last executing test programs: 1m19.750113382s ago: executing program 3 (id=35): r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/3:0:0:0\x00', 0x480001, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r0, 0x3) (async) r1 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000300)={0x0, &(0x7f0000000040)=[@nested_load_syzos={0x136, 0x50, {0x1, 0x9, [@uexit={0x0, 0x18, 0x1}, @nested_vmlaunch={0x12f, 0x18, 0x1}]}}, @nested_create_vm={0x12d, 0x18, 0x3}, @set_irq_handler={0xc8, 0x20, {0xc1}}, @nested_load_syzos={0x136, 0x1de, {0x0, 0x0, [@out_dx={0x6a, 0x28, {0x70a5, 0x6, 0x22}}, @nested_load_code={0x12e, 0x76, {0x2, "263e650feb653266420f38828239c60000360f01cb48b800080000000000000f23c00f21f835030000000f23f866361d0000470fc77f24420f01cfb8010000000f01c148b80c000000000000000f23d80f21f835400000100f23f80fde1a"}}, @nested_amd_set_intercept={0x181, 0x30, {0x2, 0x1, 0x708, 0x1}}, @nested_load_code={0x12e, 0x68, {0x3, "65440f01c2b9800000c00f3235001000000f30f3f3461beb470fc7b80a00000036440fc77f00420f01c466baf80cb8c05ece84ef66bafc0cb830880000ef66b817000f00d03e44dcb800780000f30f09"}}, @nested_vmlaunch={0x12f, 0x18, 0x3}, @in_dx={0x69, 0x20, {0xe61b, 0xc}}, @rdmsr={0x66, 0x18, {0x8ea}}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control16=0x2, 0x6, 0x51a3, 0xc}}]}}, @enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0x8000}], 0x296}) ioctl$KVM_RUN(r1, 0xae80, 0x0) (async, rerun: 32) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f0000000440)={r1, &(0x7f0000000340)='^\\#\x00', 0x400640, &(0x7f0000000380)={@_ha_fsid={[0x10001, 0x1]}, {0x8, 0xcd, 0xb, 0xe}}, 0xfffff884, &(0x7f00000003c0), &(0x7f0000000400)=0x1}) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000740)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1cc, r3, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0xd3f}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x9}]}]}, @TIPC_NLA_BEARER={0x170, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9dd}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth1_to_team\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x34, @private1, 0x5}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x5}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @empty}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x6d94, @dev={0xfe, 0x80, '\x00', 0x33}, 0x8}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xe, @remote, 0x800}}, {0x14, 0x2, @in={0x2, 0x4e24, @private=0xa010101}}}}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}]}, 0x1cc}, 0x1, 0x0, 0x0, 0x4}, 0x40004) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@bloom_filter={0x1e, 0x7, 0x5, 0x1, 0x20821, r2, 0x5000000, '\x00', 0x0, r2, 0x2, 0x0, 0x1, 0x8}, 0x50) madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x10) (async, rerun: 32) syz_ublk_setup_io_uring(0x5c08, &(0x7f0000000800)={0x0, 0x9, 0x5020, 0x3, 0x17f, 0x0, r2}, &(0x7f0000000880)=0x0, &(0x7f00000008c0), &(0x7f0000000900)) (async, rerun: 32) syz_ublk_setup_io_uring(0x3470, &(0x7f0000000940)={0x0, 0xe810, 0x4, 0x1, 0x3ca, 0x0, r2}, &(0x7f00000009c0), &(0x7f0000000a00), &(0x7f0000000a40)=0x0) r6 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x2924c2, 0x20, 0x22}, 0x18) syz_io_uring_submit(r4, 0x0, r5, &(0x7f0000000b40)=@IORING_OP_UNLINKAT={0x24, 0x0, 0x0, r6, 0x0, &(0x7f0000000b00)='./file0\x00', 0x0, 0x0, 0x1}) ioctl$KVM_GET_DIRTY_LOG(r2, 0x4010ae42, &(0x7f0000000bc0)={0x10004, 0x0, &(0x7f0000ffc000/0x3000)=nil}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000c00)={'vxcan0\x00'}) (async) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r0, 0x5386, &(0x7f0000000c40)) ioctl$TIOCSISO7816(r2, 0xc0285443, &(0x7f0000000c80)={0x5, 0x80000001, 0x6, 0x3, 0xa49}) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), r2) sendmsg$TIPC_NL_BEARER_DISABLE(r2, &(0x7f0000000e40)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000d40)={0x84, r7, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x287}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x84}}, 0x24000000) (async) shmget(0x0, 0x3000, 0x10, &(0x7f0000ffa000/0x3000)=nil) (async) ioctl$BTRFS_IOC_SPACE_INFO(r6, 0xc0109414, &(0x7f0000000e80)={0xd4, 0x800, ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}) (async) ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000002280)={0x2}) (async) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r2, 0x111, 0x1, 0x2, 0x4) r8 = shmget(0x1, 0x4000, 0x78000000, &(0x7f0000ffc000/0x4000)=nil) ioctl$GIO_SCRNMAP(r2, 0x4b40, &(0x7f00000022c0)=""/164) (async) shmat(r8, &(0x7f0000ffc000/0x2000)=nil, 0x6800) (async) fallocate(r0, 0x2a, 0x2, 0x45) setsockopt$SO_J1939_SEND_PRIO(r2, 0x6b, 0x3, &(0x7f0000002380)=0x2, 0x4) getsockname$packet(r2, &(0x7f00000023c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000002400)=0x14) 1m19.683730728s ago: executing program 3 (id=38): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r1, &(0x7f0000000000)="19", 0x1, 0x80, &(0x7f0000000280)={0xa, 0x0, 0x0, @loopback, 0x1}, 0x1c) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x0, 0xd, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x3, 0x5, 0x101, 0x1000, 0x9, 0x7, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x10000c, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x2, 0xd, 0xe, 0x2b12, 0xff, 0x6, 0x7ffffffe, 0xb, 0x7, 0xbed4, 0x8, 0x8, 0x3, 0x0, 0x11000, 0x8, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x0, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x4, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0xfffffffe, 0x400, 0x752, 0x0, 0x1005, 0x3, 0x10001, 0x2, 0xffffffff, 0x6, 0x6, 0x800, 0x3, 0xfdfeffff, 0x2, 0x2, 0x6, 0x100, 0x0, 0x252, 0x2000081, 0xb, 0x5, 0x20006, 0x5, 0x1, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x1, 0x5, 0x80, 0x0, 0x4, 0x2, 0x40, 0xfffffeff, 0x4, 0x3, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') 1m19.612005527s ago: executing program 3 (id=40): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x50, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5}]}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'batadv_slave_1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1m19.489988838s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)='44100,48000,88200,960400,192000,3', 0x21) symlinkat(&(0x7f0000000040)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', r0, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1\x00') r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r1) prctl$PR_SET_PTRACER(0x59616d61, r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='usbip-vudc.0', 0xc) 1m19.488082134s ago: executing program 3 (id=45): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x4e23, 0x0, @loopback, 0x3}, 0x7e) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) io_uring_setup(0xdb5, &(0x7f00000003c0)={0x0, 0x85e2, 0x400, 0x1, 0x2ca, 0x0, r1}) fcntl$lock(r3, 0x25, &(0x7f0000000140)={0x2, 0x0, 0x1001}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x0, 0x0) mount$tmpfs(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x20080a0, &(0x7f0000000280)={[{@size={'size', 0x3d, [0x78]}}, {@size={'size', 0x3d, [0x0]}}]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e20, @private=0xa010103}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) sendto$inet6(r4, &(0x7f00000001c0)="eff4bb226d7d89ca8b810cd5c3c44e28795c027ce60f266ddf2b18ddc1128fcbd139289dcb30b3c39cd6fc03949bbb4096c9", 0x32, 0x4, &(0x7f0000000200)={0xa, 0x4e20, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8c5d}, 0x1c) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_INGRESS={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000040)=@int=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r8 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) r10 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_GET_MSRS_cpu(r10, 0xc008ae88, &(0x7f0000000100)={0x1, 0x0, [{0x8c2, 0x0, 0x7}]}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={r7, 0x7f}, &(0x7f0000000100)=0x8) 1m17.764540368s ago: executing program 3 (id=67): setreuid(0xee00, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) (async) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000040)=[@rdmsr={0x66, 0x18, {0x378}}, @wr_crn={0x67, 0x20, {0x4, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x30, 0x4, 0xc, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x800, 0x5, 0x9, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xee, 0x6, 0x8, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0x8903}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xbc42, 0x4, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xdd, 0x5, 0x9, 0x3ff}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x9, 0x4}}, @wr_drn={0x68, 0x20, {0x7, 0x1}}, @in_dx={0x69, 0x20, {0x790, 0x5}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x30, 0x3, 0x9, 0x1}}, @rdmsr={0x66, 0x18, {0x315}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0xb4cf}}, @wrmsr={0x65, 0x20, {0x8a2, 0x9}}, @wrmsr={0x65, 0x20, {0x280, 0x2}}, @rdmsr={0x66, 0x18, {0x30f}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_syzos={0x136, 0x30, {0x1, 0x1, [@nested_amd_stgi={0x17e, 0x10}]}}, @uexit={0x0, 0x18, 0x7fff}], 0x350}) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x6a, 0x1, 0x0, &(0x7f0000000640)) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f001, 0x1}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000440)=[@in_dx={0x69, 0x20, {0x312a}}, @nested_load_syzos={0x136, 0x38, {0x3, 0xfff, [@enable_nested={0x12c, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x52, {"b9390a00000f320fc77deb0f9c1bc7442400c3000000c7442402012fffeaff1c24470fbaa306000000a80fc75df2c422bdb8f166f30fc775f645ebcd6536460f07"}}, @set_irq_handler={0xc8, 0x20, {0xfe, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x63, 0x5, 0x1, 0xfffffffffffffff8}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x34b}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xa000, 0x9e8d}}, @nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4010, 0x4, 0x9e, 0x100000001}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x18, 0x6}, @nested_load_code={0x12e, 0x70, {0x1, "750066baf80cb83f690e89ef66bafc0cb058ee660f3820e266ba610066b80f0066ef660f3a60fa1ac4e2e5b9f6b9800000c00f3235002000000f30c7442400e0000000c74424020001c0feff1c24f2450f06c40221923421"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x5cc, 0x3, 0x9, 0xdf7}}], 0x302}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x400, 0x7, 0x7, 0x8, 0x1, 0xffffffffffffffff}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x400, 0x7, 0x7, 0x8, 0x1, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000400)=@arm64) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="520101007b"], 0x4) close(r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x6805, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x6805, 0x0) 1m17.712100572s ago: executing program 32 (id=67): setreuid(0xee00, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) (async) faccessat2(0xffffffffffffff9c, 0x0, 0x6, 0x1000) r0 = openat$hpet(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) syz_kvm_add_vcpu$x86(0x0, &(0x7f00000003c0)={0x0, &(0x7f0000000040)=[@rdmsr={0x66, 0x18, {0x378}}, @wr_crn={0x67, 0x20, {0x4, 0x1}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x30, 0x4, 0xc, 0x3}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x2, @guest16=0x800, 0x5, 0x9, 0x1}}, @nested_amd_vmload={0x182, 0x18, 0x2}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xee, 0x6, 0x8, 0x3}}, @nested_amd_invlpga={0x17d, 0x20, {0xdddd1000, 0x8903}}, @enable_nested={0x12c, 0x18}, @out_dx={0x6a, 0x28, {0xbc42, 0x4, 0x7}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xdd, 0x5, 0x9, 0x3ff}}, @nested_amd_set_intercept={0x181, 0x30, {0x0, 0x9, 0x4}}, @wr_drn={0x68, 0x20, {0x7, 0x1}}, @in_dx={0x69, 0x20, {0x790, 0x5}}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0x30, 0x3, 0x9, 0x1}}, @rdmsr={0x66, 0x18, {0x315}}, @nested_amd_invlpga={0x17d, 0x20, {0x3000, 0xb4cf}}, @wrmsr={0x65, 0x20, {0x8a2, 0x9}}, @wrmsr={0x65, 0x20, {0x280, 0x2}}, @rdmsr={0x66, 0x18, {0x30f}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_load_syzos={0x136, 0x30, {0x1, 0x1, [@nested_amd_stgi={0x17e, 0x10}]}}, @uexit={0x0, 0x18, 0x7fff}], 0x350}) socket(0x1d, 0x2, 0x6) (async) r1 = socket(0x1d, 0x2, 0x6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x6a, 0x1, 0x0, &(0x7f0000000640)) syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) (async) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000040)={0xf0f001, 0x1}) r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000780)={0x0, &(0x7f0000000440)=[@in_dx={0x69, 0x20, {0x312a}}, @nested_load_syzos={0x136, 0x38, {0x3, 0xfff, [@enable_nested={0x12c, 0x18}]}}, @nested_create_vm={0x12d, 0x18, 0x2}, @nested_amd_stgi={0x17e, 0x10}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @code={0xa, 0x52, {"b9390a00000f320fc77deb0f9c1bc7442400c3000000c7442402012fffeaff1c24470fbaa306000000a80fc75df2c422bdb8f166f30fc775f645ebcd6536460f07"}}, @set_irq_handler={0xc8, 0x20, {0xfe, 0x2}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @control_area=0x63, 0x5, 0x1, 0xfffffffffffffff8}}, @nested_vmlaunch={0x12f, 0x18, 0x2}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @rdmsr={0x66, 0x18, {0x34b}}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_amd_invlpga={0x17d, 0x20, {0xa000, 0x9e8d}}, @nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_intel_vmwrite_mask={0x154, 0x38, {0x0, @control32=0x4010, 0x4, 0x9e, 0x100000001}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @uexit={0x0, 0x18, 0x6}, @nested_load_code={0x12e, 0x70, {0x1, "750066baf80cb83f690e89ef66bafc0cb058ee660f3820e266ba610066b80f0066ef660f3a60fa1ac4e2e5b9f6b9800000c00f3235002000000f30c7442400e0000000c74424020001c0feff1c24f2450f06c40221923421"}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x0, @save_area=0x5cc, 0x3, 0x9, 0xdf7}}], 0x302}) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x400, 0x7, 0x7, 0x8, 0x1, 0xffffffffffffffff}) (async) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000007c0)={'\x00', 0x400, 0x7, 0x7, 0x8, 0x1, 0xffffffffffffffff}) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000400)=@arm64) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) (async) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000380)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r7], 0x1c}}, 0x4008054) write$nci(r4, &(0x7f0000001380)=ANY=[@ANYBLOB="520101007b"], 0x4) close(r4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x6805, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r0, 0x6805, 0x0) 1m8.556056123s ago: executing program 0 (id=182): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000080)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x40000000, 0x0, 0x0, 0x0, 0xfffffff4}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r3, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x30, 0x2, {{0x0, 0x1, 0x0, 0xad1}, [@TCA_NETEM_RATE={0x14, 0xe, {0x0, 0x200002, 0x1}}]}}}]}, 0x60}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x1c, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x2, 0x14}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000001000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000200)={0x0, &(0x7f0000000300)=[@wrmsr={0x65, 0x20, {0x40000000, 0x1000}}], 0x20}) ioctl$KVM_RUN(r7, 0xae80, 0x0) 1m8.362664861s ago: executing program 0 (id=184): r0 = socket$netlink(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x48, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x18, 0x1c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}]}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) getsockopt$inet6_int(r1, 0x29, 0xd0, 0x0, &(0x7f0000000100)) socket$netlink(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x48, 0xa, 0x6, 0x5, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1f90}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x48}}, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)={0x48, 0x41, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x2c, 0x1, 0x0, 0x1, [@typed={0x10, 0x4, 0x0, 0x0, @str='\xca\xb1\x89: \xb8\xd2\xa95!\x80\n'}, @nested={0x18, 0x1c, 0x0, 0x1, [@typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x32}}]}]}, @nested={0x4, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x40815}, 0xc000) (async) getsockopt$inet6_int(r1, 0x29, 0xd0, 0x0, &(0x7f0000000100)) (async) 1m8.292764382s ago: executing program 0 (id=185): bpf$MAP_CREATE(0x1100000000000000, &(0x7f0000000440)=@base={0x1c, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r0 = accept$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000040)=0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipoib={{0xa}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x600}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x26, r2}) 1m8.204223944s ago: executing program 0 (id=186): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x62, 0x5, 0x430, 0x2a0, 0x2a0, 0xffffffff, 0x188, 0xe0, 0x398, 0x398, 0xffffffff, 0x398, 0x398, 0x5, 0x0, {[{{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'veth0_to_bond\x00', 'wg1\x00'}, 0x0, 0xa8, 0xe0, 0x0, {0x22e}, [@common=@unspec=@statistic={{0x38}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x19, @multicast1, @remote, @icmp_id, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @empty, @gre_key, @icmp_id}}}}, {{@ip={@broadcast, @multicast1, 0x0, 0x0, 'veth1_to_hsr\x00', 'ipvlan0\x00'}, 0x0, 0xe0, 0x118, 0x0, {}, [@common=@socket0={{0x20}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @private, @multicast2, @gre_key}}}}, {{@ip={@remote, @empty, 0x0, 0x0, 'veth1_to_batadv\x00', 'pim6reg\x00', {0xff}}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}, @common=@inet=@tcpmss={{0x28}, {0xf}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @remote, @broadcast, @icmp_id, @port=0xfffc}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x490) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet6(0xa, 0x2, 0x3a) r2 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x4}) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, 0x0, 0x0) r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000500)=@userptr={0x6, 0x8, 0x4, 0x1, 0x2, {0x0, 0x2710}, {0x5, 0xc, 0xd2, 0x0, 0x7f, 0x5, "0080ca6f"}, 0xfd, 0x2, {&(0x7f00000002c0)}, 0x6, 0x0, r0}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000008500000027000000950020012500000004000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1m8.134476834s ago: executing program 0 (id=188): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x75, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendto$inet(r0, 0x0, 0x0, 0x200047fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) read$FUSE(r1, &(0x7f0000001f40)={0x2020}, 0x2020) sendmsg$NFT_BATCH(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000007f40)=ANY=[], 0x76b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004001) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) 1m7.951018409s ago: executing program 0 (id=190): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x8, 0x200, "60643a81f5a2"}}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x89a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 1m3.223893066s ago: executing program 2 (id=226): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa50a245d5f5bfa8c1da94eee793c268acfaea8b6e7ecde00800450c001d00660000010100ac14140000000000"], 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0xfffffffffffffffd, 0x4801) 1m3.223083466s ago: executing program 2 (id=227): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) write(0xffffffffffffffff, &(0x7f00000001c0)="773a95e8c6b5077ad9dde91f9708efbe581e9b958b38638c0986e6f6bba6", 0x1e) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340), 0x208800, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000400), 0x189000, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0xd5) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000000700)={r0, &(0x7f0000000600)='#(\x00', 0x390400, &(0x7f0000000640)={@_ha_fsid={[0x100]}, {0x1ff, 0x7, 0x8, 0x401}}, 0x8, &(0x7f0000000680)={@_ha_fsid}, &(0x7f00000006c0)}) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000380)={{{@in=@multicast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000480)=0xe8) getresgid(&(0x7f00000004c0), &(0x7f0000000500), &(0x7f0000000540)=0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000580)={{0x1, 0x1, 0x18, r1, {r3, r4}}, './file0/../file0\x00'}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb, 0x0, 0x0, 0x8}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x94) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f0000949000/0x18000)=nil, &(0x7f0000000800)=[@text32={0x20, &(0x7f0000000740)="b9800000c00f3235000800000f30b8002000000f23d80f21f835000000500f23f8f30f5ccdb8010000000f01d9c4c1ff125c453bc4c21dbb0b22152c28e444c7442400a2000000c744240205000000c7442406000000000f011424b805000000b9f43f00000f01c1c744240002000000c7442402cb45a7b3c7442406000000000f011424", 0x84}], 0x1, 0x44, &(0x7f0000000840)=[@dstype3={0x7, 0x1}], 0x1) socket(0x23, 0x80801, 0x1) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000001480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r8, 0x1, 0x70bd27, 0x2, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x144}, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @loopback}]}}}, @IFLA_MTU={0x8, 0x4, 0x1000}]}, 0x44}}, 0x4000) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 1m2.911612772s ago: executing program 2 (id=228): name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000240)=ANY=[], 0x0, 0x1600) r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x315700, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) r3 = openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x20, &(0x7f0000000740)=[@cr4={0x1, 0x40002}], 0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x6, 0x4) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x59, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000240)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f3036db45ef0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x55}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) write$binfmt_elf32(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/396], 0x18a) setresuid(r2, r2, 0x0) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000200, r2, &(0x7f00000000c0)='./mnt\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, &(0x7f0000005000)='ufstype=sunx86\x00') 1m2.749003135s ago: executing program 2 (id=230): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/softlockup_count', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x8) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0x2, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x14) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x5, &(0x7f0000000680)=0x522, 0x4) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r5, &(0x7f0000000100)={0x80000000}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000700), &(0x7f0000000740)=0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000002bc0)={0xffffffffffffffff, 0x0, &(0x7f0000001bc0)=""/4096}, 0x20) r6 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xc, 0x20002f7}) ioctl$sock_bt_bnep_BNEPGETCONNINFO(0xffffffffffffffff, 0x800442d3, &(0x7f0000000000)={0x3, 0x8000, 0x3a8a, @local, 'veth1_macvtap\x00'}) io_uring_enter(r6, 0x2219, 0x7721, 0x16, 0x0, 0x0) bind$bt_hci(r5, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r5, 0x400448dc, 0x0) 1m2.747883886s ago: executing program 2 (id=231): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2400) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000180)={0x53, 0xfffffffffffffffd, 0x6, 0x81, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000700)="1265b11488a6", 0x0, 0x4008, 0x10022, 0x3, 0x0}) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000040)=0x74) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x2}, 0x6) ioctl$MTDFILEMODE(0xffffffffffffffff, 0x4d13, 0x2) recvmmsg(r0, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {&(0x7f0000000240)=""/200, 0xc8}, {&(0x7f0000000340)=""/175, 0xaf}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x5, &(0x7f00000004c0)=""/70, 0x46}}], 0x1, 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000640)={0x1, @io_capability_reply={{0x42b, 0x9}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1, 0x7}}}, 0xd) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f00000190c0)='./file0\x00', 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f000000c100)='./dev/kmsg\x00', 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="ae0e757a5ef55d13bc69061f8f5a539548decc87645805eae0043788eb43796e3b6f8b53d2cc3b68574a9020aab90ea76e34d5f82d8ef45c1cc1bd23cc05d91af53cd43fd9d38e5e2a9442636312e19381404eb100cc3a376f88cd824b914f3cbbca17c75055833345f929d2edc5f003c31bd762ddbbf99507202ea93b8b6aa3dcdbe823ef997335393f6bdd797824869a19c902d41455d7028ce82e2246b415", 0xa0}, {&(0x7f0000000800)="a199b08c8207ab80c245cc59f0c96e6abebe77bca19e9d3093ea5e461d90d708201b841cb781edd4eb459cd11abc753431aac1fa4b636e7109862cb5023ceccf8bc10d2950aa55c59cb75d33b7aef1387fbb8663f3c230a52a1fdc42420f3957ebc94271e6f43e0cbc80", 0x6a}], 0x2, 0x0, 0xffffffffffffffd2, 0x2400c881}}], 0x1, 0x4000080) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000180)={[&(0x7f0000000300)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m']}) mprotect(&(0x7f00002f6000/0x3000)=nil, 0x3000, 0x200000c) 1m2.573200698s ago: executing program 2 (id=233): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x30, 0x8a49, 0x1, 0x0, 0x6, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xa930bb9f3fd061f5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x7, 0x5, 0x9, 0x5, 0x101, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1ff, 0x5, 0x3, 0x9, 0x7e5}}, &(0x7f0000000280)=0xb0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) r5 = geteuid() statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000, 0x800, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x4b0, 0xffffffff, 0x2c0, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'batadv_slave_0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@owner={{0x38}, {r4, r5, r6, r7, 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xa6, 0xa8, {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020670b501a0000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000230000001801cb2988546f258b0000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a500"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 52.734535692s ago: executing program 33 (id=190): r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'bond_slave_1\x00', &(0x7f0000000080)=@ethtool_wolinfo={0x5, 0x8, 0x200, "60643a81f5a2"}}) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x82) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r1, 0x0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x20020009, 0x0, &(0x7f0000000240)={0x20, 0x0, 0xfffc, 0x360, 0x7}, 0x1a, 0x7, 0x60000000, 0x0, 0x4, 0x101, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x89a7}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x200, 0x1, 0xffffffffffffffff, 0xeeb, 0x5}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000044}, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) 47.505581502s ago: executing program 34 (id=233): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = syz_open_dev$usbfs(&(0x7f0000000300), 0x77, 0x1501) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000040)={0x2, 0x30, 0x8a49, 0x1, 0x0, 0x6, 0x0}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x7}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)='\"', 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) r2 = socket(0x2, 0x80805, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) ioctl$TUNSETOFFLOAD(r3, 0x400454d0, 0xa930bb9f3fd061f5) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000640), &(0x7f0000000040)=0x4) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x7, 0x5, 0x9, 0x5, 0x101, {0x0, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1ff, 0x5, 0x3, 0x9, 0x7e5}}, &(0x7f0000000280)=0xb0) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) getresuid(&(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000300)=0x0) r5 = geteuid() statx(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x1000, 0x800, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000008c0)=@security={'security\x00', 0xe, 0x4, 0x4b0, 0xffffffff, 0x2c0, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x3e0, 0x3e0, 0x3e0, 0xffffffff, 0x4, &(0x7f0000000200), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@empty, 'batadv_slave_0\x00', {0x9}}}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x6, 'system_u:object_r:devicekit_power_exec_t:s0\x00'}}}, {{@uncond, 0x0, 0xe0, 0x120, 0x0, {}, [@common=@unspec=@owner={{0x38}, {r4, r5, r6, r7, 0x6}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0xa6, 0xa8, {0xd}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x510) r8 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x800) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000001154d1ff85100000010000009500000000000000180100002020670b501a0000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000500000085000000230000001801cb2988546f258b0000646c6c2500000000002020200600000000000000bf0600000000000007010000f8ffffffb702000008000000b703000059e70000a500"], &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) 14.540480086s ago: executing program 1 (id=637): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)={0x4c, 0x2, 0x6, 0x301, 0x0, 0x0, {0x5}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x52}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x4000) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_BUFINFO(r0, 0xc02c640e, &(0x7f0000000000)={0x6, 0xfffffe01, 0x7fffffff, 0x0, 0x3, 0x80000001, 0x2a}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x87a2f, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c0003"], 0xcd0}}, 0x0) 14.454516756s ago: executing program 1 (id=639): r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000180)={'gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}}) ioctl$KDSIGACCEPT(r0, 0x400455cb, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs2/custom0\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TIOCGDEV(r3, 0x80045432, &(0x7f0000000080)) r5 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$TIOCNXCL(r3, 0x540d) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000018c0)=[@rights={{0x14, 0x1, 0x1, [r6]}}], 0x18, 0x20008880}}], 0x1, 0x4c054) connect$pppl2tp(r5, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r8 = socket$pppl2tp(0x18, 0x1, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r8, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r9, {0x2, 0x2, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) ioperm(0x0, 0x7fff, 0x15f9) ioperm(0x5, 0x4000000, 0x1) cachestat(r9, &(0x7f00000000c0)={0x100000000, 0x380}, &(0x7f0000000140), 0x0) ioperm(0x2, 0x8, 0xffffffffffff0001) 14.383929942s ago: executing program 1 (id=640): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000000001400078008000840060000b10800064000000fff0500050002000000050001000600000013000300686173683a6e65742c69666163650000"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)={0x98, r2, 0x5, 0x70bd26, 0x80, {{}, {@val={0x8, 0x3, r4}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x59, 0xe, {{{}, {}, @broadcast, @device_a, @random="3a6b7c13e95a"}, 0x0, @default, 0x1, @void, @void, @void, @val={0x4, 0x6, {0x8, 0x8, 0x6, 0x1}}, @void, @val={0x5, 0x3, {0x7, 0xc7, 0x6}}, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x7, 0x0, {0xa600000000000000, 0x2, 0x0, 0x3fe, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x9, 0x3}}, @val={0x72, 0x6}, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1478}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x98}}, 0x20000014) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r5, 0x922, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) r6 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @none, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r10, 0x6, 0x1, &(0x7f0000000040)={0x0, 0x5, 0x7, 0x8}, 0xc) syz_ublk_add_dev(r6, r7, r8, r9, &(0x7f0000001ec0)={0x2e, 0x20, 0x0, r0, 0xc0207512, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000001e80)=@new_dev={0x2, 0xf4, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x2}}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, &(0x7f0000000a80)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000740)={0x2dc, 0x0, 0x400, 0x70bd2a, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x6}, {0x5}, {0x6, 0x11, 0x7c}, {0x8, 0xb, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x3}, {0x6, 0x16, 0x84f}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x1b}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x80000001}, {0x6, 0x16, 0xff78}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xdb73}, {0x6, 0x16, 0xe}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0xf0bd}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x16, 0x8}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x200}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x8}, {0x5}, {0x6, 0x11, 0x7ff}, {0x8, 0xb, 0x1}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1}, {0x6}, {0x5}, {0x6, 0x11, 0x80}, {0x8, 0xb, 0x7}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9}, {0x6, 0x16, 0x2}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x8}, {0x8, 0xb, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x16, 0x5}, {0x5}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0xfffffffd}}]}, 0x2dc}, 0x1, 0x0, 0x0, 0x80}, 0x4000840) 14.272277306s ago: executing program 1 (id=641): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x800, 0x7, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x20, 0x10, 0x800, 0x7, {{0x6, 0x4, 0x1, 0x1, 0x18, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}}}}) r2 = syz_open_dev$radio(&(0x7f0000000180), 0x3, 0x2) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) (async) ioctl$VIDIOC_S_EXT_CTRLS(r2, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f909, 0x7fffffff, '\x00', @p_u8=&(0x7f0000000080)}}) pipe2$9p(0x0, 0x800) (async) pipe2$9p(0x0, 0x800) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) (async) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xd0) socket$inet(0x2, 0x801, 0x0) (async) r3 = socket$inet(0x2, 0x801, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast2}, 0x10) r4 = socket(0x2b, 0x1, 0x1) listen(r4, 0x5) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x4}) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) chdir(&(0x7f0000000040)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000600)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/net/bridge0/bridge/multicast_igmp_version\x00', 0x1, 0x0) fdatasync(r5) (async) fdatasync(r5) r6 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x44800, 0x0) getsockopt$inet_sctp_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000180)=0xe) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="000000005600020a2abd7000ffdbdf2507000000", @ANYRES32=r1, @ANYBLOB], 0x18}, 0x1, 0x0, 0x0, 0x20044050}, 0x4050) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_DEAUTHENTICATE(r5, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x38, r7, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000001}, 0x48021) 14.173765505s ago: executing program 1 (id=644): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000300)={0xd, {"a2e3ad21ed0d09f91b3d090987f70e06d038e7ff7fc6e5539b0d650e8b089b3f35006c090890e0878f0e1ac6e7049b336d959b669a240d5b67f3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15ffffffffffffffff1243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc10700000032d0ad7bc946813591bd8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f423500c7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9cc8036cbd65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f90000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x1000}}, 0x1006) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_int(r2, 0x29, 0x42, &(0x7f0000000040)=0xf2b, 0x4) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) getsockopt$inet6_buf(r2, 0x29, 0x6, &(0x7f00000004c0)=""/16, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000240)={0x9, 0x0, 0x208, 0x7, 0x589, 0x0, 0x4, 0x0, r4}, &(0x7f00000002c0)=0x20) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x4c02}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x4, 0x12, r6, 0xfa947000) readv(r5, &(0x7f0000002c40)=[{&(0x7f00000003c0)=""/196, 0xc4}], 0x1) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f0000000100)={0x5, r8, 0x1}) r11 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r11}, 0x2c, {'wfdno', 0x3d, r10}}) ioctl$TUNSETVNETHDRSZ(r5, 0x400454d8, &(0x7f0000000100)=0x730) openat(r6, &(0x7f0000000040)='./file0\x00', 0x400000, 0x2) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00000010004b0400000000000000007a000000", @ANYBLOB="61f35d8d15377a8ae8a485b11126d5ddbea39441dd605d308d4d9ccfa2f4406ddbd19f77f3607deb30809bf53df510b64b4fe60935673c8cfe59df0590b38339d25f141222765a9015cf16af0d118b36b5e760c2cbb10e63d526f8ba94a21c8d3c7d7e38495f572c2706879f4e6b27f3177fe9e39484fef3b9ca132d1e3da24fb65266e2ce39f79b504ef07817252d5a96c4886cfa05c713d4c8b282a7d1bf5cbf67e2d8e598df", @ANYBLOB="00000000000000001c0012800b00010062726900046500000c00028005002b0003000000ccde20b867ddc443401d070c4809c7de1ebb4fef17f552969e2485b8d0644e15cb8e7e170e2ec9132edff6b33932731b5c0afc5e35cbf15ad4ec9c86f4a6d4262bf71873fd7d0905fb5f89c166cb2576ae50bef94b5902c52182519aac6fa4c20427cb88d7872991dc067f34da5ecfa003d560e162599d47b3f3dd6f86d75dd983fe37a8165c74558a6d761ddbef881f6cc473461442ab8e51677476bb1cba17"], 0x3c}}, 0x0) 14.063401971s ago: executing program 1 (id=645): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffd, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x201, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r10 = socket(0x10, 0x3, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) recvmmsg(r10, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x19, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 13.981711031s ago: executing program 35 (id=645): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000001540)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000000540)={0x34, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x8, 0x1, 0x6}, 0x0, 0x0, 0x0}) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000140)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0xfffffffd, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x201, 0x0, 0x0, 0xe}}]}}}]}, 0x78}}, 0x0) syz_ublk_setup_queues(r6, r4, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x1, 0x257, 0x0, r6}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x880000, 0x20, 0x1000000, 0x4, 0x0, r6}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x800, 0x0, 0x22a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f6d, 0x8c, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xb4ac, 0x20, 0x8, 0x9d7c}}], 0x1, &(0x7f00000014c0)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x1, 0x5, 0x0, 0x0}}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r10 = socket(0x10, 0x3, 0x0) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x20605) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f00000000c0)={0x0, 0xfffffffe, 0x0, 'queue1\x00', 0x8001}) recvmmsg(r10, &(0x7f0000004640)=[{{0x0, 0x0, 0x0}, 0xf}], 0x1, 0x2000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x19, &(0x7f0000000100)=[@cr4={0x1, 0x40240}], 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.359368164s ago: executing program 7 (id=830): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket(0x10, 0x80002, 0x4) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = dup(r0) r2 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r2, 0x40106f52, &(0x7f0000000000)={0x17, &(0x7f00000000c0)=[{0x3c, '\x00', @st={0x4, [{0x2, @svalue=0x6c}, {0x1, @uvalue=0x7}, {0x1, @svalue=0x10001}, {0x1, @svalue=0x4}]}, 0x9}]}) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000200)=0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc04, {0x0, 0x0, 0x0, r10, {0x9, 0xffff}, {0xffe0, 0xb}, {0x4}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044030}, 0x4890) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'bond_slave_1\x00', @local}) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r13 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r13, &(0x7f00000005c0)="bad3", 0x2, 0x4041, &(0x7f00000001c0)={0x11, 0x8100, r12, 0x1, 0xd8, 0x6, @multicast}, 0x14) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0b0000ed793537600ae46f4bf69fb92e23fc815ee05df31640164fff8d4edc1556aa2242ab93635e1f0da1c19d45b9bcfa9cf5a89eeb1139c113bc0dda923b551ca599c309b641f864fbca9a0845bd2af4f0b734839540d8fe3f9f84c1", @ANYRES16=r6, @ANYBLOB="010023090000340200000200000008000100", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x0) write$nci(r3, &(0x7f0000000940)=ANY=[@ANYBLOB="5f00080f44c15e2c8bbcac"], 0xb) sendmsg$NFC_CMD_ACTIVATE_TARGET(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x14, r6, 0x1, 0x123, 0x234}, 0x14}}, 0x0) read$nci(r3, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.431201289s ago: executing program 5 (id=852): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardlimit=3']) chdir(&(0x7f0000000100)='./file0\x00') symlink(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000440)='./sys/class/graphics/fbcon/rotate_all\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f000000e0c0), 0x10010) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000340), 0x62100, 0x0) linkat(r0, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r1, &(0x7f00000003c0)='./sys/class/graphics/fbcon/rotate_all\x00', 0x800) unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) socket$phonet_pipe(0x23, 0x5, 0x2) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) setresuid(r3, 0x0, 0x0) setreuid(r3, 0x0) write(r2, &(0x7f00000000c0)='1', 0x1) 1.429615997s ago: executing program 7 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x50, 0x10, 0x401, 0x800000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4801, 0x15319}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bond0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_INTERVAL={0x8, 0x7, 0x7}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4c011}, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0xaa0a1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.323825638s ago: executing program 7 (id=855): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f00000044c0)={0x0, 0x0, &(0x7f0000004480)={&(0x7f0000004400)={0x38, 0x3, 0x7, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000050}, 0x48000) syz_clone3(&(0x7f0000000480)={0x3200000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, &(0x7f0000000440)=[0xffffffffffffffff], 0x1}, 0x58) mbind(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x0, 0x0, 0x2) 1.225509389s ago: executing program 5 (id=856): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x90100) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/32) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) 1.217871321s ago: executing program 7 (id=857): r0 = socket(0x10, 0x80003, 0x0) (async) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) (async) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$TCFLSH(r3, 0x400455c8, 0x2) (async) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x2) (async) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) 1.051111272s ago: executing program 7 (id=860): mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140)=@assoc_value={0x0, 0x800}, 0x8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r4 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x80, 0x104, 0x10}, 0x18) syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x100, 0x2, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000980)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x40}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="d00000001800010600000000fedbdf251c140000fe00000100000000050013"], 0xd0}}, 0x2400c800) setsockopt$sock_int(r1, 0x1, 0x2d, &(0x7f0000000100)=0x9, 0x4) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r10 = dup(r9) sendmsg$nl_route_sched(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0), 0x6df8}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x91}, 0x40) syz_ublk_add_dev(r2, r5, r6, r7, &(0x7f00000003c0)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x20000009, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x10}}}, &(0x7f0000000440)) openat(r4, &(0x7f0000000080)='./file0\x00', 0x121500, 0x50) 683.921706ms ago: executing program 5 (id=863): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), r0) (async) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x28, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48000}, 0x0) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) (async) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00', 0x2}) (async) ioctl(r2, 0x8b32, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000600)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010024bd7000fddbdf252100000014002c8008000000800900000800000004000000d4f37a03c2"], 0x28}, 0x1, 0x0, 0x0, 0x4014001}, 0x9590f6cc3aa35d12) (async) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000640)={0x1c, r5, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4008010}, 0x4) 594.052343ms ago: executing program 5 (id=864): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0) r2 = dup(r1) r3 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) sendfile(r1, r3, 0x0, 0x8000fffffffe) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001300)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)='y)', 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000000)='^', 0x1}], 0x1, &(0x7f0000000040)=ANY=[], 0x68}}], 0x2, 0x2401c445) sendmmsg$inet6(r0, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) 483.806473ms ago: executing program 5 (id=869): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x400000000a882, 0x0) r1 = dup(r0) (async, rerun: 32) r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2) (rerun: 32) r3 = dup(r2) ioctl$sock_TIOCINQ(r3, 0x80005520, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x28011, r3, 0x0) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000427000/0x4000)=nil, 0x4000, 0x9) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000680)={0x0, 0xc, 0x8, [0x8, 0x6, 0x5, 0x7, 0x7, 0x0, 0x4, 0x3]}, &(0x7f00000006c0)=0x18) (async, rerun: 32) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000700)={0x0, 