364': attribute type 2 has an invalid length. [ 78.491604][ T7235] netlink: 35 bytes leftover after parsing attributes in process `syz.2.364'. [ 78.495861][ T7234] netlink: 'syz.2.364': attribute type 12 has an invalid length. [ 78.498794][ T7234] netlink: 'syz.2.364': attribute type 29 has an invalid length. [ 78.501839][ T7234] netlink: 148 bytes leftover after parsing attributes in process `syz.2.364'. [ 78.505850][ T7234] netlink: 'syz.2.364': attribute type 3 has an invalid length. [ 78.509054][ T7234] netlink: 'syz.2.364': attribute type 2 has an invalid length. [ 78.512232][ T7234] netlink: 35 bytes leftover after parsing attributes in process `syz.2.364'. [ 78.561820][ T7240] jffs2: notice: (7240) jffs2_build_xattr_subsystem: complete building xattr subsystem, 3 of xdatum (0 unchecked, 0 orphan) and 3 of xref (0 dead, 0 orphan) found. [ 78.578767][ T42] audit: type=1400 audit(1787650394.673:33334): avc: denied { write } for pid=7238 comm="syz.0.365" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.595610][ T7240] netlink: 8 bytes leftover after parsing attributes in process `syz.0.365'. [ 78.613768][ T65] Bluetooth: hci3: unexpected event for opcode 0x2005 [ 78.654589][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.661440][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.666811][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.672062][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.677817][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.683814][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.689092][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.696087][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.701555][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.706582][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.712269][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.717282][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.722415][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.727700][ T7246] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.733134][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.739784][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.745511][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.751928][ T7249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.913851][ T5875] usb 5-1: new low-speed USB device number 7 using dummy_hcd [ 78.923931][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.073859][ T5875] usb 5-1: Invalid ep0 maxpacket: 32 [ 79.191874][ T7271] netlink: 228 bytes leftover after parsing attributes in process `syz.2.376'. [ 79.213505][ T5875] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 79.383491][ T5875] usb 5-1: Invalid ep0 maxpacket: 32 [ 79.385531][ T5875] usb usb5-port1: attempt power cycle [ 79.495715][ T41] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 79.753520][ T5875] usb 5-1: new low-speed USB device number 9 using dummy_hcd [ 79.773981][ T5875] usb 5-1: Invalid ep0 maxpacket: 32 [ 79.903553][ T5875] usb 5-1: new low-speed USB device number 10 using dummy_hcd [ 79.923912][ T5875] usb 5-1: Invalid ep0 maxpacket: 32 [ 79.926618][ T5875] usb usb5-port1: unable to enumerate USB device [ 80.006680][ T7276] netlink: 1363 bytes leftover after parsing attributes in process `syz.2.378'. [ 80.071113][ T7280] cgroup: Unknown subsys name 'Zz-#FÇ<æõ]%gCžÊ [ 80.071113][ T7280] SÃȘØÈžZ§6ŸÂ' [ 80.081371][ T7282] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1546 sclass=netlink_tcpdiag_socket pid=7282 comm=syz.4.377 [ 80.120670][ T7286] program syz.2.381 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 80.176342][ T7293] pci 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 80.179908][ T7292] pci 0000:00:02.0: MSI/MSI-X disallowed for future drivers [ 80.209991][ T7295] openvswitch: netlink: IP tunnel dst address not specified [ 80.223118][ T7296] openvswitch: netlink: IP tunnel dst address not specified [ 80.271646][ T42] kauditd_printk_skb: 23 callbacks suppressed [ 80.271658][ T42] audit: type=1400 audit(1787650396.363:33358): avc: denied { create } for pid=7299 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 80.281208][ T42] audit: type=1400 audit(1787650396.363:33359): avc: denied { bind } for pid=7299 comm="syz.4.384" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 80.372349][ T42] audit: type=1400 audit(1787650396.463:33360): avc: denied { listen } for pid=7305 comm="syz.2.387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.466450][ T7318] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 80.481519][ T42] audit: type=1400 audit(1787650396.573:33361): avc: denied { ioctl } for pid=7317 comm="syz.2.392" path="socket:[18423]" dev="sockfs" ino=18423 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 80.485974][ T6745] IPVS: starting estimator thread 0... [ 80.523900][ T65] Bluetooth: hci2: command tx timeout [ 80.527591][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.527617][ T42] audit: type=1400 audit(1787650396.623:33362): avc: denied { setopt } for pid=7326 comm="syz.2.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 80.529883][ T7327] netlink: 14 bytes leftover after parsing attributes in process `syz.2.394'. [ 80.593456][ T7319] IPVS: using max 44 ests per chain, 105600 per kthread [ 80.647784][ T42] audit: type=1400 audit(1787650396.743:33363): avc: denied { connect } for pid=7330 comm="syz.4.395" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 80.689956][ T7334] syz.2.397: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 80.695957][ T5874] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 80.700027][ T7334] CPU: 1 UID: 0 PID: 7334 Comm: syz.2.397 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 80.700047][ T7334] Tainted: [L]=SOFTLOCKUP [ 80.700051][ T7334] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 80.700058][ T7334] Call Trace: [ 80.700062][ T7334] [ 80.700066][ T7334] dump_stack_lvl+0x100/0x190 [ 80.700100][ T7334] warn_alloc.cold+0x9e/0xb2 [ 80.700114][ T7334] ? __pfx_warn_alloc+0x10/0x10 [ 80.700131][ T7334] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 80.700143][ T7334] ? xskq_create+0x52/0x290 [ 80.700163][ T7334] ? xsk_setsockopt+0x743/0xab0 [ 80.700179][ T7334] ? __sys_setsockopt+0x195/0x220 [ 80.700202][ T7334] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.700223][ T7334] __vmalloc_node_range_noprof+0x123b/0x1460 [ 80.700239][ T7334] ? xsk_setsockopt+0x743/0xab0 [ 80.700258][ T7334] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 80.700271][ T7334] ? __kasan_kmalloc+0xaa/0xb0 [ 80.700287][ T7334] ? __kmalloc_cache_noprof+0x2e7/0x6b0 [ 80.700302][ T7334] ? xskq_create+0x52/0x290 [ 80.700320][ T7334] ? xsk_setsockopt+0x743/0xab0 [ 80.700336][ T7334] xskq_create+0x18f/0x290 [ 80.700352][ T7334] ? xsk_setsockopt+0x743/0xab0 [ 80.700369][ T7334] xsk_setsockopt+0x743/0xab0 [ 80.700386][ T7334] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.700402][ T7334] ? find_held_lock+0x2b/0x80 [ 80.700415][ T7334] ? __fget_files+0x215/0x3d0 [ 80.700435][ T7334] ? selinux_socket_setsockopt+0x6a/0x80 [ 80.700451][ T7334] ? __pfx_xsk_setsockopt+0x10/0x10 [ 80.700468][ T7334] do_sock_setsockopt+0xf3/0x1d0 [ 80.700482][ T7334] __sys_setsockopt+0x195/0x220 [ 80.700502][ T7334] __x64_sys_setsockopt+0xbd/0x160 [ 80.700518][ T7334] ? do_syscall_64+0xae/0x790 [ 80.700529][ T7334] ? lockdep_hardirqs_on+0x7d/0x110 [ 80.700541][ T7334] do_syscall_64+0x123/0x790 [ 80.700553][ T7334] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 80.700565][ T7334] RIP: 0033:0x7f6187b9e0d9 [ 80.700575][ T7334] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 80.700585][ T7334] RSP: 002b:00007f61889a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 80.700596][ T7334] RAX: ffffffffffffffda RBX: 00007f6187e25fa0 RCX: 00007f6187b9e0d9 [ 80.700603][ T7334] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 80.700609][ T7334] RBP: 00007f6187c35024 R08: 0000000000000004 R09: 0000000000000000 [ 80.700616][ T7334] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 80.700622][ T7334] R13: 00007f6187e26038 R14: 00007f6187e25fa0 R15: 00007ffffaef6618 [ 80.700636][ T7334] [ 80.700640][ T7334] Mem-Info: [ 80.701014][ T7334] active_anon:10255 inactive_anon:0 isolated_anon:0 [ 80.701014][ T7334] active_file:0 inactive_file:62230 isolated_file:0 [ 80.701014][ T7334] unevictable:1000 dirty:36 writeback:0 [ 80.701014][ T7334] slab_reclaimable:12129 slab_unreclaimable:69367 [ 80.701014][ T7334] mapped:24823 shmem:1557 pagetables:1285 [ 80.701014][ T7334] sec_pagetables:294 bounce:0 [ 80.701014][ T7334] kernel_misc_reclaimable:0 [ 80.701014][ T7334] free:449646 free_pcp:10466 free_cma:0 [ 80.701045][ T7334] Node 0 active_anon:41020kB inactive_anon:0kB active_file:0kB inactive_file:248712kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:99292kB dirty:136kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:14912kB pagetables:4908kB sec_pagetables:1176kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 80.701077][ T7334] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:2000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:128kB pagetables:232kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 80.701107][ T7334] Node 0 DMA free:15328kB boost:0kB min:340kB low:424kB high:508kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.701142][ T7334] lowmem_reserve[]: 0 1224 1224 1224 1224 [ 80.701167][ T7334] Node 0 DMA32 free:130800kB boost:0kB min:27364kB low:34204kB high:41044kB reserved_highatomic:0KB free_highatomic:0KB active_anon:41020kB inactive_anon:0kB active_file:0kB inactive_file:248712kB unevictable:2000kB writepending:136kB zspages:0kB present:2080628kB managed:1253908kB mlocked:0kB bounce:0kB free_pcp:41864kB local_pcp:10844kB free_cma:0kB [ 80.701203][ T7334] lowmem_reserve[]: 0 0 0 0 0 [ 80.701227][ T7334] Node 1 Normal free:1652456kB boost:0kB min:39872kB low:49840kB high:59808kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:2000kB writepending:8kB zspages:0kB present:2097152kB managed:1781884kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 80.701259][ T7334] lowmem_reserve[]: 0 0 0 0 0 [ 80.701280][ T7334] Node 0 DMA: 0*4kB 0*8kB 0*16kB 1*32kB (U) 1*64kB (U) 1*128kB (U) 1*256kB (U) 1*512kB (U) 0*1024kB 1*2048kB (M) 3*4096kB (M) = 15328kB [ 80.701364][ T7334] Node 