0xf1, "53d72453d4a62daeb6588a879d6dd7c4960587babcc70f676fbb489e7dddd447f8b9a7250c0d3d5cb55c5ba57a8b13e3371415cc9381702e0fc725a96cb676b6c6e1d2c89db54f95ef214814172b6748b27c5d023200f857191b03f6185f74c633fbe470e6caebc18e614fc20c18e737ce403dc1b1d5aa2903b08112731512fd022e00e22aa60c36e90d2108fe11a607b9d8cc6e426d712c1f15f5afe26deaf2e743c12e44a6a920319a86e662a32fff176d8098905a27091b93c702119baaf5dd1f7a724f5294262c3fa43457656d7efd12e2af5750815930fc8dacba1b762c31b7e98de62c40571e7343b9b856c3f8c3"}, &(0x7f0000000800)=0xf9) sendmsg$inet_sctp(r1, &(0x7f0000000980)={&(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000000600)=[{&(0x7f00000000c0)="d798719d42a3bc9816fe7cb0660c6c6af9d00b68e4cda9a3a0c0353b2c942dcf8b68d285efa4b2912dc13be54cd86e45c648868b626189f693ef677bef329d6618fe76f7856de2f839f6c69ee25d2aa27f6a42bb8cc73d9da6b0fe3ab00635dcaaa5ed8dc6f99342a6722e3fc1961da8fb34dfe4e4ea2bcab9679da50c3264eef4f9cd63c4e28659777b6548c518e74c1458284ccaf5f5f1315cd20fc2a3758833bc99c6f7cf6b264f31e72fdf664c72cdcc53fc4a29da29566006979fcaad1d6c068cd516d24e02d7b521f107a03ab28fad18e63ae753d8f1beee483987c0ba3fd4a05ebb9f", 0xe6}, {&(0x7f00000001c0)="09597102e0", 0x5}, {&(0x7f0000000200)="0251a3f739889af6317f011023b1bb99fc4f1d236c7409dd644d75e33784baa1ac7f96e7a12fece6358f91a4ede1a3f7b5386f768657fd1a57543c2a1cb38b3c6e7b8c6b203c1a45e14dbbbc5e35dc1595d5c4e572d98e091585455bf17bf54c490a163ce7c6a296576e57e55f71b7d2e7e0394a9d98a52f2bd1c811a7b4c186e5c99ed828f886d6b9c327a5a90513d6388777993b0bef9ded90f89429c740ef550393a4", 0xa4}, {&(0x7f00000002c0)="ea3de22121e674a4a272c988666668f0eebe0a28d098ddfd82e3fd154c8b59432fa4156f37bb0de18b1a767a6d03aad1dd1117fa62b42322c37ec5991ec0cb389fc5569147635f9ecb3b4c03a743e0027f85e76da14a58540aaa6327303a4a2bb8", 0x61}, {&(0x7f0000000340)="034a95bfce2fe4c17396fc67c656686fdac2308ece4ed80986e7b62665a4fd74685bed2cac8623d1745aa331a472bda4d699d46d23004e8953f921df703808cdfa0dd7b570dd1ee875f0d953857dbaf91d0136fcf8cbb2f7a83c83200fe2558e74ebd8528dbde64db9f87fdca11208d46351c96b87dd4fc506f34139656467fd5d3e763f2a586ab8438bb92648119f100014eecb5b5cc4ead823319edf04697f2a3290df3e654c880186be7d57b0dbc57e4b89f40fe42d5550a4040ea0ecf8bb2e067487a27071c30ee0ceffb65ee3d605546408166aff5a6598cd63387bb7242dc7a3171b90e18a7ca41a", 0xeb}, {&(0x7f0000000440)="0d1caa2eb0", 0x5}, {&(0x7f0000000480)="8716f99d34115e5195aa1116d38c11a4705bf69b61995c9f8a0c5250bc638c222c2fea4dc052c7cdee073a88e09c945b24efdcd5e98edc86950414a20e7cd9c46d5db9c83294ef92baf72c96541341c45f0a28ae9226e8caaa0aadbbc77bb7c2811521fd8ad085057ecb1dcfbdd0f948e8d5641c4660845c5738c6f9a579ff0d53ceeee9e4661230a3adc145f5c020bf4dc64b5ef15c91baa1911a10cab3ada5e5d5d880a6ff0795cd5b6e36f003613021a95cb2b13ab4654ac471a527dc29497c896fc72954d5c508c024f0035bdbf01e78f3e849333a72b50962e2c7fa6c6b0f49ec0766a4b97a86897f0b683a419de1989570", 0xf4}, {&(0x7f0000000580)="c8734b4df408926c1e24864fbf05048096262f021fd353e6bf7cee7d618d22cf697a6642ef14556f0eb9bde64fdf903e710ec2c75f31487d029d9932951f9e64dfc851bc5daaa31a5af442b0a80d895333", 0x51}], 0x8, &(0x7f0000000840)=ANY=[@ANYBLOB="20000000000000008400000000000a00"/28, @ANYRES32=r5, @ANYBLOB="18000000000000008400000000000000090008000004100018000000000000008400000006000000060000000000000020000000000000008400000002000000070000020800000005000000", @ANYRES32=r6, @ANYBLOB="1800000000000000840000000000000008000f0001000500180000000000000084000000060000000f0000000000000020000000000000008400000008000000ff02000000000000000000000000000118000000000000008400000005000000000000000500000020000000000000008400000008000000fe8000000000000000000000000000aa180000000000000084000000000000000800760e00040600"], 0x110, 0x8010}, 0x20000001) (async) ioctl$sock_SIOCOUTQNSD(r4, 0x8905, &(0x7f0000000040)) 379.113358ms ago: executing program 4 (id=873): mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x80) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x27f0b0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a) (async) mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, 0x0) (async) openat$mice(0xffffffffffffff9c, &(0x7f0000000000), 0x80000) (async) mkdirat(r0, &(0x7f0000000040)='./file0\x00', 0x80) (async) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x27f0b0, 0x0) (async) 378.235068ms ago: executing program 5 (id=874): r0 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8983, &(0x7f0000000140)={0x7, 'vlan0\x00', {0x1f}, 0xfff8}) timer_create(0x8, &(0x7f00000002c0)={0x0, 0x21}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000200)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) r2 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000003200), 0x22000, 0x0) ioctl$DRM_IOCTL_GET_STATS(r2, 0x80f86406, 0x0) r3 = userfaultfd(0x801) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}}) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x11, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b708000000000000dbaaf8fff1000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000008000000850000006a000000850000005000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000160001035c52b6c37384270b13"], 0x14}, 0x1, 0x0, 0x0, 0x24044001}, 0x890) sendmsg$NLBL_UNLABEL_C_STATICADD(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x40080c0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x66) 292.398335ms ago: executing program 4 (id=876): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000400), 0x8002) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000040)={{0x1, 0x0, 0x400006, 0x3}, 0x1, 0x0, 'id0\x00', 'timer1\x00', 0x0, 0x5c4e}) 292.101777ms ago: executing program 6 (id=877): r0 = creat(&(0x7f0000000100)='./bus\x00', 0x100) mount(&(0x7f0000000340)=@filename='\x00', &(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='ecryptfs\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x85, 0x3, 0x0, 0x717e387b, 0x3d, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x5, 0x14, "3eccd8000000000000000010000000040100"}) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000000c0)=0xf9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000280)=0xb7) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000180)=0x5) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000140)=0x1) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000001c0)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000019200)=0x8) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000300), 0x4) write$binfmt_elf64(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000040000000000000000000bfef9004af9a20eaf3"], 0x78) mremap(&(0x7f0000097000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f0000bff000/0x400000)=nil) munmap(&(0x7f0000ff3000/0xb000)=nil, 0xb000) personality(0x87bf5ac905ea0f7f) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) brk(0x200000ffc000) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x80400, 0x0) lsetxattr$security_ima(&(0x7f00000003c0)='./bus\x00', &(0x7f0000000540), &(0x7f0000000680)=@v1={0x2, "48721f5e5b54fec580e646051c"}, 0xe, 0x2) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380), r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[@ANYBLOB="57e157f9004e626312727681b780e81525ef97680f56ff9f4f06d0e4886da4db50e39a444b8baf24217a9c24e31d730b3500eb5fe80e8ee42368f9fe1aa0f256a3d7a4671c8d9f3ec56b526bd4a77142a9198138743d1e71521564a63dbda021555e49fe2c19905d4f92b65b19afb05889ec7aa2bac2c1c66096ddb00000", @ANYRES16=r4, @ANYBLOB="00012abd7000ffdbdf25060000000800040039dc000008000200010000000500050001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x800) prlimit64(0x0, 0x7, &(0x7f0000000440), 0x0) r5 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(r6, r7, r8, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x40, 0x4, r9, 0x0, 0x0, 0x0, 0x2142, 0x0, {0x3}}) io_uring_enter(r5, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/8, 0xc}}], 0x4b, 0x0, 0x0) 223.055823ms ago: executing program 4 (id=878): semctl$SEM_INFO(0x0, 0x3, 0x13, &(0x7f0000000000)=""/254) r0 = semget(0x2, 0x2, 0x0) semctl$GETVAL(r0, 0x2, 0xc, &(0x7f0000000100)=""/4096) 221.950463ms ago: executing program 4 (id=879): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000600)=@nat={'nat\x00', 0x670, 0x5, 0x368, 0x228, 0x2d0, 0xffffffff, 0xd8, 0x170, 0x2d0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x5, 0x0, {[{{@ip={@rand_addr=0x640100fc, @rand_addr=0x64010101, 0xff, 0x0, 'veth1_macvtap\x00', 'ipvlan1\x00', {0xff}, {}, 0x33, 0x2, 0x14}, 0x0, 0xa0, 0xd8, 0x48, {}, [@common=@ah={{0x30}, {[0x1, 0x3], 0xff}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x67, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'virt_wifi0\x00', 'veth1_vlan\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0xe, @ipv6=@ipv4={'\x00', '\xff\xff', @empty}, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @icmp_id=0x65, @port=0x4e21}}}, {{@ip={@private=0xa010100, @empty, 0x0, 0x0, 'nicvf0\x00', 'nr0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @gre_key=0xe, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unshare(0x8000000) semget$private(0x0, 0x4000, 0x555) semtimedop(0x0, &(0x7f0000000000)=[{0x3, 0x1000, 0x1800}], 0x1, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r2, &(0x7f0000000380)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0xf, [0x0, 0x0, 0x0, 0x40004, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8298, 0x1, 0x0, 0x0, 0x0, 0x2000, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x79a1, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x9, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x3, 0x0, 0xd, 0x0, 0x2, 0x0, 0x3, 0x5, 0x80000000, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x4, 0x0, 0x0, 0xfffffffe, 0x1, 0x0, 0x18c, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x204, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0xc9, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0xcaa, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r2, 0x5501) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000000)="1700000014006b05c84e21006d6e230675f8020000", 0x15}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 221.512518ms ago: executing program 6 (id=880): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x1}) (async) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f00000003c0)={0x48, 0xd, 0xffffffffffffffff, 0x0, 0x1, 0x0, &(0x7f00000001c0), 0x1}) 142.820399ms ago: executing program 6 (id=881): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x38011, r0, 0x3ef6a000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r1 = socket(0x10, 0x803, 0x0) r2 = syz_io_uring_setup(0xefd, &(0x7f0000000400)={0x0, 0x0, 0x400, 0x2, 0x55}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0, &(0x7f00000003c0)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x20, r1, 0x0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="10100000"], 0x11d0}, 0x7, 0x3ed763469f8f58cc}) io_uring_enter(r2, 0x1, 0xfffffffd, 0x9, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x7) 142.0339ms ago: executing program 7 (id=882): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x81) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000002ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (rerun: 64) 139.859081ms ago: executing program 4 (id=883): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x5, 0x90100) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000040)=""/32) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd21, 0xfbffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x400) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd25, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0xfff2, 0xf}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x92, 0x20000004, 0x7, 0xffeffffc}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}}, 0x4c800) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$inet6(0xa, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x7}}) r6 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r6, &(0x7f0000000500)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3f}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)='\r', 0x1}], 0x1}, 0x8004) 62.327336ms ago: executing program 6 (id=884): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=@newtfilter={0x6c, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0x40, 0x2, [@TCA_FW_INDEV={0x14, 0x3, 'caif0\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'syz_tun\x00'}, @TCA_FW_INDEV={0x14, 0x3, 'geneve1\x00'}]}}]}, 0x6c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={&(0x7f0000000280), 0xc, &(0x7f00000002c0)={&(0x7f0000000300)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) 61.58002ms ago: executing program 6 (id=885): io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, &(0x7f0000000000)=[@ioring_restriction_register_op], 0x1) syz_io_uring_setup(0x45d2, &(0x7f0000000040)={0x0, 0x1c6a, 0x2, 0x2, 0x284}, &(0x7f00000003c0), &(0x7f00000000c0), &(0x7f0000000440)) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) ioctl$FE_DISHNETWORK_SEND_LEGACY_CMD(r0, 0x6f50, 0xac) 376.286µs ago: executing program 6 (id=886): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) read(r1, &(0x7f0000000000)=""/8, 0x8) ioctl$GIO_UNIMAP(r1, 0x4b66, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {}, {}, {}]}) 0s ago: executing program 4 (id=887): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000200000004"], 0x48) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/vmallocinfo\x00', 0x0, 0x0) read$char_usb(r2, &(0x7f00000000c0)=""/104, 0x12) r3 = socket$inet_sctp(0x2, 0x5, 0x84) syz_emit_vhci(&(0x7f00000000c0)=ANY=[@ANYBLOB="043e1a0d01080001ffffffffff7f"], 0x1d) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000600)=0x9, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r3, 0x7) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000200), r0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1880000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x34, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4024800}, 0x240408d0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x26}}], 0x10) listen(r1, 0x7) write$cgroup_subtree(r0, &(0x7f0000000d80)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) pread64(r0, &(0x7f0000000000)=""/163, 0xa3, 0xda55) chdir(&(0x7f0000000100)='./file0\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev2(r5, &(0x7f0000000000)=[{&(0x7f0000000500)='\x00', 0x1}], 0x1, 0xfffffffd, 0xc, 0x14) 0s ago: executing program 7 (id=888): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_P2P_OPPPS={0x5}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x4084) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r1, 0x4b72, &(0x7f0000000000)={0x0, 0x1, 0x17, 0x9, 0x200, &(0x7f00000003c0)="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"}) kernel console output (not intermixed with test programs): .806266][ T6365] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 57.829061][ T42] audit: type=1400 audit(1786067023.842:622): avc: denied { read } for pid=6366 comm="syz.0.122" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.844090][ T42] audit: type=1400 audit(1786067023.842:623): avc: denied { open } for pid=6366 comm="syz.0.122" path="/dev/uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.853425][ T42] audit: type=1400 audit(1786067023.862:624): avc: denied { ioctl } for pid=6366 comm="syz.0.122" path="/dev/uinput" dev="devtmpfs" ino=944 ioctlcmd=0x5501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 57.865122][ T6369] syzkaller0: entered promiscuous mode [ 57.867368][ T6369] syzkaller0: entered allmulticast mode [ 57.872527][ T42] audit: type=1400 audit(1786067023.892:625): avc: denied { ioctl } for pid=6368 comm="syz.4.123" path="socket:[12990]" dev="sockfs" ino=12990 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 57.900887][ T1867] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 57.907729][ T1867] usb 6-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 57.911265][ T1867] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.914202][ T1867] usb 6-1: Product: syz [ 57.915946][ T1867] usb 6-1: Manufacturer: syz [ 57.917447][ T1867] usb 6-1: SerialNumber: syz [ 57.925290][ T6350] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 57.933785][ T1867] emi26 - firmware loader 6-1:1.0: emi26_probe start [ 57.941676][ T1867] usb 6-1: Direct firmware load for emi26/loader.fw failed with error -2 [ 57.945680][ T1867] usb 6-1: Falling back to sysfs fallback for: emi26/loader.fw [ 58.139307][ T34] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 58.290105][ T34] usb 5-1: not running at top speed; connect to a high speed hub [ 58.293378][ T34] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.296561][ T34] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 58.300683][ T34] usb 5-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 58.303615][ T34] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 58.310806][ T34] keyspan 5-1:1.0: Keyspan 2 port adapter converter detected [ 58.314924][ T34] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 58.320003][ T34] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 58.326945][ T34] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 58.329545][ T34] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 58.336296][ T34] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 58.483264][ T6407] evm: overlay not supported [ 58.486539][ T6407] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 58.512538][ T6407] __nla_validate_parse: 5 callbacks suppressed [ 58.512561][ T6407] netlink: 4292 bytes leftover after parsing attributes in process `syz.2.125'. [ 58.561201][ T50] usb 5-1: USB disconnect, device number 3 [ 58.587802][ T50] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 58.593645][ T50] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 58.599405][ T50] keyspan 5-1:1.0: device disconnected [ 58.654972][ T6414] netlink: 'syz.2.127': attribute type 10 has an invalid length. [ 58.658657][ T6414] syz_tun: entered promiscuous mode [ 58.665839][ T6414] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 58.670865][ T6414] x_tables: duplicate underflow at hook 1 [ 58.710710][ T6418] netlink: 104 bytes leftover after parsing attributes in process `syz.1.129'. [ 58.713760][ T6421] netlink: 104 bytes leftover after parsing attributes in process `syz.1.129'. [ 58.736161][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 58.738977][ T6425] netlink: 80 bytes leftover after parsing attributes in process `syz.2.131'. [ 58.748148][ T6427] netlink: 8 bytes leftover after parsing attributes in process `syz.2.131'. [ 58.753510][ T6427] netlink: 80 bytes leftover after parsing attributes in process `syz.2.131'. [ 58.754781][ T6430] netlink: 'syz.1.132': attribute type 23 has an invalid length. [ 58.818508][ T6430] smpboot: CPU 1 is now offline [ 58.891861][ T6438] syzkaller1: entered promiscuous mode [ 58.893676][ T6438] syzkaller1: entered allmulticast mode [ 59.298442][ T6472] loop5: detected capacity change from 0 to 7 [ 59.408625][ T6477] kAFS: bad VL server IP address [ 59.434719][ T6472] Dev loop5: unable to read RDB block 7 [ 59.439697][ T6472] loop5: unable to read partition table [ 59.440296][ T6473] loop5: detected capacity change from 7 to 0 [ 59.441566][ T6472] loop5: partition table beyond EOD, truncated [ 59.445600][ T6472] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 59.459985][ T64] Bluetooth: hci3: command tx timeout [ 59.507257][ T6480] netlink: 232 bytes leftover after parsing attributes in process `syz.4.147'. [ 59.546056][ T6482] netlink: 60 bytes leftover after parsing attributes in process `syz.4.148'. [ 59.550519][ T6482] netlink: 144 bytes leftover after parsing attributes in process `syz.4.148'. [ 59.615382][ T6487] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=4000675772 (8001351544 ns) > initial count (4731795314 ns). Using initial count to start timer. [ 59.627893][ T6485] kvm: pic: level sensitive irq not supported [ 59.628088][ T6485] kvm: pic: level sensitive irq not supported [ 59.786361][ T5784] bond0: (slave bond_slave_0): interface is now down [ 59.794783][ T5784] bond0: (slave bond_slave_1): interface is now down [ 59.804401][ T5784] bond0: now running without any active interface! [ 59.968246][ T6506] loop5: detected capacity change from 0 to 7 [ 60.134377][ T6509] loop5: detected capacity change from 7 to 0 [ 60.134414][ T6506] ldm_validate_partition_table(): Disk read failed. [ 60.138664][ T6506] Dev loop5: unable to read RDB block 0 [ 60.141647][ T6506] loop5: unable to read partition table [ 60.143712][ T6506] loop5: partition table beyond EOD, truncated [ 60.145657][ T6506] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 60.278916][ T6519] geneve2: entered promiscuous mode [ 60.293195][ T6519] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore [ 60.299358][ T6519] overlayfs: missing 'lowerdir' [ 60.361330][ T6528] trusted_key: syz.0.161 sent an empty control message without MSG_MORE. [ 61.009235][ T5885] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 61.173184][ T5885] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 61.181608][ T5885] usb 9-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.00 [ 61.187950][ T5885] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 61.193222][ T5885] usb 9-1: Product: syz [ 61.197048][ T5885] usb 9-1: Manufacturer: syz [ 61.199927][ T5885] usb 9-1: SerialNumber: syz [ 61.223417][ T6561] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 61.228899][ T5885] emi26 - firmware loader 9-1:1.0: emi26_probe start [ 61.332705][ T6571] sctp: [Deprecated]: syz.2.170 (pid 6571) Use of struct sctp_assoc_value in delayed_ack socket option. [ 61.332705][ T6571] Use struct sctp_sack_info instead [ 61.529616][ T64] Bluetooth: hci3: command tx timeout [ 61.993303][ T6600] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=6600 comm=syz.4.177 [ 62.066314][ T6608] i2c i2c-1: Frontend requested software zigzag, but didn't set the frequency step size [ 62.182419][ T6610] usb usb8: usbfs: process 6610 (syz.4.180) did not claim interface 0 before use [ 62.273753][ T6616] netlink: 'syz.0.182': attribute type 14 has an invalid length. [ 62.466398][ T6626] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 62.674907][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 62.674919][ T42] audit: type=1400 audit(1786067028.692:665): avc: denied { listen } for pid=6634 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.684323][ T42] audit: type=1400 audit(1786067028.702:666): avc: denied { accept } for pid=6634 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 62.803378][ T42] audit: type=1400 audit(1786067028.812:667): avc: denied { create } for pid=6634 comm="syz.2.187" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 62.899741][ T42] audit: type=1400 audit(1786067028.912:668): avc: denied { create } for pid=6643 comm="syz.2.189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 63.037543][ T6652] netlink: 'syz.1.193': attribute type 5 has an invalid length. [ 63.045157][ T42] audit: type=1400 audit(1786067029.062:669): avc: denied { write } for pid=6650 comm="syz.2.192" name="sg1" dev="devtmpfs" ino=728 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.069898][ T42] audit: type=1400 audit(1786067029.062:670): avc: denied { ioctl } for pid=6650 comm="syz.2.192" path="/dev/sg1" dev="devtmpfs" ino=728 ioctlcmd=0x5387 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 63.099741][ T6660] FAT-fs (nullb0): bogus number of reserved sectors [ 63.102421][ T6660] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 63.141688][ T42] audit: type=1400 audit(1786067029.162:671): avc: denied { write } for pid=6665 comm="syz.2.197" name="uinput" dev="devtmpfs" ino=944 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 63.170407][ T42] audit: type=1400 audit(1786067029.192:672): avc: denied { ioctl } for pid=6670 comm="syz.1.198" path="socket:[14744]" dev="sockfs" ino=14744 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 63.184360][ T42] audit: type=1400 audit(1786067029.202:673): avc: denied { connect } for pid=6670 