0 DMA32: 308*4kB (UME) 294*8kB (UME) 196*16kB (UME) 759*32kB (UM) 309*64kB (UME) 87*128kB (UME) 35*256kB (UME) 23*512kB (UM) 15*1024kB (UM) 8*2048kB (ME) 4*4096kB (UM) = 130784kB [ 80.701463][ T7334] Node 1 Normal: 4*4kB (UM) 1*8kB (U) 9*16kB (UM) 14*32kB (UM) 14*64kB (UM) 6*128kB (UM) 2*256kB (U) 4*512kB (UM) 1*1024kB (U) 2*2048kB (UM) 401*4096kB (M) = 1652456kB [ 80.701561][ T7334] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.701570][ T7334] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.701579][ T7334] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.701587][ T7334] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.701596][ T7334] 63783 total pagecache pages [ 80.701600][ T7334] 0 pages in swap cache [ 80.701604][ T7334] Free swap = 124996kB [ 80.701609][ T7334] Total swap = 124996kB [ 80.701613][ T7334] 1048443 pages RAM [ 80.701617][ T7334] 0 pages HighMem/MovableOnly [ 80.701621][ T7334] 285655 pages reserved [ 80.701626][ T7334] 0 pages cma reserved [ 80.711467][ T42] audit: type=1400 audit(1787650396.803:33364): avc: denied { connect } for pid=7333 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.766789][ T7340] tmpfs: Unknown parameter 'mpol-bind:0-1:8/5N' [ 80.768268][ T42] audit: type=1400 audit(1787650396.813:33365): avc: denied { read } for pid=7333 comm="syz.2.397" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 80.957791][ T42] audit: type=1400 audit(1787650397.053:33366): avc: denied { map } for pid=7344 comm="syz.4.398" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 80.965073][ T42] audit: type=1400 audit(1787650397.053:33367): avc: denied { execute } for pid=7344 comm="syz.4.398" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 81.067384][ T7354] ip_tables: iptables: counters copy to user failed while replacing table [ 81.107190][ T7357] netlink: 76 bytes leftover after parsing attributes in process `syz.4.401'. [ 81.198847][ T7364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.404'. [ 81.348700][ T3269] cfg80211: failed to load regulatory.db [ 81.566702][ T5875] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.683949][ T7383] overlayfs: conflicting options: nfs_export=on,index=off [ 81.688045][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 81.690973][ T7385] netlink: 8 bytes leftover after parsing attributes in process `syz.0.411'. [ 81.747337][ T7392] validate_nla: 1 callbacks suppressed [ 81.747349][ T7392] netlink: 'syz.2.414': attribute type 10 has an invalid length. [ 81.760073][ T7394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.764105][ T7394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.767061][ T7394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.771055][ T7394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.776328][ T7394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.780813][ T7394] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 81.813128][ T65] Bluetooth: hci1: connection err: -111 [ 81.813785][ T7396] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8) [ 81.817336][ T7396] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 81.820119][ T7396] vhci_hcd vhci_hcd.0: Device attached [ 81.835427][ T7397] vhci_hcd: connection closed [ 81.837924][ T5774] vhci_hcd vhci_hcd.0: stop threads [ 81.841889][ T5774] vhci_hcd vhci_hcd.0: release socket [ 81.844578][ T5774] vhci_hcd vhci_hcd.0: disconnect device [ 82.108094][ T7405] netlink: 'syz.2.418': attribute type 4 has an invalid length. [ 82.110490][ T7405] netlink: 17 bytes leftover after parsing attributes in process `syz.2.418'. [ 82.114456][ T7405] netlink: 14601 bytes leftover after parsing attributes in process `syz.2.418'. [ 82.118354][ T7405] netlink: 60 bytes leftover after parsing attributes in process `syz.2.418'. [ 82.151999][ T7408] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7) [ 82.190083][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.2.420'. [ 82.237216][ T7414] ucma_write: process 422 (syz.2.422) changed security contexts after opening file descriptor, this is not allowed. [ 82.295836][ T7418] binder: BC_ACQUIRE_RESULT not supported [ 82.298341][ T7418] binder: 7417:7418 ioctl c0306201 2000000003c0 returned -22 [ 82.304727][ T7419] binder: BC_ACQUIRE_RESULT not supported [ 82.306569][ T7419] binder: 7417:7419 ioctl c0306201 2000000003c0 returned -22 [ 82.374670][ T7427] netlink: 'syz.4.426': attribute type 1 has an invalid length. [ 82.488004][ T7435] ftl_cs: FTL header not found. [ 82.519549][ T7435] block2mtd: mtd1: [/dev/loop0] erase_size = 0KiB [65] [ 82.525179][ T7437] block2mtd: error: cannot open device /dev/loop0 [ 82.548409][ T7444] program syz.2.429 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.656554][ T7456] program syz.0.433 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 82.702480][ T7457] tmpfs: Bad value for 'mode' [ 82.737122][ T7466] xfrm0 speed is unknown, defaulting to 1000 [ 82.741307][ T7466] xfrm0 speed is unknown, defaulting to 1000 [ 82.749630][ T7466] xfrm0 speed is unknown, defaulting to 1000 [ 82.753962][ T7466] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 82.761696][ T7466] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 