comm="syz.1.198" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 63.193112][ T6671] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 63.215059][ T42] audit: type=1400 audit(1786067029.232:674): avc: denied { read } for pid=5131 comm="acpid" name="mouse2" dev="devtmpfs" ino=2896 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 63.436701][ T6692] bridge0: entered allmulticast mode [ 63.445671][ T6692] bridge_slave_1: left allmulticast mode [ 63.447524][ T6692] bridge_slave_1: left promiscuous mode [ 63.452379][ T6692] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.457442][ T6692] bridge_slave_0: left allmulticast mode [ 63.460077][ T6692] bridge_slave_0: left promiscuous mode [ 63.462039][ T6692] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.474285][ T6692] bridge0 (unregistering): left allmulticast mode [ 63.768780][ T6702] __nla_validate_parse: 6 callbacks suppressed [ 63.768812][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.774761][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.777602][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.790895][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.794304][ T6702] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.797559][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 63.799328][ T5784] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.804079][ T5784] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.819284][ T5784] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.823494][ T5784] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 63.880993][ T6705] loop5: detected capacity change from 0 to 7 [ 64.027892][ T6706] loop5: detected capacity change from 7 to 0 [ 64.027901][ T6705] ldm_validate_partition_table(): Disk read failed. [ 64.027923][ T6705] Dev loop5: unable to read RDB block 0 [ 64.035389][ T6705] loop5: unable to read partition table [ 64.038502][ T6705] loop5: partition table beyond EOD, truncated [ 64.040925][ T6705] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 64.324961][ T6725] netlink: 14 bytes leftover after parsing attributes in process `syz.2.215'. [ 64.405755][ T6728] netlink: 32 bytes leftover after parsing attributes in process `syz.4.216'. [ 64.412016][ T6728] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 64.416146][ T6728] IPv6: NLM_F_CREATE should be set when creating new route [ 64.425366][ T6728] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.428802][ T6728] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 1th superblock [ 64.431661][ T6728] F2FS-fs (nbd4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 64.434111][ T6728] F2FS-fs (nbd4): Can't find valid F2FS filesystem in 2th superblock [ 64.585102][ T6736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.219'. [ 64.739485][ T848] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 64.869208][ T848] usb 7-1: device descriptor read/64, error -71 [ 65.119233][ T848] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 65.249200][ T848] usb 7-1: device descriptor read/64, error -71 [ 65.360233][ T848] usb usb7-port1: attempt power cycle [ 65.699239][ T848] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 65.719981][ T848] usb 7-1: device descriptor read/8, error -71 [ 65.979295][ T848] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 66.000132][ T848] usb 7-1: device descriptor read/8, error -71 [ 66.119555][ T848] usb usb7-port1: unable to enumerate USB device [ 66.593208][ T6760] ucma_write: process 131 (syz.1.223) changed security contexts after opening file descriptor, this is not allowed. [ 67.758723][ T42] kauditd_printk_skb: 40 callbacks suppressed [ 67.758755][ T42] audit: type=1400 audit(1786067033.772:715): avc: denied { create } for pid=6790 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 67.806834][ T42] audit: type=1400 audit(1786067033.822:716): avc: denied { unmount } for pid=6790 comm="syz.2.227" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.068944][ T42] audit: type=1400 audit(1786067034.082:717): avc: denied { read write } for pid=6799 comm="syz.4.229" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 68.072727][ T6800] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd 5429, magic 54 != 6b] [ 68.091800][ T42] audit: type=1400 audit(1786067034.082:718): avc: denied { open } for pid=6799 comm="syz.4.229" path="/48/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 68.106889][ T42] audit: type=1400 audit(1786067034.092:719): avc: denied { ioctl } for pid=6799 comm="syz.4.229" path="/48/file0/file0" dev="fuse" ino=0 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 68.125527][ T42] audit: type=1400 audit(1786067034.142:720): avc: denied { append } for pid=6804 comm="syz.2.231" name="sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 68.135545][ T42] audit: type=1400 audit(1786067034.142:721): avc: denied { read } for pid=6804 comm="syz.2.231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 68.143388][ T42] audit: type=1400 audit(1786067034.162:722): avc: denied { mount } for pid=6804 comm="syz.2.231" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 68.218554][ T42] audit: type=1400 audit(1786067034.232:723): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 68.260751][ T6814] futex_wake_op: syz.1.235 tries to shift op by 144; fix this program [ 68.261323][ T6810] netlink: 260 bytes leftover after parsing attributes in process `syz.4.234'. [ 68.264341][ T6814] futex_wake_op: syz.1.235 tries to shift op by 144; fix this program [ 68.267920][ T6810] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.272038][ T6811] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 68.426089][ T42] audit: type=1400 audit(1786067034.442:724): avc: denied { map } for pid=6820 comm="syz.4.237" path="/dev/usbmon0" dev="devtmpfs" ino=738 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 68.647317][ T6830] fuse: Bad value for 'fd' [ 68.748748][ T6831] sg_write: data in/out 32732/136 bytes for SCSI command 0x0-- guessing data in; [ 68.748748][ T6831] program syz.4.241 not setting count and/or reply_len properly [ 68.826184][ T1444] ieee802154 phy0 wpan0: encryption failed: -22 [ 68.830312][ T1444] ieee802154 phy1 wpan1: encryption failed: -22 [ 68.969247][ T64] Bluetooth: hci1: command 0x0406 tx timeout [ 69.334752][ T6835] kvm: kvm [6834]: vcpu0, guest rIP: 0x5408d Unhandled WRMSR(0x4000007b) = 0x3f [ 70.388614][ T6845] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 70.463531][ T6848] i2c i2c-0: delete_device: Extra parameters [ 70.542221][ T6852] netlink: 'syz.4.250': attribute type 10 has an invalid length. [ 70.544824][ T6852] ipvlan0: entered allmulticast mode [ 70.546483][ T6852] veth0_vlan: entered allmulticast mode [ 70.552112][ T6852] team0: Device ipvlan0 failed to register rx_handler [ 70.686624][ T6860] input: syz0 as /devices/virtual/input/input8 [ 71.711521][ T6895] __nla_validate_parse: 2 callbacks suppressed [ 71.711533][ T6895] netlink: 40 bytes leftover after parsing attributes in process `syz.4.266'. [ 74.758997][ T42] kauditd_printk_skb: 18 callbacks suppressed [ 74.759023][ T42] audit: type=1400 audit(1786067040.772:743): avc: denied { mounton } for pid=6915 comm="syz.1.274" path="/53/sec" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=dir permissive=1 [ 74.806472][ T6920] echo interval is out of bounds [ 74.806472][ T6920] [ 74.808928][ T6920] CIFS: VFS: echo interval is out of bounds [ 75.011188][ T42] audit: type=1400 audit(1786067041.032:744): avc: denied { ioctl } for pid=6929 comm="syz.4.280" path="socket:[16562]" dev="sockfs" ino=16562 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.087879][ T42] audit: type=1400 audit(1786067041.102:745): avc: denied { listen } for pid=6925 comm="syz.1.278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.096599][ T42] audit: type=1400 audit(1786067041.102:746): avc: denied { ioctl } for pid=6925 comm="syz.1.278" path="socket:[16074]" dev="sockfs" ino=16074 ioctlcmd=0x587a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 75.106469][ T6934] fuse: fd is not a fuse device [ 75.165221][ T42] audit: type=1400 audit(1786067041.182:747): avc: denied { bind } for pid=6937 comm="syz.4.283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 75.178542][ T42] audit: type=1400 audit(1786067041.192:748): avc: denied { ioctl } for pid=6937 comm="syz.4.283" path="socket:[16142]" dev="sockfs" ino=16142 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 75.226540][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 75.233538][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.4.284'. [ 75.316041][ T6959] netlink: 'syz.1.288': attribute type 39 has an invalid length. [ 75.355235][ T6961] openvswitch: netlink: Missing key (keys=c0, expected=20080) [ 75.665934][ T6970] fuse: Unknown parameter 'group_hd' [ 75.674248][ T42] audit: type=1400 audit(1786067041.692:749): avc: denied { module_load } for pid=6969 comm="syz.1.292" path="/60/file1" dev="tmpfs" ino=344 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 75.674526][ T6970] Invalid ELF header len 18 [ 75.712577][ T42] audit: type=1400 audit(1786067041.732:750): avc: denied { read } for pid=6971 comm="syz.1.293" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.719850][ T42] audit: type=1400 audit(1786067041.732:751): avc: denied { open } for pid=6971 comm="syz.1.293" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.724244][ T6972] binder: 6971:6972 ioctl c02054a5 200000000200 returned -22 [ 75.728985][ T42] audit: type=1400 audit(1786067041.732:752): avc: denied { ioctl } for pid=6971 comm="syz.1.293" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 75.876385][ T6981] loop5: detected capacity change from 0 to 7 [ 76.018407][ T6982] loop5: detected capacity change from 7 to 0 [ 76.018501][ T6981] ldm_validate_partition_table(): Disk read failed. [ 76.024231][ T6981] Dev loop5: unable to read RDB block 0 [ 76.026121][ T6981] loop5: unable to read partition table [ 76.028123][ T6981] loop5: partition table beyond EOD, truncated [ 76.030771][ T6981] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 76.066783][ T6986] overlayfs: failed to resolve './bus': -2 [ 76.234714][ T6989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 76.466287][ T6997] program syz.1.301 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 76.469723][ T6997] ata1.00: invalid transfer count 0 [ 77.169064][ T7004] netlink: 20 bytes leftover after parsing attributes in process `syz.4.304'. [ 78.170233][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 78.175342][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 78.181271][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 78.187228][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 78.190823][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 78.587208][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.590381][ T7013] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.593485][ T7013] bridge_slave_0: entered allmulticast mode [ 78.597432][ T7013] bridge_slave_0: entered promiscuous mode [ 78.603927][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.606886][ T7013] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.609977][ T7013] bridge_slave_1: entered allmulticast mode [ 78.613049][ T7013] bridge_slave_1: entered promiscuous mode [ 78.631591][ T7013] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.636490][ T7013] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.653436][ T7013] team0: Port device team_slave_0 added [ 78.656840][ T7013] team0: Port device team_slave_1 added [ 78.671946][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.674289][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.682779][ T7013] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.687622][ T7013] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.690029][ T7013] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.698159][ T7013] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.727929][ T7013] hsr_slave_0: entered promiscuous mode [ 78.730689][ T7013] hsr_slave_1: entered promiscuous mode [ 78.732988][ T7013] debugfs: 'hsr0' already exists in 'hsr' [ 78.734845][ T7013] Cannot create hsr debugfs directory [ 78.851141][ T7013] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 78.856357][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 78.860312][ T7013] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 78.866208][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 78.870258][ T7013] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 78.876270][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 78.880253][ T7013] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 78.886179][ T7013] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 78.914641][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.917691][ T7013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.921075][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.924181][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.979889][ T7013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.993952][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.997687][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.011302][ T7013] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.020330][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.023359][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.031821][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.034543][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.056736][ T29] cfg80211: failed to load regulatory.db [ 79.302439][ T7013] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.478299][ T7013] veth0_vlan: entered promiscuous mode [ 79.488516][ T7013] veth1_vlan: entered promiscuous mode [ 79.508886][ T7013] veth0_macvtap: entered promiscuous mode [ 79.515143][ T7013] veth1_macvtap: entered promiscuous mode [ 79.535368][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.548591][ T7013] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.642913][ T6382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.648353][ T6382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.651604][ T5784] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.651663][ T5784] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.651681][ T5784] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.651699][ T5784] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.654643][ T7060] nvme_fc: nvme_fc_create_ctrl: nn-0x3333333333333333:pn-0x4444444444444444 - nn-0x1111111111111111:pn-0x2222222222222222 combination not found [ 79.695245][ T7060] ip6gretap0: entered promiscuous mode [ 79.701842][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.704418][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.743137][ T7074] loop5: detected capacity change from 0 to 7 [ 79.861963][ T7074] Dev loop5: unable to read RDB block 7 [ 79.863642][ T7081] loop5: detected capacity change from 7 to 0 [ 79.864448][ T7074] loop5: unable to read partition table [ 79.868145][ T7074] loop5: partition table beyond EOD, truncated [ 79.873057][ T7074] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 79.989232][ T6748] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 79.990894][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 79.990905][ T42] audit: type=1400 audit(1786067046.012:761): avc: denied { read write } for pid=7095 comm="syz.1.323" name="mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 80.001987][ T42] audit: type=1400 audit(1786067046.012:762): avc: denied { open } for pid=7095 comm="syz.1.323" path="/dev/mtd0" dev="devtmpfs" ino=716 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 80.017484][ T42] audit: type=1400 audit(1786067046.022:763): avc: denied { ioctl } for pid=7095 comm="syz.1.323" path="/dev/mtd0" dev="devtmpfs" ino=716 ioctlcmd=0x4d06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 80.140952][ T6748] usb 10-1: config 1 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 80.146108][ T6748] usb 10-1: config 1 interface 0 has no altsetting 0 [ 80.150068][ T6748] usb 10-1: New USB device found, idVendor=04f2, idProduct=1123, bcdDevice= 0.40 [ 80.154553][ T6748] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.159200][ T6748] usb 10-1: Product: ä€ [ 80.160618][ T6748] usb 10-1: Manufacturer: 濤虾ᴤ㟢봪ᥱ忟籟 [ 80.162704][ T6748] usb 10-1: SerialNumber: 郄è›æ¯¥â‚ƚ쑟좵ë®ì¿žìŠ¤îµâ–¶é²’毖椡蚫뵴뢫⹣螈꜅㲟蓯윑规ᖨ䛯 [ 80.249344][ T64] Bluetooth: hci4: command tx timeout [ 80.297292][ T7108] overlayfs: missing 'lowerdir' [ 80.302146][ T42] audit: type=1400 audit(1786067046.322:764): avc: denied { remount } for pid=7107 comm="syz.4.326" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 80.345118][ T7110] overlayfs: failed to clone lowerpath [ 80.385582][ T6748] usbhid 10-1:1.0: can't add hid device: -71 [ 80.387595][ T6748] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 80.405546][ T6748] usb 10-1: USB disconnect, device number 2 [ 80.940868][ T7127] zonefs (loop5) ERROR: Not a zoned block device [ 81.190795][ T6748] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 81.197123][ T7129] ip6erspan0: entered allmulticast mode [ 81.232370][ T42] audit: type=1400 audit(1786067047.252:765): avc: denied { mount } for pid=7130 comm="syz.4.335" name="/" dev="ramfs" ino=16976 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 81.238209][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.4.335'. [ 81.341060][ T6748] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 81.348097][ T6748] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 81.365465][ T6748] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 81.373565][ T6748] usb 10-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 81.380299][ T6748] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.398788][ T6748] usb 10-1: config 0 descriptor?? [ 81.453832][ T7138] pim6reg: entered allmulticast mode [ 81.590527][ T42] audit: type=1400 audit(1786067047.612:766): avc: denied { accept } for pid=7140 comm="syz.4.338" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 81.717232][ T7148] veth1_macvtap: left promiscuous mode [ 81.769628][ T42] audit: type=1400 audit(1786067047.792:767): avc: denied { create } for pid=7147 comm="syz.4.340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 81.777753][ T42] audit: type=1400 audit(1786067047.792:768): avc: denied { sys_admin } for pid=7147 comm="syz.4.340" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 81.778433][ T7149] VFS: Mount too revealing [ 81.786722][ T42] audit: type=1400 audit(1786067047.792:769): avc: denied { mounton } for pid=7147 comm="syz.4.340" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 81.855996][ T6748] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0 [ 81.901722][ T42] audit: type=1400 audit(1786067047.922:770): avc: denied { write } for pid=7155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 81.966033][ T7164] netlink: 8 bytes leftover after parsing attributes in process `syz.4.342'. [ 82.038217][ T5448] veth1_macvtap: entered promiscuous mode [ 82.329460][ T64] Bluetooth: hci4: command tx timeout [ 82.556976][ T7200] netlink: 'syz.4.347': attribute type 39 has an invalid length. [ 82.884956][ T7213] overlayfs: failed to clone upperpath [ 82.932104][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 82.935597][ T7215] netlink: 28 bytes leftover after parsing attributes in process `syz.4.352'. [ 82.941366][ T7215] fuse: fd is not a fuse device [ 82.948260][ T7215] netlink: 8 bytes leftover after parsing attributes in process `syz.4.352'. [ 83.134414][ T34] usb 10-1: USB disconnect, device number 3 [ 83.469515][ T5738] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 83.477091][ T5738] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 83.481672][ T5738] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 83.484634][ T5738] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 83.487829][ T5738] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 84.046938][ T7239] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.049482][ T7239] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.053524][ T7239] bridge_slave_0: entered allmulticast mode [ 84.056505][ T7239] bridge_slave_0: entered promiscuous mode [ 84.061533][ T7239] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.064007][ T7239] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.066654][ T7239] bridge_slave_1: entered allmulticast mode [ 84.070468][ T7239] bridge_slave_1: entered promiscuous mode [ 84.121456][ T7239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.129925][ T7239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.220733][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.364'. [ 84.228219][ T7239] team0: Port device team_slave_0 added [ 84.245807][ T7239] team0: Port device team_slave_1 added [ 84.409207][ T64] Bluetooth: hci4: command tx timeout [ 84.424401][ T7276] netlink: 44 bytes leftover after parsing attributes in process `syz.5.366'. [ 84.435786][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.4.367'. [ 84.438790][ T7276] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.445914][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.450872][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.474689][ T7239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.497818][ T7239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.501240][ T7239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.536724][ T7239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.563116][ T7286] loop5: detected capacity change from 0 to 7 [ 84.631369][ T7239] hsr_slave_0: entered promiscuous mode [ 84.644600][ T7239] hsr_slave_1: entered promiscuous mode [ 84.660694][ T7239] debugfs: 'hsr0' already exists in 'hsr' [ 84.668202][ T7239] Cannot create hsr debugfs directory [ 84.684236][ T7289] fuse: fd is not a fuse device [ 84.752496][ T7287] loop5: detected capacity change from 7 to 0 [ 84.752524][ T7286] ldm_validate_partition_table(): Disk read failed. [ 84.763972][ T7286] Dev loop5: unable to read RDB block 0 [ 84.769154][ T7286] loop5: unable to read partition table [ 84.771728][ T7286] loop5: partition table beyond EOD, truncated [ 84.773753][ T7286] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 84.838520][ T7298] binder: Bad value for 'max' [ 84.863428][ T7298] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 84.937795][ T7239] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 84.957371][ T7239] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.960473][ T7239] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 84.970467][ T7239] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.983527][ T7239] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 84.990589][ T7239] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.996989][ T7239] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 85.002505][ T7313] loop5: detected capacity change from 0 to 7 [ 85.013185][ T7239] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.103721][ T7239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.116641][ T7239] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.124211][ T6401] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.127240][ T6401] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.138072][ T6401] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.140955][ T6401] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.160752][ T7321] loop5: detected capacity change from 7 to 0 [ 85.160767][ T7313] ldm_validate_partition_table(): Disk read failed. [ 85.169507][ T7313] Dev loop5: unable to read RDB block 0 [ 85.174014][ T7313] loop5: unable to read partition table [ 85.177378][ T7313] loop5: partition table beyond EOD, truncated [ 85.178822][ T7239] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.179545][ T7313] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 85.292264][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 85.292276][ T42] audit: type=1400 audit(1786067051.312:783): avc: denied { ioctl } for pid=7339 comm="syz.5.384" path="socket:[17250]" dev="sockfs" ino=17250 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 85.446763][ T7360] loop5: detected capacity change from 0 to 7 [ 85.491133][ T7239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.529577][ T64] Bluetooth: hci5: command tx timeout [ 85.606372][ T7364] loop5: detected capacity change from 7 to 0 [ 85.606410][ T7360] ldm_validate_partition_table(): Disk read failed. [ 85.612659][ T7360] Dev loop5: unable to read RDB block 0 [ 85.616515][ T7360] loop5: unable to read partition table [ 85.620949][ T7360] loop5: partition table beyond EOD, truncated [ 85.623709][ T7360] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 85.702970][ T7239] veth0_vlan: entered promiscuous mode [ 85.718584][ T7239] veth1_vlan: entered promiscuous mode [ 85.746371][ T7239] veth0_macvtap: entered promiscuous mode [ 85.763777][ T7239] veth1_macvtap: entered promiscuous mode [ 85.774363][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.784980][ T7239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.850136][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.860403][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.893094][ T7386] FAULT_INJECTION: forcing a failure. [ 85.893094][ T7386] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 85.898431][ T7386] CPU: 2 UID: 0 PID: 7386 Comm: syz.1.398 Tainted: G L syzkaller #0 PREEMPT(full) [ 85.898450][ T7386] Tainted: [L]=SOFTLOCKUP [ 85.898453][ T7386] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 85.898472][ T7386] Call Trace: [ 85.898476][ T7386] [ 85.898481][ T7386] dump_stack_lvl+0x100/0x190 [ 85.898539][ T7386] should_fail_ex.cold+0x5/0xa [ 85.898555][ T7386] strncpy_from_user+0x3b/0x2d0 [ 85.898581][ T7386] do_getname+0x78/0x390 [ 85.898606][ T7386] do_sys_openat2+0xc7/0x1e0 [ 85.898626][ T7386] ? __pfx_do_sys_openat2+0x10/0x10 [ 85.898640][ T7386] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 85.898674][ T7386] ? __fget_files+0x21f/0x3d0 [ 85.898687][ T7386] __x64_sys_openat+0x12d/0x210 [ 85.898701][ T7386] ? __pfx___x64_sys_openat+0x10/0x10 [ 85.898718][ T7386] ? ksys_write+0x1ac/0x250 [ 85.898732][ T7386] do_syscall_64+0x115/0x870 [ 85.898745][ T7386] ? clear_bhb_loop+0x70/0xc0 [ 85.898758][ T7386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.898769][ T7386] RIP: 0033:0x7fa37579e0d9 [ 85.898778][ T7386] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.898789][ T7386] RSP: 002b:00007fa376581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 85.898800][ T7386] RAX: ffffffffffffffda RBX: 00007fa375a25fa0 RCX: 00007fa37579e0d9 [ 85.898806][ T7386] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 85.898812][ T7386] RBP: 00007fa376581090 R08: 0000000000000000 R09: 0000000000000000 [ 85.898818][ T7386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 85.898824][ T7386] R13: 00007fa375a26038 R14: 00007fa375a25fa0 R15: 00007ffea1330ed8 [ 85.898837][ T7386] [ 85.911442][ T6405] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.975102][ T6405] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.990080][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.994744][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.046653][ T109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.049618][ T109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.085235][ T42] audit: type=1400 audit(1786067052.102:784): avc: denied { mounton } for pid=7239 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 86.118883][ T7403] loop5: detected capacity change from 0 to 7 [ 86.206732][ T42] audit: type=1400 audit(1786067052.222:785): avc: denied { ioctl } for pid=7411 comm="syz.1.405" path="socket:[17381]" dev="sockfs" ino=17381 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 86.285809][ T7416] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 86.288636][ T7408] loop5: detected capacity change from 7 to 0 [ 86.288671][ T7403] ldm_validate_partition_table(): Disk read failed. [ 86.293744][ T7416] netlink: 128 bytes leftover after parsing attributes in process `syz.6.407'. [ 86.297890][ T7403] Dev loop5: unable to read RDB block 0 [ 86.307250][ T7403] loop5: unable to read partition table [ 86.307412][ T7403] loop5: partition table beyond EOD, truncated [ 86.307428][ T7403] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 86.452889][ T7429] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 86.499217][ T64] Bluetooth: hci4: command tx timeout [ 86.563869][ T7433] tipc: Started in network mode [ 86.564506][ T7435] netlink: 8 bytes leftover after parsing attributes in process `syz.4.414'. [ 86.565658][ T7433] tipc: Node identity 4004, cluster identity 4711 [ 86.580543][ T7433] tipc: Node number set to 16388 [ 86.592125][ T7440] FAULT_INJECTION: forcing a failure. [ 86.592125][ T7440] name failslab, interval 1, probability 0, space 0, times 1 [ 86.599291][ T7440] CPU: 3 UID: 0 PID: 7440 Comm: syz.6.415 Tainted: G L syzkaller #0 PREEMPT(full) [ 86.599310][ T7440] Tainted: [L]=SOFTLOCKUP [ 86.599314][ T7440] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 86.599329][ T7440] Call Trace: [ 86.599336][ T7440] [ 86.599340][ T7440] dump_stack_lvl+0x100/0x190 [ 86.599366][ T7440] should_fail_ex.cold+0x5/0xa [ 86.599394][ T7440] should_failslab+0xc2/0x120 [ 86.599410][ T7440] kmem_cache_alloc_noprof+0x91/0x6a0 [ 86.599423][ T7440] ? trace_kmem_cache_alloc+0xdd/0x100 [ 86.599437][ T7440] ? security_file_alloc+0x34/0x2c0 [ 86.599463][ T7440] security_file_alloc+0x34/0x2c0 [ 86.599474][ T7440] init_file+0x95/0x480 [ 86.599487][ T7440] alloc_empty_file+0x79/0x1c0 [ 86.599501][ T7440] path_openat+0xe7/0x4280 [ 86.599512][ T7440] ? __kasan_slab_alloc+0x89/0x90 [ 86.599525][ T7440] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 86.599536][ T7440] ? do_getname+0x35/0x390 [ 86.599549][ T7440] ? do_sys_openat2+0xc7/0x1e0 [ 86.599561][ T7440] ? __x64_sys_openat+0x12d/0x210 [ 86.599574][ T7440] ? do_syscall_64+0x115/0x870 [ 86.599591][ T7440] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.599606][ T7440] ? __pfx_path_openat+0x10/0x10 [ 86.599620][ T7440] do_file_open+0x20e/0x430 [ 86.599632][ T7440] ? __pfx_do_file_open+0x10/0x10 [ 86.599653][ T7440] ? alloc_fd+0x471/0x7a0 [ 86.599666][ T7440] ? do_getname+0x191/0x390 [ 86.599680][ T7440] do_sys_openat2+0x10f/0x1e0 [ 86.599694][ T7440] ? __pfx_do_sys_openat2+0x10/0x10 [ 86.599708][ T7440] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 86.599723][ T7440] ? __fget_files+0x21f/0x3d0 [ 86.599736][ T7440] __x64_sys_openat+0x12d/0x210 [ 86.599750][ T7440] ? __pfx___x64_sys_openat+0x10/0x10 [ 86.599763][ T7440] ? ksys_write+0x1ac/0x250 [ 86.599777][ T7440] do_syscall_64+0x115/0x870 [ 86.599789][ T7440] ? clear_bhb_loop+0x70/0xc0 [ 86.599803][ T7440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.599814][ T7440] RIP: 0033:0x7f08a059e0d9 [ 86.599823][ T7440] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.599834][ T7440] RSP: 002b:00007f08a1387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 86.599848][ T7440] RAX: ffffffffffffffda RBX: 00007f08a0825fa0 RCX: 00007f08a059e0d9 [ 86.599855][ T7440] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 86.599861][ T7440] RBP: 00007f08a1387090 R08: 0000000000000000 R09: 0000000000000000 [ 86.599867][ T7440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.599873][ T7440] R13: 00007f08a0826038 R14: 00007f08a0825fa0 R15: 00007fff79960148 [ 86.599886][ T7440] [ 86.618065][ T7445] loop5: detected capacity change from 0 to 7 [ 86.673241][ T42] audit: type=1400 audit(1786067052.692:786): avc: denied { watch } for pid=7453 comm="syz.4.420" path="/161/file2" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 86.712081][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 86.726553][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'. [ 86.730540][ T42] audit: type=1400 audit(1786067052.692:787): avc: denied { watch_sb watch_reads } for pid=7453 comm="syz.4.420" path="/161/file2" dev="tmpfs" ino=890 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 86.758304][ T42] audit: type=1400 audit(1786067052.772:788): avc: denied { read } for pid=7455 comm="syz.6.418" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 86.858394][ T7456] loop5: detected capacity change from 7 to 0 [ 86.858439][ T7445] ldm_validate_partition_table(): Disk read failed. [ 86.865926][ T7445] Dev loop5: unable to read RDB block 0 [ 86.867750][ T7445] loop5: unable to read partition table [ 86.869842][ T7445] loop5: partition table beyond EOD, truncated [ 86.886682][ T7445] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 86.994474][ T7471] mmap: syz.5.425 (7471) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 87.006141][ T7469] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 87.013113][ T7466] 9pnet: Found fid 0 not clunked [ 87.168257][ T7061] libceph: connect (1)[c::]:6789 error -101 [ 87.171199][ T7061] libceph: mon0 (1)[c::]:6789 connect error [ 87.181034][ T7480] ceph: No mds server is up or the cluster is laggy [ 87.201766][ T7487] netlink: 'syz.4.429': attribute type 1 has an invalid length. [ 87.247099][ T7491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.264185][ T7491] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.303423][ T7494] FAULT_INJECTION: forcing a failure. [ 87.303423][ T7494] name failslab, interval 1, probability 0, space 0, times 0 [ 87.308692][ T7494] CPU: 3 UID: 0 PID: 7494 Comm: syz.1.427 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.308724][ T7494] Tainted: [L]=SOFTLOCKUP [ 87.308728][ T7494] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.308735][ T7494] Call Trace: [ 87.308752][ T7494] [ 87.308758][ T7494] dump_stack_lvl+0x100/0x190 [ 87.308778][ T7494] should_fail_ex.cold+0x5/0xa [ 87.308792][ T7494] should_failslab+0xc2/0x120 [ 87.308807][ T7494] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 87.308820][ T7494] ? kasan_save_stack+0x30/0x50 [ 87.308833][ T7494] ? __d_alloc+0x35/0xa50 [ 87.308848][ T7494] __d_alloc+0x35/0xa50 [ 87.308862][ T7494] d_alloc_parallel+0x105/0x14b0 [ 87.308883][ T7494] ? __pfx_d_alloc_parallel+0x10/0x10 [ 87.308900][ T7494] ? __pfx___might_resched+0x10/0x10 [ 87.308925][ T7494] ? find_held_lock+0x2b/0x80 [ 87.308937][ T7494] ? down_read+0x13b/0x4c0 [ 87.308952][ T7494] ? __pfx_down_read+0x10/0x10 [ 87.308969][ T7494] __lookup_slow+0x98/0x320 [ 87.308984][ T7494] lookup_slow+0x50/0x70 [ 87.308999][ T7494] link_path_walk+0x1377/0x1cc0 [ 87.309021][ T7494] path_openat+0x1c9/0x4280 [ 87.309031][ T7494] ? __kasan_slab_alloc+0x89/0x90 [ 87.309044][ T7494] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 87.309055][ T7494] ? do_getname+0x35/0x390 [ 87.309080][ T7494] ? __x64_sys_openat+0x12d/0x210 [ 87.309110][ T7494] ? __pfx_path_openat+0x10/0x10 [ 87.309140][ T7494] do_file_open+0x20e/0x430 [ 87.309161][ T7494] ? __pfx_do_file_open+0x10/0x10 [ 87.309192][ T7494] ? alloc_fd+0x471/0x7a0 [ 87.309210][ T7494] ? do_getname+0x191/0x390 [ 87.309231][ T7494] do_sys_openat2+0x10f/0x1e0 [ 87.309254][ T7494] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.309276][ T7494] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 87.309301][ T7494] ? __fget_files+0x21f/0x3d0 [ 87.309325][ T7494] __x64_sys_openat+0x12d/0x210 [ 87.309345][ T7494] ? __pfx___x64_sys_openat+0x10/0x10 [ 87.309364][ T7494] ? ksys_write+0x1ac/0x250 [ 87.309388][ T7494] do_syscall_64+0x115/0x870 [ 87.309410][ T7494] ? clear_bhb_loop+0x70/0xc0 [ 87.309432][ T7494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.309445][ T7494] RIP: 0033:0x7fa37579e0d9 [ 87.309455][ T7494] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.309466][ T7494] RSP: 002b:00007fa376581028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.309477][ T7494] RAX: ffffffffffffffda RBX: 00007fa375a25fa0 RCX: 00007fa37579e0d9 [ 87.309484][ T7494] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 87.309491][ T7494] RBP: 00007fa376581090 R08: 0000000000000000 R09: 0000000000000000 [ 87.309497][ T7494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.309503][ T7494] R13: 00007fa375a26038 R14: 00007fa375a25fa0 R15: 00007ffea1330ed8 [ 87.309517][ T7494] [ 87.483016][ T42] audit: type=1400 audit(1786067053.502:789): avc: denied { write } for pid=7498 comm="syz.1.432" name="core" dev="configfs" ino=467 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 87.529247][ T7061] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 87.611640][ T64] Bluetooth: hci5: command tx timeout [ 87.695880][ T7061] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.698782][ T7061] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.702113][ T7061] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.706013][ T7061] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.715874][ T7061] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.726967][ T7061] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.733393][ T7061] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.739712][ T7061] usb 10-1: Product: syz [ 87.741166][ T7061] usb 10-1: Manufacturer: syz [ 87.756526][ T7061] cdc_wdm 10-1:1.0: skipping garbage [ 87.760592][ T7061] cdc_wdm 10-1:1.0: skipping garbage [ 87.778993][ T7061] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 87.783708][ T7061] cdc_wdm 10-1:1.0: Unknown control protocol [ 87.884421][ T7532] FAULT_INJECTION: forcing a failure. [ 87.884421][ T7532] name failslab, interval 1, probability 0, space 0, times 0 [ 87.893192][ T7532] CPU: 3 UID: 0 PID: 7532 Comm: syz.6.441 Tainted: G L syzkaller #0 PREEMPT(full) [ 87.893222][ T7532] Tainted: [L]=SOFTLOCKUP [ 87.893228][ T7532] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 87.893238][ T7532] Call Trace: [ 87.893244][ T7532] [ 87.893252][ T7532] dump_stack_lvl+0x100/0x190 [ 87.893282][ T7532] should_fail_ex.cold+0x5/0xa [ 87.893306][ T7532] should_failslab+0xc2/0x120 [ 87.893330][ T7532] kmem_cache_alloc_lru_noprof+0x8d/0x6a0 [ 87.893354][ T7532] ? alloc_inode+0x183/0x250 [ 87.893383][ T7532] alloc_inode+0x183/0x250 [ 87.893406][ T7532] iget_locked+0x1d9/0x6d0 [ 87.893427][ T7532] ? __pfx_iget_locked+0x10/0x10 [ 87.893448][ T7532] ? kernfs_root+0xee/0x2a0 [ 87.893467][ T7532] ? kernfs_root+0xee/0x2a0 [ 87.893489][ T7532] kernfs_get_inode+0x46/0x470 [ 87.893508][ T7532] kernfs_iop_lookup+0x1a7/0x2d0 [ 87.893530][ T7532] __lookup_slow+0x155/0x320 [ 87.893556][ T7532] lookup_slow+0x50/0x70 [ 87.893580][ T7532] link_path_walk+0x1377/0x1cc0 [ 87.893613][ T7532] path_openat+0x1c9/0x4280 [ 87.893629][ T7532] ? __kasan_slab_alloc+0x89/0x90 [ 87.893650][ T7532] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 87.893669][ T7532] ? do_getname+0x35/0x390 [ 87.893690][ T7532] ? __x64_sys_openat+0x12d/0x210 [ 87.893720][ T7532] ? __pfx_path_openat+0x10/0x10 [ 87.893744][ T7532] do_file_open+0x20e/0x430 [ 87.893766][ T7532] ? __pfx_do_file_open+0x10/0x10 [ 87.893802][ T7532] ? alloc_fd+0x471/0x7a0 [ 87.893823][ T7532] ? do_getname+0x191/0x390 [ 87.893848][ T7532] do_sys_openat2+0x10f/0x1e0 [ 87.893899][ T7532] ? __pfx_do_sys_openat2+0x10/0x10 [ 87.893923][ T7532] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 87.893949][ T7532] ? __fget_files+0x21f/0x3d0 [ 87.893970][ T7532] __x64_sys_openat+0x12d/0x210 [ 87.893993][ T7532] ? __pfx___x64_sys_openat+0x10/0x10 [ 87.894015][ T7532] ? ksys_write+0x1ac/0x250 [ 87.894040][ T7532] do_syscall_64+0x115/0x870 [ 87.894064][ T7532] ? clear_bhb_loop+0x70/0xc0 [ 87.894084][ T7532] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.894100][ T7532] RIP: 0033:0x7f08a059e0d9 [ 87.894116][ T7532] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.894134][ T7532] RSP: 002b:00007f08a1387028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 87.894168][ T7532] RAX: ffffffffffffffda RBX: 00007f08a0825fa0 RCX: 00007f08a059e0d9 [ 87.894181][ T7532] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 87.894191][ T7532] RBP: 00007f08a1387090 R08: 0000000000000000 R09: 0000000000000000 [ 87.894201][ T7532] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.894211][ T7532] R13: 00007f08a0826038 R14: 00007f08a0825fa0 R15: 00007fff79960148 [ 87.894235][ T7532] [ 88.004158][ T56] usb 10-1: USB disconnect, device number 4 [ 88.122846][ T7552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 88.136661][ T7552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 88.349365][ T6748] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 88.499236][ T6748] usb 11-1: Using ep0 maxpacket: 32 [ 88.502534][ T6748] usb 11-1: unable to get BOS descriptor or descriptor too short [ 88.506004][ T6748] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 88.511337][ T6748] usb 11-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 88.514404][ T6748] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.517435][ T6748] usb 11-1: Product: syz [ 88.518977][ T6748] usb 11-1: Manufacturer: syz [ 88.523654][ T6748] usb 11-1: SerialNumber: syz [ 88.564624][ T7570] FAULT_INJECTION: forcing a failure. [ 88.564624][ T7570] name failslab, interval 1, probability 0, space 0, times 0 [ 88.570900][ T7570] CPU: 0 UID: 0 PID: 7570 Comm: syz.5.454 Tainted: G L syzkaller #0 PREEMPT(full) [ 88.570919][ T7570] Tainted: [L]=SOFTLOCKUP [ 88.570923][ T7570] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 88.570930][ T7570] Call Trace: [ 88.570934][ T7570] [ 88.570938][ T7570] dump_stack_lvl+0x100/0x190 [ 88.570956][ T7570] should_fail_ex.cold+0x5/0xa [ 88.570970][ T7570] should_failslab+0xc2/0x120 [ 88.570986][ T7570] __kmalloc_flags_noprof+0x122/0x8b0 [ 88.571005][ T7570] ? alloc_slab_obj_exts+0x5a/0x160 [ 88.571018][ T7570] alloc_slab_obj_exts+0x5a/0x160 [ 88.571029][ T7570] __memcg_slab_post_alloc_hook+0x3d4/0x1160 [ 88.571053][ T7570] ? kasan_save_track+0x14/0x30 [ 88.571067][ T7570] kmem_cache_alloc_lru_noprof+0x583/0x6a0 [ 88.571081][ T7570] ? alloc_inode+0x183/0x250 [ 88.571101][ T7570] alloc_inode+0x183/0x250 [ 88.571116][ T7570] iget_locked+0x1d9/0x6d0 [ 88.571131][ T7570] ? __pfx_iget_locked+0x10/0x10 [ 88.571145][ T7570] ? kernfs_root+0xee/0x2a0 [ 88.571156][ T7570] ? kernfs_root+0xee/0x2a0 [ 88.571169][ T7570] kernfs_get_inode+0x46/0x470 [ 88.571180][ T7570] kernfs_iop_lookup+0x1a7/0x2d0 [ 88.571193][ T7570] __lookup_slow+0x155/0x320 [ 88.571209][ T7570] lookup_slow+0x50/0x70 [ 88.571223][ T7570] link_path_walk+0x1377/0x1cc0 [ 88.571245][ T7570] path_openat+0x1c9/0x4280 [ 88.571255][ T7570] ? __kasan_slab_alloc+0x89/0x90 [ 88.571269][ T7570] ? kmem_cache_alloc_noprof+0x26b/0x6a0 [ 88.571280][ T7570] ? do_getname+0x35/0x390 [ 88.571293][ T7570] ? __x64_sys_openat+0x12d/0x210 [ 88.571311][ T7570] ? __pfx_path_openat+0x10/0x10 [ 88.571326][ T7570] do_file_open+0x20e/0x430 [ 88.571338][ T7570] ? __pfx_do_file_open+0x10/0x10 [ 88.571358][ T7570] ? alloc_fd+0x471/0x7a0 [ 88.571371][ T7570] ? do_getname+0x191/0x390 [ 88.571386][ T7570] do_sys_openat2+0x10f/0x1e0 [ 88.571399][ T7570] ? __pfx_do_sys_openat2+0x10/0x10 [ 88.571413][ T7570] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 88.571429][ T7570] ? __fget_files+0x21f/0x3d0 [ 88.571442][ T7570] __x64_sys_openat+0x12d/0x210 [ 88.571456][ T7570] ? __pfx___x64_sys_openat+0x10/0x10 [ 88.571469][ T7570] ? ksys_write+0x1ac/0x250 [ 88.571483][ T7570] do_syscall_64+0x115/0x870 [ 88.571496][ T7570] ? clear_bhb_loop+0x70/0xc0 [ 88.571509][ T7570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.571520][ T7570] RIP: 0033:0x7feb0db9e0d9 [ 88.571530][ T7570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 88.571541][ T7570] RSP: 002b:00007feb0ea60028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 88.571565][ T7570] RAX: ffffffffffffffda RBX: 00007feb0de25fa0 RCX: 00007feb0db9e0d9 [ 88.571573][ T7570] RDX: 0000000000000001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 88.571579][ T7570] RBP: 00007feb0ea60090 R08: 0000000000000000 R09: 0000000000000000 [ 88.571585][ T7570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.571595][ T7570] R13: 00007feb0de26038 R14: 00007feb0de25fa0 R15: 00007ffe3c50dc18 [ 88.571609][ T7570] [ 88.750283][ T6748] usb 11-1: Quirk or no altset; falling back to MIDI 1.0 [ 88.752696][ T6748] usb 11-1: MIDIStreaming interface descriptor not found [ 88.758472][ T7577] __nla_validate_parse: 78 callbacks suppressed [ 88.758483][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.4.457'. [ 88.764050][ T7577] netlink: 14 bytes leftover after parsing attributes in process `syz.4.457'. [ 88.825682][ T6748] usb 11-1: USB disconnect, device number 2 [ 88.864143][ T7585] syz_tun: entered allmulticast mode [ 88.881554][ T42] audit: type=1400 audit(1786067054.902:790): avc: denied { getopt } for pid=7584 comm="syz.4.460" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 88.881800][ T7585] netlink: 12 bytes leftover after parsing attributes in process `syz.4.460'. [ 88.900492][ T7584] syz_tun: left allmulticast mode [ 88.945468][ T7587] udevd[7587]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb11/11-1/11-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.304534][ T7615] syzkaller0: entered promiscuous mode [ 89.306376][ T7615] syzkaller0: entered allmulticast mode [ 89.384037][ T7619] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 89.477569][ T7628] vivid-007: kernel_thread() failed [ 89.561316][ T7637] netlink: 20 bytes leftover after parsing attributes in process `syz.5.476'. [ 89.564729][ T7637] netlink: 64 bytes leftover after parsing attributes in process `syz.5.476'. [ 89.572222][ T42] audit: type=1326 audit(1786067055.592:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.5.