82.769016][ T7466] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 82.776666][ T7466] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 82.791897][ T7466] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 82.832890][ T7466] xfrm0 speed is unknown, defaulting to 1000 [ 82.840841][ T7466] xfrm0 speed is unknown, defaulting to 1000 [ 82.845065][ T7466] xfrm0 speed is unknown, defaulting to 1000 [ 82.849005][ T7466] xfrm0 speed is unknown, defaulting to 1000 [ 82.899781][ T7469] jffs2: notice: (7469) jffs2_build_xattr_subsystem: complete building xattr subsystem, 4 of xdatum (0 unchecked, 3 orphan) and 5 of xref (0 dead, 4 orphan) found. [ 83.520233][ T7494] bond0: (slave bond_slave_1): Releasing backup interface [ 83.552754][ T7494] netlink: 16 bytes leftover after parsing attributes in process `syz.0.445'. [ 83.622890][ T7502] syz.0.446: attempt to access beyond end of device [ 83.622890][ T7502] sr0: rw=6144, sector=128, nr_sectors = 8 limit=128 [ 83.633202][ T7502] gfs2: error -5 reading superblock [ 83.870688][ T7523] syz.0.453 (7523): /proc/7521/oom_adj is deprecated, please use /proc/7521/oom_score_adj instead. [ 84.092760][ T7534] syzkaller0: entered promiscuous mode [ 84.095714][ T7534] syzkaller0: entered allmulticast mode [ 84.106090][ T7536] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.119252][ T7537] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 84.222223][ T7541] netlink: 'syz.2.458': attribute type 1 has an invalid length. [ 84.345844][ T7543] netlink: 'syz.2.458': attribute type 10 has an invalid length. [ 85.412556][ T7541] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 85.416523][ T7543] dummy0: entered promiscuous mode [ 85.465571][ T42] kauditd_printk_skb: 26 callbacks suppressed [ 85.465583][ T42] audit: type=1400 audit(1787650401.563:33394): avc: denied { write } for pid=7545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.509989][ T42] audit: type=1400 audit(1787650401.603:33395): avc: denied { write } for pid=7550 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.548917][ T7554] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3918892086 (125404546752 ns) > initial count (95458267904 ns). Using initial count to start timer. [ 85.558737][ T7554] __nla_validate_parse: 67 callbacks suppressed [ 85.558749][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 85.566286][ T7554] netlink: 16 bytes leftover after parsing attributes in process `syz.0.461'. [ 85.569013][ T7557] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 85.569226][ T7554] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Hello request ret = -22) [ 85.575562][ T7554] iwpm_hello_cb: Unable to parse nlmsg [ 85.578954][ T65] Bluetooth: hci1: unexpected event for opcode 0x0c5a [ 85.625071][ T7557] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 85.625993][ T42] audit: type=1400 audit(1787650401.723:33396): avc: denied { write } for pid=7559 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.690248][ T42] audit: type=1400 audit(1787650401.783:33397): avc: denied { write } for pid=7567 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.717428][ T42] audit: type=1400 audit(1787650401.813:33398): avc: denied { mmap_zero } for pid=7564 comm="syz.2.463" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 85.735077][ T7167] net_ratelimit: 18 callbacks suppressed [ 85.735092][ T7167] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 85.776632][ T42] audit: type=1400 audit(1787650401.873:33399): avc: denied { write } for pid=7571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.796786][ T7574] input: syz1 as /devices/virtual/input/input8 [ 85.830772][ T42] audit: type=1400 audit(1787650401.923:33400): avc: denied { write } for pid=7578 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.918711][ T42] audit: type=1400 audit(1787650402.013:33401): avc: denied { write } for pid=7581 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.965917][ T42] audit: type=1400 audit(1787650402.063:33402): avc: denied { write } for pid=7584 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 86.564924][ T42] audit: type=1800 audit(1787650402.663:33403): pid=7588 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.2.465" name="/null" dev="devtmpfs" ino=5 res=0 errno=0 [ 86.823665][ T7613] netlink: 'syz.2.471': attribute type 1 has an invalid length. [ 86.847082][ T7613] netlink: 52 bytes leftover after parsing attributes in process `syz.2.471'. [ 86.868820][ T7613] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 86.875713][ T7613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.471'. [ 86.880339][ T5774] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 86.880750][ T7613] 8021q: adding VLAN 0 to HW filter on device bond4 [ 86.892154][ T7613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7613 comm=syz.2.471 [ 86.898314][ T7611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.470'. [ 86.999003][ T5802] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 86.999964][ T7623] SELinux: policydb version -1114649272 does not match my version range 15-35 [ 87.021485][ T7623] SELinux: failed to load policy [ 87.044679][ T7626] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device nullb0. [ 87.190051][ T7637] sd 0:0:0:0: PR command failed: 1026 [ 87.191846][ T7637] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 87.194427][ T7637] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 87.569699][ T7649] genirq: Flags mismatch irq 4. 