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0db9e0d9 code=0x7ffc0000 [ 89.581780][ T42] audit: type=1326 audit(1786067055.592:792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7636 comm="syz.5.476" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb0db9e0d9 code=0x7ffc0000 [ 89.692729][ T7640] loop5: detected capacity change from 0 to 7 [ 89.696447][ C2] blk_print_req_error: 10 callbacks suppressed [ 89.696458][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.699170][ T64] Bluetooth: hci5: command tx timeout [ 89.701542][ C2] buffer_io_error: 342 callbacks suppressed [ 89.701560][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.702589][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.711295][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.715555][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.718631][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.721257][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.724175][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.726749][ C2] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.729797][ C2] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.733209][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.736435][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.739500][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.742703][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.754474][ T7640] ldm_validate_partition_table(): Disk read failed. [ 89.756970][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.760064][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.762696][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.766102][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.776544][ C0] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 89.779622][ C0] Buffer I/O error on dev loop5, logical block 0, async page read [ 89.792474][ T7640] Dev loop5: unable to read RDB block 0 [ 89.794910][ T7640] loop5: unable to read partition table [ 89.797049][ T7640] loop5: partition table beyond EOD, truncated [ 89.799038][ T7640] loop_reread_partitions: partition scan of loop5 (úùƒWå¡™‰ü¾Ã½¸*‹ºÐ œëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 89.944611][ T7656] netlink: 'syz.5.481': attribute type 1 has an invalid length. [ 89.976825][ T7656] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.064794][ T7667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.486'. [ 90.072333][ T7667] ptrace attach of "/syz-executor exec"[7239] was attempted by " [ 90.093067][ T7670] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=58986 sclass=netlink_route_socket pid=7670 comm=syz.4.488 [ 90.137686][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.489'. [ 90.226632][ T7682] netlink: Conntrack attr has 8 unknown bytes [ 90.235878][ T7682] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 90.247572][ T7685] netlink: 'syz.5.495': attribute type 1 has an invalid length. [ 90.263646][ T7685] bond2: entered promiscuous mode [ 90.266923][ T7685] 8021q: adding VLAN 0 to HW filter on device bond2 [ 90.288857][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.497'. [ 90.293684][ T7691] netlink: 'syz.6.497': attribute type 11 has an invalid length. [ 90.299431][ T7691] netlink: 4 bytes leftover after parsing attributes in process `syz.6.497'. [ 90.326273][ T7696] loop5: detected capacity change from 0 to 7 [ 90.337588][ T7698] netlink: 156 bytes leftover after parsing attributes in process `syz.6.499'. [ 90.339359][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.343559][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.346460][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.362138][ T42] kauditd_printk_skb: 8 callbacks suppressed [ 90.362165][ T42] audit: type=1400 audit(1786067056.382:801): avc: denied { node_bind } for pid=7699 comm="syz.4.500" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 90.364568][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 90.365520][ T42] audit: type=1400 audit(1786067056.382:802): avc: denied { read } for pid=7699 comm="syz.4.500" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 90.422330][ T42] audit: type=1400 audit(1786067056.442:803): avc: denied { setopt } for pid=7702 comm="syz.6.501" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 90.476568][ T7701] loop5: detected capacity change from 7 to 0 [ 90.476594][ T7696] ldm_validate_partition_table(): Disk read failed. [ 90.481078][ T7696] Dev loop5: unable to read RDB block 0 [ 90.483262][ T7696] loop5: unable to read partition table [ 90.485371][ T7696] loop5: partition table beyond EOD, truncated [ 90.487605][ T7696] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 90.557612][ T42] audit: type=1400 audit(1786067056.572:804): avc: denied { map } for pid=7717 comm="syz.5.507" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.571131][ T42] audit: type=1400 audit(1786067056.572:805): avc: denied { execute } for pid=7717 comm="syz.5.507" path="/dev/sg0" dev="devtmpfs" ino=722 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 90.620896][ T7724] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.624582][ T7724] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.906358][ T7748] loop5: detected capacity change from 0 to 7 [ 90.974522][ T7755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.039916][ T7753] loop5: detected capacity change from 7 to 0 [ 91.040932][ T7748] ldm_validate_partition_table(): Disk read failed. [ 91.045311][ T7748] Dev loop5: unable to read RDB block 0 [ 91.047115][ T7748] loop5: unable to read partition table [ 91.048975][ T7748] loop5: partition table beyond EOD, truncated [ 91.051893][ T7748] loop_reread_partitions: partition scan of loop5 (CD:ôÿŒŠÒqÑn²;;ÖPÏ ) failed (rc=-5) [ 91.203982][ T7763] kvm: user requested TSC rate below hardware speed [ 91.384528][ T7778] bridge0: entered allmulticast mode [ 91.390087][ T7778] bridge_slave_1: left promiscuous mode [ 91.392632][ T7778] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.397273][ T7778] bridge_slave_0: left allmulticast mode [ 91.400818][ T7778] bridge_slave_0: left promiscuous mode [ 91.403055][ T7778] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.415372][ T7778] bridge0 (unregistering): left allmulticast mode [ 91.435784][ T42] audit: type=1400 audit(1786067057.452:806): avc: denied { mount } for pid=7775 comm="syz.4.524" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 91.769895][ T64] Bluetooth: hci5: command tx timeout [ 91.915462][ T42] audit: type=1400 audit(1786067057.932:807): avc: denied { ioctl } for pid=7795 comm="syz.1.531" path="/dev/nullb0" dev="devtmpfs" ino=707 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 92.001756][ T42] audit: type=1326 audit(1786067058.022:808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7834 comm="syz.4.542" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49f0b9e0d9 code=0x0 [ 92.131326][ T42] audit: type=1400 audit(1786067058.142:809): avc: denied { write } for pid=7847 comm="syz.5.547" name="ppp" dev="devtmpfs" ino=731 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 92.454519][ T64] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 92.459804][ T64] CPU: 0 UID: 0 PID: 64 Comm: kworker/u34:0 Tainted: G L syzkaller #0 PREEMPT(full) [ 92.459838][ T64] Tainted: [L]=SOFTLOCKUP [ 92.459858][ T64] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 92.459891][ T64] Workqueue: hci4 hci_rx_work [ 92.459958][ T64] Call Trace: [ 92.459966][ T64] [ 92.459974][ T64] dump_stack_lvl+0x100/0x190 [ 92.460011][ T64] sysfs_warn_dup.cold+0x1c/0x28 [ 92.460049][ T64] sysfs_create_dir_ns+0x24b/0x2b0 [ 92.460086][ T64] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 92.460106][ T64] ? find_held_lock+0x2b/0x80 [ 92.460126][ T64] ? kobject_add_internal+0x25f/0x930 [ 92.460166][ T64] ? kobject_add_internal+0x25f/0x930 [ 92.460210][ T64] ? do_raw_spin_unlock+0x145/0x1e0 [ 92.460247][ T64] kobject_add_internal+0x2c8/0x930 [ 92.460282][ T64] kobject_add+0x16a/0x1e0 [ 92.460305][ T64] ? __pfx_kobject_add+0x10/0x10 [ 92.460322][ T64] ? class_to_subsys+0x10f/0x150 [ 92.460385][ T64] ? kobject_put+0xb9/0x640 [ 92.460415][ T64] ? _raw_spin_unlock+0x28/0x50 [ 92.460451][ T64] device_add+0x294/0x1970 [ 92.460491][ T64] ? __pfx_dev_set_name+0x10/0x10 [ 92.460514][ T64] ? __pfx_device_add+0x10/0x10 [ 92.460554][ T64] ? mgmt_send_event_skb+0x2fb/0x460 [ 92.460587][ T64] hci_conn_add_sysfs+0x1a3/0x260 [ 92.460624][ T64] le_conn_complete_evt+0x11eb/0x1f60 [ 92.460658][ T64] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 92.460687][ T64] ? hci_event_packet+0x186/0xcd0 [ 92.460709][ T64] ? hci_event_packet+0x186/0xcd0 [ 92.460746][ T64] hci_le_enh_conn_complete_evt+0x23d/0x3b0 [ 92.460774][ T64] ? skb_pull_data+0x15f/0x1e0 [ 92.460815][ T64] hci_le_meta_evt+0x34a/0x5f0 [ 92.460843][ T64] ? __pfx_hci_le_enh_conn_complete_evt+0x10/0x10 [ 92.460880][ T64] hci_event_packet+0x51c/0xcd0 [ 92.460906][ T64] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 92.460940][ T64] ? __pfx_hci_event_packet+0x10/0x10 [ 92.460966][ T64] ? kcov_remote_start+0x384/0x670 [ 92.460999][ T64] ? lockdep_hardirqs_on+0x78/0x100 [ 92.461064][ T64] hci_rx_work+0x451/0xfc0 [ 92.461101][ T64] process_one_work+0xa23/0x1940 [ 92.461134][ T64] ? __pfx_process_one_work+0x10/0x10 [ 92.461172][ T64] ? __pfx_hci_rx_work+0x10/0x10 [ 92.461197][ T64] worker_thread+0x5ef/0xe50 [ 92.461236][ T64] ? kthread+0x13a/0x450 [ 92.461256][ T64] ? __pfx_worker_thread+0x10/0x10 [ 92.461283][ T64] kthread+0x370/0x450 [ 92.461301][ T64] ? __pfx_kthread+0x10/0x10 [ 92.461324][ T64] ret_from_fork+0x72b/0xd50 [ 92.461361][ T64] ? __pfx_ret_from_fork+0x10/0x10 [ 92.461403][ T64] ? __switch_to+0x800/0x10f0 [ 92.461424][ T64] ? __pfx_kthread+0x10/0x10 [ 92.461444][ T64] ret_from_fork_asm+0x1a/0x30 [ 92.461498][ T64] [ 92.461577][ T64] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 92.578434][ T64] Bluetooth: hci4: failed to register connection device [ 92.811188][ T42] audit: type=1400 audit(1786067058.832:810): avc: denied { write } for pid=7868 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.122353][ T7891] bond0: (slave bond_slave_0): Releasing backup interface [ 93.132137][ T7891] bond0: (slave bond_slave_1): Releasing backup interface [ 93.146048][ T7891] team0: Port device team_slave_0 removed [ 93.151884][ T7891] team0: Port device team_slave_1 removed [ 93.154416][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.157358][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.162462][ T7891] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.164973][ T7891] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.168334][ T7891] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 93.194695][ T7891] tipc: Enabled bearer , priority 0 [ 93.367463][ T7896] fuse: fd is not a fuse device [ 93.370747][ T7896] CIFS: Attempting to mount //127.0.0.1/share [ 93.784498][ T7908] fuse: fd is not a fuse device [ 94.096099][ T7923] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 94.099097][ T7923] vhci_hcd vhci_hcd.0: devid(0) speed(6) speed_str(super-speed-plus) [ 94.106389][ T7923] vhci_hcd vhci_hcd.0: Device attached [ 94.121037][ T7923] vhci_hcd vhci_hcd.0: port 0 already used [ 94.148116][ T7925] vhci_hcd: connection closed [ 94.150315][ T12] vhci_hcd vhci_hcd.5: stop threads [ 94.155413][ T12] vhci_hcd vhci_hcd.5: release socket [ 94.157098][ T7934] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2 [ 94.158391][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 94.201735][ T7896] CIFS: VFS: cifs_mount failed w/return code = -512 [ 94.563052][ T7969] __nla_validate_parse: 8 callbacks suppressed [ 94.563084][ T7969] netlink: 24 bytes leftover after parsing attributes in process `syz.4.575'. [ 94.607009][ T7969] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=7969 comm=syz.4.575 [ 94.706368][ T7976] bond4: option arp_interval: mode dependency failed, not supported in mode balance-alb(6) [ 94.711848][ T7976] bond4 (unregistering): Released all slaves [ 95.048982][ T5812] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.136028][ T5812] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.223689][ T5812] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.327666][ T5812] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.584277][ T5812] bond0 (unregistering): Released all slaves [ 95.589743][ T5812] bond1 (unregistering): Released all slaves [ 95.597446][ T5812] bond2 (unregistering): Released all slaves [ 95.658053][ T42] kauditd_printk_skb: 16 callbacks suppressed [ 95.658070][ T42] audit: type=1400 audit(1786067061.672:827): avc: denied { write } for pid=7984 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.703058][ T5812] tipc: Disabling bearer [ 95.706032][ T5812] tipc: Left network mode [ 95.713683][ T42] audit: type=1400 audit(1786067061.732:828): avc: denied { write } for pid=7987 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.757898][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 95.851429][ T42] audit: type=1400 audit(1786067061.872:829): avc: denied { write } for pid=7990 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.899727][ T42] audit: type=1400 audit(1786067061.922:830): avc: denied { write } for pid=7993 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.945883][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 95.957816][ T5812] hsr_slave_0: left promiscuous mode [ 95.961117][ T5812] hsr_slave_1: left promiscuous mode [ 95.975568][ T5812] veth1_macvtap: left promiscuous mode [ 95.977883][ T5812] veth0_macvtap: left promiscuous mode [ 95.981683][ T5812] veth1_vlan: left promiscuous mode [ 95.983892][ T5812] veth0_vlan: left promiscuous mode [ 96.382138][ T42] audit: type=1400 audit(1786067062.402:831): avc: denied { write } for pid=7996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.452207][ T42] audit: type=1400 audit(1786067062.472:832): avc: denied { write } for pid=7999 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.512692][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 96.623305][ T42] audit: type=1400 audit(1786067062.642:833): avc: denied { write } for pid=8003 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.689792][ T42] audit: type=1400 audit(1786067062.712:834): avc: denied { write } for pid=8006 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 96.748791][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 107.508382][ T42] audit: type=1400 audit(1786067073.522:835): avc: denied { write } for pid=8020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.552082][ T42] audit: type=1400 audit(1786067073.572:836): avc: denied { write } for pid=8023 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.924379][ T42] audit: type=1400 audit(1786067073.942:837): avc: denied { write } for pid=8026 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 107.972557][ T42] audit: type=1400 audit(1786067073.992:838): avc: denied { write } for pid=8029 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.048722][ T42] audit: type=1400 audit(1786067074.062:839): avc: denied { write } for pid=8032 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.099214][ T42] audit: type=1400 audit(1786067074.112:840): avc: denied { write } for pid=8035 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.800051][ T42] audit: type=1400 audit(1786067074.822:841): avc: denied { write } for pid=8038 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 108.857762][ T42] audit: type=1400 audit(1786067074.872:842): avc: denied { write } for pid=8041 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 113.295895][ T42] audit: type=1400 audit(1786067079.312:843): avc: denied { accept } for pid=8045 comm="syz.6.582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 113.308851][ T8046] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.314049][ T8046] batman_adv: batadv0: Adding interface: gretap1 [ 113.316086][ T8046] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.326726][ T8046] batman_adv: batadv0: Interface activated: gretap1 [ 113.349735][ T64] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 113.354539][ T64] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 113.358220][ T64] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 113.362709][ T64] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 113.365397][ T64] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 113.412141][ T8065] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 113.430957][ T42] audit: type=1400 audit(1786067079.452:844): avc: denied { module_request } for pid=8054 comm="syz-executor" kmod="nr5" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 113.449178][ T42] audit: type=1400 audit(1786067079.462:845): avc: denied { bpf } for pid=8072 comm="syz.6.587" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.464450][ T42] audit: type=1400 audit(1786067079.462:846): avc: denied { perfmon } for pid=8072 comm="syz.6.587" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.542395][ T42] audit: type=1400 audit(1786067079.562:847): avc: denied { name_bind } for pid=8091 comm="syz.1.592" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 113.557964][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 113.565046][ T42] audit: type=1400 audit(1786067079.582:848): avc: denied { map } for pid=8091 comm="syz.1.592" path="/dev/video3" dev="devtmpfs" ino=960 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 113.583253][ T8093] netlink: 28 bytes leftover after parsing attributes in process `syz.1.592'. [ 113.641610][ T8100] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 113.661285][ T8100] ip6gre1: entered promiscuous mode [ 113.664027][ T8100] ip6gre1: entered allmulticast mode [ 113.677238][ T8100] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.677315][ T5812] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.684538][ T5812] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.699040][ T8100] netlink: 8 bytes leftover after parsing attributes in process `syz.6.593'. [ 113.699758][ T56] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.747331][ T42] audit: type=1804 audit(1786067079.762:849): pid=8103 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.594" name="/newroot/114/file0" dev="tmpfs" ino=636 res=1 errno=0 [ 113.770078][ T56] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 113.846282][ T8054] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.848606][ T8054] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.851283][ T8054] bridge_slave_0: entered allmulticast mode [ 113.854085][ T8054] bridge_slave_0: entered promiscuous mode [ 113.860080][ T8054] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.862822][ T8054] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.865308][ T8054] bridge_slave_1: entered allmulticast mode [ 113.868011][ T8054] bridge_slave_1: entered promiscuous mode [ 113.887185][ T8054] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 113.894632][ T8054] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 113.926812][ T8054] team0: Port device team_slave_0 added [ 113.933193][ T8054] team0: Port device team_slave_1 added [ 113.956800][ T42] audit: type=1400 audit(1786067079.972:850): avc: denied { wake_alarm } for pid=8121 comm="syz.1.599" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 113.964381][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 113.966764][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.975405][ T8054] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 113.980912][ T8054] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 113.985369][ T8054] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.993859][ T8054] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.038445][ T8054] hsr_slave_0: entered promiscuous mode [ 114.041901][ T8054] hsr_slave_1: entered promiscuous mode [ 114.044422][ T8054] debugfs: 'hsr0' already exists in 'hsr' [ 114.046429][ T8054] Cannot create hsr debugfs directory [ 114.250150][ T42] audit: type=1400 audit(1786067080.262:851): avc: denied { write } for pid=8134 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.278448][ T8138] kAFS: unparsable volume name [ 114.307519][ T42] audit: type=1400 audit(1786067080.322:852): avc: denied { write } for pid=8139 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.655253][ T56] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 114.712233][ T8054] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 114.717950][ T8054] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.724852][ T8054] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 114.736436][ T8054] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.742951][ T8054] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 114.764718][ T8054] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.777790][ T8181] workqueue: Failed to create a rescuer kthread for wq "nfc3_nci_tx_wq": -EINTR [ 114.799762][ T8054] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 114.850330][ T8054] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.888255][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 114.907423][ T8054] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.924953][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 114.927091][ T8054] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.927819][ T8216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.618'. [ 114.936690][ T6386] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.938888][ T6386] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.966399][ T6386] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.968700][ T6386] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.321702][ T8054] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.400525][ T8252] ip_tables: iptables: counters copy to user failed while replacing table [ 115.450460][ T5738] Bluetooth: hci4: command tx timeout [ 115.522123][ T8054] veth0_vlan: entered promiscuous mode [ 115.534628][ T8054] veth1_vlan: entered promiscuous mode [ 115.573154][ T8054] veth0_macvtap: entered promiscuous mode [ 115.586817][ T8054] veth1_macvtap: entered promiscuous mode [ 115.615718][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.631476][ T8054] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.710093][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.774526][ T8281] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=8281 comm=syz.6.624 [ 115.777459][ T6006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.778978][ T8281] netlink: 'syz.6.624': attribute type 1 has an invalid length. [ 115.778990][ T8281] netlink: 'syz.6.624': attribute type 2 has an invalid length. [ 115.778997][ T8281] netlink: 216 bytes leftover after parsing attributes in process `syz.6.624'. [ 115.779953][ T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.804413][ T6006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.813031][ T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.814171][ T8285] fuse: Bad value for 'fd' [ 115.852348][ T6004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.855450][ T6004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.884287][ T8290] netlink: 'syz.4.625': attribute type 14 has an invalid length. [ 115.902078][ T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.928601][ T8292] openvswitch: netlink: nsh attr 1 has unexpected len 16 expected 8 [ 115.941867][ T8292] netlink: 180 bytes leftover after parsing attributes in process `syz.6.628'. [ 116.132938][ T8321] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 116.233176][ T8323] netlink: 92 bytes leftover after parsing attributes in process `syz.5.631'. [ 116.274675][ T8338] fuse: fd is not a fuse device [ 116.355719][ T8347] fuse: fd is not a fuse device [ 116.641697][ T8370] cgroup: release_agent respecified [ 116.727393][ T5784] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.801392][ T5784] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.863374][ T5784] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.916284][ T5784] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.946993][ T64] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 116.948562][ T8379] ±ÿ†Ý'É|d: renamed from lo (while UP) [ 116.955794][ T64] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 116.959821][ T64] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 116.965765][ T64] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 116.968530][ T64] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 117.084272][ T5784] bridge_slave_1: left allmulticast mode [ 117.086777][ T5784] bridge_slave_1: left promiscuous mode [ 117.091214][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.095045][ T5784] bridge_slave_0: left allmulticast mode [ 117.096913][ T5784] bridge_slave_0: left promiscuous mode [ 117.098792][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.217902][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.222870][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.228171][ T5784] bond0 (unregistering): Released all slaves [ 117.234861][ T5784] bond1 (unregistering): Released all slaves [ 117.452606][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 117.529213][ T8395] netlink: 4 bytes leftover after parsing attributes in process `syz.6.648'. [ 117.529665][ T5738] Bluetooth: hci4: command tx timeout [ 117.543910][ T8395] hsr_slave_0: left promiscuous mode [ 117.548503][ T8395] hsr_slave_1: left promiscuous mode [ 117.620800][ T5784] hsr_slave_0: left promiscuous mode [ 117.630997][ T5784] hsr_slave_1: left promiscuous mode [ 117.634199][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.636623][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.639910][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.642500][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.650824][ T5784] veth1_macvtap: left promiscuous mode [ 117.652802][ T5784] veth0_macvtap: left promiscuous mode [ 117.654603][ T5784] veth1_vlan: left promiscuous mode [ 117.656319][ T5784] veth0_vlan: left promiscuous mode [ 117.814083][ T8407] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 117.814083][ T8407] The task syz.4.649 (8407) triggered the difference, watch for misbehavior. [ 117.846522][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 117.860879][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 117.941920][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 117.961387][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 117.964800][ T8407] bond0: entered allmulticast mode [ 117.966575][ T8407] bond_slave_0: entered allmulticast mode [ 117.968419][ T8407] bond_slave_1: entered allmulticast mode [ 118.063780][ T8377] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.066307][ T8377] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.069994][ T8377] bridge_slave_0: entered allmulticast mode [ 118.073618][ T8377] bridge_slave_0: entered promiscuous mode [ 118.077807][ T8377] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.081540][ T8377] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.084012][ T8377] bridge_slave_1: entered allmulticast mode [ 118.087197][ T8377] bridge_slave_1: entered promiscuous mode [ 118.115990][ T8377] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.122296][ T8377] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.145030][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 118.150017][ T8377] team0: Port device team_slave_0 added [ 118.154956][ T8377] team0: Port device team_slave_1 added [ 118.181699][ T8421] netlink: 'syz.6.650': attribute type 1 has an invalid length. [ 118.183993][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.186678][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.198802][ T8377] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.221348][ T8421] bond1: entered promiscuous mode [ 118.226541][ T8421] 8021q: adding VLAN 0 to HW filter on device bond1 [ 118.230266][ T8377] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.234585][ T8377] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 118.243593][ T8421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8421 comm=syz.6.650 [ 118.243702][ T8377] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.248934][ T8421] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=8421 comm=syz.6.650 [ 118.284040][ T8420] veth3: entered allmulticast mode [ 118.291103][ T8420] bond1: (slave veth3): making interface the new active one [ 118.294152][ T8420] veth3: entered promiscuous mode [ 118.297369][ T8420] bond1: (slave veth3): Enslaving as an active interface with an up link [ 118.350589][ T8377] hsr_slave_0: entered promiscuous mode [ 118.354000][ T8377] hsr_slave_1: entered promiscuous mode [ 118.422586][ T42] kauditd_printk_skb: 39 callbacks suppressed [ 118.422599][ T42] audit: type=1400 audit(1786067084.442:892): avc: denied { write } for pid=8431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.494931][ T42] audit: type=1400 audit(1786067084.512:893): avc: denied { write } for pid=8436 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.511677][ T8377] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 118.517816][ T8377] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 118.521198][ T8377] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 118.525351][ T8377] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 118.528184][ T8377] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 118.532465][ T8377] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 118.535385][ T8377] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 118.541444][ T8377] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 118.561544][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 118.604856][ T8377] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.614186][ T8377] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.634434][ T6387] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.637385][ T6387] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.653255][ T6387] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.656199][ T6387] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.660011][ T8447] overlayfs: empty lowerdir [ 118.673525][ T8447] __nla_validate_parse: 1 callbacks suppressed [ 118.673541][ T8447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.654'. [ 118.690953][ T8377] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.731933][ T42] audit: type=1400 audit(1786067084.742:894): avc: denied { getopt } for pid=8450 comm="syz.4.655" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 118.891536][ T8472] fuse: fd is not a fuse device [ 118.894883][ T8472] fuse: fd is not a fuse device [ 118.896906][ T8472] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.943124][ T8377] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.059688][ T5738] Bluetooth: hci2: command tx timeout [ 119.103051][ T8488] overlayfs: failed to resolve './file0': -2 [ 119.114600][ T8377] veth0_vlan: entered promiscuous mode [ 119.126630][ T8377] veth1_vlan: entered promiscuous mode [ 119.150569][ T8377] veth0_macvtap: entered promiscuous mode [ 119.154907][ T8377] veth1_macvtap: entered promiscuous mode [ 119.158873][ T8482] netlink: 80 bytes leftover after parsing attributes in process `syz.4.658'. [ 119.165188][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.173990][ T8377] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.225357][ T5812] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.237360][ T5812] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.254917][ T8488] netlink: 80 bytes leftover after parsing attributes in process `syz.4.658'. [ 119.279294][ T5784] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.282333][ T5784] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.310767][ T6387] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.313830][ T6387] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.328387][ T6387] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.331584][ T6387] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.437176][ T42] audit: type=1400 audit(1786067085.452:895): avc: denied { map } for pid=8499 comm="syz.7.660" path="socket:[26864]" dev="sockfs" ino=26864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.446698][ T42] audit: type=1400 audit(1786067085.452:896): avc: denied { read } for pid=8499 comm="syz.7.660" path="socket:[26864]" dev="sockfs" ino=26864 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 119.609475][ T5738] Bluetooth: hci4: command tx timeout [ 119.646710][ T8517] netlink: 16 bytes leftover after parsing attributes in process `syz.5.664'. [ 119.666484][ T8520] sctp: [Deprecated]: syz.7.666 (pid 8520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 119.666484][ T8520] Use struct sctp_sack_info instead [ 119.706708][ T42] audit: type=1400 audit(1786067085.722:897): avc: denied { write } for pid=8523 comm="syz.5.668" path="socket:[23418]" dev="sockfs" ino=23418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 119.708744][ T8524] smc: net device lo applied user defined pnetid SYZ0 [ 119.722262][ T8524] smc: smcd device lo applied user defined pnetid SYZ0 [ 119.730293][ T42] audit: type=1400 audit(1786067085.752:898): avc: denied { accept } for pid=8523 comm="syz.5.668" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 119.765926][ T8533] syz_tun: entered allmulticast mode [ 119.773407][ T8532] netdevsim netdevsim7 netdevsim0: IPsec offload requires 128 bit authentication [ 119.782230][ T42] audit: type=1400 audit(1786067085.802:899): avc: denied { mounton } for pid=8531 comm="syz.5.670" path="/7/bus" dev="tmpfs" ino=55 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 119.784700][ T8533] FAT-fs (nullb0): bogus number of reserved sectors [ 119.790572][ T42] audit: type=1400 audit(1786067085.812:900): avc: denied { read } for pid=8530 comm="syz.7.671" name="mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.792945][ T8533] FAT-fs (nullb0): Can't find a valid FAT filesystem [ 119.799313][ T42] audit: type=1400 audit(1786067085.812:901): avc: denied { open } for pid=8530 comm="syz.7.671" path="/dev/input/mice" dev="devtmpfs" ino=940 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 119.812492][ T8531] syz_tun: left allmulticast mode [ 120.081296][ T7061] usb 10-1: new low-speed USB device number 5 using dummy_hcd [ 120.210941][ T7061] usb 10-1: device descriptor read/64, error -71 [ 120.228156][ T8569] netlink: 'syz.7.682': attribute type 13 has an invalid length. [ 120.242439][ T8569] gretap0: refused to change device tx_queue_len [ 120.244615][ T8569] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 120.459953][ T7061] usb 10-1: new low-speed USB device number 6 using dummy_hcd [ 120.488312][ T8592] netlink: 36 bytes leftover after parsing attributes in process `syz.7.687'. [ 120.489486][ T8590] xt_cgroup: xt_cgroup: no path or classid specified [ 120.589470][ T7061] usb 10-1: device descriptor read/64, error -71 [ 120.706201][ T7061] usb usb10-port1: attempt power cycle [ 120.753682][ T8633] tipc: MTU too low for tipc bearer [ 120.944256][ T8654] fuse: fd is not a fuse device [ 120.996690][ T8659] binder: 8651:8659 ioctl 5309 0 returned -22 [ 121.069433][ T7061] usb 10-1: new low-speed USB device number 7 using dummy_hcd [ 121.089659][ T7061] usb 10-1: device descriptor read/8, error -71 [ 121.111971][ T8682] netlink: 28 bytes leftover after parsing attributes in process `syz.6.712'. [ 121.139265][ T5738] Bluetooth: hci2: command tx timeout [ 121.156053][ T8684] netlink: 'syz.4.713': attribute type 1 has an invalid length. [ 121.176725][ T8684] 8021q: adding VLAN 0 to HW filter on device bond4 [ 121.187892][ T8684] gretap1: entered promiscuous mode [ 121.244478][ T8693] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=8693 comm=syz.4.716 [ 121.284307][ T8699] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 121.304219][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.4.718'. [ 121.351386][ T7061] usb 10-1: new low-speed USB device number 8 using dummy_hcd [ 121.380824][ T7061] usb 10-1: device descriptor read/8, error -71 [ 121.490535][ T7061] usb usb10-port1: unable to enumerate USB device [ 121.689886][ T5738] Bluetooth: hci4: command tx timeout [ 121.873129][ T8738] tipc: Enabling of bearer rejected, failed to enable media [ 121.929848][ T8738] netlink: 5 bytes leftover after parsing attributes in process `syz.6.727'. [ 121.944608][ T8738] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.954418][ T8738] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8738 comm=syz.6.727 [ 122.096553][ T8752] netlink: 100 bytes leftover after parsing attributes in process `syz.6.731'. [ 122.262953][ T8764] overlayfs: failed to clone upperpath [ 122.406300][ T8782] fuse: fd is not a fuse device [ 122.460606][ T8786] fuse: fd is not a fuse device [ 122.599960][ T5885] usb 9-1: emi26_load_firmware - request_firmware() failed [ 122.612077][ T5885] usb 9-1: emi26_load_firmware - error loading firmware: error = -2 [ 122.615902][ T1867] usb 6-1: emi26_load_firmware - request_firmware() failed [ 122.618237][ T5885] emi26 - firmware loader 9-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 122.622048][ T1867] usb 6-1: emi26_load_firmware - error loading firmware: error = -110 [ 122.631179][ T1867] emi26 - firmware loader 6-1:1.0: probe with driver emi26 - firmware loader failed with error -5 [ 122.656330][ T5885] usb 9-1: USB disconnect, device number 2 [ 122.673188][ T1867] usb 6-1: USB disconnect, device number 2 [ 122.830566][ T6812] bond0: (slave syz_tun): Releasing backup interface [ 122.990473][ T5784] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.127140][ T5784] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.209226][ T5738] Bluetooth: hci2: command tx timeout [ 123.231330][ T5784] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.350669][ T8825] ipt_rpfilter: unknown options [ 123.369623][ T5820] usb 10-1: new low-speed USB device number 9 using dummy_hcd [ 123.412345][ T5784] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.437744][ T8835] IPVS: sync thread started: state = MASTER, mcast_ifn = sit0, syncid = 4, id = 0 [ 123.529293][ T5820] usb 10-1: Invalid ep0 maxpacket: 64 [ 123.605823][ T5784] bridge_slave_1: left allmulticast mode [ 123.607628][ T5784] bridge_slave_1: left promiscuous mode [ 123.611167][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.614876][ T5784] bridge_slave_0: left allmulticast mode [ 123.616647][ T5784] bridge_slave_0: left promiscuous mode [ 123.618647][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.638169][ T42] kauditd_printk_skb: 12 callbacks suppressed [ 123.638186][ T42] audit: type=1400 audit(1786067089.652:914): avc: denied { ioctl } for pid=8859 comm="syz.6.765" path="socket:[28751]" dev="sockfs" ino=28751 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 123.679254][ T5820] usb 10-1: new low-speed USB device number 10 using dummy_hcd [ 123.720758][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.725602][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.729430][ T5784] bond0 (unregistering): Released all slaves [ 123.734416][ T5784] bond1 (unregistering): Released all slaves [ 123.839162][ T42] audit: type=1400 audit(1786067089.852:915): avc: denied { write } for pid=8866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.852321][ T5784] IPVS: stopping master sync thread 6310 ... [ 123.853788][ T5820] usb 10-1: Invalid ep0 maxpacket: 64 [ 123.858657][ T5820] usb usb10-port1: attempt power cycle [ 123.901042][ T42] audit: type=1400 audit(1786067089.922:916): avc: denied { write } for pid=8873 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.954741][ T5448] 8021q: adding VLAN 0 to HW filter on device eth10 [ 124.033929][ T5784] hsr_slave_0: left promiscuous mode [ 124.036104][ T5784] hsr_slave_1: left promiscuous mode [ 124.038084][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.041463][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.042725][ T42] audit: type=1400 audit(1786067090.062:917): avc: denied { write } for pid=8882 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.051998][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.055049][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.066054][ T5784] veth1_macvtap: left promiscuous mode [ 124.069884][ T5784] veth0_macvtap: left promiscuous mode [ 124.071680][ T5784] veth1_vlan: left promiscuous mode [ 124.076611][ T5784] veth0_vlan: left promiscuous mode [ 124.131721][ T42] audit: type=1400 audit(1786067090.142:918): avc: denied { write } for pid=8887 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.209372][ T8891] overlayfs: failed to clone lowerpath [ 124.221051][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 124.228238][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 124.230701][ T5820] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 124.274642][ T5820] usb 10-1: Invalid ep0 maxpacket: 64 [ 124.308222][ T5448] 8021q: adding VLAN 0 to HW filter on device eth11 [ 124.399230][ T5820] usb 10-1: new low-speed USB device number 12 using dummy_hcd [ 124.414322][ T42] audit: type=1400 audit(1786067090.432:919): avc: denied { write } for pid=8894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.414347][ T8898] __nla_validate_parse: 9 callbacks suppressed [ 124.414357][ T8898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.772'. [ 124.427044][ T5820] usb 10-1: Invalid ep0 maxpacket: 64 [ 124.428800][ T5820] usb usb10-port1: unable to enumerate USB device [ 124.465764][ T42] audit: type=1400 audit(1786067090.482:920): avc: denied { write } for pid=8901 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.498025][ T42] audit: type=1400 audit(1786067090.512:921): avc: denied { listen } for pid=8907 comm="syz.6.776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 124.520891][ T5448] 8021q: adding VLAN 0 to HW filter on device eth12 [ 124.527279][ T42] audit: type=1400 audit(1786067090.542:922): avc: denied { read } for pid=8911 comm="syz.7.777" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.534939][ T42] audit: type=1400 audit(1786067090.542:923): avc: denied { open } for pid=8911 comm="syz.7.777" path="net:[4026532878]" dev="nsfs" ino=4026532878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 124.636273][ T8920] SELinux: Context system_u:object_r:system_cron_spool_t:s0 is not valid (left unmapped). qemu-system-x86_64: warning: 9p: degraded performance: a reasonable high msize should be chosen on client/guest side (chosen msize is <= 8192). See https://wiki.qemu.org/Documentation/9psetup#msize for details. [ 124.725352][ T5448] 8021q: adding VLAN 0 to HW filter on device eth13 [ 124.774674][ T5784] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.916767][ T5784] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.972242][ T8946] fuse: fd is not a fuse device [ 125.024011][ T5784] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.028057][ T8948] fuse: fd is not a fuse device [ 125.151412][ T5784] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.276716][ T5784] bridge_slave_1: left allmulticast mode [ 125.278394][ T5784] bridge_slave_1: left promiscuous mode [ 125.281213][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.284343][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz.6.790'. [ 125.288827][ T5784] bridge_slave_0: left allmulticast mode [ 125.293056][ T5738] Bluetooth: hci2: command tx timeout [ 125.295846][ T5784] bridge_slave_0: left promiscuous mode [ 125.297513][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.338698][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.6.790'. [ 125.380926][ T8970] tmpfs: Group quota block hardlimit too large. [ 125.394214][ T8976] netlink: 112 bytes leftover after parsing attributes in process `syz.6.790'. [ 125.445120][ T5784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.458757][ T5784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.463345][ T5784] bond0 (unregistering): Released all slaves [ 125.848926][ T5448] 8021q: adding VLAN 0 to HW filter on device eth14 [ 125.928498][ T5784] hsr_slave_0: left promiscuous mode [ 125.936987][ T5784] hsr_slave_1: left promiscuous mode [ 125.940185][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.943242][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.951833][ T5784] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.959263][ T5784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.982042][ T9006] CIFS mount error: No usable UNC path provided in device string! [ 125.982042][ T9006] [ 125.985413][ T9006] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 125.998260][ T5784] veth1_macvtap: left promiscuous mode [ 126.002218][ T5784] veth0_macvtap: left promiscuous mode [ 126.004340][ T5784] veth1_vlan: left promiscuous mode [ 126.007537][ T5784] veth0_vlan: left promiscuous mode [ 126.392138][ T5784] team0 (unregistering): Port device team_slave_1 removed [ 126.402370][ T5784] team0 (unregistering): Port device team_slave_0 removed [ 126.412136][ C3] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 126.416166][ T9027] 9pnet_virtio: no channels available for device syz [ 126.510266][ T5784] team0 (unregistering): Port device dummy0 removed [ 126.524782][ T5448] 8021q: adding VLAN 0 to HW filter on device eth15 [ 126.618429][ T9035] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 126.626021][ T9035] openvswitch: netlink: Key 32 has unexpected len 4 expected 2 [ 126.700559][ T9044] loop5: detected capacity change from 0 to 7 [ 126.786486][ T5448] 8021q: adding VLAN 0 to HW filter on device eth16 [ 126.805192][ T9049] 9pnet_virtio: no channels available for device syz [ 126.824922][ T5784] IPVS: stop unused estimator thread 0... [ 126.888471][ T9044] Dev loop5: unable to read RDB block 7 [ 126.897123][ T9044] loop5: unable to read partition table [ 126.906235][ T9044] loop5: partition table beyond EOD, truncated [ 126.913029][ T9044] loop_reread_partitions: partition scan of loop5 (úùƒW勺РœëÜ%õ«µ4FLQkÝŠ5) failed (rc=-5) [ 126.977982][ T9062] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.981074][ T9062] batadv_slave_1: entered promiscuous mode [ 127.017647][ T9067] netlink: 'syz.4.810': attribute type 2 has an invalid length. [ 127.020881][ T9067] netlink: 46 bytes leftover after parsing attributes in process `syz.4.810'. [ 127.027839][ T5448] 8021q: adding VLAN 0 to HW filter on device eth17 [ 127.129298][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.134527][ T8943] Bluetooth: hci3: Opcode 0x0c1a failed: -110 [ 127.955018][ T8943] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.973714][ T8943] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 127.982057][ T8943] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 127.984668][ T8943] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 127.994990][ T8943] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 128.002333][ T8943] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 128.004822][ T8943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.011423][ T8943] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 128.016522][ T8943] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 128.019048][ T8943] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.025261][ T8943] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 128.080163][ T9106] /dev/sg0: Can't lookup blockdev [ 128.351748][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz.7.828'. [ 128.494307][ T9131] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 128.534267][ T9140] tun0: tun_chr_ioctl cmd 1074025675 [ 128.536057][ T9140] tun0: persist enabled [ 128.537621][ T9140] tun0: tun_chr_ioctl cmd 1074025675 [ 128.543100][ T9140] tun0: persist enabled [ 128.608592][ T9146] binder: 9145:9146 ioctl c06864a1 200000000300 returned -22 [ 128.655086][ T9153] overlayfs: failed to clone upperpath [ 128.662820][ T9153] overlayfs: failed to clone upperpath [ 128.696659][ T9155] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 128.702435][ T42] kauditd_printk_skb: 29 callbacks suppressed [ 128.702446][ T42] audit: type=1400 audit(1786067094.722:953): avc: denied { setopt } for pid=9154 comm="syz.6.838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 128.967373][ T42] audit: type=1400 audit(1786067094.982:954): avc: denied { setopt } for pid=9170 comm="syz.4.843" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 129.017159][ T42] audit: type=1326 audit(1786067095.032:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9176 comm="syz.4.844" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f49f0b9e0d9 code=0x0 [ 129.113501][ T9184] netlink: 750 bytes leftover after parsing attributes in process `syz.5.845'. [ 129.116422][ T9185] netlink: 750 bytes leftover after parsing attributes in process `syz.5.845'. [ 129.124990][ T42] audit: type=1400 audit(1786067095.142:956): avc: denied { load_policy } for pid=9183 comm="syz.5.845" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 129.201232][ T9184] SELinux: failed to load policy [ 129.209246][ T5738] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.275910][ T9185] SELinux: failed to load policy [ 129.433546][ T5784] bond0: (slave bond_slave_0): interface is now down [ 129.433585][ T5784] bond0: (slave bond_slave_1): interface is now down [ 129.437348][ T5784] bond0: now running without any active interface! [ 129.568567][ T9217] bridge0: port 3(syz_tun) entered blocking state [ 129.572204][ T9217] bridge0: port 3(syz_tun) entered disabled state [ 129.574357][ T9217] syz_tun: entered allmulticast mode [ 129.578294][ T9217] syz_tun: entered promiscuous mode [ 129.694895][ T42] audit: type=1400 audit(1786067095.712:957): avc: denied { write } for pid=9224 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.763184][ T9241] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 129.769972][ T42] audit: type=1400 audit(1786067095.782:958): avc: denied { write } for pid=9236 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.866050][ T42] audit: type=1400 audit(1786067095.882:959): avc: denied { write } for pid=9249 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 129.871707][ T9252] netlink: 172 bytes leftover after parsing attributes in process `syz.7.860'. [ 129.919658][ T42] audit: type=1400 audit(1786067095.942:960): avc: denied { write } for pid=9256 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.009388][ T5738] Bluetooth: hci4: command 0x0c1a tx timeout [ 130.012073][ T64] Bluetooth: hci5: command 0x0c1a tx timeout [ 130.019454][ T42] audit: type=1400 audit(1786067096.032:961): avc: denied { write } for pid=9260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.078362][ T42] audit: type=1400 audit(1786067096.092:962): avc: denied { write } for pid=9263 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 130.090915][ T64] Bluetooth: hci2: command 0x0c1a tx timeout [ 130.214078][ T9273] dummy0: entered allmulticast mode [ 130.474208][ T9296] overlayfs: failed to clone lowerpath [ 130.565971][ T9314] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 130.584532][ T9314] Error validating options; rc = [-22] [ 130.908480][ T9353] ================================================================== [ 130.908503][ T9353] BUG: KASAN: slab-out-of-bounds in soft_cursor+0x458/0xa10 [ 130.908541][ T9353] Read of size 46 at addr ffff888034ad98cc by task syz.7.888/9353 [ 130.908551][ T9353] [ 130.908561][ T9353] CPU: 2 UID: 0 PID: 9353 Comm: syz.7.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.908578][ T9353] Tainted: [L]=SOFTLOCKUP [ 130.908582][ T9353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.908590][ T9353] Call Trace: [ 130.908595][ T9353] [ 130.908599][ T9353] dump_stack_lvl+0x100/0x190 [ 130.908627][ T9353] print_report+0x13d/0x4b0 [ 130.908645][ T9353] ? __virt_addr_valid+0x239/0x430 [ 130.908666][ T9353] ? soft_cursor+0x458/0xa10 [ 130.908676][ T9353] kasan_report+0xdf/0x1c0 [ 130.908699][ T9353] ? soft_cursor+0x458/0xa10 [ 130.908712][ T9353] kasan_check_range+0x10f/0x1e0 [ 130.908728][ T9353] __asan_memcpy+0x23/0x60 [ 130.908740][ T9353] soft_cursor+0x458/0xa10 [ 130.908754][ T9353] cw_cursor+0xd70/0x15b0 [ 130.908767][ T9353] ? __pfx_cw_cursor+0x10/0x10 [ 130.908780][ T9353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.908795][ T9353] ? get_color+0x1da/0x450 [ 130.908814][ T9353] ? __pfx_cw_cursor+0x10/0x10 [ 130.908825][ T9353] fbcon_cursor+0x43c/0x5e0 [ 130.908840][ T9353] ? __mutex_unlock_slowpath+0x35d/0x930 [ 130.908864][ T9353] hide_cursor+0x87/0x230 [ 130.908888][ T9353] redraw_screen+0x5d4/0x760 [ 130.908900][ T9353] ? mark_held_locks+0x40/0x70 [ 130.908914][ T9353] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.908927][ T9353] ? __pfx_redraw_screen+0x10/0x10 [ 130.908939][ T9353] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.908952][ T9353] vc_do_resize+0xc3d/0xeb0 [ 130.908966][ T9353] ? __pfx_vc_do_resize+0x10/0x10 [ 130.908979][ T9353] ? __local_bh_enable_ip+0x9e/0x120 [ 130.908994][ T9353] ? lockdep_hardirqs_on+0x78/0x100 [ 130.909009][ T9353] ? kernel_fpu_end+0x5f/0x80 [ 130.909025][ T9353] ? __local_bh_enable_ip+0x9e/0x120 [ 130.909045][ T9353] fbcon_do_set_font+0x443/0x8c0 [ 130.909088][ T9353] fbcon_set_font+0x4be/0x730 [ 130.909110][ T9353] ? __pfx_fbcon_set_font+0x10/0x10 [ 130.909126][ T9353] con_font_op+0x9c0/0x1040 [ 130.909141][ T9353] ? __pfx_con_font_op+0x10/0x10 [ 130.909156][ T9353] ? __might_fault+0xc5/0x140 [ 130.909167][ T9353] ? __might_fault+0xc5/0x140 [ 130.909181][ T9353] vt_ioctl+0xdd1/0x3110 [ 130.909191][ T9353] ? __pfx_vt_ioctl+0x10/0x10 [ 130.909201][ T9353] ? find_held_lock+0x2b/0x80 [ 130.909214][ T9353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.909227][ T9353] ? __pfx_vt_ioctl+0x10/0x10 [ 130.909236][ T9353] tty_ioctl+0x26a/0x1640 [ 130.909250][ T9353] ? __pfx_tty_ioctl+0x10/0x10 [ 130.909263][ T9353] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 130.909292][ T9353] ? __fget_files+0x215/0x3d0 [ 130.909310][ T9353] ? hook_file_ioctl_common+0x140/0x440 [ 130.909325][ T9353] ? selinux_file_ioctl+0x13b/0x290 [ 130.909334][ T9353] ? selinux_file_ioctl+0xb6/0x290 [ 130.909343][ T9353] ? __pfx_tty_ioctl+0x10/0x10 [ 130.909357][ T9353] __x64_sys_ioctl+0x18e/0x210 [ 130.909372][ T9353] do_syscall_64+0x115/0x870 [ 130.909386][ T9353] ? clear_bhb_loop+0x70/0xc0 [ 130.909400][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.909411][ T9353] RIP: 0033:0x7f740779e0d9 [ 130.909421][ T9353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.909432][ T9353] RSP: 002b:00007f7408694028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.909444][ T9353] RAX: ffffffffffffffda RBX: 00007f7407a25fa0 RCX: 00007f740779e0d9 [ 130.909451][ T9353] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000004 [ 130.909458][ T9353] RBP: 00007f7407835024 R08: 0000000000000000 R09: 0000000000000000 [ 130.909464][ T9353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.909470][ T9353] R13: 00007f7407a26038 R14: 00007f7407a25fa0 R15: 00007ffecca696a8 [ 130.909480][ T9353] [ 130.909485][ T9353] [ 130.909488][ T9353] Allocated by task 9204: [ 130.909501][ T9353] kasan_save_stack+0x30/0x50 [ 130.909514][ T9353] kasan_save_track+0x14/0x30 [ 130.909527][ T9353] __kasan_kmalloc+0xaa/0xb0 [ 130.909539][ T9353] __kmalloc_noprof+0x322/0x820 [ 130.909551][ T9353] font_data_rotate+0x353/0x3b0 [ 130.909562][ T9353] fbcon_rotate_font+0x2bf/0x510 [ 130.909574][ T9353] fbcon_switch+0xccc/0x19f0 [ 130.909590][ T9353] redraw_screen+0x2c1/0x760 [ 130.909601][ T9353] vc_do_resize+0xc3d/0xeb0 [ 130.909613][ T9353] fbcon_modechanged+0x342/0x6f0 [ 130.909628][ T9353] fbcon_set_all_vcs+0x1d6/0x460 [ 130.909642][ T9353] rotate_all_store+0x31e/0x410 [ 130.909657][ T9353] dev_attr_store+0x58/0x80 [ 130.909703][ T9353] sysfs_kf_write+0xf2/0x150 [ 130.909720][ T9353] kernfs_fop_write_iter+0x3e0/0x5f0 [ 130.909734][ T9353] vfs_write+0x6ac/0x1050 [ 130.909750][ T9353] ksys_write+0x12a/0x250 [ 130.909759][ T9353] do_syscall_64+0x115/0x870 [ 130.909773][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.909784][ T9353] [ 130.909787][ T9353] The buggy address belongs to the object at ffff888034ad8000 [ 130.909787][ T9353] which belongs to the cache kmalloc-4k of size 4096 [ 130.909801][ T9353] The buggy address is located 2252 bytes to the right of [ 130.909801][ T9353] allocated 4096-byte region [ffff888034ad8000, ffff888034ad9000) [ 130.909813][ T9353] [ 130.909816][ T9353] The buggy address belongs to the physical page: [ 130.909821][ T9353] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x34ad8 [ 130.909839][ T9353] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 130.909849][ T9353] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 130.909861][ T9353] page_type: f5(slab) [ 130.909871][ T9353] raw: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 130.909881][ T9353] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 130.909892][ T9353] head: 00fff00000000040 ffff88801bc43040 dead000000000100 dead000000000122 [ 130.909903][ T9353] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000 [ 130.909914][ T9353] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 130.909926][ T9353] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 130.909934][ T9353] page dumped because: kasan: bad access detected [ 130.909942][ T9353] page_owner tracks the page as allocated [ 130.909947][ T9353] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5150, tgid 5150 (udevd), ts 25026842525, free_ts 23897850052 [ 130.909970][ T9353] post_alloc_hook+0xfd/0x120 [ 130.909987][ T9353] get_page_from_freelist+0xf48/0x3530 [ 130.909998][ T9353] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 130.910010][ T9353] new_slab+0xa2/0x640 [ 130.910022][ T9353] refill_objects+0xe3/0x410 [ 130.910036][ T9353] __pcs_replace_empty_main+0x376/0x680 [ 130.910057][ T9353] __kmalloc_noprof+0x66d/0x820 [ 130.910068][ T9353] tomoyo_realpath_from_path+0xb6/0x690 [ 130.910085][ T9353] tomoyo_path_perm+0x276/0x460 [ 130.910105][ T9353] security_inode_getattr+0x116/0x280 [ 130.910129][ T9353] vfs_statx+0x11f/0x3f0 [ 130.910146][ T9353] vfs_fstatat+0x77/0xe0 [ 130.910159][ T9353] __do_sys_newfstatat+0x9d/0x120 [ 130.910171][ T9353] do_syscall_64+0x115/0x870 [ 130.910183][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.910196][ T9353] page last free pid 5157 tgid 5157 stack trace: [ 130.910205][ T9353] __free_frozen_pages+0x79f/0x1090 [ 130.910229][ T9353] qlist_free_all+0x47/0xf0 [ 130.910244][ T9353] kasan_quarantine_reduce+0x1a0/0x1f0 [ 130.910260][ T9353] __kasan_slab_alloc+0x69/0x90 [ 130.910278][ T9353] __kmalloc_node_track_caller_noprof+0x2cd/0x830 [ 130.910297][ T9353] kstrdup+0x51/0xe0 [ 130.910314][ T9353] security_context_to_sid_core+0x7b8/0x870 [ 130.910329][ T9353] selinux_inode_post_setxattr+0x125/0x410 [ 130.910342][ T9353] security_inode_post_setxattr+0x22f/0x250 [ 130.910366][ T9353] __vfs_setxattr_noperm+0x4ad/0x660 [ 130.910384][ T9353] __vfs_setxattr_locked+0x127/0x2b0 [ 130.910403][ T9353] vfs_setxattr+0x14a/0x390 [ 130.910418][ T9353] do_setxattr+0x145/0x180 [ 130.910431][ T9353] filename_setxattr+0x167/0x1d0 [ 130.910448][ T9353] path_setxattrat+0x1ff/0x3b0 [ 130.910465][ T9353] __x64_sys_lsetxattr+0xc9/0x140 [ 130.910484][ T9353] [ 130.910488][ T9353] Memory state around the buggy address: [ 130.910497][ T9353] ffff888034ad9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.910509][ T9353] ffff888034ad9800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.910520][ T9353] >ffff888034ad9880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.910526][ T9353] ^ [ 130.910533][ T9353] ffff888034ad9900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.910545][ T9353] ffff888034ad9980: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 130.910554][ T9353] ================================================================== [ 130.913014][ T9353] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 130.913030][ T9353] CPU: 2 UID: 0 PID: 9353 Comm: syz.7.888 Tainted: G L syzkaller #0 PREEMPT(full) [ 130.913047][ T9353] Tainted: [L]=SOFTLOCKUP [ 130.913053][ T9353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 130.913063][ T9353] Call Trace: [ 130.913069][ T9353] [ 130.913076][ T9353] dump_stack_lvl+0x100/0x190 [ 130.913100][ T9353] vpanic+0x552/0x970 [ 130.913117][ T9353] ? __pfx_vpanic+0x10/0x10 [ 130.913142][ T9353] ? mark_held_locks+0x40/0x70 [ 130.913158][ T9353] ? soft_cursor+0x458/0xa10 [ 130.913168][ T9353] panic+0xd1/0xe0 [ 130.913183][ T9353] ? __pfx_panic+0x10/0x10 [ 130.913197][ T9353] ? soft_cursor+0x458/0xa10 [ 130.913211][ T9353] ? preempt_schedule_common+0x42/0xc0 [ 130.913235][ T9353] check_panic_on_warn.cold+0x19/0x34 [ 130.913253][ T9353] end_report.part.0+0x3a/0x90 [ 130.913277][ T9353] kasan_report.cold+0xe/0x18 [ 130.913292][ T9353] ? soft_cursor+0x458/0xa10 [ 130.913316][ T9353] kasan_check_range+0x10f/0x1e0 [ 130.913335][ T9353] __asan_memcpy+0x23/0x60 [ 130.913346][ T9353] soft_cursor+0x458/0xa10 [ 130.913360][ T9353] cw_cursor+0xd70/0x15b0 [ 130.913375][ T9353] ? __pfx_cw_cursor+0x10/0x10 [ 130.913389][ T9353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.913409][ T9353] ? get_color+0x1da/0x450 [ 130.913432][ T9353] ? __pfx_cw_cursor+0x10/0x10 [ 130.913449][ T9353] fbcon_cursor+0x43c/0x5e0 [ 130.913472][ T9353] ? __mutex_unlock_slowpath+0x35d/0x930 [ 130.913492][ T9353] hide_cursor+0x87/0x230 [ 130.913511][ T9353] redraw_screen+0x5d4/0x760 [ 130.913529][ T9353] ? mark_held_locks+0x40/0x70 [ 130.913550][ T9353] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 130.913564][ T9353] ? __pfx_redraw_screen+0x10/0x10 [ 130.913582][ T9353] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 130.913604][ T9353] vc_do_resize+0xc3d/0xeb0 [ 130.913627][ T9353] ? __pfx_vc_do_resize+0x10/0x10 [ 130.913644][ T9353] ? __local_bh_enable_ip+0x9e/0x120 [ 130.913663][ T9353] ? lockdep_hardirqs_on+0x78/0x100 [ 130.913711][ T9353] ? kernel_fpu_end+0x5f/0x80 [ 130.913739][ T9353] ? __local_bh_enable_ip+0x9e/0x120 [ 130.913765][ T9353] fbcon_do_set_font+0x443/0x8c0 [ 130.913794][ T9353] fbcon_set_font+0x4be/0x730 [ 130.913820][ T9353] ? __pfx_fbcon_set_font+0x10/0x10 [ 130.913846][ T9353] con_font_op+0x9c0/0x1040 [ 130.913872][ T9353] ? __pfx_con_font_op+0x10/0x10 [ 130.913895][ T9353] ? __might_fault+0xc5/0x140 [ 130.913909][ T9353] ? __might_fault+0xc5/0x140 [ 130.913931][ T9353] vt_ioctl+0xdd1/0x3110 [ 130.913949][ T9353] ? __pfx_vt_ioctl+0x10/0x10 [ 130.913965][ T9353] ? find_held_lock+0x2b/0x80 [ 130.913982][ T9353] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 130.914001][ T9353] ? __pfx_vt_ioctl+0x10/0x10 [ 130.914017][ T9353] tty_ioctl+0x26a/0x1640 [ 130.914040][ T9353] ? __pfx_tty_ioctl+0x10/0x10 [ 130.914060][ T9353] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 130.914086][ T9353] ? __fget_files+0x215/0x3d0 [ 130.914103][ T9353] ? hook_file_ioctl_common+0x140/0x440 [ 130.914128][ T9353] ? selinux_file_ioctl+0x13b/0x290 [ 130.914143][ T9353] ? selinux_file_ioctl+0xb6/0x290 [ 130.914155][ T9353] ? __pfx_tty_ioctl+0x10/0x10 [ 130.914175][ T9353] __x64_sys_ioctl+0x18e/0x210 [ 130.914201][ T9353] do_syscall_64+0x115/0x870 [ 130.914220][ T9353] ? clear_bhb_loop+0x70/0xc0 [ 130.914240][ T9353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.914259][ T9353] RIP: 0033:0x7f740779e0d9 [ 130.914276][ T9353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 130.914294][ T9353] RSP: 002b:00007f7408694028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 130.914313][ T9353] RAX: ffffffffffffffda RBX: 00007f7407a25fa0 RCX: 00007f740779e0d9 [ 130.914326][ T9353] RDX: 0000200000000000 RSI: 0000000000004b72 RDI: 0000000000000004 [ 130.914338][ T9353] RBP: 00007f7407835024 R08: 0000000000000000 R09: 0000000000000000 [ 130.914349][ T9353] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 130.914359][ T9353] R13: 00007f7407a26038 R14: 00007f7407a25fa0 R15: 00007ffecca696a8 [ 130.914375][ T9353] [ 130.914979][ T9353] Kernel Offset: disabled VM DIAGNOSIS: 01:44:57 Registers: info registers vcpu 0 CPU#0 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ae07e3 RDX=ffff88802de60000 RSI=ffffffff81ae082b RDI=ffffffff94699e00 RBP=0000000000000000 RSP=ffffc90000007fd0 R8 =0000000000000001 R9 =fffffbfff28d33c0 R10=ffffffff94699e07 R11=ffffc90000007ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae082c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f27f11be880 ffffffff 00c00000 GS =0000 ffff8880d5dd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=000000110c2a20a4 CR3=0000000034819000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000104080 Opmask01=0000000010410101 Opmask02=00000000ffffffff Opmask03=0000000000000000 Opmask04=00000000ffffffbf Opmask05=00000000004007ff Opmask06=0000000007ffe7ff Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6ee7eb18 00007ffe6ee7eb18 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe6ee7ecf0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00005607f4af4160 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27f0bf1b20 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f27f0bf1b20 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000ff00 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 7373257487dee483 73732571e7862259 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0f106366717596f0 73737376130c3997 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 716d2f35706f6f6c 2f6b636f6c622f6c 6175747269762f73 6563697665642f73 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4057444d560a4657 560a0b0b0a0b0b00 41480a4e464a4947 0a000a565c560a00 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f6d697377685f31 3132303863616d2f 6c6175747269762f 736563697665642f ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 7766736c6d612c38 2c312c30722c3431 312c3331312c3231 312c3131312c3031 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 312c32432c31432c 30432c46422c4542 2c44422c43422c42 422c41422c39422c ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 38422c37422c3242 2c31422c30422c44 412c36412c35412c 34412c33412c3141 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2c46392c45392c38 392c36392c45382c 43382c41382c3938 2c38382c37382c36 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00414132302c3841 32302c344132302c 314132302c323832 302c463532302c44 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000014100 000000000000303d 44440045525f5346 0054242044492065 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 282b2e2fdf37342d 280bbfbf23243324 26312033fc040f18 1317140d080b0412 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 343133bffc121104 1214041204110814 100411bffc040f18 1317140d080b0412 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4141414141414141 4141414141414141 4141414141414141 4141414141414141 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a 1a1a1a1a1a1a1a1a ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2020202020202020 2020202020202020 2020202020202020 2020202020202020 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 CPU#1 RAX=0000000000000000 RBX=0000000000000006 RCX=ffffffff81b57eaa RDX=ffff88801eaea540 RSI=ffffffff81b57ece RDI=ffff88801eaea540 RBP=0000000000000001 RSP=ffffc90000177df8 R8 =0000000000000001 R9 =0000000000000003 R10=0000000000000006 R11=0000000000000000 R12=0000000000000000 R13=0000000000000000 R14=1ffff9200002efc4 R15=0000000000000000 RIP=ffffffff81b57ecf RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff8880d5ed8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe000004a000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007ff26c4fdfe0 CR3=000000000e994000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000010001 Opmask01=0000000000000000 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 203a6b6361747320 6461657268747020 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53f5d706 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe53f5d706 00007ffe53f5d70c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff26b635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff26b635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff26b6357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff26b635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 657a6973203c2065 7a69736565726600 632e6b6361747365 7461636f6c6c6100 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 405f4c5605190540 5f4c564040574300 460b4e4644515640 5144464a49494400 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff26b7f25f8 00007ff26b7f25c8 00007ff26b7f2600 00007ff26b7f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 2 CPU#2 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff85a32df0 RDI=ffffffff9ba0be80 RBP=ffffffff9ba0be40 RSP=ffffc900047a6ea0 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=20666f2064616552 R12=0000000000000000 R13=0000000000000020 R14=fffffbfff3741822 R15=dffffc0000000000 RIP=ffffffff85a32e17 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f74086946c0 ffffffff 00c00000 GS =0000 ffff8880d5fd8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000091000 00000067 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f67c59ec458 CR3=00000000263a4000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000001800 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000000008001 Opmask01=0000000000000054 Opmask02=00000000000003ff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08a135d560 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff79960636 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007fff79960636 00007fff7996063c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08a0635607 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08a0635647 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08a06357ab ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08a0635639 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08a07f2600 00007f08a07f25e0 00007f08a07f25e8 00007f08a07f2618 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000004 0008000f0010000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f08a07f25f8 00007f08a07f25c8 00007f08a07f2600 00007f08a07f25e0 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 3 CPU#3 RAX=0000000080010000 RBX=0000000000000000 RCX=ffffffff81ae07e3 RDX=ffff88802bfc4a80 RSI=ffffffff81ae082b RDI=ffffffff94699e00 RBP=0000000000000000 RSP=ffffc900006f8fd0 R8 =0000000000000001 R9 =fffffbfff28d33c0 R10=ffffffff94699e07 R11=ffffc900006f8ff8 R12=0000000000000000 R13=0000000000000000 R14=0000000000000000 R15=0000000000000000 RIP=ffffffff81ae082c RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00007f93906e0c80 ffffffff 00c00000 GS =0000 ffff8880d60d8000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 0000ffff CR0=80050033 CR2=00007f67c66c8ff8 CR3=000000002a6fb000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=000000000534c002 Opmask01=0000000000000000 Opmask02=00000000f0000000 Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000055c7b0edb600 000055c7b0edb600 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc94cd58b0 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6f6c737973007325 2e73250064252e73 2500656c6f736e6f 632f7665642f000a ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 4a49565c56005600 0b56000041000b56 000040494a564b4a 460a5340410a000a ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6d5f5f203f20205d 3335333954205b5d 3034383830392e30 333120205b203a6c ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 454d444145522073 6674707972436520 6568742065657320 3b726574656d6172 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 617020746e756f6d 2061207361206572 7574616e67697320 6b6f742068747561 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2064696c61762065 6e6f20747361656c 20746120796c7070 7573207473756d20 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 756f59203a736e6f 6974706f5f657461 64696c61765f7366 747079726365205d ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000