00200000 (pcl816) vs. 00200080 (ttyS0) [ 87.602640][ T7651] SELinux: ebitmap: map size 0 does not match my size 64 (high bit was 0) [ 87.605655][ T7651] SELinux: failed to load policy [ 87.869906][ T7674] ovs-system: entered promiscuous mode [ 87.876262][ T7674] exFAT-fs (nbd2): unable to read boot sector [ 87.878838][ T7674] exFAT-fs (nbd2): failed to read boot sector [ 87.881325][ T7674] exFAT-fs (nbd2): failed to recognize exfat type [ 88.070999][ T7696] netlink: 20 bytes leftover after parsing attributes in process `syz.2.498'. [ 88.113548][ T5802] bond4: (slave ip6gretap1): link status up again after 0 ms [ 88.117503][ T5802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 88.233525][ T5802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 88.245805][ T7704] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 88.249121][ T7704] netlink: 232 bytes leftover after parsing attributes in process `syz.2.501'. [ 88.253134][ T7704] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 88.257506][ T7703] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 88.260638][ T7703] netlink: 232 bytes leftover after parsing attributes in process `syz.2.501'. [ 88.265525][ T7703] netlink: 'syz.2.501': attribute type 1 has an invalid length. [ 88.271735][ T7704] ipt_REJECT: TCP_RESET invalid for non-tcp [ 88.343742][ T5802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 88.455935][ T5802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 88.460750][ T5727] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.466949][ T5727] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.470064][ T5727] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.473264][ T5727] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.478829][ T5727] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.573626][ T5802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 88.699421][ T5802] bond4: (slave ip6gretap1): failed to get link speed/duplex [ 88.722188][ T7713] xfrm0 speed is unknown, defaulting to 1000 [ 88.976094][ T7713] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.979084][ T7713] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.981997][ T7713] bridge_slave_0: entered allmulticast mode [ 88.988503][ T7713] bridge_slave_0: entered promiscuous mode [ 88.993591][ T7713] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.996563][ T7713] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.999545][ T7713] bridge_slave_1: entered allmulticast mode [ 89.009900][ T7713] bridge_slave_1: entered promiscuous mode [ 89.045264][ T7713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.052883][ T7713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.080154][ T7713] team0: Port device team_slave_0 added [ 89.085344][ T7713] team0: Port device team_slave_1 added [ 89.107579][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.111409][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.121378][ T7713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.127369][ T7713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.130252][ T7713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.141119][ T7713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.182020][ T7713] hsr_slave_0: entered promiscuous mode [ 89.185049][ T7713] hsr_slave_1: entered promiscuous mode [ 89.187632][ T7713] debugfs: 'hsr0' already exists in 'hsr' [ 89.189936][ T7713] Cannot create hsr debugfs directory [ 89.351934][ T7713] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 89.359859][ T7713] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.363715][ T7713] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 89.372004][ T7713] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.375717][ T7713] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 89.381186][ T7755] ================================================================== [ 89.382036][ T7713] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.384971][ T7755] BUG: KASAN: slab-use-after-free in dvb_device_open+0x33f/0x3b0 [ 89.385035][ T7755] Read of size 8 at addr ffff88802c92e818 by task syz.0.508/7755 [ 89.389087][ T7713] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 89.391252][ T7755] [ 89.391270][ T7755] CPU: 2 UID: 0 PID: 7755 Comm: syz.0.508 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 89.391302][ T7755] Tainted: [L]=SOFTLOCKUP [ 89.391308][ T7755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.391321][ T7755] Call Trace: [ 89.391329][ T7755] [ 89.391337][ T7755] dump_stack_lvl+0x100/0x190 [ 89.391368][ T7755] print_report+0x13d/0x4b0 [ 89.391397][ T7755] ? __virt_addr_valid+0x239/0x430 [ 89.391426][ T7755] ? dvb_device_open+0x33f/0x3b0 [ 89.391451][ T7755] kasan_report+0xdf/0x1c0 [ 89.391491][ T7755] ? dvb_device_open+0x33f/0x3b0 [ 89.391557][ T7755] ? __pfx_dvb_device_open+0x10/0x10 [ 89.391583][ T7755] dvb_device_open+0x33f/0x3b0 [ 89.391610][ T7755] ? __pfx_dvb_device_open+0x10/0x10 [ 89.391635][ T7755] chrdev_open+0x234/0x6a0 [ 89.391667][ T7755] ? __pfx_chrdev_open+0x10/0x10 [ 89.391695][ T7755] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 89.391721][ T7755] do_dentry_open+0x6ab/0x14d0 [ 89.391744][ T7755] ? __pfx_chrdev_open+0x10/0x10 [ 89.391771][ T7755] vfs_open+0x82/0x3f0 [ 89.391788][ T7755] path_openat+0x19fa/0x2440 [ 89.391817][ T7755] ? __pfx_path_openat+0x10/0x10 [ 89.391845][ T7755] do_file_open+0x20e/0x430 [ 89.391873][ T7755] ? __pfx_do_file_open+0x10/0x10 [ 89.391906][ T7755] ? _raw_spin_unlock+0x28/0x50 [ 89.391942][ T7755] ? alloc_fd+0x471/0x7a0 [ 89.391972][ T7755] do_sys_openat2+0x10f/0x1e0 [ 89.391989][ T7755] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.392005][ T7755] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 89.392034][ T7755] __x64_sys_openat+0x12d/0x210 [ 89.392053][ T7755] ? __pfx___x64_sys_openat+0x10/0x10 [ 89.392076][ T7755] do_syscall_64+0x123/0x790 [ 89.392095][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.392114][ T7755] RIP: 0033:0x7ff99215e90e [ 89.392130][ T7755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.392147][ T7755] RSP: 002b:00007ff9903f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.392167][ T7755] RAX: ffffffffffffffda RBX: 00007ff9903f66c0 RCX: 00007ff99215e90e [ 89.392179][ T7755] RDX: 0000000000000002 RSI: 00007ff9903f5c00 RDI: ffffffffffffff9c [ 89.392191][ T7755] RBP: 00007ff9903f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 89.392202][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 89.392213][ T7755] R13: 00007ff992426038 R14: 00007ff992425fa0 R15: 00007ffcc1f3a2e8 [ 89.392230][ T7755] [ 89.392236][ T7755] [ 89.488442][ T7755] Allocated by task 7506: [ 89.489784][ T7755] kasan_save_stack+0x30/0x50 [ 89.491319][ T7755] kasan_save_track+0x14/0x30 [ 89.492952][ T7755] __kasan_kmalloc+0xaa/0xb0 [ 89.494677][ T7755] __kmalloc_cache_noprof+0x2e7/0x6b0 [ 89.496588][ T7755] vgem_open+0x43/0xe0 [ 89.497986][ T7755] drm_file_alloc+0x623/0xb40 [ 89.499499][ T7755] drm_open_helper+0x1fc/0x540 [ 89.501017][ T7755] drm_open+0x1a0/0x3e0 [ 89.502423][ T7755] drm_stub_open+0x20f/0x380 [ 89.504067][ T7755] chrdev_open+0x234/0x6a0 [ 89.505495][ T7755] do_dentry_open+0x6ab/0x14d0 [ 89.506995][ T7755] vfs_open+0x82/0x3f0 [ 89.508277][ T7755] path_openat+0x19fa/0x2440 [ 89.509788][ T7755] do_file_open+0x20e/0x430 [ 89.511230][ T7755] do_sys_openat2+0x10f/0x1e0 [ 89.512862][ T7755] __x64_sys_openat+0x12d/0x210 [ 89.514585][ T7755] do_syscall_64+0x123/0x790 [ 89.516215][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.518095][ T7755] [ 89.518855][ T7755] Freed by task 7505: [ 89.520092][ T7755] kasan_save_stack+0x30/0x50 [ 89.521548][ T7755] kasan_save_track+0x14/0x30 [ 89.523002][ T7755] kasan_save_free_info+0x3b/0x70 [ 89.524595][ T7755] __kasan_slab_free+0x5f/0x80 [ 89.526085][ T7755] kfree+0x22b/0x6c0 [ 89.527331][ T7755] drm_file_free.part.0+0x7d5/0xcc0 [ 89.529183][ T7755] drm_close_helper.isra.0+0x186/0x200 [ 89.531153][ T7755] drm_release+0x1ab/0x360 [ 89.532739][ T7755] __fput+0x3ff/0xb50 [ 89.534151][ T7755] task_work_run+0x150/0x240 [ 89.535723][ T7755] exit_to_user_mode_loop+0x1d8/0x700 [ 89.537402][ T7755] do_syscall_64+0x661/0x790 [ 89.538862][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.540691][ T7755] [ 89.541446][ T7755] The buggy address belongs to the object at ffff88802c92e800 [ 89.541446][ T7755] which belongs to the cache kmalloc-256 of size 256 [ 89.545717][ T7755] The buggy address is located 24 bytes inside of [ 89.545717][ T7755] freed 256-byte region [ffff88802c92e800, ffff88802c92e900) [ 89.551453][ T7755] [ 89.552388][ T7755] The buggy address belongs to the physical page: [ 89.554513][ T7755] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802c92e800 pfn:0x2c92e [ 89.557599][ T7755] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 89.560739][ T7755] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 89.564620][ T7755] page_type: f5(slab) [ 89.566655][ T7755] raw: 00fff00000000240 ffff88801c042b40 ffffea0000701390 ffffea0000d9d290 [ 89.570468][ T7755] raw: ffff88802c92e800 000000080010000e 00000000f5000000 0000000000000000 [ 89.573891][ T7755] head: 00fff00000000240 ffff88801c042b40 ffffea0000701390 ffffea0000d9d290 [ 89.577246][ T7755] head: ffff88802c92e800 000000080010000e 00000000f5000000 0000000000000000 [ 89.580755][ T7755] head: 00fff00000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff [ 89.584435][ T7755] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000002 [ 89.588227][ T7755] page dumped because: kasan: bad access detected [ 89.591030][ T7755] page_owner tracks the page as allocated [ 89.593273][ T7755] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 38, tgid 38 (kdevtmpfs), ts 9139922377 [ 89.600433][ T7755] post_alloc_hook+0xfd/0x120 [ 89.602368][ T7755] get_page_from_freelist+0x110d/0x35b0 [ 89.605206][ T7755] __alloc_frozen_pages_noprof+0x2eb/0x3300 [ 89.608366][ T7755] new_slab+0xa5/0x640 [ 89.610134][ T7755] refill_objects+0xe3/0x410 [ 89.612083][ T7755] __pcs_replace_empty_main+0x372/0x680 [ 89.614364][ T7755] __kmalloc_noprof+0x66b/0x820 [ 89.616390][ T7755] security_inode_init_security+0x113/0x370 [ 89.618204][ T7755] shmem_mknod+0x2ce/0x480 [ 89.619613][ T7755] vfs_mknod+0x3a5/0x7f0 [ 89.620943][ T7755] devtmpfs_work_loop+0x48d/0xae4 [ 89.622511][ T7755] devtmpfsd+0x3f/0x50 [ 89.623895][ T7755] kthread+0x373/0x450 [ 89.625272][ T7755] ret_from_fork+0x730/0xd60 [ 89.626723][ T7755] ret_from_fork_asm+0x1a/0x30 [ 89.628462][ T7755] page_owner free stack trace missing [ 89.630450][ T7755] [ 89.631356][ T7755] Memory state around the buggy address: [ 89.633624][ T7755] ffff88802c92e700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.636527][ T7755] ffff88802c92e780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.638987][ T7755] >ffff88802c92e800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.641443][ T7755] ^ [ 89.642939][ T7755] ffff88802c92e880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 89.645421][ T7755] ffff88802c92e900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 89.647920][ T7755] ================================================================== [ 89.651734][ T7755] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 89.655223][ T7755] CPU: 3 UID: 0 PID: 7755 Comm: syz.0.508 Tainted: G L syzkaller #0 PREEMPT(lazy) [ 89.659996][ T7755] Tainted: [L]=SOFTLOCKUP [ 89.661770][ T7755] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 89.665830][ T7755] Call Trace: [ 89.667237][ T7755] [ 89.668539][ T7755] dump_stack_lvl+0x100/0x190 [ 89.670539][ T7755] vpanic+0x553/0x970 [ 89.672015][ T7755] ? __pfx_vpanic+0x10/0x10 [ 89.673440][ T7755] ? mark_held_locks+0x40/0x70 [ 89.675068][ T7755] ? dvb_device_open+0x33f/0x3b0 [ 89.676955][ T7755] panic+0xd1/0xe0 [ 89.678889][ T7755] ? __pfx_panic+0x10/0x10 [ 89.681058][ T7755] ? dvb_device_open+0x33f/0x3b0 [ 89.682881][ T7755] ? preempt_schedule_common+0x3c/0xb0 [ 89.684596][ T7755] check_panic_on_warn.cold+0x19/0x34 [ 89.686257][ T7755] end_report.part.0+0x3a/0x90 [ 89.687816][ T7755] kasan_report.cold+0xe/0x18 [ 89.689445][ T7755] ? dvb_device_open+0x33f/0x3b0 [ 89.691095][ T7755] ? __pfx_dvb_device_open+0x10/0x10 [ 89.692742][ T7755] dvb_device_open+0x33f/0x3b0 [ 89.694361][ T7755] ? __pfx_dvb_device_open+0x10/0x10 [ 89.696015][ T7755] chrdev_open+0x234/0x6a0 [ 89.697824][ T7755] ? __pfx_chrdev_open+0x10/0x10 [ 89.699762][ T7755] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 89.702214][ T7755] do_dentry_open+0x6ab/0x14d0 [ 89.703881][ T7755] ? __pfx_chrdev_open+0x10/0x10 [ 89.705431][ T7755] vfs_open+0x82/0x3f0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 89.706724][ T7755] path_openat+0x19fa/0x2440 [ 89.708544][ T7755] ? __pfx_path_openat+0x10/0x10 [ 89.710109][ T7755] do_file_open+0x20e/0x430 [ 89.711665][ T7755] ? __pfx_do_file_open+0x10/0x10 [ 89.713506][ T7755] ? _raw_spin_unlock+0x28/0x50 [ 89.715267][ T7755] ? alloc_fd+0x471/0x7a0 [ 89.716845][ T7755] do_sys_openat2+0x10f/0x1e0 [ 89.718845][ T7755] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.720579][ T7755] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 89.722810][ T7755] __x64_sys_openat+0x12d/0x210 [ 89.724468][ T7755] ? __pfx___x64_sys_openat+0x10/0x10 [ 89.726134][ T7755] do_syscall_64+0x123/0x790 [ 89.727580][ T7755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.729575][ T7755] RIP: 0033:0x7ff99215e90e [ 89.731315][ T7755] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.738427][ T7755] RSP: 002b:00007ff9903f5b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.741337][ T7755] RAX: ffffffffffffffda RBX: 00007ff9903f66c0 RCX: 00007ff99215e90e [ 89.743832][ T7755] RDX: 0000000000000002 RSI: 00007ff9903f5c00 RDI: ffffffffffffff9c [ 89.746271][ T7755] RBP: 00007ff9903f5c00 R08: 0000000000000000 R09: 0000000000000000 [ 89.748749][ T7755] R10: 0000000000000000 R11: 0000000000000246 R12: cccccccccccccccd [ 89.751192][ T7755] R13: 00007ff992426038 R14: 00007ff992425fa0 R15: 00007ffcc1f3a2e8 [ 89.753659][ T7755] [ 89.755432][ T7755] Kernel Offset: disabled [ 89.756844][ T7755] Rebooting in 86400 seconds.. VM DIAGNOSIS: 09:33:25 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000007 RBX=0000000000000009 RCX=ffffffff968e55b8 RDX=0000000000000008 RSI=ffff88805c2ad720 RDI=ffff88805c2acb00 RBP=ffffc9000662f4e8 RSP=ffffc9000662f450 R8 =0000000000000000 R9 =0000000000000003 R10=0000000000000003 R11=0000000000000001 R12=0000000000000200 R13=0000000000000003 R14=ffff88805c2acb00 R15=ffff88805c2ad720 RIP=ffffffff81e622b1 RFL=00000003 [------C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555585ac4500 ffffffff 00c00000 GS =0000 ffff8880d5ba2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c280d09 CR3=0000000038334000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000020081 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc52e097e0 0000003000000018 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 6c61636f6c2e7374 6e6576652e79726f ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc52e0cc36 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc52e0cc36 00007ffc52e0cc3c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f312ec35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f312ec35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f312ec357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f312ec35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 2074657365720064 656c696166202973 2528746174736c00 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 47414c46585f5346 0551405640570041 40494c4443050c56 000d514451564900 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000038 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff85aa2cb5 RDI=ffffffff9bc21640 RBP=ffffffff9bc21600 RSP=ffffc90005acea58 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=0000000000000000 R12=0000000000000000 R13=0000000000000038 R14=ffffffff9b91321b R15=ffffffff85aa2c50 RIP=ffffffff85aa2cdf RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555570059500 ffffffff 00c00000 GS =0000 ffff8880d5ca2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f5cee7535c0 CR3=00000000540a8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fec0c400 Opmask01=0000000000000fff Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000100000001 0000004500000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0100000000000000 00000000000000fc ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ceda35601 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ceda355f9 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ceda35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ceda35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ceda357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5ceda35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 30300064656c6961 66202964665f736e 74656e5f74696e69 28736e5f74657300 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1515004140494c44 43050c41435f564b 51404b5f514c4b4c 0d564b5f51405600 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f5cedbf25f8 00007f5cedbf25c8 00007f5cedbf2600 00007f5cedbf25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=0000000000048d22 RBX=0000000000000000 RCX=ffffc90006d11000 RDX=0000000000080000 RSI=ffffffff81e9195f RDI=ffff8880256aa580 RBP=0000000000000001 RSP=ffffc9000656f698 R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=1ffff92000caded5 R13=0000000000000000 R14=ffff88802ba04b00 R15=ffffc9000656f760 RIP=ffffffff81e91968 RFL=00000087 [--S--PC] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007ff9903f66c0 ffffffff 00c00000 GS =0000 ffff8880d5da2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff992187700 CR3=0000000035bbf000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000f8000000 Opmask01=0000000001000001 Opmask02=0000000002fefcff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc1f3a7d6 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffcc1f3a7d6 00007ffcc1f3a7dc ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff992235607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff992235647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9922357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff992235639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2323232323232323 2323232323232323 2323232323232323 2323232323232323 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000030646e 65746e6f72662f30 726574706164612f 6276642f7665642f ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000013474d 46574d4c51450c13 514657534247420c 4155470c5546470c ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff9923f25f8 00007ff9923f25c8 00007ff9923f2600 00007ff9923f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000050 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=00000000000d3a51 RBX=ffff88801f2ca580 RCX=ffffffff8bc6f115 RDX=0000000000000001 RSI=ffffffff8e3d3fc0 RDI=ffffffff8c615f80 RBP=ffffed1003e594b0 RSP=ffffc90000197e00 R8 =0000000000000001 R9 =ffffed100d4e678d R10=ffff88806a733c6b R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=1ffff92000032fc4 R15=dffffc0000000000 RIP=ffffffff8bc6d6bf RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ea2000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff992427dac CR3=0000000037d5d000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000001000000 Opmask01=0000000001000003 Opmask02=00000000fcf802fe Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7379735f75706372 65705f6567617375 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffaef6b06 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffffaef6b06 00007ffffaef6b0c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6187c35607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6187c35647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6187c357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6187c35639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000e 0000000000000000 0000000000000000 0000000000000000 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000518 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000000e 0000000000000000 0000000000000000 0000000000000518 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6161616161616161 6161616161616161 6161616161616161 6161616161616161 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000